<|start_filename|>docs/notes/iam-CloudFormation.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>CloudFormation - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-CloudFormation.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-CloudFormation.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-CloudFormation.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="CloudFormation - undefined" />
  <meta name="twitter:title" content="CloudFormation - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">CloudFormation</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="CloudFormation">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="cloudformation"><a aria-hidden="true" class="anchor-heading" href="#cloudformation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CloudFormation</h1>
<ul>
<li>prefix: cloudformation</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="cancelupdatestack"><a aria-hidden="true" class="anchor-heading" href="#cancelupdatestack"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CancelUpdateStack</h3>
<ul>
<li>description: Cancels an update on the specified stack.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="continueupdaterollback"><a aria-hidden="true" class="anchor-heading" href="#continueupdaterollback"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ContinueUpdateRollback</h3>
<ul>
<li>description: For a specified stack that is in the UPDATE_ROLLBACK_FAILED state, continues rolling it back to the UPDATE_ROLLBACK_COMPLETE state.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "cloudformation:RoleArn"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createchangeset"><a aria-hidden="true" class="anchor-heading" href="#createchangeset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateChangeSet</h3>
<ul>
<li>description: Creates a list of changes for a stack.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "cloudformation:ChangeSetName",
            "cloudformation:ResourceTypes",
            "cloudformation:ImportResourceTypes",
            "cloudformation:RoleArn",
            "cloudformation:StackPolicyUrl",
            "cloudformation:TemplateUrl",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createstack"><a aria-hidden="true" class="anchor-heading" href="#createstack"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateStack</h3>
<ul>
<li>description: Creates a stack as specified in the template.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "cloudformation:ResourceTypes",
            "cloudformation:RoleArn",
            "cloudformation:StackPolicyUrl",
            "cloudformation:TemplateUrl",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createstackinstances"><a aria-hidden="true" class="anchor-heading" href="#createstackinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateStackInstances</h3>
<ul>
<li>description: Creates stack instances for the specified accounts, within the specified regions.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stackset": {
        "resource_type": "stackset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createstackset"><a aria-hidden="true" class="anchor-heading" href="#createstackset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateStackSet</h3>
<ul>
<li>description: Creates a stackset as specified in the template.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "cloudformation:RoleArn",
            "cloudformation:TemplateUrl",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createuploadbucket"><a aria-hidden="true" class="anchor-heading" href="#createuploadbucket"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateUploadBucket</h3>
<ul>
<li>description: </li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletechangeset"><a aria-hidden="true" class="anchor-heading" href="#deletechangeset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteChangeSet</h3>
<ul>
<li>description: Deletes the specified change set. Deleting change sets ensures that no one executes the wrong change set.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "cloudformation:ChangeSetName"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletestack"><a aria-hidden="true" class="anchor-heading" href="#deletestack"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteStack</h3>
<ul>
<li>description: Deletes a specified stack.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "cloudformation:RoleArn"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletestackinstances"><a aria-hidden="true" class="anchor-heading" href="#deletestackinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteStackInstances</h3>
<ul>
<li>description: Deletes stack instances for the specified accounts, in the specified regions.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stackset": {
        "resource_type": "stackset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletestackset"><a aria-hidden="true" class="anchor-heading" href="#deletestackset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteStackSet</h3>
<ul>
<li>description: Deletes a specified stackset.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stackset": {
        "resource_type": "stackset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deregistertype"><a aria-hidden="true" class="anchor-heading" href="#deregistertype"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeregisterType</h3>
<ul>
<li>description: Deregisters an existing CloudFormation type or type version</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeaccountlimits"><a aria-hidden="true" class="anchor-heading" href="#describeaccountlimits"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAccountLimits</h3>
<ul>
<li>description: Retrieves your account's AWS CloudFormation limits.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describechangeset"><a aria-hidden="true" class="anchor-heading" href="#describechangeset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeChangeSet</h3>
<ul>
<li>description: Returns the description for the specified change set.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "cloudformation:ChangeSetName"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describestackdriftdetectionstatus"><a aria-hidden="true" class="anchor-heading" href="#describestackdriftdetectionstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeStackDriftDetectionStatus</h3>
<ul>
<li>description: Returns information about a stack drift detection operation.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describestackevents"><a aria-hidden="true" class="anchor-heading" href="#describestackevents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeStackEvents</h3>
<ul>
<li>description: Returns all stack related events for a specified stack.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describestackinstance"><a aria-hidden="true" class="anchor-heading" href="#describestackinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeStackInstance</h3>
<ul>
<li>description: Returns the stack instance that's associated with the specified stack set, AWS account, and region.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stackset": {
        "resource_type": "stackset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describestackresource"><a aria-hidden="true" class="anchor-heading" href="#describestackresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeStackResource</h3>
<ul>
<li>description: Returns a description of the specified resource in the specified stack.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describestackresourcedrifts"><a aria-hidden="true" class="anchor-heading" href="#describestackresourcedrifts"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeStackResourceDrifts</h3>
<ul>
<li>description: Returns drift information for the resources that have been checked for drift in the specified stack.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describestackresources"><a aria-hidden="true" class="anchor-heading" href="#describestackresources"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeStackResources</h3>
<ul>
<li>description: Returns AWS resource descriptions for running and deleted stacks.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describestackset"><a aria-hidden="true" class="anchor-heading" href="#describestackset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeStackSet</h3>
<ul>
<li>description: Returns the description of the specified stack set.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stackset": {
        "resource_type": "stackset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describestacksetoperation"><a aria-hidden="true" class="anchor-heading" href="#describestacksetoperation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeStackSetOperation</h3>
<ul>
<li>description: Returns the description of the specified stack set operation.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stackset": {
        "resource_type": "stackset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describestacks"><a aria-hidden="true" class="anchor-heading" href="#describestacks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeStacks</h3>
<ul>
<li>description: Returns the description for the specified stack.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetype"><a aria-hidden="true" class="anchor-heading" href="#describetype"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeType</h3>
<ul>
<li>description: Returns information about the CloudFormation type requested</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetyperegistration"><a aria-hidden="true" class="anchor-heading" href="#describetyperegistration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTypeRegistration</h3>
<ul>
<li>description: Returns information about the registration process for a CloudFormation type</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="detectstackdrift"><a aria-hidden="true" class="anchor-heading" href="#detectstackdrift"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DetectStackDrift</h3>
<ul>
<li>description: Detects whether a stack's actual configuration differs, or has drifted, from it's expected configuration, as defined in the stack template and any values specified as template parameters.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="detectstackresourcedrift"><a aria-hidden="true" class="anchor-heading" href="#detectstackresourcedrift"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DetectStackResourceDrift</h3>
<ul>
<li>description: Returns information about whether a resource's actual configuration differs, or has drifted, from it's expected configuration, as defined in the stack template and any values specified as template parameters.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="detectstacksetdrift"><a aria-hidden="true" class="anchor-heading" href="#detectstacksetdrift"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DetectStackSetDrift</h3>
<ul>
<li>description: Enables users to detect drift on a stack set and the stack instances that belong to that stack set.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stackset": {
        "resource_type": "stackset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="estimatetemplatecost"><a aria-hidden="true" class="anchor-heading" href="#estimatetemplatecost"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EstimateTemplateCost</h3>
<ul>
<li>description: Returns the estimated monthly cost of a template.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="executechangeset"><a aria-hidden="true" class="anchor-heading" href="#executechangeset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ExecuteChangeSet</h3>
<ul>
<li>description: Updates a stack using the input information that was provided when the specified change set was created.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "cloudformation:ChangeSetName"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getstackpolicy"><a aria-hidden="true" class="anchor-heading" href="#getstackpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetStackPolicy</h3>
<ul>
<li>description: Returns the stack policy for a specified stack.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gettemplate"><a aria-hidden="true" class="anchor-heading" href="#gettemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetTemplate</h3>
<ul>
<li>description: Returns the template body for a specified stack.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gettemplatesummary"><a aria-hidden="true" class="anchor-heading" href="#gettemplatesummary"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetTemplateSummary</h3>
<ul>
<li>description: Returns information about a new or existing template.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "stackset": {
        "resource_type": "stackset",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listchangesets"><a aria-hidden="true" class="anchor-heading" href="#listchangesets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListChangeSets</h3>
<ul>
<li>description: Returns the ID and status of each active change set for a stack. For example, AWS CloudFormation lists change sets that are in the CREATE_IN_PROGRESS or CREATE_PENDING state.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listexports"><a aria-hidden="true" class="anchor-heading" href="#listexports"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListExports</h3>
<ul>
<li>description: Lists all exported output values in the account and region in which you call this action.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listimports"><a aria-hidden="true" class="anchor-heading" href="#listimports"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListImports</h3>
<ul>
<li>description: Lists all stacks that are importing an exported output value.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="liststackinstances"><a aria-hidden="true" class="anchor-heading" href="#liststackinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListStackInstances</h3>
<ul>
<li>description: Returns summary information about stack instances that are associated with the specified stack set.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stackset": {
        "resource_type": "stackset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="liststackresources"><a aria-hidden="true" class="anchor-heading" href="#liststackresources"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListStackResources</h3>
<ul>
<li>description: Returns descriptions of all resources of the specified stack.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="liststacksetoperationresults"><a aria-hidden="true" class="anchor-heading" href="#liststacksetoperationresults"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListStackSetOperationResults</h3>
<ul>
<li>description: Returns summary information about the results of a stack set operation.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stackset": {
        "resource_type": "stackset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="liststacksetoperations"><a aria-hidden="true" class="anchor-heading" href="#liststacksetoperations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListStackSetOperations</h3>
<ul>
<li>description: Returns summary information about operations performed on a stack set.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stackset": {
        "resource_type": "stackset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="liststacksets"><a aria-hidden="true" class="anchor-heading" href="#liststacksets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListStackSets</h3>
<ul>
<li>description: Returns summary information about stack sets that are associated with the user.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stackset": {
        "resource_type": "stackset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="liststacks"><a aria-hidden="true" class="anchor-heading" href="#liststacks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListStacks</h3>
<ul>
<li>description: Returns the summary information for stacks whose status matches the specified StackStatusFilter.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtyperegistrations"><a aria-hidden="true" class="anchor-heading" href="#listtyperegistrations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTypeRegistrations</h3>
<ul>
<li>description: Lists CloudFormation type registration attempts</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtypeversions"><a aria-hidden="true" class="anchor-heading" href="#listtypeversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTypeVersions</h3>
<ul>
<li>description: Lists versions of a particular CloudFormation type</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtypes"><a aria-hidden="true" class="anchor-heading" href="#listtypes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTypes</h3>
<ul>
<li>description: Lists available CloudFormation types</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registertype"><a aria-hidden="true" class="anchor-heading" href="#registertype"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterType</h3>
<ul>
<li>description: Registers a new CloudFormation type</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setstackpolicy"><a aria-hidden="true" class="anchor-heading" href="#setstackpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetStackPolicy</h3>
<ul>
<li>description: Sets a stack policy for a specified stack.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "cloudformation:StackPolicyUrl"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="settypedefaultversion"><a aria-hidden="true" class="anchor-heading" href="#settypedefaultversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetTypeDefaultVersion</h3>
<ul>
<li>description: Sets which version of a CloudFormation type applies to CloudFormation operations</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="signalresource"><a aria-hidden="true" class="anchor-heading" href="#signalresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SignalResource</h3>
<ul>
<li>description: Sends a signal to the specified resource with a success or failure status.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopstacksetoperation"><a aria-hidden="true" class="anchor-heading" href="#stopstacksetoperation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopStackSetOperation</h3>
<ul>
<li>description: Stops an in-progress operation on a stack set and its associated stack instances.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stackset": {
        "resource_type": "stackset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Tagging cloudformation resources.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "stackset": {
        "resource_type": "stackset",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Untagging cloudformation resources.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "stackset": {
        "resource_type": "stackset",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatestack"><a aria-hidden="true" class="anchor-heading" href="#updatestack"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateStack</h3>
<ul>
<li>description: Updates a stack as specified in the template.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "cloudformation:ResourceTypes",
            "cloudformation:RoleArn",
            "cloudformation:StackPolicyUrl",
            "cloudformation:TemplateUrl",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatestackinstances"><a aria-hidden="true" class="anchor-heading" href="#updatestackinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateStackInstances</h3>
<ul>
<li>description: Updates the parameter values for stack instances for the specified accounts, within the specified regions.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stackset": {
        "resource_type": "stackset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatestackset"><a aria-hidden="true" class="anchor-heading" href="#updatestackset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateStackSet</h3>
<ul>
<li>description: Updates a stackset as specified in the template.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stackset": {
        "resource_type": "stackset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "cloudformation:RoleArn",
            "cloudformation:TemplateUrl",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateterminationprotection"><a aria-hidden="true" class="anchor-heading" href="#updateterminationprotection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateTerminationProtection</h3>
<ul>
<li>description: Updates termination protection for the specified stack.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="validatetemplate"><a aria-hidden="true" class="anchor-heading" href="#validatetemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ValidateTemplate</h3>
<ul>
<li>description: Validates a specified template.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-CloudFormation"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-DynamoDB Accelerator.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>DynamoDB Accelerator - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-DynamoDB Accelerator.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-DynamoDB Accelerator.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-DynamoDB Accelerator.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="DynamoDB Accelerator - undefined" />
  <meta name="twitter:title" content="DynamoDB Accelerator - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">DynamoDB Accelerator</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="DynamoDB Accelerator">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="dynamodb-accelerator"><a aria-hidden="true" class="anchor-heading" href="#dynamodb-accelerator"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DynamoDB Accelerator</h1>
<ul>
<li>prefix: dax</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="batchgetitem"><a aria-hidden="true" class="anchor-heading" href="#batchgetitem"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchGetItem</h3>
<ul>
<li>description: The BatchGetItem action returns the attributes of one or more items from one or more tables.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchwriteitem"><a aria-hidden="true" class="anchor-heading" href="#batchwriteitem"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchWriteItem</h3>
<ul>
<li>description: The BatchWriteItem action operation puts or deletes multiple items in one or more tables.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="conditioncheckitem"><a aria-hidden="true" class="anchor-heading" href="#conditioncheckitem"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ConditionCheckItem</h3>
<ul>
<li>description: The ConditionCheckItem operation checks the existence of a set of attributes for the item with the given primary key</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createcluster"><a aria-hidden="true" class="anchor-heading" href="#createcluster"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateCluster</h3>
<ul>
<li>description: The CreateCluster action creates a DAX cluster.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "dax:CreateParameterGroup",
            "dax:CreateSubnetGroup",
            "ec2:CreateNetworkInterface",
            "ec2:DeleteNetworkInterface",
            "ec2:DescribeNetworkInterfaces",
            "ec2:DescribeSecurityGroups",
            "ec2:DescribeSubnets",
            "ec2:DescribeVpcs",
            "iam:GetRole",
            "iam:PassRole"
        ]
    }
}
</code></pre>
<h3 id="createparametergroup"><a aria-hidden="true" class="anchor-heading" href="#createparametergroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateParameterGroup</h3>
<ul>
<li>description: The CreateParameterGroup action creates collection of parameters that you apply to all of the nodes in a DAX cluster.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createsubnetgroup"><a aria-hidden="true" class="anchor-heading" href="#createsubnetgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSubnetGroup</h3>
<ul>
<li>description: The CreateSubnetGroup action creates a new subnet group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="decreasereplicationfactor"><a aria-hidden="true" class="anchor-heading" href="#decreasereplicationfactor"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DecreaseReplicationFactor</h3>
<ul>
<li>description: The DecreaseReplicationFactor action removes one or more nodes from a DAX cluster.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletecluster"><a aria-hidden="true" class="anchor-heading" href="#deletecluster"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteCluster</h3>
<ul>
<li>description: The DeleteCluster action deletes a previously provisioned DAX cluster.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteitem"><a aria-hidden="true" class="anchor-heading" href="#deleteitem"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteItem</h3>
<ul>
<li>description: The DeleteItem action deletes a single item in a table by primary key.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "dax:EnclosingOperation"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteparametergroup"><a aria-hidden="true" class="anchor-heading" href="#deleteparametergroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteParameterGroup</h3>
<ul>
<li>description: The DeleteParameterGroup action deletes the specified parameter group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletesubnetgroup"><a aria-hidden="true" class="anchor-heading" href="#deletesubnetgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteSubnetGroup</h3>
<ul>
<li>description: The DeleteSubnetGroup action deletes a subnet group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeclusters"><a aria-hidden="true" class="anchor-heading" href="#describeclusters"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeClusters</h3>
<ul>
<li>description: The DescribeClusters action returns information about all provisioned DAX clusters.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedefaultparameters"><a aria-hidden="true" class="anchor-heading" href="#describedefaultparameters"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDefaultParameters</h3>
<ul>
<li>description: The DescribeDefaultParameters action returns the default system parameter information for DAX.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeevents"><a aria-hidden="true" class="anchor-heading" href="#describeevents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEvents</h3>
<ul>
<li>description: The DescribeEvents action returns events related to DAX clusters and parameter groups.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeparametergroups"><a aria-hidden="true" class="anchor-heading" href="#describeparametergroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeParameterGroups</h3>
<ul>
<li>description: The DescribeParameterGroups action returns a list of parameter group descriptions.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeparameters"><a aria-hidden="true" class="anchor-heading" href="#describeparameters"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeParameters</h3>
<ul>
<li>description: The DescribeParameters action returns the detailed parameter list for a particular parameter group.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describesubnetgroups"><a aria-hidden="true" class="anchor-heading" href="#describesubnetgroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSubnetGroups</h3>
<ul>
<li>description: The DescribeSubnetGroups action returns a list of subnet group descriptions.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getitem"><a aria-hidden="true" class="anchor-heading" href="#getitem"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetItem</h3>
<ul>
<li>description: The GetItem action returns a set of attributes for the item with the given primary key.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "dax:EnclosingOperation"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="increasereplicationfactor"><a aria-hidden="true" class="anchor-heading" href="#increasereplicationfactor"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>IncreaseReplicationFactor</h3>
<ul>
<li>description: The IncreaseReplicationFactor action adds one or more nodes to a DAX cluster.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtags"><a aria-hidden="true" class="anchor-heading" href="#listtags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTags</h3>
<ul>
<li>description: The ListTags action returns a list all of the tags for a DAX cluster.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putitem"><a aria-hidden="true" class="anchor-heading" href="#putitem"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutItem</h3>
<ul>
<li>description: The PutItem action creates a new item, or replaces an old item with a new item.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "dax:EnclosingOperation"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="query"><a aria-hidden="true" class="anchor-heading" href="#query"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Query</h3>
<ul>
<li>description: The Query action finds items based on primary key values. You can query any table or secondary index that has a composite primary key (a partition key and a sort key).</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="rebootnode"><a aria-hidden="true" class="anchor-heading" href="#rebootnode"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RebootNode</h3>
<ul>
<li>description: The RebootNode action reboots a single node of a DAX cluster.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="scan"><a aria-hidden="true" class="anchor-heading" href="#scan"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Scan</h3>
<ul>
<li>description: The Scan action returns one or more items and item attributes by accessing every item in a table or a secondary index.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: The TagResource action associates a set of tags with a DAX resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: The UntagResource action removes the association of tags from a DAX resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatecluster"><a aria-hidden="true" class="anchor-heading" href="#updatecluster"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateCluster</h3>
<ul>
<li>description: The UpdateCluster action modifies the settings for a DAX cluster.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateitem"><a aria-hidden="true" class="anchor-heading" href="#updateitem"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateItem</h3>
<ul>
<li>description: The UpdateItem action edits an existing item's attributes, or adds a new item to the table if it does not already exist.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "dax:EnclosingOperation"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateparametergroup"><a aria-hidden="true" class="anchor-heading" href="#updateparametergroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateParameterGroup</h3>
<ul>
<li>description: The UpdateParameterGroup action modifies the parameters of a parameter group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatesubnetgroup"><a aria-hidden="true" class="anchor-heading" href="#updatesubnetgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateSubnetGroup</h3>
<ul>
<li>description: The UpdateSubnetGroup action modifies an existing subnet group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-DynamoDB Accelerator"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/kinesis-streams.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Kinesis Streams - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/kinesis-streams.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/kinesis-streams.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/kinesis-streams.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Kinesis Streams - undefined" />
  <meta name="twitter:title" content="Kinesis Streams - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/1f759d8c-cca7-4fc4-9aa2-6dbf6e596abf.html">Services</a></li><li class="breadcrumb-nav-list-item">Kinesis Streams</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/open-guides/og-aws" target="_blank"> og-aws  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Kinesis Streams">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="kinesis-streams"><a aria-hidden="true" class="anchor-heading" href="#kinesis-streams"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Kinesis Streams</h1>
<h3 id="kinesis-streams-basics"><a aria-hidden="true" class="anchor-heading" href="#kinesis-streams-basics"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Kinesis Streams Basics</h3>
<ul>
<li>📒 <a href="https://aws.amazon.com/kinesis/streams/">Homepage</a> ∙ <a href="https://docs.aws.amazon.com/streams/latest/dev/introduction.html">Developer guide</a> ∙ <a href="https://aws.amazon.com/kinesis/streams/faqs/">FAQ</a> ∙ <a href="https://aws.amazon.com/kinesis/streams/pricing/">Pricing</a></li>
<li><strong>Kinesis Streams</strong> (which used to be only called Kinesis, before Kinesis Firehose and Kinesis Analytics were launched) is a service that allows you to ingest high-throughput data streams for immediate or delayed processing by other AWS services.</li>
<li>Kinesis Streams’ subcomponents are called <a href="https://docs.aws.amazon.com/streams/latest/dev/key-concepts.html"><strong>shards</strong></a>. Each shard provides 1MB/s of write capacity and 2MB/s of read capacity at a maximum of 5 reads per second. A stream can have its shards programmatically increased or decreased based on a variety of metrics.</li>
<li>All records entered into a Kinesis Stream are assigned a unique sequence number as they are captured. The records in a Stream are ordered by this number, so any time-ordering is preserved.</li>
<li><a href="http://docs.aws.amazon.com/streams/latest/dev/key-concepts.html">This page</a> summarizes key terms and concepts for Kinesis Streams.</li>
</ul>
<h3 id="kinesis-streams-alternatives-and-lock-in"><a aria-hidden="true" class="anchor-heading" href="#kinesis-streams-alternatives-and-lock-in"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Kinesis Streams Alternatives and Lock-in</h3>
<ul>
<li>🚪 Kinesis is most closely compared to <a href="https://kafka.apache.org/">Apache Kafka</a>, an open-source data ingestion solution. It is possible to set up a Kafka cluster hosted on <a href="#ec2">EC2 instances</a> (or any other VPS), however you are responsible for managing and maintaining both Zookeeper and the Kafka brokers in a highly available configuration. Confluent has a good blog post with their recommendations on how to do this <a href="http://www.confluent.io/blog/design-and-deployment-considerations-for-deploying-apache-kafka-on-aws/">here</a>, which has links on the bottom to several other blogs they have written on the subject.</li>
<li>⛓ Kinesis uses very AWS-specific APIs, so you should be aware of the potential future costs of migrating away from it, should you choose to use it.</li>
<li>An application that efficiently uses Kinesis Streams will scale the number of shards up and down based on the required streaming capacity. (Note there is no direct equivalent to this with Apache Kafka.)</li>
</ul>
<h3 id="kinesis-streams-tips"><a aria-hidden="true" class="anchor-heading" href="#kinesis-streams-tips"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Kinesis Streams Tips</h3>
<ul>
<li>The <a href="https://docs.aws.amazon.com/streams/latest/dev/developing-consumers-with-kcl.html">KCL</a> (Kinesis Client Library) provides a skeleton interface for Java, Node, Python, Ruby and .NET programs to easily consume data from a Kinesis Stream. In order to start consuming data from a Stream, you only need to provide a config file to point at the correct Kinesis Stream, and functions for initialising the consumer, processing the records, and shutting down the consumer within the skeletons provided.
<ul>
<li>The KCL uses a DynamoDB table to keep track of which records have been processed by the KCL. This ensures that all records are processed “at least once”. It is up to the developer to ensure that the program can handle doubly-processed records.</li>
<li>The KCL also uses DynamoDB to keep track of other KCL “workers”. It automatically shares the available Kinesis Shards across all the workers as equally as possible.</li>
</ul>
</li>
</ul>
<h3 id="kinesis-streams-gotchas-and-limitations"><a aria-hidden="true" class="anchor-heading" href="#kinesis-streams-gotchas-and-limitations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Kinesis Streams Gotchas and Limitations</h3>
<ul>
<li>🔸⏱  Kinesis Streams’ shards each only permit <a href="http://docs.aws.amazon.com/streams/latest/dev/service-sizes-and-limits.html">5 reads per second</a>. If you are evenly distributing data across many shards, your read limit for the Stream will remain at 5 reads per second on aggregate, as each consuming application will need to check every single shard for new records. This puts a hard limit on the number of different consuming applications possible per Stream for a given maximum read latency.
<ul>
<li>For example, if you have 5 consuming applications reading data from one Stream with any number of shards, they cannot read with a latency of less than one second, as each of the 5 consumers will need to poll <em>each shard</em> every second, reaching the cap of 5 reads per second per shard.</li>
<li><a href="https://brandur.org/kinesis-in-production">This blog post</a> further discusses the performance and limitations of Kinesis in production.</li>
</ul>
</li>
<li>💸 <strong>Kinesis Streams are not included in the free tier.</strong> Make sure if you do any experimentation with it on a personal account, you shut down the stream or it may run up unexpected costs (~$11 per shard-month.)</li>
</ul><span id="navId" data="kinesis-streams"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-AppFlow.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>AppFlow - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-AppFlow.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-AppFlow.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-AppFlow.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="AppFlow - undefined" />
  <meta name="twitter:title" content="AppFlow - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">AppFlow</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="AppFlow">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="appflow"><a aria-hidden="true" class="anchor-heading" href="#appflow"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AppFlow</h1>
<ul>
<li>prefix: appflow</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="createconnectorprofile"><a aria-hidden="true" class="anchor-heading" href="#createconnectorprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateConnectorProfile</h3>
<ul>
<li>description: Grants permission to create a login profile to be used with Amazon AppFlow flows</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createflow"><a aria-hidden="true" class="anchor-heading" href="#createflow"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateFlow</h3>
<ul>
<li>description: Grants permission to create an Amazon AppFlow flow</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteconnectorprofile"><a aria-hidden="true" class="anchor-heading" href="#deleteconnectorprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteConnectorProfile</h3>
<ul>
<li>description: Grants permission to delete a login profile configured in Amazon AppFlow</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "connectorprofile": {
        "resource_type": "connectorprofile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteflow"><a aria-hidden="true" class="anchor-heading" href="#deleteflow"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteFlow</h3>
<ul>
<li>description: Grants permission to delete an Amazon AppFlow flow</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "flow": {
        "resource_type": "flow",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeconnectorentity"><a aria-hidden="true" class="anchor-heading" href="#describeconnectorentity"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeConnectorEntity</h3>
<ul>
<li>description: Grants permission to describe all fields for an object in a login profile configured in Amazon AppFlow</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "connectorprofile": {
        "resource_type": "connectorprofile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeconnectorfields"><a aria-hidden="true" class="anchor-heading" href="#describeconnectorfields"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeConnectorFields</h3>
<ul>
<li>description: Grants permission to describe all fields for an object in a login profile configured in Amazon AppFlow (Console Only)</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "connectorprofile": {
        "resource_type": "connectorprofile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeconnectorprofiles"><a aria-hidden="true" class="anchor-heading" href="#describeconnectorprofiles"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeConnectorProfiles</h3>
<ul>
<li>description: Grants permission to describe all login profiles configured in Amazon AppFlow</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeconnectors"><a aria-hidden="true" class="anchor-heading" href="#describeconnectors"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeConnectors</h3>
<ul>
<li>description: Grants permission to describe all connectors supported by Amazon AppFlow</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeflow"><a aria-hidden="true" class="anchor-heading" href="#describeflow"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeFlow</h3>
<ul>
<li>description: Grants permission to describe a specific flow configured in Amazon AppFlow</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeflowexecution"><a aria-hidden="true" class="anchor-heading" href="#describeflowexecution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeFlowExecution</h3>
<ul>
<li>description: Grants permission to describe all flow executions for a flow configured in Amazon AppFlow (Console Only)</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "flow": {
        "resource_type": "flow",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeflowexecutionrecords"><a aria-hidden="true" class="anchor-heading" href="#describeflowexecutionrecords"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeFlowExecutionRecords</h3>
<ul>
<li>description: Grants permission to describe all flow executions for a flow configured in Amazon AppFlow</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "flow": {
        "resource_type": "flow",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeflows"><a aria-hidden="true" class="anchor-heading" href="#describeflows"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeFlows</h3>
<ul>
<li>description: Grants permission to describe all flows configured in Amazon AppFlow (Console Only)</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listconnectorentities"><a aria-hidden="true" class="anchor-heading" href="#listconnectorentities"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListConnectorEntities</h3>
<ul>
<li>description: Grants permission to list all objects for a login profile configured in Amazon AppFlow</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "connectorprofile": {
        "resource_type": "connectorprofile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listconnectorfields"><a aria-hidden="true" class="anchor-heading" href="#listconnectorfields"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListConnectorFields</h3>
<ul>
<li>description: Grants permission to list all objects for a login profile configured in Amazon AppFlow (Console Only)</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "connectorprofile": {
        "resource_type": "connectorprofile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listflows"><a aria-hidden="true" class="anchor-heading" href="#listflows"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListFlows</h3>
<ul>
<li>description: Grants permission to list all flows configured in Amazon AppFlow</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "flow": {
        "resource_type": "flow",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Grants permission to list tags for a flow</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "flow": {
        "resource_type": "flow",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="runflow"><a aria-hidden="true" class="anchor-heading" href="#runflow"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RunFlow</h3>
<ul>
<li>description: Grants permission to run a flow configured in Amazon AppFlow (Console Only)</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "flow": {
        "resource_type": "flow",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startflow"><a aria-hidden="true" class="anchor-heading" href="#startflow"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartFlow</h3>
<ul>
<li>description: Grants permission to activate (for scheduled and event-triggered flows) or run (for on-demand flows) a flow configured in Amazon AppFlow</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "flow": {
        "resource_type": "flow",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopflow"><a aria-hidden="true" class="anchor-heading" href="#stopflow"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopFlow</h3>
<ul>
<li>description: Grants permission to deactivate a scheduled or event-triggered flow configured in Amazon AppFlow</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "flow": {
        "resource_type": "flow",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Grants permission to tag a flow</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "flow": {
        "resource_type": "flow",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys",
            "aws:RequestTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Grants permission to untag a flow</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "flow": {
        "resource_type": "flow",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateconnectorprofile"><a aria-hidden="true" class="anchor-heading" href="#updateconnectorprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateConnectorProfile</h3>
<ul>
<li>description: Grants permission to update a login profile configured in Amazon AppFlow</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "flow": {
        "resource_type": "flow",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateflow"><a aria-hidden="true" class="anchor-heading" href="#updateflow"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateFlow</h3>
<ul>
<li>description: Grants permission to update a flow configured in Amazon AppFlow</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "flow": {
        "resource_type": "flow",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-AppFlow"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Cognito Identity.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Cognito Identity - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Cognito Identity.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Cognito Identity.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Cognito Identity.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Cognito Identity - undefined" />
  <meta name="twitter:title" content="Cognito Identity - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Cognito Identity</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Cognito Identity">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="cognito-identity"><a aria-hidden="true" class="anchor-heading" href="#cognito-identity"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Cognito Identity</h1>
<ul>
<li>prefix: cognito-identity</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="createidentitypool"><a aria-hidden="true" class="anchor-heading" href="#createidentitypool"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateIdentityPool</h3>
<ul>
<li>description: Creates a new identity pool.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteidentities"><a aria-hidden="true" class="anchor-heading" href="#deleteidentities"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteIdentities</h3>
<ul>
<li>description: Deletes identities from an identity pool. You can specify a list of 1-60 identities that you want to delete.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteidentitypool"><a aria-hidden="true" class="anchor-heading" href="#deleteidentitypool"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteIdentityPool</h3>
<ul>
<li>description: Deletes a user pool. Once a pool is deleted, users will not be able to authenticate with the pool.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "identitypool": {
        "resource_type": "identitypool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeidentity"><a aria-hidden="true" class="anchor-heading" href="#describeidentity"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeIdentity</h3>
<ul>
<li>description: Returns metadata related to the given identity, including when the identity was created and any associated linked logins.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeidentitypool"><a aria-hidden="true" class="anchor-heading" href="#describeidentitypool"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeIdentityPool</h3>
<ul>
<li>description: Gets details about a particular identity pool, including the pool name, ID description, creation date, and current number of users.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "identitypool": {
        "resource_type": "identitypool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcredentialsforidentity"><a aria-hidden="true" class="anchor-heading" href="#getcredentialsforidentity"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCredentialsForIdentity</h3>
<ul>
<li>description: Returns credentials for the provided identity ID.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getid"><a aria-hidden="true" class="anchor-heading" href="#getid"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetId</h3>
<ul>
<li>description: Generates (or retrieves) a Cognito ID. Supplying multiple logins will create an implicit linked account.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getidentitypoolroles"><a aria-hidden="true" class="anchor-heading" href="#getidentitypoolroles"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetIdentityPoolRoles</h3>
<ul>
<li>description: Gets the roles for an identity pool.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "identitypool": {
        "resource_type": "identitypool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getopenidtoken"><a aria-hidden="true" class="anchor-heading" href="#getopenidtoken"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetOpenIdToken</h3>
<ul>
<li>description: Gets an OpenID token, using a known Cognito ID.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getopenidtokenfordeveloperidentity"><a aria-hidden="true" class="anchor-heading" href="#getopenidtokenfordeveloperidentity"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetOpenIdTokenForDeveloperIdentity</h3>
<ul>
<li>description: Registers (or retrieves) a Cognito IdentityId and an OpenID Connect token for a user authenticated by your backend authentication process.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "identitypool": {
        "resource_type": "identitypool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listidentities"><a aria-hidden="true" class="anchor-heading" href="#listidentities"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListIdentities</h3>
<ul>
<li>description: Lists the identities in a pool.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "identitypool": {
        "resource_type": "identitypool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listidentitypools"><a aria-hidden="true" class="anchor-heading" href="#listidentitypools"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListIdentityPools</h3>
<ul>
<li>description: Lists all of the Cognito identity pools registered for your account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Lists the tags that are assigned to an Amazon Cognito identity pool.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "identitypool": {
        "resource_type": "identitypool",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="lookupdeveloperidentity"><a aria-hidden="true" class="anchor-heading" href="#lookupdeveloperidentity"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>LookupDeveloperIdentity</h3>
<ul>
<li>description: Retrieves the IdentityID associated with a DeveloperUserIdentifier or the list of DeveloperUserIdentifiers associated with an IdentityId for an existing identity.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "identitypool": {
        "resource_type": "identitypool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="mergedeveloperidentities"><a aria-hidden="true" class="anchor-heading" href="#mergedeveloperidentities"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>MergeDeveloperIdentities</h3>
<ul>
<li>description: Merges two users having different IdentityIds, existing in the same identity pool, and identified by the same developer provider.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "identitypool": {
        "resource_type": "identitypool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setidentitypoolroles"><a aria-hidden="true" class="anchor-heading" href="#setidentitypoolroles"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetIdentityPoolRoles</h3>
<ul>
<li>description: Sets the roles for an identity pool. These roles are used when making calls to GetCredentialsForIdentity action.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Assigns a set of tags to an Amazon Cognito identity pool.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "identitypool": {
        "resource_type": "identitypool",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="unlinkdeveloperidentity"><a aria-hidden="true" class="anchor-heading" href="#unlinkdeveloperidentity"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UnlinkDeveloperIdentity</h3>
<ul>
<li>description: Unlinks a DeveloperUserIdentifier from an existing identity.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "identitypool": {
        "resource_type": "identitypool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="unlinkidentity"><a aria-hidden="true" class="anchor-heading" href="#unlinkidentity"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UnlinkIdentity</h3>
<ul>
<li>description: Unlinks a federated identity from an existing account.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Removes the specified tags from an Amazon Cognito identity pool.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "identitypool": {
        "resource_type": "identitypool",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateidentitypool"><a aria-hidden="true" class="anchor-heading" href="#updateidentitypool"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateIdentityPool</h3>
<ul>
<li>description: Updates a user pool.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "identitypool": {
        "resource_type": "identitypool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Cognito Identity"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/route-53.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Route 53 - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/route-53.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/route-53.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/route-53.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Route 53 - undefined" />
  <meta name="twitter:title" content="Route 53 - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/1f759d8c-cca7-4fc4-9aa2-6dbf6e596abf.html">Services</a></li><li class="breadcrumb-nav-list-item">Route 53</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/open-guides/og-aws" target="_blank"> og-aws  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Route 53">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="route-53"><a aria-hidden="true" class="anchor-heading" href="#route-53"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Route 53</h1>
<h3 id="route-53-basics"><a aria-hidden="true" class="anchor-heading" href="#route-53-basics"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Route 53 Basics</h3>
<ul>
<li>📒 <a href="https://aws.amazon.com/route53/">Homepage</a> ∙ <a href="http://docs.aws.amazon.com/Route53/latest/DeveloperGuide/">Developer guide</a> ∙ <a href="https://aws.amazon.com/route53/faqs/">FAQ</a> ∙ <a href="https://aws.amazon.com/route53/pricing/">Pricing</a></li>
<li><strong>Route 53</strong> is AWS’ DNS service.</li>
</ul>
<h3 id="route-53-alternatives-and-lock-in"><a aria-hidden="true" class="anchor-heading" href="#route-53-alternatives-and-lock-in"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Route 53 Alternatives and Lock-In</h3>
<ul>
<li>Historically, AWS was slow to penetrate the DNS market (as it is often driven by perceived reliability and long-term vendor relationships) but Route 53 has matured and <a href="https://www.datanyze.com/market-share/dns/">is becoming the standard option</a> for many companies. Route 53 is cheap by historic DNS standards, as it has a fairly large global network with geographic DNS and other formerly “premium” features. It’s convenient if you are already using AWS.</li>
<li>⛓Generally you don’t get locked into a DNS provider for simple use cases, but increasingly become tied in once you use specific features like geographic routing or Route 53’s alias records.</li>
<li>🚪Many alternative DNS providers exist, ranging from long-standing premium brands like <a href="https://www.neustar.biz/services/dns-services">UltraDNS</a> and <a href="http://dyn.com/managed-dns/">Dyn</a> to less well known, more modestly priced brands like <a href="http://www.dnsmadeeasy.com/">DNSMadeEasy</a>. Most DNS experts will tell you that the market is opaque enough that reliability and performance don’t really correlate well with price.</li>
<li>⏱Route 53 is usually somewhere in the middle of the pack on performance tests, e.g. the <a href="http://www.solvedns.com/dns-comparison/">SolveDNS reports</a>.</li>
</ul>
<h3 id="route-53-tips"><a aria-hidden="true" class="anchor-heading" href="#route-53-tips"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Route 53 Tips</h3>
<ul>
<li>🔹Know about Route 53’s “alias” records:
<ul>
<li>Route 53 supports all the standard DNS record types, but note that <a href="http://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resource-record-sets-choosing-alias-non-alias.html"><strong>alias resource record sets</strong></a> are not standard part of DNS, but a specific Route 53 feature. (It’s available from other DNS providers too, but each provider has a different name for it.)</li>
<li>Aliases are like an internal name (a bit like a CNAME) that is resolved internally on the server side. For example, traditionally you could have a CNAME to the DNS name of a CLB or ALB, but it’s often better to make an alias to the same load balancer. The effect is the same, but in the latter case, externally, all a client sees is the target the record points to.</li>
<li>It’s often wise to use alias record as an alternative to CNAMEs, since they can be updated instantly with an API call, without worrying about DNS propagation.</li>
<li>You can use them for CLBs/ALBs or any other resource where AWS supports it.</li>
<li>Somewhat confusingly, you can have CNAME and A aliases, depending on the type of the target.</li>
<li>Because aliases are extensions to regular DNS records, if exported, the output <a href="https://en.wikipedia.org/wiki/Zone_file">zone file</a> will have additional non-standard “ALIAS” lines in it.</li>
</ul>
</li>
<li><a href="https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-policy.html#routing-policy-latency"><strong>Latency-based routing</strong></a> allows users around the globe to be automatically directed to the nearest AWS region where you are running, so that latency is reduced.</li>
<li>Understand that domain registration and DNS management (hosted zones) are two separate Route 53 services. When you buy/transfer a domain, Route 53 automatically assigns four name servers to it (e.g. ns-2.awsdns-00.com). Route 53 also offers to automatically create a hosted zone for DNS management, but you are not required do your DNS management in the same account or even in Route 53; you just need to create an NS record pointing to the servers assigned to your domain in Route 53.</li>
<li>One use case would be to put your domain registration (very mission critical) in a <a href="https://cloudonaut.io/your-single-aws-account-is-a-serious-risk/">bastion account</a> while managing the hosted zones within another account which is accessible by your applications.</li>
</ul>
<h3 id="route-53-gotchas-and-limitations"><a aria-hidden="true" class="anchor-heading" href="#route-53-gotchas-and-limitations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Route 53 Gotchas and Limitations</h3>
<ul>
<li>🔸Private Hosted Zone will only respond to DNS queries that originate from within a VPC. As a result Route53 will not respond to request made via a VPN or Direct connect. To get around this you will need to implement <a href="https://d1.awsstatic.com/whitepapers/hybrid-cloud-dns-options-for-vpc.pdf">Hybrid Cloud DNS Solutions</a> or use the Simple AD provided IP addresses to query the hosted zone.</li>
</ul><span id="navId" data="route-53"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/elastic-file-system.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Elastic File System - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/elastic-file-system.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/elastic-file-system.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/elastic-file-system.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Elastic File System - undefined" />
  <meta name="twitter:title" content="Elastic File System - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/1f759d8c-cca7-4fc4-9aa2-6dbf6e596abf.html">Services</a></li><li class="breadcrumb-nav-list-item">Elastic File System</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/open-guides/og-aws" target="_blank"> og-aws  </li>
              
              <li> <a href="https://www.awsgeek.com/" target="_blank"> <NAME>  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Elastic File System">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <p><img src="/assets/images/Amazon-EFS_en.jpg"></p>
<blockquote>
<p>Image from <a href="https://www.awsgeek.com/Amazon-EFS/">@awsgeek</a></p>
</blockquote>
<h1 id="elastic-file-system"><a aria-hidden="true" class="anchor-heading" href="#elastic-file-system"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Elastic File System</h1>
<h3 id="efs-basics"><a aria-hidden="true" class="anchor-heading" href="#efs-basics"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EFS Basics</h3>
<ul>
<li>📒 <a href="https://aws.amazon.com/efs/">Homepage</a> ∙ <a href="http://docs.aws.amazon.com/efs/latest/ug">User guide</a> ∙ <a href="https://aws.amazon.com/efs/faq/">FAQ</a> ∙ <a href="https://aws.amazon.com/efs/pricing/">Pricing</a></li>
<li>🐥<strong>EFS</strong> is Amazon’s network filesystem. It’s presented as an <a href="https://en.wikipedia.org/wiki/Network_File_System#NFSv4">NFSv4.1</a> server. Any compatible NFSv4 client can mount it.</li>
<li>It is designed to be highly available and durable and each EFS file system object is redundantly stored across multiple availability zones.</li>
<li>EFS is designed to be used as a shared network drive and it can automatically scale up to petabytes of stored data and thousands of instances attached to it.</li>
<li>EFS can offer <a href="http://docs.aws.amazon.com/efs/latest/ug/performance.html">higher throughput</a> (multiple gigabytes per second) and better durability and availability than EBS (see <a href="#storage-durability-availability-and-price">the comparison table</a>), but with higher latency.</li>
<li>EFS is priced based on the volume of data stored, and costs <a href="#storage-durability-availability-and-price">much more than EBS</a>; it's in the ballpark of three times as much compared to general purpose gp2 EBS volumes.</li>
<li>⏱ <a href="http://docs.aws.amazon.com/efs/latest/ug/performance.html">Performance</a> is dependent on the volume of data stored, as is the price:
<ul>
<li>Like EBS, EFS uses a credit based system. Credits are earned at a rate of 50 KiB/s per GiB of storage and consumed in bursts during reading/writing files or metadata. Unlike EBS, operations on metadata (file size, owner, date, etc.) also consume credits. The <a href="http://docs.aws.amazon.com/efs/latest/ug/monitoring-cloudwatch.html#efs-metrics">BurstCreditBalance metric</a> in CloudWatch should be monitored to make sure the file system doesn't run out of credits.</li>
<li>Throughput capacity during bursts is also dependent on size. Under 1 TiB, throughput can go up to 100 MiB/s. Above that, 100 MiB/s is added for each stored TiB. For instance, a file system storing 5 TiB would be able to burst at a rate of 500 MiB/s. Maximum throughput per EC2 instance is 250 MiB/s.</li>
<li>EFS has two performance modes that can only be set when a file system is created. One is "General Purpose", the other is "Max I/O". Max I/O scales higher, but at the cost of higher latency. When in doubt, use General Purpose, which is also the default. If the <a href="http://docs.aws.amazon.com/efs/latest/ug/monitoring-cloudwatch.html#efs-metrics">PercentIOLimit metric</a> in CloudWatch hovers around 100%, Max I/O is recommended. Changing performance mode means creating a new EFS and migrating data.</li>
</ul>
</li>
<li>High availability is achieved by having <a href="http://docs.aws.amazon.com/efs/latest/ug/images/overview-flow.png">mount targets in different subnets / availability zones</a>.</li>
</ul>
<h3 id="efs-tips"><a aria-hidden="true" class="anchor-heading" href="#efs-tips"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EFS Tips</h3>
<ul>
<li>
<p>With EFS being based on NFSv4.1, any directory on the EFS can be mounted directly, it doesn't have to be the root directory. One application could mount <em>fs-12345678:/prog1</em>, another <em>fs-12345678:/prog2</em>.</p>
</li>
<li>
<p><a href="https://docs.aws.amazon.com/efs/latest/ug/accessing-fs-nfs-permissions.html">User and group level permissions</a> can be used to control access to certain directories on the EFS file system.</p>
</li>
<li>
<p>⏱ <strong>Sharing EFS filesystems:</strong> One EFS filesystem can be used for multiple applications or services, but it should be considered carefully:</p>
<p>Pros:</p>
<ul>
<li>Because performance is based on total size of stored files, having everything on one drive will increase performance for everyone. One application consuming credits faster than it can accumulate might be offset by another application that just stores files on EFS and rarely accesses them.</li>
</ul>
<p>Cons:</p>
<ul>
<li>Since credits are shared, if one application over-consumes them, it will affect the others.</li>
<li>A compromise is made with regards to <a href="http://docs.aws.amazon.com/efs/latest/ug/security-considerations.html">security</a>: all clients will have to have network access to the drive. Someone with root access on one client instance can mount any directory on the EFS and they have read-write access to all files on the drive, even if they don't have access to the applications hosted on other clients. There isn't a no-root-squash equivalent for EFS.</li>
</ul>
</li>
</ul>
<h3 id="efs-gotchas-and-limitations"><a aria-hidden="true" class="anchor-heading" href="#efs-gotchas-and-limitations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EFS Gotchas and Limitations</h3>
<ul>
<li>🔸 A number of NFSv4.1 features are <a href="http://docs.aws.amazon.com/efs/latest/ug/nfs4-unsupported-features.html">not supported</a> and there are some <a href="http://docs.aws.amazon.com/efs/latest/ug/limits.html">limits</a> to the service.</li>
<li>🔸 As of 2017-08, EFS offers disk level encryption for new drives. For file systems created before that date, encryption can only be achieved by moving the data to a new EFS volume.</li>
<li>🔸 An EFS file system <a href="https://aws.amazon.com/efs/faq/#on-premises">can be mounted on premises</a> over Direct Connect.</li>
<li>🔸 An EFS file system can NOT be mounted over VPC peering or VPN, even if the VPN is running on top of Direct Connect.</li>
<li>🔸 Using an EFS volume on Windows is not supported.</li>
<li>⏱ When a file is uploaded to EFS, it can take hours for EFS to update the details for billing and burst credit purposes.</li>
<li>🔸⏱  Metadata operations can be costly in terms of burst credit consumption. Recursively traversing a tree containing thousands of files can easily ramp up to tens or even hundreds of megabytes of burst credits being consumed, even if no file is being touched. Commands like <code>find</code> or <code>chown -R</code> can have an adverse impact on performance.</li>
</ul><span id="navId" data="elastic-file-system"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Simple Storage Service.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Simple Storage Service - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Simple Storage Service.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Simple Storage Service.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Simple Storage Service.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Simple Storage Service - undefined" />
  <meta name="twitter:title" content="Simple Storage Service - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Simple Storage Service</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Simple Storage Service">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="simple-storage-service"><a aria-hidden="true" class="anchor-heading" href="#simple-storage-service"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Simple Storage Service</h1>
<ul>
<li>prefix: s3</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="abortmultipartupload"><a aria-hidden="true" class="anchor-heading" href="#abortmultipartupload"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AbortMultipartUpload</h3>
<ul>
<li>description: Grants permission to abort a multipart upload</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "object": {
        "resource_type": "object",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:DataAccessPointArn",
            "s3:DataAccessPointAccount",
            "s3:AccessPointNetworkOrigin",
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="bypassgovernanceretention"><a aria-hidden="true" class="anchor-heading" href="#bypassgovernanceretention"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BypassGovernanceRetention</h3>
<ul>
<li>description: Grants permission to allow circumvention of governance-mode object retention settings</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "object": {
        "resource_type": "object",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:DataAccessPointAccount",
            "s3:DataAccessPointArn",
            "s3:AccessPointNetworkOrigin",
            "s3:RequestObjectTag/&#x3C;key>",
            "s3:RequestObjectTagKeys",
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-acl",
            "s3:x-amz-content-sha256",
            "s3:x-amz-copy-source",
            "s3:x-amz-grant-full-control",
            "s3:x-amz-grant-read",
            "s3:x-amz-grant-read-acp",
            "s3:x-amz-grant-write",
            "s3:x-amz-grant-write-acp",
            "s3:x-amz-metadata-directive",
            "s3:x-amz-server-side-encryption",
            "s3:x-amz-server-side-encryption-aws-kms-key-id",
            "s3:x-amz-storage-class",
            "s3:x-amz-website-redirect-location",
            "s3:object-lock-mode",
            "s3:object-lock-retain-until-date",
            "s3:object-lock-remaining-retention-days",
            "s3:object-lock-legal-hold"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createaccesspoint"><a aria-hidden="true" class="anchor-heading" href="#createaccesspoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateAccessPoint</h3>
<ul>
<li>description: Grants permission to create a new access point</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "accesspoint": {
        "resource_type": "accesspoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:DataAccessPointAccount",
            "s3:DataAccessPointArn",
            "s3:AccessPointNetworkOrigin",
            "s3:authType",
            "s3:locationconstraint",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-acl",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createbucket"><a aria-hidden="true" class="anchor-heading" href="#createbucket"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateBucket</h3>
<ul>
<li>description: Grants permission to create a new bucket</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:locationconstraint",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-acl",
            "s3:x-amz-content-sha256",
            "s3:x-amz-grant-full-control",
            "s3:x-amz-grant-read",
            "s3:x-amz-grant-read-acp",
            "s3:x-amz-grant-write",
            "s3:x-amz-grant-write-acp"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createjob"><a aria-hidden="true" class="anchor-heading" href="#createjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateJob</h3>
<ul>
<li>description: Grants permission to create a new Amazon S3 Batch Operations job</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256",
            "s3:RequestJobPriority",
            "s3:RequestJobOperation",
            "aws:TagKeys",
            "aws:RequestTag/${TagKey}"
        ],
        "dependent_actions": [
            "iam:PassRole"
        ]
    }
}
</code></pre>
<h3 id="deleteaccesspoint"><a aria-hidden="true" class="anchor-heading" href="#deleteaccesspoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAccessPoint</h3>
<ul>
<li>description: Grants permission to delete the access point named in the URI</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "accesspoint": {
        "resource_type": "accesspoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:DataAccessPointArn",
            "s3:DataAccessPointAccount",
            "s3:AccessPointNetworkOrigin",
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteaccesspointpolicy"><a aria-hidden="true" class="anchor-heading" href="#deleteaccesspointpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAccessPointPolicy</h3>
<ul>
<li>description: Grants permission to delete the policy on a specified access point</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "accesspoint": {
        "resource_type": "accesspoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:DataAccessPointArn",
            "s3:DataAccessPointAccount",
            "s3:AccessPointNetworkOrigin",
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletebucket"><a aria-hidden="true" class="anchor-heading" href="#deletebucket"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteBucket</h3>
<ul>
<li>description: Grants permission to delete the bucket named in the URI</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletebucketownershipcontrols"><a aria-hidden="true" class="anchor-heading" href="#deletebucketownershipcontrols"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteBucketOwnershipControls</h3>
<ul>
<li>description: Grants permission to delete ownership controls on a bucket</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletebucketpolicy"><a aria-hidden="true" class="anchor-heading" href="#deletebucketpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteBucketPolicy</h3>
<ul>
<li>description: Grants permission to delete the policy on a specified bucket</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletebucketwebsite"><a aria-hidden="true" class="anchor-heading" href="#deletebucketwebsite"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteBucketWebsite</h3>
<ul>
<li>description: Grants permission to remove the website configuration for a bucket</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletejobtagging"><a aria-hidden="true" class="anchor-heading" href="#deletejobtagging"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteJobTagging</h3>
<ul>
<li>description: Grants permission to remove tags from an existing Amazon S3 Batch Operations job</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "job": {
        "resource_type": "job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256",
            "s3:ExistingJobPriority",
            "s3:ExistingJobOperation"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteobject"><a aria-hidden="true" class="anchor-heading" href="#deleteobject"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteObject</h3>
<ul>
<li>description: Grants permission to remove the null version of an object and insert a delete marker, which becomes the current version of the object</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "object": {
        "resource_type": "object",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:DataAccessPointAccount",
            "s3:DataAccessPointArn",
            "s3:AccessPointNetworkOrigin",
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteobjecttagging"><a aria-hidden="true" class="anchor-heading" href="#deleteobjecttagging"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteObjectTagging</h3>
<ul>
<li>description: Grants permission to use the tagging subresource to remove the entire tag set from the specified object</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "object": {
        "resource_type": "object",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:DataAccessPointAccount",
            "s3:DataAccessPointArn",
            "s3:AccessPointNetworkOrigin",
            "s3:ExistingObjectTag/&#x3C;key>",
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteobjectversion"><a aria-hidden="true" class="anchor-heading" href="#deleteobjectversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteObjectVersion</h3>
<ul>
<li>description: Grants permission to remove a specific version of an object</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "object": {
        "resource_type": "object",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:DataAccessPointAccount",
            "s3:DataAccessPointArn",
            "s3:AccessPointNetworkOrigin",
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:versionid",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteobjectversiontagging"><a aria-hidden="true" class="anchor-heading" href="#deleteobjectversiontagging"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteObjectVersionTagging</h3>
<ul>
<li>description: Grants permission to remove the entire tag set for a specific version of the object</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "object": {
        "resource_type": "object",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:DataAccessPointAccount",
            "s3:DataAccessPointArn",
            "s3:AccessPointNetworkOrigin",
            "s3:ExistingObjectTag/&#x3C;key>",
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:versionid",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describejob"><a aria-hidden="true" class="anchor-heading" href="#describejob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeJob</h3>
<ul>
<li>description: Grants permission to retrieve the configuration parameters and status for a batch operations job</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "job": {
        "resource_type": "job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getaccelerateconfiguration"><a aria-hidden="true" class="anchor-heading" href="#getaccelerateconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAccelerateConfiguration</h3>
<ul>
<li>description: Grants permission to uses the accelerate subresource to return the Transfer Acceleration state of a bucket, which is either Enabled or Suspended</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getaccesspoint"><a aria-hidden="true" class="anchor-heading" href="#getaccesspoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAccessPoint</h3>
<ul>
<li>description: Grants permission to return configuration information about the specified access point</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:DataAccessPointAccount",
            "s3:DataAccessPointArn",
            "s3:AccessPointNetworkOrigin",
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getaccesspointpolicy"><a aria-hidden="true" class="anchor-heading" href="#getaccesspointpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAccessPointPolicy</h3>
<ul>
<li>description: Grants permission to returns the access point policy associated with the specified access point</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "accesspoint": {
        "resource_type": "accesspoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:DataAccessPointAccount",
            "s3:DataAccessPointArn",
            "s3:AccessPointNetworkOrigin",
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getaccesspointpolicystatus"><a aria-hidden="true" class="anchor-heading" href="#getaccesspointpolicystatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAccessPointPolicyStatus</h3>
<ul>
<li>description: Grants permission to return the policy status for a specific access point policy</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "accesspoint": {
        "resource_type": "accesspoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:DataAccessPointAccount",
            "s3:DataAccessPointArn",
            "s3:AccessPointNetworkOrigin",
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getaccountpublicaccessblock"><a aria-hidden="true" class="anchor-heading" href="#getaccountpublicaccessblock"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAccountPublicAccessBlock</h3>
<ul>
<li>description: Grants permission to retrieve the PublicAccessBlock configuration for an AWS account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getanalyticsconfiguration"><a aria-hidden="true" class="anchor-heading" href="#getanalyticsconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAnalyticsConfiguration</h3>
<ul>
<li>description: Grants permission to get an analytics configuration from an Amazon S3 bucket, identified by the analytics configuration ID</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbucketacl"><a aria-hidden="true" class="anchor-heading" href="#getbucketacl"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBucketAcl</h3>
<ul>
<li>description: Grants permission to use the acl subresource to return the access control list (ACL) of an Amazon S3 bucket</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbucketcors"><a aria-hidden="true" class="anchor-heading" href="#getbucketcors"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBucketCORS</h3>
<ul>
<li>description: Grants permission to return the CORS configuration information set for an Amazon S3 bucket</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbucketlocation"><a aria-hidden="true" class="anchor-heading" href="#getbucketlocation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBucketLocation</h3>
<ul>
<li>description: Grants permission to return the Region that an Amazon S3 bucket resides in</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbucketlogging"><a aria-hidden="true" class="anchor-heading" href="#getbucketlogging"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBucketLogging</h3>
<ul>
<li>description: Grants permission to return the logging status of an Amazon S3 bucket and the permissions users have to view or modify that status</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbucketnotification"><a aria-hidden="true" class="anchor-heading" href="#getbucketnotification"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBucketNotification</h3>
<ul>
<li>description: Grants permission to get the notification configuration of an Amazon S3 bucket</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbucketobjectlockconfiguration"><a aria-hidden="true" class="anchor-heading" href="#getbucketobjectlockconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBucketObjectLockConfiguration</h3>
<ul>
<li>description: Grants permission to get the Object Lock configuration of an Amazon S3 bucket</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbucketownershipcontrols"><a aria-hidden="true" class="anchor-heading" href="#getbucketownershipcontrols"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBucketOwnershipControls</h3>
<ul>
<li>description: Grants permission to retrieve ownership controls on a bucket</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbucketpolicy"><a aria-hidden="true" class="anchor-heading" href="#getbucketpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBucketPolicy</h3>
<ul>
<li>description: Grants permission to return the policy of the specified bucket</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbucketpolicystatus"><a aria-hidden="true" class="anchor-heading" href="#getbucketpolicystatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBucketPolicyStatus</h3>
<ul>
<li>description: Grants permission to retrieve the policy status for a specific Amazon S3 bucket, which indicates whether the bucket is public</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbucketpublicaccessblock"><a aria-hidden="true" class="anchor-heading" href="#getbucketpublicaccessblock"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBucketPublicAccessBlock</h3>
<ul>
<li>description: Grants permission to retrieve the PublicAccessBlock configuration for an Amazon S3 bucket</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbucketrequestpayment"><a aria-hidden="true" class="anchor-heading" href="#getbucketrequestpayment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBucketRequestPayment</h3>
<ul>
<li>description: Grants permission to return the request payment configuration for an Amazon S3 bucket</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbuckettagging"><a aria-hidden="true" class="anchor-heading" href="#getbuckettagging"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBucketTagging</h3>
<ul>
<li>description: Grants permission to return the tag set associated with an Amazon S3 bucket</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbucketversioning"><a aria-hidden="true" class="anchor-heading" href="#getbucketversioning"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBucketVersioning</h3>
<ul>
<li>description: Grants permission to return the versioning state of an Amazon S3 bucket</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbucketwebsite"><a aria-hidden="true" class="anchor-heading" href="#getbucketwebsite"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBucketWebsite</h3>
<ul>
<li>description: Grants permission to return the website configuration for an Amazon S3 bucket</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getencryptionconfiguration"><a aria-hidden="true" class="anchor-heading" href="#getencryptionconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetEncryptionConfiguration</h3>
<ul>
<li>description: Grants permission to return the default encryption configuration an Amazon S3 bucket</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getinventoryconfiguration"><a aria-hidden="true" class="anchor-heading" href="#getinventoryconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetInventoryConfiguration</h3>
<ul>
<li>description: Grants permission to return an inventory configuration from an Amazon S3 bucket, identified by the inventory configuration ID</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getjobtagging"><a aria-hidden="true" class="anchor-heading" href="#getjobtagging"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetJobTagging</h3>
<ul>
<li>description: Grants permission to return the tag set of an existing Amazon S3 Batch Operations job</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "job": {
        "resource_type": "job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getlifecycleconfiguration"><a aria-hidden="true" class="anchor-heading" href="#getlifecycleconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetLifecycleConfiguration</h3>
<ul>
<li>description: Grants permission to return the lifecycle configuration information set on an Amazon S3 bucket</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmetricsconfiguration"><a aria-hidden="true" class="anchor-heading" href="#getmetricsconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetMetricsConfiguration</h3>
<ul>
<li>description: Grants permission to get a metrics configuration from an Amazon S3 bucket</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getobject"><a aria-hidden="true" class="anchor-heading" href="#getobject"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetObject</h3>
<ul>
<li>description: Grants permission to retrieve objects from Amazon S3</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "object": {
        "resource_type": "object",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:DataAccessPointAccount",
            "s3:DataAccessPointArn",
            "s3:AccessPointNetworkOrigin",
            "s3:ExistingObjectTag/&#x3C;key>",
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getobjectacl"><a aria-hidden="true" class="anchor-heading" href="#getobjectacl"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetObjectAcl</h3>
<ul>
<li>description: Grants permission to return the access control list (ACL) of an object</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "object": {
        "resource_type": "object",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:DataAccessPointAccount",
            "s3:DataAccessPointArn",
            "s3:AccessPointNetworkOrigin",
            "s3:ExistingObjectTag/&#x3C;key>",
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getobjectlegalhold"><a aria-hidden="true" class="anchor-heading" href="#getobjectlegalhold"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetObjectLegalHold</h3>
<ul>
<li>description: Grants permission to get an object's current Legal Hold status</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "object": {
        "resource_type": "object",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:DataAccessPointAccount",
            "s3:DataAccessPointArn",
            "s3:AccessPointNetworkOrigin",
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getobjectretention"><a aria-hidden="true" class="anchor-heading" href="#getobjectretention"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetObjectRetention</h3>
<ul>
<li>description: Grants permission to retrieve the retention settings for an object</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "object": {
        "resource_type": "object",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:DataAccessPointAccount",
            "s3:DataAccessPointArn",
            "s3:AccessPointNetworkOrigin",
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getobjecttagging"><a aria-hidden="true" class="anchor-heading" href="#getobjecttagging"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetObjectTagging</h3>
<ul>
<li>description: Grants permission to return the tag set of an object</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "object": {
        "resource_type": "object",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:DataAccessPointAccount",
            "s3:DataAccessPointArn",
            "s3:AccessPointNetworkOrigin",
            "s3:ExistingObjectTag/&#x3C;key>",
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getobjecttorrent"><a aria-hidden="true" class="anchor-heading" href="#getobjecttorrent"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetObjectTorrent</h3>
<ul>
<li>description: Grants permission to return torrent files from an Amazon S3 bucket</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "object": {
        "resource_type": "object",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getobjectversion"><a aria-hidden="true" class="anchor-heading" href="#getobjectversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetObjectVersion</h3>
<ul>
<li>description: Grants permission to retrieve a specific version of an object</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "object": {
        "resource_type": "object",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:DataAccessPointAccount",
            "s3:DataAccessPointArn",
            "s3:AccessPointNetworkOrigin",
            "s3:ExistingObjectTag/&#x3C;key>",
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:versionid",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getobjectversionacl"><a aria-hidden="true" class="anchor-heading" href="#getobjectversionacl"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetObjectVersionAcl</h3>
<ul>
<li>description: Grants permission to return the access control list (ACL) of a specific object version</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "object": {
        "resource_type": "object",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:DataAccessPointAccount",
            "s3:DataAccessPointArn",
            "s3:AccessPointNetworkOrigin",
            "s3:ExistingObjectTag/&#x3C;key>",
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:versionid",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getobjectversionforreplication"><a aria-hidden="true" class="anchor-heading" href="#getobjectversionforreplication"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetObjectVersionForReplication</h3>
<ul>
<li>description: Grants permission to replicate both unencrypted objects and objects encrypted with SSE-S3 or SSE-KMS</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "object": {
        "resource_type": "object",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getobjectversiontagging"><a aria-hidden="true" class="anchor-heading" href="#getobjectversiontagging"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetObjectVersionTagging</h3>
<ul>
<li>description: Grants permission to return the tag set for a specific version of the object</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "object": {
        "resource_type": "object",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:DataAccessPointAccount",
            "s3:DataAccessPointArn",
            "s3:AccessPointNetworkOrigin",
            "s3:ExistingObjectTag/&#x3C;key>",
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:versionid",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getobjectversiontorrent"><a aria-hidden="true" class="anchor-heading" href="#getobjectversiontorrent"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetObjectVersionTorrent</h3>
<ul>
<li>description: Grants permission to get Torrent files about a different version using the versionId subresource</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "object": {
        "resource_type": "object",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:versionid",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getreplicationconfiguration"><a aria-hidden="true" class="anchor-heading" href="#getreplicationconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetReplicationConfiguration</h3>
<ul>
<li>description: Grants permission to get the replication configuration information set on an Amazon S3 bucket</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listaccesspoints"><a aria-hidden="true" class="anchor-heading" href="#listaccesspoints"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAccessPoints</h3>
<ul>
<li>description: Grants permission to list access points</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listallmybuckets"><a aria-hidden="true" class="anchor-heading" href="#listallmybuckets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAllMyBuckets</h3>
<ul>
<li>description: Grants permission to list all buckets owned by the authenticated sender of the request</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listbucket"><a aria-hidden="true" class="anchor-heading" href="#listbucket"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListBucket</h3>
<ul>
<li>description: Grants permission to list some or all of the objects in an Amazon S3 bucket (up to 1000)</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:DataAccessPointAccount",
            "s3:DataAccessPointArn",
            "s3:AccessPointNetworkOrigin",
            "s3:authType",
            "s3:delimiter",
            "s3:max-keys",
            "s3:prefix",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listbucketmultipartuploads"><a aria-hidden="true" class="anchor-heading" href="#listbucketmultipartuploads"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListBucketMultipartUploads</h3>
<ul>
<li>description: Grants permission to list in-progress multipart uploads</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:DataAccessPointAccount",
            "s3:DataAccessPointArn",
            "s3:AccessPointNetworkOrigin",
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listbucketversions"><a aria-hidden="true" class="anchor-heading" href="#listbucketversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListBucketVersions</h3>
<ul>
<li>description: Grants permission to list metadata about all the versions of objects in an Amazon S3 bucket</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:DataAccessPointAccount",
            "s3:DataAccessPointArn",
            "s3:AccessPointNetworkOrigin",
            "s3:authType",
            "s3:delimiter",
            "s3:max-keys",
            "s3:prefix",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listjobs"><a aria-hidden="true" class="anchor-heading" href="#listjobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListJobs</h3>
<ul>
<li>description: Grants permission to list current jobs and jobs that have ended recently</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listmultipartuploadparts"><a aria-hidden="true" class="anchor-heading" href="#listmultipartuploadparts"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListMultipartUploadParts</h3>
<ul>
<li>description: Grants permission to list the parts that have been uploaded for a specific multipart upload</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "object": {
        "resource_type": "object",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:DataAccessPointAccount",
            "s3:DataAccessPointArn",
            "s3:AccessPointNetworkOrigin",
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="objectowneroverridetobucketowner"><a aria-hidden="true" class="anchor-heading" href="#objectowneroverridetobucketowner"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ObjectOwnerOverrideToBucketOwner</h3>
<ul>
<li>description: Grants permission to change replica ownership</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "object": {
        "resource_type": "object",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putaccelerateconfiguration"><a aria-hidden="true" class="anchor-heading" href="#putaccelerateconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutAccelerateConfiguration</h3>
<ul>
<li>description: Grants permission to use the accelerate subresource to set the Transfer Acceleration state of an existing S3 bucket</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putaccesspointpolicy"><a aria-hidden="true" class="anchor-heading" href="#putaccesspointpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutAccessPointPolicy</h3>
<ul>
<li>description: Grants permission to associate an access policy with a specified access point</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "accesspoint": {
        "resource_type": "accesspoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:DataAccessPointAccount",
            "s3:DataAccessPointArn",
            "s3:AccessPointNetworkOrigin",
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putaccountpublicaccessblock"><a aria-hidden="true" class="anchor-heading" href="#putaccountpublicaccessblock"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutAccountPublicAccessBlock</h3>
<ul>
<li>description: Grants permission to create or modify the PublicAccessBlock configuration for an AWS account</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putanalyticsconfiguration"><a aria-hidden="true" class="anchor-heading" href="#putanalyticsconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutAnalyticsConfiguration</h3>
<ul>
<li>description: Grants permission to set an analytics configuration for the bucket, specified by the analytics configuration ID</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putbucketacl"><a aria-hidden="true" class="anchor-heading" href="#putbucketacl"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutBucketAcl</h3>
<ul>
<li>description: Grants permission to set the permissions on an existing bucket using access control lists (ACLs)</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-acl",
            "s3:x-amz-content-sha256",
            "s3:x-amz-grant-full-control",
            "s3:x-amz-grant-read",
            "s3:x-amz-grant-read-acp",
            "s3:x-amz-grant-write",
            "s3:x-amz-grant-write-acp"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putbucketcors"><a aria-hidden="true" class="anchor-heading" href="#putbucketcors"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutBucketCORS</h3>
<ul>
<li>description: Grants permission to set the CORS configuration for an Amazon S3 bucket</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putbucketlogging"><a aria-hidden="true" class="anchor-heading" href="#putbucketlogging"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutBucketLogging</h3>
<ul>
<li>description: Grants permission to set the logging parameters for an Amazon S3 bucket</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putbucketnotification"><a aria-hidden="true" class="anchor-heading" href="#putbucketnotification"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutBucketNotification</h3>
<ul>
<li>description: Grants permission to receive notifications when certain events happen in an Amazon S3 bucket</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putbucketobjectlockconfiguration"><a aria-hidden="true" class="anchor-heading" href="#putbucketobjectlockconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutBucketObjectLockConfiguration</h3>
<ul>
<li>description: Grants permission to put Object Lock configuration on a specific bucket</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putbucketownershipcontrols"><a aria-hidden="true" class="anchor-heading" href="#putbucketownershipcontrols"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutBucketOwnershipControls</h3>
<ul>
<li>description: Grants permission to add or replace ownership controls on a bucket</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putbucketpolicy"><a aria-hidden="true" class="anchor-heading" href="#putbucketpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutBucketPolicy</h3>
<ul>
<li>description: Grants permission to add or replace a bucket policy on a bucket</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putbucketpublicaccessblock"><a aria-hidden="true" class="anchor-heading" href="#putbucketpublicaccessblock"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutBucketPublicAccessBlock</h3>
<ul>
<li>description: Grants permission to create or modify the PublicAccessBlock configuration for a specific Amazon S3 bucket</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putbucketrequestpayment"><a aria-hidden="true" class="anchor-heading" href="#putbucketrequestpayment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutBucketRequestPayment</h3>
<ul>
<li>description: Grants permission to set the request payment configuration of a bucket</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putbuckettagging"><a aria-hidden="true" class="anchor-heading" href="#putbuckettagging"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutBucketTagging</h3>
<ul>
<li>description: Grants permission to add a set of tags to an existing Amazon S3 bucket</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putbucketversioning"><a aria-hidden="true" class="anchor-heading" href="#putbucketversioning"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutBucketVersioning</h3>
<ul>
<li>description: Grants permission to set the versioning state of an existing Amazon S3 bucket</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putbucketwebsite"><a aria-hidden="true" class="anchor-heading" href="#putbucketwebsite"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutBucketWebsite</h3>
<ul>
<li>description: Grants permission to set the configuration of the website that is specified in the website subresource</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putencryptionconfiguration"><a aria-hidden="true" class="anchor-heading" href="#putencryptionconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutEncryptionConfiguration</h3>
<ul>
<li>description: Grants permission to set the encryption configuration for an Amazon S3 bucket</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putinventoryconfiguration"><a aria-hidden="true" class="anchor-heading" href="#putinventoryconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutInventoryConfiguration</h3>
<ul>
<li>description: Grants permission to add an inventory configuration to the bucket, identified by the inventory ID</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putjobtagging"><a aria-hidden="true" class="anchor-heading" href="#putjobtagging"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutJobTagging</h3>
<ul>
<li>description: Grants permission to replace tags on an existing Amazon S3 Batch Operations job</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "job": {
        "resource_type": "job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256",
            "s3:ExistingJobPriority",
            "s3:ExistingJobOperation",
            "aws:TagKeys",
            "aws:RequestTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putlifecycleconfiguration"><a aria-hidden="true" class="anchor-heading" href="#putlifecycleconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutLifecycleConfiguration</h3>
<ul>
<li>description: Grants permission to create a new lifecycle configuration for the bucket or replace an existing lifecycle configuration</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putmetricsconfiguration"><a aria-hidden="true" class="anchor-heading" href="#putmetricsconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutMetricsConfiguration</h3>
<ul>
<li>description: Grants permission to set or update a metrics configuration for the CloudWatch request metrics from an Amazon S3 bucket</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putobject"><a aria-hidden="true" class="anchor-heading" href="#putobject"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutObject</h3>
<ul>
<li>description: Grants permission to add an object to a bucket</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "object": {
        "resource_type": "object",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:DataAccessPointAccount",
            "s3:DataAccessPointArn",
            "s3:AccessPointNetworkOrigin",
            "s3:RequestObjectTag/&#x3C;key>",
            "s3:RequestObjectTagKeys",
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-acl",
            "s3:x-amz-content-sha256",
            "s3:x-amz-copy-source",
            "s3:x-amz-grant-full-control",
            "s3:x-amz-grant-read",
            "s3:x-amz-grant-read-acp",
            "s3:x-amz-grant-write",
            "s3:x-amz-grant-write-acp",
            "s3:x-amz-metadata-directive",
            "s3:x-amz-server-side-encryption",
            "s3:x-amz-server-side-encryption-aws-kms-key-id",
            "s3:x-amz-storage-class",
            "s3:x-amz-website-redirect-location",
            "s3:object-lock-mode",
            "s3:object-lock-retain-until-date",
            "s3:object-lock-remaining-retention-days",
            "s3:object-lock-legal-hold"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putobjectacl"><a aria-hidden="true" class="anchor-heading" href="#putobjectacl"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutObjectAcl</h3>
<ul>
<li>description: Grants permission to set the access control list (ACL) permissions for new or existing objects in an S3 bucket.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "object": {
        "resource_type": "object",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:DataAccessPointAccount",
            "s3:DataAccessPointArn",
            "s3:AccessPointNetworkOrigin",
            "s3:ExistingObjectTag/&#x3C;key>",
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-acl",
            "s3:x-amz-content-sha256",
            "s3:x-amz-grant-full-control",
            "s3:x-amz-grant-read",
            "s3:x-amz-grant-read-acp",
            "s3:x-amz-grant-write",
            "s3:x-amz-grant-write-acp",
            "s3:x-amz-storage-class"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putobjectlegalhold"><a aria-hidden="true" class="anchor-heading" href="#putobjectlegalhold"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutObjectLegalHold</h3>
<ul>
<li>description: Grants permission to apply a Legal Hold configuration to the specified object</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "object": {
        "resource_type": "object",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:DataAccessPointAccount",
            "s3:DataAccessPointArn",
            "s3:AccessPointNetworkOrigin",
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256",
            "s3:object-lock-legal-hold"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putobjectretention"><a aria-hidden="true" class="anchor-heading" href="#putobjectretention"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutObjectRetention</h3>
<ul>
<li>description: Grants permission to place an Object Retention configuration on an object</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "object": {
        "resource_type": "object",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:DataAccessPointAccount",
            "s3:DataAccessPointArn",
            "s3:AccessPointNetworkOrigin",
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256",
            "s3:object-lock-mode",
            "s3:object-lock-retain-until-date",
            "s3:object-lock-remaining-retention-days"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putobjecttagging"><a aria-hidden="true" class="anchor-heading" href="#putobjecttagging"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutObjectTagging</h3>
<ul>
<li>description: Grants permission to set the supplied tag-set to an object that already exists in a bucket</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "object": {
        "resource_type": "object",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:DataAccessPointAccount",
            "s3:DataAccessPointArn",
            "s3:AccessPointNetworkOrigin",
            "s3:ExistingObjectTag/&#x3C;key>",
            "s3:RequestObjectTag/&#x3C;key>",
            "s3:RequestObjectTagKeys",
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putobjectversionacl"><a aria-hidden="true" class="anchor-heading" href="#putobjectversionacl"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutObjectVersionAcl</h3>
<ul>
<li>description: Grants permission to use the acl subresource to set the access control list (ACL) permissions for an object that already exists in a bucket</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "object": {
        "resource_type": "object",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:DataAccessPointAccount",
            "s3:DataAccessPointArn",
            "s3:AccessPointNetworkOrigin",
            "s3:ExistingObjectTag/&#x3C;key>",
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:versionid",
            "s3:x-amz-acl",
            "s3:x-amz-content-sha256",
            "s3:x-amz-grant-full-control",
            "s3:x-amz-grant-read",
            "s3:x-amz-grant-read-acp",
            "s3:x-amz-grant-write",
            "s3:x-amz-grant-write-acp",
            "s3:x-amz-storage-class"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putobjectversiontagging"><a aria-hidden="true" class="anchor-heading" href="#putobjectversiontagging"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutObjectVersionTagging</h3>
<ul>
<li>description: Grants permission to set the supplied tag-set for a specific version of an object</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "object": {
        "resource_type": "object",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:DataAccessPointAccount",
            "s3:DataAccessPointArn",
            "s3:AccessPointNetworkOrigin",
            "s3:ExistingObjectTag/&#x3C;key>",
            "s3:RequestObjectTag/&#x3C;key>",
            "s3:RequestObjectTagKeys",
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:versionid",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putreplicationconfiguration"><a aria-hidden="true" class="anchor-heading" href="#putreplicationconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutReplicationConfiguration</h3>
<ul>
<li>description: Grants permission to create a new replication configuration or replace an existing one</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="replicatedelete"><a aria-hidden="true" class="anchor-heading" href="#replicatedelete"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ReplicateDelete</h3>
<ul>
<li>description: Grants permission to replicate delete markers to the destination bucket</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "object": {
        "resource_type": "object",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="replicateobject"><a aria-hidden="true" class="anchor-heading" href="#replicateobject"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ReplicateObject</h3>
<ul>
<li>description: Grants permission to replicate objects and object tags to the destination bucket</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "object": {
        "resource_type": "object",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256",
            "s3:x-amz-server-side-encryption",
            "s3:x-amz-server-side-encryption-aws-kms-key-id"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="replicatetags"><a aria-hidden="true" class="anchor-heading" href="#replicatetags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ReplicateTags</h3>
<ul>
<li>description: Grants permission to replicate object tags to the destination bucket</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "object": {
        "resource_type": "object",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="restoreobject"><a aria-hidden="true" class="anchor-heading" href="#restoreobject"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RestoreObject</h3>
<ul>
<li>description: Grants permission to restore an archived copy of an object back into Amazon S3</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "object": {
        "resource_type": "object",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:DataAccessPointAccount",
            "s3:DataAccessPointArn",
            "s3:AccessPointNetworkOrigin",
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatejobpriority"><a aria-hidden="true" class="anchor-heading" href="#updatejobpriority"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateJobPriority</h3>
<ul>
<li>description: Grants permission to update the priority of an existing job</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "job": {
        "resource_type": "job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256",
            "s3:RequestJobPriority",
            "s3:ExistingJobPriority",
            "s3:ExistingJobOperation"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatejobstatus"><a aria-hidden="true" class="anchor-heading" href="#updatejobstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateJobStatus</h3>
<ul>
<li>description: Grants permission to update the status for the specified job</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "job": {
        "resource_type": "job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3:authType",
            "s3:signatureAge",
            "s3:signatureversion",
            "s3:x-amz-content-sha256",
            "s3:ExistingJobPriority",
            "s3:ExistingJobOperation",
            "s3:JobSuspendedCause"
        ],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Simple Storage Service"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/lambda.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Lambda - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/lambda.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/lambda.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/lambda.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Lambda - undefined" />
  <meta name="twitter:title" content="Lambda - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/1f759d8c-cca7-4fc4-9aa2-6dbf6e596abf.html">Services</a></li><li class="breadcrumb-nav-list-item">Lambda</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/open-guides/og-aws" target="_blank"> og-aws  </li>
              
              <li> <a href="https://www.awsgeek.com/" target="_blank"> <NAME>  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Lambda">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <p><img src="/assets/images/AWS-Lambda_en.jpg"></p>
<blockquote>
<p>Image from <a href="https://www.awsgeek.com/AWS-Lambda/">@awsgeek</a></p>
</blockquote>
<h1 id="lambda"><a aria-hidden="true" class="anchor-heading" href="#lambda"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Lambda</h1>
<h3 id="lambda-basics"><a aria-hidden="true" class="anchor-heading" href="#lambda-basics"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Lambda Basics</h3>
<ul>
<li>📒 <a href="https://aws.amazon.com/lambda/">Homepage</a> ∙ <a href="http://docs.aws.amazon.com/lambda/latest/dg/">Developer guide</a> ∙ <a href="https://aws.amazon.com/lambda/faqs/">FAQ</a> ∙ <a href="https://aws.amazon.com/lambda/pricing/">Pricing</a></li>
<li><strong>Lambda</strong> is AWS' serverless compute offering, allowing users to define Lambda functions in a selection of runtimes that can be invoked via a variety of triggers, including SNS notifications and API Gateway invocations. Lambda is the key service that enables <a href="https://aws.amazon.com/lambda/serverless-architectures-learn-more/">'serverless' architecture on AWS</a>, alongside AWS API Gateway, AWS Batch, and AWS DynamoDB.</li>
</ul>
<h3 id="lambda-tips"><a aria-hidden="true" class="anchor-heading" href="#lambda-tips"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Lambda Tips</h3>
<ul>
<li>The idea behind 'serverless' is that users don't manage provisioning, scaling, or maintenance of the physical machines that host their application code. With Lambda, the machine that actually executes the user-defined function is abstracted as a <a href="http://docs.aws.amazon.com/lambda/latest/dg/lambda-introduction.html">'container'</a>. When defining a Lambda function, users are able to declare the amount of memory available to the function, which directly affects the physical hardware specification of the Lambda container.</li>
<li>Changing the amount of memory available to your Lambda functions also affects the amount of <a href="https://aws.amazon.com/lambda/faqs/">CPU power</a> available to it.</li>
<li>While AWS does not offer hard guarantees around container reuse, in general it can be expected that an unaltered Lambda function will reuse a warm (previously used) container if called shortly after another invocation. Users can use this as a way to optimize their functions by smartly caching application data on initialization.</li>
<li>A Lambda that hasn't been invoked in some time may not have any warm containers left. In this case, the Lambda system will have to load and initialize the Lambda code in a 'cold start' scenario, which can add significant latency to Lambda invocations.  Lambda cold start performance <a href="https://levelup.gitconnected.com/aws-lambda-cold-start-language-comparisons-2019-edition-%EF%B8%8F-1946d32a0244">has improved significantly over the 2018-2019 timeframe</a> and is now typically in the range of 200-500 ms for a simple function depending on the language runtime.  </li>
<li>Lambda functions running insides of VPCs have also seen <a href="https://aws.amazon.com/blogs/compute/announcing-improved-vpc-networking-for-aws-lambda-functions/">recent improvements</a> to cold start times.  Previously these VPC-hosted functions would have cold starts of ~15 seconds; now those same functions cold start in &#x3C; 1 second.   </li>
<li>There are a few strategies to avoiding or mitigating cold starts.  <a href="https://aws.amazon.com/blogs/aws/new-provisioned-concurrency-for-lambda-functions/">Provisioned concurrency</a> was announced at re:invent 2019 and is an effective means to eliminating cold starts. Other techniques include keeping containers warm by periodic triggering and favoring lightweight runtimes such as Node as opposed to Java.</li>
<li>Lambda is integrated with AWS CloudWatch and provides a logger at runtime that publishes CloudWatch events.</li>
<li>Lambda offers out-of-the-box opt-in support for AWS X-Ray. X-Ray can help users diagnose Lambda issues by offering in-depth analysis of their Lambda's execution flow. This is especially useful when investigating issues calling other AWS services as X-Ray gives you a detailed and easy-to-parse <a href="http://docs.aws.amazon.com/lambda/latest/dg/lambda-x-ray.html#lambda-service-map">visualization of the call graph</a>.</li>
<li>Using <a href="http://docs.aws.amazon.com/AmazonCloudWatch/latest/events/ScheduledEvents.html#CronExpressions">timed CloudWatch events</a>, users can use Lambda to run periodic jobs in a cron-like manner.</li>
<li>Events sent to Lambda that fail processing can be managed using a <a href="http://docs.aws.amazon.com/lambda/latest/dg/dlq.html">Dead Letter Queue (DLQ) in SQS.</a></li>
<li>More on serverless:
<ul>
<li><a href="http://martinfowler.com/articles/serverless.html">Martin Fowler's thoughts.</a></li>
<li><a href="https://github.com/awslabs/serverless-application-model">AWS Serverless Application Model (SAM)</a>, a simplification built on top of CloudFormation that can help to define, manage, and deploy serverless applications using Lambda.</li>
<li><a href="https://github.com/serverless/serverless">Serverless</a>, one of the most popular frameworks for building serverless applications using AWS Lambda and other serverless compute options.</li>
<li><a href="https://github.com/anaibol/awesome-serverless#frameworks">Other helpful frameworks.</a></li>
</ul>
</li>
</ul>
<h3 id="lambda-alternatives-and-lock-in"><a aria-hidden="true" class="anchor-heading" href="#lambda-alternatives-and-lock-in"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Lambda Alternatives and Lock-in</h3>
<ul>
<li>🚪Other clouds offer similar services with different names, including <a href="https://cloud.google.com/functions/">Google Cloud Functions</a>, <a href="https://azure.microsoft.com/en-us/services/functions/">Azure Functions</a>, and <a href="http://www.ibm.com/cloud-computing/bluemix/openwhisk/">IBM OpenWhisk</a>. Also if you are running Kubernetes another Lambda alternative is <a href="https://github.com/openfaas/faas">OpenFaaS</a></li>
</ul>
<h3 id="lambda-gotchas-and-limitations"><a aria-hidden="true" class="anchor-heading" href="#lambda-gotchas-and-limitations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Lambda Gotchas and Limitations</h3>
<ul>
<li>🔸Testing Lambdas, locally and remotely, can be a challenge. Several tools are available to make this easier, including the officially supported <a href="https://github.com/awslabs/aws-sam-local">SAM Local</a>.</li>
<li>🔸Managing lots of Lambda functions is a workflow challenge, and tooling to manage Lambda deployments is still immature.</li>
<li>🔸AWS’ official workflow around managing function <a href="https://docs.aws.amazon.com/lambda/latest/dg/versioning-aliases.html">versioning and aliases</a> is painful. One option is to avoid Lambda versioning by abstracting your deployment workflow outside of Lambda. One way this can be accomplished is by deploying your application in successive stages, with a distinct AWS account per stage, where each account only needs to be aware of the latest version, and rollbacks and updates are handled by external tooling.</li>
<li>🔸As of Oct 2017, the minimum charge for a Lambda invocation is 100ms, so there is no cost-benefit to reducing your run time below that.</li>
<li>🔸While adding/removing S3 buckets as triggers for Lambda function, this error may occur: "There was an error creating the trigger: Configuration is ambiguously defined. Cannot have overlapping suffixes in two rules if the prefixes are overlapping for the same event type." In this case, you can manually remove the Lambda event in the "Events" tab in the "Properties" section of the S3 bucket.</li>
<li>🔸Managing the size of your deployment artifact can be a challenge, especially if using Java. Options to mitigate this include <a href="https://www.guardsquare.com/en/proguard">proguard</a> and loading dependencies at runtime into /tmp.</li>
<li>When using DynamoDB as a trigger for your Lambda functions, this error may occur: "PROBLEM: internal Lambda error. Please contact Lambda customer support." This usually just means that Lambda can't detect anything in the DynamoDB stream within the last 48 hours. If the issue persists, deleting and recreating your trigger may help.</li>
<li>🔸If your lambda needs access to resources in a VPC (for example ElastiCache or RDS), it will need to be deployed within it. This will increase cold-start times as an Elastic Network Interface (ENI) will have to be registered within the VPC for each concurrent function. AWS also has a relatively low initial limit (350) on the number ENI's that can be created within an VPC, however this can be increased to the 1000s if a good case is made to AWS support.</li>
<li>🔸 Lambda has several <a href="http://docs.aws.amazon.com/lambda/latest/dg/limits.html"><strong>resource limits</strong></a> as of 2017-06:
<ul>
<li>A <strong>6MB</strong> request or response payload size.</li>
<li>A <strong>50 MB</strong> limit on the compressed .zip/.jar file deployment package size.</li>
<li>A <strong>250 MB</strong> limit on the code/dependencies in the package before compression.</li>
<li>A <strong>500 MB</strong> limit on local storage in /tmp.</li>
</ul>
</li>
</ul>
<h3 id="lambda-code-samples"><a aria-hidden="true" class="anchor-heading" href="#lambda-code-samples"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Lambda Code Samples</h3>
<ul>
<li><a href="https://github.com/awslabs/aws-lambda-fanout">Fan-out</a> is an example of using Lambda to “fan-out” or copy data from one service, in this case Kinesis, to multiple other AWS data services. Destinations for fan-out data in the sample include IoT, SQS and more.</li>
<li>This <a href="https://github.com/awslabs/aws-limit-monitor">AWS limit monitor using Lambdas</a> shows use of multiple Lambdas for monitoring.</li>
<li>This <a href="https://github.com/awslabs/lambda-ecs-worker-pattern">Lambda ECS Worker Pattern</a> shows use of Lambda in a workflow where data from S3 is picked up by the Lambda, pushed to a queue, then sent to ECS for more processing.</li>
<li>The <a href="https://github.com/awslabs/api-gateway-secure-pet-store">Secure Pet Store</a> is a sample Java application which uses Lambda and API Gateway with Cognito (for user identity).</li>
<li><a href="https://github.com/unixorn/aws-lambda-list">aws-lambda-list</a> is a list of "hopefully useful AWS lambdas and lambda-related resources". Quite a few code samples here; as usual, not guaranteed tested. Caveat Emptor.</li>
</ul>
<p>🚧 <a href="CONTRIBUTING.md"><em>Please help expand this incomplete section.</em></a></p><span id="navId" data="lambda"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Storage Gateway.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Storage Gateway - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Storage Gateway.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Storage Gateway.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Storage Gateway.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Storage Gateway - undefined" />
  <meta name="twitter:title" content="Storage Gateway - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Storage Gateway</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Storage Gateway">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="storage-gateway"><a aria-hidden="true" class="anchor-heading" href="#storage-gateway"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Storage Gateway</h1>
<ul>
<li>prefix: storagegateway</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="activategateway"><a aria-hidden="true" class="anchor-heading" href="#activategateway"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ActivateGateway</h3>
<ul>
<li>description: This operation activates the gateway you previously deployed on your host.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="addcache"><a aria-hidden="true" class="anchor-heading" href="#addcache"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddCache</h3>
<ul>
<li>description: This operation configures one or more gateway local disks as cache for a cached-volume gateway.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="addtagstoresource"><a aria-hidden="true" class="anchor-heading" href="#addtagstoresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddTagsToResource</h3>
<ul>
<li>description: This operation adds one or more tags to the specified resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "share": {
        "resource_type": "share",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "tape": {
        "resource_type": "tape",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "volume": {
        "resource_type": "volume",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="adduploadbuffer"><a aria-hidden="true" class="anchor-heading" href="#adduploadbuffer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddUploadBuffer</h3>
<ul>
<li>description: This operation configures one or more gateway local disks as upload buffer for a specified gateway.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="addworkingstorage"><a aria-hidden="true" class="anchor-heading" href="#addworkingstorage"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddWorkingStorage</h3>
<ul>
<li>description: This operation configures one or more gateway local disks as working storage for a gateway.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="attachvolume"><a aria-hidden="true" class="anchor-heading" href="#attachvolume"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AttachVolume</h3>
<ul>
<li>description: This operation connects a volume to an iSCSI connection and then attaches the volume to the specified gateway.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "volume": {
        "resource_type": "volume",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="cancelarchival"><a aria-hidden="true" class="anchor-heading" href="#cancelarchival"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CancelArchival</h3>
<ul>
<li>description: Cancels archiving of a virtual tape to the virtual tape shelf (VTS) after the archiving process is initiated.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "tape": {
        "resource_type": "tape",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="cancelretrieval"><a aria-hidden="true" class="anchor-heading" href="#cancelretrieval"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CancelRetrieval</h3>
<ul>
<li>description: Cancels retrieval of a virtual tape from the virtual tape shelf (VTS) to a gateway after the retrieval process is initiated.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "tape": {
        "resource_type": "tape",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createcachediscsivolume"><a aria-hidden="true" class="anchor-heading" href="#createcachediscsivolume"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateCachediSCSIVolume</h3>
<ul>
<li>description: This operation creates a cached volume on a specified cached gateway. This operation is supported only for the gateway-cached volume architecture.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "volume": {
        "resource_type": "volume",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createnfsfileshare"><a aria-hidden="true" class="anchor-heading" href="#createnfsfileshare"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateNFSFileShare</h3>
<ul>
<li>description: This operation creates a NFS file share on an existing file gateway.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createsmbfileshare"><a aria-hidden="true" class="anchor-heading" href="#createsmbfileshare"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSMBFileShare</h3>
<ul>
<li>description: This operation creates a SMB file share on an existing file gateway.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createsnapshot"><a aria-hidden="true" class="anchor-heading" href="#createsnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSnapshot</h3>
<ul>
<li>description: This operation initiates a snapshot of a volume.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "volume": {
        "resource_type": "volume",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createsnapshotfromvolumerecoverypoint"><a aria-hidden="true" class="anchor-heading" href="#createsnapshotfromvolumerecoverypoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSnapshotFromVolumeRecoveryPoint</h3>
<ul>
<li>description: This operation initiates a snapshot of a gateway from a volume recovery point.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "volume": {
        "resource_type": "volume",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createstorediscsivolume"><a aria-hidden="true" class="anchor-heading" href="#createstorediscsivolume"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateStorediSCSIVolume</h3>
<ul>
<li>description: This operation creates a volume on a specified gateway.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtapewithbarcode"><a aria-hidden="true" class="anchor-heading" href="#createtapewithbarcode"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTapeWithBarcode</h3>
<ul>
<li>description: Creates a virtual tape by using your own barcode.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtapes"><a aria-hidden="true" class="anchor-heading" href="#createtapes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTapes</h3>
<ul>
<li>description: Creates one or more virtual tapes. You write data to the virtual tapes and then archive the tapes.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletebandwidthratelimit"><a aria-hidden="true" class="anchor-heading" href="#deletebandwidthratelimit"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteBandwidthRateLimit</h3>
<ul>
<li>description: This operation deletes the bandwidth rate limits of a gateway.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletechapcredentials"><a aria-hidden="true" class="anchor-heading" href="#deletechapcredentials"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteChapCredentials</h3>
<ul>
<li>description: This operation deletes Challenge-Handshake Authentication Protocol (CHAP) credentials for a specified iSCSI target and initiator pair.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "target": {
        "resource_type": "target",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletefileshare"><a aria-hidden="true" class="anchor-heading" href="#deletefileshare"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteFileShare</h3>
<ul>
<li>description: This operation deletes a file share from a file gateway.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "share": {
        "resource_type": "share",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletegateway"><a aria-hidden="true" class="anchor-heading" href="#deletegateway"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteGateway</h3>
<ul>
<li>description: This operation deletes a gateway.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletesnapshotschedule"><a aria-hidden="true" class="anchor-heading" href="#deletesnapshotschedule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteSnapshotSchedule</h3>
<ul>
<li>description: This operation deletes a snapshot of a volume.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "volume": {
        "resource_type": "volume",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetape"><a aria-hidden="true" class="anchor-heading" href="#deletetape"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTape</h3>
<ul>
<li>description: Deletes the specified virtual tape.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "tape": {
        "resource_type": "tape",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetapearchive"><a aria-hidden="true" class="anchor-heading" href="#deletetapearchive"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTapeArchive</h3>
<ul>
<li>description: Deletes the specified virtual tape from the virtual tape shelf (VTS).</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletevolume"><a aria-hidden="true" class="anchor-heading" href="#deletevolume"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteVolume</h3>
<ul>
<li>description: This operation deletes the specified gateway volume that you previously created using the CreateCachediSCSIVolume or CreateStorediSCSIVolume API.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "volume": {
        "resource_type": "volume",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describebandwidthratelimit"><a aria-hidden="true" class="anchor-heading" href="#describebandwidthratelimit"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeBandwidthRateLimit</h3>
<ul>
<li>description: This operation returns the bandwidth rate limits of a gateway.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecache"><a aria-hidden="true" class="anchor-heading" href="#describecache"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeCache</h3>
<ul>
<li>description: This operation returns information about the cache of a gateway. This operation is supported only for the gateway-cached volume architecture.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecachediscsivolumes"><a aria-hidden="true" class="anchor-heading" href="#describecachediscsivolumes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeCachediSCSIVolumes</h3>
<ul>
<li>description: This operation returns a description of the gateway volumes specified in the request. This operation is supported only for the gateway-cached volume architecture.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "volume": {
        "resource_type": "volume",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describechapcredentials"><a aria-hidden="true" class="anchor-heading" href="#describechapcredentials"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeChapCredentials</h3>
<ul>
<li>description: This operation returns an array of Challenge-Handshake Authentication Protocol (CHAP) credentials information for a specified iSCSI target, one for each target-initiator pair.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "target": {
        "resource_type": "target",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describegatewayinformation"><a aria-hidden="true" class="anchor-heading" href="#describegatewayinformation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeGatewayInformation</h3>
<ul>
<li>description: This operation returns metadata about a gateway such as its name, network interfaces, configured time zone, and the state (whether the gateway is running or not).</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describemaintenancestarttime"><a aria-hidden="true" class="anchor-heading" href="#describemaintenancestarttime"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeMaintenanceStartTime</h3>
<ul>
<li>description: This operation returns your gateway's weekly maintenance start time including the day and time of the week.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describenfsfileshares"><a aria-hidden="true" class="anchor-heading" href="#describenfsfileshares"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeNFSFileShares</h3>
<ul>
<li>description: This operation gets a description for one or more file shares from a file gateway.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "share": {
        "resource_type": "share",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describesmbfileshares"><a aria-hidden="true" class="anchor-heading" href="#describesmbfileshares"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSMBFileShares</h3>
<ul>
<li>description: This operation gets a description for one or more file shares from a file gateway.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "share": {
        "resource_type": "share",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describesmbsettings"><a aria-hidden="true" class="anchor-heading" href="#describesmbsettings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSMBSettings</h3>
<ul>
<li>description: This operation gets a description of a Server Message Block (SMB) file share settings from a file gateway.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describesnapshotschedule"><a aria-hidden="true" class="anchor-heading" href="#describesnapshotschedule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSnapshotSchedule</h3>
<ul>
<li>description: This operation describes the snapshot schedule for the specified gateway volume.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "volume": {
        "resource_type": "volume",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describestorediscsivolumes"><a aria-hidden="true" class="anchor-heading" href="#describestorediscsivolumes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeStorediSCSIVolumes</h3>
<ul>
<li>description: This operation returns the description of the gateway volumes specified in the request.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "volume": {
        "resource_type": "volume",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetapearchives"><a aria-hidden="true" class="anchor-heading" href="#describetapearchives"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTapeArchives</h3>
<ul>
<li>description: Returns a description of specified virtual tapes in the virtual tape shelf (VTS).</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetaperecoverypoints"><a aria-hidden="true" class="anchor-heading" href="#describetaperecoverypoints"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTapeRecoveryPoints</h3>
<ul>
<li>description: Returns a list of virtual tape recovery points that are available for the specified gateway-VTL.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetapes"><a aria-hidden="true" class="anchor-heading" href="#describetapes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTapes</h3>
<ul>
<li>description: Returns a description of the specified Amazon Resource Name (ARN) of virtual tapes.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeuploadbuffer"><a aria-hidden="true" class="anchor-heading" href="#describeuploadbuffer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeUploadBuffer</h3>
<ul>
<li>description: This operation returns information about the upload buffer of a gateway.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describevtldevices"><a aria-hidden="true" class="anchor-heading" href="#describevtldevices"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeVTLDevices</h3>
<ul>
<li>description: Returns a description of virtual tape library (VTL) devices for the specified gateway.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeworkingstorage"><a aria-hidden="true" class="anchor-heading" href="#describeworkingstorage"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeWorkingStorage</h3>
<ul>
<li>description: This operation returns information about the working storage of a gateway.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="detachvolume"><a aria-hidden="true" class="anchor-heading" href="#detachvolume"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DetachVolume</h3>
<ul>
<li>description: This operation disconnects a volume from an iSCSI connection and then detaches the volume from the specified gateway.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "volume": {
        "resource_type": "volume",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disablegateway"><a aria-hidden="true" class="anchor-heading" href="#disablegateway"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisableGateway</h3>
<ul>
<li>description: Disables a gateway when the gateway is no longer functioning.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="joindomain"><a aria-hidden="true" class="anchor-heading" href="#joindomain"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>JoinDomain</h3>
<ul>
<li>description: This operation enables you to join an Active Directory Domain.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listfileshares"><a aria-hidden="true" class="anchor-heading" href="#listfileshares"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListFileShares</h3>
<ul>
<li>description: This operation gets a list of the file shares for a specific file gateway, or the list of file shares that belong to the calling user account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listgateways"><a aria-hidden="true" class="anchor-heading" href="#listgateways"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListGateways</h3>
<ul>
<li>description: This operation lists gateways owned by an AWS account in a region specified in the request. The returned list is ordered by gateway Amazon Resource Name (ARN).</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listlocaldisks"><a aria-hidden="true" class="anchor-heading" href="#listlocaldisks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListLocalDisks</h3>
<ul>
<li>description: This operation returns a list of the gateway's local disks.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: This operation lists the tags that have been added to the specified resource.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "share": {
        "resource_type": "share",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "tape": {
        "resource_type": "tape",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "volume": {
        "resource_type": "volume",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtapes"><a aria-hidden="true" class="anchor-heading" href="#listtapes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTapes</h3>
<ul>
<li>description: Lists virtual tapes in your virtual tape library (VTL) and your virtual tape shelf (VTS).</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "tape": {
        "resource_type": "tape",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listvolumeinitiators"><a aria-hidden="true" class="anchor-heading" href="#listvolumeinitiators"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListVolumeInitiators</h3>
<ul>
<li>description: This operation lists iSCSI initiators that are connected to a volume.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "volume": {
        "resource_type": "volume",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listvolumerecoverypoints"><a aria-hidden="true" class="anchor-heading" href="#listvolumerecoverypoints"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListVolumeRecoveryPoints</h3>
<ul>
<li>description: This operation lists the recovery points for a specified gateway.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listvolumes"><a aria-hidden="true" class="anchor-heading" href="#listvolumes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListVolumes</h3>
<ul>
<li>description: This operation lists the iSCSI stored volumes of a gateway.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="notifywhenuploaded"><a aria-hidden="true" class="anchor-heading" href="#notifywhenuploaded"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>NotifyWhenUploaded</h3>
<ul>
<li>description: This action sends you a notification through CloudWatch Events when all files written to your NFS file share have been uploaded to Amazon S3.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "share": {
        "resource_type": "share",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="refreshcache"><a aria-hidden="true" class="anchor-heading" href="#refreshcache"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RefreshCache</h3>
<ul>
<li>description: This operation refreshes the cache for the specified file share.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "share": {
        "resource_type": "share",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="removetagsfromresource"><a aria-hidden="true" class="anchor-heading" href="#removetagsfromresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemoveTagsFromResource</h3>
<ul>
<li>description: This operation removes one or more tags from the specified resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "share": {
        "resource_type": "share",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "tape": {
        "resource_type": "tape",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "volume": {
        "resource_type": "volume",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="resetcache"><a aria-hidden="true" class="anchor-heading" href="#resetcache"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ResetCache</h3>
<ul>
<li>description: This operation resets all cache disks that have encountered a error and makes the disks available for reconfiguration as cache storage.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="retrievetapearchive"><a aria-hidden="true" class="anchor-heading" href="#retrievetapearchive"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RetrieveTapeArchive</h3>
<ul>
<li>description: Retrieves an archived virtual tape from the virtual tape shelf (VTS) to a gateway-VTL.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "tape": {
        "resource_type": "tape",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="retrievetaperecoverypoint"><a aria-hidden="true" class="anchor-heading" href="#retrievetaperecoverypoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RetrieveTapeRecoveryPoint</h3>
<ul>
<li>description: Retrieves the recovery point for the specified virtual tape.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "tape": {
        "resource_type": "tape",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setlocalconsolepassword"><a aria-hidden="true" class="anchor-heading" href="#setlocalconsolepassword"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetLocalConsolePassword</h3>
<ul>
<li>description: Sets the password for your VM local console.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setsmbguestpassword"><a aria-hidden="true" class="anchor-heading" href="#setsmbguestpassword"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetSMBGuestPassword</h3>
<ul>
<li>description: Sets the password for SMB Guest user.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="shutdowngateway"><a aria-hidden="true" class="anchor-heading" href="#shutdowngateway"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ShutdownGateway</h3>
<ul>
<li>description: This operation shuts down a gateway.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startgateway"><a aria-hidden="true" class="anchor-heading" href="#startgateway"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartGateway</h3>
<ul>
<li>description: This operation starts a gateway that you previously shut down.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatebandwidthratelimit"><a aria-hidden="true" class="anchor-heading" href="#updatebandwidthratelimit"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateBandwidthRateLimit</h3>
<ul>
<li>description: This operation updates the bandwidth rate limits of a gateway.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatechapcredentials"><a aria-hidden="true" class="anchor-heading" href="#updatechapcredentials"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateChapCredentials</h3>
<ul>
<li>description: This operation updates the Challenge-Handshake Authentication Protocol (CHAP) credentials for a specified iSCSI target.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "target": {
        "resource_type": "target",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updategatewayinformation"><a aria-hidden="true" class="anchor-heading" href="#updategatewayinformation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateGatewayInformation</h3>
<ul>
<li>description: This operation updates a gateway's metadata, which includes the gateway's name and time zone.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updategatewaysoftwarenow"><a aria-hidden="true" class="anchor-heading" href="#updategatewaysoftwarenow"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateGatewaySoftwareNow</h3>
<ul>
<li>description: This operation updates the gateway virtual machine (VM) software.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatemaintenancestarttime"><a aria-hidden="true" class="anchor-heading" href="#updatemaintenancestarttime"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateMaintenanceStartTime</h3>
<ul>
<li>description: This operation updates a gateway's weekly maintenance start time information, including day and time of the week. The maintenance time is the time in your gateway's time zone.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatenfsfileshare"><a aria-hidden="true" class="anchor-heading" href="#updatenfsfileshare"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateNFSFileShare</h3>
<ul>
<li>description: This operation updates a NFS file share.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "share": {
        "resource_type": "share",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatesmbfileshare"><a aria-hidden="true" class="anchor-heading" href="#updatesmbfileshare"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateSMBFileShare</h3>
<ul>
<li>description: This operation updates a SMB file share.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "share": {
        "resource_type": "share",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatesnapshotschedule"><a aria-hidden="true" class="anchor-heading" href="#updatesnapshotschedule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateSnapshotSchedule</h3>
<ul>
<li>description: This operation updates a snapshot schedule configured for a gateway volume.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "volume": {
        "resource_type": "volume",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatevtldevicetype"><a aria-hidden="true" class="anchor-heading" href="#updatevtldevicetype"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateVTLDeviceType</h3>
<ul>
<li>description: This operation updates the type of medium changer in a gateway-VTL.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "device": {
        "resource_type": "device",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Storage Gateway"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-IoT SiteWise.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>IoT SiteWise - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-IoT SiteWise.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-IoT SiteWise.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-IoT SiteWise.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="IoT SiteWise - undefined" />
  <meta name="twitter:title" content="IoT SiteWise - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">IoT SiteWise</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="IoT SiteWise">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="iot-sitewise"><a aria-hidden="true" class="anchor-heading" href="#iot-sitewise"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>IoT SiteWise</h1>
<ul>
<li>prefix: iotsitewise</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="associateassets"><a aria-hidden="true" class="anchor-heading" href="#associateassets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateAssets</h3>
<ul>
<li>description: Grants permission to associate a child asset to a parent asset by a hierarchy</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "asset": {
        "resource_type": "asset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchassociateprojectassets"><a aria-hidden="true" class="anchor-heading" href="#batchassociateprojectassets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchAssociateProjectAssets</h3>
<ul>
<li>description: Grants permission to associate assets to a project</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchdisassociateprojectassets"><a aria-hidden="true" class="anchor-heading" href="#batchdisassociateprojectassets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchDisassociateProjectAssets</h3>
<ul>
<li>description: Grants permission to disassociate assets from a project</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchputassetpropertyvalue"><a aria-hidden="true" class="anchor-heading" href="#batchputassetpropertyvalue"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchPutAssetPropertyValue</h3>
<ul>
<li>description: Grants permission to put property values for asset properties</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "asset": {
        "resource_type": "asset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createaccesspolicy"><a aria-hidden="true" class="anchor-heading" href="#createaccesspolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateAccessPolicy</h3>
<ul>
<li>description: Grants permission to create an access policy for a portal or a project</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "portal": {
        "resource_type": "portal",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "project": {
        "resource_type": "project",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createasset"><a aria-hidden="true" class="anchor-heading" href="#createasset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateAsset</h3>
<ul>
<li>description: Grants permission to create an asset from an asset model</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "asset-model": {
        "resource_type": "asset-model",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createassetmodel"><a aria-hidden="true" class="anchor-heading" href="#createassetmodel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateAssetModel</h3>
<ul>
<li>description: Grants permission to create an asset model</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdashboard"><a aria-hidden="true" class="anchor-heading" href="#createdashboard"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDashboard</h3>
<ul>
<li>description: Grants permission to create a dashboard in a project</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="creategateway"><a aria-hidden="true" class="anchor-heading" href="#creategateway"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateGateway</h3>
<ul>
<li>description: Grants permission to create a gateway</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createportal"><a aria-hidden="true" class="anchor-heading" href="#createportal"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreatePortal</h3>
<ul>
<li>description: Grants permission to create a portal</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": [
            "sso:CreateManagedApplicationInstance",
            "sso:DescribeRegisteredRegions"
        ]
    }
}
</code></pre>
<h3 id="createproject"><a aria-hidden="true" class="anchor-heading" href="#createproject"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateProject</h3>
<ul>
<li>description: Grants permission to create a project in a portal</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "portal": {
        "resource_type": "portal",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteaccesspolicy"><a aria-hidden="true" class="anchor-heading" href="#deleteaccesspolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAccessPolicy</h3>
<ul>
<li>description: Grants permission to delete an access policy</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "access-policy": {
        "resource_type": "access-policy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteasset"><a aria-hidden="true" class="anchor-heading" href="#deleteasset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAsset</h3>
<ul>
<li>description: Grants permission to delete an asset</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "asset": {
        "resource_type": "asset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteassetmodel"><a aria-hidden="true" class="anchor-heading" href="#deleteassetmodel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAssetModel</h3>
<ul>
<li>description: Grants permission to delete an asset model</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "asset-model": {
        "resource_type": "asset-model",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedashboard"><a aria-hidden="true" class="anchor-heading" href="#deletedashboard"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDashboard</h3>
<ul>
<li>description: Grants permission to delete a dashboard</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dashboard": {
        "resource_type": "dashboard",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletegateway"><a aria-hidden="true" class="anchor-heading" href="#deletegateway"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteGateway</h3>
<ul>
<li>description: Grants permission to delete a gateway</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteportal"><a aria-hidden="true" class="anchor-heading" href="#deleteportal"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeletePortal</h3>
<ul>
<li>description: Grants permission to delete a portal</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "portal": {
        "resource_type": "portal",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "sso:DeleteManagedApplicationInstance"
        ]
    }
}
</code></pre>
<h3 id="deleteproject"><a aria-hidden="true" class="anchor-heading" href="#deleteproject"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteProject</h3>
<ul>
<li>description: Grants permission to delete a project</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeaccesspolicy"><a aria-hidden="true" class="anchor-heading" href="#describeaccesspolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAccessPolicy</h3>
<ul>
<li>description: Grants permission to describe an access policy</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "access-policy": {
        "resource_type": "access-policy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeasset"><a aria-hidden="true" class="anchor-heading" href="#describeasset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAsset</h3>
<ul>
<li>description: Grants permission to describe an asset</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "asset": {
        "resource_type": "asset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeassetmodel"><a aria-hidden="true" class="anchor-heading" href="#describeassetmodel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAssetModel</h3>
<ul>
<li>description: Grants permission to describe an asset model</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "asset-model": {
        "resource_type": "asset-model",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeassetproperty"><a aria-hidden="true" class="anchor-heading" href="#describeassetproperty"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAssetProperty</h3>
<ul>
<li>description: Grants permission to describe an asset property</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "asset": {
        "resource_type": "asset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedashboard"><a aria-hidden="true" class="anchor-heading" href="#describedashboard"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDashboard</h3>
<ul>
<li>description: Grants permission to describe a dashboard</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dashboard": {
        "resource_type": "dashboard",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describegateway"><a aria-hidden="true" class="anchor-heading" href="#describegateway"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeGateway</h3>
<ul>
<li>description: Grants permission to describe a gateway</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describegatewaycapabilityconfiguration"><a aria-hidden="true" class="anchor-heading" href="#describegatewaycapabilityconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeGatewayCapabilityConfiguration</h3>
<ul>
<li>description: Grants permission to describe a capability configuration for a gateway</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeloggingoptions"><a aria-hidden="true" class="anchor-heading" href="#describeloggingoptions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeLoggingOptions</h3>
<ul>
<li>description: Grants permission to describe logging options for the AWS account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeportal"><a aria-hidden="true" class="anchor-heading" href="#describeportal"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribePortal</h3>
<ul>
<li>description: Grants permission to describe a portal</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "portal": {
        "resource_type": "portal",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeproject"><a aria-hidden="true" class="anchor-heading" href="#describeproject"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeProject</h3>
<ul>
<li>description: Grants permission to describe a project</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociateassets"><a aria-hidden="true" class="anchor-heading" href="#disassociateassets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateAssets</h3>
<ul>
<li>description: Grants permission to disassociate a child asset from a parent asset by a hierarchy</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "asset": {
        "resource_type": "asset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getassetpropertyaggregates"><a aria-hidden="true" class="anchor-heading" href="#getassetpropertyaggregates"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAssetPropertyAggregates</h3>
<ul>
<li>description: Grants permission to retrieve computed aggregates for an asset property</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "asset": {
        "resource_type": "asset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getassetpropertyvalue"><a aria-hidden="true" class="anchor-heading" href="#getassetpropertyvalue"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAssetPropertyValue</h3>
<ul>
<li>description: Grants permission to retrieve the latest value for an asset property</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "asset": {
        "resource_type": "asset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getassetpropertyvaluehistory"><a aria-hidden="true" class="anchor-heading" href="#getassetpropertyvaluehistory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAssetPropertyValueHistory</h3>
<ul>
<li>description: Grants permission to retrieve the value history for an asset property</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "asset": {
        "resource_type": "asset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listaccesspolicies"><a aria-hidden="true" class="anchor-heading" href="#listaccesspolicies"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAccessPolicies</h3>
<ul>
<li>description: Grants permission to list all access policies for an identity or a resource</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "portal": {
        "resource_type": "portal",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "project": {
        "resource_type": "project",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listassetmodels"><a aria-hidden="true" class="anchor-heading" href="#listassetmodels"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAssetModels</h3>
<ul>
<li>description: Grants permission to list all asset models</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listassets"><a aria-hidden="true" class="anchor-heading" href="#listassets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAssets</h3>
<ul>
<li>description: Grants permission to list all assets</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "asset-model": {
        "resource_type": "asset-model",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listassociatedassets"><a aria-hidden="true" class="anchor-heading" href="#listassociatedassets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAssociatedAssets</h3>
<ul>
<li>description: Grants permission to list all assets associated to an asset by a hierarchy</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "asset": {
        "resource_type": "asset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdashboards"><a aria-hidden="true" class="anchor-heading" href="#listdashboards"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDashboards</h3>
<ul>
<li>description: Grants permission to list all dashboards in a project</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listgateways"><a aria-hidden="true" class="anchor-heading" href="#listgateways"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListGateways</h3>
<ul>
<li>description: Grants permission to list all gateways</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listportals"><a aria-hidden="true" class="anchor-heading" href="#listportals"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPortals</h3>
<ul>
<li>description: Grants permission to list all portals</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listprojectassets"><a aria-hidden="true" class="anchor-heading" href="#listprojectassets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListProjectAssets</h3>
<ul>
<li>description: Grants permission to list all assets associated with a project</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listprojects"><a aria-hidden="true" class="anchor-heading" href="#listprojects"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListProjects</h3>
<ul>
<li>description: Grants permission to list all projects in a portal</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "portal": {
        "resource_type": "portal",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Grants permission to list all tags for a resource</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "access-policy": {
        "resource_type": "access-policy",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "asset": {
        "resource_type": "asset",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "asset-model": {
        "resource_type": "asset-model",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dashboard": {
        "resource_type": "dashboard",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "gateway": {
        "resource_type": "gateway",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "portal": {
        "resource_type": "portal",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "project": {
        "resource_type": "project",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putloggingoptions"><a aria-hidden="true" class="anchor-heading" href="#putloggingoptions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutLoggingOptions</h3>
<ul>
<li>description: Grants permission to set logging options for the AWS account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Grants permission to tag a resource</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "access-policy": {
        "resource_type": "access-policy",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "asset": {
        "resource_type": "asset",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "asset-model": {
        "resource_type": "asset-model",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dashboard": {
        "resource_type": "dashboard",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "gateway": {
        "resource_type": "gateway",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "portal": {
        "resource_type": "portal",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "project": {
        "resource_type": "project",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys",
            "aws:RequestTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Grants permission to untag a resource</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "access-policy": {
        "resource_type": "access-policy",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "asset": {
        "resource_type": "asset",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "asset-model": {
        "resource_type": "asset-model",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dashboard": {
        "resource_type": "dashboard",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "gateway": {
        "resource_type": "gateway",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "portal": {
        "resource_type": "portal",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "project": {
        "resource_type": "project",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateaccesspolicy"><a aria-hidden="true" class="anchor-heading" href="#updateaccesspolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateAccessPolicy</h3>
<ul>
<li>description: Grants permission to update an access policy</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "access-policy": {
        "resource_type": "access-policy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateasset"><a aria-hidden="true" class="anchor-heading" href="#updateasset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateAsset</h3>
<ul>
<li>description: Grants permission to update an asset</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "asset": {
        "resource_type": "asset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateassetmodel"><a aria-hidden="true" class="anchor-heading" href="#updateassetmodel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateAssetModel</h3>
<ul>
<li>description: Grants permission to update an asset model</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "asset-model": {
        "resource_type": "asset-model",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateassetproperty"><a aria-hidden="true" class="anchor-heading" href="#updateassetproperty"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateAssetProperty</h3>
<ul>
<li>description: Grants permission to update an asset property</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "asset": {
        "resource_type": "asset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatedashboard"><a aria-hidden="true" class="anchor-heading" href="#updatedashboard"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateDashboard</h3>
<ul>
<li>description: Grants permission to update a dashboard</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dashboard": {
        "resource_type": "dashboard",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updategateway"><a aria-hidden="true" class="anchor-heading" href="#updategateway"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateGateway</h3>
<ul>
<li>description: Grants permission to update a gateway</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updategatewaycapabilityconfiguration"><a aria-hidden="true" class="anchor-heading" href="#updategatewaycapabilityconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateGatewayCapabilityConfiguration</h3>
<ul>
<li>description: Grants permission to update a capability configuration for a gateway</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gateway": {
        "resource_type": "gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateportal"><a aria-hidden="true" class="anchor-heading" href="#updateportal"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdatePortal</h3>
<ul>
<li>description: Grants permission to update a portal</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "portal": {
        "resource_type": "portal",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateproject"><a aria-hidden="true" class="anchor-heading" href="#updateproject"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateProject</h3>
<ul>
<li>description: Grants permission to update a project</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-IoT SiteWise"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Cognito Sync.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Cognito Sync - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Cognito Sync.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Cognito Sync.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Cognito Sync.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Cognito Sync - undefined" />
  <meta name="twitter:title" content="Cognito Sync - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Cognito Sync</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Cognito Sync">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="cognito-sync"><a aria-hidden="true" class="anchor-heading" href="#cognito-sync"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Cognito Sync</h1>
<ul>
<li>prefix: cognito-sync</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="bulkpublish"><a aria-hidden="true" class="anchor-heading" href="#bulkpublish"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BulkPublish</h3>
<ul>
<li>description: Initiates a bulk publish of all existing datasets for an Identity Pool to the configured stream.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "identitypool": {
        "resource_type": "identitypool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedataset"><a aria-hidden="true" class="anchor-heading" href="#deletedataset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDataset</h3>
<ul>
<li>description: Deletes the specific dataset.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dataset": {
        "resource_type": "dataset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedataset"><a aria-hidden="true" class="anchor-heading" href="#describedataset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDataset</h3>
<ul>
<li>description: Gets meta data about a dataset by identity and dataset name.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dataset": {
        "resource_type": "dataset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeidentitypoolusage"><a aria-hidden="true" class="anchor-heading" href="#describeidentitypoolusage"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeIdentityPoolUsage</h3>
<ul>
<li>description: Gets usage details (for example, data storage) about a particular identity pool.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "identitypool": {
        "resource_type": "identitypool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeidentityusage"><a aria-hidden="true" class="anchor-heading" href="#describeidentityusage"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeIdentityUsage</h3>
<ul>
<li>description: Gets usage information for an identity, including number of datasets and data usage.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "identity": {
        "resource_type": "identity",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbulkpublishdetails"><a aria-hidden="true" class="anchor-heading" href="#getbulkpublishdetails"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBulkPublishDetails</h3>
<ul>
<li>description: Get the status of the last BulkPublish operation for an identity pool.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "identitypool": {
        "resource_type": "identitypool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcognitoevents"><a aria-hidden="true" class="anchor-heading" href="#getcognitoevents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCognitoEvents</h3>
<ul>
<li>description: Gets the events and the corresponding Lambda functions associated with an identity pool.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "identitypool": {
        "resource_type": "identitypool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getidentitypoolconfiguration"><a aria-hidden="true" class="anchor-heading" href="#getidentitypoolconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetIdentityPoolConfiguration</h3>
<ul>
<li>description: Gets the configuration settings of an identity pool.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "identitypool": {
        "resource_type": "identitypool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdatasets"><a aria-hidden="true" class="anchor-heading" href="#listdatasets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDatasets</h3>
<ul>
<li>description: Lists datasets for an identity.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dataset": {
        "resource_type": "dataset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listidentitypoolusage"><a aria-hidden="true" class="anchor-heading" href="#listidentitypoolusage"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListIdentityPoolUsage</h3>
<ul>
<li>description: Gets a list of identity pools registered with Cognito.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "identitypool": {
        "resource_type": "identitypool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listrecords"><a aria-hidden="true" class="anchor-heading" href="#listrecords"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListRecords</h3>
<ul>
<li>description: Gets paginated records, optionally changed after a particular sync count for a dataset and identity.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dataset": {
        "resource_type": "dataset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="queryrecords"><a aria-hidden="true" class="anchor-heading" href="#queryrecords"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>QueryRecords</h3>
<ul>
<li>description: A permission that grants the ability to query records.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registerdevice"><a aria-hidden="true" class="anchor-heading" href="#registerdevice"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterDevice</h3>
<ul>
<li>description: Registers a device to receive push sync notifications.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "identity": {
        "resource_type": "identity",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setcognitoevents"><a aria-hidden="true" class="anchor-heading" href="#setcognitoevents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetCognitoEvents</h3>
<ul>
<li>description: Sets the AWS Lambda function for a given event type for an identity pool.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "identitypool": {
        "resource_type": "identitypool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setdatasetconfiguration"><a aria-hidden="true" class="anchor-heading" href="#setdatasetconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetDatasetConfiguration</h3>
<ul>
<li>description: A permission that grants ability to configure datasets.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dataset": {
        "resource_type": "dataset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setidentitypoolconfiguration"><a aria-hidden="true" class="anchor-heading" href="#setidentitypoolconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetIdentityPoolConfiguration</h3>
<ul>
<li>description: Sets the necessary configuration for push sync.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "identitypool": {
        "resource_type": "identitypool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="subscribetodataset"><a aria-hidden="true" class="anchor-heading" href="#subscribetodataset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SubscribeToDataset</h3>
<ul>
<li>description: Subscribes to receive notifications when a dataset is modified by another device.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dataset": {
        "resource_type": "dataset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="unsubscribefromdataset"><a aria-hidden="true" class="anchor-heading" href="#unsubscribefromdataset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UnsubscribeFromDataset</h3>
<ul>
<li>description: Unsubscribes from receiving notifications when a dataset is modified by another device.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dataset": {
        "resource_type": "dataset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updaterecords"><a aria-hidden="true" class="anchor-heading" href="#updaterecords"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateRecords</h3>
<ul>
<li>description: Posts updates to records and adds and deletes records for a dataset and user.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dataset": {
        "resource_type": "dataset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Cognito Sync"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Server Migration Service.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Server Migration Service - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Server Migration Service.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Server Migration Service.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Server Migration Service.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Server Migration Service - undefined" />
  <meta name="twitter:title" content="Server Migration Service - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Server Migration Service</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Server Migration Service">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="server-migration-service"><a aria-hidden="true" class="anchor-heading" href="#server-migration-service"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Server Migration Service</h1>
<ul>
<li>prefix: sms</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="createapp"><a aria-hidden="true" class="anchor-heading" href="#createapp"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateApp</h3>
<ul>
<li>description: Grants permission to create an application configuration to migrate on-premise application onto AWS</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createreplicationjob"><a aria-hidden="true" class="anchor-heading" href="#createreplicationjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateReplicationJob</h3>
<ul>
<li>description: Grants permission to create a job to migrate on-premise server onto AWS</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteapp"><a aria-hidden="true" class="anchor-heading" href="#deleteapp"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteApp</h3>
<ul>
<li>description: Grants permission to delete an existing application configuration</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteapplaunchconfiguration"><a aria-hidden="true" class="anchor-heading" href="#deleteapplaunchconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAppLaunchConfiguration</h3>
<ul>
<li>description: Grants permission to delete launch configuration for an existing application</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteappreplicationconfiguration"><a aria-hidden="true" class="anchor-heading" href="#deleteappreplicationconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAppReplicationConfiguration</h3>
<ul>
<li>description: Grants permission to delete replication configuration for an existing application</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteappvalidationconfiguration"><a aria-hidden="true" class="anchor-heading" href="#deleteappvalidationconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAppValidationConfiguration</h3>
<ul>
<li>description: Grants permission to delete validation configuration for an existing application</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletereplicationjob"><a aria-hidden="true" class="anchor-heading" href="#deletereplicationjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteReplicationJob</h3>
<ul>
<li>description: Grants permission to delete an existing job to migrate on-premise server onto AWS</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteservercatalog"><a aria-hidden="true" class="anchor-heading" href="#deleteservercatalog"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteServerCatalog</h3>
<ul>
<li>description: Grants permission to delete the complete list of on-premise servers gathered into AWS</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociateconnector"><a aria-hidden="true" class="anchor-heading" href="#disassociateconnector"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateConnector</h3>
<ul>
<li>description: Grants permission to disassociate a connector that has been associated</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="generatechangeset"><a aria-hidden="true" class="anchor-heading" href="#generatechangeset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GenerateChangeSet</h3>
<ul>
<li>description: Grants permission to generate a changeSet for the CloudFormation stack of an application</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="generatetemplate"><a aria-hidden="true" class="anchor-heading" href="#generatetemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GenerateTemplate</h3>
<ul>
<li>description: Grants permission to generate a CloudFormation template for an existing application</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getapp"><a aria-hidden="true" class="anchor-heading" href="#getapp"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetApp</h3>
<ul>
<li>description: Grants permission to get the configuration and statuses for an existing application</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getapplaunchconfiguration"><a aria-hidden="true" class="anchor-heading" href="#getapplaunchconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAppLaunchConfiguration</h3>
<ul>
<li>description: Grants permission to get launch configuration for an existing application</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getappreplicationconfiguration"><a aria-hidden="true" class="anchor-heading" href="#getappreplicationconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAppReplicationConfiguration</h3>
<ul>
<li>description: Grants permission to get replication configuration for an existing application</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getappvalidationconfiguration"><a aria-hidden="true" class="anchor-heading" href="#getappvalidationconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAppValidationConfiguration</h3>
<ul>
<li>description: Grants permission to get validation configuration for an existing application</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getappvalidationoutput"><a aria-hidden="true" class="anchor-heading" href="#getappvalidationoutput"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAppValidationOutput</h3>
<ul>
<li>description: Grants permission to get notification sent from application validation script.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getconnectors"><a aria-hidden="true" class="anchor-heading" href="#getconnectors"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetConnectors</h3>
<ul>
<li>description: Grants permission to get all connectors that have been associated</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmessages"><a aria-hidden="true" class="anchor-heading" href="#getmessages"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetMessages</h3>
<ul>
<li>description: Grants permission to gets messages from AWS Server Migration Service to Server Migration Connector</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getreplicationjobs"><a aria-hidden="true" class="anchor-heading" href="#getreplicationjobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetReplicationJobs</h3>
<ul>
<li>description: Grants permission to get all existing jobs to migrate on-premise servers onto AWS</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getreplicationruns"><a aria-hidden="true" class="anchor-heading" href="#getreplicationruns"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetReplicationRuns</h3>
<ul>
<li>description: Grants permission to get all runs for an existing job</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getservers"><a aria-hidden="true" class="anchor-heading" href="#getservers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetServers</h3>
<ul>
<li>description: Grants permission to get all servers that have been imported</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="importappcatalog"><a aria-hidden="true" class="anchor-heading" href="#importappcatalog"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ImportAppCatalog</h3>
<ul>
<li>description: Grants permission to import application catalog from AWS Application Discovery Service</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="importservercatalog"><a aria-hidden="true" class="anchor-heading" href="#importservercatalog"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ImportServerCatalog</h3>
<ul>
<li>description: Grants permission to gather a complete list of on-premise servers</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="launchapp"><a aria-hidden="true" class="anchor-heading" href="#launchapp"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>LaunchApp</h3>
<ul>
<li>description: Grants permission to create and launch a CloudFormation stack for an existing application</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listapps"><a aria-hidden="true" class="anchor-heading" href="#listapps"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListApps</h3>
<ul>
<li>description: Grants permission to get a list of summaries for existing applications</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="notifyappvalidationoutput"><a aria-hidden="true" class="anchor-heading" href="#notifyappvalidationoutput"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>NotifyAppValidationOutput</h3>
<ul>
<li>description: Grants permission to send notification for application validation script</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putapplaunchconfiguration"><a aria-hidden="true" class="anchor-heading" href="#putapplaunchconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutAppLaunchConfiguration</h3>
<ul>
<li>description: Grants permission to create or update launch configuration for an existing application</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putappreplicationconfiguration"><a aria-hidden="true" class="anchor-heading" href="#putappreplicationconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutAppReplicationConfiguration</h3>
<ul>
<li>description: Grants permission to create or update replication configuration for an existing application</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putappvalidationconfiguration"><a aria-hidden="true" class="anchor-heading" href="#putappvalidationconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutAppValidationConfiguration</h3>
<ul>
<li>description: Grants permission to put validation configuration for an existing application</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="sendmessage"><a aria-hidden="true" class="anchor-heading" href="#sendmessage"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SendMessage</h3>
<ul>
<li>description: Grants permission to send message from Server Migration Connector to AWS Server Migration Service</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startappreplication"><a aria-hidden="true" class="anchor-heading" href="#startappreplication"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartAppReplication</h3>
<ul>
<li>description: Grants permission to create and start replication jobs for an existing application</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startondemandappreplication"><a aria-hidden="true" class="anchor-heading" href="#startondemandappreplication"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartOnDemandAppReplication</h3>
<ul>
<li>description: Grants permission to start a replication run for an existing application</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startondemandreplicationrun"><a aria-hidden="true" class="anchor-heading" href="#startondemandreplicationrun"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartOnDemandReplicationRun</h3>
<ul>
<li>description: Grants permission to start a replication run for an existing replication job</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopappreplication"><a aria-hidden="true" class="anchor-heading" href="#stopappreplication"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopAppReplication</h3>
<ul>
<li>description: Grants permission to stop and delete replication jobs for an existing application</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="terminateapp"><a aria-hidden="true" class="anchor-heading" href="#terminateapp"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TerminateApp</h3>
<ul>
<li>description: Grants permission to terminate the CloudFormation stack for an existing application</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateapp"><a aria-hidden="true" class="anchor-heading" href="#updateapp"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateApp</h3>
<ul>
<li>description: Grants permission to update an existing application configuration</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatereplicationjob"><a aria-hidden="true" class="anchor-heading" href="#updatereplicationjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateReplicationJob</h3>
<ul>
<li>description: Grants permission to update an existing job to migrate on-premise server onto AWS</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Server Migration Service"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/simple-queue-service.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Simple Queue Service - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/simple-queue-service.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/simple-queue-service.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/simple-queue-service.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Simple Queue Service - undefined" />
  <meta name="twitter:title" content="Simple Queue Service - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/1f759d8c-cca7-4fc4-9aa2-6dbf6e596abf.html">Services</a></li><li class="breadcrumb-nav-list-item">Simple Queue Service</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/open-guides/og-aws" target="_blank"> og-aws  </li>
              
              <li> <a href="https://www.awsgeek.com/" target="_blank"> <NAME>  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Simple Queue Service">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <p><img src="/assets/images/Amazon-SQS_en.jpg"></p>
<blockquote>
<p>Image from <a href="https://www.awsgeek.com/Amazon-SQS/">@awsgeek</a></p>
</blockquote>
<h1 id="simple-queue-service"><a aria-hidden="true" class="anchor-heading" href="#simple-queue-service"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Simple Queue Service</h1>
<h3 id="sqs-basics"><a aria-hidden="true" class="anchor-heading" href="#sqs-basics"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SQS Basics</h3>
<ul>
<li>📒  <a href="https://aws.amazon.com/sqs/"><em>Homepage</em></a> ∙ <a href="https://aws.amazon.com/documentation/sqs/"><em>Documentation</em></a> ∙ <a href="https://aws.amazon.com/sqs/faqs/"><em>FAQ</em></a> ∙ <a href="https://aws.amazon.com/sqs/pricing/"><em>Pricing</em> </a></li>
<li>SQS is a highly scalable, fully managed message queuing service from AWS.</li>
<li>SQS supports the pull model, where the producers <em>queue</em> the messages, and the consumers pull messages off the queue.</li>
<li>SQS provides a message visibility timeout, during which the message being processed will not be delivered to other consumers. If the consumer does not delete the message after processing, the message becomes available to other consumers upon reaching the message visibility timeout. This parameter is called VisibilityTimeout.</li>
<li>Each message can have up to 10 custom fields, or attributes.</li>
<li>SQS allows producers to set up to 15 minutes of delay before the messages are delivered to the consumers. This parameter is called DelaySeconds.</li>
<li>There are two types of queues supported by SQS -
<ul>
<li>Standard Queues
<ul>
<li>Guarantee <strong>at least once</strong> delivery of the messages.</li>
<li>Do not retain the order of delivery of the messages.</li>
</ul>
</li>
<li>FIFO Queues
<ul>
<li>Guarantee <strong>only once</strong> delivery of the messages</li>
<li>Guarantee the order of the delivery of the messages</li>
</ul>
</li>
</ul>
</li>
<li>SQS supports fine grained access to various API calls and Queues via IAM policies.</li>
<li>The messages that fail to process can be put in a dead letter queue.</li>
</ul>
<h3 id="sqs-alternatives-and-lock-in"><a aria-hidden="true" class="anchor-heading" href="#sqs-alternatives-and-lock-in"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SQS Alternatives and Lock-In</h3>
<ul>
<li>Alternatives to SQS include <a href="https://kafka.apache.org/">Kafka</a>, <a href="https://www.rabbitmq.com/">RabbitMQ</a>, <a href="http://activemq.apache.org/">ActiveMQ</a> and others.</li>
<li>Google Cloud Platform has Pub/Sub, and Azure has Azure Queue Service.</li>
<li><a href="#sns-alternatives-and-lock-in">SQS vs SNS</a></li>
</ul>
<h3 id="sqs-tips"><a aria-hidden="true" class="anchor-heading" href="#sqs-tips"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SQS Tips</h3>
<ul>
<li>SNS can be used in combination of SQS to build a “fan out” mechanism by having an SQS Queue subscribe to the SNS topic.</li>
<li>SQS supports encryption using AWS KMS.</li>
<li>Cloudwatch alarms can be creating using <a href="http://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/sqs-metricscollected.html">various SQS metrics</a> to trigger autoscaling actions and/or notifications.</li>
</ul>
<h3 id="sqs-gotchas-and-limitations"><a aria-hidden="true" class="anchor-heading" href="#sqs-gotchas-and-limitations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SQS Gotchas and Limitations</h3>
<ul>
<li>🔸 SQS does not have a VPC endpoint (unlike S3 and DynamoDB), so SQS will need to be accessed using public SQS API endpoints.</li>
<li>🔸 FIFO Queues are limited to 300 API calls per second.</li>
<li>🔸 FIFO Queues cannot subscribe to an SNS topic.</li>
<li>🔸 Standard Queues can deliver duplicate messages regardless of the visibility window. If only-once delivery is your only choice, then use FIFO queues, or build an additional layer to de-dupe the messages.</li>
<li>🔸 You can send/receive messages in batch, however, there can only be maximum of 10 messages in a batch.</li>
</ul><span id="navId" data="simple-queue-service"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-IAM Access Analyzer.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>IAM Access Analyzer - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-IAM Access Analyzer.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-IAM Access Analyzer.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-IAM Access Analyzer.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="IAM Access Analyzer - undefined" />
  <meta name="twitter:title" content="IAM Access Analyzer - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">IAM Access Analyzer</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="IAM Access Analyzer">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="iam-access-analyzer"><a aria-hidden="true" class="anchor-heading" href="#iam-access-analyzer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>IAM Access Analyzer</h1>
<ul>
<li>prefix: access-analyzer</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="createanalyzer"><a aria-hidden="true" class="anchor-heading" href="#createanalyzer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateAnalyzer</h3>
<ul>
<li>description: Grants permission to create an analyzer.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Analyzer": {
        "resource_type": "Analyzer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createarchiverule"><a aria-hidden="true" class="anchor-heading" href="#createarchiverule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateArchiveRule</h3>
<ul>
<li>description: Grants permission to create an archive rule for the specified analyzer.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Analyzer": {
        "resource_type": "Analyzer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "ArchiveRule": {
        "resource_type": "ArchiveRule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteanalyzer"><a aria-hidden="true" class="anchor-heading" href="#deleteanalyzer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAnalyzer</h3>
<ul>
<li>description: Grants permission to delete the specified analyzer.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Analyzer": {
        "resource_type": "Analyzer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletearchiverule"><a aria-hidden="true" class="anchor-heading" href="#deletearchiverule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteArchiveRule</h3>
<ul>
<li>description: Grants permission to delete archive rules for the specified analyzer.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Analyzer": {
        "resource_type": "Analyzer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "ArchiveRule": {
        "resource_type": "ArchiveRule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getanalyzedresource"><a aria-hidden="true" class="anchor-heading" href="#getanalyzedresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAnalyzedResource</h3>
<ul>
<li>description: Grants permission to retrieve information about an analyzed resource.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getanalyzer"><a aria-hidden="true" class="anchor-heading" href="#getanalyzer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAnalyzer</h3>
<ul>
<li>description: Grants permission to retrieve information about analyzers.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Analyzer": {
        "resource_type": "Analyzer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getarchiverule"><a aria-hidden="true" class="anchor-heading" href="#getarchiverule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetArchiveRule</h3>
<ul>
<li>description: Grants permission to retrieve information about archive rules for the specified analyzer.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Analyzer": {
        "resource_type": "Analyzer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "ArchiveRule": {
        "resource_type": "ArchiveRule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getfinding"><a aria-hidden="true" class="anchor-heading" href="#getfinding"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetFinding</h3>
<ul>
<li>description: Grants permission to retrieve findings.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listanalyzedresources"><a aria-hidden="true" class="anchor-heading" href="#listanalyzedresources"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAnalyzedResources</h3>
<ul>
<li>description: Grants permission to retrieve a list of resources that have been analyzed.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listanalyzers"><a aria-hidden="true" class="anchor-heading" href="#listanalyzers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAnalyzers</h3>
<ul>
<li>description: Grants permission to retrieves a list of analyzers.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listarchiverules"><a aria-hidden="true" class="anchor-heading" href="#listarchiverules"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListArchiveRules</h3>
<ul>
<li>description: Grants permission to retrieve a list of archive rules from an analyzer.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Analyzer": {
        "resource_type": "Analyzer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listfindings"><a aria-hidden="true" class="anchor-heading" href="#listfindings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListFindings</h3>
<ul>
<li>description: Grants permission to retrieve a list of findings from an analyzer.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Grants permission to retrieve a list of tags applied to a resource.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Analyzer": {
        "resource_type": "Analyzer",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startresourcescan"><a aria-hidden="true" class="anchor-heading" href="#startresourcescan"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartResourceScan</h3>
<ul>
<li>description: Grants permission to start a scan of the policies applied to a resource.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Grants permission to add a tag to a resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Analyzer": {
        "resource_type": "Analyzer",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Grants permission to remove a tag from a resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Analyzer": {
        "resource_type": "Analyzer",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatearchiverule"><a aria-hidden="true" class="anchor-heading" href="#updatearchiverule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateArchiveRule</h3>
<ul>
<li>description: Grants permission to modify an archive rule.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Analyzer": {
        "resource_type": "Analyzer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "ArchiveRule": {
        "resource_type": "ArchiveRule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatefindings"><a aria-hidden="true" class="anchor-heading" href="#updatefindings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateFindings</h3>
<ul>
<li>description: Grants permission to modify findings.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-IAM Access Analyzer"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-EC2 Auto Scaling.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>EC2 Auto Scaling - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-EC2 Auto Scaling.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-EC2 Auto Scaling.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-EC2 Auto Scaling.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="EC2 Auto Scaling - undefined" />
  <meta name="twitter:title" content="EC2 Auto Scaling - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">EC2 Auto Scaling</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="EC2 Auto Scaling">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="ec2-auto-scaling"><a aria-hidden="true" class="anchor-heading" href="#ec2-auto-scaling"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EC2 Auto Scaling</h1>
<ul>
<li>prefix: autoscaling</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="attachinstances"><a aria-hidden="true" class="anchor-heading" href="#attachinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AttachInstances</h3>
<ul>
<li>description: Attaches one or more EC2 instances to the specified Auto Scaling group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "autoScalingGroup": {
        "resource_type": "autoScalingGroup",
        "required": true,
        "condition_keys": [
            "autoscaling:ResourceTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="attachloadbalancertargetgroups"><a aria-hidden="true" class="anchor-heading" href="#attachloadbalancertargetgroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AttachLoadBalancerTargetGroups</h3>
<ul>
<li>description: Attaches one or more target groups to the specified Auto Scaling group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "autoScalingGroup": {
        "resource_type": "autoScalingGroup",
        "required": true,
        "condition_keys": [
            "autoscaling:ResourceTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "autoscaling:TargetGroupARNs"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="attachloadbalancers"><a aria-hidden="true" class="anchor-heading" href="#attachloadbalancers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AttachLoadBalancers</h3>
<ul>
<li>description: Attaches one or more load balancers to the specified Auto Scaling group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "autoScalingGroup": {
        "resource_type": "autoScalingGroup",
        "required": true,
        "condition_keys": [
            "autoscaling:ResourceTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "autoscaling:LoadBalancerNames"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchdeletescheduledaction"><a aria-hidden="true" class="anchor-heading" href="#batchdeletescheduledaction"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchDeleteScheduledAction</h3>
<ul>
<li>description: Deletes the specified scheduled actions.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "autoScalingGroup": {
        "resource_type": "autoScalingGroup",
        "required": true,
        "condition_keys": [
            "autoscaling:ResourceTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchputscheduledupdategroupaction"><a aria-hidden="true" class="anchor-heading" href="#batchputscheduledupdategroupaction"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchPutScheduledUpdateGroupAction</h3>
<ul>
<li>description: Creates or updates multiple scheduled scaling actions for an Auto Scaling group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "autoScalingGroup": {
        "resource_type": "autoScalingGroup",
        "required": true,
        "condition_keys": [
            "autoscaling:ResourceTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="cancelinstancerefresh"><a aria-hidden="true" class="anchor-heading" href="#cancelinstancerefresh"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CancelInstanceRefresh</h3>
<ul>
<li>description: Grants permission to cancel an instance refresh operation in progress</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "autoScalingGroup": {
        "resource_type": "autoScalingGroup",
        "required": true,
        "condition_keys": [
            "autoscaling:ResourceTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="completelifecycleaction"><a aria-hidden="true" class="anchor-heading" href="#completelifecycleaction"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CompleteLifecycleAction</h3>
<ul>
<li>description: Completes the lifecycle action for the specified token or instance with the specified result.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "autoScalingGroup": {
        "resource_type": "autoScalingGroup",
        "required": true,
        "condition_keys": [
            "autoscaling:ResourceTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createautoscalinggroup"><a aria-hidden="true" class="anchor-heading" href="#createautoscalinggroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateAutoScalingGroup</h3>
<ul>
<li>description: Creates an Auto Scaling group with the specified name and attributes.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "autoScalingGroup": {
        "resource_type": "autoScalingGroup",
        "required": true,
        "condition_keys": [
            "autoscaling:ResourceTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "autoscaling:InstanceTypes",
            "autoscaling:LaunchConfigurationName",
            "autoscaling:LaunchTemplateVersionSpecified",
            "autoscaling:LoadBalancerNames",
            "autoscaling:MaxSize",
            "autoscaling:MinSize",
            "autoscaling:TargetGroupARNs",
            "autoscaling:VPCZoneIdentifiers",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createlaunchconfiguration"><a aria-hidden="true" class="anchor-heading" href="#createlaunchconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateLaunchConfiguration</h3>
<ul>
<li>description: Creates a launch configuration.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "launchConfiguration": {
        "resource_type": "launchConfiguration",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "autoscaling:ImageId",
            "autoscaling:InstanceType",
            "autoscaling:SpotPrice",
            "autoscaling:MetadataHttpTokens",
            "autoscaling:MetadataHttpPutResponseHopLimit",
            "autoscaling:MetadataHttpEndpoint"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createorupdatetags"><a aria-hidden="true" class="anchor-heading" href="#createorupdatetags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateOrUpdateTags</h3>
<ul>
<li>description: Creates or updates tags for the specified Auto Scaling group.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "autoScalingGroup": {
        "resource_type": "autoScalingGroup",
        "required": true,
        "condition_keys": [
            "autoscaling:ResourceTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteautoscalinggroup"><a aria-hidden="true" class="anchor-heading" href="#deleteautoscalinggroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAutoScalingGroup</h3>
<ul>
<li>description: Deletes the specified Auto Scaling group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "autoScalingGroup": {
        "resource_type": "autoScalingGroup",
        "required": true,
        "condition_keys": [
            "autoscaling:ResourceTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletelaunchconfiguration"><a aria-hidden="true" class="anchor-heading" href="#deletelaunchconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteLaunchConfiguration</h3>
<ul>
<li>description: Deletes the specified launch configuration.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "launchConfiguration": {
        "resource_type": "launchConfiguration",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletelifecyclehook"><a aria-hidden="true" class="anchor-heading" href="#deletelifecyclehook"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteLifecycleHook</h3>
<ul>
<li>description: Deletes the specified lifecycle hook.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "autoScalingGroup": {
        "resource_type": "autoScalingGroup",
        "required": true,
        "condition_keys": [
            "autoscaling:ResourceTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletenotificationconfiguration"><a aria-hidden="true" class="anchor-heading" href="#deletenotificationconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteNotificationConfiguration</h3>
<ul>
<li>description: Deletes the specified notification.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "autoScalingGroup": {
        "resource_type": "autoScalingGroup",
        "required": true,
        "condition_keys": [
            "autoscaling:ResourceTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletepolicy"><a aria-hidden="true" class="anchor-heading" href="#deletepolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeletePolicy</h3>
<ul>
<li>description: Deletes the specified Auto Scaling policy.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "autoScalingGroup": {
        "resource_type": "autoScalingGroup",
        "required": true,
        "condition_keys": [
            "autoscaling:ResourceTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletescheduledaction"><a aria-hidden="true" class="anchor-heading" href="#deletescheduledaction"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteScheduledAction</h3>
<ul>
<li>description: Deletes the specified scheduled action.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "autoScalingGroup": {
        "resource_type": "autoScalingGroup",
        "required": true,
        "condition_keys": [
            "autoscaling:ResourceTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetags"><a aria-hidden="true" class="anchor-heading" href="#deletetags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTags</h3>
<ul>
<li>description: Deletes the specified tags.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "autoScalingGroup": {
        "resource_type": "autoScalingGroup",
        "required": true,
        "condition_keys": [
            "autoscaling:ResourceTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeaccountlimits"><a aria-hidden="true" class="anchor-heading" href="#describeaccountlimits"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAccountLimits</h3>
<ul>
<li>description: Describes the current Auto Scaling resource limits for your AWS account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeadjustmenttypes"><a aria-hidden="true" class="anchor-heading" href="#describeadjustmenttypes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAdjustmentTypes</h3>
<ul>
<li>description: Describes the policy adjustment types for use with PutScalingPolicy.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeautoscalinggroups"><a aria-hidden="true" class="anchor-heading" href="#describeautoscalinggroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAutoScalingGroups</h3>
<ul>
<li>description: Describes one or more Auto Scaling groups. If a list of names is not provided, the call describes all Auto Scaling groups.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeautoscalinginstances"><a aria-hidden="true" class="anchor-heading" href="#describeautoscalinginstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAutoScalingInstances</h3>
<ul>
<li>description: Describes one or more Auto Scaling instances. If a list is not provided, the call describes all instances.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeautoscalingnotificationtypes"><a aria-hidden="true" class="anchor-heading" href="#describeautoscalingnotificationtypes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAutoScalingNotificationTypes</h3>
<ul>
<li>description: Describes the notification types that are supported by Auto Scaling.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeinstancerefreshes"><a aria-hidden="true" class="anchor-heading" href="#describeinstancerefreshes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeInstanceRefreshes</h3>
<ul>
<li>description: Grants permission to describe one or more instance refreshes for an Auto Scaling group</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describelaunchconfigurations"><a aria-hidden="true" class="anchor-heading" href="#describelaunchconfigurations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeLaunchConfigurations</h3>
<ul>
<li>description: Describes one or more launch configurations. If you omit the list of names, then the call describes all launch configurations.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describelifecyclehooktypes"><a aria-hidden="true" class="anchor-heading" href="#describelifecyclehooktypes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeLifecycleHookTypes</h3>
<ul>
<li>description: Describes the available types of lifecycle hooks.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describelifecyclehooks"><a aria-hidden="true" class="anchor-heading" href="#describelifecyclehooks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeLifecycleHooks</h3>
<ul>
<li>description: Describes the lifecycle hooks for the specified Auto Scaling group.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeloadbalancertargetgroups"><a aria-hidden="true" class="anchor-heading" href="#describeloadbalancertargetgroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeLoadBalancerTargetGroups</h3>
<ul>
<li>description: Describes the target groups for the specified Auto Scaling group.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeloadbalancers"><a aria-hidden="true" class="anchor-heading" href="#describeloadbalancers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeLoadBalancers</h3>
<ul>
<li>description: Describes the load balancers for the specified Auto Scaling group.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describemetriccollectiontypes"><a aria-hidden="true" class="anchor-heading" href="#describemetriccollectiontypes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeMetricCollectionTypes</h3>
<ul>
<li>description: Describes the available CloudWatch metrics for Auto Scaling.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describenotificationconfigurations"><a aria-hidden="true" class="anchor-heading" href="#describenotificationconfigurations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeNotificationConfigurations</h3>
<ul>
<li>description: Describes the notification actions associated with the specified Auto Scaling group.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describepolicies"><a aria-hidden="true" class="anchor-heading" href="#describepolicies"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribePolicies</h3>
<ul>
<li>description: Describes the policies for the specified Auto Scaling group.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describescalingactivities"><a aria-hidden="true" class="anchor-heading" href="#describescalingactivities"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeScalingActivities</h3>
<ul>
<li>description: Describes one or more scaling activities for the specified Auto Scaling group.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describescalingprocesstypes"><a aria-hidden="true" class="anchor-heading" href="#describescalingprocesstypes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeScalingProcessTypes</h3>
<ul>
<li>description: Describes the scaling process types for use with ResumeProcesses and SuspendProcesses.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describescheduledactions"><a aria-hidden="true" class="anchor-heading" href="#describescheduledactions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeScheduledActions</h3>
<ul>
<li>description: Describes the actions scheduled for your Auto Scaling group that haven't run.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetags"><a aria-hidden="true" class="anchor-heading" href="#describetags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTags</h3>
<ul>
<li>description: Describes the specified tags.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeterminationpolicytypes"><a aria-hidden="true" class="anchor-heading" href="#describeterminationpolicytypes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTerminationPolicyTypes</h3>
<ul>
<li>description: Describes the termination policies supported by Auto Scaling.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="detachinstances"><a aria-hidden="true" class="anchor-heading" href="#detachinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DetachInstances</h3>
<ul>
<li>description: Removes one or more instances from the specified Auto Scaling group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "autoScalingGroup": {
        "resource_type": "autoScalingGroup",
        "required": true,
        "condition_keys": [
            "autoscaling:ResourceTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="detachloadbalancertargetgroups"><a aria-hidden="true" class="anchor-heading" href="#detachloadbalancertargetgroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DetachLoadBalancerTargetGroups</h3>
<ul>
<li>description: Detaches one or more target groups from the specified Auto Scaling group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "autoScalingGroup": {
        "resource_type": "autoScalingGroup",
        "required": true,
        "condition_keys": [
            "autoscaling:ResourceTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "autoscaling:TargetGroupARNs"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="detachloadbalancers"><a aria-hidden="true" class="anchor-heading" href="#detachloadbalancers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DetachLoadBalancers</h3>
<ul>
<li>description: Removes one or more load balancers from the specified Auto Scaling group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "autoScalingGroup": {
        "resource_type": "autoScalingGroup",
        "required": true,
        "condition_keys": [
            "autoscaling:ResourceTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "autoscaling:LoadBalancerNames"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disablemetricscollection"><a aria-hidden="true" class="anchor-heading" href="#disablemetricscollection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisableMetricsCollection</h3>
<ul>
<li>description: Disables monitoring of the specified metrics for the specified Auto Scaling group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "autoScalingGroup": {
        "resource_type": "autoScalingGroup",
        "required": true,
        "condition_keys": [
            "autoscaling:ResourceTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="enablemetricscollection"><a aria-hidden="true" class="anchor-heading" href="#enablemetricscollection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EnableMetricsCollection</h3>
<ul>
<li>description: Enables monitoring of the specified metrics for the specified Auto Scaling group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "autoScalingGroup": {
        "resource_type": "autoScalingGroup",
        "required": true,
        "condition_keys": [
            "autoscaling:ResourceTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="enterstandby"><a aria-hidden="true" class="anchor-heading" href="#enterstandby"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EnterStandby</h3>
<ul>
<li>description: Moves the specified instances into Standby mode.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "autoScalingGroup": {
        "resource_type": "autoScalingGroup",
        "required": true,
        "condition_keys": [
            "autoscaling:ResourceTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="executepolicy"><a aria-hidden="true" class="anchor-heading" href="#executepolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ExecutePolicy</h3>
<ul>
<li>description: Executes the specified policy.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "autoScalingGroup": {
        "resource_type": "autoScalingGroup",
        "required": true,
        "condition_keys": [
            "autoscaling:ResourceTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="exitstandby"><a aria-hidden="true" class="anchor-heading" href="#exitstandby"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ExitStandby</h3>
<ul>
<li>description: Moves the specified instances out of Standby mode.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "autoScalingGroup": {
        "resource_type": "autoScalingGroup",
        "required": true,
        "condition_keys": [
            "autoscaling:ResourceTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putlifecyclehook"><a aria-hidden="true" class="anchor-heading" href="#putlifecyclehook"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutLifecycleHook</h3>
<ul>
<li>description: Creates or updates a lifecycle hook for the specified Auto Scaling Group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "autoScalingGroup": {
        "resource_type": "autoScalingGroup",
        "required": true,
        "condition_keys": [
            "autoscaling:ResourceTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putnotificationconfiguration"><a aria-hidden="true" class="anchor-heading" href="#putnotificationconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutNotificationConfiguration</h3>
<ul>
<li>description: Configures an Auto Scaling group to send notifications when specified events take place.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "autoScalingGroup": {
        "resource_type": "autoScalingGroup",
        "required": true,
        "condition_keys": [
            "autoscaling:ResourceTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putscalingpolicy"><a aria-hidden="true" class="anchor-heading" href="#putscalingpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutScalingPolicy</h3>
<ul>
<li>description: Creates or updates a policy for an Auto Scaling group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "autoScalingGroup": {
        "resource_type": "autoScalingGroup",
        "required": true,
        "condition_keys": [
            "autoscaling:ResourceTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putscheduledupdategroupaction"><a aria-hidden="true" class="anchor-heading" href="#putscheduledupdategroupaction"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutScheduledUpdateGroupAction</h3>
<ul>
<li>description: Creates or updates a scheduled scaling action for an Auto Scaling group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "autoScalingGroup": {
        "resource_type": "autoScalingGroup",
        "required": true,
        "condition_keys": [
            "autoscaling:ResourceTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "autoscaling:MaxSize",
            "autoscaling:MinSize"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="recordlifecycleactionheartbeat"><a aria-hidden="true" class="anchor-heading" href="#recordlifecycleactionheartbeat"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RecordLifecycleActionHeartbeat</h3>
<ul>
<li>description: Records a heartbeat for the lifecycle action associated with the specified token or instance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "autoScalingGroup": {
        "resource_type": "autoScalingGroup",
        "required": true,
        "condition_keys": [
            "autoscaling:ResourceTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="resumeprocesses"><a aria-hidden="true" class="anchor-heading" href="#resumeprocesses"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ResumeProcesses</h3>
<ul>
<li>description: Resumes the specified suspended Auto Scaling processes, or all suspended process, for the specified Auto Scaling group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "autoScalingGroup": {
        "resource_type": "autoScalingGroup",
        "required": true,
        "condition_keys": [
            "autoscaling:ResourceTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setdesiredcapacity"><a aria-hidden="true" class="anchor-heading" href="#setdesiredcapacity"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetDesiredCapacity</h3>
<ul>
<li>description: Sets the size of the specified Auto Scaling group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "autoScalingGroup": {
        "resource_type": "autoScalingGroup",
        "required": true,
        "condition_keys": [
            "autoscaling:ResourceTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setinstancehealth"><a aria-hidden="true" class="anchor-heading" href="#setinstancehealth"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetInstanceHealth</h3>
<ul>
<li>description: Sets the health status of the specified instance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "autoScalingGroup": {
        "resource_type": "autoScalingGroup",
        "required": true,
        "condition_keys": [
            "autoscaling:ResourceTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setinstanceprotection"><a aria-hidden="true" class="anchor-heading" href="#setinstanceprotection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetInstanceProtection</h3>
<ul>
<li>description: Updates the instance protection settings of the specified instances.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "autoScalingGroup": {
        "resource_type": "autoScalingGroup",
        "required": true,
        "condition_keys": [
            "autoscaling:ResourceTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startinstancerefresh"><a aria-hidden="true" class="anchor-heading" href="#startinstancerefresh"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartInstanceRefresh</h3>
<ul>
<li>description: Grants permission to start a new instance refresh operation</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "autoScalingGroup": {
        "resource_type": "autoScalingGroup",
        "required": true,
        "condition_keys": [
            "autoscaling:ResourceTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="suspendprocesses"><a aria-hidden="true" class="anchor-heading" href="#suspendprocesses"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SuspendProcesses</h3>
<ul>
<li>description: Suspends the specified Auto Scaling processes, or all processes, for the specified Auto Scaling group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "autoScalingGroup": {
        "resource_type": "autoScalingGroup",
        "required": true,
        "condition_keys": [
            "autoscaling:ResourceTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="terminateinstanceinautoscalinggroup"><a aria-hidden="true" class="anchor-heading" href="#terminateinstanceinautoscalinggroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TerminateInstanceInAutoScalingGroup</h3>
<ul>
<li>description: Terminates the specified instance and optionally adjusts the desired group size.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "autoScalingGroup": {
        "resource_type": "autoScalingGroup",
        "required": true,
        "condition_keys": [
            "autoscaling:ResourceTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateautoscalinggroup"><a aria-hidden="true" class="anchor-heading" href="#updateautoscalinggroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateAutoScalingGroup</h3>
<ul>
<li>description: Updates the configuration for the specified Auto Scaling group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "autoScalingGroup": {
        "resource_type": "autoScalingGroup",
        "required": true,
        "condition_keys": [
            "autoscaling:ResourceTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "autoscaling:InstanceTypes",
            "autoscaling:LaunchConfigurationName",
            "autoscaling:LaunchTemplateVersionSpecified",
            "autoscaling:MaxSize",
            "autoscaling:MinSize",
            "autoscaling:VPCZoneIdentifiers"
        ],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-EC2 Auto Scaling"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-DynamoDB.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>DynamoDB - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-DynamoDB.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-DynamoDB.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-DynamoDB.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="DynamoDB - undefined" />
  <meta name="twitter:title" content="DynamoDB - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">DynamoDB</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="DynamoDB">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="dynamodb"><a aria-hidden="true" class="anchor-heading" href="#dynamodb"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DynamoDB</h1>
<ul>
<li>prefix: dynamodb</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="batchgetitem"><a aria-hidden="true" class="anchor-heading" href="#batchgetitem"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchGetItem</h3>
<ul>
<li>description: Returns the attributes of one or more items from one or more tables</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "dynamodb:Attributes",
            "dynamodb:LeadingKeys",
            "dynamodb:ReturnConsumedCapacity",
            "dynamodb:Select"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchwriteitem"><a aria-hidden="true" class="anchor-heading" href="#batchwriteitem"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchWriteItem</h3>
<ul>
<li>description: Puts or deletes multiple items in one or more tables</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "dynamodb:Attributes",
            "dynamodb:LeadingKeys",
            "dynamodb:ReturnConsumedCapacity"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="conditioncheckitem"><a aria-hidden="true" class="anchor-heading" href="#conditioncheckitem"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ConditionCheckItem</h3>
<ul>
<li>description: The ConditionCheckItem operation checks the existence of a set of attributes for the item with the given primary key</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "dynamodb:Attributes",
            "dynamodb:LeadingKeys",
            "dynamodb:ReturnConsumedCapacity",
            "dynamodb:ReturnValues"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createbackup"><a aria-hidden="true" class="anchor-heading" href="#createbackup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateBackup</h3>
<ul>
<li>description: Creates a backup for an existing table</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createglobaltable"><a aria-hidden="true" class="anchor-heading" href="#createglobaltable"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateGlobalTable</h3>
<ul>
<li>description: Enables the user to create a global table from an existing table</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "global-table": {
        "resource_type": "global-table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtable"><a aria-hidden="true" class="anchor-heading" href="#createtable"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTable</h3>
<ul>
<li>description: The CreateTable operation adds a new table to your account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtablereplica"><a aria-hidden="true" class="anchor-heading" href="#createtablereplica"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTableReplica</h3>
<ul>
<li>description: Adds a new replica table</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletebackup"><a aria-hidden="true" class="anchor-heading" href="#deletebackup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteBackup</h3>
<ul>
<li>description: Deletes an existing backup of a table</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "backup": {
        "resource_type": "backup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteitem"><a aria-hidden="true" class="anchor-heading" href="#deleteitem"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteItem</h3>
<ul>
<li>description: Deletes a single item in a table by primary key</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "dynamodb:Attributes",
            "dynamodb:EnclosingOperation",
            "dynamodb:LeadingKeys",
            "dynamodb:ReturnConsumedCapacity",
            "dynamodb:ReturnValues"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetable"><a aria-hidden="true" class="anchor-heading" href="#deletetable"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTable</h3>
<ul>
<li>description: The DeleteTable operation deletes a table and all of its items</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetablereplica"><a aria-hidden="true" class="anchor-heading" href="#deletetablereplica"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTableReplica</h3>
<ul>
<li>description: Deletes a replica table and all of its items</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describebackup"><a aria-hidden="true" class="anchor-heading" href="#describebackup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeBackup</h3>
<ul>
<li>description: Describes an existing backup of a table</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "backup": {
        "resource_type": "backup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecontinuousbackups"><a aria-hidden="true" class="anchor-heading" href="#describecontinuousbackups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeContinuousBackups</h3>
<ul>
<li>description: Checks the status of the backup restore settings on the specified table</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecontributorinsights"><a aria-hidden="true" class="anchor-heading" href="#describecontributorinsights"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeContributorInsights</h3>
<ul>
<li>description: Describes the contributor insights status and related details for a given table or global secondary index</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "index": {
        "resource_type": "index",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeglobaltable"><a aria-hidden="true" class="anchor-heading" href="#describeglobaltable"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeGlobalTable</h3>
<ul>
<li>description: Returns information about the specified global table</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "global-table": {
        "resource_type": "global-table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeglobaltablesettings"><a aria-hidden="true" class="anchor-heading" href="#describeglobaltablesettings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeGlobalTableSettings</h3>
<ul>
<li>description: Returns settings information about the specified global table</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "global-table": {
        "resource_type": "global-table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describelimits"><a aria-hidden="true" class="anchor-heading" href="#describelimits"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeLimits</h3>
<ul>
<li>description: Returns the current provisioned-capacity limits for your AWS account in a region, both for the region as a whole and for any one DynamoDB table that you create there</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describereservedcapacity"><a aria-hidden="true" class="anchor-heading" href="#describereservedcapacity"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeReservedCapacity</h3>
<ul>
<li>description: Describes one or more of the Reserved Capacity purchased</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describereservedcapacityofferings"><a aria-hidden="true" class="anchor-heading" href="#describereservedcapacityofferings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeReservedCapacityOfferings</h3>
<ul>
<li>description: Describes Reserved Capacity offerings that are available for purchase</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describestream"><a aria-hidden="true" class="anchor-heading" href="#describestream"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeStream</h3>
<ul>
<li>description: Returns information about a stream, including the current status of the stream, its Amazon Resource Name (ARN), the composition of its shards, and its corresponding DynamoDB table</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetable"><a aria-hidden="true" class="anchor-heading" href="#describetable"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTable</h3>
<ul>
<li>description: Returns information about the table</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetablereplicaautoscaling"><a aria-hidden="true" class="anchor-heading" href="#describetablereplicaautoscaling"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTableReplicaAutoScaling</h3>
<ul>
<li>description: Describes the auto scaling settings across all replicas of the global table</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetimetolive"><a aria-hidden="true" class="anchor-heading" href="#describetimetolive"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTimeToLive</h3>
<ul>
<li>description: Gives a description of the Time to Live (TTL) status on the specified table.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getitem"><a aria-hidden="true" class="anchor-heading" href="#getitem"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetItem</h3>
<ul>
<li>description: The GetItem operation returns a set of attributes for the item with the given primary key</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "dynamodb:Attributes",
            "dynamodb:EnclosingOperation",
            "dynamodb:LeadingKeys",
            "dynamodb:ReturnConsumedCapacity",
            "dynamodb:Select"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getrecords"><a aria-hidden="true" class="anchor-heading" href="#getrecords"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRecords</h3>
<ul>
<li>description: Retrieves the stream records from a given shard</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsharditerator"><a aria-hidden="true" class="anchor-heading" href="#getsharditerator"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetShardIterator</h3>
<ul>
<li>description: Returns a shard iterator</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listbackups"><a aria-hidden="true" class="anchor-heading" href="#listbackups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListBackups</h3>
<ul>
<li>description: List backups associated with the account and endpoint</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listcontributorinsights"><a aria-hidden="true" class="anchor-heading" href="#listcontributorinsights"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListContributorInsights</h3>
<ul>
<li>description: Lists the ContributorInsightsSummary for all tables and global secondary indexes associated with the current account and endpoint</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listglobaltables"><a aria-hidden="true" class="anchor-heading" href="#listglobaltables"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListGlobalTables</h3>
<ul>
<li>description: Lists all global tables that have a replica in the specified region</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="liststreams"><a aria-hidden="true" class="anchor-heading" href="#liststreams"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListStreams</h3>
<ul>
<li>description: Returns an array of stream ARNs associated with the current account and endpoint</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtables"><a aria-hidden="true" class="anchor-heading" href="#listtables"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTables</h3>
<ul>
<li>description: Returns an array of table names associated with the current account and endpoint</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsofresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsofresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsOfResource</h3>
<ul>
<li>description: List all tags on an Amazon DynamoDB resource</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="purchasereservedcapacityofferings"><a aria-hidden="true" class="anchor-heading" href="#purchasereservedcapacityofferings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PurchaseReservedCapacityOfferings</h3>
<ul>
<li>description: Purchases Reserved Capacity for use with your account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putitem"><a aria-hidden="true" class="anchor-heading" href="#putitem"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutItem</h3>
<ul>
<li>description: Creates a new item, or replaces an old item with a new item</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "dynamodb:Attributes",
            "dynamodb:EnclosingOperation",
            "dynamodb:LeadingKeys",
            "dynamodb:ReturnConsumedCapacity",
            "dynamodb:ReturnValues"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="query"><a aria-hidden="true" class="anchor-heading" href="#query"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Query</h3>
<ul>
<li>description: Uses the primary key of a table or a secondary index to directly access items from that table or index</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "index": {
        "resource_type": "index",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "dynamodb:Attributes",
            "dynamodb:LeadingKeys",
            "dynamodb:ReturnConsumedCapacity",
            "dynamodb:ReturnValues",
            "dynamodb:Select"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="restoretablefrombackup"><a aria-hidden="true" class="anchor-heading" href="#restoretablefrombackup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RestoreTableFromBackup</h3>
<ul>
<li>description: Creates a new table from an existing backup</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "backup": {
        "resource_type": "backup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="restoretabletopointintime"><a aria-hidden="true" class="anchor-heading" href="#restoretabletopointintime"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RestoreTableToPointInTime</h3>
<ul>
<li>description: Restores a table to a point in time</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="scan"><a aria-hidden="true" class="anchor-heading" href="#scan"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Scan</h3>
<ul>
<li>description: Returns one or more items and item attributes by accessing every item in a table or a secondary index</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "index": {
        "resource_type": "index",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "dynamodb:Attributes",
            "dynamodb:ReturnConsumedCapacity",
            "dynamodb:ReturnValues",
            "dynamodb:Select"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Associate a set of tags with an Amazon DynamoDB resource</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Removes the association of tags from an Amazon DynamoDB resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatecontinuousbackups"><a aria-hidden="true" class="anchor-heading" href="#updatecontinuousbackups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateContinuousBackups</h3>
<ul>
<li>description: Enables or disables continuous backups</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatecontributorinsights"><a aria-hidden="true" class="anchor-heading" href="#updatecontributorinsights"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateContributorInsights</h3>
<ul>
<li>description: Updates the status for contributor insights for a specific table or global secondary index</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "index": {
        "resource_type": "index",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateglobaltable"><a aria-hidden="true" class="anchor-heading" href="#updateglobaltable"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateGlobalTable</h3>
<ul>
<li>description: Enables the user to add or remove replicas in the specified global table</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "global-table": {
        "resource_type": "global-table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateglobaltablesettings"><a aria-hidden="true" class="anchor-heading" href="#updateglobaltablesettings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateGlobalTableSettings</h3>
<ul>
<li>description: Enables the user to update settings of the specified global table</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "global-table": {
        "resource_type": "global-table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateitem"><a aria-hidden="true" class="anchor-heading" href="#updateitem"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateItem</h3>
<ul>
<li>description: Edits an existing item's attributes, or adds a new item to the table if it does not already exist</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "dynamodb:Attributes",
            "dynamodb:EnclosingOperation",
            "dynamodb:LeadingKeys",
            "dynamodb:ReturnConsumedCapacity",
            "dynamodb:ReturnValues"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatetable"><a aria-hidden="true" class="anchor-heading" href="#updatetable"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateTable</h3>
<ul>
<li>description: Modifies the provisioned throughput settings, global secondary indexes, or DynamoDB Streams settings for a given table</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatetablereplicaautoscaling"><a aria-hidden="true" class="anchor-heading" href="#updatetablereplicaautoscaling"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateTableReplicaAutoScaling</h3>
<ul>
<li>description: Updates auto scaling settings on your replica table</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatetimetolive"><a aria-hidden="true" class="anchor-heading" href="#updatetimetolive"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateTimeToLive</h3>
<ul>
<li>description: Enables or disables TTL for the specified table</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-DynamoDB"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Mobile Hub.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Mobile Hub - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Mobile Hub.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Mobile Hub.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Mobile Hub.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Mobile Hub - undefined" />
  <meta name="twitter:title" content="Mobile Hub - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Mobile Hub</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Mobile Hub">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="mobile-hub"><a aria-hidden="true" class="anchor-heading" href="#mobile-hub"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Mobile Hub</h1>
<ul>
<li>prefix: mobilehub</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="createproject"><a aria-hidden="true" class="anchor-heading" href="#createproject"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateProject</h3>
<ul>
<li>description: Create a project</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createservicerole"><a aria-hidden="true" class="anchor-heading" href="#createservicerole"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateServiceRole</h3>
<ul>
<li>description: Enable AWS Mobile Hub in the account by creating the required service role</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteproject"><a aria-hidden="true" class="anchor-heading" href="#deleteproject"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteProject</h3>
<ul>
<li>description: Delete the specified project</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteprojectsnapshot"><a aria-hidden="true" class="anchor-heading" href="#deleteprojectsnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteProjectSnapshot</h3>
<ul>
<li>description: Delete a saved snapshot of project configuration</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deploytostage"><a aria-hidden="true" class="anchor-heading" href="#deploytostage"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeployToStage</h3>
<ul>
<li>description: Deploy changes to the specified stage</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describebundle"><a aria-hidden="true" class="anchor-heading" href="#describebundle"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeBundle</h3>
<ul>
<li>description: Describe the download bundle</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="exportbundle"><a aria-hidden="true" class="anchor-heading" href="#exportbundle"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ExportBundle</h3>
<ul>
<li>description: Export the download bundle</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="exportproject"><a aria-hidden="true" class="anchor-heading" href="#exportproject"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ExportProject</h3>
<ul>
<li>description: Export the project configuration</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="generateprojectparameters"><a aria-hidden="true" class="anchor-heading" href="#generateprojectparameters"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GenerateProjectParameters</h3>
<ul>
<li>description: Generate project parameters required for code generation</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getproject"><a aria-hidden="true" class="anchor-heading" href="#getproject"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetProject</h3>
<ul>
<li>description: Get project configuration and resources</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getprojectsnapshot"><a aria-hidden="true" class="anchor-heading" href="#getprojectsnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetProjectSnapshot</h3>
<ul>
<li>description: Fetch the previously exported project configuration snapshot</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="importproject"><a aria-hidden="true" class="anchor-heading" href="#importproject"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ImportProject</h3>
<ul>
<li>description: Create a new project from the previously exported project configuration</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="installbundle"><a aria-hidden="true" class="anchor-heading" href="#installbundle"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>InstallBundle</h3>
<ul>
<li>description: Install a bundle in the project deployments S3 bucket</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listavailableconnectors"><a aria-hidden="true" class="anchor-heading" href="#listavailableconnectors"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAvailableConnectors</h3>
<ul>
<li>description: List the available SaaS (Software as a Service) connectors</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listavailablefeatures"><a aria-hidden="true" class="anchor-heading" href="#listavailablefeatures"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAvailableFeatures</h3>
<ul>
<li>description: List available features</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listavailableregions"><a aria-hidden="true" class="anchor-heading" href="#listavailableregions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAvailableRegions</h3>
<ul>
<li>description: List available regions for projects</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listbundles"><a aria-hidden="true" class="anchor-heading" href="#listbundles"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListBundles</h3>
<ul>
<li>description: List the available download bundles</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listprojectsnapshots"><a aria-hidden="true" class="anchor-heading" href="#listprojectsnapshots"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListProjectSnapshots</h3>
<ul>
<li>description: List saved snapshots of project configuration</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listprojects"><a aria-hidden="true" class="anchor-heading" href="#listprojects"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListProjects</h3>
<ul>
<li>description: List projects</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="synchronizeproject"><a aria-hidden="true" class="anchor-heading" href="#synchronizeproject"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SynchronizeProject</h3>
<ul>
<li>description: Synchronize state of resources into project</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateproject"><a aria-hidden="true" class="anchor-heading" href="#updateproject"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateProject</h3>
<ul>
<li>description: Update project</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="validateproject"><a aria-hidden="true" class="anchor-heading" href="#validateproject"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ValidateProject</h3>
<ul>
<li>description: Validate a mobile hub project.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="verifyservicerole"><a aria-hidden="true" class="anchor-heading" href="#verifyservicerole"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>VerifyServiceRole</h3>
<ul>
<li>description: Verify AWS Mobile Hub is enabled in the account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Mobile Hub"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Direct Connect.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Direct Connect - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Direct Connect.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Direct Connect.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Direct Connect.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Direct Connect - undefined" />
  <meta name="twitter:title" content="Direct Connect - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Direct Connect</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Direct Connect">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="direct-connect"><a aria-hidden="true" class="anchor-heading" href="#direct-connect"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Direct Connect</h1>
<ul>
<li>prefix: directconnect</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="acceptdirectconnectgatewayassociationproposal"><a aria-hidden="true" class="anchor-heading" href="#acceptdirectconnectgatewayassociationproposal"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AcceptDirectConnectGatewayAssociationProposal</h3>
<ul>
<li>description: Accepts a proposal request to attach a virtual private gateway to a Direct Connect gateway.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dx-gateway": {
        "resource_type": "dx-gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="allocateconnectiononinterconnect"><a aria-hidden="true" class="anchor-heading" href="#allocateconnectiononinterconnect"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AllocateConnectionOnInterconnect</h3>
<ul>
<li>description: Creates a hosted connection on an interconnect.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxcon": {
        "resource_type": "dxcon",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="allocatehostedconnection"><a aria-hidden="true" class="anchor-heading" href="#allocatehostedconnection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AllocateHostedConnection</h3>
<ul>
<li>description: Creates a new hosted connection between a AWS Direct Connect partner's network and a specific AWS Direct Connect location.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxcon": {
        "resource_type": "dxcon",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dxlag": {
        "resource_type": "dxlag",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="allocateprivatevirtualinterface"><a aria-hidden="true" class="anchor-heading" href="#allocateprivatevirtualinterface"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AllocatePrivateVirtualInterface</h3>
<ul>
<li>description: Provisions a private virtual interface to be owned by a different customer.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxcon": {
        "resource_type": "dxcon",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dxlag": {
        "resource_type": "dxlag",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="allocatepublicvirtualinterface"><a aria-hidden="true" class="anchor-heading" href="#allocatepublicvirtualinterface"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AllocatePublicVirtualInterface</h3>
<ul>
<li>description: Provisions a public virtual interface to be owned by a different customer.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxcon": {
        "resource_type": "dxcon",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dxlag": {
        "resource_type": "dxlag",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="allocatetransitvirtualinterface"><a aria-hidden="true" class="anchor-heading" href="#allocatetransitvirtualinterface"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AllocateTransitVirtualInterface</h3>
<ul>
<li>description: Provisions a transit virtual interface to be owned by a different customer.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxcon": {
        "resource_type": "dxcon",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dxlag": {
        "resource_type": "dxlag",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="associateconnectionwithlag"><a aria-hidden="true" class="anchor-heading" href="#associateconnectionwithlag"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateConnectionWithLag</h3>
<ul>
<li>description: Associates a connection with a LAG.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxcon": {
        "resource_type": "dxcon",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dxlag": {
        "resource_type": "dxlag",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="associatehostedconnection"><a aria-hidden="true" class="anchor-heading" href="#associatehostedconnection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateHostedConnection</h3>
<ul>
<li>description: Associates a hosted connection and its virtual interfaces with a link aggregation group (LAG) or interconnect.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxcon": {
        "resource_type": "dxcon",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dxlag": {
        "resource_type": "dxlag",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="associatevirtualinterface"><a aria-hidden="true" class="anchor-heading" href="#associatevirtualinterface"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateVirtualInterface</h3>
<ul>
<li>description: Associates a virtual interface with a specified link aggregation group (LAG) or connection.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxvif": {
        "resource_type": "dxvif",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dxcon": {
        "resource_type": "dxcon",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dxlag": {
        "resource_type": "dxlag",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="confirmconnection"><a aria-hidden="true" class="anchor-heading" href="#confirmconnection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ConfirmConnection</h3>
<ul>
<li>description: Confirm the creation of a hosted connection on an interconnect.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxcon": {
        "resource_type": "dxcon",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="confirmprivatevirtualinterface"><a aria-hidden="true" class="anchor-heading" href="#confirmprivatevirtualinterface"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ConfirmPrivateVirtualInterface</h3>
<ul>
<li>description: Accept ownership of a private virtual interface created by another customer.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxvif": {
        "resource_type": "dxvif",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="confirmpublicvirtualinterface"><a aria-hidden="true" class="anchor-heading" href="#confirmpublicvirtualinterface"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ConfirmPublicVirtualInterface</h3>
<ul>
<li>description: Accept ownership of a public virtual interface created by another customer</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxvif": {
        "resource_type": "dxvif",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="confirmtransitvirtualinterface"><a aria-hidden="true" class="anchor-heading" href="#confirmtransitvirtualinterface"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ConfirmTransitVirtualInterface</h3>
<ul>
<li>description: Accept ownership of a transit virtual interface created by another customer</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxvif": {
        "resource_type": "dxvif",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createbgppeer"><a aria-hidden="true" class="anchor-heading" href="#createbgppeer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateBGPPeer</h3>
<ul>
<li>description: Creates a BGP peer on the specified virtual interface.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxvif": {
        "resource_type": "dxvif",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createconnection"><a aria-hidden="true" class="anchor-heading" href="#createconnection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateConnection</h3>
<ul>
<li>description: Creates a new connection between the customer network and a specific AWS Direct Connect location.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxlag": {
        "resource_type": "dxlag",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdirectconnectgateway"><a aria-hidden="true" class="anchor-heading" href="#createdirectconnectgateway"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDirectConnectGateway</h3>
<ul>
<li>description: Creates a Direct Connect gateway, which is an intermediate object that enables you to connect a set of virtual interfaces and virtual private gateways.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdirectconnectgatewayassociation"><a aria-hidden="true" class="anchor-heading" href="#createdirectconnectgatewayassociation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDirectConnectGatewayAssociation</h3>
<ul>
<li>description: Creates an association between a Direct Connect gateway and a virtual private gateway.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dx-gateway": {
        "resource_type": "dx-gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdirectconnectgatewayassociationproposal"><a aria-hidden="true" class="anchor-heading" href="#createdirectconnectgatewayassociationproposal"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDirectConnectGatewayAssociationProposal</h3>
<ul>
<li>description: Creates a proposal to associate the specified virtual private gateway with the specified Direct Connect gateway.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dx-gateway": {
        "resource_type": "dx-gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createinterconnect"><a aria-hidden="true" class="anchor-heading" href="#createinterconnect"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateInterconnect</h3>
<ul>
<li>description: Creates a new interconnect between a AWS Direct Connect partner's network and a specific AWS Direct Connect location.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxlag": {
        "resource_type": "dxlag",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createlag"><a aria-hidden="true" class="anchor-heading" href="#createlag"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateLag</h3>
<ul>
<li>description: Creates a link aggregation group (LAG) with the specified number of bundled physical connections between the customer network and a specific AWS Direct Connect location.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxcon": {
        "resource_type": "dxcon",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createprivatevirtualinterface"><a aria-hidden="true" class="anchor-heading" href="#createprivatevirtualinterface"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreatePrivateVirtualInterface</h3>
<ul>
<li>description: Creates a new private virtual interface.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxcon": {
        "resource_type": "dxcon",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dxlag": {
        "resource_type": "dxlag",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createpublicvirtualinterface"><a aria-hidden="true" class="anchor-heading" href="#createpublicvirtualinterface"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreatePublicVirtualInterface</h3>
<ul>
<li>description: Creates a new public virtual interface.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxcon": {
        "resource_type": "dxcon",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dxlag": {
        "resource_type": "dxlag",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtransitvirtualinterface"><a aria-hidden="true" class="anchor-heading" href="#createtransitvirtualinterface"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTransitVirtualInterface</h3>
<ul>
<li>description: Creates a new transit virtual interface.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxcon": {
        "resource_type": "dxcon",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dxlag": {
        "resource_type": "dxlag",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletebgppeer"><a aria-hidden="true" class="anchor-heading" href="#deletebgppeer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteBGPPeer</h3>
<ul>
<li>description: Deletes the specified BGP peer on the specified virtual interface with the specified customer address and ASN.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxvif": {
        "resource_type": "dxvif",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteconnection"><a aria-hidden="true" class="anchor-heading" href="#deleteconnection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteConnection</h3>
<ul>
<li>description: Deletes the connection.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxcon": {
        "resource_type": "dxcon",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedirectconnectgateway"><a aria-hidden="true" class="anchor-heading" href="#deletedirectconnectgateway"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDirectConnectGateway</h3>
<ul>
<li>description: Deletes the specified Direct Connect gateway.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dx-gateway": {
        "resource_type": "dx-gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedirectconnectgatewayassociation"><a aria-hidden="true" class="anchor-heading" href="#deletedirectconnectgatewayassociation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDirectConnectGatewayAssociation</h3>
<ul>
<li>description: Deletes the association between the specified Direct Connect gateway and virtual private gateway.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dx-gateway": {
        "resource_type": "dx-gateway",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedirectconnectgatewayassociationproposal"><a aria-hidden="true" class="anchor-heading" href="#deletedirectconnectgatewayassociationproposal"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDirectConnectGatewayAssociationProposal</h3>
<ul>
<li>description: Deletes the association proposal request between the specified Direct Connect gateway and virtual private gateway.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteinterconnect"><a aria-hidden="true" class="anchor-heading" href="#deleteinterconnect"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteInterconnect</h3>
<ul>
<li>description: Deletes the specified interconnect.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxcon": {
        "resource_type": "dxcon",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletelag"><a aria-hidden="true" class="anchor-heading" href="#deletelag"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteLag</h3>
<ul>
<li>description: Deletes the specified link aggregation group (LAG).</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxlag": {
        "resource_type": "dxlag",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletevirtualinterface"><a aria-hidden="true" class="anchor-heading" href="#deletevirtualinterface"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteVirtualInterface</h3>
<ul>
<li>description: Deletes a virtual interface.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxvif": {
        "resource_type": "dxvif",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeconnectionloa"><a aria-hidden="true" class="anchor-heading" href="#describeconnectionloa"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeConnectionLoa</h3>
<ul>
<li>description: Returns the LOA-CFA for a Connection.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxcon": {
        "resource_type": "dxcon",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeconnections"><a aria-hidden="true" class="anchor-heading" href="#describeconnections"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeConnections</h3>
<ul>
<li>description: Displays all connections in this region.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxcon": {
        "resource_type": "dxcon",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeconnectionsoninterconnect"><a aria-hidden="true" class="anchor-heading" href="#describeconnectionsoninterconnect"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeConnectionsOnInterconnect</h3>
<ul>
<li>description: Return a list of connections that have been provisioned on the given interconnect.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxcon": {
        "resource_type": "dxcon",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedirectconnectgatewayassociationproposals"><a aria-hidden="true" class="anchor-heading" href="#describedirectconnectgatewayassociationproposals"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDirectConnectGatewayAssociationProposals</h3>
<ul>
<li>description: Describes one or more association proposals for connection between a virtual private gateway and a Direct Connect gateway.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dx-gateway": {
        "resource_type": "dx-gateway",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedirectconnectgatewayassociations"><a aria-hidden="true" class="anchor-heading" href="#describedirectconnectgatewayassociations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDirectConnectGatewayAssociations</h3>
<ul>
<li>description: Lists the associations between your Direct Connect gateways and virtual private gateways.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dx-gateway": {
        "resource_type": "dx-gateway",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedirectconnectgatewayattachments"><a aria-hidden="true" class="anchor-heading" href="#describedirectconnectgatewayattachments"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDirectConnectGatewayAttachments</h3>
<ul>
<li>description: Lists the attachments between your Direct Connect gateways and virtual interfaces.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dx-gateway": {
        "resource_type": "dx-gateway",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedirectconnectgateways"><a aria-hidden="true" class="anchor-heading" href="#describedirectconnectgateways"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDirectConnectGateways</h3>
<ul>
<li>description: Lists all your Direct Connect gateways or only the specified Direct Connect gateway.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dx-gateway": {
        "resource_type": "dx-gateway",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describehostedconnections"><a aria-hidden="true" class="anchor-heading" href="#describehostedconnections"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeHostedConnections</h3>
<ul>
<li>description: Lists the hosted connections that have been provisioned on the specified interconnect or link aggregation group (LAG).</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxcon": {
        "resource_type": "dxcon",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dxlag": {
        "resource_type": "dxlag",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeinterconnectloa"><a aria-hidden="true" class="anchor-heading" href="#describeinterconnectloa"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeInterconnectLoa</h3>
<ul>
<li>description: Returns the LOA-CFA for an Interconnect.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxcon": {
        "resource_type": "dxcon",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeinterconnects"><a aria-hidden="true" class="anchor-heading" href="#describeinterconnects"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeInterconnects</h3>
<ul>
<li>description: Returns a list of interconnects owned by the AWS account.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxcon": {
        "resource_type": "dxcon",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describelags"><a aria-hidden="true" class="anchor-heading" href="#describelags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeLags</h3>
<ul>
<li>description: Describes all your link aggregation groups (LAG) or the specified LAG.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxlag": {
        "resource_type": "dxlag",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeloa"><a aria-hidden="true" class="anchor-heading" href="#describeloa"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeLoa</h3>
<ul>
<li>description: Gets the LOA-CFA for a connection, interconnect, or link aggregation group (LAG).</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxcon": {
        "resource_type": "dxcon",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dxlag": {
        "resource_type": "dxlag",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describelocations"><a aria-hidden="true" class="anchor-heading" href="#describelocations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeLocations</h3>
<ul>
<li>description: Returns the list of AWS Direct Connect locations in the current AWS region.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetags"><a aria-hidden="true" class="anchor-heading" href="#describetags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTags</h3>
<ul>
<li>description: Describes the tags associated with the specified AWS Direct Connect resources.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxcon": {
        "resource_type": "dxcon",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dxlag": {
        "resource_type": "dxlag",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dxvif": {
        "resource_type": "dxvif",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describevirtualgateways"><a aria-hidden="true" class="anchor-heading" href="#describevirtualgateways"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeVirtualGateways</h3>
<ul>
<li>description: Returns a list of virtual private gateways owned by the AWS account.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describevirtualinterfaces"><a aria-hidden="true" class="anchor-heading" href="#describevirtualinterfaces"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeVirtualInterfaces</h3>
<ul>
<li>description: Displays all virtual interfaces for an AWS account.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxcon": {
        "resource_type": "dxcon",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dxlag": {
        "resource_type": "dxlag",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dxvif": {
        "resource_type": "dxvif",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociateconnectionfromlag"><a aria-hidden="true" class="anchor-heading" href="#disassociateconnectionfromlag"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateConnectionFromLag</h3>
<ul>
<li>description: Disassociates a connection from a link aggregation group (LAG).</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxcon": {
        "resource_type": "dxcon",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dxlag": {
        "resource_type": "dxlag",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listvirtualinterfacetesthistory"><a aria-hidden="true" class="anchor-heading" href="#listvirtualinterfacetesthistory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListVirtualInterfaceTestHistory</h3>
<ul>
<li>description: Lists the virtual interface failover test history.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxvif": {
        "resource_type": "dxvif",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startbgpfailovertest"><a aria-hidden="true" class="anchor-heading" href="#startbgpfailovertest"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartBgpFailoverTest</h3>
<ul>
<li>description: Starts the virtual interface failover test that verifies your configuration meets your resiliency requirements by placing the BGP peering session in the DOWN state. You can then send traffic to verify that there are no outages.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxvif": {
        "resource_type": "dxvif",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopbgpfailovertest"><a aria-hidden="true" class="anchor-heading" href="#stopbgpfailovertest"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopBgpFailoverTest</h3>
<ul>
<li>description: Stops the virtual interface failover test.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxvif": {
        "resource_type": "dxvif",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Adds the specified tags to the specified AWS Direct Connect resource. Each resource can have a maximum of 50 tags.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxcon": {
        "resource_type": "dxcon",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dxlag": {
        "resource_type": "dxlag",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dxvif": {
        "resource_type": "dxvif",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Removes one or more tags from the specified AWS Direct Connect resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxcon": {
        "resource_type": "dxcon",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dxlag": {
        "resource_type": "dxlag",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dxvif": {
        "resource_type": "dxvif",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatedirectconnectgatewayassociation"><a aria-hidden="true" class="anchor-heading" href="#updatedirectconnectgatewayassociation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateDirectConnectGatewayAssociation</h3>
<ul>
<li>description: Updates the specified attributes of the Direct Connect gateway association.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatelag"><a aria-hidden="true" class="anchor-heading" href="#updatelag"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateLag</h3>
<ul>
<li>description: Updates the attributes of the specified link aggregation group (LAG).</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxlag": {
        "resource_type": "dxlag",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatevirtualinterfaceattributes"><a aria-hidden="true" class="anchor-heading" href="#updatevirtualinterfaceattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateVirtualInterfaceAttributes</h3>
<ul>
<li>description: Updates the specified attributes of the specified virtual private interface.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dxvif": {
        "resource_type": "dxvif",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Direct Connect"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Data Pipeline.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Data Pipeline - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Data Pipeline.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Data Pipeline.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Data Pipeline.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Data Pipeline - undefined" />
  <meta name="twitter:title" content="Data Pipeline - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Data Pipeline</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Data Pipeline">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="data-pipeline"><a aria-hidden="true" class="anchor-heading" href="#data-pipeline"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Data Pipeline</h1>
<ul>
<li>prefix: datapipeline</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="activatepipeline"><a aria-hidden="true" class="anchor-heading" href="#activatepipeline"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ActivatePipeline</h3>
<ul>
<li>description: Validates the specified pipeline and starts processing pipeline tasks. If the pipeline does not pass validation, activation fails.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "datapipeline:PipelineCreator",
            "datapipeline:Tag",
            "datapipeline:workerGroup"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="addtags"><a aria-hidden="true" class="anchor-heading" href="#addtags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddTags</h3>
<ul>
<li>description: Adds or modifies tags for the specified pipeline.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "datapipeline:PipelineCreator",
            "datapipeline:Tag"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createpipeline"><a aria-hidden="true" class="anchor-heading" href="#createpipeline"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreatePipeline</h3>
<ul>
<li>description: Creates a new, empty pipeline.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "datapipeline:Tag"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deactivatepipeline"><a aria-hidden="true" class="anchor-heading" href="#deactivatepipeline"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeactivatePipeline</h3>
<ul>
<li>description: Deactivates the specified running pipeline.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "datapipeline:PipelineCreator",
            "datapipeline:Tag",
            "datapipeline:workerGroup"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletepipeline"><a aria-hidden="true" class="anchor-heading" href="#deletepipeline"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeletePipeline</h3>
<ul>
<li>description: Deletes a pipeline, its pipeline definition, and its run history.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "datapipeline:PipelineCreator",
            "datapipeline:Tag"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeobjects"><a aria-hidden="true" class="anchor-heading" href="#describeobjects"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeObjects</h3>
<ul>
<li>description: Gets the object definitions for a set of objects associated with the pipeline.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "datapipeline:PipelineCreator",
            "datapipeline:Tag"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describepipelines"><a aria-hidden="true" class="anchor-heading" href="#describepipelines"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribePipelines</h3>
<ul>
<li>description: Retrieves metadata about one or more pipelines.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "datapipeline:PipelineCreator",
            "datapipeline:Tag"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="evaluateexpression"><a aria-hidden="true" class="anchor-heading" href="#evaluateexpression"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EvaluateExpression</h3>
<ul>
<li>description: Task runners call EvaluateExpression to evaluate a string in the context of the specified object.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "datapipeline:PipelineCreator",
            "datapipeline:Tag"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getaccountlimits"><a aria-hidden="true" class="anchor-heading" href="#getaccountlimits"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAccountLimits</h3>
<ul>
<li>description: Description for GetAccountLimits</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getpipelinedefinition"><a aria-hidden="true" class="anchor-heading" href="#getpipelinedefinition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetPipelineDefinition</h3>
<ul>
<li>description: Gets the definition of the specified pipeline.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "datapipeline:PipelineCreator",
            "datapipeline:Tag",
            "datapipeline:workerGroup"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listpipelines"><a aria-hidden="true" class="anchor-heading" href="#listpipelines"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPipelines</h3>
<ul>
<li>description: Lists the pipeline identifiers for all active pipelines that you have permission to access.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="pollfortask"><a aria-hidden="true" class="anchor-heading" href="#pollfortask"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PollForTask</h3>
<ul>
<li>description: Task runners call PollForTask to receive a task to perform from AWS Data Pipeline.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "datapipeline:workerGroup"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putaccountlimits"><a aria-hidden="true" class="anchor-heading" href="#putaccountlimits"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutAccountLimits</h3>
<ul>
<li>description: Description for PutAccountLimits</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putpipelinedefinition"><a aria-hidden="true" class="anchor-heading" href="#putpipelinedefinition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutPipelineDefinition</h3>
<ul>
<li>description: Adds tasks, schedules, and preconditions to the specified pipeline.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "datapipeline:PipelineCreator",
            "datapipeline:Tag",
            "datapipeline:workerGroup"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="queryobjects"><a aria-hidden="true" class="anchor-heading" href="#queryobjects"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>QueryObjects</h3>
<ul>
<li>description: Queries the specified pipeline for the names of objects that match the specified set of conditions.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "datapipeline:PipelineCreator",
            "datapipeline:Tag"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="removetags"><a aria-hidden="true" class="anchor-heading" href="#removetags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemoveTags</h3>
<ul>
<li>description: Removes existing tags from the specified pipeline.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "datapipeline:PipelineCreator",
            "datapipeline:Tag"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="reporttaskprogress"><a aria-hidden="true" class="anchor-heading" href="#reporttaskprogress"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ReportTaskProgress</h3>
<ul>
<li>description: Task runners call ReportTaskProgress when assigned a task to acknowledge that it has the task.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="reporttaskrunnerheartbeat"><a aria-hidden="true" class="anchor-heading" href="#reporttaskrunnerheartbeat"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ReportTaskRunnerHeartbeat</h3>
<ul>
<li>description: Task runners call ReportTaskRunnerHeartbeat every 15 minutes to indicate that they are operational.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setstatus"><a aria-hidden="true" class="anchor-heading" href="#setstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetStatus</h3>
<ul>
<li>description: Requests that the status of the specified physical or logical pipeline objects be updated in the specified pipeline.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "datapipeline:PipelineCreator",
            "datapipeline:Tag"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="settaskstatus"><a aria-hidden="true" class="anchor-heading" href="#settaskstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetTaskStatus</h3>
<ul>
<li>description: Task runners call SetTaskStatus to notify AWS Data Pipeline that a task is completed and provide information about the final status.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="validatepipelinedefinition"><a aria-hidden="true" class="anchor-heading" href="#validatepipelinedefinition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ValidatePipelineDefinition</h3>
<ul>
<li>description: Validates the specified pipeline definition to ensure that it is well formed and can be run without error.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "datapipeline:PipelineCreator",
            "datapipeline:Tag",
            "datapipeline:workerGroup"
        ],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Data Pipeline"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-CodeArtifact.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>CodeArtifact - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-CodeArtifact.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-CodeArtifact.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-CodeArtifact.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="CodeArtifact - undefined" />
  <meta name="twitter:title" content="CodeArtifact - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">CodeArtifact</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="CodeArtifact">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="codeartifact"><a aria-hidden="true" class="anchor-heading" href="#codeartifact"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CodeArtifact</h1>
<ul>
<li>prefix: codeartifact</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="associateexternalconnection"><a aria-hidden="true" class="anchor-heading" href="#associateexternalconnection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateExternalConnection</h3>
<ul>
<li>description: Grants permission to add an external connection to a repository</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="associatewithdownstreamrepository"><a aria-hidden="true" class="anchor-heading" href="#associatewithdownstreamrepository"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateWithDownstreamRepository</h3>
<ul>
<li>description: Grants permission to associate an existing repository as an upstream repository to another repository</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="copypackageversions"><a aria-hidden="true" class="anchor-heading" href="#copypackageversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CopyPackageVersions</h3>
<ul>
<li>description: Grants permission to copy package versions from one repository to another repository in the same domain.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdomain"><a aria-hidden="true" class="anchor-heading" href="#createdomain"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDomain</h3>
<ul>
<li>description: Grants permission to create a new domain</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createrepository"><a aria-hidden="true" class="anchor-heading" href="#createrepository"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateRepository</h3>
<ul>
<li>description: Grants permission to create a new repository</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedomain"><a aria-hidden="true" class="anchor-heading" href="#deletedomain"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDomain</h3>
<ul>
<li>description: Grants permission to delete a domain</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedomainpermissionspolicy"><a aria-hidden="true" class="anchor-heading" href="#deletedomainpermissionspolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDomainPermissionsPolicy</h3>
<ul>
<li>description: Grants permission to delete the resource policy set on a domain</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletepackageversions"><a aria-hidden="true" class="anchor-heading" href="#deletepackageversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeletePackageVersions</h3>
<ul>
<li>description: Grants permission to delete package versions</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "package": {
        "resource_type": "package",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleterepository"><a aria-hidden="true" class="anchor-heading" href="#deleterepository"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteRepository</h3>
<ul>
<li>description: Grants permission to delete a repository</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleterepositorypermissionspolicy"><a aria-hidden="true" class="anchor-heading" href="#deleterepositorypermissionspolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteRepositoryPermissionsPolicy</h3>
<ul>
<li>description: Grants permission to delete the resource policy set on a repository</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedomain"><a aria-hidden="true" class="anchor-heading" href="#describedomain"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDomain</h3>
<ul>
<li>description: Grants permission to return information about a domain</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describepackageversion"><a aria-hidden="true" class="anchor-heading" href="#describepackageversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribePackageVersion</h3>
<ul>
<li>description: Grants permission to return information about a package version</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "package": {
        "resource_type": "package",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describerepository"><a aria-hidden="true" class="anchor-heading" href="#describerepository"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeRepository</h3>
<ul>
<li>description: Grants permission to return detailed information about a repository</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociateexternalconnection"><a aria-hidden="true" class="anchor-heading" href="#disassociateexternalconnection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateExternalConnection</h3>
<ul>
<li>description: Grants permission to disassociate an external connection from a repository</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disposepackageversions"><a aria-hidden="true" class="anchor-heading" href="#disposepackageversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisposePackageVersions</h3>
<ul>
<li>description: Grants permission to set the status of package versions to Disposed and delete their assets</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "package": {
        "resource_type": "package",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getauthorizationtoken"><a aria-hidden="true" class="anchor-heading" href="#getauthorizationtoken"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAuthorizationToken</h3>
<ul>
<li>description: Grants permission to generate a temporary authentication token for accessing repositories in a domain</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdomainpermissionspolicy"><a aria-hidden="true" class="anchor-heading" href="#getdomainpermissionspolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDomainPermissionsPolicy</h3>
<ul>
<li>description: Grants permission to return a domain's resource policy</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getpackageversionasset"><a aria-hidden="true" class="anchor-heading" href="#getpackageversionasset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetPackageVersionAsset</h3>
<ul>
<li>description: Grants permission to return an asset (or file) that is part of a package version</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "package": {
        "resource_type": "package",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getpackageversionreadme"><a aria-hidden="true" class="anchor-heading" href="#getpackageversionreadme"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetPackageVersionReadme</h3>
<ul>
<li>description: Grants permission to return a package version's readme file</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "package": {
        "resource_type": "package",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getrepositoryendpoint"><a aria-hidden="true" class="anchor-heading" href="#getrepositoryendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRepositoryEndpoint</h3>
<ul>
<li>description: Grants permission to return an endpoint for a repository</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getrepositorypermissionspolicy"><a aria-hidden="true" class="anchor-heading" href="#getrepositorypermissionspolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRepositoryPermissionsPolicy</h3>
<ul>
<li>description: Grants permission to return a repository's resource policy</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdomains"><a aria-hidden="true" class="anchor-heading" href="#listdomains"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDomains</h3>
<ul>
<li>description: Grants permission to list the domains in the current user's AWS account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listpackageversionassets"><a aria-hidden="true" class="anchor-heading" href="#listpackageversionassets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPackageVersionAssets</h3>
<ul>
<li>description: Grants permission to list a package version's assets</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "package": {
        "resource_type": "package",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listpackageversiondependencies"><a aria-hidden="true" class="anchor-heading" href="#listpackageversiondependencies"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPackageVersionDependencies</h3>
<ul>
<li>description: Grants permission to list the direct dependencies of a package version</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "package": {
        "resource_type": "package",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listpackageversions"><a aria-hidden="true" class="anchor-heading" href="#listpackageversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPackageVersions</h3>
<ul>
<li>description: Grants permission to list a package's versions</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "package": {
        "resource_type": "package",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listpackages"><a aria-hidden="true" class="anchor-heading" href="#listpackages"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPackages</h3>
<ul>
<li>description: Grants permission to list the packages in a repository</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listrepositories"><a aria-hidden="true" class="anchor-heading" href="#listrepositories"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListRepositories</h3>
<ul>
<li>description: Grants permission to list the repositories administered by the calling account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listrepositoriesindomain"><a aria-hidden="true" class="anchor-heading" href="#listrepositoriesindomain"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListRepositoriesInDomain</h3>
<ul>
<li>description: Grants permission to list the repositories in a domain</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="publishpackageversion"><a aria-hidden="true" class="anchor-heading" href="#publishpackageversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PublishPackageVersion</h3>
<ul>
<li>description: Grants permission to publish assets and metadata to a repository endpoint</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "package": {
        "resource_type": "package",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putdomainpermissionspolicy"><a aria-hidden="true" class="anchor-heading" href="#putdomainpermissionspolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutDomainPermissionsPolicy</h3>
<ul>
<li>description: Grants permission to attach a resource policy to a domain</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putpackagemetadata"><a aria-hidden="true" class="anchor-heading" href="#putpackagemetadata"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutPackageMetadata</h3>
<ul>
<li>description: Grants permission to add, modify or remove package metadata using a repository endpoint</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "package": {
        "resource_type": "package",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putrepositorypermissionspolicy"><a aria-hidden="true" class="anchor-heading" href="#putrepositorypermissionspolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutRepositoryPermissionsPolicy</h3>
<ul>
<li>description: Grants permission to attach a resource policy to a repository</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="readfromrepository"><a aria-hidden="true" class="anchor-heading" href="#readfromrepository"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ReadFromRepository</h3>
<ul>
<li>description: Grants permission to return package assets and metadata from a repository endpoint</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatepackageversionsstatus"><a aria-hidden="true" class="anchor-heading" href="#updatepackageversionsstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdatePackageVersionsStatus</h3>
<ul>
<li>description: Grants permission to modify the status of one or more versions of a package</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "package": {
        "resource_type": "package",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updaterepository"><a aria-hidden="true" class="anchor-heading" href="#updaterepository"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateRepository</h3>
<ul>
<li>description: Grants permission to modify the properties of a repository</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-CodeArtifact"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-CodePipeline.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>CodePipeline - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-CodePipeline.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-CodePipeline.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-CodePipeline.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="CodePipeline - undefined" />
  <meta name="twitter:title" content="CodePipeline - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">CodePipeline</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="CodePipeline">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="codepipeline"><a aria-hidden="true" class="anchor-heading" href="#codepipeline"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CodePipeline</h1>
<ul>
<li>prefix: codepipeline</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="acknowledgejob"><a aria-hidden="true" class="anchor-heading" href="#acknowledgejob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AcknowledgeJob</h3>
<ul>
<li>description: Grants permission to view information about a specified job and whether that job has been received by the job worker</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="acknowledgethirdpartyjob"><a aria-hidden="true" class="anchor-heading" href="#acknowledgethirdpartyjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AcknowledgeThirdPartyJob</h3>
<ul>
<li>description: Grants permission to confirm that a job worker has received the specified job (partner actions only)</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createcustomactiontype"><a aria-hidden="true" class="anchor-heading" href="#createcustomactiontype"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateCustomActionType</h3>
<ul>
<li>description: Grants permission to create a custom action that you can use in the pipelines associated with your AWS account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "actiontype": {
        "resource_type": "actiontype",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createpipeline"><a aria-hidden="true" class="anchor-heading" href="#createpipeline"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreatePipeline</h3>
<ul>
<li>description: Grants permission to create a uniquely named pipeline</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "pipeline": {
        "resource_type": "pipeline",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletecustomactiontype"><a aria-hidden="true" class="anchor-heading" href="#deletecustomactiontype"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteCustomActionType</h3>
<ul>
<li>description: Grants permission to delete a custom action</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "actiontype": {
        "resource_type": "actiontype",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletepipeline"><a aria-hidden="true" class="anchor-heading" href="#deletepipeline"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeletePipeline</h3>
<ul>
<li>description: Grants permission to delete a specified pipeline</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "pipeline": {
        "resource_type": "pipeline",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletewebhook"><a aria-hidden="true" class="anchor-heading" href="#deletewebhook"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteWebhook</h3>
<ul>
<li>description: Grants permission to delete a specified webhook</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "webhook": {
        "resource_type": "webhook",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deregisterwebhookwiththirdparty"><a aria-hidden="true" class="anchor-heading" href="#deregisterwebhookwiththirdparty"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeregisterWebhookWithThirdParty</h3>
<ul>
<li>description: Grants permission to remove the registration of a webhook with the third party specified in its configuration</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "webhook": {
        "resource_type": "webhook",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disablestagetransition"><a aria-hidden="true" class="anchor-heading" href="#disablestagetransition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisableStageTransition</h3>
<ul>
<li>description: Grants permission to prevent revisions from transitioning to the next stage in a pipeline</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stage": {
        "resource_type": "stage",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="enablestagetransition"><a aria-hidden="true" class="anchor-heading" href="#enablestagetransition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EnableStageTransition</h3>
<ul>
<li>description: Grants permission to allow revisions to transition to the next stage in a pipeline</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stage": {
        "resource_type": "stage",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getjobdetails"><a aria-hidden="true" class="anchor-heading" href="#getjobdetails"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetJobDetails</h3>
<ul>
<li>description: Grants permission to view information about a job (custom actions only)</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getpipeline"><a aria-hidden="true" class="anchor-heading" href="#getpipeline"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetPipeline</h3>
<ul>
<li>description: Grants permission to retrieve information about a pipeline structure</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "pipeline": {
        "resource_type": "pipeline",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getpipelineexecution"><a aria-hidden="true" class="anchor-heading" href="#getpipelineexecution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetPipelineExecution</h3>
<ul>
<li>description: Grants permission to view information about an execution of a pipeline, including details about artifacts, the pipeline execution ID, and the name, version, and status of the pipeline</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "pipeline": {
        "resource_type": "pipeline",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getpipelinestate"><a aria-hidden="true" class="anchor-heading" href="#getpipelinestate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetPipelineState</h3>
<ul>
<li>description: Grants permission to view information about the current state of the stages and actions of a pipeline</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "pipeline": {
        "resource_type": "pipeline",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getthirdpartyjobdetails"><a aria-hidden="true" class="anchor-heading" href="#getthirdpartyjobdetails"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetThirdPartyJobDetails</h3>
<ul>
<li>description: Grants permission to view the details of a job for a third-party action (partner actions only)</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listactionexecutions"><a aria-hidden="true" class="anchor-heading" href="#listactionexecutions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListActionExecutions</h3>
<ul>
<li>description: Grants permission to list the action executions that have occurred in a pipeline</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "pipeline": {
        "resource_type": "pipeline",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listactiontypes"><a aria-hidden="true" class="anchor-heading" href="#listactiontypes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListActionTypes</h3>
<ul>
<li>description: Grants permission to list a summary of all the action types available for pipelines in your account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listpipelineexecutions"><a aria-hidden="true" class="anchor-heading" href="#listpipelineexecutions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPipelineExecutions</h3>
<ul>
<li>description: Grants permission to list a summary of the most recent executions for a pipeline</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "pipeline": {
        "resource_type": "pipeline",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listpipelines"><a aria-hidden="true" class="anchor-heading" href="#listpipelines"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPipelines</h3>
<ul>
<li>description: Grants permission to list a summary of all the pipelines associated with your AWS account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Grants permission to list tags for a CodePipeline resource</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "actiontype": {
        "resource_type": "actiontype",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "pipeline": {
        "resource_type": "pipeline",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "webhook": {
        "resource_type": "webhook",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listwebhooks"><a aria-hidden="true" class="anchor-heading" href="#listwebhooks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListWebhooks</h3>
<ul>
<li>description: Grants permission to list all of the webhooks associated with your AWS account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "webhook": {
        "resource_type": "webhook",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="pollforjobs"><a aria-hidden="true" class="anchor-heading" href="#pollforjobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PollForJobs</h3>
<ul>
<li>description: Grants permission to view information about any jobs for CodePipeline to act on</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "actiontype": {
        "resource_type": "actiontype",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="pollforthirdpartyjobs"><a aria-hidden="true" class="anchor-heading" href="#pollforthirdpartyjobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PollForThirdPartyJobs</h3>
<ul>
<li>description: Grants permission to determine whether there are any third-party jobs for a job worker to act on (partner actions only)</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putactionrevision"><a aria-hidden="true" class="anchor-heading" href="#putactionrevision"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutActionRevision</h3>
<ul>
<li>description: Grants permission to edit actions in a pipeline</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "action": {
        "resource_type": "action",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putapprovalresult"><a aria-hidden="true" class="anchor-heading" href="#putapprovalresult"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutApprovalResult</h3>
<ul>
<li>description: Grants permission to provide a response (Approved or Rejected) to a manual approval request in CodePipeline</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "action": {
        "resource_type": "action",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putjobfailureresult"><a aria-hidden="true" class="anchor-heading" href="#putjobfailureresult"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutJobFailureResult</h3>
<ul>
<li>description: Grants permission to represent the failure of a job as returned to the pipeline by a job worker (custom actions only)</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putjobsuccessresult"><a aria-hidden="true" class="anchor-heading" href="#putjobsuccessresult"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutJobSuccessResult</h3>
<ul>
<li>description: Grants permission to represent the success of a job as returned to the pipeline by a job worker (custom actions only)</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putthirdpartyjobfailureresult"><a aria-hidden="true" class="anchor-heading" href="#putthirdpartyjobfailureresult"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutThirdPartyJobFailureResult</h3>
<ul>
<li>description: Grants permission to represent the failure of a third-party job as returned to the pipeline by a job worker (partner actions only)</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putthirdpartyjobsuccessresult"><a aria-hidden="true" class="anchor-heading" href="#putthirdpartyjobsuccessresult"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutThirdPartyJobSuccessResult</h3>
<ul>
<li>description: Grants permission to represent the success of a third-party job as returned to the pipeline by a job worker (partner actions only)</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putwebhook"><a aria-hidden="true" class="anchor-heading" href="#putwebhook"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutWebhook</h3>
<ul>
<li>description: Grants permission to create or update a webhook</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "pipeline": {
        "resource_type": "pipeline",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "webhook": {
        "resource_type": "webhook",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registerwebhookwiththirdparty"><a aria-hidden="true" class="anchor-heading" href="#registerwebhookwiththirdparty"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterWebhookWithThirdParty</h3>
<ul>
<li>description: Grants permission to register a webhook with the third party specified in its configuration</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "webhook": {
        "resource_type": "webhook",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="retrystageexecution"><a aria-hidden="true" class="anchor-heading" href="#retrystageexecution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RetryStageExecution</h3>
<ul>
<li>description: Grants permission to resume the pipeline execution by retrying the last failed actions in a stage</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stage": {
        "resource_type": "stage",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startpipelineexecution"><a aria-hidden="true" class="anchor-heading" href="#startpipelineexecution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartPipelineExecution</h3>
<ul>
<li>description: Grants permission to run the most recent revision through the pipeline</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "pipeline": {
        "resource_type": "pipeline",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stoppipelineexecution"><a aria-hidden="true" class="anchor-heading" href="#stoppipelineexecution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopPipelineExecution</h3>
<ul>
<li>description: Grants permission to stop an in-progress pipeline execution</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "pipeline": {
        "resource_type": "pipeline",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Grants permission to tag a CodePipeline resource</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "actiontype": {
        "resource_type": "actiontype",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "pipeline": {
        "resource_type": "pipeline",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "webhook": {
        "resource_type": "webhook",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Grants permission to remove a tag from a CodePipeline resource</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "actiontype": {
        "resource_type": "actiontype",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "pipeline": {
        "resource_type": "pipeline",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "webhook": {
        "resource_type": "webhook",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatepipeline"><a aria-hidden="true" class="anchor-heading" href="#updatepipeline"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdatePipeline</h3>
<ul>
<li>description: Grants permission to update a pipeline with changes to the structure of the pipeline</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "pipeline": {
        "resource_type": "pipeline",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-CodePipeline"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-IoT.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>IoT - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-IoT.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-IoT.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-IoT.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="IoT - undefined" />
  <meta name="twitter:title" content="IoT - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">IoT</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="IoT">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="iot"><a aria-hidden="true" class="anchor-heading" href="#iot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>IoT</h1>
<ul>
<li>prefix: iot</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="acceptcertificatetransfer"><a aria-hidden="true" class="anchor-heading" href="#acceptcertificatetransfer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AcceptCertificateTransfer</h3>
<ul>
<li>description: Accepts a pending certificate transfer.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cert": {
        "resource_type": "cert",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="addthingtobillinggroup"><a aria-hidden="true" class="anchor-heading" href="#addthingtobillinggroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddThingToBillingGroup</h3>
<ul>
<li>description: Adds a thing to the specified billing group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "billinggroup": {
        "resource_type": "billinggroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "thing": {
        "resource_type": "thing",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="addthingtothinggroup"><a aria-hidden="true" class="anchor-heading" href="#addthingtothinggroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddThingToThingGroup</h3>
<ul>
<li>description: Adds a thing to the specified thing group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "thing": {
        "resource_type": "thing",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "thinggroup": {
        "resource_type": "thinggroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="associatetargetswithjob"><a aria-hidden="true" class="anchor-heading" href="#associatetargetswithjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateTargetsWithJob</h3>
<ul>
<li>description: Associates a group with a continuous job.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "job": {
        "resource_type": "job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "thing": {
        "resource_type": "thing",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "thinggroup": {
        "resource_type": "thinggroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="attachpolicy"><a aria-hidden="true" class="anchor-heading" href="#attachpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AttachPolicy</h3>
<ul>
<li>description: Attaches a policy to the specified target.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cert": {
        "resource_type": "cert",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "thinggroup": {
        "resource_type": "thinggroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="attachprincipalpolicy"><a aria-hidden="true" class="anchor-heading" href="#attachprincipalpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AttachPrincipalPolicy</h3>
<ul>
<li>description: Attaches the specified policy to the specified principal (certificate or other credential).</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cert": {
        "resource_type": "cert",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="attachsecurityprofile"><a aria-hidden="true" class="anchor-heading" href="#attachsecurityprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AttachSecurityProfile</h3>
<ul>
<li>description: Associates a Device Defender security profile with a thing group or with this account.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "securityprofile": {
        "resource_type": "securityprofile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dimension": {
        "resource_type": "dimension",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "thinggroup": {
        "resource_type": "thinggroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="attachthingprincipal"><a aria-hidden="true" class="anchor-heading" href="#attachthingprincipal"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AttachThingPrincipal</h3>
<ul>
<li>description: Attaches the specified principal to the specified thing.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="cancelauditmitigationactionstask"><a aria-hidden="true" class="anchor-heading" href="#cancelauditmitigationactionstask"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CancelAuditMitigationActionsTask</h3>
<ul>
<li>description: Cancels a mitigation action task that is in progress.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="cancelaudittask"><a aria-hidden="true" class="anchor-heading" href="#cancelaudittask"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CancelAuditTask</h3>
<ul>
<li>description: Cancels an audit that is in progress. The audit can be either scheduled or on-demand.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="cancelcertificatetransfer"><a aria-hidden="true" class="anchor-heading" href="#cancelcertificatetransfer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CancelCertificateTransfer</h3>
<ul>
<li>description: Cancels a pending transfer for the specified certificate.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cert": {
        "resource_type": "cert",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="canceljob"><a aria-hidden="true" class="anchor-heading" href="#canceljob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CancelJob</h3>
<ul>
<li>description: Cancels a job.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "job": {
        "resource_type": "job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="canceljobexecution"><a aria-hidden="true" class="anchor-heading" href="#canceljobexecution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CancelJobExecution</h3>
<ul>
<li>description: Cancels a job execution on a particular device.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "job": {
        "resource_type": "job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "thing": {
        "resource_type": "thing",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="cleardefaultauthorizer"><a aria-hidden="true" class="anchor-heading" href="#cleardefaultauthorizer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ClearDefaultAuthorizer</h3>
<ul>
<li>description: Clears the default authorizer.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="closetunnel"><a aria-hidden="true" class="anchor-heading" href="#closetunnel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CloseTunnel</h3>
<ul>
<li>description: Closes a tunnel.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "tunnel": {
        "resource_type": "tunnel",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "iot:Delete"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="connect"><a aria-hidden="true" class="anchor-heading" href="#connect"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Connect</h3>
<ul>
<li>description: Connect as the specified client</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "client": {
        "resource_type": "client",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createauditsuppression"><a aria-hidden="true" class="anchor-heading" href="#createauditsuppression"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateAuditSuppression</h3>
<ul>
<li>description: Creates a Device Defender audit suppression.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createauthorizer"><a aria-hidden="true" class="anchor-heading" href="#createauthorizer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateAuthorizer</h3>
<ul>
<li>description: Creates an authorizer.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "authorizer": {
        "resource_type": "authorizer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createbillinggroup"><a aria-hidden="true" class="anchor-heading" href="#createbillinggroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateBillingGroup</h3>
<ul>
<li>description: Creates a billing group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "billinggroup": {
        "resource_type": "billinggroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createcertificatefromcsr"><a aria-hidden="true" class="anchor-heading" href="#createcertificatefromcsr"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateCertificateFromCsr</h3>
<ul>
<li>description: Creates an X.509 certificate using the specified certificate signing request.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdimension"><a aria-hidden="true" class="anchor-heading" href="#createdimension"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDimension</h3>
<ul>
<li>description: Defines a dimension that can be used to to limit the scope of a metric used in a security profile.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dimension": {
        "resource_type": "dimension",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdomainconfiguration"><a aria-hidden="true" class="anchor-heading" href="#createdomainconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDomainConfiguration</h3>
<ul>
<li>description: Creates a domain configuration.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domainconfiguration": {
        "resource_type": "domainconfiguration",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "iot:DomainName"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdynamicthinggroup"><a aria-hidden="true" class="anchor-heading" href="#createdynamicthinggroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDynamicThingGroup</h3>
<ul>
<li>description: Creates a Dynamic Thing Group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dynamicthinggroup": {
        "resource_type": "dynamicthinggroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createjob"><a aria-hidden="true" class="anchor-heading" href="#createjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateJob</h3>
<ul>
<li>description: Creates a job.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "job": {
        "resource_type": "job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "thing": {
        "resource_type": "thing",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "thinggroup": {
        "resource_type": "thinggroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createkeysandcertificate"><a aria-hidden="true" class="anchor-heading" href="#createkeysandcertificate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateKeysAndCertificate</h3>
<ul>
<li>description: Creates a 2048 bit RSA key pair and issues an X.509 certificate using the issued public key.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createmitigationaction"><a aria-hidden="true" class="anchor-heading" href="#createmitigationaction"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateMitigationAction</h3>
<ul>
<li>description: Defines an action that can be applied to audit findings by using StartAuditMitigationActionsTask.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "mitigationaction": {
        "resource_type": "mitigationaction",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createotaupdate"><a aria-hidden="true" class="anchor-heading" href="#createotaupdate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateOTAUpdate</h3>
<ul>
<li>description: Creates an OTA update job.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "otaupdate": {
        "resource_type": "otaupdate",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createpolicy"><a aria-hidden="true" class="anchor-heading" href="#createpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreatePolicy</h3>
<ul>
<li>description: Creates an AWS IoT policy.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "policy": {
        "resource_type": "policy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createpolicyversion"><a aria-hidden="true" class="anchor-heading" href="#createpolicyversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreatePolicyVersion</h3>
<ul>
<li>description: Creates a new version of the specified AWS IoT policy.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "policy": {
        "resource_type": "policy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createprovisioningclaim"><a aria-hidden="true" class="anchor-heading" href="#createprovisioningclaim"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateProvisioningClaim</h3>
<ul>
<li>description: Creates a provisioning claim.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "provisioningtemplate": {
        "resource_type": "provisioningtemplate",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createprovisioningtemplate"><a aria-hidden="true" class="anchor-heading" href="#createprovisioningtemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateProvisioningTemplate</h3>
<ul>
<li>description: Creates a fleet provisioning template.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "provisioningtemplate": {
        "resource_type": "provisioningtemplate",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createprovisioningtemplateversion"><a aria-hidden="true" class="anchor-heading" href="#createprovisioningtemplateversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateProvisioningTemplateVersion</h3>
<ul>
<li>description: Creates a new version of a fleet provisioning template.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "provisioningtemplate": {
        "resource_type": "provisioningtemplate",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createrolealias"><a aria-hidden="true" class="anchor-heading" href="#createrolealias"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateRoleAlias</h3>
<ul>
<li>description: Creates a role alias.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "rolealias": {
        "resource_type": "rolealias",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createscheduledaudit"><a aria-hidden="true" class="anchor-heading" href="#createscheduledaudit"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateScheduledAudit</h3>
<ul>
<li>description: Creates a scheduled audit that is run at a specified time interval.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "scheduledaudit": {
        "resource_type": "scheduledaudit",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createsecurityprofile"><a aria-hidden="true" class="anchor-heading" href="#createsecurityprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSecurityProfile</h3>
<ul>
<li>description: Creates a Device Defender security profile.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "securityprofile": {
        "resource_type": "securityprofile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dimension": {
        "resource_type": "dimension",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createstream"><a aria-hidden="true" class="anchor-heading" href="#createstream"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateStream</h3>
<ul>
<li>description: Creates a new AWS IoT stream</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="creatething"><a aria-hidden="true" class="anchor-heading" href="#creatething"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateThing</h3>
<ul>
<li>description: Creates a thing in the thing registry.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "thing": {
        "resource_type": "thing",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "billinggroup": {
        "resource_type": "billinggroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createthinggroup"><a aria-hidden="true" class="anchor-heading" href="#createthinggroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateThingGroup</h3>
<ul>
<li>description: Creates a thing group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "thinggroup": {
        "resource_type": "thinggroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createthingtype"><a aria-hidden="true" class="anchor-heading" href="#createthingtype"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateThingType</h3>
<ul>
<li>description: Creates a new thing type.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "thingtype": {
        "resource_type": "thingtype",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtopicrule"><a aria-hidden="true" class="anchor-heading" href="#createtopicrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTopicRule</h3>
<ul>
<li>description: Creates a rule.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "rule": {
        "resource_type": "rule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteaccountauditconfiguration"><a aria-hidden="true" class="anchor-heading" href="#deleteaccountauditconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAccountAuditConfiguration</h3>
<ul>
<li>description: Deletes the audit configuration associated with the account.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteauditsuppression"><a aria-hidden="true" class="anchor-heading" href="#deleteauditsuppression"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAuditSuppression</h3>
<ul>
<li>description: Deletes a Device Defender audit suppression.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteauthorizer"><a aria-hidden="true" class="anchor-heading" href="#deleteauthorizer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAuthorizer</h3>
<ul>
<li>description: Deletes the specified authorizer.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "authorizer": {
        "resource_type": "authorizer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletebillinggroup"><a aria-hidden="true" class="anchor-heading" href="#deletebillinggroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteBillingGroup</h3>
<ul>
<li>description: Deletes the specified billing group.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "billinggroup": {
        "resource_type": "billinggroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletecacertificate"><a aria-hidden="true" class="anchor-heading" href="#deletecacertificate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteCACertificate</h3>
<ul>
<li>description: Deletes a registered CA certificate.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cacert": {
        "resource_type": "cacert",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletecertificate"><a aria-hidden="true" class="anchor-heading" href="#deletecertificate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteCertificate</h3>
<ul>
<li>description: Deletes the specified certificate.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cert": {
        "resource_type": "cert",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedimension"><a aria-hidden="true" class="anchor-heading" href="#deletedimension"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDimension</h3>
<ul>
<li>description: Removes the specified dimension from your AWS account.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dimension": {
        "resource_type": "dimension",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedomainconfiguration"><a aria-hidden="true" class="anchor-heading" href="#deletedomainconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDomainConfiguration</h3>
<ul>
<li>description: Deletes a domain configuration.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domainconfiguration": {
        "resource_type": "domainconfiguration",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedynamicthinggroup"><a aria-hidden="true" class="anchor-heading" href="#deletedynamicthinggroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDynamicThingGroup</h3>
<ul>
<li>description: Deletes the specified Dynamic Thing Group</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dynamicthinggroup": {
        "resource_type": "dynamicthinggroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletejob"><a aria-hidden="true" class="anchor-heading" href="#deletejob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteJob</h3>
<ul>
<li>description: Deletes a job and its related job executions.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "job": {
        "resource_type": "job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletejobexecution"><a aria-hidden="true" class="anchor-heading" href="#deletejobexecution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteJobExecution</h3>
<ul>
<li>description: Deletes a job execution.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "job": {
        "resource_type": "job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "thing": {
        "resource_type": "thing",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletemitigationaction"><a aria-hidden="true" class="anchor-heading" href="#deletemitigationaction"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteMitigationAction</h3>
<ul>
<li>description: Deletes a defined mitigation action from your AWS account.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "mitigationaction": {
        "resource_type": "mitigationaction",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteotaupdate"><a aria-hidden="true" class="anchor-heading" href="#deleteotaupdate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteOTAUpdate</h3>
<ul>
<li>description: Deletes an OTA update job.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "otaupdate": {
        "resource_type": "otaupdate",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletepolicy"><a aria-hidden="true" class="anchor-heading" href="#deletepolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeletePolicy</h3>
<ul>
<li>description: Deletes the specified policy.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "policy": {
        "resource_type": "policy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletepolicyversion"><a aria-hidden="true" class="anchor-heading" href="#deletepolicyversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeletePolicyVersion</h3>
<ul>
<li>description: Deletes the specified version of the specified policy.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "policy": {
        "resource_type": "policy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteprovisioningtemplate"><a aria-hidden="true" class="anchor-heading" href="#deleteprovisioningtemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteProvisioningTemplate</h3>
<ul>
<li>description: Deletes a fleet provisioning template.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "provisioningtemplate": {
        "resource_type": "provisioningtemplate",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteprovisioningtemplateversion"><a aria-hidden="true" class="anchor-heading" href="#deleteprovisioningtemplateversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteProvisioningTemplateVersion</h3>
<ul>
<li>description: Deletes a fleet provisioning template version.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "provisioningtemplate": {
        "resource_type": "provisioningtemplate",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteregistrationcode"><a aria-hidden="true" class="anchor-heading" href="#deleteregistrationcode"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteRegistrationCode</h3>
<ul>
<li>description: Deletes a CA certificate registration code.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleterolealias"><a aria-hidden="true" class="anchor-heading" href="#deleterolealias"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteRoleAlias</h3>
<ul>
<li>description: Deletes the specified role alias.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "rolealias": {
        "resource_type": "rolealias",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletescheduledaudit"><a aria-hidden="true" class="anchor-heading" href="#deletescheduledaudit"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteScheduledAudit</h3>
<ul>
<li>description: Deletes a scheduled audit.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "scheduledaudit": {
        "resource_type": "scheduledaudit",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletesecurityprofile"><a aria-hidden="true" class="anchor-heading" href="#deletesecurityprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteSecurityProfile</h3>
<ul>
<li>description: Deletes a Device Defender security profile.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "securityprofile": {
        "resource_type": "securityprofile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dimension": {
        "resource_type": "dimension",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletestream"><a aria-hidden="true" class="anchor-heading" href="#deletestream"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteStream</h3>
<ul>
<li>description: Deletes a specified stream.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletething"><a aria-hidden="true" class="anchor-heading" href="#deletething"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteThing</h3>
<ul>
<li>description: Deletes the specified thing.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "thing": {
        "resource_type": "thing",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletethinggroup"><a aria-hidden="true" class="anchor-heading" href="#deletethinggroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteThingGroup</h3>
<ul>
<li>description: Deletes the specified thing group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "thinggroup": {
        "resource_type": "thinggroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletethingshadow"><a aria-hidden="true" class="anchor-heading" href="#deletethingshadow"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteThingShadow</h3>
<ul>
<li>description: Deletes the specified thing shadow.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "thing": {
        "resource_type": "thing",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletethingtype"><a aria-hidden="true" class="anchor-heading" href="#deletethingtype"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteThingType</h3>
<ul>
<li>description: Deletes the specified thing type.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "thingtype": {
        "resource_type": "thingtype",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetopicrule"><a aria-hidden="true" class="anchor-heading" href="#deletetopicrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTopicRule</h3>
<ul>
<li>description: Deletes the specified rule.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "rule": {
        "resource_type": "rule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletev2logginglevel"><a aria-hidden="true" class="anchor-heading" href="#deletev2logginglevel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteV2LoggingLevel</h3>
<ul>
<li>description: Deletes the specified v2 logging level.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deprecatethingtype"><a aria-hidden="true" class="anchor-heading" href="#deprecatethingtype"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeprecateThingType</h3>
<ul>
<li>description: Deprecates the specified thing type.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "thingtype": {
        "resource_type": "thingtype",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeaccountauditconfiguration"><a aria-hidden="true" class="anchor-heading" href="#describeaccountauditconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAccountAuditConfiguration</h3>
<ul>
<li>description: Gets information about audit configurations for the account.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeauditfinding"><a aria-hidden="true" class="anchor-heading" href="#describeauditfinding"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAuditFinding</h3>
<ul>
<li>description: Gets information about a single audit finding. Properties include the reason for noncompliance, the severity of the issue, and when the audit that returned the finding was started.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeauditmitigationactionstask"><a aria-hidden="true" class="anchor-heading" href="#describeauditmitigationactionstask"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAuditMitigationActionsTask</h3>
<ul>
<li>description: Gets information about an audit mitigation task that is used to apply mitigation actions to a set of audit findings.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeauditsuppression"><a aria-hidden="true" class="anchor-heading" href="#describeauditsuppression"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAuditSuppression</h3>
<ul>
<li>description: Gets information about a Device Defender audit suppression.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeaudittask"><a aria-hidden="true" class="anchor-heading" href="#describeaudittask"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAuditTask</h3>
<ul>
<li>description: Gets information about a Device Defender audit.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeauthorizer"><a aria-hidden="true" class="anchor-heading" href="#describeauthorizer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAuthorizer</h3>
<ul>
<li>description: Describes an authorizer.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "authorizer": {
        "resource_type": "authorizer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describebillinggroup"><a aria-hidden="true" class="anchor-heading" href="#describebillinggroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeBillingGroup</h3>
<ul>
<li>description: Gets information about the specified billing group.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "billinggroup": {
        "resource_type": "billinggroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecacertificate"><a aria-hidden="true" class="anchor-heading" href="#describecacertificate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeCACertificate</h3>
<ul>
<li>description: Describes a registered CA certificate.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cacert": {
        "resource_type": "cacert",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecertificate"><a aria-hidden="true" class="anchor-heading" href="#describecertificate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeCertificate</h3>
<ul>
<li>description: Gets information about the specified certificate.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cert": {
        "resource_type": "cert",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedefaultauthorizer"><a aria-hidden="true" class="anchor-heading" href="#describedefaultauthorizer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDefaultAuthorizer</h3>
<ul>
<li>description: Describes the default authorizer.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedimension"><a aria-hidden="true" class="anchor-heading" href="#describedimension"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDimension</h3>
<ul>
<li>description: Provides details about a dimension that is defined in your AWS account.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dimension": {
        "resource_type": "dimension",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedomainconfiguration"><a aria-hidden="true" class="anchor-heading" href="#describedomainconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDomainConfiguration</h3>
<ul>
<li>description: Gets information about the domain configuration.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domainconfiguration": {
        "resource_type": "domainconfiguration",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeendpoint"><a aria-hidden="true" class="anchor-heading" href="#describeendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEndpoint</h3>
<ul>
<li>description: Returns a unique endpoint specific to the AWS account making the call.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeeventconfigurations"><a aria-hidden="true" class="anchor-heading" href="#describeeventconfigurations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEventConfigurations</h3>
<ul>
<li>description: Returns account event configurations.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeindex"><a aria-hidden="true" class="anchor-heading" href="#describeindex"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeIndex</h3>
<ul>
<li>description: Gets information about the specified index.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "index": {
        "resource_type": "index",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describejob"><a aria-hidden="true" class="anchor-heading" href="#describejob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeJob</h3>
<ul>
<li>description: Describes a job.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "job": {
        "resource_type": "job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describejobexecution"><a aria-hidden="true" class="anchor-heading" href="#describejobexecution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeJobExecution</h3>
<ul>
<li>description: Describes a job execution.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "job": {
        "resource_type": "job",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "thing": {
        "resource_type": "thing",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describemitigationaction"><a aria-hidden="true" class="anchor-heading" href="#describemitigationaction"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeMitigationAction</h3>
<ul>
<li>description: Gets information about a mitigation action.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "mitigationaction": {
        "resource_type": "mitigationaction",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeprovisioningtemplate"><a aria-hidden="true" class="anchor-heading" href="#describeprovisioningtemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeProvisioningTemplate</h3>
<ul>
<li>description: Returns information about a fleet provisioning template.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "provisioningtemplate": {
        "resource_type": "provisioningtemplate",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeprovisioningtemplateversion"><a aria-hidden="true" class="anchor-heading" href="#describeprovisioningtemplateversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeProvisioningTemplateVersion</h3>
<ul>
<li>description: Returns information about a fleet provisioning template version.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "provisioningtemplate": {
        "resource_type": "provisioningtemplate",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describerolealias"><a aria-hidden="true" class="anchor-heading" href="#describerolealias"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeRoleAlias</h3>
<ul>
<li>description: Describes a role alias.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "rolealias": {
        "resource_type": "rolealias",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describescheduledaudit"><a aria-hidden="true" class="anchor-heading" href="#describescheduledaudit"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeScheduledAudit</h3>
<ul>
<li>description: Gets information about a scheduled audit.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "scheduledaudit": {
        "resource_type": "scheduledaudit",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describesecurityprofile"><a aria-hidden="true" class="anchor-heading" href="#describesecurityprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSecurityProfile</h3>
<ul>
<li>description: Gets information about a Device Defender security profile.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "securityprofile": {
        "resource_type": "securityprofile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describestream"><a aria-hidden="true" class="anchor-heading" href="#describestream"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeStream</h3>
<ul>
<li>description: Gets information about the specified stream.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describething"><a aria-hidden="true" class="anchor-heading" href="#describething"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeThing</h3>
<ul>
<li>description: Gets information about the specified thing.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "thing": {
        "resource_type": "thing",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describethinggroup"><a aria-hidden="true" class="anchor-heading" href="#describethinggroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeThingGroup</h3>
<ul>
<li>description: Gets information about the specified thing group.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "thinggroup": {
        "resource_type": "thinggroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describethingregistrationtask"><a aria-hidden="true" class="anchor-heading" href="#describethingregistrationtask"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeThingRegistrationTask</h3>
<ul>
<li>description: Gets information about the bulk thing registration task.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describethingtype"><a aria-hidden="true" class="anchor-heading" href="#describethingtype"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeThingType</h3>
<ul>
<li>description: Gets information about the specified thing type.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "thingtype": {
        "resource_type": "thingtype",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetunnel"><a aria-hidden="true" class="anchor-heading" href="#describetunnel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTunnel</h3>
<ul>
<li>description: Describes a tunnel.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "tunnel": {
        "resource_type": "tunnel",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="detachpolicy"><a aria-hidden="true" class="anchor-heading" href="#detachpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DetachPolicy</h3>
<ul>
<li>description: Detaches a policy from the specified target.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cert": {
        "resource_type": "cert",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "thinggroup": {
        "resource_type": "thinggroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="detachprincipalpolicy"><a aria-hidden="true" class="anchor-heading" href="#detachprincipalpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DetachPrincipalPolicy</h3>
<ul>
<li>description: Removes the specified policy from the specified certificate.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cert": {
        "resource_type": "cert",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="detachsecurityprofile"><a aria-hidden="true" class="anchor-heading" href="#detachsecurityprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DetachSecurityProfile</h3>
<ul>
<li>description: Disassociates a Device Defender security profile from a thing group or from this account.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "securityprofile": {
        "resource_type": "securityprofile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dimension": {
        "resource_type": "dimension",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "thinggroup": {
        "resource_type": "thinggroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="detachthingprincipal"><a aria-hidden="true" class="anchor-heading" href="#detachthingprincipal"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DetachThingPrincipal</h3>
<ul>
<li>description: Detaches the specified principal from the specified thing.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disabletopicrule"><a aria-hidden="true" class="anchor-heading" href="#disabletopicrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisableTopicRule</h3>
<ul>
<li>description: Disables the specified rule.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "rule": {
        "resource_type": "rule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="enabletopicrule"><a aria-hidden="true" class="anchor-heading" href="#enabletopicrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EnableTopicRule</h3>
<ul>
<li>description: Enables the specified rule.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "rule": {
        "resource_type": "rule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcardinality"><a aria-hidden="true" class="anchor-heading" href="#getcardinality"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCardinality</h3>
<ul>
<li>description: Get cardinality for IoT fleet index</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "index": {
        "resource_type": "index",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="geteffectivepolicies"><a aria-hidden="true" class="anchor-heading" href="#geteffectivepolicies"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetEffectivePolicies</h3>
<ul>
<li>description: Gets effective policies.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cert": {
        "resource_type": "cert",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getindexingconfiguration"><a aria-hidden="true" class="anchor-heading" href="#getindexingconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetIndexingConfiguration</h3>
<ul>
<li>description: Gets current fleet indexing configuration</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getjobdocument"><a aria-hidden="true" class="anchor-heading" href="#getjobdocument"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetJobDocument</h3>
<ul>
<li>description: Gets a job document.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "job": {
        "resource_type": "job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getloggingoptions"><a aria-hidden="true" class="anchor-heading" href="#getloggingoptions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetLoggingOptions</h3>
<ul>
<li>description: Gets the logging options.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getotaupdate"><a aria-hidden="true" class="anchor-heading" href="#getotaupdate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetOTAUpdate</h3>
<ul>
<li>description: Gets the information about the OTA update job.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "otaupdate": {
        "resource_type": "otaupdate",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getpendingjobexecutions"><a aria-hidden="true" class="anchor-heading" href="#getpendingjobexecutions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetPendingJobExecutions</h3>
<ul>
<li>description: Gets the list of all jobs for a thing that are not in a terminal state.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "thing": {
        "resource_type": "thing",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getpercentiles"><a aria-hidden="true" class="anchor-heading" href="#getpercentiles"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetPercentiles</h3>
<ul>
<li>description: Get percentiles for IoT fleet index</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "index": {
        "resource_type": "index",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getpolicy"><a aria-hidden="true" class="anchor-heading" href="#getpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetPolicy</h3>
<ul>
<li>description: Gets information about the specified policy with the policy document of the default version.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "policy": {
        "resource_type": "policy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getpolicyversion"><a aria-hidden="true" class="anchor-heading" href="#getpolicyversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetPolicyVersion</h3>
<ul>
<li>description: Gets information about the specified policy version.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "policy": {
        "resource_type": "policy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getregistrationcode"><a aria-hidden="true" class="anchor-heading" href="#getregistrationcode"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRegistrationCode</h3>
<ul>
<li>description: Gets a registration code used to register a CA certificate with AWS IoT.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getstatistics"><a aria-hidden="true" class="anchor-heading" href="#getstatistics"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetStatistics</h3>
<ul>
<li>description: Get statistics for IoT fleet index</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "index": {
        "resource_type": "index",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getthingshadow"><a aria-hidden="true" class="anchor-heading" href="#getthingshadow"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetThingShadow</h3>
<ul>
<li>description: Gets the thing shadow.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "thing": {
        "resource_type": "thing",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gettopicrule"><a aria-hidden="true" class="anchor-heading" href="#gettopicrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetTopicRule</h3>
<ul>
<li>description: Gets information about the specified rule.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "rule": {
        "resource_type": "rule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getv2loggingoptions"><a aria-hidden="true" class="anchor-heading" href="#getv2loggingoptions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetV2LoggingOptions</h3>
<ul>
<li>description: Gets v2 logging options.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listactiveviolations"><a aria-hidden="true" class="anchor-heading" href="#listactiveviolations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListActiveViolations</h3>
<ul>
<li>description: Lists the active violations for a given Device Defender security profile or Thing.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "securityprofile": {
        "resource_type": "securityprofile",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "thing": {
        "resource_type": "thing",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listattachedpolicies"><a aria-hidden="true" class="anchor-heading" href="#listattachedpolicies"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAttachedPolicies</h3>
<ul>
<li>description: Lists the policies attached to the specified thing group.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listauditfindings"><a aria-hidden="true" class="anchor-heading" href="#listauditfindings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAuditFindings</h3>
<ul>
<li>description: Lists the findings (results) of a Device Defender audit or of the audits performed during a specified time period.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listauditmitigationactionsexecutions"><a aria-hidden="true" class="anchor-heading" href="#listauditmitigationactionsexecutions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAuditMitigationActionsExecutions</h3>
<ul>
<li>description: Gets the status of audit mitigation action tasks that were executed.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listauditmitigationactionstasks"><a aria-hidden="true" class="anchor-heading" href="#listauditmitigationactionstasks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAuditMitigationActionsTasks</h3>
<ul>
<li>description: Gets a list of audit mitigation action tasks that match the specified filters.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listauditsuppressions"><a aria-hidden="true" class="anchor-heading" href="#listauditsuppressions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAuditSuppressions</h3>
<ul>
<li>description: Lists your Device Defender audit suppressions.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listaudittasks"><a aria-hidden="true" class="anchor-heading" href="#listaudittasks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAuditTasks</h3>
<ul>
<li>description: Lists the Device Defender audits that have been performed during a given time period.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listauthorizers"><a aria-hidden="true" class="anchor-heading" href="#listauthorizers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAuthorizers</h3>
<ul>
<li>description: Lists the authorizers registered in your account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listbillinggroups"><a aria-hidden="true" class="anchor-heading" href="#listbillinggroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListBillingGroups</h3>
<ul>
<li>description: Lists all billing groups.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listcacertificates"><a aria-hidden="true" class="anchor-heading" href="#listcacertificates"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListCACertificates</h3>
<ul>
<li>description: Lists the CA certificates registered for your AWS account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listcertificates"><a aria-hidden="true" class="anchor-heading" href="#listcertificates"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListCertificates</h3>
<ul>
<li>description: Lists your certificates.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listcertificatesbyca"><a aria-hidden="true" class="anchor-heading" href="#listcertificatesbyca"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListCertificatesByCA</h3>
<ul>
<li>description: List the device certificates signed by the specified CA certificate.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdimensions"><a aria-hidden="true" class="anchor-heading" href="#listdimensions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDimensions</h3>
<ul>
<li>description: Lists the dimensions that are defined for your AWS account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdomainconfigurations"><a aria-hidden="true" class="anchor-heading" href="#listdomainconfigurations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDomainConfigurations</h3>
<ul>
<li>description: Lists the domain configuration created by your AWS account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listindices"><a aria-hidden="true" class="anchor-heading" href="#listindices"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListIndices</h3>
<ul>
<li>description: Lists all indices for fleet index</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listjobexecutionsforjob"><a aria-hidden="true" class="anchor-heading" href="#listjobexecutionsforjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListJobExecutionsForJob</h3>
<ul>
<li>description: Lists the job executions for a job.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "job": {
        "resource_type": "job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listjobexecutionsforthing"><a aria-hidden="true" class="anchor-heading" href="#listjobexecutionsforthing"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListJobExecutionsForThing</h3>
<ul>
<li>description: Lists the job executions for the specified thing.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "thing": {
        "resource_type": "thing",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listjobs"><a aria-hidden="true" class="anchor-heading" href="#listjobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListJobs</h3>
<ul>
<li>description: Lists jobs.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listmitigationactions"><a aria-hidden="true" class="anchor-heading" href="#listmitigationactions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListMitigationActions</h3>
<ul>
<li>description: Gets a list of all mitigation actions that match the specified filter criteria.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listnamedshadowsforthing"><a aria-hidden="true" class="anchor-heading" href="#listnamedshadowsforthing"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListNamedShadowsForThing</h3>
<ul>
<li>description: Lists all named shadows for a given thing.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "thing": {
        "resource_type": "thing",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listotaupdates"><a aria-hidden="true" class="anchor-heading" href="#listotaupdates"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListOTAUpdates</h3>
<ul>
<li>description: Lists OTA update jobs in the account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listoutgoingcertificates"><a aria-hidden="true" class="anchor-heading" href="#listoutgoingcertificates"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListOutgoingCertificates</h3>
<ul>
<li>description: Lists certificates that are being transfered but not yet accepted.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listpolicies"><a aria-hidden="true" class="anchor-heading" href="#listpolicies"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPolicies</h3>
<ul>
<li>description: Lists your policies.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listpolicyprincipals"><a aria-hidden="true" class="anchor-heading" href="#listpolicyprincipals"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPolicyPrincipals</h3>
<ul>
<li>description: Lists the principals associated with the specified policy.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listpolicyversions"><a aria-hidden="true" class="anchor-heading" href="#listpolicyversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPolicyVersions</h3>
<ul>
<li>description: Lists the versions of the specified policy, and identifies the default version.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "policy": {
        "resource_type": "policy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listprincipalpolicies"><a aria-hidden="true" class="anchor-heading" href="#listprincipalpolicies"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPrincipalPolicies</h3>
<ul>
<li>description: Lists the policies attached to the specified principal. If you use an Amazon Cognito identity, the ID needs to be in Amazon Cognito Identity format.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listprincipalthings"><a aria-hidden="true" class="anchor-heading" href="#listprincipalthings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPrincipalThings</h3>
<ul>
<li>description: Lists the things associated with the specified principal.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listprovisioningtemplateversions"><a aria-hidden="true" class="anchor-heading" href="#listprovisioningtemplateversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListProvisioningTemplateVersions</h3>
<ul>
<li>description: A list of fleet provisioning template versions.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "provisioningtemplate": {
        "resource_type": "provisioningtemplate",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listprovisioningtemplates"><a aria-hidden="true" class="anchor-heading" href="#listprovisioningtemplates"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListProvisioningTemplates</h3>
<ul>
<li>description: Lists the fleet provisioning templates in your AWS account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listrolealiases"><a aria-hidden="true" class="anchor-heading" href="#listrolealiases"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListRoleAliases</h3>
<ul>
<li>description: Lists role aliases.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listscheduledaudits"><a aria-hidden="true" class="anchor-heading" href="#listscheduledaudits"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListScheduledAudits</h3>
<ul>
<li>description: Lists all of your scheduled audits.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listsecurityprofiles"><a aria-hidden="true" class="anchor-heading" href="#listsecurityprofiles"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListSecurityProfiles</h3>
<ul>
<li>description: Lists the Device Defender security profiles you have created.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dimension": {
        "resource_type": "dimension",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listsecurityprofilesfortarget"><a aria-hidden="true" class="anchor-heading" href="#listsecurityprofilesfortarget"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListSecurityProfilesForTarget</h3>
<ul>
<li>description: Lists the Device Defender security profiles attached to a target.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "thinggroup": {
        "resource_type": "thinggroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="liststreams"><a aria-hidden="true" class="anchor-heading" href="#liststreams"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListStreams</h3>
<ul>
<li>description: Lists the streams in your account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Lists all tags for a given resource.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "authorizer": {
        "resource_type": "authorizer",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "billinggroup": {
        "resource_type": "billinggroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "cacert": {
        "resource_type": "cacert",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dimension": {
        "resource_type": "dimension",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "domainconfiguration": {
        "resource_type": "domainconfiguration",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dynamicthinggroup": {
        "resource_type": "dynamicthinggroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "job": {
        "resource_type": "job",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "mitigationaction": {
        "resource_type": "mitigationaction",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "otaupdate": {
        "resource_type": "otaupdate",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "policy": {
        "resource_type": "policy",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "provisioningtemplate": {
        "resource_type": "provisioningtemplate",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "rolealias": {
        "resource_type": "rolealias",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "rule": {
        "resource_type": "rule",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "scheduledaudit": {
        "resource_type": "scheduledaudit",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "securityprofile": {
        "resource_type": "securityprofile",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "stream": {
        "resource_type": "stream",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "thinggroup": {
        "resource_type": "thinggroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "thingtype": {
        "resource_type": "thingtype",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtargetsforpolicy"><a aria-hidden="true" class="anchor-heading" href="#listtargetsforpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTargetsForPolicy</h3>
<ul>
<li>description: List targets for the specified policy.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "policy": {
        "resource_type": "policy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtargetsforsecurityprofile"><a aria-hidden="true" class="anchor-heading" href="#listtargetsforsecurityprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTargetsForSecurityProfile</h3>
<ul>
<li>description: Lists the targets associated with a given Device Defender security profile.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "securityprofile": {
        "resource_type": "securityprofile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listthinggroups"><a aria-hidden="true" class="anchor-heading" href="#listthinggroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListThingGroups</h3>
<ul>
<li>description: Lists all thing groups.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listthinggroupsforthing"><a aria-hidden="true" class="anchor-heading" href="#listthinggroupsforthing"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListThingGroupsForThing</h3>
<ul>
<li>description: List thing groups to which the specified thing belongs.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "thing": {
        "resource_type": "thing",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listthingprincipals"><a aria-hidden="true" class="anchor-heading" href="#listthingprincipals"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListThingPrincipals</h3>
<ul>
<li>description: Lists the principals associated with the specified thing.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listthingregistrationtaskreports"><a aria-hidden="true" class="anchor-heading" href="#listthingregistrationtaskreports"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListThingRegistrationTaskReports</h3>
<ul>
<li>description: Lists information about bulk thing registration tasks.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listthingregistrationtasks"><a aria-hidden="true" class="anchor-heading" href="#listthingregistrationtasks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListThingRegistrationTasks</h3>
<ul>
<li>description: Lists bulk thing registration tasks.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listthingtypes"><a aria-hidden="true" class="anchor-heading" href="#listthingtypes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListThingTypes</h3>
<ul>
<li>description: Lists all thing types.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listthings"><a aria-hidden="true" class="anchor-heading" href="#listthings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListThings</h3>
<ul>
<li>description: Lists all things.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listthingsinbillinggroup"><a aria-hidden="true" class="anchor-heading" href="#listthingsinbillinggroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListThingsInBillingGroup</h3>
<ul>
<li>description: Lists all things in the specified billing group.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "billinggroup": {
        "resource_type": "billinggroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listthingsinthinggroup"><a aria-hidden="true" class="anchor-heading" href="#listthingsinthinggroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListThingsInThingGroup</h3>
<ul>
<li>description: Lists all things in the specified thing group.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "thinggroup": {
        "resource_type": "thinggroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtopicrules"><a aria-hidden="true" class="anchor-heading" href="#listtopicrules"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTopicRules</h3>
<ul>
<li>description: Lists the rules for the specific topic.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtunnels"><a aria-hidden="true" class="anchor-heading" href="#listtunnels"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTunnels</h3>
<ul>
<li>description: Lists tunnels.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listv2logginglevels"><a aria-hidden="true" class="anchor-heading" href="#listv2logginglevels"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListV2LoggingLevels</h3>
<ul>
<li>description: Lists the v2 logging levels.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listviolationevents"><a aria-hidden="true" class="anchor-heading" href="#listviolationevents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListViolationEvents</h3>
<ul>
<li>description: Lists the Device Defender security profile violations discovered during the given time period.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "securityprofile": {
        "resource_type": "securityprofile",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "thing": {
        "resource_type": "thing",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="opentunnel"><a aria-hidden="true" class="anchor-heading" href="#opentunnel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>OpenTunnel</h3>
<ul>
<li>description: Opens a tunnel.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "iot:ThingGroupArn",
            "iot:TunnelDestinationService"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="publish"><a aria-hidden="true" class="anchor-heading" href="#publish"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Publish</h3>
<ul>
<li>description: Publish to the specified topic.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "topic": {
        "resource_type": "topic",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="receive"><a aria-hidden="true" class="anchor-heading" href="#receive"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Receive</h3>
<ul>
<li>description: Receive from the specified topic.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "topic": {
        "resource_type": "topic",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registercacertificate"><a aria-hidden="true" class="anchor-heading" href="#registercacertificate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterCACertificate</h3>
<ul>
<li>description: Registers a CA certificate with AWS IoT.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registercertificate"><a aria-hidden="true" class="anchor-heading" href="#registercertificate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterCertificate</h3>
<ul>
<li>description: Registers a device certificate with AWS IoT.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registercertificatewithoutca"><a aria-hidden="true" class="anchor-heading" href="#registercertificatewithoutca"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterCertificateWithoutCA</h3>
<ul>
<li>description: Registers a device certificate with AWS IoT without a registered CA (certificate authority).</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registerthing"><a aria-hidden="true" class="anchor-heading" href="#registerthing"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterThing</h3>
<ul>
<li>description: Registers your thing.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="rejectcertificatetransfer"><a aria-hidden="true" class="anchor-heading" href="#rejectcertificatetransfer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RejectCertificateTransfer</h3>
<ul>
<li>description: Rejects a pending certificate transfer.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cert": {
        "resource_type": "cert",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="removethingfrombillinggroup"><a aria-hidden="true" class="anchor-heading" href="#removethingfrombillinggroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemoveThingFromBillingGroup</h3>
<ul>
<li>description: Removes thing from the specified billing group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "billinggroup": {
        "resource_type": "billinggroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "thing": {
        "resource_type": "thing",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="removethingfromthinggroup"><a aria-hidden="true" class="anchor-heading" href="#removethingfromthinggroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemoveThingFromThingGroup</h3>
<ul>
<li>description: Removes thing from the specified thing group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "thing": {
        "resource_type": "thing",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "thinggroup": {
        "resource_type": "thinggroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="replacetopicrule"><a aria-hidden="true" class="anchor-heading" href="#replacetopicrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ReplaceTopicRule</h3>
<ul>
<li>description: Replaces the specified rule.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "rule": {
        "resource_type": "rule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="searchindex"><a aria-hidden="true" class="anchor-heading" href="#searchindex"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SearchIndex</h3>
<ul>
<li>description: Search IoT fleet index</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "index": {
        "resource_type": "index",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setdefaultauthorizer"><a aria-hidden="true" class="anchor-heading" href="#setdefaultauthorizer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetDefaultAuthorizer</h3>
<ul>
<li>description: Sets the default authorizer. This will be used if a websocket connection is made without specifying an authorizer.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "authorizer": {
        "resource_type": "authorizer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setdefaultpolicyversion"><a aria-hidden="true" class="anchor-heading" href="#setdefaultpolicyversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetDefaultPolicyVersion</h3>
<ul>
<li>description: Sets the specified version of the specified policy as the policy's default (operative) version.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "policy": {
        "resource_type": "policy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setloggingoptions"><a aria-hidden="true" class="anchor-heading" href="#setloggingoptions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetLoggingOptions</h3>
<ul>
<li>description: Sets the logging options.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setv2logginglevel"><a aria-hidden="true" class="anchor-heading" href="#setv2logginglevel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetV2LoggingLevel</h3>
<ul>
<li>description: Sets the v2 logging level.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setv2loggingoptions"><a aria-hidden="true" class="anchor-heading" href="#setv2loggingoptions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetV2LoggingOptions</h3>
<ul>
<li>description: Sets the v2 logging options.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startauditmitigationactionstask"><a aria-hidden="true" class="anchor-heading" href="#startauditmitigationactionstask"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartAuditMitigationActionsTask</h3>
<ul>
<li>description: Starts a task that applies a set of mitigation actions to the specified target.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startnextpendingjobexecution"><a aria-hidden="true" class="anchor-heading" href="#startnextpendingjobexecution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartNextPendingJobExecution</h3>
<ul>
<li>description: Gets and starts the next pending job execution for a thing.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "thing": {
        "resource_type": "thing",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startondemandaudittask"><a aria-hidden="true" class="anchor-heading" href="#startondemandaudittask"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartOnDemandAuditTask</h3>
<ul>
<li>description: Starts an on-demand Device Defender audit.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startthingregistrationtask"><a aria-hidden="true" class="anchor-heading" href="#startthingregistrationtask"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartThingRegistrationTask</h3>
<ul>
<li>description: Starts a bulk thing registration task.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopthingregistrationtask"><a aria-hidden="true" class="anchor-heading" href="#stopthingregistrationtask"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopThingRegistrationTask</h3>
<ul>
<li>description: Stops a bulk thing registration task.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="subscribe"><a aria-hidden="true" class="anchor-heading" href="#subscribe"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Subscribe</h3>
<ul>
<li>description: Subscribe to the specified TopicFilter.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "topicfilter": {
        "resource_type": "topicfilter",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Tag a specified resource</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "authorizer": {
        "resource_type": "authorizer",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "billinggroup": {
        "resource_type": "billinggroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "cacert": {
        "resource_type": "cacert",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dimension": {
        "resource_type": "dimension",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "domainconfiguration": {
        "resource_type": "domainconfiguration",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dynamicthinggroup": {
        "resource_type": "dynamicthinggroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "job": {
        "resource_type": "job",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "mitigationaction": {
        "resource_type": "mitigationaction",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "otaupdate": {
        "resource_type": "otaupdate",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "policy": {
        "resource_type": "policy",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "provisioningtemplate": {
        "resource_type": "provisioningtemplate",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "rolealias": {
        "resource_type": "rolealias",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "rule": {
        "resource_type": "rule",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "scheduledaudit": {
        "resource_type": "scheduledaudit",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "securityprofile": {
        "resource_type": "securityprofile",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "stream": {
        "resource_type": "stream",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "thinggroup": {
        "resource_type": "thinggroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "thingtype": {
        "resource_type": "thingtype",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="testauthorization"><a aria-hidden="true" class="anchor-heading" href="#testauthorization"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TestAuthorization</h3>
<ul>
<li>description: Test the policies evaluation for group policies</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cert": {
        "resource_type": "cert",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="testinvokeauthorizer"><a aria-hidden="true" class="anchor-heading" href="#testinvokeauthorizer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TestInvokeAuthorizer</h3>
<ul>
<li>description: Invoke the specified custom authorizer for testing purposes.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "authorizer": {
        "resource_type": "authorizer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="transfercertificate"><a aria-hidden="true" class="anchor-heading" href="#transfercertificate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TransferCertificate</h3>
<ul>
<li>description: Transfers the specified certificate to the specified AWS account.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cert": {
        "resource_type": "cert",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Untag a specified resource</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "authorizer": {
        "resource_type": "authorizer",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "billinggroup": {
        "resource_type": "billinggroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "cacert": {
        "resource_type": "cacert",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dimension": {
        "resource_type": "dimension",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "domainconfiguration": {
        "resource_type": "domainconfiguration",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dynamicthinggroup": {
        "resource_type": "dynamicthinggroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "job": {
        "resource_type": "job",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "mitigationaction": {
        "resource_type": "mitigationaction",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "otaupdate": {
        "resource_type": "otaupdate",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "policy": {
        "resource_type": "policy",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "provisioningtemplate": {
        "resource_type": "provisioningtemplate",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "rolealias": {
        "resource_type": "rolealias",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "rule": {
        "resource_type": "rule",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "scheduledaudit": {
        "resource_type": "scheduledaudit",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "securityprofile": {
        "resource_type": "securityprofile",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "stream": {
        "resource_type": "stream",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "thinggroup": {
        "resource_type": "thinggroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "thingtype": {
        "resource_type": "thingtype",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateaccountauditconfiguration"><a aria-hidden="true" class="anchor-heading" href="#updateaccountauditconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateAccountAuditConfiguration</h3>
<ul>
<li>description: Configures or reconfigures the Device Defender audit settings for this account.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateauditsuppression"><a aria-hidden="true" class="anchor-heading" href="#updateauditsuppression"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateAuditSuppression</h3>
<ul>
<li>description: Updates a Device Defender audit suppression.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateauthorizer"><a aria-hidden="true" class="anchor-heading" href="#updateauthorizer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateAuthorizer</h3>
<ul>
<li>description: Updates an authorizer</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "authorizer": {
        "resource_type": "authorizer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatebillinggroup"><a aria-hidden="true" class="anchor-heading" href="#updatebillinggroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateBillingGroup</h3>
<ul>
<li>description: Updates information associated with the specified billing group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "billinggroup": {
        "resource_type": "billinggroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatecacertificate"><a aria-hidden="true" class="anchor-heading" href="#updatecacertificate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateCACertificate</h3>
<ul>
<li>description: Updates a registered CA certificate.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cacert": {
        "resource_type": "cacert",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatecertificate"><a aria-hidden="true" class="anchor-heading" href="#updatecertificate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateCertificate</h3>
<ul>
<li>description: Updates the status of the specified certificate. This operation is idempotent.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cert": {
        "resource_type": "cert",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatedimension"><a aria-hidden="true" class="anchor-heading" href="#updatedimension"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateDimension</h3>
<ul>
<li>description: Updates the definition for a dimension.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dimension": {
        "resource_type": "dimension",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatedomainconfiguration"><a aria-hidden="true" class="anchor-heading" href="#updatedomainconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateDomainConfiguration</h3>
<ul>
<li>description: Updates a domain configuration.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domainconfiguration": {
        "resource_type": "domainconfiguration",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatedynamicthinggroup"><a aria-hidden="true" class="anchor-heading" href="#updatedynamicthinggroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateDynamicThingGroup</h3>
<ul>
<li>description: Updates a Dynamic Thing Group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dynamicthinggroup": {
        "resource_type": "dynamicthinggroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateeventconfigurations"><a aria-hidden="true" class="anchor-heading" href="#updateeventconfigurations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateEventConfigurations</h3>
<ul>
<li>description: Updates event configurations.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateindexingconfiguration"><a aria-hidden="true" class="anchor-heading" href="#updateindexingconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateIndexingConfiguration</h3>
<ul>
<li>description: Updates fleet indexing configuration</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatejob"><a aria-hidden="true" class="anchor-heading" href="#updatejob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateJob</h3>
<ul>
<li>description: Updates a job.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "job": {
        "resource_type": "job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatejobexecution"><a aria-hidden="true" class="anchor-heading" href="#updatejobexecution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateJobExecution</h3>
<ul>
<li>description: Updates a job execution.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "thing": {
        "resource_type": "thing",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatemitigationaction"><a aria-hidden="true" class="anchor-heading" href="#updatemitigationaction"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateMitigationAction</h3>
<ul>
<li>description: Updates the definition for the specified mitigation action.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "mitigationaction": {
        "resource_type": "mitigationaction",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateprovisioningtemplate"><a aria-hidden="true" class="anchor-heading" href="#updateprovisioningtemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateProvisioningTemplate</h3>
<ul>
<li>description: Updates a fleet provisioning template.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "provisioningtemplate": {
        "resource_type": "provisioningtemplate",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updaterolealias"><a aria-hidden="true" class="anchor-heading" href="#updaterolealias"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateRoleAlias</h3>
<ul>
<li>description: Updates the role alias</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "rolealias": {
        "resource_type": "rolealias",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatescheduledaudit"><a aria-hidden="true" class="anchor-heading" href="#updatescheduledaudit"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateScheduledAudit</h3>
<ul>
<li>description: Updates a scheduled audit, including what checks are performed and how often the audit takes place.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "scheduledaudit": {
        "resource_type": "scheduledaudit",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatesecurityprofile"><a aria-hidden="true" class="anchor-heading" href="#updatesecurityprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateSecurityProfile</h3>
<ul>
<li>description: Updates a Device Defender security profile.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "securityprofile": {
        "resource_type": "securityprofile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dimension": {
        "resource_type": "dimension",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatestream"><a aria-hidden="true" class="anchor-heading" href="#updatestream"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateStream</h3>
<ul>
<li>description: Updates the data for a stream.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatething"><a aria-hidden="true" class="anchor-heading" href="#updatething"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateThing</h3>
<ul>
<li>description: Updates information associated with the specified thing.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "thing": {
        "resource_type": "thing",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatethinggroup"><a aria-hidden="true" class="anchor-heading" href="#updatethinggroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateThingGroup</h3>
<ul>
<li>description: Updates information associated with the specified thing group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "thinggroup": {
        "resource_type": "thinggroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatethinggroupsforthing"><a aria-hidden="true" class="anchor-heading" href="#updatethinggroupsforthing"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateThingGroupsForThing</h3>
<ul>
<li>description: Updates the thing groups to which the thing belongs.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "thing": {
        "resource_type": "thing",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "thinggroup": {
        "resource_type": "thinggroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatethingshadow"><a aria-hidden="true" class="anchor-heading" href="#updatethingshadow"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateThingShadow</h3>
<ul>
<li>description: Updates the thing shadow.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "thing": {
        "resource_type": "thing",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="validatesecurityprofilebehaviors"><a aria-hidden="true" class="anchor-heading" href="#validatesecurityprofilebehaviors"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ValidateSecurityProfileBehaviors</h3>
<ul>
<li>description: Validates a Device Defender security profile behaviors specification.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-IoT"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Elasticsearch Service.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Elasticsearch Service - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Elasticsearch Service.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Elasticsearch Service.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Elasticsearch Service.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Elasticsearch Service - undefined" />
  <meta name="twitter:title" content="Elasticsearch Service - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Elasticsearch Service</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Elasticsearch Service">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="elasticsearch-service"><a aria-hidden="true" class="anchor-heading" href="#elasticsearch-service"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Elasticsearch Service</h1>
<ul>
<li>prefix: es</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="acceptinboundcrossclustersearchconnection"><a aria-hidden="true" class="anchor-heading" href="#acceptinboundcrossclustersearchconnection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AcceptInboundCrossClusterSearchConnection</h3>
<ul>
<li>description: Allows the destination domain owner to accept an inbound cross-cluster search connection request</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="addtags"><a aria-hidden="true" class="anchor-heading" href="#addtags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddTags</h3>
<ul>
<li>description: Grants permission to attach resource tags to an Amazon ES domain.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createelasticsearchdomain"><a aria-hidden="true" class="anchor-heading" href="#createelasticsearchdomain"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateElasticsearchDomain</h3>
<ul>
<li>description: Grants permission to create an Amazon ES domain.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createelasticsearchservicerole"><a aria-hidden="true" class="anchor-heading" href="#createelasticsearchservicerole"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateElasticsearchServiceRole</h3>
<ul>
<li>description: Grants permission to create the service-linked role required for Amazon ES domains that use VPC access.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createoutboundcrossclustersearchconnection"><a aria-hidden="true" class="anchor-heading" href="#createoutboundcrossclustersearchconnection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateOutboundCrossClusterSearchConnection</h3>
<ul>
<li>description: Creates a new cross-cluster search connection from a source domain to a destination domain</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteelasticsearchdomain"><a aria-hidden="true" class="anchor-heading" href="#deleteelasticsearchdomain"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteElasticsearchDomain</h3>
<ul>
<li>description: Grants permission to delete an Amazon ES domain and all of its data.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteelasticsearchservicerole"><a aria-hidden="true" class="anchor-heading" href="#deleteelasticsearchservicerole"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteElasticsearchServiceRole</h3>
<ul>
<li>description: Grants permission to delete the service-linked role required for Amazon ES domains that use VPC access.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteinboundcrossclustersearchconnection"><a aria-hidden="true" class="anchor-heading" href="#deleteinboundcrossclustersearchconnection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteInboundCrossClusterSearchConnection</h3>
<ul>
<li>description: Allows the destination domain owner to delete an existing inbound cross-cluster search connection</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteoutboundcrossclustersearchconnection"><a aria-hidden="true" class="anchor-heading" href="#deleteoutboundcrossclustersearchconnection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteOutboundCrossClusterSearchConnection</h3>
<ul>
<li>description: Allows the source domain owner to delete an existing outbound cross-cluster search connection</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeelasticsearchdomain"><a aria-hidden="true" class="anchor-heading" href="#describeelasticsearchdomain"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeElasticsearchDomain</h3>
<ul>
<li>description: Grants permission to view a description of the domain configuration for the specified Amazon ES domain, including the domain ID, domain service endpoint, and domain ARN.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeelasticsearchdomainconfig"><a aria-hidden="true" class="anchor-heading" href="#describeelasticsearchdomainconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeElasticsearchDomainConfig</h3>
<ul>
<li>description: Grants permission to view a description of the configuration options and status of an Amazon ES domain.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeelasticsearchdomains"><a aria-hidden="true" class="anchor-heading" href="#describeelasticsearchdomains"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeElasticsearchDomains</h3>
<ul>
<li>description: Grants permission to view a description of the domain configuration for up to five specified Amazon ES domains.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeelasticsearchinstancetypelimits"><a aria-hidden="true" class="anchor-heading" href="#describeelasticsearchinstancetypelimits"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeElasticsearchInstanceTypeLimits</h3>
<ul>
<li>description: Grants permission to view the instance count, storage, and master node limits for a given Elasticsearch version and instance type.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeinboundcrossclustersearchconnections"><a aria-hidden="true" class="anchor-heading" href="#describeinboundcrossclustersearchconnections"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeInboundCrossClusterSearchConnections</h3>
<ul>
<li>description: Lists all the inbound cross-cluster search connections for a destination domain</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeoutboundcrossclustersearchconnections"><a aria-hidden="true" class="anchor-heading" href="#describeoutboundcrossclustersearchconnections"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeOutboundCrossClusterSearchConnections</h3>
<ul>
<li>description: Lists all the outbound cross-cluster search connections for a source domain</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describereservedelasticsearchinstanceofferings"><a aria-hidden="true" class="anchor-heading" href="#describereservedelasticsearchinstanceofferings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeReservedElasticsearchInstanceOfferings</h3>
<ul>
<li>description: Grants permission to fetch reserved instance offerings for ES</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describereservedelasticsearchinstances"><a aria-hidden="true" class="anchor-heading" href="#describereservedelasticsearchinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeReservedElasticsearchInstances</h3>
<ul>
<li>description: Grants permission to fetch ES reserved instances already purchased by customer</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="escrossclusterget"><a aria-hidden="true" class="anchor-heading" href="#escrossclusterget"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ESCrossClusterGet</h3>
<ul>
<li>description: Grants permission to send cross-cluster requests to a destination domain.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="eshttpdelete"><a aria-hidden="true" class="anchor-heading" href="#eshttpdelete"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ESHttpDelete</h3>
<ul>
<li>description: Grants permission to send HTTP DELETE requests to the Elasticsearch APIs.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="eshttpget"><a aria-hidden="true" class="anchor-heading" href="#eshttpget"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ESHttpGet</h3>
<ul>
<li>description: Grants permission to send HTTP GET requests to the Elasticsearch APIs.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="eshttphead"><a aria-hidden="true" class="anchor-heading" href="#eshttphead"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ESHttpHead</h3>
<ul>
<li>description: Grants permission to send HTTP HEAD requests to the Elasticsearch APIs.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="eshttppatch"><a aria-hidden="true" class="anchor-heading" href="#eshttppatch"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ESHttpPatch</h3>
<ul>
<li>description: Grants permission to send HTTP PATCH requests to the Elasticsearch APIs.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="eshttppost"><a aria-hidden="true" class="anchor-heading" href="#eshttppost"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ESHttpPost</h3>
<ul>
<li>description: Grants permission to send HTTP POST requests to the Elasticsearch APIs.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="eshttpput"><a aria-hidden="true" class="anchor-heading" href="#eshttpput"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ESHttpPut</h3>
<ul>
<li>description: Grants permission to send HTTP PUT requests to the Elasticsearch APIs.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcompatibleelasticsearchversions"><a aria-hidden="true" class="anchor-heading" href="#getcompatibleelasticsearchversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCompatibleElasticsearchVersions</h3>
<ul>
<li>description: Grants permission to fetch list of compatible elastic search versions to which Amazon ES domain can be upgraded</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getupgradehistory"><a aria-hidden="true" class="anchor-heading" href="#getupgradehistory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetUpgradeHistory</h3>
<ul>
<li>description: Grants permission to fetch upgrade history for given ES domain</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getupgradestatus"><a aria-hidden="true" class="anchor-heading" href="#getupgradestatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetUpgradeStatus</h3>
<ul>
<li>description: Grants permission to fetch upgrade status for given ES domain</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdomainnames"><a aria-hidden="true" class="anchor-heading" href="#listdomainnames"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDomainNames</h3>
<ul>
<li>description: Grants permission to display the names of all Amazon ES domains that the current user owns.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listelasticsearchinstancetypedetails"><a aria-hidden="true" class="anchor-heading" href="#listelasticsearchinstancetypedetails"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListElasticsearchInstanceTypeDetails</h3>
<ul>
<li>description: Grants permission to list all instance types and available features for a given Elasticsearch version.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listelasticsearchinstancetypes"><a aria-hidden="true" class="anchor-heading" href="#listelasticsearchinstancetypes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListElasticsearchInstanceTypes</h3>
<ul>
<li>description: Grants permission to list all Elasticsearch instance types that are supported for a given Elasticsearch version.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listelasticsearchversions"><a aria-hidden="true" class="anchor-heading" href="#listelasticsearchversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListElasticsearchVersions</h3>
<ul>
<li>description: Grants permission to list all supported Elasticsearch versions on Amazon ES.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtags"><a aria-hidden="true" class="anchor-heading" href="#listtags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTags</h3>
<ul>
<li>description: Grants permission to display all of the tags for an Amazon ES domain.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="purchasereservedelasticsearchinstanceoffering"><a aria-hidden="true" class="anchor-heading" href="#purchasereservedelasticsearchinstanceoffering"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PurchaseReservedElasticsearchInstanceOffering</h3>
<ul>
<li>description: Grants permission to purchase ES reserved instances</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="rejectinboundcrossclustersearchconnection"><a aria-hidden="true" class="anchor-heading" href="#rejectinboundcrossclustersearchconnection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RejectInboundCrossClusterSearchConnection</h3>
<ul>
<li>description: Allows the destination domain owner to reject an inbound cross-cluster search connection request</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="removetags"><a aria-hidden="true" class="anchor-heading" href="#removetags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemoveTags</h3>
<ul>
<li>description: Grants permission to remove tags from Amazon ES domains.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateelasticsearchdomainconfig"><a aria-hidden="true" class="anchor-heading" href="#updateelasticsearchdomainconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateElasticsearchDomainConfig</h3>
<ul>
<li>description: Grants permission to modify the configuration of an Amazon ES domain, such as the instance type or number of instances.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="upgradeelasticsearchdomain"><a aria-hidden="true" class="anchor-heading" href="#upgradeelasticsearchdomain"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpgradeElasticsearchDomain</h3>
<ul>
<li>description: Grants permission to initiate upgrade of elastic search domain to given version</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Elasticsearch Service"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Shield.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Shield - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Shield.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Shield.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Shield.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Shield - undefined" />
  <meta name="twitter:title" content="Shield - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Shield</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Shield">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="shield"><a aria-hidden="true" class="anchor-heading" href="#shield"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Shield</h1>
<ul>
<li>prefix: shield</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="associatedrtlogbucket"><a aria-hidden="true" class="anchor-heading" href="#associatedrtlogbucket"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateDRTLogBucket</h3>
<ul>
<li>description: Authorizes the DDoS Response team to access the specified Amazon S3 bucket containing your flow logs</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": [
            "s3:GetBucketPolicy",
            "s3:PutBucketPolicy"
        ]
    }
}
</code></pre>
<h3 id="associatedrtrole"><a aria-hidden="true" class="anchor-heading" href="#associatedrtrole"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateDRTRole</h3>
<ul>
<li>description: Authorizes the DDoS Response team using the specified role, to access your AWS account to assist with DDoS attack mitigation during potential attacks</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": [
            "iam:GetRole",
            "iam:ListAttachedRolePolicies",
            "iam:PassRole"
        ]
    }
}
</code></pre>
<h3 id="createprotection"><a aria-hidden="true" class="anchor-heading" href="#createprotection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateProtection</h3>
<ul>
<li>description: Activate DDoS protection service for a given resource ARN</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "protection": {
        "resource_type": "protection",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createsubscription"><a aria-hidden="true" class="anchor-heading" href="#createsubscription"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSubscription</h3>
<ul>
<li>description: Activate subscription</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteprotection"><a aria-hidden="true" class="anchor-heading" href="#deleteprotection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteProtection</h3>
<ul>
<li>description: Delete an existing protection</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "protection": {
        "resource_type": "protection",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletesubscription"><a aria-hidden="true" class="anchor-heading" href="#deletesubscription"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteSubscription</h3>
<ul>
<li>description: Deactivate subscription</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeattack"><a aria-hidden="true" class="anchor-heading" href="#describeattack"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAttack</h3>
<ul>
<li>description: Get attack details</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "attack": {
        "resource_type": "attack",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedrtaccess"><a aria-hidden="true" class="anchor-heading" href="#describedrtaccess"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDRTAccess</h3>
<ul>
<li>description: Returns the current role and list of Amazon S3 log buckets used by the DDoS Response team to access your AWS account while assisting with attack mitigation</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeemergencycontactsettings"><a aria-hidden="true" class="anchor-heading" href="#describeemergencycontactsettings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEmergencyContactSettings</h3>
<ul>
<li>description: Lists the email addresses that the DRT can use to contact you during a suspected attack</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeprotection"><a aria-hidden="true" class="anchor-heading" href="#describeprotection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeProtection</h3>
<ul>
<li>description: Get protection details</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "protection": {
        "resource_type": "protection",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describesubscription"><a aria-hidden="true" class="anchor-heading" href="#describesubscription"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSubscription</h3>
<ul>
<li>description: Get subscription details, such as start time</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociatedrtlogbucket"><a aria-hidden="true" class="anchor-heading" href="#disassociatedrtlogbucket"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateDRTLogBucket</h3>
<ul>
<li>description: Removes the DDoS Response team's access to the specified Amazon S3 bucket containing your flow logs</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": [
            "s3:DeleteBucketPolicy",
            "s3:GetBucketPolicy",
            "s3:PutBucketPolicy"
        ]
    }
}
</code></pre>
<h3 id="disassociatedrtrole"><a aria-hidden="true" class="anchor-heading" href="#disassociatedrtrole"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateDRTRole</h3>
<ul>
<li>description: Removes the DDoS Response team's access to your AWS account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsubscriptionstate"><a aria-hidden="true" class="anchor-heading" href="#getsubscriptionstate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSubscriptionState</h3>
<ul>
<li>description: Get subscription state</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listattacks"><a aria-hidden="true" class="anchor-heading" href="#listattacks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAttacks</h3>
<ul>
<li>description: List all existing attacks</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listprotections"><a aria-hidden="true" class="anchor-heading" href="#listprotections"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListProtections</h3>
<ul>
<li>description: List all existing protections</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateemergencycontactsettings"><a aria-hidden="true" class="anchor-heading" href="#updateemergencycontactsettings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateEmergencyContactSettings</h3>
<ul>
<li>description: Updates the details of the list of email addresses that the DRT can use to contact you during a suspected attack</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatesubscription"><a aria-hidden="true" class="anchor-heading" href="#updatesubscription"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateSubscription</h3>
<ul>
<li>description: Updates the details of an existing subscription</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Shield"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Elemental MediaLive.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Elemental MediaLive - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Elemental MediaLive.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Elemental MediaLive.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Elemental MediaLive.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Elemental MediaLive - undefined" />
  <meta name="twitter:title" content="Elemental MediaLive - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Elemental MediaLive</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Elemental MediaLive">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="elemental-medialive"><a aria-hidden="true" class="anchor-heading" href="#elemental-medialive"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Elemental MediaLive</h1>
<ul>
<li>prefix: medialive</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="batchdelete"><a aria-hidden="true" class="anchor-heading" href="#batchdelete"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchDelete</h3>
<ul>
<li>description: Grants permission to delete channels, inputs, input security groups, and multiplexes.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "channel": {
        "resource_type": "channel",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "input": {
        "resource_type": "input",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "input-security-group": {
        "resource_type": "input-security-group",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "multiplex": {
        "resource_type": "multiplex",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchstart"><a aria-hidden="true" class="anchor-heading" href="#batchstart"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchStart</h3>
<ul>
<li>description: Grants permission to start channels and multiplexes.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "channel": {
        "resource_type": "channel",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "multiplex": {
        "resource_type": "multiplex",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchstop"><a aria-hidden="true" class="anchor-heading" href="#batchstop"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchStop</h3>
<ul>
<li>description: Grants permission to stop channels and multiplexes.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "channel": {
        "resource_type": "channel",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "multiplex": {
        "resource_type": "multiplex",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchupdateschedule"><a aria-hidden="true" class="anchor-heading" href="#batchupdateschedule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchUpdateSchedule</h3>
<ul>
<li>description: Grants permission to add and remove actions from a channel's schedule.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "channel": {
        "resource_type": "channel",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createchannel"><a aria-hidden="true" class="anchor-heading" href="#createchannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateChannel</h3>
<ul>
<li>description: Grants permission to create a channel</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "channel": {
        "resource_type": "channel",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "input": {
        "resource_type": "input",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createinput"><a aria-hidden="true" class="anchor-heading" href="#createinput"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateInput</h3>
<ul>
<li>description: Grants permission to create an input</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "input": {
        "resource_type": "input",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "input-security-group": {
        "resource_type": "input-security-group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createinputsecuritygroup"><a aria-hidden="true" class="anchor-heading" href="#createinputsecuritygroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateInputSecurityGroup</h3>
<ul>
<li>description: Grants permission to create an input security group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "input-security-group": {
        "resource_type": "input-security-group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createmultiplex"><a aria-hidden="true" class="anchor-heading" href="#createmultiplex"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateMultiplex</h3>
<ul>
<li>description: Grants permission to create a multiplex</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "multiplex": {
        "resource_type": "multiplex",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtags"><a aria-hidden="true" class="anchor-heading" href="#createtags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTags</h3>
<ul>
<li>description: Grants permission to create tags for channels, inputs, input security groups, multiplexes, and reservations.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "channel": {
        "resource_type": "channel",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "input": {
        "resource_type": "input",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "input-security-group": {
        "resource_type": "input-security-group",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "multiplex": {
        "resource_type": "multiplex",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "reservation": {
        "resource_type": "reservation",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys",
            "aws:RequestTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletechannel"><a aria-hidden="true" class="anchor-heading" href="#deletechannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteChannel</h3>
<ul>
<li>description: Grants permission to delete a channel</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "channel": {
        "resource_type": "channel",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteinput"><a aria-hidden="true" class="anchor-heading" href="#deleteinput"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteInput</h3>
<ul>
<li>description: Grants permission to delete an input</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "input": {
        "resource_type": "input",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteinputsecuritygroup"><a aria-hidden="true" class="anchor-heading" href="#deleteinputsecuritygroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteInputSecurityGroup</h3>
<ul>
<li>description: Grants permission to delete an input security group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "input-security-group": {
        "resource_type": "input-security-group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletemultiplex"><a aria-hidden="true" class="anchor-heading" href="#deletemultiplex"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteMultiplex</h3>
<ul>
<li>description: Grants permission to delete a multiplex</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "multiplex": {
        "resource_type": "multiplex",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletereservation"><a aria-hidden="true" class="anchor-heading" href="#deletereservation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteReservation</h3>
<ul>
<li>description: Grants permission to delete an expired reservation</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "reservation": {
        "resource_type": "reservation",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetags"><a aria-hidden="true" class="anchor-heading" href="#deletetags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTags</h3>
<ul>
<li>description: Grants permission to delete tags from channels, inputs, input security groups, multiplexes, and reservations.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "channel": {
        "resource_type": "channel",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "input": {
        "resource_type": "input",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "input-security-group": {
        "resource_type": "input-security-group",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "multiplex": {
        "resource_type": "multiplex",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "reservation": {
        "resource_type": "reservation",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describechannel"><a aria-hidden="true" class="anchor-heading" href="#describechannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeChannel</h3>
<ul>
<li>description: Grants permission to get details about a channel</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "channel": {
        "resource_type": "channel",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeinput"><a aria-hidden="true" class="anchor-heading" href="#describeinput"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeInput</h3>
<ul>
<li>description: Grants permission to describe an input</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "input": {
        "resource_type": "input",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeinputdevice"><a aria-hidden="true" class="anchor-heading" href="#describeinputdevice"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeInputDevice</h3>
<ul>
<li>description: Grants permission to describe an input device</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "input-device": {
        "resource_type": "input-device",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeinputdevicethumbnail"><a aria-hidden="true" class="anchor-heading" href="#describeinputdevicethumbnail"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeInputDeviceThumbnail</h3>
<ul>
<li>description: Grants permission to describe an input device thumbnail</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "input-device": {
        "resource_type": "input-device",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeinputsecuritygroup"><a aria-hidden="true" class="anchor-heading" href="#describeinputsecuritygroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeInputSecurityGroup</h3>
<ul>
<li>description: Grants permission to describe an input security group</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "input-security-group": {
        "resource_type": "input-security-group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describemultiplex"><a aria-hidden="true" class="anchor-heading" href="#describemultiplex"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeMultiplex</h3>
<ul>
<li>description: Grants permission to describe a multiplex</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "multiplex": {
        "resource_type": "multiplex",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeoffering"><a aria-hidden="true" class="anchor-heading" href="#describeoffering"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeOffering</h3>
<ul>
<li>description: Grants permission to get details about a reservation offering</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "offering": {
        "resource_type": "offering",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describereservation"><a aria-hidden="true" class="anchor-heading" href="#describereservation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeReservation</h3>
<ul>
<li>description: Grants permission to get details about a reservation</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "reservation": {
        "resource_type": "reservation",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeschedule"><a aria-hidden="true" class="anchor-heading" href="#describeschedule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSchedule</h3>
<ul>
<li>description: Grants permission to view a list of actions scheduled on a channel.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "channel": {
        "resource_type": "channel",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listchannels"><a aria-hidden="true" class="anchor-heading" href="#listchannels"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListChannels</h3>
<ul>
<li>description: Grants permission to list channels</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listinputdevices"><a aria-hidden="true" class="anchor-heading" href="#listinputdevices"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListInputDevices</h3>
<ul>
<li>description: Grants permission to list input devices</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listinputsecuritygroups"><a aria-hidden="true" class="anchor-heading" href="#listinputsecuritygroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListInputSecurityGroups</h3>
<ul>
<li>description: Grants permission to list input security groups</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listinputs"><a aria-hidden="true" class="anchor-heading" href="#listinputs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListInputs</h3>
<ul>
<li>description: Grants permission to list inputs</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listmultiplexes"><a aria-hidden="true" class="anchor-heading" href="#listmultiplexes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListMultiplexes</h3>
<ul>
<li>description: Grants permission to list multiplexes</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listofferings"><a aria-hidden="true" class="anchor-heading" href="#listofferings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListOfferings</h3>
<ul>
<li>description: Grants permission to list reservation offerings</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listreservations"><a aria-hidden="true" class="anchor-heading" href="#listreservations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListReservations</h3>
<ul>
<li>description: Grants permission to list reservations</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Grants permission to list tags for channels, inputs, input security groups, multiplexes, and reservations.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "channel": {
        "resource_type": "channel",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "input": {
        "resource_type": "input",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "input-security-group": {
        "resource_type": "input-security-group",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "multiplex": {
        "resource_type": "multiplex",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "reservation": {
        "resource_type": "reservation",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="purchaseoffering"><a aria-hidden="true" class="anchor-heading" href="#purchaseoffering"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PurchaseOffering</h3>
<ul>
<li>description: Grants permission to purchase a reservation offering</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "offering": {
        "resource_type": "offering",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "reservation": {
        "resource_type": "reservation",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startchannel"><a aria-hidden="true" class="anchor-heading" href="#startchannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartChannel</h3>
<ul>
<li>description: Grants permission to start a channel</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "channel": {
        "resource_type": "channel",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startmultiplex"><a aria-hidden="true" class="anchor-heading" href="#startmultiplex"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartMultiplex</h3>
<ul>
<li>description: Grants permission to start a multiplex</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "multiplex": {
        "resource_type": "multiplex",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopchannel"><a aria-hidden="true" class="anchor-heading" href="#stopchannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopChannel</h3>
<ul>
<li>description: Grants permission to stop a channel</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "channel": {
        "resource_type": "channel",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopmultiplex"><a aria-hidden="true" class="anchor-heading" href="#stopmultiplex"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopMultiplex</h3>
<ul>
<li>description: Grants permission to stop a multiplex</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "multiplex": {
        "resource_type": "multiplex",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatechannel"><a aria-hidden="true" class="anchor-heading" href="#updatechannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateChannel</h3>
<ul>
<li>description: Grants permission to update a channel</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "channel": {
        "resource_type": "channel",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatechannelclass"><a aria-hidden="true" class="anchor-heading" href="#updatechannelclass"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateChannelClass</h3>
<ul>
<li>description: Grants permission to update the class of a channel</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "channel": {
        "resource_type": "channel",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateinput"><a aria-hidden="true" class="anchor-heading" href="#updateinput"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateInput</h3>
<ul>
<li>description: Grants permission to update an input</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "input": {
        "resource_type": "input",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateinputdevice"><a aria-hidden="true" class="anchor-heading" href="#updateinputdevice"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateInputDevice</h3>
<ul>
<li>description: Grants permission to update an input device</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "input-device": {
        "resource_type": "input-device",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateinputsecuritygroup"><a aria-hidden="true" class="anchor-heading" href="#updateinputsecuritygroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateInputSecurityGroup</h3>
<ul>
<li>description: Grants permission to update an input security group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "input-security-group": {
        "resource_type": "input-security-group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatemultiplex"><a aria-hidden="true" class="anchor-heading" href="#updatemultiplex"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateMultiplex</h3>
<ul>
<li>description: Grants permission to update a multiplex</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "multiplex": {
        "resource_type": "multiplex",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatereservation"><a aria-hidden="true" class="anchor-heading" href="#updatereservation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateReservation</h3>
<ul>
<li>description: Grants permission to update a reservation</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "reservation": {
        "resource_type": "reservation",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Elemental MediaLive"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Elastic Beanstalk.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Elastic Beanstalk - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Elastic Beanstalk.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Elastic Beanstalk.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Elastic Beanstalk.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Elastic Beanstalk - undefined" />
  <meta name="twitter:title" content="Elastic Beanstalk - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Elastic Beanstalk</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Elastic Beanstalk">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="elastic-beanstalk"><a aria-hidden="true" class="anchor-heading" href="#elastic-beanstalk"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Elastic Beanstalk</h1>
<ul>
<li>prefix: elasticbeanstalk</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="abortenvironmentupdate"><a aria-hidden="true" class="anchor-heading" href="#abortenvironmentupdate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AbortEnvironmentUpdate</h3>
<ul>
<li>description: Grants permission to cancel in-progress environment configuration update or application version deployment.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "environment": {
        "resource_type": "environment",
        "required": true,
        "condition_keys": [
            "elasticbeanstalk:InApplication"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="addtags"><a aria-hidden="true" class="anchor-heading" href="#addtags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddTags</h3>
<ul>
<li>description: Grants permission to add tags to an Elastic Beanstalk resource and to update tag values.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "applicationversion": {
        "resource_type": "applicationversion",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "configurationtemplate": {
        "resource_type": "configurationtemplate",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "environment": {
        "resource_type": "environment",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "platform": {
        "resource_type": "platform",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="applyenvironmentmanagedaction"><a aria-hidden="true" class="anchor-heading" href="#applyenvironmentmanagedaction"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ApplyEnvironmentManagedAction</h3>
<ul>
<li>description: Grants permission to apply a scheduled managed action immediately.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "environment": {
        "resource_type": "environment",
        "required": true,
        "condition_keys": [
            "elasticbeanstalk:InApplication"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="associateenvironmentoperationsrole"><a aria-hidden="true" class="anchor-heading" href="#associateenvironmentoperationsrole"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateEnvironmentOperationsRole</h3>
<ul>
<li>description: Grants permission to associate an operations role with an environment.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "environment": {
        "resource_type": "environment",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="checkdnsavailability"><a aria-hidden="true" class="anchor-heading" href="#checkdnsavailability"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CheckDNSAvailability</h3>
<ul>
<li>description: Grants permission to check CNAME availability.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="composeenvironments"><a aria-hidden="true" class="anchor-heading" href="#composeenvironments"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ComposeEnvironments</h3>
<ul>
<li>description: Grants permission to create or update a group of environments, each running a separate component of a single application.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "applicationversion": {
        "resource_type": "applicationversion",
        "required": true,
        "condition_keys": [
            "elasticbeanstalk:InApplication"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createapplication"><a aria-hidden="true" class="anchor-heading" href="#createapplication"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateApplication</h3>
<ul>
<li>description: Grants permission to create a new application.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createapplicationversion"><a aria-hidden="true" class="anchor-heading" href="#createapplicationversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateApplicationVersion</h3>
<ul>
<li>description: Grants permission to create an application version for an application.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "applicationversion": {
        "resource_type": "applicationversion",
        "required": true,
        "condition_keys": [
            "elasticbeanstalk:InApplication"
        ],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createconfigurationtemplate"><a aria-hidden="true" class="anchor-heading" href="#createconfigurationtemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateConfigurationTemplate</h3>
<ul>
<li>description: Grants permission to create a configuration template.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "configurationtemplate": {
        "resource_type": "configurationtemplate",
        "required": true,
        "condition_keys": [
            "elasticbeanstalk:InApplication"
        ],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "elasticbeanstalk:FromApplication",
            "elasticbeanstalk:FromApplicationVersion",
            "elasticbeanstalk:FromConfigurationTemplate",
            "elasticbeanstalk:FromEnvironment",
            "elasticbeanstalk:FromSolutionStack",
            "elasticbeanstalk:FromPlatform",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createenvironment"><a aria-hidden="true" class="anchor-heading" href="#createenvironment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateEnvironment</h3>
<ul>
<li>description: Grants permission to launch an environment for an application.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "environment": {
        "resource_type": "environment",
        "required": true,
        "condition_keys": [
            "elasticbeanstalk:InApplication"
        ],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "elasticbeanstalk:FromApplicationVersion",
            "elasticbeanstalk:FromConfigurationTemplate",
            "elasticbeanstalk:FromSolutionStack",
            "elasticbeanstalk:FromPlatform",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createplatformversion"><a aria-hidden="true" class="anchor-heading" href="#createplatformversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreatePlatformVersion</h3>
<ul>
<li>description: Grants permission to create a new version of a custom platform.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "platform": {
        "resource_type": "platform",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createstoragelocation"><a aria-hidden="true" class="anchor-heading" href="#createstoragelocation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateStorageLocation</h3>
<ul>
<li>description: Grants permission to create the Amazon S3 storage location for the account.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteapplication"><a aria-hidden="true" class="anchor-heading" href="#deleteapplication"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteApplication</h3>
<ul>
<li>description: Grants permission to delete an application along with all associated versions and configurations.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteapplicationversion"><a aria-hidden="true" class="anchor-heading" href="#deleteapplicationversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteApplicationVersion</h3>
<ul>
<li>description: Grants permission to delete an application version from an application.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "applicationversion": {
        "resource_type": "applicationversion",
        "required": true,
        "condition_keys": [
            "elasticbeanstalk:InApplication"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteconfigurationtemplate"><a aria-hidden="true" class="anchor-heading" href="#deleteconfigurationtemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteConfigurationTemplate</h3>
<ul>
<li>description: Grants permission to delete a configuration template.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "configurationtemplate": {
        "resource_type": "configurationtemplate",
        "required": true,
        "condition_keys": [
            "elasticbeanstalk:InApplication"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteenvironmentconfiguration"><a aria-hidden="true" class="anchor-heading" href="#deleteenvironmentconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteEnvironmentConfiguration</h3>
<ul>
<li>description: Grants permission to delete the draft configuration associated with the running environment.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "environment": {
        "resource_type": "environment",
        "required": true,
        "condition_keys": [
            "elasticbeanstalk:InApplication"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteplatformversion"><a aria-hidden="true" class="anchor-heading" href="#deleteplatformversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeletePlatformVersion</h3>
<ul>
<li>description: Grants permission to delete a version of a custom platform.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "platform": {
        "resource_type": "platform",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeaccountattributes"><a aria-hidden="true" class="anchor-heading" href="#describeaccountattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAccountAttributes</h3>
<ul>
<li>description: Grants permission to retrieve a list of account attributes, including resource quotas.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeapplicationversions"><a aria-hidden="true" class="anchor-heading" href="#describeapplicationversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeApplicationVersions</h3>
<ul>
<li>description: Grants permission to retrieve a list of application versions stored in an AWS Elastic Beanstalk storage bucket.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "applicationversion": {
        "resource_type": "applicationversion",
        "required": false,
        "condition_keys": [
            "elasticbeanstalk:InApplication"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeapplications"><a aria-hidden="true" class="anchor-heading" href="#describeapplications"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeApplications</h3>
<ul>
<li>description: Grants permission to retrieve the descriptions of existing applications.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeconfigurationoptions"><a aria-hidden="true" class="anchor-heading" href="#describeconfigurationoptions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeConfigurationOptions</h3>
<ul>
<li>description: Grants permission to retrieve descriptions of environment configuration options.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "configurationtemplate": {
        "resource_type": "configurationtemplate",
        "required": false,
        "condition_keys": [
            "elasticbeanstalk:InApplication"
        ],
        "dependent_actions": []
    },
    "environment": {
        "resource_type": "environment",
        "required": false,
        "condition_keys": [
            "elasticbeanstalk:InApplication"
        ],
        "dependent_actions": []
    },
    "solutionstack": {
        "resource_type": "solutionstack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeconfigurationsettings"><a aria-hidden="true" class="anchor-heading" href="#describeconfigurationsettings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeConfigurationSettings</h3>
<ul>
<li>description: Grants permission to retrieve a description of the settings for a configuration set.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "configurationtemplate": {
        "resource_type": "configurationtemplate",
        "required": false,
        "condition_keys": [
            "elasticbeanstalk:InApplication"
        ],
        "dependent_actions": []
    },
    "environment": {
        "resource_type": "environment",
        "required": false,
        "condition_keys": [
            "elasticbeanstalk:InApplication"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeenvironmenthealth"><a aria-hidden="true" class="anchor-heading" href="#describeenvironmenthealth"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEnvironmentHealth</h3>
<ul>
<li>description: Grants permission to retrieve information about the overall health of an environment.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "environment": {
        "resource_type": "environment",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeenvironmentmanagedactionhistory"><a aria-hidden="true" class="anchor-heading" href="#describeenvironmentmanagedactionhistory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEnvironmentManagedActionHistory</h3>
<ul>
<li>description: Grants permission to retrieve a list of an environment's completed and failed managed actions.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "environment": {
        "resource_type": "environment",
        "required": false,
        "condition_keys": [
            "elasticbeanstalk:InApplication"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeenvironmentmanagedactions"><a aria-hidden="true" class="anchor-heading" href="#describeenvironmentmanagedactions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEnvironmentManagedActions</h3>
<ul>
<li>description: Grants permission to retrieve a list of an environment's upcoming and in-progress managed actions.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "environment": {
        "resource_type": "environment",
        "required": false,
        "condition_keys": [
            "elasticbeanstalk:InApplication"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeenvironmentresources"><a aria-hidden="true" class="anchor-heading" href="#describeenvironmentresources"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEnvironmentResources</h3>
<ul>
<li>description: Grants permission to retrieve a list of AWS resources for an environment.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "environment": {
        "resource_type": "environment",
        "required": false,
        "condition_keys": [
            "elasticbeanstalk:InApplication"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeenvironments"><a aria-hidden="true" class="anchor-heading" href="#describeenvironments"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEnvironments</h3>
<ul>
<li>description: Grants permission to retrieve descriptions for existing environments.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "environment": {
        "resource_type": "environment",
        "required": false,
        "condition_keys": [
            "elasticbeanstalk:InApplication"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeevents"><a aria-hidden="true" class="anchor-heading" href="#describeevents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEvents</h3>
<ul>
<li>description: Grants permission to retrieve a list of event descriptions matching a set of criteria.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "applicationversion": {
        "resource_type": "applicationversion",
        "required": false,
        "condition_keys": [
            "elasticbeanstalk:InApplication"
        ],
        "dependent_actions": []
    },
    "configurationtemplate": {
        "resource_type": "configurationtemplate",
        "required": false,
        "condition_keys": [
            "elasticbeanstalk:InApplication"
        ],
        "dependent_actions": []
    },
    "environment": {
        "resource_type": "environment",
        "required": false,
        "condition_keys": [
            "elasticbeanstalk:InApplication"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeinstanceshealth"><a aria-hidden="true" class="anchor-heading" href="#describeinstanceshealth"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeInstancesHealth</h3>
<ul>
<li>description: Grants permission to retrieve more detailed information about the health of environment instances.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "environment": {
        "resource_type": "environment",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeplatformversion"><a aria-hidden="true" class="anchor-heading" href="#describeplatformversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribePlatformVersion</h3>
<ul>
<li>description: Grants permission to retrieve a description of a platform version.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "platform": {
        "resource_type": "platform",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociateenvironmentoperationsrole"><a aria-hidden="true" class="anchor-heading" href="#disassociateenvironmentoperationsrole"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateEnvironmentOperationsRole</h3>
<ul>
<li>description: Grants permission to disassociate an operations role with an environment.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "environment": {
        "resource_type": "environment",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listavailablesolutionstacks"><a aria-hidden="true" class="anchor-heading" href="#listavailablesolutionstacks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAvailableSolutionStacks</h3>
<ul>
<li>description: Grants permission to retrieve a list of the available solution stack names.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "solutionstack": {
        "resource_type": "solutionstack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listplatformbranches"><a aria-hidden="true" class="anchor-heading" href="#listplatformbranches"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPlatformBranches</h3>
<ul>
<li>description: Grants permission to retrieve a list of the available platform branches.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listplatformversions"><a aria-hidden="true" class="anchor-heading" href="#listplatformversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPlatformVersions</h3>
<ul>
<li>description: Grants permission to retrieve a list of the available platforms.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "platform": {
        "resource_type": "platform",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Grants permission to retrieve a list of tags of an Elastic Beanstalk resource.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "applicationversion": {
        "resource_type": "applicationversion",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "configurationtemplate": {
        "resource_type": "configurationtemplate",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "environment": {
        "resource_type": "environment",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "platform": {
        "resource_type": "platform",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putinstancestatistics"><a aria-hidden="true" class="anchor-heading" href="#putinstancestatistics"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutInstanceStatistics</h3>
<ul>
<li>description: Grants permission to submit instance statistics for enhanced health.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "environment": {
        "resource_type": "environment",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="rebuildenvironment"><a aria-hidden="true" class="anchor-heading" href="#rebuildenvironment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RebuildEnvironment</h3>
<ul>
<li>description: Grants permission to delete and recreate all of the AWS resources for an environment and to force a restart.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "environment": {
        "resource_type": "environment",
        "required": true,
        "condition_keys": [
            "elasticbeanstalk:InApplication"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="removetags"><a aria-hidden="true" class="anchor-heading" href="#removetags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemoveTags</h3>
<ul>
<li>description: Grants permission to remove tags from an Elastic Beanstalk resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "applicationversion": {
        "resource_type": "applicationversion",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "configurationtemplate": {
        "resource_type": "configurationtemplate",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "environment": {
        "resource_type": "environment",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "platform": {
        "resource_type": "platform",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="requestenvironmentinfo"><a aria-hidden="true" class="anchor-heading" href="#requestenvironmentinfo"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RequestEnvironmentInfo</h3>
<ul>
<li>description: Grants permission to initiate a request to compile information of the deployed environment.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "environment": {
        "resource_type": "environment",
        "required": true,
        "condition_keys": [
            "elasticbeanstalk:InApplication"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="restartappserver"><a aria-hidden="true" class="anchor-heading" href="#restartappserver"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RestartAppServer</h3>
<ul>
<li>description: Grants permission to request an environment to restart the application container server running on each Amazon EC2 instance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "environment": {
        "resource_type": "environment",
        "required": true,
        "condition_keys": [
            "elasticbeanstalk:InApplication"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="retrieveenvironmentinfo"><a aria-hidden="true" class="anchor-heading" href="#retrieveenvironmentinfo"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RetrieveEnvironmentInfo</h3>
<ul>
<li>description: Grants permission to retrieve the compiled information from a RequestEnvironmentInfo request.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "environment": {
        "resource_type": "environment",
        "required": true,
        "condition_keys": [
            "elasticbeanstalk:InApplication"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="swapenvironmentcnames"><a aria-hidden="true" class="anchor-heading" href="#swapenvironmentcnames"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SwapEnvironmentCNAMEs</h3>
<ul>
<li>description: Grants permission to swap the CNAMEs of two environments.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "environment": {
        "resource_type": "environment",
        "required": true,
        "condition_keys": [
            "elasticbeanstalk:InApplication"
        ],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "elasticbeanstalk:FromEnvironment"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="terminateenvironment"><a aria-hidden="true" class="anchor-heading" href="#terminateenvironment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TerminateEnvironment</h3>
<ul>
<li>description: Grants permission to terminate an environment.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "environment": {
        "resource_type": "environment",
        "required": true,
        "condition_keys": [
            "elasticbeanstalk:InApplication"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateapplication"><a aria-hidden="true" class="anchor-heading" href="#updateapplication"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateApplication</h3>
<ul>
<li>description: Grants permission to update an application with specified properties.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateapplicationresourcelifecycle"><a aria-hidden="true" class="anchor-heading" href="#updateapplicationresourcelifecycle"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateApplicationResourceLifecycle</h3>
<ul>
<li>description: Grants permission to update the application version lifecycle policy associated with the application.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateapplicationversion"><a aria-hidden="true" class="anchor-heading" href="#updateapplicationversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateApplicationVersion</h3>
<ul>
<li>description: Grants permission to update an application version with specified properties.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "applicationversion": {
        "resource_type": "applicationversion",
        "required": true,
        "condition_keys": [
            "elasticbeanstalk:InApplication"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateconfigurationtemplate"><a aria-hidden="true" class="anchor-heading" href="#updateconfigurationtemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateConfigurationTemplate</h3>
<ul>
<li>description: Grants permission to update a configuration template with specified properties or configuration option values.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "configurationtemplate": {
        "resource_type": "configurationtemplate",
        "required": true,
        "condition_keys": [
            "elasticbeanstalk:InApplication"
        ],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "elasticbeanstalk:FromApplication",
            "elasticbeanstalk:FromApplicationVersion",
            "elasticbeanstalk:FromConfigurationTemplate",
            "elasticbeanstalk:FromEnvironment",
            "elasticbeanstalk:FromSolutionStack",
            "elasticbeanstalk:FromPlatform"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateenvironment"><a aria-hidden="true" class="anchor-heading" href="#updateenvironment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateEnvironment</h3>
<ul>
<li>description: Grants permission to update an environment.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "environment": {
        "resource_type": "environment",
        "required": true,
        "condition_keys": [
            "elasticbeanstalk:InApplication"
        ],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "elasticbeanstalk:FromApplicationVersion",
            "elasticbeanstalk:FromConfigurationTemplate",
            "elasticbeanstalk:FromSolutionStack",
            "elasticbeanstalk:FromPlatform"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="validateconfigurationsettings"><a aria-hidden="true" class="anchor-heading" href="#validateconfigurationsettings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ValidateConfigurationSettings</h3>
<ul>
<li>description: Grants permission to check the validity of a set of configuration settings for a configuration template or an environment.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "configurationtemplate": {
        "resource_type": "configurationtemplate",
        "required": false,
        "condition_keys": [
            "elasticbeanstalk:InApplication"
        ],
        "dependent_actions": []
    },
    "environment": {
        "resource_type": "environment",
        "required": false,
        "condition_keys": [
            "elasticbeanstalk:InApplication"
        ],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Elastic Beanstalk"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-WorkDocs.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>WorkDocs - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-WorkDocs.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-WorkDocs.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-WorkDocs.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="WorkDocs - undefined" />
  <meta name="twitter:title" content="WorkDocs - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">WorkDocs</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="WorkDocs">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="workdocs"><a aria-hidden="true" class="anchor-heading" href="#workdocs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>WorkDocs</h1>
<ul>
<li>prefix: workdocs</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="abortdocumentversionupload"><a aria-hidden="true" class="anchor-heading" href="#abortdocumentversionupload"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AbortDocumentVersionUpload</h3>
<ul>
<li>description: Grants permission to abort the upload of the specified document version that was previously initiated by InitiateDocumentVersionUpload.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="activateuser"><a aria-hidden="true" class="anchor-heading" href="#activateuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ActivateUser</h3>
<ul>
<li>description: Grants permission to activate the specified user. Only active users can access Amazon WorkDocs.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="addresourcepermissions"><a aria-hidden="true" class="anchor-heading" href="#addresourcepermissions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddResourcePermissions</h3>
<ul>
<li>description: Grants permission to create a set of permissions for the specified folder or document.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="addusertogroup"><a aria-hidden="true" class="anchor-heading" href="#addusertogroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddUserToGroup</h3>
<ul>
<li>description: Grants permission to add a user to a group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="checkalias"><a aria-hidden="true" class="anchor-heading" href="#checkalias"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CheckAlias</h3>
<ul>
<li>description: Grants permission to check an alias.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createcomment"><a aria-hidden="true" class="anchor-heading" href="#createcomment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateComment</h3>
<ul>
<li>description: Grants permission to add a new comment to the specified document version.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createcustommetadata"><a aria-hidden="true" class="anchor-heading" href="#createcustommetadata"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateCustomMetadata</h3>
<ul>
<li>description: Grants permission to add one or more custom properties to the specified resource.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createfolder"><a aria-hidden="true" class="anchor-heading" href="#createfolder"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateFolder</h3>
<ul>
<li>description: Grants permission to create a folder with the specified name and parent folder.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createinstance"><a aria-hidden="true" class="anchor-heading" href="#createinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateInstance</h3>
<ul>
<li>description: Grants permission to create an instance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createlabels"><a aria-hidden="true" class="anchor-heading" href="#createlabels"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateLabels</h3>
<ul>
<li>description: Grants permission to add labels to the given resource.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createnotificationsubscription"><a aria-hidden="true" class="anchor-heading" href="#createnotificationsubscription"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateNotificationSubscription</h3>
<ul>
<li>description: Grants permission to configure WorkDocs to use Amazon SNS notifications.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createuser"><a aria-hidden="true" class="anchor-heading" href="#createuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateUser</h3>
<ul>
<li>description: Grants permission to create a user in a Simple AD or Microsoft AD directory.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deactivateuser"><a aria-hidden="true" class="anchor-heading" href="#deactivateuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeactivateUser</h3>
<ul>
<li>description: Grants permission to deactivate the specified user, which revokes the user's access to Amazon WorkDocs.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletecomment"><a aria-hidden="true" class="anchor-heading" href="#deletecomment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteComment</h3>
<ul>
<li>description: Grants permission to delete the specified comment from the document version.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletecustommetadata"><a aria-hidden="true" class="anchor-heading" href="#deletecustommetadata"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteCustomMetadata</h3>
<ul>
<li>description: Grants permission to delete custom metadata from the specified resource.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedocument"><a aria-hidden="true" class="anchor-heading" href="#deletedocument"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDocument</h3>
<ul>
<li>description: Grants permission to permanently delete the specified document and its associated metadata.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletefolder"><a aria-hidden="true" class="anchor-heading" href="#deletefolder"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteFolder</h3>
<ul>
<li>description: Grants permission to permanently delete the specified folder and its contents.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletefoldercontents"><a aria-hidden="true" class="anchor-heading" href="#deletefoldercontents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteFolderContents</h3>
<ul>
<li>description: Grants permission to delete the contents of the specified folder.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteinstance"><a aria-hidden="true" class="anchor-heading" href="#deleteinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteInstance</h3>
<ul>
<li>description: Grants permission to delete an instance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletelabels"><a aria-hidden="true" class="anchor-heading" href="#deletelabels"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteLabels</h3>
<ul>
<li>description: Grants permission to delete one or more labels from a resource.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletenotificationsubscription"><a aria-hidden="true" class="anchor-heading" href="#deletenotificationsubscription"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteNotificationSubscription</h3>
<ul>
<li>description: Grants permission to delete the specified subscription from the specified organization.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteuser"><a aria-hidden="true" class="anchor-heading" href="#deleteuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteUser</h3>
<ul>
<li>description: Grants permission to delete the specified user from a Simple AD or Microsoft AD directory.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deregisterdirectory"><a aria-hidden="true" class="anchor-heading" href="#deregisterdirectory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeregisterDirectory</h3>
<ul>
<li>description: Grants permission to deregister a directory.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeactivities"><a aria-hidden="true" class="anchor-heading" href="#describeactivities"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeActivities</h3>
<ul>
<li>description: Grants permission to fetch user activities in a specified time period.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeavailabledirectories"><a aria-hidden="true" class="anchor-heading" href="#describeavailabledirectories"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAvailableDirectories</h3>
<ul>
<li>description: Grants permission to describe available directories.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecomments"><a aria-hidden="true" class="anchor-heading" href="#describecomments"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeComments</h3>
<ul>
<li>description: Grants permission to list all the comments for the specified document version.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedocumentversions"><a aria-hidden="true" class="anchor-heading" href="#describedocumentversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDocumentVersions</h3>
<ul>
<li>description: Grants permission to retrieve the document versions for the specified document.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describefoldercontents"><a aria-hidden="true" class="anchor-heading" href="#describefoldercontents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeFolderContents</h3>
<ul>
<li>description: Grants permission to describe the contents of the specified folder, including its documents and sub-folders.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describegroups"><a aria-hidden="true" class="anchor-heading" href="#describegroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeGroups</h3>
<ul>
<li>description: Grants permission to describe the user groups.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeinstances"><a aria-hidden="true" class="anchor-heading" href="#describeinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeInstances</h3>
<ul>
<li>description: Grants permission to describe instances.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describenotificationsubscriptions"><a aria-hidden="true" class="anchor-heading" href="#describenotificationsubscriptions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeNotificationSubscriptions</h3>
<ul>
<li>description: Grants permission to list the specified notification subscriptions.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeresourcepermissions"><a aria-hidden="true" class="anchor-heading" href="#describeresourcepermissions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeResourcePermissions</h3>
<ul>
<li>description: Grants permission to view a description of a specified resource's permissions.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describerootfolders"><a aria-hidden="true" class="anchor-heading" href="#describerootfolders"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeRootFolders</h3>
<ul>
<li>description: Grants permission to describe the root folders.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeusers"><a aria-hidden="true" class="anchor-heading" href="#describeusers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeUsers</h3>
<ul>
<li>description: Grants permission to view a description of the specified users. You can describe all users or filter the results (for example, by status or organization).</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="downloaddocumentversion"><a aria-hidden="true" class="anchor-heading" href="#downloaddocumentversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DownloadDocumentVersion</h3>
<ul>
<li>description: Grants permission to download a specified document version.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcurrentuser"><a aria-hidden="true" class="anchor-heading" href="#getcurrentuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCurrentUser</h3>
<ul>
<li>description: Grants permission to retrieve the details of the current user.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdocument"><a aria-hidden="true" class="anchor-heading" href="#getdocument"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDocument</h3>
<ul>
<li>description: Grants permission to retrieve the specified document object.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdocumentpath"><a aria-hidden="true" class="anchor-heading" href="#getdocumentpath"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDocumentPath</h3>
<ul>
<li>description: Grants permission to retrieve the path information (the hierarchy from the root folder) for the requested document.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdocumentversion"><a aria-hidden="true" class="anchor-heading" href="#getdocumentversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDocumentVersion</h3>
<ul>
<li>description: Grants permission to retrieve version metadata for the specified document.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getfolder"><a aria-hidden="true" class="anchor-heading" href="#getfolder"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetFolder</h3>
<ul>
<li>description: Grants permission to retrieve the metadata of the specified folder.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getfolderpath"><a aria-hidden="true" class="anchor-heading" href="#getfolderpath"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetFolderPath</h3>
<ul>
<li>description: Grants permission to retrieve the path information (the hierarchy from the root folder) for the specified folder.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getresources"><a aria-hidden="true" class="anchor-heading" href="#getresources"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetResources</h3>
<ul>
<li>description: Grants permission to get a collection of resources.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="initiatedocumentversionupload"><a aria-hidden="true" class="anchor-heading" href="#initiatedocumentversionupload"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>InitiateDocumentVersionUpload</h3>
<ul>
<li>description: Grants permission to create a new document object and version object.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registerdirectory"><a aria-hidden="true" class="anchor-heading" href="#registerdirectory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterDirectory</h3>
<ul>
<li>description: Grants permission to register a directory.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="removeallresourcepermissions"><a aria-hidden="true" class="anchor-heading" href="#removeallresourcepermissions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemoveAllResourcePermissions</h3>
<ul>
<li>description: Grants permission to remove all the permissions from the specified resource.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="removeresourcepermission"><a aria-hidden="true" class="anchor-heading" href="#removeresourcepermission"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemoveResourcePermission</h3>
<ul>
<li>description: Grants permission to remove the permission for the specified principal from the specified resource.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatedocument"><a aria-hidden="true" class="anchor-heading" href="#updatedocument"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateDocument</h3>
<ul>
<li>description: Grants permission to update the specified attributes of the specified document.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatedocumentversion"><a aria-hidden="true" class="anchor-heading" href="#updatedocumentversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateDocumentVersion</h3>
<ul>
<li>description: Grants permission to change the status of the document version to ACTIVE.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatefolder"><a aria-hidden="true" class="anchor-heading" href="#updatefolder"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateFolder</h3>
<ul>
<li>description: Grants permission to update the specified attributes of the specified folder.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateinstancealias"><a aria-hidden="true" class="anchor-heading" href="#updateinstancealias"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateInstanceAlias</h3>
<ul>
<li>description: Grants permission to update an instance alias.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateuser"><a aria-hidden="true" class="anchor-heading" href="#updateuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateUser</h3>
<ul>
<li>description: Grants permission to update the specified attributes of the specified user, and grants or revokes administrative privileges to the Amazon WorkDocs site.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-WorkDocs"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Machine Learning.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Machine Learning - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Machine Learning.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Machine Learning.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Machine Learning.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Machine Learning - undefined" />
  <meta name="twitter:title" content="Machine Learning - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Machine Learning</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Machine Learning">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="machine-learning"><a aria-hidden="true" class="anchor-heading" href="#machine-learning"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Machine Learning</h1>
<ul>
<li>prefix: machinelearning</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="addtags"><a aria-hidden="true" class="anchor-heading" href="#addtags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddTags</h3>
<ul>
<li>description: Adds one or more tags to an object, up to a limit of 10. Each tag consists of a key and an optional value</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "batchprediction": {
        "resource_type": "batchprediction",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "datasource": {
        "resource_type": "datasource",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "evaluation": {
        "resource_type": "evaluation",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "mlmodel": {
        "resource_type": "mlmodel",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createbatchprediction"><a aria-hidden="true" class="anchor-heading" href="#createbatchprediction"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateBatchPrediction</h3>
<ul>
<li>description: Generates predictions for a group of observations</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "batchprediction": {
        "resource_type": "batchprediction",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "datasource": {
        "resource_type": "datasource",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "mlmodel": {
        "resource_type": "mlmodel",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdatasourcefromrds"><a aria-hidden="true" class="anchor-heading" href="#createdatasourcefromrds"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDataSourceFromRDS</h3>
<ul>
<li>description: Creates a DataSource object from an Amazon RDS</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "datasource": {
        "resource_type": "datasource",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdatasourcefromredshift"><a aria-hidden="true" class="anchor-heading" href="#createdatasourcefromredshift"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDataSourceFromRedshift</h3>
<ul>
<li>description: Creates a DataSource from a database hosted on an Amazon Redshift cluster</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "datasource": {
        "resource_type": "datasource",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdatasourcefroms3"><a aria-hidden="true" class="anchor-heading" href="#createdatasourcefroms3"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDataSourceFromS3</h3>
<ul>
<li>description: Creates a DataSource object from S3</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "datasource": {
        "resource_type": "datasource",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createevaluation"><a aria-hidden="true" class="anchor-heading" href="#createevaluation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateEvaluation</h3>
<ul>
<li>description: Creates a new Evaluation of an MLModel</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "datasource": {
        "resource_type": "datasource",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "evaluation": {
        "resource_type": "evaluation",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "mlmodel": {
        "resource_type": "mlmodel",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createmlmodel"><a aria-hidden="true" class="anchor-heading" href="#createmlmodel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateMLModel</h3>
<ul>
<li>description: Creates a new MLModel</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "datasource": {
        "resource_type": "datasource",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "mlmodel": {
        "resource_type": "mlmodel",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createrealtimeendpoint"><a aria-hidden="true" class="anchor-heading" href="#createrealtimeendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateRealtimeEndpoint</h3>
<ul>
<li>description: Creates a real-time endpoint for the MLModel</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "mlmodel": {
        "resource_type": "mlmodel",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletebatchprediction"><a aria-hidden="true" class="anchor-heading" href="#deletebatchprediction"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteBatchPrediction</h3>
<ul>
<li>description: Assigns the DELETED status to a BatchPrediction, rendering it unusable</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "batchprediction": {
        "resource_type": "batchprediction",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedatasource"><a aria-hidden="true" class="anchor-heading" href="#deletedatasource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDataSource</h3>
<ul>
<li>description: Assigns the DELETED status to a DataSource, rendering it unusable</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "datasource": {
        "resource_type": "datasource",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteevaluation"><a aria-hidden="true" class="anchor-heading" href="#deleteevaluation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteEvaluation</h3>
<ul>
<li>description: Assigns the DELETED status to an Evaluation, rendering it unusable</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "evaluation": {
        "resource_type": "evaluation",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletemlmodel"><a aria-hidden="true" class="anchor-heading" href="#deletemlmodel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteMLModel</h3>
<ul>
<li>description: Assigns the DELETED status to an MLModel, rendering it unusable</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "mlmodel": {
        "resource_type": "mlmodel",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleterealtimeendpoint"><a aria-hidden="true" class="anchor-heading" href="#deleterealtimeendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteRealtimeEndpoint</h3>
<ul>
<li>description: Deletes a real time endpoint of an MLModel</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "mlmodel": {
        "resource_type": "mlmodel",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetags"><a aria-hidden="true" class="anchor-heading" href="#deletetags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTags</h3>
<ul>
<li>description: Deletes the specified tags associated with an ML object. After this operation is complete, you can't recover deleted tags</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "batchprediction": {
        "resource_type": "batchprediction",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "datasource": {
        "resource_type": "datasource",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "evaluation": {
        "resource_type": "evaluation",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "mlmodel": {
        "resource_type": "mlmodel",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describebatchpredictions"><a aria-hidden="true" class="anchor-heading" href="#describebatchpredictions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeBatchPredictions</h3>
<ul>
<li>description: Returns a list of BatchPrediction operations that match the search criteria in the request</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedatasources"><a aria-hidden="true" class="anchor-heading" href="#describedatasources"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDataSources</h3>
<ul>
<li>description: Returns a list of DataSource that match the search criteria in the request</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeevaluations"><a aria-hidden="true" class="anchor-heading" href="#describeevaluations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEvaluations</h3>
<ul>
<li>description: Returns a list of DescribeEvaluations that match the search criteria in the request</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describemlmodels"><a aria-hidden="true" class="anchor-heading" href="#describemlmodels"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeMLModels</h3>
<ul>
<li>description: Returns a list of MLModel that match the search criteria in the request</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetags"><a aria-hidden="true" class="anchor-heading" href="#describetags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTags</h3>
<ul>
<li>description: Describes one or more of the tags for your Amazon ML object</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "batchprediction": {
        "resource_type": "batchprediction",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "datasource": {
        "resource_type": "datasource",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "evaluation": {
        "resource_type": "evaluation",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "mlmodel": {
        "resource_type": "mlmodel",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbatchprediction"><a aria-hidden="true" class="anchor-heading" href="#getbatchprediction"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBatchPrediction</h3>
<ul>
<li>description: Returns a BatchPrediction that includes detailed metadata, status, and data file information</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "batchprediction": {
        "resource_type": "batchprediction",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdatasource"><a aria-hidden="true" class="anchor-heading" href="#getdatasource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDataSource</h3>
<ul>
<li>description: Returns a DataSource that includes metadata and data file information, as well as the current status of the DataSource</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "datasource": {
        "resource_type": "datasource",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getevaluation"><a aria-hidden="true" class="anchor-heading" href="#getevaluation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetEvaluation</h3>
<ul>
<li>description: Returns an Evaluation that includes metadata as well as the current status of the Evaluation</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "datasource": {
        "resource_type": "datasource",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmlmodel"><a aria-hidden="true" class="anchor-heading" href="#getmlmodel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetMLModel</h3>
<ul>
<li>description: Returns an MLModel that includes detailed metadata, and data source information as well as the current status of the MLModel</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "mlmodel": {
        "resource_type": "mlmodel",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="predict"><a aria-hidden="true" class="anchor-heading" href="#predict"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Predict</h3>
<ul>
<li>description: Generates a prediction for the observation using the specified ML Model</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "mlmodel": {
        "resource_type": "mlmodel",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatebatchprediction"><a aria-hidden="true" class="anchor-heading" href="#updatebatchprediction"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateBatchPrediction</h3>
<ul>
<li>description: Updates the BatchPredictionName of a BatchPrediction</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "batchprediction": {
        "resource_type": "batchprediction",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatedatasource"><a aria-hidden="true" class="anchor-heading" href="#updatedatasource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateDataSource</h3>
<ul>
<li>description: Updates the DataSourceName of a DataSource</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "datasource": {
        "resource_type": "datasource",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateevaluation"><a aria-hidden="true" class="anchor-heading" href="#updateevaluation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateEvaluation</h3>
<ul>
<li>description: Updates the EvaluationName of an Evaluation</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "evaluation": {
        "resource_type": "evaluation",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatemlmodel"><a aria-hidden="true" class="anchor-heading" href="#updatemlmodel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateMLModel</h3>
<ul>
<li>description: Updates the MLModelName and the ScoreThreshold of an MLModel</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "mlmodel": {
        "resource_type": "mlmodel",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Machine Learning"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Redshift.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Redshift - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Redshift.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Redshift.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Redshift.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Redshift - undefined" />
  <meta name="twitter:title" content="Redshift - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Redshift</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Redshift">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="redshift"><a aria-hidden="true" class="anchor-heading" href="#redshift"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Redshift</h1>
<ul>
<li>prefix: redshift</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="acceptreservednodeexchange"><a aria-hidden="true" class="anchor-heading" href="#acceptreservednodeexchange"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AcceptReservedNodeExchange</h3>
<ul>
<li>description: Grants permission to exchange a DC1 reserved node for a DC2 reserved node with no changes to the configuration</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="authorizeclustersecuritygroupingress"><a aria-hidden="true" class="anchor-heading" href="#authorizeclustersecuritygroupingress"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AuthorizeClusterSecurityGroupIngress</h3>
<ul>
<li>description: Grants permission to add an inbound (ingress) rule to an Amazon Redshift security group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "securitygroup": {
        "resource_type": "securitygroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "securitygroupingress-ec2securitygroup": {
        "resource_type": "securitygroupingress-ec2securitygroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="authorizesnapshotaccess"><a aria-hidden="true" class="anchor-heading" href="#authorizesnapshotaccess"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AuthorizeSnapshotAccess</h3>
<ul>
<li>description: Grants permission to the specified AWS account to restore a snapshot</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "snapshot": {
        "resource_type": "snapshot",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchdeleteclustersnapshots"><a aria-hidden="true" class="anchor-heading" href="#batchdeleteclustersnapshots"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchDeleteClusterSnapshots</h3>
<ul>
<li>description: Grants permission to delete snapshots in a batch of size upto 100</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "snapshot": {
        "resource_type": "snapshot",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchmodifyclustersnapshots"><a aria-hidden="true" class="anchor-heading" href="#batchmodifyclustersnapshots"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchModifyClusterSnapshots</h3>
<ul>
<li>description: Grants permission to modify settings for a list of snapshots</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "snapshot": {
        "resource_type": "snapshot",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="cancelquery"><a aria-hidden="true" class="anchor-heading" href="#cancelquery"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CancelQuery</h3>
<ul>
<li>description: Grants permission to cancel a query through the Amazon Redshift console</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="cancelquerysession"><a aria-hidden="true" class="anchor-heading" href="#cancelquerysession"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CancelQuerySession</h3>
<ul>
<li>description: Grants permission to see queries in the Amazon Redshift console</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="cancelresize"><a aria-hidden="true" class="anchor-heading" href="#cancelresize"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CancelResize</h3>
<ul>
<li>description: Grants permission to cancel a resize operation</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="copyclustersnapshot"><a aria-hidden="true" class="anchor-heading" href="#copyclustersnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CopyClusterSnapshot</h3>
<ul>
<li>description: Grants permission to copy a cluster snapshot</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "snapshot": {
        "resource_type": "snapshot",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createcluster"><a aria-hidden="true" class="anchor-heading" href="#createcluster"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateCluster</h3>
<ul>
<li>description: Grants permission to create a cluster</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createclusterparametergroup"><a aria-hidden="true" class="anchor-heading" href="#createclusterparametergroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateClusterParameterGroup</h3>
<ul>
<li>description: Grants permission to create an Amazon Redshift parameter group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "parametergroup": {
        "resource_type": "parametergroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createclustersecuritygroup"><a aria-hidden="true" class="anchor-heading" href="#createclustersecuritygroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateClusterSecurityGroup</h3>
<ul>
<li>description: Grants permission to create an Amazon Redshift security group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "securitygroup": {
        "resource_type": "securitygroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createclustersnapshot"><a aria-hidden="true" class="anchor-heading" href="#createclustersnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateClusterSnapshot</h3>
<ul>
<li>description: Grants permission to create a manual snapshot of the specified cluster</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "snapshot": {
        "resource_type": "snapshot",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createclustersubnetgroup"><a aria-hidden="true" class="anchor-heading" href="#createclustersubnetgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateClusterSubnetGroup</h3>
<ul>
<li>description: Grants permission to create an Amazon Redshift subnet group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "subnetgroup": {
        "resource_type": "subnetgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createclusteruser"><a aria-hidden="true" class="anchor-heading" href="#createclusteruser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateClusterUser</h3>
<ul>
<li>description: Grants permission to automatically create the specified Amazon Redshift user if it does not exist</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dbuser": {
        "resource_type": "dbuser",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "redshift:DbUser"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createeventsubscription"><a aria-hidden="true" class="anchor-heading" href="#createeventsubscription"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateEventSubscription</h3>
<ul>
<li>description: Grants permission to create an Amazon Redshift event notification subscription</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "eventsubscription": {
        "resource_type": "eventsubscription",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createhsmclientcertificate"><a aria-hidden="true" class="anchor-heading" href="#createhsmclientcertificate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateHsmClientCertificate</h3>
<ul>
<li>description: Grants permission to create an HSM client certificate that a cluster uses to connect to an HSM</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hsmclientcertificate": {
        "resource_type": "hsmclientcertificate",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createhsmconfiguration"><a aria-hidden="true" class="anchor-heading" href="#createhsmconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateHsmConfiguration</h3>
<ul>
<li>description: Grants permission to create an HSM configuration that contains information required by a cluster to store and use database encryption keys in a hardware security module (HSM)</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hsmconfiguration": {
        "resource_type": "hsmconfiguration",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createsavedquery"><a aria-hidden="true" class="anchor-heading" href="#createsavedquery"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSavedQuery</h3>
<ul>
<li>description: Grants permission to create saved SQL queries through the Amazon Redshift console</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createscheduledaction"><a aria-hidden="true" class="anchor-heading" href="#createscheduledaction"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateScheduledAction</h3>
<ul>
<li>description: Grants permission to create an Amazon Redshift scheduled action</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createsnapshotcopygrant"><a aria-hidden="true" class="anchor-heading" href="#createsnapshotcopygrant"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSnapshotCopyGrant</h3>
<ul>
<li>description: Grants permission to create a snapshot copy grant and encrypt copied snapshots in a destination AWS Region</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "snapshotcopygrant": {
        "resource_type": "snapshotcopygrant",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createsnapshotschedule"><a aria-hidden="true" class="anchor-heading" href="#createsnapshotschedule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSnapshotSchedule</h3>
<ul>
<li>description: Grants permission to create a snapshot schedule</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "snapshotschedule": {
        "resource_type": "snapshotschedule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtags"><a aria-hidden="true" class="anchor-heading" href="#createtags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTags</h3>
<ul>
<li>description: Grants permission to add one or more tags to a specified resource</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dbgroup": {
        "resource_type": "dbgroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dbname": {
        "resource_type": "dbname",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dbuser": {
        "resource_type": "dbuser",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "eventsubscription": {
        "resource_type": "eventsubscription",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "hsmclientcertificate": {
        "resource_type": "hsmclientcertificate",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "hsmconfiguration": {
        "resource_type": "hsmconfiguration",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "parametergroup": {
        "resource_type": "parametergroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "securitygroup": {
        "resource_type": "securitygroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "securitygroupingress-cidr": {
        "resource_type": "securitygroupingress-cidr",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "securitygroupingress-ec2securitygroup": {
        "resource_type": "securitygroupingress-ec2securitygroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "snapshot": {
        "resource_type": "snapshot",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "snapshotcopygrant": {
        "resource_type": "snapshotcopygrant",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "snapshotschedule": {
        "resource_type": "snapshotschedule",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "subnetgroup": {
        "resource_type": "subnetgroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletecluster"><a aria-hidden="true" class="anchor-heading" href="#deletecluster"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteCluster</h3>
<ul>
<li>description: Grants permission to delete a previously provisioned cluster</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteclusterparametergroup"><a aria-hidden="true" class="anchor-heading" href="#deleteclusterparametergroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteClusterParameterGroup</h3>
<ul>
<li>description: Grants permission to delete an Amazon Redshift parameter group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "parametergroup": {
        "resource_type": "parametergroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteclustersecuritygroup"><a aria-hidden="true" class="anchor-heading" href="#deleteclustersecuritygroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteClusterSecurityGroup</h3>
<ul>
<li>description: Grants permission to delete an Amazon Redshift security group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "securitygroup": {
        "resource_type": "securitygroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteclustersnapshot"><a aria-hidden="true" class="anchor-heading" href="#deleteclustersnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteClusterSnapshot</h3>
<ul>
<li>description: Grants permission to delete a manual snapshot</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "snapshot": {
        "resource_type": "snapshot",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteclustersubnetgroup"><a aria-hidden="true" class="anchor-heading" href="#deleteclustersubnetgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteClusterSubnetGroup</h3>
<ul>
<li>description: Grants permission to delete a cluster subnet group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "subnetgroup": {
        "resource_type": "subnetgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteeventsubscription"><a aria-hidden="true" class="anchor-heading" href="#deleteeventsubscription"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteEventSubscription</h3>
<ul>
<li>description: Grants permission to delete an Amazon Redshift event notification subscription</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "eventsubscription": {
        "resource_type": "eventsubscription",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletehsmclientcertificate"><a aria-hidden="true" class="anchor-heading" href="#deletehsmclientcertificate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteHsmClientCertificate</h3>
<ul>
<li>description: Grants permission to delete an HSM client certificate</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hsmclientcertificate": {
        "resource_type": "hsmclientcertificate",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletehsmconfiguration"><a aria-hidden="true" class="anchor-heading" href="#deletehsmconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteHsmConfiguration</h3>
<ul>
<li>description: Grants permission to delete an Amazon Redshift HSM configuration</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hsmconfiguration": {
        "resource_type": "hsmconfiguration",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletesavedqueries"><a aria-hidden="true" class="anchor-heading" href="#deletesavedqueries"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteSavedQueries</h3>
<ul>
<li>description: Grants permission to delete saved SQL queries through the Amazon Redshift console</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletescheduledaction"><a aria-hidden="true" class="anchor-heading" href="#deletescheduledaction"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteScheduledAction</h3>
<ul>
<li>description: Grants permission to delete an Amazon Redshift scheduled action</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletesnapshotcopygrant"><a aria-hidden="true" class="anchor-heading" href="#deletesnapshotcopygrant"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteSnapshotCopyGrant</h3>
<ul>
<li>description: Grants permission to delete a snapshot copy grant</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "snapshotcopygrant": {
        "resource_type": "snapshotcopygrant",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletesnapshotschedule"><a aria-hidden="true" class="anchor-heading" href="#deletesnapshotschedule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteSnapshotSchedule</h3>
<ul>
<li>description: Grants permission to delete a snapshot schedule</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "snapshotschedule": {
        "resource_type": "snapshotschedule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetags"><a aria-hidden="true" class="anchor-heading" href="#deletetags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTags</h3>
<ul>
<li>description: Grants permission to delete a tag or tags from a resource</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dbgroup": {
        "resource_type": "dbgroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dbname": {
        "resource_type": "dbname",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dbuser": {
        "resource_type": "dbuser",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "eventsubscription": {
        "resource_type": "eventsubscription",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "hsmclientcertificate": {
        "resource_type": "hsmclientcertificate",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "hsmconfiguration": {
        "resource_type": "hsmconfiguration",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "parametergroup": {
        "resource_type": "parametergroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "securitygroup": {
        "resource_type": "securitygroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "securitygroupingress-cidr": {
        "resource_type": "securitygroupingress-cidr",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "securitygroupingress-ec2securitygroup": {
        "resource_type": "securitygroupingress-ec2securitygroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "snapshot": {
        "resource_type": "snapshot",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "snapshotcopygrant": {
        "resource_type": "snapshotcopygrant",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "snapshotschedule": {
        "resource_type": "snapshotschedule",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "subnetgroup": {
        "resource_type": "subnetgroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeaccountattributes"><a aria-hidden="true" class="anchor-heading" href="#describeaccountattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAccountAttributes</h3>
<ul>
<li>description: Grants permission to describe attributes attached to the specified AWS account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeclusterdbrevisions"><a aria-hidden="true" class="anchor-heading" href="#describeclusterdbrevisions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeClusterDbRevisions</h3>
<ul>
<li>description: Grants permission to describe database revisions for a cluster</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeclusterparametergroups"><a aria-hidden="true" class="anchor-heading" href="#describeclusterparametergroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeClusterParameterGroups</h3>
<ul>
<li>description: Grants permission to describe Amazon Redshift parameter groups, including parameter groups you created and the default parameter group</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeclusterparameters"><a aria-hidden="true" class="anchor-heading" href="#describeclusterparameters"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeClusterParameters</h3>
<ul>
<li>description: Grants permission to describe parameters contained within an Amazon Redshift parameter group</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "parametergroup": {
        "resource_type": "parametergroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeclustersecuritygroups"><a aria-hidden="true" class="anchor-heading" href="#describeclustersecuritygroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeClusterSecurityGroups</h3>
<ul>
<li>description: Grants permission to describe Amazon Redshift security groups</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeclustersnapshots"><a aria-hidden="true" class="anchor-heading" href="#describeclustersnapshots"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeClusterSnapshots</h3>
<ul>
<li>description: Grants permission to describe one or more snapshot objects, which contain metadata about your cluster snapshots</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeclustersubnetgroups"><a aria-hidden="true" class="anchor-heading" href="#describeclustersubnetgroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeClusterSubnetGroups</h3>
<ul>
<li>description: Grants permission to describe one or more cluster subnet group objects, which contain metadata about your cluster subnet groups</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeclustertracks"><a aria-hidden="true" class="anchor-heading" href="#describeclustertracks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeClusterTracks</h3>
<ul>
<li>description: Grants permission to describe available maintenance tracks</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeclusterversions"><a aria-hidden="true" class="anchor-heading" href="#describeclusterversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeClusterVersions</h3>
<ul>
<li>description: Grants permission to describe available Amazon Redshift cluster versions</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeclusters"><a aria-hidden="true" class="anchor-heading" href="#describeclusters"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeClusters</h3>
<ul>
<li>description: Grants permission to describe properties of provisioned clusters</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedefaultclusterparameters"><a aria-hidden="true" class="anchor-heading" href="#describedefaultclusterparameters"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDefaultClusterParameters</h3>
<ul>
<li>description: Grants permission to describe parameter settings for a parameter group family</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeeventcategories"><a aria-hidden="true" class="anchor-heading" href="#describeeventcategories"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEventCategories</h3>
<ul>
<li>description: Grants permission to describe event categories for all event source types, or for a specified source type</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeeventsubscriptions"><a aria-hidden="true" class="anchor-heading" href="#describeeventsubscriptions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEventSubscriptions</h3>
<ul>
<li>description: Grants permission to describe Amazon Redshift event notification subscriptions for the specified AWS account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeevents"><a aria-hidden="true" class="anchor-heading" href="#describeevents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEvents</h3>
<ul>
<li>description: Grants permission to describe events related to clusters, security groups, snapshots, and parameter groups for the past 14 days</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describehsmclientcertificates"><a aria-hidden="true" class="anchor-heading" href="#describehsmclientcertificates"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeHsmClientCertificates</h3>
<ul>
<li>description: Grants permission to describe HSM client certificates</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describehsmconfigurations"><a aria-hidden="true" class="anchor-heading" href="#describehsmconfigurations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeHsmConfigurations</h3>
<ul>
<li>description: Grants permission to describe Amazon Redshift HSM configurations</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeloggingstatus"><a aria-hidden="true" class="anchor-heading" href="#describeloggingstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeLoggingStatus</h3>
<ul>
<li>description: Grants permission to describe whether information, such as queries and connection attempts, is being logged for a cluster</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describenodeconfigurationoptions"><a aria-hidden="true" class="anchor-heading" href="#describenodeconfigurationoptions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeNodeConfigurationOptions</h3>
<ul>
<li>description: Grants permission to describe properties of possible node configurations such as node type, number of nodes, and disk usage for the specified action type</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeorderableclusteroptions"><a aria-hidden="true" class="anchor-heading" href="#describeorderableclusteroptions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeOrderableClusterOptions</h3>
<ul>
<li>description: Grants permission to describe orderable cluster options</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describequery"><a aria-hidden="true" class="anchor-heading" href="#describequery"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeQuery</h3>
<ul>
<li>description: Grants permission to describe a query through the Amazon Redshift console</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describereservednodeofferings"><a aria-hidden="true" class="anchor-heading" href="#describereservednodeofferings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeReservedNodeOfferings</h3>
<ul>
<li>description: Grants permission to describe available reserved node offerings by Amazon Redshift</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describereservednodes"><a aria-hidden="true" class="anchor-heading" href="#describereservednodes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeReservedNodes</h3>
<ul>
<li>description: Grants permission to describe the reserved nodes</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeresize"><a aria-hidden="true" class="anchor-heading" href="#describeresize"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeResize</h3>
<ul>
<li>description: Grants permission to describe the last resize operation for a cluster</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describesavedqueries"><a aria-hidden="true" class="anchor-heading" href="#describesavedqueries"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSavedQueries</h3>
<ul>
<li>description: Grants permission to describe saved queries through the Amazon Redshift console</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describescheduledactions"><a aria-hidden="true" class="anchor-heading" href="#describescheduledactions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeScheduledActions</h3>
<ul>
<li>description: Grants permission to describe created Amazon Redshift scheduled actions</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describesnapshotcopygrants"><a aria-hidden="true" class="anchor-heading" href="#describesnapshotcopygrants"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSnapshotCopyGrants</h3>
<ul>
<li>description: Grants permission to describe snapshot copy grants owned by the specified AWS account in the destination AWS Region</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describesnapshotschedules"><a aria-hidden="true" class="anchor-heading" href="#describesnapshotschedules"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSnapshotSchedules</h3>
<ul>
<li>description: Grants permission to describe snapshot schedules</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "snapshotschedule": {
        "resource_type": "snapshotschedule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describestorage"><a aria-hidden="true" class="anchor-heading" href="#describestorage"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeStorage</h3>
<ul>
<li>description: Grants permission to describe account level backups storage size and provisional storage</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetable"><a aria-hidden="true" class="anchor-heading" href="#describetable"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTable</h3>
<ul>
<li>description: Grants permission to describe a table through the Amazon Redshift console</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetablerestorestatus"><a aria-hidden="true" class="anchor-heading" href="#describetablerestorestatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTableRestoreStatus</h3>
<ul>
<li>description: Grants permission to describe status of one or more table restore requests made using the RestoreTableFromClusterSnapshot API action</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetags"><a aria-hidden="true" class="anchor-heading" href="#describetags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTags</h3>
<ul>
<li>description: Grants permission to describe tags</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dbgroup": {
        "resource_type": "dbgroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dbname": {
        "resource_type": "dbname",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dbuser": {
        "resource_type": "dbuser",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "eventsubscription": {
        "resource_type": "eventsubscription",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "hsmclientcertificate": {
        "resource_type": "hsmclientcertificate",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "hsmconfiguration": {
        "resource_type": "hsmconfiguration",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "parametergroup": {
        "resource_type": "parametergroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "securitygroup": {
        "resource_type": "securitygroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "securitygroupingress-cidr": {
        "resource_type": "securitygroupingress-cidr",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "securitygroupingress-ec2securitygroup": {
        "resource_type": "securitygroupingress-ec2securitygroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "snapshot": {
        "resource_type": "snapshot",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "snapshotcopygrant": {
        "resource_type": "snapshotcopygrant",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "snapshotschedule": {
        "resource_type": "snapshotschedule",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "subnetgroup": {
        "resource_type": "subnetgroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disablelogging"><a aria-hidden="true" class="anchor-heading" href="#disablelogging"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisableLogging</h3>
<ul>
<li>description: Grants permission to disable logging information, such as queries and connection attempts, for a cluster</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disablesnapshotcopy"><a aria-hidden="true" class="anchor-heading" href="#disablesnapshotcopy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisableSnapshotCopy</h3>
<ul>
<li>description: Grants permission to disable the automatic copy of snapshots for a cluster</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="enablelogging"><a aria-hidden="true" class="anchor-heading" href="#enablelogging"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EnableLogging</h3>
<ul>
<li>description: Grants permission to enable logging information, such as queries and connection attempts, for a cluster</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="enablesnapshotcopy"><a aria-hidden="true" class="anchor-heading" href="#enablesnapshotcopy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EnableSnapshotCopy</h3>
<ul>
<li>description: Grants permission to enable the automatic copy of snapshots for a cluster</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="executequery"><a aria-hidden="true" class="anchor-heading" href="#executequery"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ExecuteQuery</h3>
<ul>
<li>description: Grants permission to execute a query through the Amazon Redshift console</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="fetchresults"><a aria-hidden="true" class="anchor-heading" href="#fetchresults"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>FetchResults</h3>
<ul>
<li>description: Grants permission to fetch query results through the Amazon Redshift console</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getclustercredentials"><a aria-hidden="true" class="anchor-heading" href="#getclustercredentials"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetClusterCredentials</h3>
<ul>
<li>description: Grants permission to get temporary credentials to access an Amazon Redshift database by the specified AWS account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dbuser": {
        "resource_type": "dbuser",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dbgroup": {
        "resource_type": "dbgroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dbname": {
        "resource_type": "dbname",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "redshift:DbName",
            "redshift:DbUser",
            "redshift:DurationSeconds"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getreservednodeexchangeofferings"><a aria-hidden="true" class="anchor-heading" href="#getreservednodeexchangeofferings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetReservedNodeExchangeOfferings</h3>
<ul>
<li>description: Grants permission to get an array of DC2 ReservedNodeOfferings that matches the payment type, term, and usage price of the given DC1 reserved node</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="joingroup"><a aria-hidden="true" class="anchor-heading" href="#joingroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>JoinGroup</h3>
<ul>
<li>description: Grants permission to join the specified Amazon Redshift group</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dbgroup": {
        "resource_type": "dbgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdatabases"><a aria-hidden="true" class="anchor-heading" href="#listdatabases"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDatabases</h3>
<ul>
<li>description: Grants permission to list databases through the Amazon Redshift console</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listsavedqueries"><a aria-hidden="true" class="anchor-heading" href="#listsavedqueries"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListSavedQueries</h3>
<ul>
<li>description: Grants permission to list saved queries through the Amazon Redshift console</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listschemas"><a aria-hidden="true" class="anchor-heading" href="#listschemas"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListSchemas</h3>
<ul>
<li>description: Grants permission to list schemas through the Amazon Redshift console</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtables"><a aria-hidden="true" class="anchor-heading" href="#listtables"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTables</h3>
<ul>
<li>description: Grants permission to list tables through the Amazon Redshift console</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifycluster"><a aria-hidden="true" class="anchor-heading" href="#modifycluster"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyCluster</h3>
<ul>
<li>description: Grants permission to modify the settings of a cluster</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyclusterdbrevision"><a aria-hidden="true" class="anchor-heading" href="#modifyclusterdbrevision"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyClusterDbRevision</h3>
<ul>
<li>description: Grants permission to modify the database revision of a cluster</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyclusteriamroles"><a aria-hidden="true" class="anchor-heading" href="#modifyclusteriamroles"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyClusterIamRoles</h3>
<ul>
<li>description: Grants permission to modify the list of AWS Identity and Access Management (IAM) roles that can be used by a cluster to access other AWS services</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyclustermaintenance"><a aria-hidden="true" class="anchor-heading" href="#modifyclustermaintenance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyClusterMaintenance</h3>
<ul>
<li>description: Grants permission to modify the maintenance settings of a cluster</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyclusterparametergroup"><a aria-hidden="true" class="anchor-heading" href="#modifyclusterparametergroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyClusterParameterGroup</h3>
<ul>
<li>description: Grants permission to modify the parameters of a parameter group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "parametergroup": {
        "resource_type": "parametergroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyclustersnapshot"><a aria-hidden="true" class="anchor-heading" href="#modifyclustersnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyClusterSnapshot</h3>
<ul>
<li>description: Grants permission to modify the settings of a snapshot</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "snapshot": {
        "resource_type": "snapshot",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyclustersnapshotschedule"><a aria-hidden="true" class="anchor-heading" href="#modifyclustersnapshotschedule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyClusterSnapshotSchedule</h3>
<ul>
<li>description: Grants permission to modify a snapshot schedule for a cluster</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyclustersubnetgroup"><a aria-hidden="true" class="anchor-heading" href="#modifyclustersubnetgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyClusterSubnetGroup</h3>
<ul>
<li>description: Grants permission to modify a cluster subnet group to include the specified list of VPC subnets</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "subnetgroup": {
        "resource_type": "subnetgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyeventsubscription"><a aria-hidden="true" class="anchor-heading" href="#modifyeventsubscription"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyEventSubscription</h3>
<ul>
<li>description: Grants permission to modify an existing Amazon Redshift event notification subscription</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "eventsubscription": {
        "resource_type": "eventsubscription",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifysavedquery"><a aria-hidden="true" class="anchor-heading" href="#modifysavedquery"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifySavedQuery</h3>
<ul>
<li>description: Grants permission to modify an existing saved query through the Amazon Redshift console</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyscheduledaction"><a aria-hidden="true" class="anchor-heading" href="#modifyscheduledaction"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyScheduledAction</h3>
<ul>
<li>description: Grants permission to modify an existing Amazon Redshift scheduled action</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifysnapshotcopyretentionperiod"><a aria-hidden="true" class="anchor-heading" href="#modifysnapshotcopyretentionperiod"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifySnapshotCopyRetentionPeriod</h3>
<ul>
<li>description: Grants permission to modify the number of days to retain snapshots in the destination AWS Region after they are copied from the source AWS Region</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifysnapshotschedule"><a aria-hidden="true" class="anchor-heading" href="#modifysnapshotschedule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifySnapshotSchedule</h3>
<ul>
<li>description: Grants permission to modify a snapshot schedule</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "snapshotschedule": {
        "resource_type": "snapshotschedule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="pausecluster"><a aria-hidden="true" class="anchor-heading" href="#pausecluster"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PauseCluster</h3>
<ul>
<li>description: Grants permission to pause a cluster</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="purchasereservednodeoffering"><a aria-hidden="true" class="anchor-heading" href="#purchasereservednodeoffering"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PurchaseReservedNodeOffering</h3>
<ul>
<li>description: Grants permission to purchase a reserved node</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="rebootcluster"><a aria-hidden="true" class="anchor-heading" href="#rebootcluster"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RebootCluster</h3>
<ul>
<li>description: Grants permission to reboot a cluster</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="resetclusterparametergroup"><a aria-hidden="true" class="anchor-heading" href="#resetclusterparametergroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ResetClusterParameterGroup</h3>
<ul>
<li>description: Grants permission to set one or more parameters of a parameter group to their default values and set the source values of the parameters to "engine-default"</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "parametergroup": {
        "resource_type": "parametergroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="resizecluster"><a aria-hidden="true" class="anchor-heading" href="#resizecluster"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ResizeCluster</h3>
<ul>
<li>description: Grants permission to change the size of a cluster</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="restorefromclustersnapshot"><a aria-hidden="true" class="anchor-heading" href="#restorefromclustersnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RestoreFromClusterSnapshot</h3>
<ul>
<li>description: Grants permission to create a cluster from a snapshot</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "snapshot": {
        "resource_type": "snapshot",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="restoretablefromclustersnapshot"><a aria-hidden="true" class="anchor-heading" href="#restoretablefromclustersnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RestoreTableFromClusterSnapshot</h3>
<ul>
<li>description: Grants permission to create a table from a table in an Amazon Redshift cluster snapshot</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "snapshot": {
        "resource_type": "snapshot",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="resumecluster"><a aria-hidden="true" class="anchor-heading" href="#resumecluster"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ResumeCluster</h3>
<ul>
<li>description: Grants permission to resume a cluster</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="revokeclustersecuritygroupingress"><a aria-hidden="true" class="anchor-heading" href="#revokeclustersecuritygroupingress"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RevokeClusterSecurityGroupIngress</h3>
<ul>
<li>description: Grants permission to revoke an ingress rule in an Amazon Redshift security group for a previously authorized IP range or Amazon EC2 security group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "securitygroup": {
        "resource_type": "securitygroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "securitygroupingress-ec2securitygroup": {
        "resource_type": "securitygroupingress-ec2securitygroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="revokesnapshotaccess"><a aria-hidden="true" class="anchor-heading" href="#revokesnapshotaccess"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RevokeSnapshotAccess</h3>
<ul>
<li>description: Grants permission to revoke access from the specified AWS account to restore a snapshot</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "snapshot": {
        "resource_type": "snapshot",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="rotateencryptionkey"><a aria-hidden="true" class="anchor-heading" href="#rotateencryptionkey"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RotateEncryptionKey</h3>
<ul>
<li>description: Grants permission to rotate an encryption key for a cluster</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="viewqueriesfromconsole"><a aria-hidden="true" class="anchor-heading" href="#viewqueriesfromconsole"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ViewQueriesFromConsole</h3>
<ul>
<li>description: Grants permission to view query results through the Amazon Redshift console</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="viewqueriesinconsole"><a aria-hidden="true" class="anchor-heading" href="#viewqueriesinconsole"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ViewQueriesInConsole</h3>
<ul>
<li>description: Grants permission to terminate running queries and loads through the Amazon Redshift console</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Redshift"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Transcribe.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Transcribe - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Transcribe.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Transcribe.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Transcribe.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Transcribe - undefined" />
  <meta name="twitter:title" content="Transcribe - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Transcribe</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Transcribe">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="transcribe"><a aria-hidden="true" class="anchor-heading" href="#transcribe"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Transcribe</h1>
<ul>
<li>prefix: transcribe</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="createlanguagemodel"><a aria-hidden="true" class="anchor-heading" href="#createlanguagemodel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateLanguageModel</h3>
<ul>
<li>description: Grants permission to create a new custom language model.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": [
            "s3:GetObject",
            "s3:ListBucket"
        ]
    }
}
</code></pre>
<h3 id="createmedicalvocabulary"><a aria-hidden="true" class="anchor-heading" href="#createmedicalvocabulary"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateMedicalVocabulary</h3>
<ul>
<li>description: Grants permission to create a new custom vocabulary that you can use to change the way Amazon Transcribe Medical handles transcription of an audio file.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": [
            "s3:GetObject"
        ]
    }
}
</code></pre>
<h3 id="createvocabulary"><a aria-hidden="true" class="anchor-heading" href="#createvocabulary"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateVocabulary</h3>
<ul>
<li>description: Grants permission to create a new custom vocabulary that you can use to change the way Amazon Transcribe handles transcription of an audio file.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": [
            "s3:GetObject"
        ]
    }
}
</code></pre>
<h3 id="createvocabularyfilter"><a aria-hidden="true" class="anchor-heading" href="#createvocabularyfilter"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateVocabularyFilter</h3>
<ul>
<li>description: Grants permission to create a new vocabulary filter that you can use to filter out words from the transcription of an audio file generated by Amazon Transcribe</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": [
            "s3:GetObject"
        ]
    }
}
</code></pre>
<h3 id="deletelanguagemodel"><a aria-hidden="true" class="anchor-heading" href="#deletelanguagemodel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteLanguageModel</h3>
<ul>
<li>description: Grants permission to delete a previously created custom language model.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletemedicaltranscriptionjob"><a aria-hidden="true" class="anchor-heading" href="#deletemedicaltranscriptionjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteMedicalTranscriptionJob</h3>
<ul>
<li>description: Grants permission to delete a previously submitted medical transcription job.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletemedicalvocabulary"><a aria-hidden="true" class="anchor-heading" href="#deletemedicalvocabulary"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteMedicalVocabulary</h3>
<ul>
<li>description: Grants permission to delete a medical vocabulary from Amazon Transcribe.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetranscriptionjob"><a aria-hidden="true" class="anchor-heading" href="#deletetranscriptionjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTranscriptionJob</h3>
<ul>
<li>description: Grants permission to delete a previously submitted transcription job along with any other generated results such as the transcription, models, and so on.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletevocabulary"><a aria-hidden="true" class="anchor-heading" href="#deletevocabulary"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteVocabulary</h3>
<ul>
<li>description: Grants permission to delete a vocabulary from Amazon Transcribe.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletevocabularyfilter"><a aria-hidden="true" class="anchor-heading" href="#deletevocabularyfilter"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteVocabularyFilter</h3>
<ul>
<li>description: Grants permission to delete a vocabulary filter from Amazon Transcribe.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describelanguagemodel"><a aria-hidden="true" class="anchor-heading" href="#describelanguagemodel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeLanguageModel</h3>
<ul>
<li>description: Grants permission to return information about a custom language model.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmedicaltranscriptionjob"><a aria-hidden="true" class="anchor-heading" href="#getmedicaltranscriptionjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetMedicalTranscriptionJob</h3>
<ul>
<li>description: Grants permission to return information about a medical transcription job.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmedicalvocabulary"><a aria-hidden="true" class="anchor-heading" href="#getmedicalvocabulary"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetMedicalVocabulary</h3>
<ul>
<li>description: Grants permission to get information about a medical vocabulary.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gettranscriptionjob"><a aria-hidden="true" class="anchor-heading" href="#gettranscriptionjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetTranscriptionJob</h3>
<ul>
<li>description: Grants permission to return information about a transcription job.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getvocabulary"><a aria-hidden="true" class="anchor-heading" href="#getvocabulary"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetVocabulary</h3>
<ul>
<li>description: Grants permission to to get information about a vocabulary.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getvocabularyfilter"><a aria-hidden="true" class="anchor-heading" href="#getvocabularyfilter"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetVocabularyFilter</h3>
<ul>
<li>description: Grants permission to get information about a vocabulary filter.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listlanguagemodels"><a aria-hidden="true" class="anchor-heading" href="#listlanguagemodels"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListLanguageModels</h3>
<ul>
<li>description: Grants permission to list custom language models.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listmedicaltranscriptionjobs"><a aria-hidden="true" class="anchor-heading" href="#listmedicaltranscriptionjobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListMedicalTranscriptionJobs</h3>
<ul>
<li>description: Grants permission to list medical transcription jobs with the specified status.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listmedicalvocabularies"><a aria-hidden="true" class="anchor-heading" href="#listmedicalvocabularies"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListMedicalVocabularies</h3>
<ul>
<li>description: Grants permission to return a list of medical vocabularies that match the specified criteria. If no criteria are specified, returns the entire list of vocabularies.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtranscriptionjobs"><a aria-hidden="true" class="anchor-heading" href="#listtranscriptionjobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTranscriptionJobs</h3>
<ul>
<li>description: Grants permission to list transcription jobs with the specified status.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listvocabularies"><a aria-hidden="true" class="anchor-heading" href="#listvocabularies"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListVocabularies</h3>
<ul>
<li>description: Grants permission to return a list of vocabularies that match the specified criteria. If no criteria are specified, returns the entire list of vocabularies.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listvocabularyfilters"><a aria-hidden="true" class="anchor-heading" href="#listvocabularyfilters"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListVocabularyFilters</h3>
<ul>
<li>description: Grants permission to return a list of vocabulary filters that match the specified criteria. If no criteria are specified, returns the at most 5 vocabulary filters.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startmedicalstreamtranscription"><a aria-hidden="true" class="anchor-heading" href="#startmedicalstreamtranscription"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartMedicalStreamTranscription</h3>
<ul>
<li>description: Grants permission to start a protocol where audio is streamed to Transcribe Medical and the transcription results are streamed to your application.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startmedicalstreamtranscriptionwebsocket"><a aria-hidden="true" class="anchor-heading" href="#startmedicalstreamtranscriptionwebsocket"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartMedicalStreamTranscriptionWebSocket</h3>
<ul>
<li>description: Grants permission to start a WebSocket where audio is streamed to Transcribe Medical and the transcription results are streamed to your application.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startmedicaltranscriptionjob"><a aria-hidden="true" class="anchor-heading" href="#startmedicaltranscriptionjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartMedicalTranscriptionJob</h3>
<ul>
<li>description: Grants permission to start an asynchronous job to transcribe medical speech to text.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": [
            "s3:GetObject"
        ]
    }
}
</code></pre>
<h3 id="startstreamtranscription"><a aria-hidden="true" class="anchor-heading" href="#startstreamtranscription"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartStreamTranscription</h3>
<ul>
<li>description: Grants permission to start a bidirectional HTTP2 stream to transcribe speech to text in real time.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startstreamtranscriptionwebsocket"><a aria-hidden="true" class="anchor-heading" href="#startstreamtranscriptionwebsocket"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartStreamTranscriptionWebSocket</h3>
<ul>
<li>description: Grants permission to start a websocket stream to transcribe speech to text in real time.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="starttranscriptionjob"><a aria-hidden="true" class="anchor-heading" href="#starttranscriptionjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartTranscriptionJob</h3>
<ul>
<li>description: Grants permission to start an asynchronous job to transcribe speech to text.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "transcribe:OutputBucketName",
            "transcribe:OutputEncryptionKMSKeyId"
        ],
        "dependent_actions": [
            "s3:GetObject"
        ]
    }
}
</code></pre>
<h3 id="updatemedicalvocabulary"><a aria-hidden="true" class="anchor-heading" href="#updatemedicalvocabulary"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateMedicalVocabulary</h3>
<ul>
<li>description: Grants permission to update an existing medical vocabulary with new values. The UpdateMedicalVocabulary operation overwrites all of the existing information with the values that you provide in the request.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": [
            "s3:GetObject"
        ]
    }
}
</code></pre>
<h3 id="updatevocabulary"><a aria-hidden="true" class="anchor-heading" href="#updatevocabulary"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateVocabulary</h3>
<ul>
<li>description: Grants permission to update an existing vocabulary with new values. The UpdateVocabulary operation overwrites all of the existing information with the values that you provide in the request.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": [
            "s3:GetObject"
        ]
    }
}
</code></pre>
<h3 id="updatevocabularyfilter"><a aria-hidden="true" class="anchor-heading" href="#updatevocabularyfilter"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateVocabularyFilter</h3>
<ul>
<li>description: Grants permission to update an existing vocabulary filter with new values. The UpdateVocabularyFilter operation overwrites all of the existing information with the values that you provide in the request.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": [
            "s3:GetObject"
        ]
    }
}
</code></pre><span id="navId" data="iam-Transcribe"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Cognito User Pools.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Cognito User Pools - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Cognito User Pools.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Cognito User Pools.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Cognito User Pools.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Cognito User Pools - undefined" />
  <meta name="twitter:title" content="Cognito User Pools - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Cognito User Pools</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Cognito User Pools">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="cognito-user-pools"><a aria-hidden="true" class="anchor-heading" href="#cognito-user-pools"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Cognito User Pools</h1>
<ul>
<li>prefix: cognito-idp</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="addcustomattributes"><a aria-hidden="true" class="anchor-heading" href="#addcustomattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddCustomAttributes</h3>
<ul>
<li>description: Adds additional user attributes to the user pool schema.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="adminaddusertogroup"><a aria-hidden="true" class="anchor-heading" href="#adminaddusertogroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AdminAddUserToGroup</h3>
<ul>
<li>description: Adds the specified user to the specified group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="adminconfirmsignup"><a aria-hidden="true" class="anchor-heading" href="#adminconfirmsignup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AdminConfirmSignUp</h3>
<ul>
<li>description: Confirms user registration as an admin without using a confirmation code. Works on any user.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="admincreateuser"><a aria-hidden="true" class="anchor-heading" href="#admincreateuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AdminCreateUser</h3>
<ul>
<li>description: Creates a new user in the specified user pool and sends a welcome message via email or phone (SMS).</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="admindeleteuser"><a aria-hidden="true" class="anchor-heading" href="#admindeleteuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AdminDeleteUser</h3>
<ul>
<li>description: Deletes a user as an administrator. Works on any user.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="admindeleteuserattributes"><a aria-hidden="true" class="anchor-heading" href="#admindeleteuserattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AdminDeleteUserAttributes</h3>
<ul>
<li>description: Deletes the user attributes in a user pool as an administrator. Works on any user.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="admindisableproviderforuser"><a aria-hidden="true" class="anchor-heading" href="#admindisableproviderforuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AdminDisableProviderForUser</h3>
<ul>
<li>description: Disables the user from signing in with the specified external (SAML or social) identity provider.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="admindisableuser"><a aria-hidden="true" class="anchor-heading" href="#admindisableuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AdminDisableUser</h3>
<ul>
<li>description: Disables the specified user as an administrator. Works on any user.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="adminenableuser"><a aria-hidden="true" class="anchor-heading" href="#adminenableuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AdminEnableUser</h3>
<ul>
<li>description: Enables the specified user as an administrator. Works on any user.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="adminforgetdevice"><a aria-hidden="true" class="anchor-heading" href="#adminforgetdevice"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AdminForgetDevice</h3>
<ul>
<li>description: Forgets the device, as an administrator.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="admingetdevice"><a aria-hidden="true" class="anchor-heading" href="#admingetdevice"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AdminGetDevice</h3>
<ul>
<li>description: Gets the device, as an administrator.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="admingetuser"><a aria-hidden="true" class="anchor-heading" href="#admingetuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AdminGetUser</h3>
<ul>
<li>description: Gets the specified user by user name in a user pool as an administrator. Works on any user.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="admininitiateauth"><a aria-hidden="true" class="anchor-heading" href="#admininitiateauth"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AdminInitiateAuth</h3>
<ul>
<li>description: Authenticates a user in a user pool as an administrator. Works on any user.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="adminlinkproviderforuser"><a aria-hidden="true" class="anchor-heading" href="#adminlinkproviderforuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AdminLinkProviderForUser</h3>
<ul>
<li>description: Links an existing user account in a user pool (DestinationUser) to an identity from an external identity provider (SourceUser) based on a specified attribute name and value from the external identity provider.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="adminlistdevices"><a aria-hidden="true" class="anchor-heading" href="#adminlistdevices"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AdminListDevices</h3>
<ul>
<li>description: Lists devices, as an administrator.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="adminlistgroupsforuser"><a aria-hidden="true" class="anchor-heading" href="#adminlistgroupsforuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AdminListGroupsForUser</h3>
<ul>
<li>description: Lists the groups that the user belongs to.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="adminlistuserauthevents"><a aria-hidden="true" class="anchor-heading" href="#adminlistuserauthevents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AdminListUserAuthEvents</h3>
<ul>
<li>description: Lists the authentication events for the user.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="adminremoveuserfromgroup"><a aria-hidden="true" class="anchor-heading" href="#adminremoveuserfromgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AdminRemoveUserFromGroup</h3>
<ul>
<li>description: Removes the specified user from the specified group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="adminresetuserpassword"><a aria-hidden="true" class="anchor-heading" href="#adminresetuserpassword"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AdminResetUserPassword</h3>
<ul>
<li>description: Resets the specified user's password in a user pool as an administrator. Works on any user.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="adminrespondtoauthchallenge"><a aria-hidden="true" class="anchor-heading" href="#adminrespondtoauthchallenge"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AdminRespondToAuthChallenge</h3>
<ul>
<li>description: Responds to an authentication challenge, as an administrator.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="adminsetusermfapreference"><a aria-hidden="true" class="anchor-heading" href="#adminsetusermfapreference"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AdminSetUserMFAPreference</h3>
<ul>
<li>description: Sets MFA preference for the user in the userpool</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="adminsetuserpassword"><a aria-hidden="true" class="anchor-heading" href="#adminsetuserpassword"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AdminSetUserPassword</h3>
<ul>
<li>description: Sets the specified user's password in a user pool as an administrator. Works on any user.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="adminsetusersettings"><a aria-hidden="true" class="anchor-heading" href="#adminsetusersettings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AdminSetUserSettings</h3>
<ul>
<li>description: Sets all the user settings for a specified user name. Works on any user.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="adminupdateautheventfeedback"><a aria-hidden="true" class="anchor-heading" href="#adminupdateautheventfeedback"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AdminUpdateAuthEventFeedback</h3>
<ul>
<li>description: Updates the feedback for the user authentication event</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="adminupdatedevicestatus"><a aria-hidden="true" class="anchor-heading" href="#adminupdatedevicestatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AdminUpdateDeviceStatus</h3>
<ul>
<li>description: Updates the device status as an administrator.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="adminupdateuserattributes"><a aria-hidden="true" class="anchor-heading" href="#adminupdateuserattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AdminUpdateUserAttributes</h3>
<ul>
<li>description: Updates the specified user's attributes, including developer attributes, as an administrator.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="adminuserglobalsignout"><a aria-hidden="true" class="anchor-heading" href="#adminuserglobalsignout"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AdminUserGlobalSignOut</h3>
<ul>
<li>description: Signs out users from all devices, as an administrator.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="associatesoftwaretoken"><a aria-hidden="true" class="anchor-heading" href="#associatesoftwaretoken"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateSoftwareToken</h3>
<ul>
<li>description: Returns a unique generated shared secret key code for the user account.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="changepassword"><a aria-hidden="true" class="anchor-heading" href="#changepassword"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ChangePassword</h3>
<ul>
<li>description: Changes the password for a specified user in a user pool.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="confirmdevice"><a aria-hidden="true" class="anchor-heading" href="#confirmdevice"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ConfirmDevice</h3>
<ul>
<li>description: Confirms tracking of the device. This API call is the call that begins device tracking.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="confirmforgotpassword"><a aria-hidden="true" class="anchor-heading" href="#confirmforgotpassword"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ConfirmForgotPassword</h3>
<ul>
<li>description: Allows a user to enter a confirmation code to reset a forgotten password.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="confirmsignup"><a aria-hidden="true" class="anchor-heading" href="#confirmsignup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ConfirmSignUp</h3>
<ul>
<li>description: Confirms registration of a user and handles the existing alias from a previous user.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="creategroup"><a aria-hidden="true" class="anchor-heading" href="#creategroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateGroup</h3>
<ul>
<li>description: Creates a new group in the specified user pool.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createidentityprovider"><a aria-hidden="true" class="anchor-heading" href="#createidentityprovider"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateIdentityProvider</h3>
<ul>
<li>description: Creates an identity provider for a user pool.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createresourceserver"><a aria-hidden="true" class="anchor-heading" href="#createresourceserver"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateResourceServer</h3>
<ul>
<li>description: Creates a new OAuth2.0 resource server and defines custom scopes in it.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createuserimportjob"><a aria-hidden="true" class="anchor-heading" href="#createuserimportjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateUserImportJob</h3>
<ul>
<li>description: Creates the user import job.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createuserpool"><a aria-hidden="true" class="anchor-heading" href="#createuserpool"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateUserPool</h3>
<ul>
<li>description: Creates a new Amazon Cognito user pool and sets the password policy for the pool.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createuserpoolclient"><a aria-hidden="true" class="anchor-heading" href="#createuserpoolclient"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateUserPoolClient</h3>
<ul>
<li>description: Creates the user pool client.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createuserpooldomain"><a aria-hidden="true" class="anchor-heading" href="#createuserpooldomain"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateUserPoolDomain</h3>
<ul>
<li>description: Creates a new domain for a user pool.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletegroup"><a aria-hidden="true" class="anchor-heading" href="#deletegroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteGroup</h3>
<ul>
<li>description: Deletes a group. Currently only groups with no members can be deleted.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteidentityprovider"><a aria-hidden="true" class="anchor-heading" href="#deleteidentityprovider"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteIdentityProvider</h3>
<ul>
<li>description: Deletes an identity provider for a user pool.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteresourceserver"><a aria-hidden="true" class="anchor-heading" href="#deleteresourceserver"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteResourceServer</h3>
<ul>
<li>description: Deletes a resource server.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteuser"><a aria-hidden="true" class="anchor-heading" href="#deleteuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteUser</h3>
<ul>
<li>description: Allows a user to delete one's self.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteuserattributes"><a aria-hidden="true" class="anchor-heading" href="#deleteuserattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteUserAttributes</h3>
<ul>
<li>description: Deletes the attributes for a user.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteuserpool"><a aria-hidden="true" class="anchor-heading" href="#deleteuserpool"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteUserPool</h3>
<ul>
<li>description: Deletes the specified Amazon Cognito user pool.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteuserpoolclient"><a aria-hidden="true" class="anchor-heading" href="#deleteuserpoolclient"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteUserPoolClient</h3>
<ul>
<li>description: Allows the developer to delete the user pool client.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteuserpooldomain"><a aria-hidden="true" class="anchor-heading" href="#deleteuserpooldomain"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteUserPoolDomain</h3>
<ul>
<li>description: Deletes a domain for a user pool.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeidentityprovider"><a aria-hidden="true" class="anchor-heading" href="#describeidentityprovider"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeIdentityProvider</h3>
<ul>
<li>description: Gets information about a specific identity provider.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeresourceserver"><a aria-hidden="true" class="anchor-heading" href="#describeresourceserver"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeResourceServer</h3>
<ul>
<li>description: Describes a resource server.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeriskconfiguration"><a aria-hidden="true" class="anchor-heading" href="#describeriskconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeRiskConfiguration</h3>
<ul>
<li>description: Describes the risk configuration setting for the userpool / userpool client</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeuserimportjob"><a aria-hidden="true" class="anchor-heading" href="#describeuserimportjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeUserImportJob</h3>
<ul>
<li>description: Describes the user import job.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeuserpool"><a aria-hidden="true" class="anchor-heading" href="#describeuserpool"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeUserPool</h3>
<ul>
<li>description: Returns the configuration information and metadata of the specified user pool.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeuserpoolclient"><a aria-hidden="true" class="anchor-heading" href="#describeuserpoolclient"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeUserPoolClient</h3>
<ul>
<li>description: Client method for returning the configuration information and metadata of the specified user pool client.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeuserpooldomain"><a aria-hidden="true" class="anchor-heading" href="#describeuserpooldomain"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeUserPoolDomain</h3>
<ul>
<li>description: Gets information about a domain.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="forgetdevice"><a aria-hidden="true" class="anchor-heading" href="#forgetdevice"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ForgetDevice</h3>
<ul>
<li>description: Forgets the specified device.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="forgotpassword"><a aria-hidden="true" class="anchor-heading" href="#forgotpassword"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ForgotPassword</h3>
<ul>
<li>description: Calling this API causes a message to be sent to the end user with a confirmation code that is required to change the user's password.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcsvheader"><a aria-hidden="true" class="anchor-heading" href="#getcsvheader"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCSVHeader</h3>
<ul>
<li>description: Gets the header information for the .csv file to be used as input for the user import job.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdevice"><a aria-hidden="true" class="anchor-heading" href="#getdevice"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDevice</h3>
<ul>
<li>description: Gets the device.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getgroup"><a aria-hidden="true" class="anchor-heading" href="#getgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetGroup</h3>
<ul>
<li>description: Gets a group.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getidentityproviderbyidentifier"><a aria-hidden="true" class="anchor-heading" href="#getidentityproviderbyidentifier"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetIdentityProviderByIdentifier</h3>
<ul>
<li>description: Gets the specified identity provider.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsigningcertificate"><a aria-hidden="true" class="anchor-heading" href="#getsigningcertificate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSigningCertificate</h3>
<ul>
<li>description: Returns the signing certificate.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getuicustomization"><a aria-hidden="true" class="anchor-heading" href="#getuicustomization"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetUICustomization</h3>
<ul>
<li>description: Gets the UI Customization information for a particular app client's app UI, if there is something set.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getuser"><a aria-hidden="true" class="anchor-heading" href="#getuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetUser</h3>
<ul>
<li>description: Gets the user attributes and metadata for a user.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getuserattributeverificationcode"><a aria-hidden="true" class="anchor-heading" href="#getuserattributeverificationcode"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetUserAttributeVerificationCode</h3>
<ul>
<li>description: Gets the user attribute verification code for the specified attribute name.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getuserpoolmfaconfig"><a aria-hidden="true" class="anchor-heading" href="#getuserpoolmfaconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetUserPoolMfaConfig</h3>
<ul>
<li>description: Gets the MFA configuration for the userpool</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="globalsignout"><a aria-hidden="true" class="anchor-heading" href="#globalsignout"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GlobalSignOut</h3>
<ul>
<li>description: Signs out users from all devices.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="initiateauth"><a aria-hidden="true" class="anchor-heading" href="#initiateauth"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>InitiateAuth</h3>
<ul>
<li>description: Initiates the authentication flow.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdevices"><a aria-hidden="true" class="anchor-heading" href="#listdevices"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDevices</h3>
<ul>
<li>description: Lists the devices.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listgroups"><a aria-hidden="true" class="anchor-heading" href="#listgroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListGroups</h3>
<ul>
<li>description: Lists the groups associated with a user pool.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listidentityproviders"><a aria-hidden="true" class="anchor-heading" href="#listidentityproviders"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListIdentityProviders</h3>
<ul>
<li>description: Lists information about all identity providers for a user pool.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listresourceservers"><a aria-hidden="true" class="anchor-heading" href="#listresourceservers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListResourceServers</h3>
<ul>
<li>description: Lists the resource servers for a user pool.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Lists the tags that are assigned to an Amazon Cognito user pool.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listuserimportjobs"><a aria-hidden="true" class="anchor-heading" href="#listuserimportjobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListUserImportJobs</h3>
<ul>
<li>description: Lists the user import jobs..</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listuserpoolclients"><a aria-hidden="true" class="anchor-heading" href="#listuserpoolclients"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListUserPoolClients</h3>
<ul>
<li>description: Lists the clients that have been created for the specified user pool.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listuserpools"><a aria-hidden="true" class="anchor-heading" href="#listuserpools"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListUserPools</h3>
<ul>
<li>description: Lists the user pools associated with an AWS account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listusers"><a aria-hidden="true" class="anchor-heading" href="#listusers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListUsers</h3>
<ul>
<li>description: Lists the users in the Amazon Cognito user pool.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listusersingroup"><a aria-hidden="true" class="anchor-heading" href="#listusersingroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListUsersInGroup</h3>
<ul>
<li>description: Lists the users in the specified group.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="resendconfirmationcode"><a aria-hidden="true" class="anchor-heading" href="#resendconfirmationcode"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ResendConfirmationCode</h3>
<ul>
<li>description: Resends the confirmation (for confirmation of registration) to a specific user in the user pool.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="respondtoauthchallenge"><a aria-hidden="true" class="anchor-heading" href="#respondtoauthchallenge"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RespondToAuthChallenge</h3>
<ul>
<li>description: Responds to the authentication challenge.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setriskconfiguration"><a aria-hidden="true" class="anchor-heading" href="#setriskconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetRiskConfiguration</h3>
<ul>
<li>description: sets the risk configuration setting for the userpool / userpool client</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setuicustomization"><a aria-hidden="true" class="anchor-heading" href="#setuicustomization"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetUICustomization</h3>
<ul>
<li>description: Sets the UI customization information for a user pool's built-in app UI.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setusermfapreference"><a aria-hidden="true" class="anchor-heading" href="#setusermfapreference"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetUserMFAPreference</h3>
<ul>
<li>description: Sets MFA preference for the user in the userpool</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setuserpoolmfaconfig"><a aria-hidden="true" class="anchor-heading" href="#setuserpoolmfaconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetUserPoolMfaConfig</h3>
<ul>
<li>description: Sets the MFA configuration for the userpool</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setusersettings"><a aria-hidden="true" class="anchor-heading" href="#setusersettings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetUserSettings</h3>
<ul>
<li>description: Sets the user settings like multi-factor authentication (MFA).</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="signup"><a aria-hidden="true" class="anchor-heading" href="#signup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SignUp</h3>
<ul>
<li>description: Registers the user in the specified user pool and creates a user name, password, and user attributes.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startuserimportjob"><a aria-hidden="true" class="anchor-heading" href="#startuserimportjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartUserImportJob</h3>
<ul>
<li>description: Starts the user import.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopuserimportjob"><a aria-hidden="true" class="anchor-heading" href="#stopuserimportjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopUserImportJob</h3>
<ul>
<li>description: Stops the user import job.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Assigns a set of tags to an Amazon Cognito user pool.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Removes the specified tags from an Amazon Cognito user pool.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateautheventfeedback"><a aria-hidden="true" class="anchor-heading" href="#updateautheventfeedback"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateAuthEventFeedback</h3>
<ul>
<li>description: Updates the feedback for the user authentication event</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatedevicestatus"><a aria-hidden="true" class="anchor-heading" href="#updatedevicestatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateDeviceStatus</h3>
<ul>
<li>description: Updates the device status.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updategroup"><a aria-hidden="true" class="anchor-heading" href="#updategroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateGroup</h3>
<ul>
<li>description: Updates the specified group with the specified attributes.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateidentityprovider"><a aria-hidden="true" class="anchor-heading" href="#updateidentityprovider"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateIdentityProvider</h3>
<ul>
<li>description: Updates identity provider information for a user pool.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateresourceserver"><a aria-hidden="true" class="anchor-heading" href="#updateresourceserver"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateResourceServer</h3>
<ul>
<li>description: Updates the name and scopes of resource server.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateuserattributes"><a aria-hidden="true" class="anchor-heading" href="#updateuserattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateUserAttributes</h3>
<ul>
<li>description: Allows a user to update a specific attribute (one at a time).</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateuserpool"><a aria-hidden="true" class="anchor-heading" href="#updateuserpool"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateUserPool</h3>
<ul>
<li>description: Updates the specified user pool with the specified attributes.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateuserpoolclient"><a aria-hidden="true" class="anchor-heading" href="#updateuserpoolclient"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateUserPoolClient</h3>
<ul>
<li>description: Allows the developer to update the specified user pool client and password policy.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateuserpooldomain"><a aria-hidden="true" class="anchor-heading" href="#updateuserpooldomain"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateUserPoolDomain</h3>
<ul>
<li>description: Updates the Secure Sockets Layer (SSL) certificate for the custom domain for your user pool.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "userpool": {
        "resource_type": "userpool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="verifysoftwaretoken"><a aria-hidden="true" class="anchor-heading" href="#verifysoftwaretoken"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>VerifySoftwareToken</h3>
<ul>
<li>description: Registers a user's entered TOTP code and mark the user's software token MFA status as verified if successful.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="verifyuserattribute"><a aria-hidden="true" class="anchor-heading" href="#verifyuserattribute"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>VerifyUserAttribute</h3>
<ul>
<li>description: Verifies a user attribute using a one time verification code.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Cognito User Pools"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-WorkSpaces.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>WorkSpaces - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-WorkSpaces.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-WorkSpaces.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-WorkSpaces.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="WorkSpaces - undefined" />
  <meta name="twitter:title" content="WorkSpaces - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">WorkSpaces</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="WorkSpaces">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="workspaces"><a aria-hidden="true" class="anchor-heading" href="#workspaces"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>WorkSpaces</h1>
<ul>
<li>prefix: workspaces</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="associateipgroups"><a aria-hidden="true" class="anchor-heading" href="#associateipgroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateIpGroups</h3>
<ul>
<li>description: Associates the specified IP access control group with the specified directory.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="authorizeiprules"><a aria-hidden="true" class="anchor-heading" href="#authorizeiprules"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AuthorizeIpRules</h3>
<ul>
<li>description: Adds one or more rules to the specified IP access control group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "workspaceipgroup": {
        "resource_type": "workspaceipgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createipgroup"><a aria-hidden="true" class="anchor-heading" href="#createipgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateIpGroup</h3>
<ul>
<li>description: Creates an IP access control group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtags"><a aria-hidden="true" class="anchor-heading" href="#createtags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTags</h3>
<ul>
<li>description: Creates tags for a WorkSpace.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createworkspaces"><a aria-hidden="true" class="anchor-heading" href="#createworkspaces"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateWorkspaces</h3>
<ul>
<li>description: Creates one or more WorkSpaces.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directoryid": {
        "resource_type": "directoryid",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "workspacebundle": {
        "resource_type": "workspacebundle",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteipgroup"><a aria-hidden="true" class="anchor-heading" href="#deleteipgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteIpGroup</h3>
<ul>
<li>description: Deletes the specified IP access control group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "workspaceipgroup": {
        "resource_type": "workspaceipgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetags"><a aria-hidden="true" class="anchor-heading" href="#deletetags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTags</h3>
<ul>
<li>description: Deletes tags from a Workspace.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteworkspaceimage"><a aria-hidden="true" class="anchor-heading" href="#deleteworkspaceimage"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteWorkspaceImage</h3>
<ul>
<li>description: Deletes the specified workspace image.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeaccount"><a aria-hidden="true" class="anchor-heading" href="#describeaccount"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAccount</h3>
<ul>
<li>description: Retrieves a list that describes the configuration of bring your own license (BYOL) for the specified account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeaccountmodifications"><a aria-hidden="true" class="anchor-heading" href="#describeaccountmodifications"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAccountModifications</h3>
<ul>
<li>description: Retrieves a list that describes modifications to the configuration of bring your own license (BYOL) for the specified account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeclientproperties"><a aria-hidden="true" class="anchor-heading" href="#describeclientproperties"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeClientProperties</h3>
<ul>
<li>description: Describe client properties about the specified resources.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directoryid": {
        "resource_type": "directoryid",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeipgroups"><a aria-hidden="true" class="anchor-heading" href="#describeipgroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeIpGroups</h3>
<ul>
<li>description: Retrieves information about the IP access control groups of your account in the region.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "workspaceipgroup": {
        "resource_type": "workspaceipgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetags"><a aria-hidden="true" class="anchor-heading" href="#describetags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTags</h3>
<ul>
<li>description: Describes tags for a WorkSpace.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeworkspacebundles"><a aria-hidden="true" class="anchor-heading" href="#describeworkspacebundles"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeWorkspaceBundles</h3>
<ul>
<li>description: Obtains information about the WorkSpace bundles that are available to your account in the specified region.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "workspacebundle": {
        "resource_type": "workspacebundle",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeworkspacedirectories"><a aria-hidden="true" class="anchor-heading" href="#describeworkspacedirectories"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeWorkspaceDirectories</h3>
<ul>
<li>description: Retrieves information about the AWS Directory Service directories in the region that are registered with Amazon WorkSpaces and are available to your account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeworkspaceimages"><a aria-hidden="true" class="anchor-heading" href="#describeworkspaceimages"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeWorkspaceImages</h3>
<ul>
<li>description: Retrieves a list that describes one or more specified images.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeworkspaces"><a aria-hidden="true" class="anchor-heading" href="#describeworkspaces"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeWorkspaces</h3>
<ul>
<li>description: Obtains information about the specified WorkSpaces.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeworkspacesconnectionstatus"><a aria-hidden="true" class="anchor-heading" href="#describeworkspacesconnectionstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeWorkspacesConnectionStatus</h3>
<ul>
<li>description: Describes the connection status of a specified WorkSpace.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociateipgroups"><a aria-hidden="true" class="anchor-heading" href="#disassociateipgroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateIpGroups</h3>
<ul>
<li>description: Disassociates the specified IP access control group from the specified directory.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="importworkspaceimage"><a aria-hidden="true" class="anchor-heading" href="#importworkspaceimage"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ImportWorkspaceImage</h3>
<ul>
<li>description: Import a licensed EC2 image to into Amazon WorkSpaces.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listavailablemanagementcidrranges"><a aria-hidden="true" class="anchor-heading" href="#listavailablemanagementcidrranges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAvailableManagementCidrRanges</h3>
<ul>
<li>description: List available CIDR ranges for a CIDR range constraint.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyaccount"><a aria-hidden="true" class="anchor-heading" href="#modifyaccount"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyAccount</h3>
<ul>
<li>description: Modify the configuration of bring your own license (BYOL) for the specified account.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyclientproperties"><a aria-hidden="true" class="anchor-heading" href="#modifyclientproperties"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyClientProperties</h3>
<ul>
<li>description: Modify the client properties of a specified resource.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directoryid": {
        "resource_type": "directoryid",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyworkspaceproperties"><a aria-hidden="true" class="anchor-heading" href="#modifyworkspaceproperties"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyWorkspaceProperties</h3>
<ul>
<li>description: Modifies the WorkSpace properties, including the running mode and AutoStop time.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "workspaceid": {
        "resource_type": "workspaceid",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyworkspacestate"><a aria-hidden="true" class="anchor-heading" href="#modifyworkspacestate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyWorkspaceState</h3>
<ul>
<li>description: Modify the state of specified WorkSpaces.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "workspaceid": {
        "resource_type": "workspaceid",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="rebootworkspaces"><a aria-hidden="true" class="anchor-heading" href="#rebootworkspaces"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RebootWorkspaces</h3>
<ul>
<li>description: Reboots the specified WorkSpaces.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "workspaceid": {
        "resource_type": "workspaceid",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="rebuildworkspaces"><a aria-hidden="true" class="anchor-heading" href="#rebuildworkspaces"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RebuildWorkspaces</h3>
<ul>
<li>description: Rebuilds the specified WorkSpaces.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "workspaceid": {
        "resource_type": "workspaceid",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="revokeiprules"><a aria-hidden="true" class="anchor-heading" href="#revokeiprules"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RevokeIpRules</h3>
<ul>
<li>description: Removes one or more rules from the specified IP access control group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "workspaceipgroup": {
        "resource_type": "workspaceipgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startworkspaces"><a aria-hidden="true" class="anchor-heading" href="#startworkspaces"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartWorkspaces</h3>
<ul>
<li>description: Starts the specified WorkSpaces.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "workspaceid": {
        "resource_type": "workspaceid",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopworkspaces"><a aria-hidden="true" class="anchor-heading" href="#stopworkspaces"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopWorkspaces</h3>
<ul>
<li>description: Stops the specified WorkSpaces.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "workspaceid": {
        "resource_type": "workspaceid",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="terminateworkspaces"><a aria-hidden="true" class="anchor-heading" href="#terminateworkspaces"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TerminateWorkspaces</h3>
<ul>
<li>description: Terminates the specified WorkSpaces.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "workspaceid": {
        "resource_type": "workspaceid",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updaterulesofipgroup"><a aria-hidden="true" class="anchor-heading" href="#updaterulesofipgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateRulesOfIpGroup</h3>
<ul>
<li>description: Replaces the current rules of the specified IP access control group with the specified rules.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "workspaceipgroup": {
        "resource_type": "workspaceipgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-WorkSpaces"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/redshift.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Redshift - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/redshift.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/redshift.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/redshift.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Redshift - undefined" />
  <meta name="twitter:title" content="Redshift - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/1f759d8c-cca7-4fc4-9aa2-6dbf6e596abf.html">Services</a></li><li class="breadcrumb-nav-list-item">Redshift</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/open-guides/og-aws" target="_blank"> og-aws  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Redshift">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="redshift"><a aria-hidden="true" class="anchor-heading" href="#redshift"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Redshift</h1>
<h3 id="redshift-basics"><a aria-hidden="true" class="anchor-heading" href="#redshift-basics"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Redshift Basics</h3>
<ul>
<li>📒 <a href="https://aws.amazon.com/redshift/">Homepage</a> ∙ <a href="http://docs.aws.amazon.com/redshift/latest/dg/">Developer guide</a> ∙ <a href="https://aws.amazon.com/redshift/faqs/">FAQ</a> ∙ <a href="https://aws.amazon.com/redshift/pricing/">Pricing</a></li>
<li><strong>Redshift</strong> is AWS’ managed <a href="https://en.wikipedia.org/wiki/Data_warehouse">data warehouse</a> solution, which is massively parallel, scalable, and columnar. It is very widely used. It <a href="https://en.wikipedia.org/wiki/Amazon_Redshift">was built</a> using <a href="https://en.wikipedia.org/wiki/ParAccel">ParAccel</a> technology and exposes <a href="https://en.wikipedia.org/wiki/PostgreSQL">Postgres</a>-compatible interfaces.</li>
</ul>
<h3 id="redshift-alternatives-and-lock-in"><a aria-hidden="true" class="anchor-heading" href="#redshift-alternatives-and-lock-in"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Redshift Alternatives and Lock-in</h3>
<ul>
<li>⛓🚪Whatever data warehouse you select, your business will likely be locked in for a long time. Also (and not coincidentally) the data warehouse market is highly fragmented. Selecting a data warehouse is a choice to be made carefully, with research and awareness of <a href="https://www.datanami.com/2016/03/14/data-warehouse-market-ripe-disruption-gartner-says/">the market landscape</a> and what <a href="https://en.wikipedia.org/wiki/Business_intelligence">business intelligence</a> tools you’ll be using.</li>
</ul>
<h3 id="redshift-tips"><a aria-hidden="true" class="anchor-heading" href="#redshift-tips"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Redshift Tips</h3>
<ul>
<li>Although Redshift is mostly Postgres-compatible, its SQL dialect and performance profile are different.</li>
<li>Redshift supports only <a href="https://docs.aws.amazon.com/redshift/latest/dg/c_Supported_data_types.html">12 primitive data types</a>. (<a href="https://docs.aws.amazon.com/redshift/latest/dg/c_unsupported-postgresql-datatypes.html">List of unsupported Postgres types</a>)</li>
<li>It has a leader node and computation nodes (the leader node distributes queries to the computation ones). Note that some functions <a href="https://docs.aws.amazon.com/redshift/latest/dg/c_SQL_functions_leader_node_only.html">can be executed only on the lead node.</a></li>
<li>🔹Make sure to create a new <a href="http://docs.aws.amazon.com/redshift/latest/mgmt/working-with-parameter-groups.html">cluster parameter group</a> and option group for your database since the default parameter group does not allow dynamic configuration changes.</li>
<li>Major third-party BI tools support Redshift integration (see <a href="https://www.quora.com/Which-BI-visualisation-solution-goes-best-with-Redshift">Quora</a>).</li>
<li><a href="https://blogs.aws.amazon.com/bigdata/post/Tx31034QG0G3ED1/Top-10-Performance-Tuning-Techniques-for-Amazon-Redshift">Top 10 Performance Tuning Techniques for Amazon Redshift</a> provides an excellent list of performance tuning techniques.</li>
<li><a href="https://github.com/awslabs/amazon-redshift-utils">Amazon Redshift Utils</a> contains useful utilities, scripts and views to simplify Redshift ops.</li>
<li><a href="http://docs.aws.amazon.com/redshift/latest/dg/t_Reclaiming_storage_space202.html">VACUUM</a> regularly following a significant number of deletes or updates to reclaim space and improve query performance.</li>
<li>Avoid performing blanket <a href="http://docs.aws.amazon.com/redshift/latest/dg/r_VACUUM_command.html">VACUUM</a> or <a href="http://docs.aws.amazon.com/redshift/latest/dg/r_ANALYZE.html">ANALYZE</a> operations at a cluster level. The checks on each table to determine whether VACUUM or ANALYZE action needs to be taken is wasteful. Only perform ANALYZE and VACUUM commands on the objects that require it. Utilize the <a href="https://github.com/awslabs/amazon-redshift-utils/tree/master/src/AnalyzeVacuumUtility">Analyze &#x26; Vacuum Schema Utility</a> to perform this work. The SQL to determine whether a table needs to be VACUUMed or ANALYZEd can be found in the <a href="https://github.com/awslabs/amazon-redshift-utils/blob/master/src/AnalyzeVacuumUtility/README.md">Schema Utility README</a> if you wish to create your own maintenance process.</li>
<li>Redshift provides various <a href="http://docs.aws.amazon.com/redshift/latest/dg/t_Compressing_data_on_disk.html">column compression</a> options to optimize the stored data size. AWS strongly encourages users to use <a href="http://docs.aws.amazon.com/redshift/latest/dg/c_Loading_tables_auto_compress.html">automatic compression</a> at the <a href="https://docs.aws.amazon.com/redshift/latest/dg/r_COPY.html">COPY</a> stage, when Redshift uses a sample of the data being ingested to analyze the column compression options. However, automatic compression can only be applied to an empty table with no data. Therefore, make sure the initial load batch is big enough to provide Redshift with a representative sample of the data (the default sample size is 100,000 rows).</li>
<li>Redshift uses columnar storage, hence it does not have indexing capabilities. You can, however, use <a href="http://docs.aws.amazon.com/redshift/latest/dg/c_best-practices-best-dist-key.html">distribution key</a> and <a href="http://docs.aws.amazon.com/redshift/latest/dg/c_best-practices-sort-key.html">sortkey</a> to improve performance. Redshift has two types of sort keys: compounding sort key and interleaved sort key.</li>
<li>A compound sort key is made up of all columns listed in the sort key definition. It is most useful when you have queries with operations using the prefix of the sortkey.</li>
<li>An interleaved sort key on the other hand gives equal weight to each column or a subset of columns in the sort key. So if you don't know ahead of time which column(s) you want to choose for sorting and filtering, this is a much better choice than the compound key. <a href="https://aws.amazon.com/blogs/aws/quickly-filter-data-in-amazon-redshift-using-interleaved-sorting/">Here</a> is an example using interleaved sort key.</li>
<li>🔸⏱ <strong>Distribution strategies:</strong> Since data in Redshift is physically distributed among nodes, choosing the right data <strong>distribution key</strong> and <a href="http://docs.aws.amazon.com/redshift/latest/dg/c_choosing_dist_sort.html">distribution style</a> is crucial for adequate query performance. There are three possible distribution style settings — <strong>EVEN</strong> (the default), <strong>KEY</strong>, or <strong>ALL</strong>. Use KEY to collocate join key columns for tables which are joined in queries. Use ALL to place the data in small-sized tables on all cluster nodes.</li>
</ul>
<h3 id="redshift-gotchas-and-limitations"><a aria-hidden="true" class="anchor-heading" href="#redshift-gotchas-and-limitations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Redshift Gotchas and Limitations</h3>
<ul>
<li>❗⏱While Redshift can handle heavy queries well, it does not scale horizontally, i.e. does not handle multiple queries in parallel. Therefore, if you expect a high parallel load, consider replicating or (if possible) sharding your data across multiple clusters.</li>
<li>🔸 The leader node, which manages communications with client programs and all communication with compute nodes, is the single point of failure.</li>
<li>⏱Although most Redshift queries parallelize well at the compute node level, certain stages are executed on the leader node, which can become the bottleneck.</li>
<li>🔹Redshift data commit transactions are very expensive and serialized at the cluster level. Therefore, consider grouping multiple mutation commands (COPY/INSERT/UPDATE) commands into a single transaction whenever possible.</li>
<li>🔹Redshift does not support multi-AZ deployments. Building multi-AZ clusters is not trivial. <a href="https://blogs.aws.amazon.com/bigdata/post/Tx13ZDHZANSX9UX/Building-Multi-AZ-or-Multi-Region-Amazon-Redshift-Clusters">Here</a> is an example using Kinesis.</li>
<li>🔸Beware of storing multiple small tables in Redshift. The way Redshift tables are laid out on disk makes it impractical. The minimum space required to store a table (in MB) is nodes <em> slices/node </em> columns. For example, on a 16 node cluster an empty table with 20 columns will occupy 640MB on disk.</li>
<li>⏱ Query performance degrades significantly during data ingestion. <a href="http://docs.aws.amazon.com/redshift/latest/dg/c_workload_mngmt_classification.html">WLM (Workload Management)</a> tweaks help to some extent. However, if you need consistent read performance, consider having replica clusters (at the extra cost) and swap them during update.</li>
<li>❗ Never resize a live cluster. The resize operation can take hours depending on the dataset size. In rare cases, the operation may also get stuck and you'll end up having a non-functional cluster. The safer approach is to create a new cluster from a snapshot, resize the new cluster and shut down the old one.</li>
<li>🔸Redshift has <strong>reserved keywords</strong> that are not present in Postgres (see full list <a href="https://docs.aws.amazon.com/redshift/latest/dg/r_pg_keywords.html">here</a>). Watch out for DELTA (<a href="https://docs.aws.amazon.com/redshift/latest/dg/c_Delta_encoding.html">Delta Encodings</a>).</li>
<li>🔸Redshift does not support many Postgres functions, most notably several date/time-related and aggregation functions. See the <a href="https://docs.aws.amazon.com/redshift/latest/dg/c_unsupported-postgresql-functions.html">full list here</a>.</li>
<li>🔸 Uniqueness, primary key, and foreign key constraints on Redshift tables are informational only and are not enforced. They are, however, used by the query optimizer to generate query plans. <code>NOT NULL</code> column constraints are enforced. See <a href="https://docs.aws.amazon.com/redshift/latest/dg/t_Defining_constraints.html">here</a> for more information on defining constraints.</li>
<li>🔸Compression on sort key <a href="https://aws.amazon.com/blogs/big-data/optimizing-for-star-schemas-and-interleaved-sorting-on-amazon-redshift/">can result in significant performance impact</a>. So if your Redshift queries involving sort key(s) are slow, you might want to consider removing compression on a sort key.</li>
<li>🔹 <a href="http://docs.aws.amazon.com/redshift/latest/dg/t_Sorting_data.html">Choosing a sort key</a> is very important since you can not change a table’s sort key after it is created. If you need to change the sort or distribution key of a table, you need to create a new table with the new key and move your data into it with a query like “insert into new_table select * from old_table”.</li>
<li>❗🚪 When moving data with a query that looks like “insert into x select from y”, you need to have twice as much disk space available as table “y” takes up on the cluster’s disks. Redshift first copies the data to disk and then to the new table. <a href="https://www.periscopedata.com/blog/changing-dist-and-sort-keys-in-redshift.html">Here</a> is a good article on how to this for big tables.</li>
</ul><span id="navId" data="redshift"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Route 53.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Route 53 - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Route 53.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Route 53.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Route 53.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Route 53 - undefined" />
  <meta name="twitter:title" content="Route 53 - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Route 53</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Route 53">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="route-53"><a aria-hidden="true" class="anchor-heading" href="#route-53"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Route 53</h1>
<ul>
<li>prefix: route53</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="associatevpcwithhostedzone"><a aria-hidden="true" class="anchor-heading" href="#associatevpcwithhostedzone"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateVPCWithHostedZone</h3>
<ul>
<li>description: Grants permission to associate an additional Amazon VPC with a private hosted zone</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hostedzone": {
        "resource_type": "hostedzone",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="changeresourcerecordsets"><a aria-hidden="true" class="anchor-heading" href="#changeresourcerecordsets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ChangeResourceRecordSets</h3>
<ul>
<li>description: Grants permission to create, update, or delete a record, which contains authoritative DNS information for a specified domain or subdomain name</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hostedzone": {
        "resource_type": "hostedzone",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="changetagsforresource"><a aria-hidden="true" class="anchor-heading" href="#changetagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ChangeTagsForResource</h3>
<ul>
<li>description: Grants permission to add, edit, or delete tags for a health check or a hosted zone</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "healthcheck": {
        "resource_type": "healthcheck",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "hostedzone": {
        "resource_type": "hostedzone",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createhealthcheck"><a aria-hidden="true" class="anchor-heading" href="#createhealthcheck"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateHealthCheck</h3>
<ul>
<li>description: Grants permission to create a new health check, which monitors the health and performance of your web applications, web servers, and other resources</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createhostedzone"><a aria-hidden="true" class="anchor-heading" href="#createhostedzone"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateHostedZone</h3>
<ul>
<li>description: Grants permission to create a public hosted zone, which you use to specify how the Domain Name System (DNS) routes traffic on the Internet for a domain, such as example.com, and its subdomains</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createqueryloggingconfig"><a aria-hidden="true" class="anchor-heading" href="#createqueryloggingconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateQueryLoggingConfig</h3>
<ul>
<li>description: Grants permission to create a configuration for DNS query logging</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hostedzone": {
        "resource_type": "hostedzone",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createreusabledelegationset"><a aria-hidden="true" class="anchor-heading" href="#createreusabledelegationset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateReusableDelegationSet</h3>
<ul>
<li>description: Grants permission to create a delegation set (a group of four name servers) that can be reused by multiple hosted zones</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtrafficpolicy"><a aria-hidden="true" class="anchor-heading" href="#createtrafficpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTrafficPolicy</h3>
<ul>
<li>description: Grants permission to create a traffic policy, which you use to create multiple DNS records for one domain name (such as example.com) or one subdomain name (such as <a href="http://www.example.com">www.example.com</a>)</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtrafficpolicyinstance"><a aria-hidden="true" class="anchor-heading" href="#createtrafficpolicyinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTrafficPolicyInstance</h3>
<ul>
<li>description: Grants permission to create records in a specified hosted zone based on the settings in a specified traffic policy version</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hostedzone": {
        "resource_type": "hostedzone",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "trafficpolicy": {
        "resource_type": "trafficpolicy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtrafficpolicyversion"><a aria-hidden="true" class="anchor-heading" href="#createtrafficpolicyversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTrafficPolicyVersion</h3>
<ul>
<li>description: Grants permission to create a new version of an existing traffic policy</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "trafficpolicy": {
        "resource_type": "trafficpolicy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createvpcassociationauthorization"><a aria-hidden="true" class="anchor-heading" href="#createvpcassociationauthorization"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateVPCAssociationAuthorization</h3>
<ul>
<li>description: Grants permission to authorize the AWS account that created a specified VPC to submit an AssociateVPCWithHostedZone request, which associates the VPC with a specified hosted zone that was created by a different account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hostedzone": {
        "resource_type": "hostedzone",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletehealthcheck"><a aria-hidden="true" class="anchor-heading" href="#deletehealthcheck"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteHealthCheck</h3>
<ul>
<li>description: Grants permission to delete a health check</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "healthcheck": {
        "resource_type": "healthcheck",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletehostedzone"><a aria-hidden="true" class="anchor-heading" href="#deletehostedzone"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteHostedZone</h3>
<ul>
<li>description: Grants permission to delete a hosted zone</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hostedzone": {
        "resource_type": "hostedzone",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletequeryloggingconfig"><a aria-hidden="true" class="anchor-heading" href="#deletequeryloggingconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteQueryLoggingConfig</h3>
<ul>
<li>description: Grants permission to delete a configuration for DNS query logging</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "queryloggingconfig": {
        "resource_type": "queryloggingconfig",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletereusabledelegationset"><a aria-hidden="true" class="anchor-heading" href="#deletereusabledelegationset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteReusableDelegationSet</h3>
<ul>
<li>description: Grants permission to delete a reusable delegation set</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "delegationset": {
        "resource_type": "delegationset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetrafficpolicy"><a aria-hidden="true" class="anchor-heading" href="#deletetrafficpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTrafficPolicy</h3>
<ul>
<li>description: Grants permission to delete a traffic policy</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "trafficpolicy": {
        "resource_type": "trafficpolicy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetrafficpolicyinstance"><a aria-hidden="true" class="anchor-heading" href="#deletetrafficpolicyinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTrafficPolicyInstance</h3>
<ul>
<li>description: Grants permission to delete a traffic policy instance and all the records that Route 53 created when you created the instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "trafficpolicyinstance": {
        "resource_type": "trafficpolicyinstance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletevpcassociationauthorization"><a aria-hidden="true" class="anchor-heading" href="#deletevpcassociationauthorization"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteVPCAssociationAuthorization</h3>
<ul>
<li>description: Grants permission to remove authorization for associating an Amazon Virtual Private Cloud with a Route 53 private hosted zone</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hostedzone": {
        "resource_type": "hostedzone",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociatevpcfromhostedzone"><a aria-hidden="true" class="anchor-heading" href="#disassociatevpcfromhostedzone"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateVPCFromHostedZone</h3>
<ul>
<li>description: Grants permission to disassociate an Amazon Virtual Private Cloud from a Route 53 private hosted zone</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getaccountlimit"><a aria-hidden="true" class="anchor-heading" href="#getaccountlimit"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAccountLimit</h3>
<ul>
<li>description: Grants permission to get the specified limit for the current account, for example, the maximum number of health checks that you can create using the account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getchange"><a aria-hidden="true" class="anchor-heading" href="#getchange"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetChange</h3>
<ul>
<li>description: Grants permission to get the current status of a request to create, update, or delete one or more records</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "change": {
        "resource_type": "change",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcheckeripranges"><a aria-hidden="true" class="anchor-heading" href="#getcheckeripranges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCheckerIpRanges</h3>
<ul>
<li>description: Grants permission to get a list of the IP ranges that are used by Route 53 health checkers to check the health of your resources</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getgeolocation"><a aria-hidden="true" class="anchor-heading" href="#getgeolocation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetGeoLocation</h3>
<ul>
<li>description: Grants permission to get information about whether a specified geographic location is supported for Route 53 geolocation records</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gethealthcheck"><a aria-hidden="true" class="anchor-heading" href="#gethealthcheck"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetHealthCheck</h3>
<ul>
<li>description: Grants permission to get information about a specified health check</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "healthcheck": {
        "resource_type": "healthcheck",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gethealthcheckcount"><a aria-hidden="true" class="anchor-heading" href="#gethealthcheckcount"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetHealthCheckCount</h3>
<ul>
<li>description: Grants permission to get the number of health checks that are associated with the current AWS account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gethealthchecklastfailurereason"><a aria-hidden="true" class="anchor-heading" href="#gethealthchecklastfailurereason"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetHealthCheckLastFailureReason</h3>
<ul>
<li>description: Grants permission to get the reason that a specified health check failed most recently</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "healthcheck": {
        "resource_type": "healthcheck",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gethealthcheckstatus"><a aria-hidden="true" class="anchor-heading" href="#gethealthcheckstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetHealthCheckStatus</h3>
<ul>
<li>description: Grants permission to get the status of a specified health check</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "healthcheck": {
        "resource_type": "healthcheck",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gethostedzone"><a aria-hidden="true" class="anchor-heading" href="#gethostedzone"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetHostedZone</h3>
<ul>
<li>description: Grants permission to get information about a specified hosted zone including the four name servers that Route 53 assigned to the hosted zone</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hostedzone": {
        "resource_type": "hostedzone",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gethostedzonecount"><a aria-hidden="true" class="anchor-heading" href="#gethostedzonecount"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetHostedZoneCount</h3>
<ul>
<li>description: Grants permission to get the number of hosted zones that are associated with the current AWS account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gethostedzonelimit"><a aria-hidden="true" class="anchor-heading" href="#gethostedzonelimit"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetHostedZoneLimit</h3>
<ul>
<li>description: Grants permission to get the specified limit for a specified hosted zone</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hostedzone": {
        "resource_type": "hostedzone",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getqueryloggingconfig"><a aria-hidden="true" class="anchor-heading" href="#getqueryloggingconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetQueryLoggingConfig</h3>
<ul>
<li>description: Grants permission to get information about a specified configuration for DNS query logging</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "queryloggingconfig": {
        "resource_type": "queryloggingconfig",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getreusabledelegationset"><a aria-hidden="true" class="anchor-heading" href="#getreusabledelegationset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetReusableDelegationSet</h3>
<ul>
<li>description: Grants permission to get information about a specified reusable delegation set, including the four name servers that are assigned to the delegation set</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "delegationset": {
        "resource_type": "delegationset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getreusabledelegationsetlimit"><a aria-hidden="true" class="anchor-heading" href="#getreusabledelegationsetlimit"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetReusableDelegationSetLimit</h3>
<ul>
<li>description: Grants permission to get the maximum number of hosted zones that you can associate with the specified reusable delegation set</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "delegationset": {
        "resource_type": "delegationset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gettrafficpolicy"><a aria-hidden="true" class="anchor-heading" href="#gettrafficpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetTrafficPolicy</h3>
<ul>
<li>description: Grants permission to get information about a specified traffic policy version</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "trafficpolicy": {
        "resource_type": "trafficpolicy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gettrafficpolicyinstance"><a aria-hidden="true" class="anchor-heading" href="#gettrafficpolicyinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetTrafficPolicyInstance</h3>
<ul>
<li>description: Grants permission to get information about a specified traffic policy instance</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "trafficpolicyinstance": {
        "resource_type": "trafficpolicyinstance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gettrafficpolicyinstancecount"><a aria-hidden="true" class="anchor-heading" href="#gettrafficpolicyinstancecount"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetTrafficPolicyInstanceCount</h3>
<ul>
<li>description: Grants permission to get the number of traffic policy instances that are associated with the current AWS account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listgeolocations"><a aria-hidden="true" class="anchor-heading" href="#listgeolocations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListGeoLocations</h3>
<ul>
<li>description: Grants permission to get a list of geographic locations that Route 53 supports for geolocation</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listhealthchecks"><a aria-hidden="true" class="anchor-heading" href="#listhealthchecks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListHealthChecks</h3>
<ul>
<li>description: Grants permission to get a list of the health checks that are associated with the current AWS account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listhostedzones"><a aria-hidden="true" class="anchor-heading" href="#listhostedzones"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListHostedZones</h3>
<ul>
<li>description: Grants permission to get a list of the public and private hosted zones that are associated with the current AWS account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listhostedzonesbyname"><a aria-hidden="true" class="anchor-heading" href="#listhostedzonesbyname"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListHostedZonesByName</h3>
<ul>
<li>description: Grants permission to get a list of your hosted zones in lexicographic order. Hosted zones are sorted by name with the labels reversed, for example, com.example.www.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listqueryloggingconfigs"><a aria-hidden="true" class="anchor-heading" href="#listqueryloggingconfigs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListQueryLoggingConfigs</h3>
<ul>
<li>description: Grants permission to list the configurations for DNS query logging that are associated with the current AWS account or the configuration that is associated with a specified hosted zone.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hostedzone": {
        "resource_type": "hostedzone",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listresourcerecordsets"><a aria-hidden="true" class="anchor-heading" href="#listresourcerecordsets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListResourceRecordSets</h3>
<ul>
<li>description: Grants permission to list the records in a specified hosted zone</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hostedzone": {
        "resource_type": "hostedzone",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listreusabledelegationsets"><a aria-hidden="true" class="anchor-heading" href="#listreusabledelegationsets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListReusableDelegationSets</h3>
<ul>
<li>description: Grants permission to list the reusable delegation sets that are associated with the current AWS account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Grants permission to list tags for one health check or hosted zone</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "healthcheck": {
        "resource_type": "healthcheck",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "hostedzone": {
        "resource_type": "hostedzone",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresources"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresources"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResources</h3>
<ul>
<li>description: Grants permission to list tags for up to 10 health checks or hosted zones</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "healthcheck": {
        "resource_type": "healthcheck",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "hostedzone": {
        "resource_type": "hostedzone",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtrafficpolicies"><a aria-hidden="true" class="anchor-heading" href="#listtrafficpolicies"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTrafficPolicies</h3>
<ul>
<li>description: Grants permission to get information about the latest version for every traffic policy that is associated with the current AWS account. Policies are listed in the order in which they were created.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtrafficpolicyinstances"><a aria-hidden="true" class="anchor-heading" href="#listtrafficpolicyinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTrafficPolicyInstances</h3>
<ul>
<li>description: Grants permission to get information about the traffic policy instances that you created by using the current AWS account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtrafficpolicyinstancesbyhostedzone"><a aria-hidden="true" class="anchor-heading" href="#listtrafficpolicyinstancesbyhostedzone"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTrafficPolicyInstancesByHostedZone</h3>
<ul>
<li>description: Grants permission to get information about the traffic policy instances that you created in a specified hosted zone</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hostedzone": {
        "resource_type": "hostedzone",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtrafficpolicyinstancesbypolicy"><a aria-hidden="true" class="anchor-heading" href="#listtrafficpolicyinstancesbypolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTrafficPolicyInstancesByPolicy</h3>
<ul>
<li>description: Grants permission to get information about the traffic policy instances that you created using a specified traffic policy version</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "trafficpolicy": {
        "resource_type": "trafficpolicy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtrafficpolicyversions"><a aria-hidden="true" class="anchor-heading" href="#listtrafficpolicyversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTrafficPolicyVersions</h3>
<ul>
<li>description: Grants permission to get information about all the versions for a specified traffic policy</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "trafficpolicy": {
        "resource_type": "trafficpolicy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listvpcassociationauthorizations"><a aria-hidden="true" class="anchor-heading" href="#listvpcassociationauthorizations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListVPCAssociationAuthorizations</h3>
<ul>
<li>description: Grants permission to get a list of the VPCs that were created by other accounts and that can be associated with a specified hosted zone</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hostedzone": {
        "resource_type": "hostedzone",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="testdnsanswer"><a aria-hidden="true" class="anchor-heading" href="#testdnsanswer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TestDNSAnswer</h3>
<ul>
<li>description: Grants permission to get the value that Route 53 returns in response to a DNS query for a specified record name and type</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatehealthcheck"><a aria-hidden="true" class="anchor-heading" href="#updatehealthcheck"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateHealthCheck</h3>
<ul>
<li>description: Grants permission to update an existing health check</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "healthcheck": {
        "resource_type": "healthcheck",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatehostedzonecomment"><a aria-hidden="true" class="anchor-heading" href="#updatehostedzonecomment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateHostedZoneComment</h3>
<ul>
<li>description: Grants permission to update the comment for a specified hosted zone</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hostedzone": {
        "resource_type": "hostedzone",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatetrafficpolicycomment"><a aria-hidden="true" class="anchor-heading" href="#updatetrafficpolicycomment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateTrafficPolicyComment</h3>
<ul>
<li>description: Grants permission to update the comment for a specified traffic policy version</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "trafficpolicy": {
        "resource_type": "trafficpolicy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatetrafficpolicyinstance"><a aria-hidden="true" class="anchor-heading" href="#updatetrafficpolicyinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateTrafficPolicyInstance</h3>
<ul>
<li>description: Grants permission to update the records in a specified hosted zone that were created based on the settings in a specified traffic policy version</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "trafficpolicyinstance": {
        "resource_type": "trafficpolicyinstance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Route 53"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-ElastiCache.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>ElastiCache - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-ElastiCache.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-ElastiCache.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-ElastiCache.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="ElastiCache - undefined" />
  <meta name="twitter:title" content="ElastiCache - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">ElastiCache</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="ElastiCache">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="elasticache"><a aria-hidden="true" class="anchor-heading" href="#elasticache"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ElastiCache</h1>
<ul>
<li>prefix: elasticache</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="addtagstoresource"><a aria-hidden="true" class="anchor-heading" href="#addtagstoresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddTagsToResource</h3>
<ul>
<li>description: The AddTagsToResource action adds up to 10 cost allocation tags to the named resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "snapshot": {
        "resource_type": "snapshot",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="authorizecachesecuritygroupingress"><a aria-hidden="true" class="anchor-heading" href="#authorizecachesecuritygroupingress"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AuthorizeCacheSecurityGroupIngress</h3>
<ul>
<li>description: The AuthorizeCacheSecurityGroupIngress action allows network ingress to a cache security group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "securitygroup": {
        "resource_type": "securitygroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "ec2:AuthorizeSecurityGroupIngress"
        ]
    }
}
</code></pre>
<h3 id="batchapplyupdateaction"><a aria-hidden="true" class="anchor-heading" href="#batchapplyupdateaction"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchApplyUpdateAction</h3>
<ul>
<li>description: Apply the service update.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": false,
        "condition_keys": [],
        "dependent_actions": [
            "ec2:CreateNetworkInterface",
            "ec2:DeleteNetworkInterface",
            "ec2:DescribeNetworkInterfaces",
            "ec2:DescribeSubnets",
            "ec2:DescribeVpcs",
            "s3:GetObject"
        ]
    },
    "replicationgroup": {
        "resource_type": "replicationgroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchstopupdateaction"><a aria-hidden="true" class="anchor-heading" href="#batchstopupdateaction"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchStopUpdateAction</h3>
<ul>
<li>description: Stop the service update.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "replicationgroup": {
        "resource_type": "replicationgroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="completemigration"><a aria-hidden="true" class="anchor-heading" href="#completemigration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CompleteMigration</h3>
<ul>
<li>description: Stop the service update.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "replicationgroup": {
        "resource_type": "replicationgroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="copysnapshot"><a aria-hidden="true" class="anchor-heading" href="#copysnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CopySnapshot</h3>
<ul>
<li>description: The CopySnapshot action makes a copy of an existing snapshot.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "snapshot": {
        "resource_type": "snapshot",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "elasticache:AddTagsToResource",
            "s3:DeleteObject",
            "s3:GetBucketAcl",
            "s3:PutObject"
        ]
    }
}
</code></pre>
<h3 id="createcachecluster"><a aria-hidden="true" class="anchor-heading" href="#createcachecluster"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateCacheCluster</h3>
<ul>
<li>description: The CreateCacheCluster action creates a cache cluster.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "parametergroup": {
        "resource_type": "parametergroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "ec2:CreateNetworkInterface",
            "ec2:DeleteNetworkInterface",
            "ec2:DescribeNetworkInterfaces",
            "ec2:DescribeSubnets",
            "ec2:DescribeVpcs",
            "elasticache:AddTagsToResource",
            "s3:GetObject"
        ]
    },
    "cluster": {
        "resource_type": "cluster",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "replicationgroup": {
        "resource_type": "replicationgroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "securitygroup": {
        "resource_type": "securitygroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "snapshot": {
        "resource_type": "snapshot",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "subnetgroup": {
        "resource_type": "subnetgroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createcacheparametergroup"><a aria-hidden="true" class="anchor-heading" href="#createcacheparametergroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateCacheParameterGroup</h3>
<ul>
<li>description: The CreateCacheParameterGroup action creates a new cache parameter group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "parametergroup": {
        "resource_type": "parametergroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "elasticache:AddTagsToResource"
        ]
    }
}
</code></pre>
<h3 id="createcachesecuritygroup"><a aria-hidden="true" class="anchor-heading" href="#createcachesecuritygroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateCacheSecurityGroup</h3>
<ul>
<li>description: The CreateCacheSecurityGroup action creates a new cache security group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "securitygroup": {
        "resource_type": "securitygroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "elasticache:AddTagsToResource"
        ]
    }
}
</code></pre>
<h3 id="createcachesubnetgroup"><a aria-hidden="true" class="anchor-heading" href="#createcachesubnetgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateCacheSubnetGroup</h3>
<ul>
<li>description: The CreateCacheSubnetGroup action creates a new cache subnet group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "subnetgroup": {
        "resource_type": "subnetgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "elasticache:AddTagsToResource"
        ]
    }
}
</code></pre>
<h3 id="createglobalreplicationgroup"><a aria-hidden="true" class="anchor-heading" href="#createglobalreplicationgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateGlobalReplicationGroup</h3>
<ul>
<li>description: The CreateGlobalReplicationGroup action creates a global datastore.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "globalreplicationgroup": {
        "resource_type": "globalreplicationgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "replicationgroup": {
        "resource_type": "replicationgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createreplicationgroup"><a aria-hidden="true" class="anchor-heading" href="#createreplicationgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateReplicationGroup</h3>
<ul>
<li>description: The CreateReplicationGroup action creates a replication group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "parametergroup": {
        "resource_type": "parametergroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "ec2:CreateNetworkInterface",
            "ec2:DeleteNetworkInterface",
            "ec2:DescribeNetworkInterfaces",
            "ec2:DescribeSubnets",
            "ec2:DescribeVpcs",
            "elasticache:AddTagsToResource",
            "s3:GetObject"
        ]
    },
    "cluster": {
        "resource_type": "cluster",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "globalreplicationgroup": {
        "resource_type": "globalreplicationgroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "replicationgroup": {
        "resource_type": "replicationgroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "securitygroup": {
        "resource_type": "securitygroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "snapshot": {
        "resource_type": "snapshot",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "subnetgroup": {
        "resource_type": "subnetgroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "usergroup": {
        "resource_type": "usergroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createsnapshot"><a aria-hidden="true" class="anchor-heading" href="#createsnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSnapshot</h3>
<ul>
<li>description: The CreateSnapshot action creates a copy of an entire cache cluster at a specific moment in time.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "snapshot": {
        "resource_type": "snapshot",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "elasticache:AddTagsToResource",
            "s3:DeleteObject",
            "s3:GetBucketAcl",
            "s3:PutObject"
        ]
    },
    "cluster": {
        "resource_type": "cluster",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "replicationgroup": {
        "resource_type": "replicationgroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createuser"><a aria-hidden="true" class="anchor-heading" href="#createuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateUser</h3>
<ul>
<li>description: The CreateUser action creates a new user.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createusergroup"><a aria-hidden="true" class="anchor-heading" href="#createusergroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateUserGroup</h3>
<ul>
<li>description: The CreateUserGroup action creates a new user group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "usergroup": {
        "resource_type": "usergroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="decreasenodegroupsinglobalreplicationgroup"><a aria-hidden="true" class="anchor-heading" href="#decreasenodegroupsinglobalreplicationgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DecreaseNodeGroupsInGlobalReplicationGroup</h3>
<ul>
<li>description: The DecreaseNodeGroupsInGlobalReplicationGroup action dec a global datastore.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "globalreplicationgroup": {
        "resource_type": "globalreplicationgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="decreasereplicacount"><a aria-hidden="true" class="anchor-heading" href="#decreasereplicacount"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DecreaseReplicaCount</h3>
<ul>
<li>description: The DecreaseReplicaCount action decreases the number of replicas in a Redis replication group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "replicationgroup": {
        "resource_type": "replicationgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "ec2:CreateNetworkInterface",
            "ec2:DeleteNetworkInterface",
            "ec2:DescribeNetworkInterfaces",
            "ec2:DescribeSubnets",
            "ec2:DescribeVpcs"
        ]
    }
}
</code></pre>
<h3 id="deletecachecluster"><a aria-hidden="true" class="anchor-heading" href="#deletecachecluster"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteCacheCluster</h3>
<ul>
<li>description: The DeleteCacheCluster action deletes a previously provisioned cache cluster.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "ec2:CreateNetworkInterface",
            "ec2:DeleteNetworkInterface",
            "ec2:DescribeNetworkInterfaces",
            "ec2:DescribeSubnets",
            "ec2:DescribeVpcs"
        ]
    },
    "snapshot": {
        "resource_type": "snapshot",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletecacheparametergroup"><a aria-hidden="true" class="anchor-heading" href="#deletecacheparametergroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteCacheParameterGroup</h3>
<ul>
<li>description: The DeleteCacheParameterGroup action deletes the specified cache parameter group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "parametergroup": {
        "resource_type": "parametergroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletecachesecuritygroup"><a aria-hidden="true" class="anchor-heading" href="#deletecachesecuritygroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteCacheSecurityGroup</h3>
<ul>
<li>description: The DeleteCacheSecurityGroup action deletes a cache security group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "securitygroup": {
        "resource_type": "securitygroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletecachesubnetgroup"><a aria-hidden="true" class="anchor-heading" href="#deletecachesubnetgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteCacheSubnetGroup</h3>
<ul>
<li>description: The DeleteCacheSubnetGroup action deletes a cache subnet group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "subnetgroup": {
        "resource_type": "subnetgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "ec2:CreateNetworkInterface",
            "ec2:DeleteNetworkInterface",
            "ec2:DescribeNetworkInterfaces",
            "ec2:DescribeSubnets",
            "ec2:DescribeVpcs"
        ]
    }
}
</code></pre>
<h3 id="deleteglobalreplicationgroup"><a aria-hidden="true" class="anchor-heading" href="#deleteglobalreplicationgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteGlobalReplicationGroup</h3>
<ul>
<li>description: The DeleteGlobalReplicationGroup action deletes a global datastore.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "globalreplicationgroup": {
        "resource_type": "globalreplicationgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletereplicationgroup"><a aria-hidden="true" class="anchor-heading" href="#deletereplicationgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteReplicationGroup</h3>
<ul>
<li>description: The DeleteReplicationGroup action deletes an existing replication group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "replicationgroup": {
        "resource_type": "replicationgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "ec2:CreateNetworkInterface",
            "ec2:DeleteNetworkInterface",
            "ec2:DescribeNetworkInterfaces",
            "ec2:DescribeSubnets",
            "ec2:DescribeVpcs"
        ]
    },
    "snapshot": {
        "resource_type": "snapshot",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletesnapshot"><a aria-hidden="true" class="anchor-heading" href="#deletesnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteSnapshot</h3>
<ul>
<li>description: The DeleteSnapshot action deletes an existing snapshot.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "snapshot": {
        "resource_type": "snapshot",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteuser"><a aria-hidden="true" class="anchor-heading" href="#deleteuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteUser</h3>
<ul>
<li>description: The DeleteUser action deletes an existing user.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteusergroup"><a aria-hidden="true" class="anchor-heading" href="#deleteusergroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteUserGroup</h3>
<ul>
<li>description: The DeleteUserGroup action deletes an existing user group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "usergroup": {
        "resource_type": "usergroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecacheclusters"><a aria-hidden="true" class="anchor-heading" href="#describecacheclusters"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeCacheClusters</h3>
<ul>
<li>description: The DescribeCacheClusters action returns information about all provisioned cache clusters if no cache cluster identifier is specified, or about a specific cache cluster if a cache cluster identifier is supplied.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecacheengineversions"><a aria-hidden="true" class="anchor-heading" href="#describecacheengineversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeCacheEngineVersions</h3>
<ul>
<li>description: The DescribeCacheEngineVersions action returns a list of the available cache engines and their versions.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecacheparametergroups"><a aria-hidden="true" class="anchor-heading" href="#describecacheparametergroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeCacheParameterGroups</h3>
<ul>
<li>description: The DescribeCacheParameterGroups action returns information about parameter groups for this account, or a particular parameter group.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "parametergroup": {
        "resource_type": "parametergroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecacheparameters"><a aria-hidden="true" class="anchor-heading" href="#describecacheparameters"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeCacheParameters</h3>
<ul>
<li>description: The DescribeCacheParameters action returns the detailed parameter list for a particular cache parameter group.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "parametergroup": {
        "resource_type": "parametergroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecachesecuritygroups"><a aria-hidden="true" class="anchor-heading" href="#describecachesecuritygroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeCacheSecurityGroups</h3>
<ul>
<li>description: The DescribeCacheSecurityGroups action returns a list of cache security group descriptions, or the description of the specified security group.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "securitygroup": {
        "resource_type": "securitygroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecachesubnetgroups"><a aria-hidden="true" class="anchor-heading" href="#describecachesubnetgroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeCacheSubnetGroups</h3>
<ul>
<li>description: The DescribeCacheSubnetGroups action returns a list of cache subnet group descriptions, or the description of the specified subnet group.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "subnetgroup": {
        "resource_type": "subnetgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeenginedefaultparameters"><a aria-hidden="true" class="anchor-heading" href="#describeenginedefaultparameters"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEngineDefaultParameters</h3>
<ul>
<li>description: The DescribeEngineDefaultParameters action returns the default engine and system parameter information for the specified cache engine.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeevents"><a aria-hidden="true" class="anchor-heading" href="#describeevents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEvents</h3>
<ul>
<li>description: The DescribeEvents action returns events related to cache clusters, cache security groups, and cache parameter groups.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeglobalreplicationgroups"><a aria-hidden="true" class="anchor-heading" href="#describeglobalreplicationgroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeGlobalReplicationGroups</h3>
<ul>
<li>description: The DescribeGlobalReplicationGroups action returns information about global datastores for this account, or a particular global datastore.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "globalreplicationgroup": {
        "resource_type": "globalreplicationgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describereplicationgroups"><a aria-hidden="true" class="anchor-heading" href="#describereplicationgroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeReplicationGroups</h3>
<ul>
<li>description: The DescribeReplicationGroups action returns information about replication groups for this account, or a particular replication group.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "replicationgroup": {
        "resource_type": "replicationgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describereservedcachenodes"><a aria-hidden="true" class="anchor-heading" href="#describereservedcachenodes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeReservedCacheNodes</h3>
<ul>
<li>description: The DescribeReservedCacheNodes action returns information about reserved cache nodes for this account, or a particular reserved cache node.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "reserved-instance": {
        "resource_type": "reserved-instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describereservedcachenodesofferings"><a aria-hidden="true" class="anchor-heading" href="#describereservedcachenodesofferings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeReservedCacheNodesOfferings</h3>
<ul>
<li>description: The DescribeReservedCacheNodesOfferings action lists available reserved cache node offerings.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeserviceupdates"><a aria-hidden="true" class="anchor-heading" href="#describeserviceupdates"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeServiceUpdates</h3>
<ul>
<li>description: Returns details of the service updates</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describesnapshots"><a aria-hidden="true" class="anchor-heading" href="#describesnapshots"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSnapshots</h3>
<ul>
<li>description: The DescribeSnapshots action returns information about cache cluster snapshots.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "snapshot": {
        "resource_type": "snapshot",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeupdateactions"><a aria-hidden="true" class="anchor-heading" href="#describeupdateactions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeUpdateActions</h3>
<ul>
<li>description: Returns details of the update actions.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "replicationgroup": {
        "resource_type": "replicationgroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeusergroups"><a aria-hidden="true" class="anchor-heading" href="#describeusergroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeUserGroups</h3>
<ul>
<li>description: The DescribeUserGroups action returns information about all user groups for this account, or a particular user group.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "usergroup": {
        "resource_type": "usergroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeusers"><a aria-hidden="true" class="anchor-heading" href="#describeusers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeUsers</h3>
<ul>
<li>description: The DescribeUsers action returns information about all users for this account, or a particular user.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociateglobalreplicationgroup"><a aria-hidden="true" class="anchor-heading" href="#disassociateglobalreplicationgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateGlobalReplicationGroup</h3>
<ul>
<li>description: The DisassociateGlobalReplicationGroup action removes a secondary Replication Group from the Global Datastore.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "globalreplicationgroup": {
        "resource_type": "globalreplicationgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="failoverglobalreplicationgroup"><a aria-hidden="true" class="anchor-heading" href="#failoverglobalreplicationgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>FailoverGlobalReplicationGroup</h3>
<ul>
<li>description: The FailoverGlobalReplicationGroup action removes a secondary Replication Group from the Global Datastore.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "globalreplicationgroup": {
        "resource_type": "globalreplicationgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="increasenodegroupsinglobalreplicationgroup"><a aria-hidden="true" class="anchor-heading" href="#increasenodegroupsinglobalreplicationgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>IncreaseNodeGroupsInGlobalReplicationGroup</h3>
<ul>
<li>description: The IncreaseNodeGroupsInGlobalReplicationGroup action increases the number of node groups in the Global Datastore.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "globalreplicationgroup": {
        "resource_type": "globalreplicationgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="increasereplicacount"><a aria-hidden="true" class="anchor-heading" href="#increasereplicacount"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>IncreaseReplicaCount</h3>
<ul>
<li>description: The IncreaseReplicaCount action increases the number of replicas in a Redis replication group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "replicationgroup": {
        "resource_type": "replicationgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "ec2:CreateNetworkInterface",
            "ec2:DeleteNetworkInterface",
            "ec2:DescribeNetworkInterfaces",
            "ec2:DescribeSubnets",
            "ec2:DescribeVpcs"
        ]
    }
}
</code></pre>
<h3 id="listallowednodetypemodifications"><a aria-hidden="true" class="anchor-heading" href="#listallowednodetypemodifications"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAllowedNodeTypeModifications</h3>
<ul>
<li>description: List Allowed Node Type Modifications</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "replicationgroup": {
        "resource_type": "replicationgroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: The ListTagsForResource action lists all cost allocation tags currently on the named resource.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "snapshot": {
        "resource_type": "snapshot",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifycachecluster"><a aria-hidden="true" class="anchor-heading" href="#modifycachecluster"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyCacheCluster</h3>
<ul>
<li>description: The ModifyCacheCluster action modifies the settings for a cache cluster.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "parametergroup": {
        "resource_type": "parametergroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "securitygroup": {
        "resource_type": "securitygroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifycacheparametergroup"><a aria-hidden="true" class="anchor-heading" href="#modifycacheparametergroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyCacheParameterGroup</h3>
<ul>
<li>description: The ModifyCacheParameterGroup action modifies the parameters of a cache parameter group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "parametergroup": {
        "resource_type": "parametergroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifycachesubnetgroup"><a aria-hidden="true" class="anchor-heading" href="#modifycachesubnetgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyCacheSubnetGroup</h3>
<ul>
<li>description: The ModifyCacheSubnetGroup action modifies an existing cache subnet group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "subnetgroup": {
        "resource_type": "subnetgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyglobalreplicationgroup"><a aria-hidden="true" class="anchor-heading" href="#modifyglobalreplicationgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyGlobalReplicationGroup</h3>
<ul>
<li>description: The ModifyGlobalReplicationGroup action modifies the settings for a Global Datastore.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "globalreplicationgroup": {
        "resource_type": "globalreplicationgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyreplicationgroup"><a aria-hidden="true" class="anchor-heading" href="#modifyreplicationgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyReplicationGroup</h3>
<ul>
<li>description: The ModifyReplicationGroup action modifies the settings for a replication group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "replicationgroup": {
        "resource_type": "replicationgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "ec2:CreateNetworkInterface",
            "ec2:DeleteNetworkInterface",
            "ec2:DescribeNetworkInterfaces",
            "ec2:DescribeSubnets",
            "ec2:DescribeVpcs"
        ]
    },
    "parametergroup": {
        "resource_type": "parametergroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "securitygroup": {
        "resource_type": "securitygroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "usergroup": {
        "resource_type": "usergroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyreplicationgroupshardconfiguration"><a aria-hidden="true" class="anchor-heading" href="#modifyreplicationgroupshardconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyReplicationGroupShardConfiguration</h3>
<ul>
<li>description: The ModifyReplicationGroupShardConfiguration action allows you to add shards, remove shards, or rebalance the keyspaces among exisiting shards.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "replicationgroup": {
        "resource_type": "replicationgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "ec2:CreateNetworkInterface",
            "ec2:DeleteNetworkInterface",
            "ec2:DescribeNetworkInterfaces",
            "ec2:DescribeSubnets",
            "ec2:DescribeVpcs"
        ]
    }
}
</code></pre>
<h3 id="modifyuser"><a aria-hidden="true" class="anchor-heading" href="#modifyuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyUser</h3>
<ul>
<li>description: The ModifyUser action modifies an existing user.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyusergroup"><a aria-hidden="true" class="anchor-heading" href="#modifyusergroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyUserGroup</h3>
<ul>
<li>description: The ModifyUserGroup action modifies an existing user group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "usergroup": {
        "resource_type": "usergroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="purchasereservedcachenodesoffering"><a aria-hidden="true" class="anchor-heading" href="#purchasereservedcachenodesoffering"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PurchaseReservedCacheNodesOffering</h3>
<ul>
<li>description: The PurchaseReservedCacheNodesOffering action allows you to purchase a reserved cache node offering.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "reserved-instance": {
        "resource_type": "reserved-instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "elasticache:AddTagsToResource"
        ]
    }
}
</code></pre>
<h3 id="rebalanceslotsinglobalreplicationgroup"><a aria-hidden="true" class="anchor-heading" href="#rebalanceslotsinglobalreplicationgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RebalanceSlotsInGlobalReplicationGroup</h3>
<ul>
<li>description: The RebalanceSlotsInGlobalReplicationGroup action redistributes slots to ensure uniform distribution across existing shards in the cluster.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "globalreplicationgroup": {
        "resource_type": "globalreplicationgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="rebootcachecluster"><a aria-hidden="true" class="anchor-heading" href="#rebootcachecluster"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RebootCacheCluster</h3>
<ul>
<li>description: The RebootCacheCluster action reboots some, or all, of the cache nodes within a provisioned cache cluster.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="removetagsfromresource"><a aria-hidden="true" class="anchor-heading" href="#removetagsfromresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemoveTagsFromResource</h3>
<ul>
<li>description: The RemoveTagsFromResource action removes the tags identified by the TagKeys list from the named resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "snapshot": {
        "resource_type": "snapshot",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="resetcacheparametergroup"><a aria-hidden="true" class="anchor-heading" href="#resetcacheparametergroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ResetCacheParameterGroup</h3>
<ul>
<li>description: The ResetCacheParameterGroup action modifies the parameters of a cache parameter group to the engine or system default value.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "parametergroup": {
        "resource_type": "parametergroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="revokecachesecuritygroupingress"><a aria-hidden="true" class="anchor-heading" href="#revokecachesecuritygroupingress"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RevokeCacheSecurityGroupIngress</h3>
<ul>
<li>description: The RevokeCacheSecurityGroupIngress action revokes ingress from a cache security group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "securitygroup": {
        "resource_type": "securitygroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startmigration"><a aria-hidden="true" class="anchor-heading" href="#startmigration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartMigration</h3>
<ul>
<li>description: Start the migration of data.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "replicationgroup": {
        "resource_type": "replicationgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="testfailover"><a aria-hidden="true" class="anchor-heading" href="#testfailover"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TestFailover</h3>
<ul>
<li>description: The TestFailover action allows you to test automatic failover on a specified node group in a replication group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "replicationgroup": {
        "resource_type": "replicationgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "ec2:CreateNetworkInterface",
            "ec2:DeleteNetworkInterface",
            "ec2:DescribeNetworkInterfaces",
            "ec2:DescribeSubnets",
            "ec2:DescribeVpcs"
        ]
    }
}
</code></pre><span id="navId" data="iam-ElastiCache"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Identity And Access Management.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Identity And Access Management - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Identity And Access Management.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Identity And Access Management.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Identity And Access Management.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Identity And Access Management - undefined" />
  <meta name="twitter:title" content="Identity And Access Management - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Identity And Access Management</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Identity And Access Management">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="identity-and-access-management"><a aria-hidden="true" class="anchor-heading" href="#identity-and-access-management"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Identity And Access Management</h1>
<ul>
<li>prefix: iam</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="addclientidtoopenidconnectprovider"><a aria-hidden="true" class="anchor-heading" href="#addclientidtoopenidconnectprovider"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddClientIDToOpenIDConnectProvider</h3>
<ul>
<li>description: Grants permission to add a new client ID (audience) to the list of registered IDs for the specified IAM OpenID Connect (OIDC) provider resource</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "oidc-provider": {
        "resource_type": "oidc-provider",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="addroletoinstanceprofile"><a aria-hidden="true" class="anchor-heading" href="#addroletoinstanceprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddRoleToInstanceProfile</h3>
<ul>
<li>description: Grants permission to add an IAM role to the specified instance profile</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance-profile": {
        "resource_type": "instance-profile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    }
}
</code></pre>
<h3 id="addusertogroup"><a aria-hidden="true" class="anchor-heading" href="#addusertogroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddUserToGroup</h3>
<ul>
<li>description: Grants permission to add an IAM user to the specified IAM group</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "group": {
        "resource_type": "group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="attachgrouppolicy"><a aria-hidden="true" class="anchor-heading" href="#attachgrouppolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AttachGroupPolicy</h3>
<ul>
<li>description: Grants permission to attach a managed policy to the specified IAM group</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "group": {
        "resource_type": "group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "iam:PolicyARN"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="attachrolepolicy"><a aria-hidden="true" class="anchor-heading" href="#attachrolepolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AttachRolePolicy</h3>
<ul>
<li>description: Grants permission to attach a managed policy to the specified IAM role</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "role": {
        "resource_type": "role",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "iam:PolicyARN",
            "iam:PermissionsBoundary"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="attachuserpolicy"><a aria-hidden="true" class="anchor-heading" href="#attachuserpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AttachUserPolicy</h3>
<ul>
<li>description: Grants permission to attach a managed policy to the specified IAM user</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "iam:PolicyARN",
            "iam:PermissionsBoundary"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="changepassword"><a aria-hidden="true" class="anchor-heading" href="#changepassword"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ChangePassword</h3>
<ul>
<li>description: Grants permission for an IAM user to to change their own password</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createaccesskey"><a aria-hidden="true" class="anchor-heading" href="#createaccesskey"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateAccessKey</h3>
<ul>
<li>description: Grants permission to create access key and secret access key for the specified IAM user</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createaccountalias"><a aria-hidden="true" class="anchor-heading" href="#createaccountalias"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateAccountAlias</h3>
<ul>
<li>description: Grants permission to create an alias for your AWS account</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="creategroup"><a aria-hidden="true" class="anchor-heading" href="#creategroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateGroup</h3>
<ul>
<li>description: Grants permission to create a new group</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "group": {
        "resource_type": "group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createinstanceprofile"><a aria-hidden="true" class="anchor-heading" href="#createinstanceprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateInstanceProfile</h3>
<ul>
<li>description: Grants permission to create a new instance profile</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance-profile": {
        "resource_type": "instance-profile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createloginprofile"><a aria-hidden="true" class="anchor-heading" href="#createloginprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateLoginProfile</h3>
<ul>
<li>description: Grants permission to create a password for the specified IAM user</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createopenidconnectprovider"><a aria-hidden="true" class="anchor-heading" href="#createopenidconnectprovider"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateOpenIDConnectProvider</h3>
<ul>
<li>description: Grants permission to create an IAM resource that describes an identity provider (IdP) that supports OpenID Connect (OIDC)</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "oidc-provider": {
        "resource_type": "oidc-provider",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createpolicy"><a aria-hidden="true" class="anchor-heading" href="#createpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreatePolicy</h3>
<ul>
<li>description: Grants permission to create a new managed policy</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "policy": {
        "resource_type": "policy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createpolicyversion"><a aria-hidden="true" class="anchor-heading" href="#createpolicyversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreatePolicyVersion</h3>
<ul>
<li>description: Grants permission to create a new version of the specified managed policy</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "policy": {
        "resource_type": "policy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createrole"><a aria-hidden="true" class="anchor-heading" href="#createrole"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateRole</h3>
<ul>
<li>description: Grants permission to create a new role</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "role": {
        "resource_type": "role",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "iam:PermissionsBoundary"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createsamlprovider"><a aria-hidden="true" class="anchor-heading" href="#createsamlprovider"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSAMLProvider</h3>
<ul>
<li>description: Grants permission to create an IAM resource that describes an identity provider (IdP) that supports SAML 2.0</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "saml-provider": {
        "resource_type": "saml-provider",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createservicelinkedrole"><a aria-hidden="true" class="anchor-heading" href="#createservicelinkedrole"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateServiceLinkedRole</h3>
<ul>
<li>description: Grants permission to create an IAM role that allows an AWS service to perform actions on your behalf</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "role": {
        "resource_type": "role",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "iam:AWSServiceName"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createservicespecificcredential"><a aria-hidden="true" class="anchor-heading" href="#createservicespecificcredential"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateServiceSpecificCredential</h3>
<ul>
<li>description: Grants permission to create a new service-specific credential for an IAM user</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createuser"><a aria-hidden="true" class="anchor-heading" href="#createuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateUser</h3>
<ul>
<li>description: Grants permission to create a new IAM user</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "iam:PermissionsBoundary"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createvirtualmfadevice"><a aria-hidden="true" class="anchor-heading" href="#createvirtualmfadevice"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateVirtualMFADevice</h3>
<ul>
<li>description: Grants permission to create a new virtual MFA device</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "mfa": {
        "resource_type": "mfa",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deactivatemfadevice"><a aria-hidden="true" class="anchor-heading" href="#deactivatemfadevice"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeactivateMFADevice</h3>
<ul>
<li>description: Grants permission to deactivate the specified MFA device and remove its association with the IAM user for which it was originally enabled</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteaccesskey"><a aria-hidden="true" class="anchor-heading" href="#deleteaccesskey"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAccessKey</h3>
<ul>
<li>description: Grants permission to delete the access key pair that is associated with the specified IAM user</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteaccountalias"><a aria-hidden="true" class="anchor-heading" href="#deleteaccountalias"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAccountAlias</h3>
<ul>
<li>description: Grants permission to delete the specified AWS account alias</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteaccountpasswordpolicy"><a aria-hidden="true" class="anchor-heading" href="#deleteaccountpasswordpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAccountPasswordPolicy</h3>
<ul>
<li>description: Grants permission to delete the password policy for the AWS account</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletegroup"><a aria-hidden="true" class="anchor-heading" href="#deletegroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteGroup</h3>
<ul>
<li>description: Grants permission to delete the specified IAM group</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "group": {
        "resource_type": "group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletegrouppolicy"><a aria-hidden="true" class="anchor-heading" href="#deletegrouppolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteGroupPolicy</h3>
<ul>
<li>description: Grants permission to delete the specified inline policy from its group</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "group": {
        "resource_type": "group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteinstanceprofile"><a aria-hidden="true" class="anchor-heading" href="#deleteinstanceprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteInstanceProfile</h3>
<ul>
<li>description: Grants permission to delete the specified instance profile</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance-profile": {
        "resource_type": "instance-profile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteloginprofile"><a aria-hidden="true" class="anchor-heading" href="#deleteloginprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteLoginProfile</h3>
<ul>
<li>description: Grants permission to delete the password for the specified IAM user</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteopenidconnectprovider"><a aria-hidden="true" class="anchor-heading" href="#deleteopenidconnectprovider"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteOpenIDConnectProvider</h3>
<ul>
<li>description: Grants permission to delete an OpenID Connect identity provider (IdP) resource object in IAM</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "oidc-provider": {
        "resource_type": "oidc-provider",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletepolicy"><a aria-hidden="true" class="anchor-heading" href="#deletepolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeletePolicy</h3>
<ul>
<li>description: Grants permission to delete the specified managed policy and remove it from any IAM entities (users, groups, or roles) to which it is attached</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "policy": {
        "resource_type": "policy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletepolicyversion"><a aria-hidden="true" class="anchor-heading" href="#deletepolicyversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeletePolicyVersion</h3>
<ul>
<li>description: Grants permission to delete a version from the specified managed policy</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "policy": {
        "resource_type": "policy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleterole"><a aria-hidden="true" class="anchor-heading" href="#deleterole"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteRole</h3>
<ul>
<li>description: Grants permission to delete the specified role</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "role": {
        "resource_type": "role",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleterolepermissionsboundary"><a aria-hidden="true" class="anchor-heading" href="#deleterolepermissionsboundary"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteRolePermissionsBoundary</h3>
<ul>
<li>description: Grants permission to remove the permissions boundary from a role</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "role": {
        "resource_type": "role",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "iam:PermissionsBoundary"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleterolepolicy"><a aria-hidden="true" class="anchor-heading" href="#deleterolepolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteRolePolicy</h3>
<ul>
<li>description: Grants permission to delete the specified inline policy from the specified role</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "role": {
        "resource_type": "role",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "iam:PermissionsBoundary"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletesamlprovider"><a aria-hidden="true" class="anchor-heading" href="#deletesamlprovider"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteSAMLProvider</h3>
<ul>
<li>description: Grants permission to delete a SAML provider resource in IAM</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "saml-provider": {
        "resource_type": "saml-provider",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletesshpublickey"><a aria-hidden="true" class="anchor-heading" href="#deletesshpublickey"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteSSHPublicKey</h3>
<ul>
<li>description: Grants permission to delete the specified SSH public key</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteservercertificate"><a aria-hidden="true" class="anchor-heading" href="#deleteservercertificate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteServerCertificate</h3>
<ul>
<li>description: Grants permission to delete the specified server certificate</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "server-certificate": {
        "resource_type": "server-certificate",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteservicelinkedrole"><a aria-hidden="true" class="anchor-heading" href="#deleteservicelinkedrole"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteServiceLinkedRole</h3>
<ul>
<li>description: Grants permission to delete an IAM role that is linked to a specific AWS service, if the service is no longer using it</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "role": {
        "resource_type": "role",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteservicespecificcredential"><a aria-hidden="true" class="anchor-heading" href="#deleteservicespecificcredential"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteServiceSpecificCredential</h3>
<ul>
<li>description: Grants permission to delete the specified service-specific credential for an IAM user</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletesigningcertificate"><a aria-hidden="true" class="anchor-heading" href="#deletesigningcertificate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteSigningCertificate</h3>
<ul>
<li>description: Grants permission to delete a signing certificate that is associated with the specified IAM user</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteuser"><a aria-hidden="true" class="anchor-heading" href="#deleteuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteUser</h3>
<ul>
<li>description: Grants permission to delete the specified IAM user</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteuserpermissionsboundary"><a aria-hidden="true" class="anchor-heading" href="#deleteuserpermissionsboundary"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteUserPermissionsBoundary</h3>
<ul>
<li>description: Grants permission to remove the permissions boundary from the specified IAM user</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "iam:PermissionsBoundary"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteuserpolicy"><a aria-hidden="true" class="anchor-heading" href="#deleteuserpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteUserPolicy</h3>
<ul>
<li>description: Grants permission to delete the specified inline policy from an IAM user</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "iam:PermissionsBoundary"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletevirtualmfadevice"><a aria-hidden="true" class="anchor-heading" href="#deletevirtualmfadevice"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteVirtualMFADevice</h3>
<ul>
<li>description: Grants permission to delete a virtual MFA device</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "mfa": {
        "resource_type": "mfa",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "sms-mfa": {
        "resource_type": "sms-mfa",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="detachgrouppolicy"><a aria-hidden="true" class="anchor-heading" href="#detachgrouppolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DetachGroupPolicy</h3>
<ul>
<li>description: Grants permission to detach a managed policy from the specified IAM group</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "group": {
        "resource_type": "group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "iam:PolicyARN"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="detachrolepolicy"><a aria-hidden="true" class="anchor-heading" href="#detachrolepolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DetachRolePolicy</h3>
<ul>
<li>description: Grants permission to detach a managed policy from the specified role</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "role": {
        "resource_type": "role",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "iam:PolicyARN",
            "iam:PermissionsBoundary"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="detachuserpolicy"><a aria-hidden="true" class="anchor-heading" href="#detachuserpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DetachUserPolicy</h3>
<ul>
<li>description: Grants permission to detach a managed policy from the specified IAM user</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "iam:PolicyARN",
            "iam:PermissionsBoundary"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="enablemfadevice"><a aria-hidden="true" class="anchor-heading" href="#enablemfadevice"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EnableMFADevice</h3>
<ul>
<li>description: Grants permission to enable an MFA device and associate it with the specified IAM user</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="generatecredentialreport"><a aria-hidden="true" class="anchor-heading" href="#generatecredentialreport"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GenerateCredentialReport</h3>
<ul>
<li>description: Grants permission to generate a credential report for the AWS account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="generateorganizationsaccessreport"><a aria-hidden="true" class="anchor-heading" href="#generateorganizationsaccessreport"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GenerateOrganizationsAccessReport</h3>
<ul>
<li>description: Grants permission to generate an access report for an AWS Organizations entity</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "access-report": {
        "resource_type": "access-report",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "organizations:DescribePolicy",
            "organizations:ListChildren",
            "organizations:ListParents",
            "organizations:ListPoliciesForTarget",
            "organizations:ListRoots",
            "organizations:ListTargetsForPolicy"
        ]
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "iam:OrganizationsPolicyId"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="generateservicelastaccesseddetails"><a aria-hidden="true" class="anchor-heading" href="#generateservicelastaccesseddetails"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GenerateServiceLastAccessedDetails</h3>
<ul>
<li>description: Grants permission to generate a service last accessed data report for an IAM resource</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getaccesskeylastused"><a aria-hidden="true" class="anchor-heading" href="#getaccesskeylastused"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAccessKeyLastUsed</h3>
<ul>
<li>description: Grants permission to retrieve information about when the specified access key was last used</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getaccountauthorizationdetails"><a aria-hidden="true" class="anchor-heading" href="#getaccountauthorizationdetails"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAccountAuthorizationDetails</h3>
<ul>
<li>description: Grants permission to retrieve information about all IAM users, groups, roles, and policies in your AWS account, including their relationships to one another</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getaccountpasswordpolicy"><a aria-hidden="true" class="anchor-heading" href="#getaccountpasswordpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAccountPasswordPolicy</h3>
<ul>
<li>description: Grants permission to retrieve the password policy for the AWS account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getaccountsummary"><a aria-hidden="true" class="anchor-heading" href="#getaccountsummary"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAccountSummary</h3>
<ul>
<li>description: Grants permission to retrieve information about IAM entity usage and IAM quotas in the AWS account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcontextkeysforcustompolicy"><a aria-hidden="true" class="anchor-heading" href="#getcontextkeysforcustompolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetContextKeysForCustomPolicy</h3>
<ul>
<li>description: Grants permission to retrieve a list of all of the context keys that are referenced in the specified policy</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcontextkeysforprincipalpolicy"><a aria-hidden="true" class="anchor-heading" href="#getcontextkeysforprincipalpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetContextKeysForPrincipalPolicy</h3>
<ul>
<li>description: Grants permission to retrieve a list of all context keys that are referenced in all IAM policies that are attached to the specified IAM identity (user, group, or role)</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "group": {
        "resource_type": "group",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "role": {
        "resource_type": "role",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "user": {
        "resource_type": "user",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcredentialreport"><a aria-hidden="true" class="anchor-heading" href="#getcredentialreport"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCredentialReport</h3>
<ul>
<li>description: Grants permission to retrieve a credential report for the AWS account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getgroup"><a aria-hidden="true" class="anchor-heading" href="#getgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetGroup</h3>
<ul>
<li>description: Grants permission to retrieve a list of IAM users in the specified IAM group</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "group": {
        "resource_type": "group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getgrouppolicy"><a aria-hidden="true" class="anchor-heading" href="#getgrouppolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetGroupPolicy</h3>
<ul>
<li>description: Grants permission to retrieve an inline policy document that is embedded in the specified IAM group</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "group": {
        "resource_type": "group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getinstanceprofile"><a aria-hidden="true" class="anchor-heading" href="#getinstanceprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetInstanceProfile</h3>
<ul>
<li>description: Grants permission to retrieve information about the specified instance profile, including the instance profile's path, GUID, ARN, and role</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance-profile": {
        "resource_type": "instance-profile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getloginprofile"><a aria-hidden="true" class="anchor-heading" href="#getloginprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetLoginProfile</h3>
<ul>
<li>description: Grants permission to retrieve the user name and password creation date for the specified IAM user</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getopenidconnectprovider"><a aria-hidden="true" class="anchor-heading" href="#getopenidconnectprovider"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetOpenIDConnectProvider</h3>
<ul>
<li>description: Grants permission to retrieve information about the specified OpenID Connect (OIDC) provider resource in IAM</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "oidc-provider": {
        "resource_type": "oidc-provider",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getorganizationsaccessreport"><a aria-hidden="true" class="anchor-heading" href="#getorganizationsaccessreport"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetOrganizationsAccessReport</h3>
<ul>
<li>description: Grants permission to retrieve an AWS Organizations access report</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getpolicy"><a aria-hidden="true" class="anchor-heading" href="#getpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetPolicy</h3>
<ul>
<li>description: Grants permission to retrieve information about the specified managed policy, including the policy's default version and the total number of identities to which the policy is attached</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "policy": {
        "resource_type": "policy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getpolicyversion"><a aria-hidden="true" class="anchor-heading" href="#getpolicyversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetPolicyVersion</h3>
<ul>
<li>description: Grants permission to retrieve information about a version of the specified managed policy, including the policy document</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "policy": {
        "resource_type": "policy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getrole"><a aria-hidden="true" class="anchor-heading" href="#getrole"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRole</h3>
<ul>
<li>description: Grants permission to retrieve information about the specified role, including the role's path, GUID, ARN, and the role's trust policy</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "role": {
        "resource_type": "role",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getrolepolicy"><a aria-hidden="true" class="anchor-heading" href="#getrolepolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRolePolicy</h3>
<ul>
<li>description: Grants permission to retrieve an inline policy document that is embedded with the specified IAM role</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "role": {
        "resource_type": "role",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsamlprovider"><a aria-hidden="true" class="anchor-heading" href="#getsamlprovider"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSAMLProvider</h3>
<ul>
<li>description: Grants permission to retrieve the SAML provider metadocument that was uploaded when the IAM SAML provider resource was created or updated</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "saml-provider": {
        "resource_type": "saml-provider",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsshpublickey"><a aria-hidden="true" class="anchor-heading" href="#getsshpublickey"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSSHPublicKey</h3>
<ul>
<li>description: Grants permission to retrieve the specified SSH public key, including metadata about the key</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getservercertificate"><a aria-hidden="true" class="anchor-heading" href="#getservercertificate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetServerCertificate</h3>
<ul>
<li>description: Grants permission to retrieve information about the specified server certificate stored in IAM</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "server-certificate": {
        "resource_type": "server-certificate",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getservicelastaccesseddetails"><a aria-hidden="true" class="anchor-heading" href="#getservicelastaccesseddetails"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetServiceLastAccessedDetails</h3>
<ul>
<li>description: Grants permission to retrieve information about the service last accessed data report</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getservicelastaccesseddetailswithentities"><a aria-hidden="true" class="anchor-heading" href="#getservicelastaccesseddetailswithentities"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetServiceLastAccessedDetailsWithEntities</h3>
<ul>
<li>description: Grants permission to retrieve information about the entities from the service last accessed data report</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getservicelinkedroledeletionstatus"><a aria-hidden="true" class="anchor-heading" href="#getservicelinkedroledeletionstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetServiceLinkedRoleDeletionStatus</h3>
<ul>
<li>description: Grants permission to retrieve an IAM service-linked role deletion status</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "role": {
        "resource_type": "role",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getuser"><a aria-hidden="true" class="anchor-heading" href="#getuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetUser</h3>
<ul>
<li>description: Grants permission to retrieve information about the specified IAM user, including the user's creation date, path, unique ID, and ARN</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getuserpolicy"><a aria-hidden="true" class="anchor-heading" href="#getuserpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetUserPolicy</h3>
<ul>
<li>description: Grants permission to retrieve an inline policy document that is embedded in the specified IAM user</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listaccesskeys"><a aria-hidden="true" class="anchor-heading" href="#listaccesskeys"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAccessKeys</h3>
<ul>
<li>description: Grants permission to list information about the access key IDs that are associated with the specified IAM user</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listaccountaliases"><a aria-hidden="true" class="anchor-heading" href="#listaccountaliases"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAccountAliases</h3>
<ul>
<li>description: Grants permission to list the account alias that is associated with the AWS account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listattachedgrouppolicies"><a aria-hidden="true" class="anchor-heading" href="#listattachedgrouppolicies"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAttachedGroupPolicies</h3>
<ul>
<li>description: Grants permission to list all managed policies that are attached to the specified IAM group</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "group": {
        "resource_type": "group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listattachedrolepolicies"><a aria-hidden="true" class="anchor-heading" href="#listattachedrolepolicies"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAttachedRolePolicies</h3>
<ul>
<li>description: Grants permission to list all managed policies that are attached to the specified IAM role</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "role": {
        "resource_type": "role",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listattacheduserpolicies"><a aria-hidden="true" class="anchor-heading" href="#listattacheduserpolicies"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAttachedUserPolicies</h3>
<ul>
<li>description: Grants permission to list all managed policies that are attached to the specified IAM user</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listentitiesforpolicy"><a aria-hidden="true" class="anchor-heading" href="#listentitiesforpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListEntitiesForPolicy</h3>
<ul>
<li>description: Grants permission to list all IAM identities to which the specified managed policy is attached</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "policy": {
        "resource_type": "policy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listgrouppolicies"><a aria-hidden="true" class="anchor-heading" href="#listgrouppolicies"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListGroupPolicies</h3>
<ul>
<li>description: Grants permission to list the names of the inline policies that are embedded in the specified IAM group</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "group": {
        "resource_type": "group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listgroups"><a aria-hidden="true" class="anchor-heading" href="#listgroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListGroups</h3>
<ul>
<li>description: Grants permission to list the IAM groups that have the specified path prefix</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listgroupsforuser"><a aria-hidden="true" class="anchor-heading" href="#listgroupsforuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListGroupsForUser</h3>
<ul>
<li>description: Grants permission to list the IAM groups that the specified IAM user belongs to</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listinstanceprofiles"><a aria-hidden="true" class="anchor-heading" href="#listinstanceprofiles"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListInstanceProfiles</h3>
<ul>
<li>description: Grants permission to list the instance profiles that have the specified path prefix</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance-profile": {
        "resource_type": "instance-profile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listinstanceprofilesforrole"><a aria-hidden="true" class="anchor-heading" href="#listinstanceprofilesforrole"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListInstanceProfilesForRole</h3>
<ul>
<li>description: Grants permission to list the instance profiles that have the specified associated IAM role</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "role": {
        "resource_type": "role",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listmfadevices"><a aria-hidden="true" class="anchor-heading" href="#listmfadevices"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListMFADevices</h3>
<ul>
<li>description: Grants permission to list the MFA devices for an IAM user</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listopenidconnectproviders"><a aria-hidden="true" class="anchor-heading" href="#listopenidconnectproviders"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListOpenIDConnectProviders</h3>
<ul>
<li>description: Grants permission to list information about the IAM OpenID Connect (OIDC) provider resource objects that are defined in the AWS account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listpolicies"><a aria-hidden="true" class="anchor-heading" href="#listpolicies"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPolicies</h3>
<ul>
<li>description: Grants permission to list all managed policies</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listpoliciesgrantingserviceaccess"><a aria-hidden="true" class="anchor-heading" href="#listpoliciesgrantingserviceaccess"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPoliciesGrantingServiceAccess</h3>
<ul>
<li>description: Grants permission to list information about the policies that grant an entity access to a specific service</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listpolicyversions"><a aria-hidden="true" class="anchor-heading" href="#listpolicyversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPolicyVersions</h3>
<ul>
<li>description: Grants permission to list information about the versions of the specified managed policy, including the version that is currently set as the policy's default version</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "policy": {
        "resource_type": "policy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listrolepolicies"><a aria-hidden="true" class="anchor-heading" href="#listrolepolicies"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListRolePolicies</h3>
<ul>
<li>description: Grants permission to list the names of the inline policies that are embedded in the specified IAM role</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "role": {
        "resource_type": "role",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listroletags"><a aria-hidden="true" class="anchor-heading" href="#listroletags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListRoleTags</h3>
<ul>
<li>description: Grants permission to list the tags that are attached to the specified IAM role.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "role": {
        "resource_type": "role",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listroles"><a aria-hidden="true" class="anchor-heading" href="#listroles"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListRoles</h3>
<ul>
<li>description: Grants permission to list the IAM roles that have the specified path prefix</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listsamlproviders"><a aria-hidden="true" class="anchor-heading" href="#listsamlproviders"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListSAMLProviders</h3>
<ul>
<li>description: Grants permission to list the SAML provider resources in IAM</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listsshpublickeys"><a aria-hidden="true" class="anchor-heading" href="#listsshpublickeys"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListSSHPublicKeys</h3>
<ul>
<li>description: Grants permission to list information about the SSH public keys that are associated with the specified IAM user</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listservercertificates"><a aria-hidden="true" class="anchor-heading" href="#listservercertificates"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListServerCertificates</h3>
<ul>
<li>description: Grants permission to list the server certificates that have the specified path prefix</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listservicespecificcredentials"><a aria-hidden="true" class="anchor-heading" href="#listservicespecificcredentials"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListServiceSpecificCredentials</h3>
<ul>
<li>description: Grants permission to list the service-specific credentials that are associated with the specified IAM user</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listsigningcertificates"><a aria-hidden="true" class="anchor-heading" href="#listsigningcertificates"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListSigningCertificates</h3>
<ul>
<li>description: Grants permission to list information about the signing certificates that are associated with the specified IAM user</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listuserpolicies"><a aria-hidden="true" class="anchor-heading" href="#listuserpolicies"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListUserPolicies</h3>
<ul>
<li>description: Grants permission to list the names of the inline policies that are embedded in the specified IAM user</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listusertags"><a aria-hidden="true" class="anchor-heading" href="#listusertags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListUserTags</h3>
<ul>
<li>description: Grants permission to list the tags that are attached to the specified IAM user.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listusers"><a aria-hidden="true" class="anchor-heading" href="#listusers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListUsers</h3>
<ul>
<li>description: Grants permission to list the IAM users that have the specified path prefix</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listvirtualmfadevices"><a aria-hidden="true" class="anchor-heading" href="#listvirtualmfadevices"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListVirtualMFADevices</h3>
<ul>
<li>description: Grants permission to list virtual MFA devices by assignment status</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="passrole"><a aria-hidden="true" class="anchor-heading" href="#passrole"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PassRole</h3>
<ul>
<li>description: Grants permission to pass a role to a service</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "role": {
        "resource_type": "role",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "iam:AssociatedResourceArn",
            "iam:PassedToService"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putgrouppolicy"><a aria-hidden="true" class="anchor-heading" href="#putgrouppolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutGroupPolicy</h3>
<ul>
<li>description: Grants permission to create or update an inline policy document that is embedded in the specified IAM group</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "group": {
        "resource_type": "group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putrolepermissionsboundary"><a aria-hidden="true" class="anchor-heading" href="#putrolepermissionsboundary"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutRolePermissionsBoundary</h3>
<ul>
<li>description: Grants permission to set a managed policy as a permissions boundary for a role</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "role": {
        "resource_type": "role",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "iam:PermissionsBoundary"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putrolepolicy"><a aria-hidden="true" class="anchor-heading" href="#putrolepolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutRolePolicy</h3>
<ul>
<li>description: Grants permission to create or update an inline policy document that is embedded in the specified IAM role</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "role": {
        "resource_type": "role",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "iam:PermissionsBoundary"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putuserpermissionsboundary"><a aria-hidden="true" class="anchor-heading" href="#putuserpermissionsboundary"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutUserPermissionsBoundary</h3>
<ul>
<li>description: Grants permission to set a managed policy as a permissions boundary for an IAM user</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "iam:PermissionsBoundary"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putuserpolicy"><a aria-hidden="true" class="anchor-heading" href="#putuserpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutUserPolicy</h3>
<ul>
<li>description: Grants permission to create or update an inline policy document that is embedded in the specified IAM user</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "iam:PermissionsBoundary"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="removeclientidfromopenidconnectprovider"><a aria-hidden="true" class="anchor-heading" href="#removeclientidfromopenidconnectprovider"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemoveClientIDFromOpenIDConnectProvider</h3>
<ul>
<li>description: Grants permission to remove the client ID (audience) from the list of client IDs in the specified IAM OpenID Connect (OIDC) provider resource</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "oidc-provider": {
        "resource_type": "oidc-provider",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="removerolefrominstanceprofile"><a aria-hidden="true" class="anchor-heading" href="#removerolefrominstanceprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemoveRoleFromInstanceProfile</h3>
<ul>
<li>description: Grants permission to remove an IAM role from the specified EC2 instance profile</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance-profile": {
        "resource_type": "instance-profile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="removeuserfromgroup"><a aria-hidden="true" class="anchor-heading" href="#removeuserfromgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemoveUserFromGroup</h3>
<ul>
<li>description: Grants permission to remove an IAM user from the specified group</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "group": {
        "resource_type": "group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="resetservicespecificcredential"><a aria-hidden="true" class="anchor-heading" href="#resetservicespecificcredential"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ResetServiceSpecificCredential</h3>
<ul>
<li>description: Grants permission to reset the password for an existing service-specific credential for an IAM user</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="resyncmfadevice"><a aria-hidden="true" class="anchor-heading" href="#resyncmfadevice"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ResyncMFADevice</h3>
<ul>
<li>description: Grants permission to synchronize the specified MFA device with its IAM entity (user or role)</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setdefaultpolicyversion"><a aria-hidden="true" class="anchor-heading" href="#setdefaultpolicyversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetDefaultPolicyVersion</h3>
<ul>
<li>description: Grants permission to set the version of the specified policy as the policy's default version</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "policy": {
        "resource_type": "policy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setsecuritytokenservicepreferences"><a aria-hidden="true" class="anchor-heading" href="#setsecuritytokenservicepreferences"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetSecurityTokenServicePreferences</h3>
<ul>
<li>description: Grants permission to set the STS global endpoint token version</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="simulatecustompolicy"><a aria-hidden="true" class="anchor-heading" href="#simulatecustompolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SimulateCustomPolicy</h3>
<ul>
<li>description: Grants permission to simulate whether an identity-based policy or resource-based policy provides permissions for specific API operations and resources</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="simulateprincipalpolicy"><a aria-hidden="true" class="anchor-heading" href="#simulateprincipalpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SimulatePrincipalPolicy</h3>
<ul>
<li>description: Grants permission to simulate whether an identity-based policy that is attached to a specified IAM entity (user or role) provides permissions for specific API operations and resources</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "group": {
        "resource_type": "group",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "role": {
        "resource_type": "role",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "user": {
        "resource_type": "user",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagrole"><a aria-hidden="true" class="anchor-heading" href="#tagrole"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagRole</h3>
<ul>
<li>description: Grants permission to add tags to an IAM role.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "role": {
        "resource_type": "role",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="taguser"><a aria-hidden="true" class="anchor-heading" href="#taguser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagUser</h3>
<ul>
<li>description: Grants permission to add tags to an IAM user.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagrole"><a aria-hidden="true" class="anchor-heading" href="#untagrole"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagRole</h3>
<ul>
<li>description: Grants permission to remove the specified tags from the role.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "role": {
        "resource_type": "role",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untaguser"><a aria-hidden="true" class="anchor-heading" href="#untaguser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagUser</h3>
<ul>
<li>description: Grants permission to remove the specified tags from the user.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateaccesskey"><a aria-hidden="true" class="anchor-heading" href="#updateaccesskey"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateAccessKey</h3>
<ul>
<li>description: Grants permission to update the status of the specified access key as Active or Inactive</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateaccountpasswordpolicy"><a aria-hidden="true" class="anchor-heading" href="#updateaccountpasswordpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateAccountPasswordPolicy</h3>
<ul>
<li>description: Grants permission to update the password policy settings for the AWS account</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateassumerolepolicy"><a aria-hidden="true" class="anchor-heading" href="#updateassumerolepolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateAssumeRolePolicy</h3>
<ul>
<li>description: Grants permission to update the policy that grants an IAM entity permission to assume a role</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "role": {
        "resource_type": "role",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updategroup"><a aria-hidden="true" class="anchor-heading" href="#updategroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateGroup</h3>
<ul>
<li>description: Grants permission to update the name or path of the specified IAM group</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "group": {
        "resource_type": "group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateloginprofile"><a aria-hidden="true" class="anchor-heading" href="#updateloginprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateLoginProfile</h3>
<ul>
<li>description: Grants permission to change the password for the specified IAM user</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateopenidconnectproviderthumbprint"><a aria-hidden="true" class="anchor-heading" href="#updateopenidconnectproviderthumbprint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateOpenIDConnectProviderThumbprint</h3>
<ul>
<li>description: Grants permission to update the entire list of server certificate thumbprints that are associated with an OpenID Connect (OIDC) provider resource</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "oidc-provider": {
        "resource_type": "oidc-provider",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updaterole"><a aria-hidden="true" class="anchor-heading" href="#updaterole"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateRole</h3>
<ul>
<li>description: Grants permission to update the description or maximum session duration setting of a role</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "role": {
        "resource_type": "role",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateroledescription"><a aria-hidden="true" class="anchor-heading" href="#updateroledescription"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateRoleDescription</h3>
<ul>
<li>description: Grants permission to update only the description of a role</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "role": {
        "resource_type": "role",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatesamlprovider"><a aria-hidden="true" class="anchor-heading" href="#updatesamlprovider"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateSAMLProvider</h3>
<ul>
<li>description: Grants permission to update the metadata document for an existing SAML provider resource</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "saml-provider": {
        "resource_type": "saml-provider",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatesshpublickey"><a aria-hidden="true" class="anchor-heading" href="#updatesshpublickey"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateSSHPublicKey</h3>
<ul>
<li>description: Grants permission to update the status of an IAM user's SSH public key to active or inactive</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateservercertificate"><a aria-hidden="true" class="anchor-heading" href="#updateservercertificate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateServerCertificate</h3>
<ul>
<li>description: Grants permission to update the name or the path of the specified server certificate stored in IAM</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "server-certificate": {
        "resource_type": "server-certificate",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateservicespecificcredential"><a aria-hidden="true" class="anchor-heading" href="#updateservicespecificcredential"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateServiceSpecificCredential</h3>
<ul>
<li>description: Grants permission to update the status of a service-specific credential to active or inactive for an IAM user</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatesigningcertificate"><a aria-hidden="true" class="anchor-heading" href="#updatesigningcertificate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateSigningCertificate</h3>
<ul>
<li>description: Grants permission to update the status of the specified user signing certificate to active or disabled</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateuser"><a aria-hidden="true" class="anchor-heading" href="#updateuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateUser</h3>
<ul>
<li>description: Grants permission to update the name or the path of the specified IAM user</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="uploadsshpublickey"><a aria-hidden="true" class="anchor-heading" href="#uploadsshpublickey"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UploadSSHPublicKey</h3>
<ul>
<li>description: Grants permission to upload an SSH public key and associate it with the specified IAM user</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="uploadservercertificate"><a aria-hidden="true" class="anchor-heading" href="#uploadservercertificate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UploadServerCertificate</h3>
<ul>
<li>description: Grants permission to upload a server certificate entity for the AWS account</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "server-certificate": {
        "resource_type": "server-certificate",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="uploadsigningcertificate"><a aria-hidden="true" class="anchor-heading" href="#uploadsigningcertificate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UploadSigningCertificate</h3>
<ul>
<li>description: Grants permission to upload an X.509 signing certificate and associate it with the specified IAM user</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Identity And Access Management"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Comprehend.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Comprehend - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Comprehend.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Comprehend.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Comprehend.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Comprehend - undefined" />
  <meta name="twitter:title" content="Comprehend - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Comprehend</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Comprehend">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="comprehend"><a aria-hidden="true" class="anchor-heading" href="#comprehend"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Comprehend</h1>
<ul>
<li>prefix: comprehend</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="batchdetectdominantlanguage"><a aria-hidden="true" class="anchor-heading" href="#batchdetectdominantlanguage"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchDetectDominantLanguage</h3>
<ul>
<li>description: Grants permission to detect the language or languages present in the list of text documents</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchdetectentities"><a aria-hidden="true" class="anchor-heading" href="#batchdetectentities"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchDetectEntities</h3>
<ul>
<li>description: Grants permission to detect the named entities ("People", "Places", "Locations", etc) within the given list of text documents</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchdetectkeyphrases"><a aria-hidden="true" class="anchor-heading" href="#batchdetectkeyphrases"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchDetectKeyPhrases</h3>
<ul>
<li>description: Grants permission to detect the phrases in the list of text documents that are most indicative of the content</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchdetectsentiment"><a aria-hidden="true" class="anchor-heading" href="#batchdetectsentiment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchDetectSentiment</h3>
<ul>
<li>description: Grants permission to detect the sentiment of a text in the list of documents (Positive, Negative, Neutral, or Mixed)</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchdetectsyntax"><a aria-hidden="true" class="anchor-heading" href="#batchdetectsyntax"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchDetectSyntax</h3>
<ul>
<li>description: Grants permission to detect syntactic information (like Part of Speech, Tokens) in a list of text documents</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="classifydocument"><a aria-hidden="true" class="anchor-heading" href="#classifydocument"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ClassifyDocument</h3>
<ul>
<li>description: Grants permission to create a new document classification request to analyze a single document in real-time, using a previously created and trained custom model and an endpoint</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "document-classifier-endpoint": {
        "resource_type": "document-classifier-endpoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdocumentclassifier"><a aria-hidden="true" class="anchor-heading" href="#createdocumentclassifier"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDocumentClassifier</h3>
<ul>
<li>description: Grants permission to create a new document classifier that you can use to categorize documents</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createendpoint"><a aria-hidden="true" class="anchor-heading" href="#createendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateEndpoint</h3>
<ul>
<li>description: Grants permission to create a model-specific endpoint for synchronous inference for a previously trained custom model</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "document-classifier": {
        "resource_type": "document-classifier",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "entity-recognizer": {
        "resource_type": "entity-recognizer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createentityrecognizer"><a aria-hidden="true" class="anchor-heading" href="#createentityrecognizer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateEntityRecognizer</h3>
<ul>
<li>description: Grants permission to create an entity recognizer using submitted files</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedocumentclassifier"><a aria-hidden="true" class="anchor-heading" href="#deletedocumentclassifier"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDocumentClassifier</h3>
<ul>
<li>description: Grants permission to delete a previously created document classifier</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "document-classifier": {
        "resource_type": "document-classifier",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteendpoint"><a aria-hidden="true" class="anchor-heading" href="#deleteendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteEndpoint</h3>
<ul>
<li>description: Grants permission to delete a model-specific endpoint for a previously-trained custom model. All endpoints must be deleted in order for the model to be deleted</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "document-classifier-endpoint": {
        "resource_type": "document-classifier-endpoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "entity-recognizer-endpoint": {
        "resource_type": "entity-recognizer-endpoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteentityrecognizer"><a aria-hidden="true" class="anchor-heading" href="#deleteentityrecognizer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteEntityRecognizer</h3>
<ul>
<li>description: Grants permission to delete a submitted entity recognizer</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "entity-recognizer": {
        "resource_type": "entity-recognizer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedocumentclassificationjob"><a aria-hidden="true" class="anchor-heading" href="#describedocumentclassificationjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDocumentClassificationJob</h3>
<ul>
<li>description: Grants permission to get the properties associated with a document classification job</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedocumentclassifier"><a aria-hidden="true" class="anchor-heading" href="#describedocumentclassifier"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDocumentClassifier</h3>
<ul>
<li>description: Grants permission to get the properties associated with a document classifier</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "document-classifier": {
        "resource_type": "document-classifier",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedominantlanguagedetectionjob"><a aria-hidden="true" class="anchor-heading" href="#describedominantlanguagedetectionjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDominantLanguageDetectionJob</h3>
<ul>
<li>description: Grants permission to get the properties associated with a dominant language detection job</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeendpoint"><a aria-hidden="true" class="anchor-heading" href="#describeendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEndpoint</h3>
<ul>
<li>description: Grants permission to get the properties associated with a specific endpoint. Use this operation to get the status of an endpoint</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "document-classifier-endpoint": {
        "resource_type": "document-classifier-endpoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "entity-recognizer-endpoint": {
        "resource_type": "entity-recognizer-endpoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeentitiesdetectionjob"><a aria-hidden="true" class="anchor-heading" href="#describeentitiesdetectionjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEntitiesDetectionJob</h3>
<ul>
<li>description: Grants permission to get the properties associated with an entities detection job</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeentityrecognizer"><a aria-hidden="true" class="anchor-heading" href="#describeentityrecognizer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEntityRecognizer</h3>
<ul>
<li>description: Grants permission to provide details about an entity recognizer including status, S3 buckets containing training data, recognizer metadata, metrics, and so on</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "entity-recognizer": {
        "resource_type": "entity-recognizer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describekeyphrasesdetectionjob"><a aria-hidden="true" class="anchor-heading" href="#describekeyphrasesdetectionjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeKeyPhrasesDetectionJob</h3>
<ul>
<li>description: Grants permission to get the properties associated with a key phrases detection job</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describepiientitiesdetectionjob"><a aria-hidden="true" class="anchor-heading" href="#describepiientitiesdetectionjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribePiiEntitiesDetectionJob</h3>
<ul>
<li>description: Grants permission to get the properties associated with a PII entities detection job</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describesentimentdetectionjob"><a aria-hidden="true" class="anchor-heading" href="#describesentimentdetectionjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSentimentDetectionJob</h3>
<ul>
<li>description: Grants permission to get the properties associated with a sentiment detection job</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetopicsdetectionjob"><a aria-hidden="true" class="anchor-heading" href="#describetopicsdetectionjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTopicsDetectionJob</h3>
<ul>
<li>description: Grants permission to get the properties associated with a topic detection job</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="detectdominantlanguage"><a aria-hidden="true" class="anchor-heading" href="#detectdominantlanguage"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DetectDominantLanguage</h3>
<ul>
<li>description: Grants permission to detect the language or languages present in the text</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="detectentities"><a aria-hidden="true" class="anchor-heading" href="#detectentities"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DetectEntities</h3>
<ul>
<li>description: Grants permission to detect the named entities ("People", "Places", "Locations", etc) within the given text document</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "entity-recognizer-endpoint": {
        "resource_type": "entity-recognizer-endpoint",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="detectkeyphrases"><a aria-hidden="true" class="anchor-heading" href="#detectkeyphrases"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DetectKeyPhrases</h3>
<ul>
<li>description: Grants permission to detect the phrases in the text that are most indicative of the content</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="detectpiientities"><a aria-hidden="true" class="anchor-heading" href="#detectpiientities"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DetectPiiEntities</h3>
<ul>
<li>description: Grants permission to detect the personally identifiable information entities ("Name", "SSN", "PIN", etc) within the given text document</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="detectsentiment"><a aria-hidden="true" class="anchor-heading" href="#detectsentiment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DetectSentiment</h3>
<ul>
<li>description: Grants permission to detect the sentiment of a text in a document (Positive, Negative, Neutral, or Mixed)</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="detectsyntax"><a aria-hidden="true" class="anchor-heading" href="#detectsyntax"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DetectSyntax</h3>
<ul>
<li>description: Grants permission to detect syntactic information (like Part of Speech, Tokens) in a text document</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdocumentclassificationjobs"><a aria-hidden="true" class="anchor-heading" href="#listdocumentclassificationjobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDocumentClassificationJobs</h3>
<ul>
<li>description: Grants permission to get a list of the document classification jobs that you have submitted</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdocumentclassifiers"><a aria-hidden="true" class="anchor-heading" href="#listdocumentclassifiers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDocumentClassifiers</h3>
<ul>
<li>description: Grants permission to get a list of the document classifiers that you have created</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdominantlanguagedetectionjobs"><a aria-hidden="true" class="anchor-heading" href="#listdominantlanguagedetectionjobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDominantLanguageDetectionJobs</h3>
<ul>
<li>description: Grants permission to get a list of the dominant language detection jobs that you have submitted</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listendpoints"><a aria-hidden="true" class="anchor-heading" href="#listendpoints"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListEndpoints</h3>
<ul>
<li>description: Grants permission to get a list of all existing endpoints that you've created</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listentitiesdetectionjobs"><a aria-hidden="true" class="anchor-heading" href="#listentitiesdetectionjobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListEntitiesDetectionJobs</h3>
<ul>
<li>description: Grants permission to get a list of the entity detection jobs that you have submitted</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listentityrecognizers"><a aria-hidden="true" class="anchor-heading" href="#listentityrecognizers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListEntityRecognizers</h3>
<ul>
<li>description: Grants permission to get a list of the properties of all entity recognizers that you created, including recognizers currently in training</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listkeyphrasesdetectionjobs"><a aria-hidden="true" class="anchor-heading" href="#listkeyphrasesdetectionjobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListKeyPhrasesDetectionJobs</h3>
<ul>
<li>description: Grants permission to get a list of key phrase detection jobs that you have submitted</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listpiientitiesdetectionjobs"><a aria-hidden="true" class="anchor-heading" href="#listpiientitiesdetectionjobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPiiEntitiesDetectionJobs</h3>
<ul>
<li>description: Grants permission to get a list of PII entities detection jobs that you have submitted</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listsentimentdetectionjobs"><a aria-hidden="true" class="anchor-heading" href="#listsentimentdetectionjobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListSentimentDetectionJobs</h3>
<ul>
<li>description: Grants permission to get a list of sentiment detection jobs that you have submitted</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Grants permission to list tags for a resource</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "document-classifier": {
        "resource_type": "document-classifier",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "document-classifier-endpoint": {
        "resource_type": "document-classifier-endpoint",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "entity-recognizer": {
        "resource_type": "entity-recognizer",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "entity-recognizer-endpoint": {
        "resource_type": "entity-recognizer-endpoint",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtopicsdetectionjobs"><a aria-hidden="true" class="anchor-heading" href="#listtopicsdetectionjobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTopicsDetectionJobs</h3>
<ul>
<li>description: Grants permission to get a list of the topic detection jobs that you have submitted</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startdocumentclassificationjob"><a aria-hidden="true" class="anchor-heading" href="#startdocumentclassificationjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartDocumentClassificationJob</h3>
<ul>
<li>description: Grants permission to start an asynchronous document classification job</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "document-classifier": {
        "resource_type": "document-classifier",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startdominantlanguagedetectionjob"><a aria-hidden="true" class="anchor-heading" href="#startdominantlanguagedetectionjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartDominantLanguageDetectionJob</h3>
<ul>
<li>description: Grants permission to start an asynchronous dominant language detection job for a collection of documents</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startentitiesdetectionjob"><a aria-hidden="true" class="anchor-heading" href="#startentitiesdetectionjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartEntitiesDetectionJob</h3>
<ul>
<li>description: Grants permission to start an asynchronous entity detection job for a collection of documents</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "entity-recognizer": {
        "resource_type": "entity-recognizer",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startkeyphrasesdetectionjob"><a aria-hidden="true" class="anchor-heading" href="#startkeyphrasesdetectionjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartKeyPhrasesDetectionJob</h3>
<ul>
<li>description: Grants permission to start an asynchronous key phrase detection job for a collection of documents</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startpiientitiesdetectionjob"><a aria-hidden="true" class="anchor-heading" href="#startpiientitiesdetectionjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartPiiEntitiesDetectionJob</h3>
<ul>
<li>description: Grants permission to start an asynchronous PII entities detection job for a collection of documents</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startsentimentdetectionjob"><a aria-hidden="true" class="anchor-heading" href="#startsentimentdetectionjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartSentimentDetectionJob</h3>
<ul>
<li>description: Grants permission to start an asynchronous sentiment detection job for a collection of documents</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="starttopicsdetectionjob"><a aria-hidden="true" class="anchor-heading" href="#starttopicsdetectionjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartTopicsDetectionJob</h3>
<ul>
<li>description: Grants permission to start an asynchronous job to detect the most common topics in the collection of documents and the phrases associated with each topic</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopdominantlanguagedetectionjob"><a aria-hidden="true" class="anchor-heading" href="#stopdominantlanguagedetectionjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopDominantLanguageDetectionJob</h3>
<ul>
<li>description: Grants permission to stop a dominant language detection job</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopentitiesdetectionjob"><a aria-hidden="true" class="anchor-heading" href="#stopentitiesdetectionjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopEntitiesDetectionJob</h3>
<ul>
<li>description: Grants permission to stop an entity detection job</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopkeyphrasesdetectionjob"><a aria-hidden="true" class="anchor-heading" href="#stopkeyphrasesdetectionjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopKeyPhrasesDetectionJob</h3>
<ul>
<li>description: Grants permission to stop a key phrase detection job</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stoppiientitiesdetectionjob"><a aria-hidden="true" class="anchor-heading" href="#stoppiientitiesdetectionjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopPiiEntitiesDetectionJob</h3>
<ul>
<li>description: Grants permission to stop a PII entities detection job</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopsentimentdetectionjob"><a aria-hidden="true" class="anchor-heading" href="#stopsentimentdetectionjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopSentimentDetectionJob</h3>
<ul>
<li>description: Grants permission to stop a sentiment detection job</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stoptrainingdocumentclassifier"><a aria-hidden="true" class="anchor-heading" href="#stoptrainingdocumentclassifier"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopTrainingDocumentClassifier</h3>
<ul>
<li>description: Grants permission to stop a previously created document classifier training job</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "document-classifier": {
        "resource_type": "document-classifier",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stoptrainingentityrecognizer"><a aria-hidden="true" class="anchor-heading" href="#stoptrainingentityrecognizer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopTrainingEntityRecognizer</h3>
<ul>
<li>description: Grants permission to stop a previously created entity recognizer training job</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "entity-recognizer": {
        "resource_type": "entity-recognizer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Grants permission to tag a resource with given key value pairs</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "document-classifier": {
        "resource_type": "document-classifier",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "document-classifier-endpoint": {
        "resource_type": "document-classifier-endpoint",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "entity-recognizer": {
        "resource_type": "entity-recognizer",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "entity-recognizer-endpoint": {
        "resource_type": "entity-recognizer-endpoint",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Grants permission to untag a resource with given key</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "document-classifier": {
        "resource_type": "document-classifier",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "document-classifier-endpoint": {
        "resource_type": "document-classifier-endpoint",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "entity-recognizer": {
        "resource_type": "entity-recognizer",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "entity-recognizer-endpoint": {
        "resource_type": "entity-recognizer-endpoint",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateendpoint"><a aria-hidden="true" class="anchor-heading" href="#updateendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateEndpoint</h3>
<ul>
<li>description: Grants permission to update information about the specified endpoint</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "document-classifier-endpoint": {
        "resource_type": "document-classifier-endpoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "entity-recognizer-endpoint": {
        "resource_type": "entity-recognizer-endpoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Comprehend"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-EventBridge Schemas.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>EventBridge Schemas - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-EventBridge Schemas.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-EventBridge Schemas.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-EventBridge Schemas.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="EventBridge Schemas - undefined" />
  <meta name="twitter:title" content="EventBridge Schemas - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">EventBridge Schemas</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="EventBridge Schemas">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="eventbridge-schemas"><a aria-hidden="true" class="anchor-heading" href="#eventbridge-schemas"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EventBridge Schemas</h1>
<ul>
<li>prefix: schemas</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="creatediscoverer"><a aria-hidden="true" class="anchor-heading" href="#creatediscoverer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDiscoverer</h3>
<ul>
<li>description: Creates an event schema discoverer. Once created, your events will be automatically map into corresponding schema documents</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "discoverer": {
        "resource_type": "discoverer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createregistry"><a aria-hidden="true" class="anchor-heading" href="#createregistry"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateRegistry</h3>
<ul>
<li>description: Create a new schema registry in your account.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "registry": {
        "resource_type": "registry",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createschema"><a aria-hidden="true" class="anchor-heading" href="#createschema"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSchema</h3>
<ul>
<li>description: Create a new schema in your account.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "schema": {
        "resource_type": "schema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletediscoverer"><a aria-hidden="true" class="anchor-heading" href="#deletediscoverer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDiscoverer</h3>
<ul>
<li>description: Deletes discoverer in your account.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "discoverer": {
        "resource_type": "discoverer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteregistry"><a aria-hidden="true" class="anchor-heading" href="#deleteregistry"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteRegistry</h3>
<ul>
<li>description: Deletes an existing registry in your account.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "registry": {
        "resource_type": "registry",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteresourcepolicy"><a aria-hidden="true" class="anchor-heading" href="#deleteresourcepolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteResourcePolicy</h3>
<ul>
<li>description: Delete the resource-based policy attached to a given registry.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "registry": {
        "resource_type": "registry",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteschema"><a aria-hidden="true" class="anchor-heading" href="#deleteschema"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteSchema</h3>
<ul>
<li>description: Deletes an existing schema in your account.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "schema": {
        "resource_type": "schema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteschemaversion"><a aria-hidden="true" class="anchor-heading" href="#deleteschemaversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteSchemaVersion</h3>
<ul>
<li>description: Deletes a specific version of schema in your account.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "schema": {
        "resource_type": "schema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecodebinding"><a aria-hidden="true" class="anchor-heading" href="#describecodebinding"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeCodeBinding</h3>
<ul>
<li>description: Retrieves metadata for generated code for specific schema in your account.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "schema": {
        "resource_type": "schema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describediscoverer"><a aria-hidden="true" class="anchor-heading" href="#describediscoverer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDiscoverer</h3>
<ul>
<li>description: Retrieves discoverer metadata in your account.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "discoverer": {
        "resource_type": "discoverer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeregistry"><a aria-hidden="true" class="anchor-heading" href="#describeregistry"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeRegistry</h3>
<ul>
<li>description: Describes an existing registry metadata in your account.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "registry": {
        "resource_type": "registry",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeschema"><a aria-hidden="true" class="anchor-heading" href="#describeschema"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSchema</h3>
<ul>
<li>description: Retrieves an existing schema in your account.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "schema": {
        "resource_type": "schema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcodebindingsource"><a aria-hidden="true" class="anchor-heading" href="#getcodebindingsource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCodeBindingSource</h3>
<ul>
<li>description: Retrieves metadata for generated code for specific schema in your account.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "schema": {
        "resource_type": "schema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdiscoveredschema"><a aria-hidden="true" class="anchor-heading" href="#getdiscoveredschema"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDiscoveredSchema</h3>
<ul>
<li>description: Retrieves schema for the provided list of sample events.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getresourcepolicy"><a aria-hidden="true" class="anchor-heading" href="#getresourcepolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetResourcePolicy</h3>
<ul>
<li>description: Retrieves the resource-based policy attached to a given registry.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "registry": {
        "resource_type": "registry",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdiscoverers"><a aria-hidden="true" class="anchor-heading" href="#listdiscoverers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDiscoverers</h3>
<ul>
<li>description: Lists all the discoverers in your account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "discoverer": {
        "resource_type": "discoverer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listregistries"><a aria-hidden="true" class="anchor-heading" href="#listregistries"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListRegistries</h3>
<ul>
<li>description: List all discoverers in your account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "registry": {
        "resource_type": "registry",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listschemaversions"><a aria-hidden="true" class="anchor-heading" href="#listschemaversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListSchemaVersions</h3>
<ul>
<li>description: List all versions of a schema.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "schema": {
        "resource_type": "schema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listschemas"><a aria-hidden="true" class="anchor-heading" href="#listschemas"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListSchemas</h3>
<ul>
<li>description: List all schemas.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "schema": {
        "resource_type": "schema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: This action lists tags for a resource.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "discoverer": {
        "resource_type": "discoverer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "registry": {
        "resource_type": "registry",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "schema": {
        "resource_type": "schema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putcodebinding"><a aria-hidden="true" class="anchor-heading" href="#putcodebinding"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutCodeBinding</h3>
<ul>
<li>description: Generates code for specific schema in your account.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "schema": {
        "resource_type": "schema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putresourcepolicy"><a aria-hidden="true" class="anchor-heading" href="#putresourcepolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutResourcePolicy</h3>
<ul>
<li>description: Attach resource-based policy to the specific registry.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "registry": {
        "resource_type": "registry",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="searchschemas"><a aria-hidden="true" class="anchor-heading" href="#searchschemas"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SearchSchemas</h3>
<ul>
<li>description: Searches schemas based on specified keywords in your account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "schema": {
        "resource_type": "schema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startdiscoverer"><a aria-hidden="true" class="anchor-heading" href="#startdiscoverer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartDiscoverer</h3>
<ul>
<li>description: Starts the specified discoverer. Once started the discoverer will automatically register schemas for published events to configured source in your account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "discoverer": {
        "resource_type": "discoverer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopdiscoverer"><a aria-hidden="true" class="anchor-heading" href="#stopdiscoverer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopDiscoverer</h3>
<ul>
<li>description: Starts the specified discoverer. Once started the discoverer will automatically register schemas for published events to configured source in your account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "discoverer": {
        "resource_type": "discoverer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: This action tags an resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "discoverer": {
        "resource_type": "discoverer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "registry": {
        "resource_type": "registry",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "schema": {
        "resource_type": "schema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys",
            "aws:RequestTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: This action removes a tag from on a resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "discoverer": {
        "resource_type": "discoverer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "registry": {
        "resource_type": "registry",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "schema": {
        "resource_type": "schema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatediscoverer"><a aria-hidden="true" class="anchor-heading" href="#updatediscoverer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateDiscoverer</h3>
<ul>
<li>description: Updates an existing discoverer in your account.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "discoverer": {
        "resource_type": "discoverer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateregistry"><a aria-hidden="true" class="anchor-heading" href="#updateregistry"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateRegistry</h3>
<ul>
<li>description: Updates an existing registry metadata in your account.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "registry": {
        "resource_type": "registry",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateschema"><a aria-hidden="true" class="anchor-heading" href="#updateschema"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateSchema</h3>
<ul>
<li>description: Updates an existing schema in your account.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "schema": {
        "resource_type": "schema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-EventBridge Schemas"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-WAF V2.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>WAF V2 - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-WAF V2.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-WAF V2.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-WAF V2.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="WAF V2 - undefined" />
  <meta name="twitter:title" content="WAF V2 - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">WAF V2</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="WAF V2">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="waf-v2"><a aria-hidden="true" class="anchor-heading" href="#waf-v2"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>WAF V2</h1>
<ul>
<li>prefix: wafv2</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="associatewebacl"><a aria-hidden="true" class="anchor-heading" href="#associatewebacl"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateWebACL</h3>
<ul>
<li>description: Grants permission to associate a WebACL with a resource.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "webacl": {
        "resource_type": "webacl",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "apigateway": {
        "resource_type": "apigateway",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "appsync": {
        "resource_type": "appsync",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "loadbalancer/app/": {
        "resource_type": "loadbalancer/app/",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="checkcapacity"><a aria-hidden="true" class="anchor-heading" href="#checkcapacity"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CheckCapacity</h3>
<ul>
<li>description: Grants permission to calculate web ACL capacity unit (WCU) requirements for a specified scope and set of rules.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createipset"><a aria-hidden="true" class="anchor-heading" href="#createipset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateIPSet</h3>
<ul>
<li>description: Grants permission to create an IPSet.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ipset": {
        "resource_type": "ipset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createregexpatternset"><a aria-hidden="true" class="anchor-heading" href="#createregexpatternset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateRegexPatternSet</h3>
<ul>
<li>description: Grants permission to create a RegexPatternSet.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "regexpatternset": {
        "resource_type": "regexpatternset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createrulegroup"><a aria-hidden="true" class="anchor-heading" href="#createrulegroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateRuleGroup</h3>
<ul>
<li>description: Grants permission to create a RuleGroup.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "rulegroup": {
        "resource_type": "rulegroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createwebacl"><a aria-hidden="true" class="anchor-heading" href="#createwebacl"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateWebACL</h3>
<ul>
<li>description: Grants permission to create a WebACL.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "webacl": {
        "resource_type": "webacl",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletefirewallmanagerrulegroups"><a aria-hidden="true" class="anchor-heading" href="#deletefirewallmanagerrulegroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteFirewallManagerRuleGroups</h3>
<ul>
<li>description: Grants permission to delete specified FirewallManagedRulesGroups from the specified WebACL if not managed by Firewall Manager anymore.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "webacl": {
        "resource_type": "webacl",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteipset"><a aria-hidden="true" class="anchor-heading" href="#deleteipset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteIPSet</h3>
<ul>
<li>description: Grants permission to delete the specified IPSet.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ipset": {
        "resource_type": "ipset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteloggingconfiguration"><a aria-hidden="true" class="anchor-heading" href="#deleteloggingconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteLoggingConfiguration</h3>
<ul>
<li>description: Grants permission to delete the LoggingConfiguration from the specified WebACL.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "webacl": {
        "resource_type": "webacl",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletepermissionpolicy"><a aria-hidden="true" class="anchor-heading" href="#deletepermissionpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeletePermissionPolicy</h3>
<ul>
<li>description: Grants permission to delete the PermissionPolicy on the specified RuleGroup.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "rulegroup": {
        "resource_type": "rulegroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteregexpatternset"><a aria-hidden="true" class="anchor-heading" href="#deleteregexpatternset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteRegexPatternSet</h3>
<ul>
<li>description: Grants permission to delete the specified RegexPatternSet.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "regexpatternset": {
        "resource_type": "regexpatternset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleterulegroup"><a aria-hidden="true" class="anchor-heading" href="#deleterulegroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteRuleGroup</h3>
<ul>
<li>description: Grants permission to delete the specified RuleGroup.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "rulegroup": {
        "resource_type": "rulegroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletewebacl"><a aria-hidden="true" class="anchor-heading" href="#deletewebacl"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteWebACL</h3>
<ul>
<li>description: Grants permission to delete the specified WebACL.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "webacl": {
        "resource_type": "webacl",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describemanagedrulegroup"><a aria-hidden="true" class="anchor-heading" href="#describemanagedrulegroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeManagedRuleGroup</h3>
<ul>
<li>description: Grants permission to view high-level information for a managed rule group.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociatefirewallmanager"><a aria-hidden="true" class="anchor-heading" href="#disassociatefirewallmanager"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateFirewallManager</h3>
<ul>
<li>description: Grants permission to disassociate Firewall Manager from the specified WebACL.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "webacl": {
        "resource_type": "webacl",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociatewebacl"><a aria-hidden="true" class="anchor-heading" href="#disassociatewebacl"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateWebACL</h3>
<ul>
<li>description: Grants permission disassociate a WebACL from an application resource.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apigateway": {
        "resource_type": "apigateway",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "appsync": {
        "resource_type": "appsync",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "loadbalancer/app/": {
        "resource_type": "loadbalancer/app/",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getipset"><a aria-hidden="true" class="anchor-heading" href="#getipset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetIPSet</h3>
<ul>
<li>description: Grants permission to view details about the specified IPSet.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ipset": {
        "resource_type": "ipset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getloggingconfiguration"><a aria-hidden="true" class="anchor-heading" href="#getloggingconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetLoggingConfiguration</h3>
<ul>
<li>description: Grants permission to view LoggingConfiguration about the specified WebACL.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "webacl": {
        "resource_type": "webacl",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getpermissionpolicy"><a aria-hidden="true" class="anchor-heading" href="#getpermissionpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetPermissionPolicy</h3>
<ul>
<li>description: Grants permission to view PermissionPolicy on the specified RuleGroup.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "rulegroup": {
        "resource_type": "rulegroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getratebasedstatementmanagedkeys"><a aria-hidden="true" class="anchor-heading" href="#getratebasedstatementmanagedkeys"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRateBasedStatementManagedKeys</h3>
<ul>
<li>description: Grants permission to view the keys that are currently blocked by a rate-based rule.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "webacl": {
        "resource_type": "webacl",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getregexpatternset"><a aria-hidden="true" class="anchor-heading" href="#getregexpatternset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRegexPatternSet</h3>
<ul>
<li>description: Grants permission to view details about the specified RegexPatternSet.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "regexpatternset": {
        "resource_type": "regexpatternset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getrulegroup"><a aria-hidden="true" class="anchor-heading" href="#getrulegroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRuleGroup</h3>
<ul>
<li>description: Grants permission to view details about the specified RuleGroup.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "rulegroup": {
        "resource_type": "rulegroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsampledrequests"><a aria-hidden="true" class="anchor-heading" href="#getsampledrequests"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSampledRequests</h3>
<ul>
<li>description: Grants permission to view detailed information about a specified number of requests--a sample--that AWS WAF randomly selects from among the first 5,000 requests that your AWS resource received during a time range that you choose.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "webacl": {
        "resource_type": "webacl",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getwebacl"><a aria-hidden="true" class="anchor-heading" href="#getwebacl"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetWebACL</h3>
<ul>
<li>description: Grants permission to view details about the specified GetWebACL.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "webacl": {
        "resource_type": "webacl",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getwebaclforresource"><a aria-hidden="true" class="anchor-heading" href="#getwebaclforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetWebACLForResource</h3>
<ul>
<li>description: Grants permission to view the WebACL for the specified resource.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apigateway": {
        "resource_type": "apigateway",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "appsync": {
        "resource_type": "appsync",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "loadbalancer/app/": {
        "resource_type": "loadbalancer/app/",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listavailablemanagedrulegroups"><a aria-hidden="true" class="anchor-heading" href="#listavailablemanagedrulegroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAvailableManagedRuleGroups</h3>
<ul>
<li>description: Grants permission to view an array of managed rule groups that are available for you to use.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listipsets"><a aria-hidden="true" class="anchor-heading" href="#listipsets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListIPSets</h3>
<ul>
<li>description: Grants permission to view an array of IPSetSummary objects for the IP sets that you manage.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listloggingconfigurations"><a aria-hidden="true" class="anchor-heading" href="#listloggingconfigurations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListLoggingConfigurations</h3>
<ul>
<li>description: Grants permission to view an array of your LoggingConfiguration objects.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listregexpatternsets"><a aria-hidden="true" class="anchor-heading" href="#listregexpatternsets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListRegexPatternSets</h3>
<ul>
<li>description: Grants permission to view an array of RegexPatternSetSummary objects for the regex pattern sets that you manage.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listresourcesforwebacl"><a aria-hidden="true" class="anchor-heading" href="#listresourcesforwebacl"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListResourcesForWebACL</h3>
<ul>
<li>description: Grants permission to view an array of the Amazon Resource Names (ARNs) for the resources that are associated with the specified web ACL.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "webacl": {
        "resource_type": "webacl",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listrulegroups"><a aria-hidden="true" class="anchor-heading" href="#listrulegroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListRuleGroups</h3>
<ul>
<li>description: Grants permission to view an array of RuleGroupSummary objects for the rule groups that you manage.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Grants permission to lists tag for the specified resource.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ipset": {
        "resource_type": "ipset",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "regexpatternset": {
        "resource_type": "regexpatternset",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "rulegroup": {
        "resource_type": "rulegroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "webacl": {
        "resource_type": "webacl",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listwebacls"><a aria-hidden="true" class="anchor-heading" href="#listwebacls"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListWebACLs</h3>
<ul>
<li>description: Grants permission to view an array of WebACLSummary objects for the web ACLs that you manage.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putfirewallmanagerrulegroups"><a aria-hidden="true" class="anchor-heading" href="#putfirewallmanagerrulegroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutFirewallManagerRuleGroups</h3>
<ul>
<li>description: Grants permission to create FirewallManagedRulesGroups in the specified WebACL.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "webacl": {
        "resource_type": "webacl",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putloggingconfiguration"><a aria-hidden="true" class="anchor-heading" href="#putloggingconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutLoggingConfiguration</h3>
<ul>
<li>description: Grants permission to enables the specified LoggingConfiguration, to start logging from a web ACL.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "webacl": {
        "resource_type": "webacl",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:CreateServiceLinkedRole"
        ]
    }
}
</code></pre>
<h3 id="putpermissionpolicy"><a aria-hidden="true" class="anchor-heading" href="#putpermissionpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutPermissionPolicy</h3>
<ul>
<li>description: Grants permission to attach the specified IAM policy to the specified resource. The only supported use for this action is to share a RuleGroup across accounts.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "rulegroup": {
        "resource_type": "rulegroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Grants permission to associates tags with the specified AWS resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ipset": {
        "resource_type": "ipset",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "regexpatternset": {
        "resource_type": "regexpatternset",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "rulegroup": {
        "resource_type": "rulegroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "webacl": {
        "resource_type": "webacl",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys",
            "aws:RequestTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Grants permission to disassociates tags from an AWS resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ipset": {
        "resource_type": "ipset",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "regexpatternset": {
        "resource_type": "regexpatternset",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "rulegroup": {
        "resource_type": "rulegroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "webacl": {
        "resource_type": "webacl",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateipset"><a aria-hidden="true" class="anchor-heading" href="#updateipset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateIPSet</h3>
<ul>
<li>description: Grants permission to update the specified IPSet.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ipset": {
        "resource_type": "ipset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateregexpatternset"><a aria-hidden="true" class="anchor-heading" href="#updateregexpatternset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateRegexPatternSet</h3>
<ul>
<li>description: Grants permission to update the specified RegexPatternSet.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "regexpatternset": {
        "resource_type": "regexpatternset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updaterulegroup"><a aria-hidden="true" class="anchor-heading" href="#updaterulegroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateRuleGroup</h3>
<ul>
<li>description: Grants permission to update the specified RuleGroup.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "rulegroup": {
        "resource_type": "rulegroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatewebacl"><a aria-hidden="true" class="anchor-heading" href="#updatewebacl"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateWebACL</h3>
<ul>
<li>description: Grants permission to update the specified WebACL.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "webacl": {
        "resource_type": "webacl",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-WAF V2"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Alexa for Business.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Alexa for Business - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Alexa for Business.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Alexa for Business.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Alexa for Business.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Alexa for Business - undefined" />
  <meta name="twitter:title" content="Alexa for Business - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Alexa for Business</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Alexa for Business">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="alexa-for-business"><a aria-hidden="true" class="anchor-heading" href="#alexa-for-business"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Alexa for Business</h1>
<ul>
<li>prefix: a4b</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="approveskill"><a aria-hidden="true" class="anchor-heading" href="#approveskill"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ApproveSkill</h3>
<ul>
<li>description: Associates a skill with the organization under the customer's AWS account. If a skill is private, the user implicitly accepts access to this skill during enablement.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="associatecontactwithaddressbook"><a aria-hidden="true" class="anchor-heading" href="#associatecontactwithaddressbook"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateContactWithAddressBook</h3>
<ul>
<li>description: Associates a contact with a given address book.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "addressbook": {
        "resource_type": "addressbook",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "contact": {
        "resource_type": "contact",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="associatedevicewithroom"><a aria-hidden="true" class="anchor-heading" href="#associatedevicewithroom"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateDeviceWithRoom</h3>
<ul>
<li>description: Associates device with given room.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "device": {
        "resource_type": "device",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "room": {
        "resource_type": "room",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="associateskillgroupwithroom"><a aria-hidden="true" class="anchor-heading" href="#associateskillgroupwithroom"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateSkillGroupWithRoom</h3>
<ul>
<li>description: Associates the skill group with given room. SkillGroup ARN and Room ARN must be specified.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "room": {
        "resource_type": "room",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "skillgroup": {
        "resource_type": "skillgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="associateskillwithskillgroup"><a aria-hidden="true" class="anchor-heading" href="#associateskillwithskillgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateSkillWithSkillGroup</h3>
<ul>
<li>description: Associates a skill with a skill group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "skillgroup": {
        "resource_type": "skillgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="associateskillwithusers"><a aria-hidden="true" class="anchor-heading" href="#associateskillwithusers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateSkillWithUsers</h3>
<ul>
<li>description: Makes a private skill available for enrolled users to enable on their devices.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="completeregistration"><a aria-hidden="true" class="anchor-heading" href="#completeregistration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CompleteRegistration</h3>
<ul>
<li>description: Completes the operation of registering an Alexa device.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createaddressbook"><a aria-hidden="true" class="anchor-heading" href="#createaddressbook"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateAddressBook</h3>
<ul>
<li>description: Creates an address book with the specified details.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createbusinessreportschedule"><a aria-hidden="true" class="anchor-heading" href="#createbusinessreportschedule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateBusinessReportSchedule</h3>
<ul>
<li>description: Creates a recurring schedule for usage reports to deliver to the specified S3 location with a specified daily or weekly interval.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createconferenceprovider"><a aria-hidden="true" class="anchor-heading" href="#createconferenceprovider"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateConferenceProvider</h3>
<ul>
<li>description: Adds a new conference provider under the user's AWS account.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createcontact"><a aria-hidden="true" class="anchor-heading" href="#createcontact"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateContact</h3>
<ul>
<li>description: Creates a contact with the specified details.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createprofile"><a aria-hidden="true" class="anchor-heading" href="#createprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateProfile</h3>
<ul>
<li>description: Creates a new profile.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createroom"><a aria-hidden="true" class="anchor-heading" href="#createroom"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateRoom</h3>
<ul>
<li>description: Create room with the specified details.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "profile": {
        "resource_type": "profile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createskillgroup"><a aria-hidden="true" class="anchor-heading" href="#createskillgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSkillGroup</h3>
<ul>
<li>description: Creates a skill group with given name and description.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createuser"><a aria-hidden="true" class="anchor-heading" href="#createuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateUser</h3>
<ul>
<li>description: Creates a user.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteaddressbook"><a aria-hidden="true" class="anchor-heading" href="#deleteaddressbook"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAddressBook</h3>
<ul>
<li>description: Deletes an address book by the address book ARN.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "addressbook": {
        "resource_type": "addressbook",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletebusinessreportschedule"><a aria-hidden="true" class="anchor-heading" href="#deletebusinessreportschedule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteBusinessReportSchedule</h3>
<ul>
<li>description: Deletes the recurring report delivery schedule with the specified schedule ARN.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "schedule": {
        "resource_type": "schedule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteconferenceprovider"><a aria-hidden="true" class="anchor-heading" href="#deleteconferenceprovider"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteConferenceProvider</h3>
<ul>
<li>description: Deletes a conference provider.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "conferenceprovider": {
        "resource_type": "conferenceprovider",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletecontact"><a aria-hidden="true" class="anchor-heading" href="#deletecontact"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteContact</h3>
<ul>
<li>description: Deletes a contact by the contact ARN.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "contact": {
        "resource_type": "contact",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedevice"><a aria-hidden="true" class="anchor-heading" href="#deletedevice"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDevice</h3>
<ul>
<li>description: Removes a device from Alexa For Business.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "device": {
        "resource_type": "device",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteprofile"><a aria-hidden="true" class="anchor-heading" href="#deleteprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteProfile</h3>
<ul>
<li>description: Delete profile by profile ARN.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "profile": {
        "resource_type": "profile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteroom"><a aria-hidden="true" class="anchor-heading" href="#deleteroom"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteRoom</h3>
<ul>
<li>description: Delete room.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "room": {
        "resource_type": "room",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteroomskillparameter"><a aria-hidden="true" class="anchor-heading" href="#deleteroomskillparameter"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteRoomSkillParameter</h3>
<ul>
<li>description: Delete a parameter from a skill and room.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "room": {
        "resource_type": "room",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteskillauthorization"><a aria-hidden="true" class="anchor-heading" href="#deleteskillauthorization"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteSkillAuthorization</h3>
<ul>
<li>description: Unlinks a third-party account from a skill.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "room": {
        "resource_type": "room",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteskillgroup"><a aria-hidden="true" class="anchor-heading" href="#deleteskillgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteSkillGroup</h3>
<ul>
<li>description: Deletes skill group with skill group ARN. Skillgroup ARN must be specified.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "skillgroup": {
        "resource_type": "skillgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteuser"><a aria-hidden="true" class="anchor-heading" href="#deleteuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteUser</h3>
<ul>
<li>description: Delete a user.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociatecontactfromaddressbook"><a aria-hidden="true" class="anchor-heading" href="#disassociatecontactfromaddressbook"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateContactFromAddressBook</h3>
<ul>
<li>description: Disassociates a contact from a given address book.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "addressbook": {
        "resource_type": "addressbook",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "contact": {
        "resource_type": "contact",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociatedevicefromroom"><a aria-hidden="true" class="anchor-heading" href="#disassociatedevicefromroom"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateDeviceFromRoom</h3>
<ul>
<li>description: Disassociates device from its current room.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "device": {
        "resource_type": "device",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociateskillfromskillgroup"><a aria-hidden="true" class="anchor-heading" href="#disassociateskillfromskillgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateSkillFromSkillGroup</h3>
<ul>
<li>description: Disassociates a skill from a skill group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "skillgroup": {
        "resource_type": "skillgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociateskillfromusers"><a aria-hidden="true" class="anchor-heading" href="#disassociateskillfromusers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateSkillFromUsers</h3>
<ul>
<li>description: Makes a private skill unavailable for enrolled users and prevents them from enabling it on their devices.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociateskillgroupfromroom"><a aria-hidden="true" class="anchor-heading" href="#disassociateskillgroupfromroom"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateSkillGroupFromRoom</h3>
<ul>
<li>description: Disassociates the skill group from given room. SkillGroup ARN and Room ARN must be specified.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "room": {
        "resource_type": "room",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "skillgroup": {
        "resource_type": "skillgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="forgetsmarthomeappliances"><a aria-hidden="true" class="anchor-heading" href="#forgetsmarthomeappliances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ForgetSmartHomeAppliances</h3>
<ul>
<li>description: Forgets smart home appliances associated to a room.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "room": {
        "resource_type": "room",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getaddressbook"><a aria-hidden="true" class="anchor-heading" href="#getaddressbook"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAddressBook</h3>
<ul>
<li>description: Gets the address book details by the address book ARN.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "addressbook": {
        "resource_type": "addressbook",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getconferencepreference"><a aria-hidden="true" class="anchor-heading" href="#getconferencepreference"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetConferencePreference</h3>
<ul>
<li>description: Retrieves the existing conference preferences.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getconferenceprovider"><a aria-hidden="true" class="anchor-heading" href="#getconferenceprovider"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetConferenceProvider</h3>
<ul>
<li>description: Gets details about a specific conference provider.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "conferenceprovider": {
        "resource_type": "conferenceprovider",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcontact"><a aria-hidden="true" class="anchor-heading" href="#getcontact"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetContact</h3>
<ul>
<li>description: Gets the contact details by the contact ARN.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "contact": {
        "resource_type": "contact",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdevice"><a aria-hidden="true" class="anchor-heading" href="#getdevice"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDevice</h3>
<ul>
<li>description: Get device details.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "device": {
        "resource_type": "device",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getnetworkprofile"><a aria-hidden="true" class="anchor-heading" href="#getnetworkprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetNetworkProfile</h3>
<ul>
<li>description: Gets the network profile details by the network profile ARN.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "networkprofile": {
        "resource_type": "networkprofile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getprofile"><a aria-hidden="true" class="anchor-heading" href="#getprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetProfile</h3>
<ul>
<li>description: Gets profile when provided with Profile ARN.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "profile": {
        "resource_type": "profile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getroom"><a aria-hidden="true" class="anchor-heading" href="#getroom"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRoom</h3>
<ul>
<li>description: Get room details.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "room": {
        "resource_type": "room",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getroomskillparameter"><a aria-hidden="true" class="anchor-heading" href="#getroomskillparameter"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRoomSkillParameter</h3>
<ul>
<li>description: Get an existing parameter that has been set for a skill and room.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "room": {
        "resource_type": "room",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getskillgroup"><a aria-hidden="true" class="anchor-heading" href="#getskillgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSkillGroup</h3>
<ul>
<li>description: Gets skill group details with skill group ARN. Skillgroup ARN must be specified.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "skillgroup": {
        "resource_type": "skillgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listbusinessreportschedules"><a aria-hidden="true" class="anchor-heading" href="#listbusinessreportschedules"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListBusinessReportSchedules</h3>
<ul>
<li>description: Lists the details of the schedules that a user configured.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listconferenceproviders"><a aria-hidden="true" class="anchor-heading" href="#listconferenceproviders"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListConferenceProviders</h3>
<ul>
<li>description: Lists conference providers under a specific AWS account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdeviceevents"><a aria-hidden="true" class="anchor-heading" href="#listdeviceevents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDeviceEvents</h3>
<ul>
<li>description: Lists the device event history, including device connection status, for up to 30 days.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "device": {
        "resource_type": "device",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listskills"><a aria-hidden="true" class="anchor-heading" href="#listskills"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListSkills</h3>
<ul>
<li>description: Lists skills.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listskillsstorecategories"><a aria-hidden="true" class="anchor-heading" href="#listskillsstorecategories"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListSkillsStoreCategories</h3>
<ul>
<li>description: Lists all categories in the Alexa skill store.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listskillsstoreskillsbycategory"><a aria-hidden="true" class="anchor-heading" href="#listskillsstoreskillsbycategory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListSkillsStoreSkillsByCategory</h3>
<ul>
<li>description: Lists all skills in the Alexa skill store by category.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listsmarthomeappliances"><a aria-hidden="true" class="anchor-heading" href="#listsmarthomeappliances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListSmartHomeAppliances</h3>
<ul>
<li>description: Lists all of the smart home appliances associated with a room.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "room": {
        "resource_type": "room",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtags"><a aria-hidden="true" class="anchor-heading" href="#listtags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTags</h3>
<ul>
<li>description: Lists all tags on a resource.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "device": {
        "resource_type": "device",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "room": {
        "resource_type": "room",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "user": {
        "resource_type": "user",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putconferencepreference"><a aria-hidden="true" class="anchor-heading" href="#putconferencepreference"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutConferencePreference</h3>
<ul>
<li>description: Sets the conference preferences on a specific conference provider at the account level.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putdevicesetupevents"><a aria-hidden="true" class="anchor-heading" href="#putdevicesetupevents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutDeviceSetupEvents</h3>
<ul>
<li>description: Publishes Alexa device setup events.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putroomskillparameter"><a aria-hidden="true" class="anchor-heading" href="#putroomskillparameter"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutRoomSkillParameter</h3>
<ul>
<li>description: Put a room specific parameter for a skill.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "room": {
        "resource_type": "room",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putskillauthorization"><a aria-hidden="true" class="anchor-heading" href="#putskillauthorization"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutSkillAuthorization</h3>
<ul>
<li>description: Links a user's account to a third-party skill provider. If this API operation is called by an assumed IAM role, the skill being linked must be a private skill. Also, the skill must be owned by the AWS account that assumed the IAM role.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "room": {
        "resource_type": "room",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registeravsdevice"><a aria-hidden="true" class="anchor-heading" href="#registeravsdevice"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterAVSDevice</h3>
<ul>
<li>description: Registers an Alexa-enabled device built by an Original Equipment Manufacturer (OEM) using Alexa Voice Service (AVS).</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registerdevice"><a aria-hidden="true" class="anchor-heading" href="#registerdevice"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterDevice</h3>
<ul>
<li>description: Registers an Alexa device.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="rejectskill"><a aria-hidden="true" class="anchor-heading" href="#rejectskill"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RejectSkill</h3>
<ul>
<li>description: Disassociates a skill from the organization under a user's AWS account. If the skill is a private skill, it moves to an AcceptStatus of PENDING.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="resolveroom"><a aria-hidden="true" class="anchor-heading" href="#resolveroom"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ResolveRoom</h3>
<ul>
<li>description: Returns resolved room information.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="revokeinvitation"><a aria-hidden="true" class="anchor-heading" href="#revokeinvitation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RevokeInvitation</h3>
<ul>
<li>description: Revoke an invitation.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="searchaddressbooks"><a aria-hidden="true" class="anchor-heading" href="#searchaddressbooks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SearchAddressBooks</h3>
<ul>
<li>description: Searches address books and lists the ones that meet a set of filter and sort criteria.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="searchcontacts"><a aria-hidden="true" class="anchor-heading" href="#searchcontacts"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SearchContacts</h3>
<ul>
<li>description: Searches contacts and lists the ones that meet a set of filter and sort criteria.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="searchdevices"><a aria-hidden="true" class="anchor-heading" href="#searchdevices"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SearchDevices</h3>
<ul>
<li>description: Search for devices.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="searchnetworkprofiles"><a aria-hidden="true" class="anchor-heading" href="#searchnetworkprofiles"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SearchNetworkProfiles</h3>
<ul>
<li>description: Searches network profiles and lists the ones that meet a set of filter and sort criteria.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="searchprofiles"><a aria-hidden="true" class="anchor-heading" href="#searchprofiles"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SearchProfiles</h3>
<ul>
<li>description: Search for profiles.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="searchrooms"><a aria-hidden="true" class="anchor-heading" href="#searchrooms"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SearchRooms</h3>
<ul>
<li>description: Search for rooms.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="searchskillgroups"><a aria-hidden="true" class="anchor-heading" href="#searchskillgroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SearchSkillGroups</h3>
<ul>
<li>description: Search for skill groups.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="searchusers"><a aria-hidden="true" class="anchor-heading" href="#searchusers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SearchUsers</h3>
<ul>
<li>description: Search for users.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="sendinvitation"><a aria-hidden="true" class="anchor-heading" href="#sendinvitation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SendInvitation</h3>
<ul>
<li>description: Send an invitation to a user.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startdevicesync"><a aria-hidden="true" class="anchor-heading" href="#startdevicesync"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartDeviceSync</h3>
<ul>
<li>description: Restore the device and its account to its known, default settings by clearing all information and settings set by its previous users.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startsmarthomeappliancediscovery"><a aria-hidden="true" class="anchor-heading" href="#startsmarthomeappliancediscovery"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartSmartHomeApplianceDiscovery</h3>
<ul>
<li>description: Initiates the discovery of any smart home appliances associated with the room.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "room": {
        "resource_type": "room",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Adds metadata tags to a resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "device": {
        "resource_type": "device",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "room": {
        "resource_type": "room",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "user": {
        "resource_type": "user",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Removes metadata tags from a resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "device": {
        "resource_type": "device",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "room": {
        "resource_type": "room",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "user": {
        "resource_type": "user",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateaddressbook"><a aria-hidden="true" class="anchor-heading" href="#updateaddressbook"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateAddressBook</h3>
<ul>
<li>description: Updates address book details by the address book ARN.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "addressbook": {
        "resource_type": "addressbook",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatebusinessreportschedule"><a aria-hidden="true" class="anchor-heading" href="#updatebusinessreportschedule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateBusinessReportSchedule</h3>
<ul>
<li>description: Updates the configuration of the report delivery schedule with the specified schedule ARN.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "schedule": {
        "resource_type": "schedule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateconferenceprovider"><a aria-hidden="true" class="anchor-heading" href="#updateconferenceprovider"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateConferenceProvider</h3>
<ul>
<li>description: Updates an existing conference provider's settings.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "conferenceprovider": {
        "resource_type": "conferenceprovider",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatecontact"><a aria-hidden="true" class="anchor-heading" href="#updatecontact"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateContact</h3>
<ul>
<li>description: Updates the contact details by the contact ARN.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "contact": {
        "resource_type": "contact",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatedevice"><a aria-hidden="true" class="anchor-heading" href="#updatedevice"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateDevice</h3>
<ul>
<li>description: Updates device name.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "device": {
        "resource_type": "device",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateprofile"><a aria-hidden="true" class="anchor-heading" href="#updateprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateProfile</h3>
<ul>
<li>description: Updates an existing profile.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "profile": {
        "resource_type": "profile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateroom"><a aria-hidden="true" class="anchor-heading" href="#updateroom"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateRoom</h3>
<ul>
<li>description: Update room details.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "room": {
        "resource_type": "room",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateskillgroup"><a aria-hidden="true" class="anchor-heading" href="#updateskillgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateSkillGroup</h3>
<ul>
<li>description: Updates skill group details with skill group ARN. Skillgroup ARN must be specified.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "skillgroup": {
        "resource_type": "skillgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Alexa for Business"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/key-management-service.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Key Management Service - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/key-management-service.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/key-management-service.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/key-management-service.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Key Management Service - undefined" />
  <meta name="twitter:title" content="Key Management Service - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/1f759d8c-cca7-4fc4-9aa2-6dbf6e596abf.html">Services</a></li><li class="breadcrumb-nav-list-item">Key Management Service</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/open-guides/og-aws" target="_blank"> og-aws  </li>
              
              <li> <a href="https://www.awsgeek.com/" target="_blank"> <NAME>  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Key Management Service">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <p><img src="/assets/images/AWS-KMS_en.jpg"></p>
<blockquote>
<p>Image from <a href="https://www.awsgeek.com/AWS-KMS/">@awsgeek</a></p>
</blockquote>
<h1 id="key-management-service"><a aria-hidden="true" class="anchor-heading" href="#key-management-service"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Key Management Service</h1>
<h3 id="kms-basics"><a aria-hidden="true" class="anchor-heading" href="#kms-basics"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>KMS Basics</h3>
<ul>
<li>📒 <a href="https://aws.amazon.com/kms/">Homepage</a> ∙ <a href="http://docs.aws.amazon.com/kms/latest/developerguide/">Developer guide</a> ∙ <a href="https://aws.amazon.com/kms/faqs/">FAQ</a> ∙ <a href="https://aws.amazon.com/kms/pricing/">Pricing</a></li>
<li><strong>KMS</strong> (Key Management Service) is a secure service for creating, storing and auditing usage of cryptographic keys.</li>
<li><strong>Service integration:</strong> KMS <a href="http://docs.aws.amazon.com/kms/latest/developerguide/service-integration.html">integrates with other AWS services</a>: EBS, Elastic Transcoder, EMR, Redshift, RDS, SES, S3, WorkMail and Workspaces.</li>
<li><strong>Encryption APIs:</strong> The <a href="http://docs.aws.amazon.com/kms/latest/APIReference/API_Encrypt.html">Encrypt</a> and <a href="http://docs.aws.amazon.com/kms/latest/APIReference/API_Decrypt.html">Decrypt API</a> allow you to encrypt and decrypt data on the KMS service side, never exposing the master key contents.</li>
<li><strong>Data keys:</strong> The <a href="http://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#data-keys">GenerateDataKey</a> API generates a new key off of a master key. The data key contents are exposed to you so you can use it to encrypt and decrypt any size of data in your application layer. KMS does not store, manage or track data keys, you are responsible for this in your application.</li>
<li>🔹<strong>Auditing:</strong> Turn on CloudTrail to audit all KMS API events.</li>
<li><strong>Access:</strong> Use <a href="http://docs.aws.amazon.com/kms/latest/developerguide/key-policies.html">key policies</a> and <a href="http://docs.aws.amazon.com/kms/latest/developerguide/iam-policies.html">IAM policies</a> to grant different levels of KMS access. For example, you create an IAM policy that only <a href="http://docs.aws.amazon.com/kms/latest/developerguide/iam-policies.html#iam-policy-example-encrypt-decrypt-specific-cmks">allows a user to encrypt and decrypt with a specific key</a>.</li>
</ul>
<h3 id="kms-tips"><a aria-hidden="true" class="anchor-heading" href="#kms-tips"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>KMS Tips</h3>
<ul>
<li>🔹It’s very common for companies to manage keys completely via home-grown mechanisms, but it’s far preferable to use a service such as KMS from the beginning, as it encourages more secure design and improves policies and processes around managing keys.</li>
<li>A good motivation and overview is in <a href="http://www.slideshare.net/AmazonWebServices/encryption-and-key-management-in-aws">this AWS presentation</a>.</li>
<li>The cryptographic details are in <a href="https://d0.awsstatic.com/whitepapers/KMS-Cryptographic-Details.pdf">this AWS whitepaper</a>.</li>
<li><a href="https://convox.com/blog/encryption-at-rest">This blog from Convox</a> demonstrates why and how to use KMS for encryption at rest.</li>
</ul>
<h3 id="kms-gotchas-and-limitations"><a aria-hidden="true" class="anchor-heading" href="#kms-gotchas-and-limitations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>KMS Gotchas and Limitations</h3>
<ul>
<li>🔸The Encrypt API only works with &#x3C; 4KB of data. Larger data requires generating and managing a <a href="http://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#data-keys">data key</a> in your application layer.</li>
<li>🔸KMS audit events are not available in the <a href="http://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_LookupEvents.html">CloudTrail Lookup Events API</a>. You need to look find them in the raw .json.gz files that CloudTrail saves in S3.</li>
<li>🔸In order to encrypt a multi-part upload to S3, the KMS Key Policy needs to allow “kms:Decrypt” and “kms:GenerateDataKey*” in addition to “kms:Encrypt”, otherwise the upload will fail with an “AccessDenied” error.</li>
<li>🔸KMS keys are region specific — they are stored and can only be used in the region in which they are created. They can't be transferred to other regions.</li>
<li>🔸KMS keys have a key policy that must grant access to something to manage the key.  If you don't grant anything access to the key on creation, then you have to reach out to support to have the key policy reset <a href="https://docs.aws.amazon.com/kms/latest/developerguide/key-policies.html#key-policy-default-allow-root-enable-iam">Reduce the Risk of the Key Becoming Unmanagable</a>.</li>
<li>🔸If you use a key policy to grant access to IAM roles or users and then delete the user/role, recreating the user or role won't grant them permission to the key again.</li>
</ul><span id="navId" data="key-management-service"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Cost Explorer Service.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Cost Explorer Service - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Cost Explorer Service.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Cost Explorer Service.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Cost Explorer Service.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Cost Explorer Service - undefined" />
  <meta name="twitter:title" content="Cost Explorer Service - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Cost Explorer Service</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Cost Explorer Service">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="cost-explorer-service"><a aria-hidden="true" class="anchor-heading" href="#cost-explorer-service"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Cost Explorer Service</h1>
<ul>
<li>prefix: ce</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="createanomalymonitor"><a aria-hidden="true" class="anchor-heading" href="#createanomalymonitor"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateAnomalyMonitor</h3>
<ul>
<li>description: Grants permission to create a new Anomaly Monitor</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createanomalysubscription"><a aria-hidden="true" class="anchor-heading" href="#createanomalysubscription"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateAnomalySubscription</h3>
<ul>
<li>description: Grants permission to create a new Anomaly Subscription</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createcostcategorydefinition"><a aria-hidden="true" class="anchor-heading" href="#createcostcategorydefinition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateCostCategoryDefinition</h3>
<ul>
<li>description: Grants permission to create a new Cost Category with the requested name and rules</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createnotificationsubscription"><a aria-hidden="true" class="anchor-heading" href="#createnotificationsubscription"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateNotificationSubscription</h3>
<ul>
<li>description: Grants permission to create Reservation expiration alerts</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createreport"><a aria-hidden="true" class="anchor-heading" href="#createreport"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateReport</h3>
<ul>
<li>description: Grants permission to create Cost Explorer Reports</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteanomalymonitor"><a aria-hidden="true" class="anchor-heading" href="#deleteanomalymonitor"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAnomalyMonitor</h3>
<ul>
<li>description: Grants permission to delete an Anomaly Monitor</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteanomalysubscription"><a aria-hidden="true" class="anchor-heading" href="#deleteanomalysubscription"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAnomalySubscription</h3>
<ul>
<li>description: Grants permission to delete an Anomaly Subscription</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletecostcategorydefinition"><a aria-hidden="true" class="anchor-heading" href="#deletecostcategorydefinition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteCostCategoryDefinition</h3>
<ul>
<li>description: Grants permission to delete a Cost Category</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletenotificationsubscription"><a aria-hidden="true" class="anchor-heading" href="#deletenotificationsubscription"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteNotificationSubscription</h3>
<ul>
<li>description: Grants permission to delete Reservation expiration alerts</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletereport"><a aria-hidden="true" class="anchor-heading" href="#deletereport"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteReport</h3>
<ul>
<li>description: Grants permission to delete Cost Explorer Reports</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecostcategorydefinition"><a aria-hidden="true" class="anchor-heading" href="#describecostcategorydefinition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeCostCategoryDefinition</h3>
<ul>
<li>description: Grants permission to retrieve descriptions such as the name, ARN, rules, definition, and effective dates of a Cost Category</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describenotificationsubscription"><a aria-hidden="true" class="anchor-heading" href="#describenotificationsubscription"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeNotificationSubscription</h3>
<ul>
<li>description: Grants permission to view Reservation expiration alerts</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describereport"><a aria-hidden="true" class="anchor-heading" href="#describereport"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeReport</h3>
<ul>
<li>description: Grants permission to view Cost Explorer Reports page</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getanomalies"><a aria-hidden="true" class="anchor-heading" href="#getanomalies"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAnomalies</h3>
<ul>
<li>description: Grants permission to retrieve anomalies</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getanomalymonitors"><a aria-hidden="true" class="anchor-heading" href="#getanomalymonitors"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAnomalyMonitors</h3>
<ul>
<li>description: Grants permission to query Anomaly Monitors</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getanomalysubscriptions"><a aria-hidden="true" class="anchor-heading" href="#getanomalysubscriptions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAnomalySubscriptions</h3>
<ul>
<li>description: Grants permission to query Anomaly Subscriptions</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcostandusage"><a aria-hidden="true" class="anchor-heading" href="#getcostandusage"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCostAndUsage</h3>
<ul>
<li>description: Grants permission to retrieve the cost and usage metrics for your account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcostandusagewithresources"><a aria-hidden="true" class="anchor-heading" href="#getcostandusagewithresources"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCostAndUsageWithResources</h3>
<ul>
<li>description: Grants permission to retrieve the cost and usage metrics with resources for your account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcostforecast"><a aria-hidden="true" class="anchor-heading" href="#getcostforecast"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCostForecast</h3>
<ul>
<li>description: Grants permission to retrieve a cost forecast for a forecast time period</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdimensionvalues"><a aria-hidden="true" class="anchor-heading" href="#getdimensionvalues"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDimensionValues</h3>
<ul>
<li>description: Grants permission to retrieve all available filter values for a filter for a period of time</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getpreferences"><a aria-hidden="true" class="anchor-heading" href="#getpreferences"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetPreferences</h3>
<ul>
<li>description: Grants permission to view Cost Explorer Preferences page</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getreservationcoverage"><a aria-hidden="true" class="anchor-heading" href="#getreservationcoverage"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetReservationCoverage</h3>
<ul>
<li>description: Grants permission to retrieve the reservation coverage for your account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getreservationpurchaserecommendation"><a aria-hidden="true" class="anchor-heading" href="#getreservationpurchaserecommendation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetReservationPurchaseRecommendation</h3>
<ul>
<li>description: Grants permission to retrieve the reservation recommendations for your account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getreservationutilization"><a aria-hidden="true" class="anchor-heading" href="#getreservationutilization"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetReservationUtilization</h3>
<ul>
<li>description: Grants permission to retrieve the reservation utilization for your account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getrightsizingrecommendation"><a aria-hidden="true" class="anchor-heading" href="#getrightsizingrecommendation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRightsizingRecommendation</h3>
<ul>
<li>description: Grants permission to retrieve the rightsizing recommendations for your account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsavingsplanscoverage"><a aria-hidden="true" class="anchor-heading" href="#getsavingsplanscoverage"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSavingsPlansCoverage</h3>
<ul>
<li>description: Grants permission to retrieve the Savings Plans coverage for your account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsavingsplanspurchaserecommendation"><a aria-hidden="true" class="anchor-heading" href="#getsavingsplanspurchaserecommendation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSavingsPlansPurchaseRecommendation</h3>
<ul>
<li>description: Grants permission to retrieve the Savings Plans recommendations for your account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsavingsplansutilization"><a aria-hidden="true" class="anchor-heading" href="#getsavingsplansutilization"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSavingsPlansUtilization</h3>
<ul>
<li>description: Grants permission to retrieve the Savings Plans utilization for your account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsavingsplansutilizationdetails"><a aria-hidden="true" class="anchor-heading" href="#getsavingsplansutilizationdetails"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSavingsPlansUtilizationDetails</h3>
<ul>
<li>description: Grants permission to retrieve the Savings Plans utilization details for your account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gettags"><a aria-hidden="true" class="anchor-heading" href="#gettags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetTags</h3>
<ul>
<li>description: Grants permission to query tags for a specified time period</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getusageforecast"><a aria-hidden="true" class="anchor-heading" href="#getusageforecast"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetUsageForecast</h3>
<ul>
<li>description: Grants permission to retrieve a usage forecast for a forecast time period</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listcostcategorydefinitions"><a aria-hidden="true" class="anchor-heading" href="#listcostcategorydefinitions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListCostCategoryDefinitions</h3>
<ul>
<li>description: Grants permission to retrieve names, ARN, and effective dates for all Cost Categories</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="provideanomalyfeedback"><a aria-hidden="true" class="anchor-heading" href="#provideanomalyfeedback"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ProvideAnomalyFeedback</h3>
<ul>
<li>description: Grants permission to provide feedback on detected anomalies</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateanomalymonitor"><a aria-hidden="true" class="anchor-heading" href="#updateanomalymonitor"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateAnomalyMonitor</h3>
<ul>
<li>description: Grants permission to update an existing Anomaly Monitor</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateanomalysubscription"><a aria-hidden="true" class="anchor-heading" href="#updateanomalysubscription"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateAnomalySubscription</h3>
<ul>
<li>description: Grants permission to update an existing Anomaly Subscription</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatecostcategorydefinition"><a aria-hidden="true" class="anchor-heading" href="#updatecostcategorydefinition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateCostCategoryDefinition</h3>
<ul>
<li>description: Grants permission to update an existing Cost Category</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatenotificationsubscription"><a aria-hidden="true" class="anchor-heading" href="#updatenotificationsubscription"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateNotificationSubscription</h3>
<ul>
<li>description: Grants permission to update Reservation expiration alerts</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatepreferences"><a aria-hidden="true" class="anchor-heading" href="#updatepreferences"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdatePreferences</h3>
<ul>
<li>description: Grants permission to edit Cost Explorer Preferences page</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatereport"><a aria-hidden="true" class="anchor-heading" href="#updatereport"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateReport</h3>
<ul>
<li>description: Grants permission to update Cost Explorer Reports</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Cost Explorer Service"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-WAF Regional.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>WAF Regional - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-WAF Regional.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-WAF Regional.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-WAF Regional.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="WAF Regional - undefined" />
  <meta name="twitter:title" content="WAF Regional - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">WAF Regional</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="WAF Regional">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="waf-regional"><a aria-hidden="true" class="anchor-heading" href="#waf-regional"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>WAF Regional</h1>
<ul>
<li>prefix: waf-regional</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="associatewebacl"><a aria-hidden="true" class="anchor-heading" href="#associatewebacl"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateWebACL</h3>
<ul>
<li>description: Associates a WebACL with a resource.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "loadbalancer/app/": {
        "resource_type": "loadbalancer/app/",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "webacl": {
        "resource_type": "webacl",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createbytematchset"><a aria-hidden="true" class="anchor-heading" href="#createbytematchset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateByteMatchSet</h3>
<ul>
<li>description: Creates a ByteMatchSet.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bytematchset": {
        "resource_type": "bytematchset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="creategeomatchset"><a aria-hidden="true" class="anchor-heading" href="#creategeomatchset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateGeoMatchSet</h3>
<ul>
<li>description: Creates a GeoMatchSet, which you use to specify which web requests you want to allow or block based on the country that the requests originate rom.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "geomatchset": {
        "resource_type": "geomatchset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createipset"><a aria-hidden="true" class="anchor-heading" href="#createipset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateIPSet</h3>
<ul>
<li>description: Creates an IPSet, which you use to specify which web requests you want to allow or block based on the IP addresses that the requests originate rom.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ipset": {
        "resource_type": "ipset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createratebasedrule"><a aria-hidden="true" class="anchor-heading" href="#createratebasedrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateRateBasedRule</h3>
<ul>
<li>description: Creates a RateBasedRule, which contains a RateLimit specifying the maximum number of requests that AWS WAF allows from a specified IP address n a five-minute period.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ratebasedrule": {
        "resource_type": "ratebasedrule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createregexmatchset"><a aria-hidden="true" class="anchor-heading" href="#createregexmatchset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateRegexMatchSet</h3>
<ul>
<li>description: Creates a RegexMatchSet, which you use to specify which web requests you want to allow or block based on the regex patterns you specified in a egexPatternSet.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "regexmatchset": {
        "resource_type": "regexmatchset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createregexpatternset"><a aria-hidden="true" class="anchor-heading" href="#createregexpatternset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateRegexPatternSet</h3>
<ul>
<li>description: Creates a RegexPatternSet, which you use to specify the regular expression (regex) pattern that you want AWS WAF to search for.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "regexpatternset": {
        "resource_type": "regexpatternset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createrule"><a aria-hidden="true" class="anchor-heading" href="#createrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateRule</h3>
<ul>
<li>description: Creates a Rule, which contains the IPSet objects, ByteMatchSet objects, and other predicates that identify the requests that you want to lock.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "rule": {
        "resource_type": "rule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createrulegroup"><a aria-hidden="true" class="anchor-heading" href="#createrulegroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateRuleGroup</h3>
<ul>
<li>description: Creates a RuleGroup. A rule group is a collection of predefined rules that you add to a WebACL.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "rulegroup": {
        "resource_type": "rulegroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createsizeconstraintset"><a aria-hidden="true" class="anchor-heading" href="#createsizeconstraintset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSizeConstraintSet</h3>
<ul>
<li>description: Creates a SizeConstraintSet, which you use to identify the part of a web request that you want to check for length.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "sizeconstraintset": {
        "resource_type": "sizeconstraintset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createsqlinjectionmatchset"><a aria-hidden="true" class="anchor-heading" href="#createsqlinjectionmatchset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSqlInjectionMatchSet</h3>
<ul>
<li>description: Creates a SqlInjectionMatchSet, which you use to allow, block, or count requests that contain snippets of SQL code in a specified part of web equests.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "sqlinjectionmatchset": {
        "resource_type": "sqlinjectionmatchset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createwebacl"><a aria-hidden="true" class="anchor-heading" href="#createwebacl"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateWebACL</h3>
<ul>
<li>description: Creates a WebACL, which contains the Rules that identify the CloudFront web requests that you want to allow, block, or count.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "webacl": {
        "resource_type": "webacl",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createwebaclmigrationstack"><a aria-hidden="true" class="anchor-heading" href="#createwebaclmigrationstack"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateWebACLMigrationStack</h3>
<ul>
<li>description: Create and store a CloudFormation tempalte that creates an equivalent WAF v2 WebACL from the given WAF Classic WebACL in the given S3 bucket.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "webacl": {
        "resource_type": "webacl",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "s3:PutObject"
        ]
    }
}
</code></pre>
<h3 id="createxssmatchset"><a aria-hidden="true" class="anchor-heading" href="#createxssmatchset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateXssMatchSet</h3>
<ul>
<li>description: Creates an XssMatchSet, which you use to allow, block, or count requests that contain cross-site scripting attacks in the specified part of web equests.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "xssmatchset": {
        "resource_type": "xssmatchset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletebytematchset"><a aria-hidden="true" class="anchor-heading" href="#deletebytematchset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteByteMatchSet</h3>
<ul>
<li>description: Permanently deletes a ByteMatchSet.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bytematchset": {
        "resource_type": "bytematchset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletegeomatchset"><a aria-hidden="true" class="anchor-heading" href="#deletegeomatchset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteGeoMatchSet</h3>
<ul>
<li>description: Permanently deletes an GeoMatchSet.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "geomatchset": {
        "resource_type": "geomatchset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteipset"><a aria-hidden="true" class="anchor-heading" href="#deleteipset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteIPSet</h3>
<ul>
<li>description: Permanently deletes an IPSet.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ipset": {
        "resource_type": "ipset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteloggingconfiguration"><a aria-hidden="true" class="anchor-heading" href="#deleteloggingconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteLoggingConfiguration</h3>
<ul>
<li>description: Permanently deletes the LoggingConfiguration from the specified web ACL.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "webacl": {
        "resource_type": "webacl",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletepermissionpolicy"><a aria-hidden="true" class="anchor-heading" href="#deletepermissionpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeletePermissionPolicy</h3>
<ul>
<li>description: Permanently deletes an IAM policy from the specified RuleGroup.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "rulegroup": {
        "resource_type": "rulegroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteratebasedrule"><a aria-hidden="true" class="anchor-heading" href="#deleteratebasedrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteRateBasedRule</h3>
<ul>
<li>description: Permanently deletes a RateBasedRule.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ratebasedrule": {
        "resource_type": "ratebasedrule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteregexmatchset"><a aria-hidden="true" class="anchor-heading" href="#deleteregexmatchset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteRegexMatchSet</h3>
<ul>
<li>description: Permanently deletes an RegexMatchSet.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "regexmatchset": {
        "resource_type": "regexmatchset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteregexpatternset"><a aria-hidden="true" class="anchor-heading" href="#deleteregexpatternset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteRegexPatternSet</h3>
<ul>
<li>description: Permanently deletes an RegexPatternSet.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "regexpatternset": {
        "resource_type": "regexpatternset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleterule"><a aria-hidden="true" class="anchor-heading" href="#deleterule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteRule</h3>
<ul>
<li>description: Permanently deletes a Rule.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "rule": {
        "resource_type": "rule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleterulegroup"><a aria-hidden="true" class="anchor-heading" href="#deleterulegroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteRuleGroup</h3>
<ul>
<li>description: Permanently deletes a RuleGroup.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "rulegroup": {
        "resource_type": "rulegroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletesizeconstraintset"><a aria-hidden="true" class="anchor-heading" href="#deletesizeconstraintset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteSizeConstraintSet</h3>
<ul>
<li>description: Permanently deletes a SizeConstraintSet.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "sizeconstraintset": {
        "resource_type": "sizeconstraintset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletesqlinjectionmatchset"><a aria-hidden="true" class="anchor-heading" href="#deletesqlinjectionmatchset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteSqlInjectionMatchSet</h3>
<ul>
<li>description: Permanently deletes a SqlInjectionMatchSet.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "sqlinjectionmatchset": {
        "resource_type": "sqlinjectionmatchset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletewebacl"><a aria-hidden="true" class="anchor-heading" href="#deletewebacl"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteWebACL</h3>
<ul>
<li>description: Permanently deletes a WebACL.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "webacl": {
        "resource_type": "webacl",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletexssmatchset"><a aria-hidden="true" class="anchor-heading" href="#deletexssmatchset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteXssMatchSet</h3>
<ul>
<li>description: Permanently deletes an XssMatchSet.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "xssmatchset": {
        "resource_type": "xssmatchset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociatewebacl"><a aria-hidden="true" class="anchor-heading" href="#disassociatewebacl"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateWebACL</h3>
<ul>
<li>description: Removes a WebACL from the specified resource.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "loadbalancer/app/": {
        "resource_type": "loadbalancer/app/",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbytematchset"><a aria-hidden="true" class="anchor-heading" href="#getbytematchset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetByteMatchSet</h3>
<ul>
<li>description: Returns the ByteMatchSet specified by ByteMatchSetId.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bytematchset": {
        "resource_type": "bytematchset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getchangetoken"><a aria-hidden="true" class="anchor-heading" href="#getchangetoken"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetChangeToken</h3>
<ul>
<li>description: When you want to create, update, or delete AWS WAF objects, get a change token and include the change token in the create, update, or delete equest.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getchangetokenstatus"><a aria-hidden="true" class="anchor-heading" href="#getchangetokenstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetChangeTokenStatus</h3>
<ul>
<li>description: Returns the status of a ChangeToken that you got by calling GetChangeToken.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getgeomatchset"><a aria-hidden="true" class="anchor-heading" href="#getgeomatchset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetGeoMatchSet</h3>
<ul>
<li>description: Returns the GeoMatchSet specified by GeoMatchSetId.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "geomatchset": {
        "resource_type": "geomatchset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getipset"><a aria-hidden="true" class="anchor-heading" href="#getipset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetIPSet</h3>
<ul>
<li>description: Returns the IPSet that is specified by IPSetId.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ipset": {
        "resource_type": "ipset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getloggingconfiguration"><a aria-hidden="true" class="anchor-heading" href="#getloggingconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetLoggingConfiguration</h3>
<ul>
<li>description: Returns the LoggingConfiguration for the specified web ACL.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "webacl": {
        "resource_type": "webacl",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getpermissionpolicy"><a aria-hidden="true" class="anchor-heading" href="#getpermissionpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetPermissionPolicy</h3>
<ul>
<li>description: Returns the IAM policy attached to the RuleGroup.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "rulegroup": {
        "resource_type": "rulegroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getratebasedrule"><a aria-hidden="true" class="anchor-heading" href="#getratebasedrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRateBasedRule</h3>
<ul>
<li>description: Returns the RateBasedRule that is specified by the RuleId that you included in the GetRateBasedRule request.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ratebasedrule": {
        "resource_type": "ratebasedrule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getratebasedrulemanagedkeys"><a aria-hidden="true" class="anchor-heading" href="#getratebasedrulemanagedkeys"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRateBasedRuleManagedKeys</h3>
<ul>
<li>description: Returns an array of IP addresses currently being blocked by the RateBasedRule that is specified by the RuleId.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ratebasedrule": {
        "resource_type": "ratebasedrule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getregexmatchset"><a aria-hidden="true" class="anchor-heading" href="#getregexmatchset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRegexMatchSet</h3>
<ul>
<li>description: Returns the RegexMatchSet specified by RegexMatchSetId.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "regexmatchset": {
        "resource_type": "regexmatchset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getregexpatternset"><a aria-hidden="true" class="anchor-heading" href="#getregexpatternset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRegexPatternSet</h3>
<ul>
<li>description: Returns the RegexPatternSet specified by RegexPatternSetId.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "regexpatternset": {
        "resource_type": "regexpatternset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getrule"><a aria-hidden="true" class="anchor-heading" href="#getrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRule</h3>
<ul>
<li>description: Returns the Rule that is specified by the RuleId that you included in the GetRule request.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "rule": {
        "resource_type": "rule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getrulegroup"><a aria-hidden="true" class="anchor-heading" href="#getrulegroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRuleGroup</h3>
<ul>
<li>description: Returns the RuleGroup that is specified by the RuleGroupId that you included in the GetRuleGroup request.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "rulegroup": {
        "resource_type": "rulegroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsampledrequests"><a aria-hidden="true" class="anchor-heading" href="#getsampledrequests"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSampledRequests</h3>
<ul>
<li>description: Gets detailed information about a specified number of requests--a sample--that AWS WAF randomly selects from among the first 5,000 requests hat your AWS resource received during a time range that you choose.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "rule": {
        "resource_type": "rule",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "webacl": {
        "resource_type": "webacl",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsizeconstraintset"><a aria-hidden="true" class="anchor-heading" href="#getsizeconstraintset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSizeConstraintSet</h3>
<ul>
<li>description: Returns the SizeConstraintSet specified by SizeConstraintSetId.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "sizeconstraintset": {
        "resource_type": "sizeconstraintset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsqlinjectionmatchset"><a aria-hidden="true" class="anchor-heading" href="#getsqlinjectionmatchset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSqlInjectionMatchSet</h3>
<ul>
<li>description: Returns the SqlInjectionMatchSet that is specified by SqlInjectionMatchSetId.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "sqlinjectionmatchset": {
        "resource_type": "sqlinjectionmatchset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getwebacl"><a aria-hidden="true" class="anchor-heading" href="#getwebacl"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetWebACL</h3>
<ul>
<li>description: Returns the WebACL that is specified by WebACLId.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "webacl": {
        "resource_type": "webacl",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getwebaclforresource"><a aria-hidden="true" class="anchor-heading" href="#getwebaclforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetWebACLForResource</h3>
<ul>
<li>description: Returns the WebACL for the specified resource.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "loadbalancer/app/": {
        "resource_type": "loadbalancer/app/",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getxssmatchset"><a aria-hidden="true" class="anchor-heading" href="#getxssmatchset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetXssMatchSet</h3>
<ul>
<li>description: Returns the XssMatchSet that is specified by XssMatchSetId.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "xssmatchset": {
        "resource_type": "xssmatchset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listactivatedrulesinrulegroup"><a aria-hidden="true" class="anchor-heading" href="#listactivatedrulesinrulegroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListActivatedRulesInRuleGroup</h3>
<ul>
<li>description: Returns an array of ActivatedRule objects.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listbytematchsets"><a aria-hidden="true" class="anchor-heading" href="#listbytematchsets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListByteMatchSets</h3>
<ul>
<li>description: Returns an array of ByteMatchSetSummary objects.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listgeomatchsets"><a aria-hidden="true" class="anchor-heading" href="#listgeomatchsets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListGeoMatchSets</h3>
<ul>
<li>description: Returns an array of GeoMatchSetSummary objects.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listipsets"><a aria-hidden="true" class="anchor-heading" href="#listipsets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListIPSets</h3>
<ul>
<li>description: Returns an array of IPSetSummary objects in the response.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listloggingconfigurations"><a aria-hidden="true" class="anchor-heading" href="#listloggingconfigurations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListLoggingConfigurations</h3>
<ul>
<li>description: Returns an array of LoggingConfiguration objects.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listratebasedrules"><a aria-hidden="true" class="anchor-heading" href="#listratebasedrules"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListRateBasedRules</h3>
<ul>
<li>description: Returns an array of RuleSummary objects.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listregexmatchsets"><a aria-hidden="true" class="anchor-heading" href="#listregexmatchsets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListRegexMatchSets</h3>
<ul>
<li>description: Returns an array of RegexMatchSetSummary objects.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listregexpatternsets"><a aria-hidden="true" class="anchor-heading" href="#listregexpatternsets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListRegexPatternSets</h3>
<ul>
<li>description: Returns an array of RegexPatternSetSummary objects.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listresourcesforwebacl"><a aria-hidden="true" class="anchor-heading" href="#listresourcesforwebacl"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListResourcesForWebACL</h3>
<ul>
<li>description: Returns an array of resources associated with the specified WebACL.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "webacl": {
        "resource_type": "webacl",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listrulegroups"><a aria-hidden="true" class="anchor-heading" href="#listrulegroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListRuleGroups</h3>
<ul>
<li>description: Returns an array of RuleGroup objects.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listrules"><a aria-hidden="true" class="anchor-heading" href="#listrules"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListRules</h3>
<ul>
<li>description: Returns an array of RuleSummary objects.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listsizeconstraintsets"><a aria-hidden="true" class="anchor-heading" href="#listsizeconstraintsets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListSizeConstraintSets</h3>
<ul>
<li>description: Returns an array of SizeConstraintSetSummary objects.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listsqlinjectionmatchsets"><a aria-hidden="true" class="anchor-heading" href="#listsqlinjectionmatchsets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListSqlInjectionMatchSets</h3>
<ul>
<li>description: Returns an array of SqlInjectionMatchSet objects.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listsubscribedrulegroups"><a aria-hidden="true" class="anchor-heading" href="#listsubscribedrulegroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListSubscribedRuleGroups</h3>
<ul>
<li>description: Returns an array of RuleGroup objects that you are subscribed to.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Lists the Tags for a given resource.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ratebasedrule": {
        "resource_type": "ratebasedrule",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "rule": {
        "resource_type": "rule",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "rulegroup": {
        "resource_type": "rulegroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "webacl": {
        "resource_type": "webacl",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listwebacls"><a aria-hidden="true" class="anchor-heading" href="#listwebacls"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListWebACLs</h3>
<ul>
<li>description: Returns an array of WebACLSummary objects in the response.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listxssmatchsets"><a aria-hidden="true" class="anchor-heading" href="#listxssmatchsets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListXssMatchSets</h3>
<ul>
<li>description: Returns an array of XssMatchSet objects.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putloggingconfiguration"><a aria-hidden="true" class="anchor-heading" href="#putloggingconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutLoggingConfiguration</h3>
<ul>
<li>description: Associates a LoggingConfiguration with a specified web ACL.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "webacl": {
        "resource_type": "webacl",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:CreateServiceLinkedRole"
        ]
    }
}
</code></pre>
<h3 id="putpermissionpolicy"><a aria-hidden="true" class="anchor-heading" href="#putpermissionpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutPermissionPolicy</h3>
<ul>
<li>description: Attaches a IAM policy to the specified resource. The only supported use for this action is to share a RuleGroup across accounts.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "rulegroup": {
        "resource_type": "rulegroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Adds a Tag to a given resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ratebasedrule": {
        "resource_type": "ratebasedrule",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "rule": {
        "resource_type": "rule",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "rulegroup": {
        "resource_type": "rulegroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "webacl": {
        "resource_type": "webacl",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Removes a Tag from a given resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ratebasedrule": {
        "resource_type": "ratebasedrule",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "rule": {
        "resource_type": "rule",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "rulegroup": {
        "resource_type": "rulegroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "webacl": {
        "resource_type": "webacl",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatebytematchset"><a aria-hidden="true" class="anchor-heading" href="#updatebytematchset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateByteMatchSet</h3>
<ul>
<li>description: Inserts or deletes ByteMatchTuple objects (filters) in a ByteMatchSet.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bytematchset": {
        "resource_type": "bytematchset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updategeomatchset"><a aria-hidden="true" class="anchor-heading" href="#updategeomatchset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateGeoMatchSet</h3>
<ul>
<li>description: Inserts or deletes GeoMatchConstraint objects in a GeoMatchSet.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "geomatchset": {
        "resource_type": "geomatchset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateipset"><a aria-hidden="true" class="anchor-heading" href="#updateipset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateIPSet</h3>
<ul>
<li>description: Inserts or deletes IPSetDescriptor objects in an IPSet.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ipset": {
        "resource_type": "ipset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateratebasedrule"><a aria-hidden="true" class="anchor-heading" href="#updateratebasedrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateRateBasedRule</h3>
<ul>
<li>description: Inserts or deletes Predicate objects in a rule and updates the RateLimit in the rule.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ratebasedrule": {
        "resource_type": "ratebasedrule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateregexmatchset"><a aria-hidden="true" class="anchor-heading" href="#updateregexmatchset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateRegexMatchSet</h3>
<ul>
<li>description: Inserts or deletes RegexMatchTuple objects (filters) in a RegexMatchSet.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "regexmatchset": {
        "resource_type": "regexmatchset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateregexpatternset"><a aria-hidden="true" class="anchor-heading" href="#updateregexpatternset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateRegexPatternSet</h3>
<ul>
<li>description: Inserts or deletes RegexPatternStrings in a RegexPatternSet.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "regexpatternset": {
        "resource_type": "regexpatternset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updaterule"><a aria-hidden="true" class="anchor-heading" href="#updaterule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateRule</h3>
<ul>
<li>description: Inserts or deletes Predicate objects in a Rule.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "rule": {
        "resource_type": "rule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updaterulegroup"><a aria-hidden="true" class="anchor-heading" href="#updaterulegroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateRuleGroup</h3>
<ul>
<li>description: Inserts or deletes ActivatedRule objects in a RuleGroup.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "rulegroup": {
        "resource_type": "rulegroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatesizeconstraintset"><a aria-hidden="true" class="anchor-heading" href="#updatesizeconstraintset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateSizeConstraintSet</h3>
<ul>
<li>description: Inserts or deletes SizeConstraint objects (filters) in a SizeConstraintSet.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "sizeconstraintset": {
        "resource_type": "sizeconstraintset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatesqlinjectionmatchset"><a aria-hidden="true" class="anchor-heading" href="#updatesqlinjectionmatchset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateSqlInjectionMatchSet</h3>
<ul>
<li>description: Inserts or deletes SqlInjectionMatchTuple objects (filters) in a SqlInjectionMatchSet.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "sqlinjectionmatchset": {
        "resource_type": "sqlinjectionmatchset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatewebacl"><a aria-hidden="true" class="anchor-heading" href="#updatewebacl"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateWebACL</h3>
<ul>
<li>description: Inserts or deletes ActivatedRule objects in a WebACL.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "webacl": {
        "resource_type": "webacl",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatexssmatchset"><a aria-hidden="true" class="anchor-heading" href="#updatexssmatchset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateXssMatchSet</h3>
<ul>
<li>description: Inserts or deletes XssMatchTuple objects (filters) in an XssMatchSet.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "xssmatchset": {
        "resource_type": "xssmatchset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-WAF Regional"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-WorkLink.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>WorkLink - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-WorkLink.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-WorkLink.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-WorkLink.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="WorkLink - undefined" />
  <meta name="twitter:title" content="WorkLink - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">WorkLink</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="WorkLink">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="worklink"><a aria-hidden="true" class="anchor-heading" href="#worklink"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>WorkLink</h1>
<ul>
<li>prefix: worklink</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="associatedomain"><a aria-hidden="true" class="anchor-heading" href="#associatedomain"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateDomain</h3>
<ul>
<li>description: Grants permission to associate a domain with an Amazon WorkLink fleet</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="associatewebsiteauthorizationprovider"><a aria-hidden="true" class="anchor-heading" href="#associatewebsiteauthorizationprovider"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateWebsiteAuthorizationProvider</h3>
<ul>
<li>description: Grants permission to associate a website authorization provider with an Amazon WorkLink fleet</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="associatewebsitecertificateauthority"><a aria-hidden="true" class="anchor-heading" href="#associatewebsitecertificateauthority"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateWebsiteCertificateAuthority</h3>
<ul>
<li>description: Grants permission to associate a website certificate authority with an Amazon WorkLink fleet</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createfleet"><a aria-hidden="true" class="anchor-heading" href="#createfleet"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateFleet</h3>
<ul>
<li>description: Grants permission to create an Amazon WorkLink fleet</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletefleet"><a aria-hidden="true" class="anchor-heading" href="#deletefleet"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteFleet</h3>
<ul>
<li>description: Grants permission to delete an Amazon WorkLink fleet</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeauditstreamconfiguration"><a aria-hidden="true" class="anchor-heading" href="#describeauditstreamconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAuditStreamConfiguration</h3>
<ul>
<li>description: Grants permission to describe the audit stream configuration for an Amazon WorkLink fleet</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecompanynetworkconfiguration"><a aria-hidden="true" class="anchor-heading" href="#describecompanynetworkconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeCompanyNetworkConfiguration</h3>
<ul>
<li>description: Grants permission to describe the company network configuration for an Amazon WorkLink fleet</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedevice"><a aria-hidden="true" class="anchor-heading" href="#describedevice"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDevice</h3>
<ul>
<li>description: Grants permission to describe details of a device associated with an Amazon WorkLink fleet</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedevicepolicyconfiguration"><a aria-hidden="true" class="anchor-heading" href="#describedevicepolicyconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDevicePolicyConfiguration</h3>
<ul>
<li>description: Grants permission to describe the device policy configuration for an Amazon WorkLink fleet</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedomain"><a aria-hidden="true" class="anchor-heading" href="#describedomain"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDomain</h3>
<ul>
<li>description: Grants permission to describe details about a domain associated with an Amazon WorkLink fleet</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describefleetmetadata"><a aria-hidden="true" class="anchor-heading" href="#describefleetmetadata"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeFleetMetadata</h3>
<ul>
<li>description: Grants permission to describe metadata of an Amazon WorkLink fleet</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeidentityproviderconfiguration"><a aria-hidden="true" class="anchor-heading" href="#describeidentityproviderconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeIdentityProviderConfiguration</h3>
<ul>
<li>description: Grants permission to describe the identity provider configuration for an Amazon WorkLink fleet</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describewebsitecertificateauthority"><a aria-hidden="true" class="anchor-heading" href="#describewebsitecertificateauthority"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeWebsiteCertificateAuthority</h3>
<ul>
<li>description: Grants permission to describe a website certificate authority associated with an Amazon WorkLink fleet</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociatedomain"><a aria-hidden="true" class="anchor-heading" href="#disassociatedomain"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateDomain</h3>
<ul>
<li>description: Grants permission to disassociate a domain from an Amazon WorkLink fleet</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociatewebsiteauthorizationprovider"><a aria-hidden="true" class="anchor-heading" href="#disassociatewebsiteauthorizationprovider"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateWebsiteAuthorizationProvider</h3>
<ul>
<li>description: Grants permission to disassociate a website authorization provider from an Amazon WorkLink fleet</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociatewebsitecertificateauthority"><a aria-hidden="true" class="anchor-heading" href="#disassociatewebsitecertificateauthority"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateWebsiteCertificateAuthority</h3>
<ul>
<li>description: Grants permission to disassociate a website certificate authority from an Amazon WorkLink fleet</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdevices"><a aria-hidden="true" class="anchor-heading" href="#listdevices"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDevices</h3>
<ul>
<li>description: Grants permission to list the devices associated with an Amazon WorkLink fleet</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdomains"><a aria-hidden="true" class="anchor-heading" href="#listdomains"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDomains</h3>
<ul>
<li>description: Grants permission to list the associated domains for an Amazon WorkLink fleet</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listfleets"><a aria-hidden="true" class="anchor-heading" href="#listfleets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListFleets</h3>
<ul>
<li>description: Grants permission to list the Amazon WorkLink fleets associated with the account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Grants permission to list tags for a resource</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listwebsiteauthorizationproviders"><a aria-hidden="true" class="anchor-heading" href="#listwebsiteauthorizationproviders"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListWebsiteAuthorizationProviders</h3>
<ul>
<li>description: Grants permission to list the website authorization providers for an Amazon WorkLink fleet</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listwebsitecertificateauthorities"><a aria-hidden="true" class="anchor-heading" href="#listwebsitecertificateauthorities"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListWebsiteCertificateAuthorities</h3>
<ul>
<li>description: Grants permission to list the website certificate authorities associated with an Amazon WorkLink fleet</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="restoredomainaccess"><a aria-hidden="true" class="anchor-heading" href="#restoredomainaccess"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RestoreDomainAccess</h3>
<ul>
<li>description: Grants permission to restore access to a domain associated with an Amazon WorkLink fleet</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="revokedomainaccess"><a aria-hidden="true" class="anchor-heading" href="#revokedomainaccess"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RevokeDomainAccess</h3>
<ul>
<li>description: Grants permission to revoke access to a domain associated with an Amazon WorkLink fleet</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="signoutuser"><a aria-hidden="true" class="anchor-heading" href="#signoutuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SignOutUser</h3>
<ul>
<li>description: Grants permission to sign out a user from an Amazon WorkLink fleet</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Grants permission to add one or more tags to a resource</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Grants permission to remove one or more tags from a resource</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateauditstreamconfiguration"><a aria-hidden="true" class="anchor-heading" href="#updateauditstreamconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateAuditStreamConfiguration</h3>
<ul>
<li>description: Grants permission to update the audit stream configuration for an Amazon WorkLink fleet</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatecompanynetworkconfiguration"><a aria-hidden="true" class="anchor-heading" href="#updatecompanynetworkconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateCompanyNetworkConfiguration</h3>
<ul>
<li>description: Grants permission to update the company network configuration for an Amazon WorkLink fleet</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatedevicepolicyconfiguration"><a aria-hidden="true" class="anchor-heading" href="#updatedevicepolicyconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateDevicePolicyConfiguration</h3>
<ul>
<li>description: Grants permission to update the device policy configuration for an Amazon WorkLink fleet</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatedomainmetadata"><a aria-hidden="true" class="anchor-heading" href="#updatedomainmetadata"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateDomainMetadata</h3>
<ul>
<li>description: Grants permission to update the metadata for a domain associated with an Amazon WorkLink fleet</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatefleetmetadata"><a aria-hidden="true" class="anchor-heading" href="#updatefleetmetadata"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateFleetMetadata</h3>
<ul>
<li>description: Grants permission to update the metadata of an Amazon WorkLink fleet</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateidentityproviderconfiguration"><a aria-hidden="true" class="anchor-heading" href="#updateidentityproviderconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateIdentityProviderConfiguration</h3>
<ul>
<li>description: Grants permission to update the identity provider configuration for an Amazon WorkLink fleet</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-WorkLink"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Cloud Directory.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Cloud Directory - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Cloud Directory.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Cloud Directory.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Cloud Directory.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Cloud Directory - undefined" />
  <meta name="twitter:title" content="Cloud Directory - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Cloud Directory</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Cloud Directory">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="cloud-directory"><a aria-hidden="true" class="anchor-heading" href="#cloud-directory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Cloud Directory</h1>
<ul>
<li>prefix: clouddirectory</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="addfacettoobject"><a aria-hidden="true" class="anchor-heading" href="#addfacettoobject"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddFacetToObject</h3>
<ul>
<li>description: Adds a new Facet to an object.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="applyschema"><a aria-hidden="true" class="anchor-heading" href="#applyschema"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ApplySchema</h3>
<ul>
<li>description: Copies input published schema into Directory with same name and version as that of published schema.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "publishedSchema": {
        "resource_type": "publishedSchema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="attachobject"><a aria-hidden="true" class="anchor-heading" href="#attachobject"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AttachObject</h3>
<ul>
<li>description: Attaches an existing object to another existing object.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="attachpolicy"><a aria-hidden="true" class="anchor-heading" href="#attachpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AttachPolicy</h3>
<ul>
<li>description: Attaches a policy object to any other object.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="attachtoindex"><a aria-hidden="true" class="anchor-heading" href="#attachtoindex"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AttachToIndex</h3>
<ul>
<li>description: Attaches the specified object to the specified index.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="attachtypedlink"><a aria-hidden="true" class="anchor-heading" href="#attachtypedlink"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AttachTypedLink</h3>
<ul>
<li>description: Attaches a typed link b/w a source &#x26; target object reference.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchread"><a aria-hidden="true" class="anchor-heading" href="#batchread"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchRead</h3>
<ul>
<li>description: Performs all the read operations in a batch. Each individual operation inside BatchRead needs to be granted permissions explicitly.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchwrite"><a aria-hidden="true" class="anchor-heading" href="#batchwrite"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchWrite</h3>
<ul>
<li>description: Performs all the write operations in a batch. Each individual operation inside BatchWrite needs to be granted permissions explicitly.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdirectory"><a aria-hidden="true" class="anchor-heading" href="#createdirectory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDirectory</h3>
<ul>
<li>description: Creates a Directory by copying the published schema into the directory.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "publishedSchema": {
        "resource_type": "publishedSchema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createfacet"><a aria-hidden="true" class="anchor-heading" href="#createfacet"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateFacet</h3>
<ul>
<li>description: Creates a new Facet in a schema.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "appliedSchema": {
        "resource_type": "appliedSchema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "developmentSchema": {
        "resource_type": "developmentSchema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createindex"><a aria-hidden="true" class="anchor-heading" href="#createindex"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateIndex</h3>
<ul>
<li>description: Creates an index object.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createobject"><a aria-hidden="true" class="anchor-heading" href="#createobject"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateObject</h3>
<ul>
<li>description: Creates an object in a Directory.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createschema"><a aria-hidden="true" class="anchor-heading" href="#createschema"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSchema</h3>
<ul>
<li>description: Creates a new schema in a development state.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtypedlinkfacet"><a aria-hidden="true" class="anchor-heading" href="#createtypedlinkfacet"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTypedLinkFacet</h3>
<ul>
<li>description: Creates a new Typed Link facet in a schema.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "appliedSchema": {
        "resource_type": "appliedSchema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "developmentSchema": {
        "resource_type": "developmentSchema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedirectory"><a aria-hidden="true" class="anchor-heading" href="#deletedirectory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDirectory</h3>
<ul>
<li>description: Deletes a directory. Only disabled directories can be deleted.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletefacet"><a aria-hidden="true" class="anchor-heading" href="#deletefacet"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteFacet</h3>
<ul>
<li>description: Deletes a given Facet. All attributes and Rules associated with the facet will be deleted.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "developmentSchema": {
        "resource_type": "developmentSchema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteobject"><a aria-hidden="true" class="anchor-heading" href="#deleteobject"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteObject</h3>
<ul>
<li>description: Deletes an object and its associated attributes.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteschema"><a aria-hidden="true" class="anchor-heading" href="#deleteschema"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteSchema</h3>
<ul>
<li>description: Deletes a given schema.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "developmentSchema": {
        "resource_type": "developmentSchema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "publishedSchema": {
        "resource_type": "publishedSchema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetypedlinkfacet"><a aria-hidden="true" class="anchor-heading" href="#deletetypedlinkfacet"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTypedLinkFacet</h3>
<ul>
<li>description: Deletes a given TypedLink Facet. All attributes and Rules associated with the facet will be deleted.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "developmentSchema": {
        "resource_type": "developmentSchema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="detachfromindex"><a aria-hidden="true" class="anchor-heading" href="#detachfromindex"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DetachFromIndex</h3>
<ul>
<li>description: Detaches the specified object from the specified index.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="detachobject"><a aria-hidden="true" class="anchor-heading" href="#detachobject"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DetachObject</h3>
<ul>
<li>description: Detaches a given object from the parent object.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="detachpolicy"><a aria-hidden="true" class="anchor-heading" href="#detachpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DetachPolicy</h3>
<ul>
<li>description: Detaches a policy from an object.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="detachtypedlink"><a aria-hidden="true" class="anchor-heading" href="#detachtypedlink"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DetachTypedLink</h3>
<ul>
<li>description: Detaches a given typed link b/w given source and target object reference.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disabledirectory"><a aria-hidden="true" class="anchor-heading" href="#disabledirectory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisableDirectory</h3>
<ul>
<li>description: Disables the specified directory.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="enabledirectory"><a aria-hidden="true" class="anchor-heading" href="#enabledirectory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EnableDirectory</h3>
<ul>
<li>description: Enables the specified directory.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdirectory"><a aria-hidden="true" class="anchor-heading" href="#getdirectory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDirectory</h3>
<ul>
<li>description: Retrieves metadata about a directory.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getfacet"><a aria-hidden="true" class="anchor-heading" href="#getfacet"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetFacet</h3>
<ul>
<li>description: Gets details of the Facet, such as Facet Name, Attributes, Rules, or ObjectType.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "appliedSchema": {
        "resource_type": "appliedSchema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "developmentSchema": {
        "resource_type": "developmentSchema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "publishedSchema": {
        "resource_type": "publishedSchema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getlinkattributes"><a aria-hidden="true" class="anchor-heading" href="#getlinkattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetLinkAttributes</h3>
<ul>
<li>description: Retrieves attributes that are associated with a typed link.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getobjectattributes"><a aria-hidden="true" class="anchor-heading" href="#getobjectattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetObjectAttributes</h3>
<ul>
<li>description: Retrieves attributes within a facet that are associated with an object.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getobjectinformation"><a aria-hidden="true" class="anchor-heading" href="#getobjectinformation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetObjectInformation</h3>
<ul>
<li>description: Retrieves metadata about an object.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getschemaasjson"><a aria-hidden="true" class="anchor-heading" href="#getschemaasjson"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSchemaAsJson</h3>
<ul>
<li>description: Retrieves a JSON representation of the schema.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "appliedSchema": {
        "resource_type": "appliedSchema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "developmentSchema": {
        "resource_type": "developmentSchema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "publishedSchema": {
        "resource_type": "publishedSchema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gettypedlinkfacetinformation"><a aria-hidden="true" class="anchor-heading" href="#gettypedlinkfacetinformation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetTypedLinkFacetInformation</h3>
<ul>
<li>description: Returns identity attributes order information associated with a given typed link facet.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "appliedSchema": {
        "resource_type": "appliedSchema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "developmentSchema": {
        "resource_type": "developmentSchema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "publishedSchema": {
        "resource_type": "publishedSchema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listappliedschemaarns"><a aria-hidden="true" class="anchor-heading" href="#listappliedschemaarns"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAppliedSchemaArns</h3>
<ul>
<li>description: Lists schemas applied to a directory.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listattachedindices"><a aria-hidden="true" class="anchor-heading" href="#listattachedindices"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAttachedIndices</h3>
<ul>
<li>description: Lists indices attached to an object.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdevelopmentschemaarns"><a aria-hidden="true" class="anchor-heading" href="#listdevelopmentschemaarns"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDevelopmentSchemaArns</h3>
<ul>
<li>description: Retrieves the ARNs of schemas in the development state.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdirectories"><a aria-hidden="true" class="anchor-heading" href="#listdirectories"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDirectories</h3>
<ul>
<li>description: Lists directories created within an account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listfacetattributes"><a aria-hidden="true" class="anchor-heading" href="#listfacetattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListFacetAttributes</h3>
<ul>
<li>description: Retrieves attributes attached to the facet.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "appliedSchema": {
        "resource_type": "appliedSchema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "developmentSchema": {
        "resource_type": "developmentSchema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "publishedSchema": {
        "resource_type": "publishedSchema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listfacetnames"><a aria-hidden="true" class="anchor-heading" href="#listfacetnames"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListFacetNames</h3>
<ul>
<li>description: Retrieves the names of facets that exist in a schema.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "appliedSchema": {
        "resource_type": "appliedSchema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "developmentSchema": {
        "resource_type": "developmentSchema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "publishedSchema": {
        "resource_type": "publishedSchema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listincomingtypedlinks"><a aria-hidden="true" class="anchor-heading" href="#listincomingtypedlinks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListIncomingTypedLinks</h3>
<ul>
<li>description: Returns a paginated list of all incoming TypedLinks for a given object.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listindex"><a aria-hidden="true" class="anchor-heading" href="#listindex"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListIndex</h3>
<ul>
<li>description: Lists objects attached to the specified index.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listobjectattributes"><a aria-hidden="true" class="anchor-heading" href="#listobjectattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListObjectAttributes</h3>
<ul>
<li>description: Lists all attributes associated with an object.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listobjectchildren"><a aria-hidden="true" class="anchor-heading" href="#listobjectchildren"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListObjectChildren</h3>
<ul>
<li>description: Returns a paginated list of child objects associated with a given object.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listobjectparentpaths"><a aria-hidden="true" class="anchor-heading" href="#listobjectparentpaths"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListObjectParentPaths</h3>
<ul>
<li>description: Retrieves all available parent paths for any object type such as node, leaf node, policy node, and index node objects.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listobjectparents"><a aria-hidden="true" class="anchor-heading" href="#listobjectparents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListObjectParents</h3>
<ul>
<li>description: Lists parent objects associated with a given object in pagination fashion.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listobjectpolicies"><a aria-hidden="true" class="anchor-heading" href="#listobjectpolicies"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListObjectPolicies</h3>
<ul>
<li>description: Returns policies attached to an object in pagination fashion.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listoutgoingtypedlinks"><a aria-hidden="true" class="anchor-heading" href="#listoutgoingtypedlinks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListOutgoingTypedLinks</h3>
<ul>
<li>description: Returns a paginated list of all outgoing TypedLinks for a given object.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listpolicyattachments"><a aria-hidden="true" class="anchor-heading" href="#listpolicyattachments"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPolicyAttachments</h3>
<ul>
<li>description: Returns all of the ObjectIdentifiers to which a given policy is attached.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listpublishedschemaarns"><a aria-hidden="true" class="anchor-heading" href="#listpublishedschemaarns"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPublishedSchemaArns</h3>
<ul>
<li>description: Retrieves published schema ARNs.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Returns tags for a resource.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtypedlinkfacetattributes"><a aria-hidden="true" class="anchor-heading" href="#listtypedlinkfacetattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTypedLinkFacetAttributes</h3>
<ul>
<li>description: Returns a paginated list of attributes associated with typed link facet.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "appliedSchema": {
        "resource_type": "appliedSchema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "developmentSchema": {
        "resource_type": "developmentSchema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "publishedSchema": {
        "resource_type": "publishedSchema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtypedlinkfacetnames"><a aria-hidden="true" class="anchor-heading" href="#listtypedlinkfacetnames"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTypedLinkFacetNames</h3>
<ul>
<li>description: Returns a paginated list of typed link facet names that exist in a schema.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "appliedSchema": {
        "resource_type": "appliedSchema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "developmentSchema": {
        "resource_type": "developmentSchema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "publishedSchema": {
        "resource_type": "publishedSchema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="lookuppolicy"><a aria-hidden="true" class="anchor-heading" href="#lookuppolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>LookupPolicy</h3>
<ul>
<li>description: Lists all policies from the root of the Directory to the object specified.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="publishschema"><a aria-hidden="true" class="anchor-heading" href="#publishschema"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PublishSchema</h3>
<ul>
<li>description: Publishes a development schema with a version.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "developmentSchema": {
        "resource_type": "developmentSchema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putschemafromjson"><a aria-hidden="true" class="anchor-heading" href="#putschemafromjson"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutSchemaFromJson</h3>
<ul>
<li>description: Allows a schema to be updated using JSON upload. Only available for development schemas.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="removefacetfromobject"><a aria-hidden="true" class="anchor-heading" href="#removefacetfromobject"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemoveFacetFromObject</h3>
<ul>
<li>description: Removes the specified facet from the specified object.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Adds tags to a resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Removes tags from a resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatefacet"><a aria-hidden="true" class="anchor-heading" href="#updatefacet"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateFacet</h3>
<ul>
<li>description: Adds/Updates/Deletes existing Attributes, Rules, or ObjectType of a Facet.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "appliedSchema": {
        "resource_type": "appliedSchema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "developmentSchema": {
        "resource_type": "developmentSchema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatelinkattributes"><a aria-hidden="true" class="anchor-heading" href="#updatelinkattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateLinkAttributes</h3>
<ul>
<li>description: Updates a given typed link’s attributes. Attributes to be updated must not contribute to the typed link’s identity, as defined by its IdentityAttributeOrder.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateobjectattributes"><a aria-hidden="true" class="anchor-heading" href="#updateobjectattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateObjectAttributes</h3>
<ul>
<li>description: Updates a given object's attributes.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateschema"><a aria-hidden="true" class="anchor-heading" href="#updateschema"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateSchema</h3>
<ul>
<li>description: Updates the schema name with a new name.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "developmentSchema": {
        "resource_type": "developmentSchema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatetypedlinkfacet"><a aria-hidden="true" class="anchor-heading" href="#updatetypedlinkfacet"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateTypedLinkFacet</h3>
<ul>
<li>description: Adds/Updates/Deletes existing Attributes, Rules, identity attribute order of a TypedLink Facet.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "developmentSchema": {
        "resource_type": "developmentSchema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Cloud Directory"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-MQ.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>MQ - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-MQ.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-MQ.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-MQ.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="MQ - undefined" />
  <meta name="twitter:title" content="MQ - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">MQ</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="MQ">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="mq"><a aria-hidden="true" class="anchor-heading" href="#mq"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>MQ</h1>
<ul>
<li>prefix: mq</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="createbroker"><a aria-hidden="true" class="anchor-heading" href="#createbroker"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateBroker</h3>
<ul>
<li>description: Grants permission to create a broker.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createconfiguration"><a aria-hidden="true" class="anchor-heading" href="#createconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateConfiguration</h3>
<ul>
<li>description: Grants permission to create a new configuration for the specified configuration name. Amazon MQ uses the default configuration (the engine type and engine version).</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtags"><a aria-hidden="true" class="anchor-heading" href="#createtags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTags</h3>
<ul>
<li>description: Grants permission to create tags.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "brokers": {
        "resource_type": "brokers",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "configurations": {
        "resource_type": "configurations",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createuser"><a aria-hidden="true" class="anchor-heading" href="#createuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateUser</h3>
<ul>
<li>description: Grants permission to create an ActiveMQ user.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "brokers": {
        "resource_type": "brokers",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletebroker"><a aria-hidden="true" class="anchor-heading" href="#deletebroker"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteBroker</h3>
<ul>
<li>description: Grants permission to delete a broker.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "brokers": {
        "resource_type": "brokers",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetags"><a aria-hidden="true" class="anchor-heading" href="#deletetags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTags</h3>
<ul>
<li>description: Grants permission to delete tags.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "brokers": {
        "resource_type": "brokers",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "configurations": {
        "resource_type": "configurations",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteuser"><a aria-hidden="true" class="anchor-heading" href="#deleteuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteUser</h3>
<ul>
<li>description: Grants permission to delete an ActiveMQ user.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "brokers": {
        "resource_type": "brokers",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describebroker"><a aria-hidden="true" class="anchor-heading" href="#describebroker"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeBroker</h3>
<ul>
<li>description: Grants permission to return information about the specified broker.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "brokers": {
        "resource_type": "brokers",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describebrokerenginetypes"><a aria-hidden="true" class="anchor-heading" href="#describebrokerenginetypes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeBrokerEngineTypes</h3>
<ul>
<li>description: Grants permission to return information about broker engines.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describebrokerinstanceoptions"><a aria-hidden="true" class="anchor-heading" href="#describebrokerinstanceoptions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeBrokerInstanceOptions</h3>
<ul>
<li>description: Grants permission to return information about the broker instance options</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeconfiguration"><a aria-hidden="true" class="anchor-heading" href="#describeconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeConfiguration</h3>
<ul>
<li>description: Grants permission to return information about the specified configuration.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "configurations": {
        "resource_type": "configurations",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeconfigurationrevision"><a aria-hidden="true" class="anchor-heading" href="#describeconfigurationrevision"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeConfigurationRevision</h3>
<ul>
<li>description: Grants permission to return the specified configuration revision for the specified configuration.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "configurations": {
        "resource_type": "configurations",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeuser"><a aria-hidden="true" class="anchor-heading" href="#describeuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeUser</h3>
<ul>
<li>description: Grants permission to return information about an ActiveMQ user.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "brokers": {
        "resource_type": "brokers",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listbrokers"><a aria-hidden="true" class="anchor-heading" href="#listbrokers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListBrokers</h3>
<ul>
<li>description: Grants permission to return a list of all brokers.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listconfigurationrevisions"><a aria-hidden="true" class="anchor-heading" href="#listconfigurationrevisions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListConfigurationRevisions</h3>
<ul>
<li>description: Grants permission to return a list of all existing revisions for the specified configuration.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "configurations": {
        "resource_type": "configurations",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listconfigurations"><a aria-hidden="true" class="anchor-heading" href="#listconfigurations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListConfigurations</h3>
<ul>
<li>description: Grants permission to return a list of all configurations.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtags"><a aria-hidden="true" class="anchor-heading" href="#listtags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTags</h3>
<ul>
<li>description: Grants permission to return a list of tags.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "brokers": {
        "resource_type": "brokers",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "configurations": {
        "resource_type": "configurations",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listusers"><a aria-hidden="true" class="anchor-heading" href="#listusers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListUsers</h3>
<ul>
<li>description: Grants permission to return a list of all ActiveMQ users.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "brokers": {
        "resource_type": "brokers",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="rebootbroker"><a aria-hidden="true" class="anchor-heading" href="#rebootbroker"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RebootBroker</h3>
<ul>
<li>description: Grants permission to reboot a broker.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "brokers": {
        "resource_type": "brokers",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatebroker"><a aria-hidden="true" class="anchor-heading" href="#updatebroker"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateBroker</h3>
<ul>
<li>description: Grants permission to add a pending configuration change to a broker.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "brokers": {
        "resource_type": "brokers",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateconfiguration"><a aria-hidden="true" class="anchor-heading" href="#updateconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateConfiguration</h3>
<ul>
<li>description: Grants permission to update the specified configuration.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "configurations": {
        "resource_type": "configurations",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateuser"><a aria-hidden="true" class="anchor-heading" href="#updateuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateUser</h3>
<ul>
<li>description: Grants permission to update the information for an ActiveMQ user.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "brokers": {
        "resource_type": "brokers",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-MQ"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Connect.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Connect - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Connect.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Connect.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Connect.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Connect - undefined" />
  <meta name="twitter:title" content="Connect - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Connect</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Connect">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="connect"><a aria-hidden="true" class="anchor-heading" href="#connect"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Connect</h1>
<ul>
<li>prefix: connect</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="associateroutingprofilequeues"><a aria-hidden="true" class="anchor-heading" href="#associateroutingprofilequeues"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateRoutingProfileQueues</h3>
<ul>
<li>description: Grants permissions to associate queues with a routing profile in an Amazon Connect instance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "queue": {
        "resource_type": "queue",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "routing-profile": {
        "resource_type": "routing-profile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createcontactflow"><a aria-hidden="true" class="anchor-heading" href="#createcontactflow"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateContactFlow</h3>
<ul>
<li>description: Grants permissions to create a contact flow in an Amazon Connect instance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "contact-flow": {
        "resource_type": "contact-flow",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createinstance"><a aria-hidden="true" class="anchor-heading" href="#createinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateInstance</h3>
<ul>
<li>description: Grants permissions to create a new Amazon Connect instance. The associated required actions grant permissions to configure instance settings.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": [
            "ds:CreateAlias",
            "ds:DeleteDirectory",
            "ds:DescribeDirectories",
            "firehose:DescribeDeliveryStream",
            "firehose:ListDeliveryStreams",
            "iam:CreateServiceLinkedRole",
            "kinesis:DescribeStream",
            "kinesis:ListStreams",
            "kms:CreateGrant",
            "kms:DescribeKey",
            "kms:ListAliases",
            "kms:RetireGrant",
            "s3:CreateBucket",
            "s3:GetBucketLocation",
            "s3:ListAllMyBuckets"
        ]
    }
}
</code></pre>
<h3 id="createroutingprofile"><a aria-hidden="true" class="anchor-heading" href="#createroutingprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateRoutingProfile</h3>
<ul>
<li>description: Grants permission to create a routing profile in an Amazon Connect instance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "queue": {
        "resource_type": "queue",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "routing-profile": {
        "resource_type": "routing-profile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createuser"><a aria-hidden="true" class="anchor-heading" href="#createuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateUser</h3>
<ul>
<li>description: Grants permission to create a user for the specified Amazon Connect instance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "routing-profile": {
        "resource_type": "routing-profile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "security-profile": {
        "resource_type": "security-profile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "hierarchy-group": {
        "resource_type": "hierarchy-group",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteuser"><a aria-hidden="true" class="anchor-heading" href="#deleteuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteUser</h3>
<ul>
<li>description: Grants permissions to delete a user in an Amazon Connect instance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecontactflow"><a aria-hidden="true" class="anchor-heading" href="#describecontactflow"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeContactFlow</h3>
<ul>
<li>description: Grants permissions to describe a contact flow in an Amazon Connect instance.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "contact-flow": {
        "resource_type": "contact-flow",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeinstance"><a aria-hidden="true" class="anchor-heading" href="#describeinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeInstance</h3>
<ul>
<li>description: Grants permissions to view details of an Amazon Connect instance. This is required to create an instance.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "firehose:DescribeDeliveryStream",
            "firehose:ListDeliveryStreams",
            "kinesis:DescribeStream",
            "kinesis:ListStreams",
            "kms:DescribeKey",
            "kms:ListAliases",
            "s3:ListAllMyBuckets"
        ]
    }
}
</code></pre>
<h3 id="describeroutingprofile"><a aria-hidden="true" class="anchor-heading" href="#describeroutingprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeRoutingProfile</h3>
<ul>
<li>description: Grants permissions to describe a routing profile in an Amazon Connect instance.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "routing-profile": {
        "resource_type": "routing-profile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeuser"><a aria-hidden="true" class="anchor-heading" href="#describeuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeUser</h3>
<ul>
<li>description: Grants permissions to describe a user in an Amazon Connect instance.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeuserhierarchygroup"><a aria-hidden="true" class="anchor-heading" href="#describeuserhierarchygroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeUserHierarchyGroup</h3>
<ul>
<li>description: Grants permissions to describe a hierarchy group for an Amazon Connect instance.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hierarchy-group": {
        "resource_type": "hierarchy-group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeuserhierarchystructure"><a aria-hidden="true" class="anchor-heading" href="#describeuserhierarchystructure"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeUserHierarchyStructure</h3>
<ul>
<li>description: Grants permissions to describe the hierarchy structure for an Amazon Connect instance.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="destroyinstance"><a aria-hidden="true" class="anchor-heading" href="#destroyinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DestroyInstance</h3>
<ul>
<li>description: Grants permissions to delete an Amazon Connect instance. When you remove an instance, the link to an existing AWS directory is also removed.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociateroutingprofilequeues"><a aria-hidden="true" class="anchor-heading" href="#disassociateroutingprofilequeues"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateRoutingProfileQueues</h3>
<ul>
<li>description: Grants permissions to disassociate queues from a routing profile in an Amazon Connect instance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "routing-profile": {
        "resource_type": "routing-profile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcontactattributes"><a aria-hidden="true" class="anchor-heading" href="#getcontactattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetContactAttributes</h3>
<ul>
<li>description: Grants permissions to retrieve the contact attributes for the specified contact.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "contact": {
        "resource_type": "contact",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcurrentmetricdata"><a aria-hidden="true" class="anchor-heading" href="#getcurrentmetricdata"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCurrentMetricData</h3>
<ul>
<li>description: Grants permissions to retrieve current metric data for the queues in an Amazon Connect instance.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "queue": {
        "resource_type": "queue",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getfederationtoken"><a aria-hidden="true" class="anchor-heading" href="#getfederationtoken"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetFederationToken</h3>
<ul>
<li>description: Allows federation into an instance when using SAML-based authentication for identity management.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getfederationtokens"><a aria-hidden="true" class="anchor-heading" href="#getfederationtokens"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetFederationTokens</h3>
<ul>
<li>description: Grants permissions to federate in to an Amazon Connect instance (Log in as administrator functionality in the AWS console).</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "connect:DescribeInstance",
            "connect:ListInstances",
            "ds:DescribeDirectories"
        ]
    }
}
</code></pre>
<h3 id="getmetricdata"><a aria-hidden="true" class="anchor-heading" href="#getmetricdata"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetMetricData</h3>
<ul>
<li>description: Grants permissions to retrieve historical metric data for queues in an Amazon Connect instance.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "queue": {
        "resource_type": "queue",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listcontactflows"><a aria-hidden="true" class="anchor-heading" href="#listcontactflows"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListContactFlows</h3>
<ul>
<li>description: Grants permissions to list contact flow resources in an Amazon Connect instance.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listhoursofoperations"><a aria-hidden="true" class="anchor-heading" href="#listhoursofoperations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListHoursOfOperations</h3>
<ul>
<li>description: Grants permissions to list hours of operation resources in an Amazon Connect instance.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listinstances"><a aria-hidden="true" class="anchor-heading" href="#listinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListInstances</h3>
<ul>
<li>description: Grants permissions to view the Amazon Connect instances associated with an AWS account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listphonenumbers"><a aria-hidden="true" class="anchor-heading" href="#listphonenumbers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPhoneNumbers</h3>
<ul>
<li>description: Grants permissions to list phone number resources in an Amazon Connect instance.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listprompts"><a aria-hidden="true" class="anchor-heading" href="#listprompts"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPrompts</h3>
<ul>
<li>description: Grants permissions to list prompt resources in an Amazon Connect instance.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listqueues"><a aria-hidden="true" class="anchor-heading" href="#listqueues"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListQueues</h3>
<ul>
<li>description: Grants permissions to list queue resources in an Amazon Connect instance.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listroutingprofilequeues"><a aria-hidden="true" class="anchor-heading" href="#listroutingprofilequeues"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListRoutingProfileQueues</h3>
<ul>
<li>description: Grants permissions to list queue resources in a routing profile in an Amazon Connect instance.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "routing-profile": {
        "resource_type": "routing-profile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listroutingprofiles"><a aria-hidden="true" class="anchor-heading" href="#listroutingprofiles"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListRoutingProfiles</h3>
<ul>
<li>description: Grants permissions to list routing profile resources in an Amazon Connect instance.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listsecurityprofiles"><a aria-hidden="true" class="anchor-heading" href="#listsecurityprofiles"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListSecurityProfiles</h3>
<ul>
<li>description: Grants permissions to list security profile resources in an Amazon Connect instance.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Grants permissions to list tags for an Amazon Connect resource.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "contact-flow": {
        "resource_type": "contact-flow",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "routing-profile": {
        "resource_type": "routing-profile",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "user": {
        "resource_type": "user",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listuserhierarchygroups"><a aria-hidden="true" class="anchor-heading" href="#listuserhierarchygroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListUserHierarchyGroups</h3>
<ul>
<li>description: Grants permissions to list the hierarchy group resources in an Amazon Connect instance.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listusers"><a aria-hidden="true" class="anchor-heading" href="#listusers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListUsers</h3>
<ul>
<li>description: Grants permissions to list user resources in an Amazon Connect instance.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyinstance"><a aria-hidden="true" class="anchor-heading" href="#modifyinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyInstance</h3>
<ul>
<li>description: Grants permissions to modify configuration settings for an existing Amazon Connect instance. The associated required actions grant permission modify the settings for the instance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "firehose:DescribeDeliveryStream",
            "firehose:ListDeliveryStreams",
            "kinesis:DescribeStream",
            "kinesis:ListStreams",
            "kms:CreateGrant",
            "kms:DescribeKey",
            "kms:ListAliases",
            "kms:RetireGrant",
            "s3:CreateBucket",
            "s3:GetBucketLocation",
            "s3:ListAllMyBuckets"
        ]
    }
}
</code></pre>
<h3 id="resumecontactrecording"><a aria-hidden="true" class="anchor-heading" href="#resumecontactrecording"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ResumeContactRecording</h3>
<ul>
<li>description: Grants permissions to resume recording for the specified contact.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "contact": {
        "resource_type": "contact",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startchatcontact"><a aria-hidden="true" class="anchor-heading" href="#startchatcontact"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartChatContact</h3>
<ul>
<li>description: Grants permissions to initiate a chat using the Amazon Connect API.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "contact-flow": {
        "resource_type": "contact-flow",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startcontactrecording"><a aria-hidden="true" class="anchor-heading" href="#startcontactrecording"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartContactRecording</h3>
<ul>
<li>description: Grants permissions to start recording for the specified contact.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "contact": {
        "resource_type": "contact",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startoutboundvoicecontact"><a aria-hidden="true" class="anchor-heading" href="#startoutboundvoicecontact"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartOutboundVoiceContact</h3>
<ul>
<li>description: Grants permissions to initiate outbound calls using the Amazon Connect API.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "contact": {
        "resource_type": "contact",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopcontact"><a aria-hidden="true" class="anchor-heading" href="#stopcontact"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopContact</h3>
<ul>
<li>description: Grants permissions to stop contacts that were initiated using the Amazon Connect API. If you use this operation on an active contact the contact ends, even if the agent is active on a call with a customer.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "contact": {
        "resource_type": "contact",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopcontactrecording"><a aria-hidden="true" class="anchor-heading" href="#stopcontactrecording"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopContactRecording</h3>
<ul>
<li>description: Grants permissions to stop recording for the specified contact.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "contact": {
        "resource_type": "contact",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="suspendcontactrecording"><a aria-hidden="true" class="anchor-heading" href="#suspendcontactrecording"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SuspendContactRecording</h3>
<ul>
<li>description: Grants permissions to suspend recording for the specified contact.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "contact": {
        "resource_type": "contact",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Grants permissions to tag an Amazon Connect resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "contact-flow": {
        "resource_type": "contact-flow",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "routing-profile": {
        "resource_type": "routing-profile",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "user": {
        "resource_type": "user",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys",
            "aws:RequestTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Grants permissions to untag an Amazon Connect resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "contact-flow": {
        "resource_type": "contact-flow",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "routing-profile": {
        "resource_type": "routing-profile",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "user": {
        "resource_type": "user",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatecontactattributes"><a aria-hidden="true" class="anchor-heading" href="#updatecontactattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateContactAttributes</h3>
<ul>
<li>description: Grants permissions to create or update the contact attributes associated with the specified contact.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "contact": {
        "resource_type": "contact",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatecontactflowcontent"><a aria-hidden="true" class="anchor-heading" href="#updatecontactflowcontent"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateContactFlowContent</h3>
<ul>
<li>description: Grants permissions to update contact flow content in an Amazon Connect instance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "contact-flow": {
        "resource_type": "contact-flow",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatecontactflowname"><a aria-hidden="true" class="anchor-heading" href="#updatecontactflowname"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateContactFlowName</h3>
<ul>
<li>description: Grants permissions to update the name and description of a contact flow in an Amazon Connect instance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "contact-flow": {
        "resource_type": "contact-flow",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateroutingprofileconcurrency"><a aria-hidden="true" class="anchor-heading" href="#updateroutingprofileconcurrency"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateRoutingProfileConcurrency</h3>
<ul>
<li>description: Grants permissions to update the concurrency in a routing profile in an Amazon Connect instance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "routing-profile": {
        "resource_type": "routing-profile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateroutingprofiledefaultoutboundqueue"><a aria-hidden="true" class="anchor-heading" href="#updateroutingprofiledefaultoutboundqueue"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateRoutingProfileDefaultOutboundQueue</h3>
<ul>
<li>description: Grants permissions to update the outbound queue in a routing profile in an Amazon Connect instance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "queue": {
        "resource_type": "queue",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "routing-profile": {
        "resource_type": "routing-profile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateroutingprofilename"><a aria-hidden="true" class="anchor-heading" href="#updateroutingprofilename"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateRoutingProfileName</h3>
<ul>
<li>description: Grants permissions to update a routing profile name and description in an Amazon Connect instance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "routing-profile": {
        "resource_type": "routing-profile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateroutingprofilequeues"><a aria-hidden="true" class="anchor-heading" href="#updateroutingprofilequeues"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateRoutingProfileQueues</h3>
<ul>
<li>description: Grants permissions to update the queues in routing profile in an Amazon Connect instance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "routing-profile": {
        "resource_type": "routing-profile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateuserhierarchy"><a aria-hidden="true" class="anchor-heading" href="#updateuserhierarchy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateUserHierarchy</h3>
<ul>
<li>description: Grants permissions to update a hierarchy group for a user in an Amazon Connect instance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "hierarchy-group": {
        "resource_type": "hierarchy-group",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateuseridentityinfo"><a aria-hidden="true" class="anchor-heading" href="#updateuseridentityinfo"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateUserIdentityInfo</h3>
<ul>
<li>description: Grants permissions to update identity information for a user in an Amazon Connect instance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateuserphoneconfig"><a aria-hidden="true" class="anchor-heading" href="#updateuserphoneconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateUserPhoneConfig</h3>
<ul>
<li>description: Grants permissions to update phone configuration settings for a user in an Amazon Connect instance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateuserroutingprofile"><a aria-hidden="true" class="anchor-heading" href="#updateuserroutingprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateUserRoutingProfile</h3>
<ul>
<li>description: Grants permissions to update a routing profile for a user in an Amazon Connect instance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "routing-profile": {
        "resource_type": "routing-profile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateusersecurityprofiles"><a aria-hidden="true" class="anchor-heading" href="#updateusersecurityprofiles"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateUserSecurityProfiles</h3>
<ul>
<li>description: Grants permissions to update security profiles for a user in an Amazon Connect instance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "security-profile": {
        "resource_type": "security-profile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Connect"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/api-gateway.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>API Gateway - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/api-gateway.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/api-gateway.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/api-gateway.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="API Gateway - undefined" />
  <meta name="twitter:title" content="API Gateway - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/1f759d8c-cca7-4fc4-9aa2-6dbf6e596abf.html">Services</a></li><li class="breadcrumb-nav-list-item">API Gateway</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/open-guides/og-aws" target="_blank"> og-aws  </li>
              
              <li> <a href="https://www.awsgeek.com/" target="_blank"> <NAME>  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="API Gateway">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <p><img src="/assets/images/Amazon-API-Gateway_en.jpg"></p>
<blockquote>
<p>Image from <a href="https://www.awsgeek.com/Amazon-API-Gateway/">@awsgeek</a></p>
</blockquote>
<h1 id="api-gateway"><a aria-hidden="true" class="anchor-heading" href="#api-gateway"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>API Gateway</h1>
<h3 id="api-gateway-basics"><a aria-hidden="true" class="anchor-heading" href="#api-gateway-basics"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>API Gateway Basics</h3>
<ul>
<li>📒 <a href="https://aws.amazon.com/api-gateway/">Homepage</a> ∙ <a href="http://docs.aws.amazon.com/apigateway/latest/developerguide/">Developer guide</a> ∙ <a href="https://aws.amazon.com/api-gateway/faqs/">FAQ</a> ∙ <a href="https://aws.amazon.com/api-gateway/pricing/">Pricing</a></li>
<li><strong>API Gateway</strong> provides a scalable, secured front-end for service APIs, and can work with Lambda, Elastic Beanstalk, or regular EC2 services.</li>
<li>It allows “serverless” deployment of applications built with Lambda.</li>
<li>🔸Switching over deployments after upgrades can be tricky. There are no built-in mechanisms to have a single domain name migrate from one API gateway to another one. So it may be necessary to build an additional layer in front (even another API Gateway) to allow smooth migration from one deployment to another.</li>
</ul>
<h3 id="api-gateway-alternatives-and-lock-in"><a aria-hidden="true" class="anchor-heading" href="#api-gateway-alternatives-and-lock-in"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>API Gateway Alternatives and Lock-In</h3>
<ul>
<li><a href="https://getkong.org">Kong</a> is an open-source, on-premises API and microservices gateway built on nginx with Lua. Kong is extensible through “plugins”.</li>
<li><a href="https://tyk.io">Tyk</a> is an open-source API gateway implemented in Go and available in the cloud, on-premises or hybrid.</li>
</ul>
<h3 id="api-gateway-tips"><a aria-hidden="true" class="anchor-heading" href="#api-gateway-tips"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>API Gateway Tips</h3>
<ul>
<li>🔹Prior to 2016-11, you could only send and receive plain text data (so people would base64-encode binary data), but binary data is <a href="https://aws.amazon.com/about-aws/whats-new/2016/11/binary-data-now-supported-by-api-gateway/">now</a> supported.</li>
<li>API Gateway supports the OpenApi specification (aka <a href="https://swagger.io/">Swagger</a>). This allows you to describe your API in a language-agnostic way and use various tools to generate code supporting your API.</li>
<li>Generating clients is extremely easy, either through the AWS console or using the get-sdk API.</li>
<li>API Gateway integrates with CloudWatch out-of-the-box, allowing for easy logging of requests and responses.
<ul>
<li>Note that if your request or response are too large, CloudWatch will truncate the log. For full request/reply logging, make sure to do so in your integration (e.g. Lambda).</li>
<li>A good practice when calling API Gateway APIs is to log the request ID on the client. You can later refer to these request IDs in CloudWatch for easier tracing and debugging.</li>
</ul>
</li>
<li>There are multiple ways to secure your API, including built-in support for <a href="http://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-integrate-with-cognito.html">AWS Cognito</a>. For most use-cases, Cognito is the easiest and simplest way to authenticate users.
<ul>
<li>Although you can roll your own solution using a <a href="http://docs.aws.amazon.com/apigateway/latest/developerguide/use-custom-authorizer.html">custom authorizer</a>, which is basically a Lambda you define that determines if a request is acceptable or not.</li>
</ul>
</li>
<li>While API Gateway lends itself well to REST-style development, it's perfectly reasonable to implement an RPC-style API in API Gateway as well. Depending on your use-case, this can often lead to a much simpler API structure and smoother client experience.
<ul>
<li>RPC-style APIs are particularly useful when designing services that sit deeper in the stack and don't serve content directly to users.</li>
</ul>
</li>
</ul>
<h3 id="api-gateway-gotchas-and-limitations"><a aria-hidden="true" class="anchor-heading" href="#api-gateway-gotchas-and-limitations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>API Gateway Gotchas and Limitations</h3>
<ul>
<li>🔸API Gateway only supports encrypted (https) endpoints, and does not support unencrypted HTTP. (This is probably a good thing.)</li>
<li>🔸API Gateway doesn’t support multi-region deployments for high availability. It is a service that is deployed in a single region but comes with a global endpoint that is served from AWS edge locations (similar to a CloudFront distribution). You cannot have multiple API Gateways with the same hostname in different AWS regions and use Route 53 to distribute the traffic. More in <a href="https://forums.aws.amazon.com/thread.jspa?messageID=735342&#x26;#735342">this forum post</a>.</li>
<li>🔸Integration timeout: All of the various integration types (eg: Lambda, HTTP) for API Gateway have timeouts, as described <a href="http://docs.aws.amazon.com/apigateway/latest/developerguide/limits.html#api-gateway-limits">here</a>. Unlike some limits, these timeouts can't be increased.</li>
<li>🔸API Gateway returns a 504 status code for any network or low level transport related issue. When this happens, you may see a message in the CloudWatch logs for the request that includes the message: <code>Execution failed due to an internal error</code>. One possible reason for this error is that even though your backend server is up and running, it may be doing something outside of the HTTP specification (like not sending well-formed chunked messages). You can test by hitting your backend directly with the <code>curl --raw -S -i &#x3C;backend-endpoint-url></code> and seeing if it complains.</li>
<li>🔸AWS X-Ray support exists but cumbersome to use. If you have other AWS services calling API Gateway, your trace will seemingly end there. API Gateway will also not appear as a node in your service map. <a href="http://docs.aws.amazon.com/xray/latest/devguide/xray-services-apigateway.html">More here</a>.</li>
<li>🔸Be careful using the export feature. The resulting Swagger template is often incomplete and doesn't integrate well with the Swagger extensions for things such as CORS.</li>
<li>🔸Many changes to API Gateway resources need to be 'deployed' via console or API call. Unfortunately, API Gateway is terrible about notifying the user when changes are staged for deployment and what changes require deployment. If you've changed something about your API and it's not taking effect, there's a decent chance you just need to deploy it.
<ul>
<li>In particular, when deploying an API Gateway as part of a CloudFormation stack, changes will not automatically deploy unless the deployment resource itself was changed. You can change work around this by always changing the deployment resource on a CloudFormation update, or running a custom resource that ensures the deployment is made.</li>
<li>Alternatively, by using the <a href="https://github.com/awslabs/serverless-application-model">Serverless Application Model</a> definition for an API Gateway resource, you can always expect the API to be deployed on a stack update since SAM will generate a new deployment every time.</li>
</ul>
</li>
<li>🔸API Gateway does not support nested query parameters on method requests.</li>
<li>🔸API Gateway limits number of resources to 300, as described <a href="http://docs.aws.amazon.com/apigateway/latest/developerguide/limits.html#api-gateway-limits">here</a>. This is something to be considered when you start using API Gateway as a platform where your team/organization deploys to the same API Gateway.</li>
</ul>
<p>🚧 <a href="CONTRIBUTING.md"><em>Please help expand this incomplete section.</em></a></p><span id="navId" data="api-gateway"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-S3 Glacier.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>S3 Glacier - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-S3 Glacier.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-S3 Glacier.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-S3 Glacier.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="S3 Glacier - undefined" />
  <meta name="twitter:title" content="S3 Glacier - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">S3 Glacier</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="S3 Glacier">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="s3-glacier"><a aria-hidden="true" class="anchor-heading" href="#s3-glacier"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>S3 Glacier</h1>
<ul>
<li>prefix: glacier</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="abortmultipartupload"><a aria-hidden="true" class="anchor-heading" href="#abortmultipartupload"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AbortMultipartUpload</h3>
<ul>
<li>description: Aborts a multipart upload identified by the upload ID</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vault": {
        "resource_type": "vault",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="abortvaultlock"><a aria-hidden="true" class="anchor-heading" href="#abortvaultlock"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AbortVaultLock</h3>
<ul>
<li>description: Aborts the vault locking process if the vault lock is not in the Locked state</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vault": {
        "resource_type": "vault",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="addtagstovault"><a aria-hidden="true" class="anchor-heading" href="#addtagstovault"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddTagsToVault</h3>
<ul>
<li>description: Adds the specified tags to a vault</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vault": {
        "resource_type": "vault",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="completemultipartupload"><a aria-hidden="true" class="anchor-heading" href="#completemultipartupload"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CompleteMultipartUpload</h3>
<ul>
<li>description: Completes a multipart upload process</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vault": {
        "resource_type": "vault",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="completevaultlock"><a aria-hidden="true" class="anchor-heading" href="#completevaultlock"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CompleteVaultLock</h3>
<ul>
<li>description: Completes the vault locking process</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vault": {
        "resource_type": "vault",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createvault"><a aria-hidden="true" class="anchor-heading" href="#createvault"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateVault</h3>
<ul>
<li>description: Creates a new vault with the specified name</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vault": {
        "resource_type": "vault",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletearchive"><a aria-hidden="true" class="anchor-heading" href="#deletearchive"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteArchive</h3>
<ul>
<li>description: Deletes an archive from a vault</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vault": {
        "resource_type": "vault",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "glacier:ArchiveAgeInDays"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletevault"><a aria-hidden="true" class="anchor-heading" href="#deletevault"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteVault</h3>
<ul>
<li>description: Deletes a vault</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vault": {
        "resource_type": "vault",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletevaultaccesspolicy"><a aria-hidden="true" class="anchor-heading" href="#deletevaultaccesspolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteVaultAccessPolicy</h3>
<ul>
<li>description: Deletes the access policy associated with the specified vault</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vault": {
        "resource_type": "vault",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletevaultnotifications"><a aria-hidden="true" class="anchor-heading" href="#deletevaultnotifications"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteVaultNotifications</h3>
<ul>
<li>description: Deletes the notification configuration set for a vault</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vault": {
        "resource_type": "vault",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describejob"><a aria-hidden="true" class="anchor-heading" href="#describejob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeJob</h3>
<ul>
<li>description: Returns information about a job you previously initiated</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vault": {
        "resource_type": "vault",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describevault"><a aria-hidden="true" class="anchor-heading" href="#describevault"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeVault</h3>
<ul>
<li>description: Returns information about a vault</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vault": {
        "resource_type": "vault",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdataretrievalpolicy"><a aria-hidden="true" class="anchor-heading" href="#getdataretrievalpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDataRetrievalPolicy</h3>
<ul>
<li>description: Returns the current data retrieval policy for the account and region specified in the GET request</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getjoboutput"><a aria-hidden="true" class="anchor-heading" href="#getjoboutput"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetJobOutput</h3>
<ul>
<li>description: Downloads the output of the job you initiated</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vault": {
        "resource_type": "vault",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getvaultaccesspolicy"><a aria-hidden="true" class="anchor-heading" href="#getvaultaccesspolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetVaultAccessPolicy</h3>
<ul>
<li>description: Retrieves the access-policy subresource set on the vault</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vault": {
        "resource_type": "vault",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getvaultlock"><a aria-hidden="true" class="anchor-heading" href="#getvaultlock"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetVaultLock</h3>
<ul>
<li>description: Retrieves attributes from the lock-policy subresource set on the specified vault</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vault": {
        "resource_type": "vault",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getvaultnotifications"><a aria-hidden="true" class="anchor-heading" href="#getvaultnotifications"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetVaultNotifications</h3>
<ul>
<li>description: Retrieves the notification-configuration subresource set on the vault</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vault": {
        "resource_type": "vault",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="initiatejob"><a aria-hidden="true" class="anchor-heading" href="#initiatejob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>InitiateJob</h3>
<ul>
<li>description: Initiates a job of the specified type</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vault": {
        "resource_type": "vault",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "glacier:ArchiveAgeInDays"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="initiatemultipartupload"><a aria-hidden="true" class="anchor-heading" href="#initiatemultipartupload"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>InitiateMultipartUpload</h3>
<ul>
<li>description: Initiates a multipart upload</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vault": {
        "resource_type": "vault",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="initiatevaultlock"><a aria-hidden="true" class="anchor-heading" href="#initiatevaultlock"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>InitiateVaultLock</h3>
<ul>
<li>description: Initiates the vault locking process</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vault": {
        "resource_type": "vault",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listjobs"><a aria-hidden="true" class="anchor-heading" href="#listjobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListJobs</h3>
<ul>
<li>description: Lists jobs for a vault that are in-progress and jobs that have recently finished</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vault": {
        "resource_type": "vault",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listmultipartuploads"><a aria-hidden="true" class="anchor-heading" href="#listmultipartuploads"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListMultipartUploads</h3>
<ul>
<li>description: Lists in-progress multipart uploads for the specified vault</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vault": {
        "resource_type": "vault",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listparts"><a aria-hidden="true" class="anchor-heading" href="#listparts"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListParts</h3>
<ul>
<li>description: Lists the parts of an archive that have been uploaded in a specific multipart upload</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vault": {
        "resource_type": "vault",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listprovisionedcapacity"><a aria-hidden="true" class="anchor-heading" href="#listprovisionedcapacity"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListProvisionedCapacity</h3>
<ul>
<li>description: This operation lists the provisioned capacity for the specified AWS account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforvault"><a aria-hidden="true" class="anchor-heading" href="#listtagsforvault"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForVault</h3>
<ul>
<li>description: Lists all the tags attached to a vault</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vault": {
        "resource_type": "vault",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listvaults"><a aria-hidden="true" class="anchor-heading" href="#listvaults"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListVaults</h3>
<ul>
<li>description: Lists all vaults</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="purchaseprovisionedcapacity"><a aria-hidden="true" class="anchor-heading" href="#purchaseprovisionedcapacity"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PurchaseProvisionedCapacity</h3>
<ul>
<li>description: This operation purchases a provisioned capacity unit for an AWS account.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="removetagsfromvault"><a aria-hidden="true" class="anchor-heading" href="#removetagsfromvault"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemoveTagsFromVault</h3>
<ul>
<li>description: Removes one or more tags from the set of tags attached to a vault</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vault": {
        "resource_type": "vault",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setdataretrievalpolicy"><a aria-hidden="true" class="anchor-heading" href="#setdataretrievalpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetDataRetrievalPolicy</h3>
<ul>
<li>description: Sets and then enacts a data retrieval policy in the region specified in the PUT request</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setvaultaccesspolicy"><a aria-hidden="true" class="anchor-heading" href="#setvaultaccesspolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetVaultAccessPolicy</h3>
<ul>
<li>description: Configures an access policy for a vault and will overwrite an existing policy</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vault": {
        "resource_type": "vault",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setvaultnotifications"><a aria-hidden="true" class="anchor-heading" href="#setvaultnotifications"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetVaultNotifications</h3>
<ul>
<li>description: Configures vault notifications</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vault": {
        "resource_type": "vault",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="uploadarchive"><a aria-hidden="true" class="anchor-heading" href="#uploadarchive"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UploadArchive</h3>
<ul>
<li>description: Adds an archive to a vault</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vault": {
        "resource_type": "vault",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="uploadmultipartpart"><a aria-hidden="true" class="anchor-heading" href="#uploadmultipartpart"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UploadMultipartPart</h3>
<ul>
<li>description: Uploads a part of an archive</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vault": {
        "resource_type": "vault",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-S3 Glacier"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Mechanical Turk.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Mechanical Turk - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Mechanical Turk.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Mechanical Turk.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Mechanical Turk.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Mechanical Turk - undefined" />
  <meta name="twitter:title" content="Mechanical Turk - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Mechanical Turk</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Mechanical Turk">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="mechanical-turk"><a aria-hidden="true" class="anchor-heading" href="#mechanical-turk"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Mechanical Turk</h1>
<ul>
<li>prefix: mechanicalturk</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="acceptqualificationrequest"><a aria-hidden="true" class="anchor-heading" href="#acceptqualificationrequest"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AcceptQualificationRequest</h3>
<ul>
<li>description: The AcceptQualificationRequest operation grants a Worker's request for a Qualification</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="approveassignment"><a aria-hidden="true" class="anchor-heading" href="#approveassignment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ApproveAssignment</h3>
<ul>
<li>description: The ApproveAssignment operation approves the results of a completed assignment</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="associatequalificationwithworker"><a aria-hidden="true" class="anchor-heading" href="#associatequalificationwithworker"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateQualificationWithWorker</h3>
<ul>
<li>description: The AssociateQualificationWithWorker operation gives a Worker a Qualification</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createadditionalassignmentsforhit"><a aria-hidden="true" class="anchor-heading" href="#createadditionalassignmentsforhit"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateAdditionalAssignmentsForHIT</h3>
<ul>
<li>description: The CreateAdditionalAssignmentsForHIT operation increases the maximum number of assignments of an existing HIT</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createhit"><a aria-hidden="true" class="anchor-heading" href="#createhit"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateHIT</h3>
<ul>
<li>description: The CreateHIT operation creates a new HIT (Human Intelligence Task)</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createhittype"><a aria-hidden="true" class="anchor-heading" href="#createhittype"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateHITType</h3>
<ul>
<li>description: The CreateHITType operation creates a new HIT type</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createhitwithhittype"><a aria-hidden="true" class="anchor-heading" href="#createhitwithhittype"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateHITWithHITType</h3>
<ul>
<li>description: The CreateHITWithHITType operation creates a new Human Intelligence Task (HIT) using an existing HITTypeID generated by the CreateHITType operation</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createqualificationtype"><a aria-hidden="true" class="anchor-heading" href="#createqualificationtype"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateQualificationType</h3>
<ul>
<li>description: The CreateQualificationType operation creates a new Qualification type, which is represented by a QualificationType data structure</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createworkerblock"><a aria-hidden="true" class="anchor-heading" href="#createworkerblock"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateWorkerBlock</h3>
<ul>
<li>description: The CreateWorkerBlock operation allows you to prevent a Worker from working on your HITs</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletehit"><a aria-hidden="true" class="anchor-heading" href="#deletehit"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteHIT</h3>
<ul>
<li>description: The DeleteHIT operation disposes of a HIT that is no longer needed</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletequalificationtype"><a aria-hidden="true" class="anchor-heading" href="#deletequalificationtype"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteQualificationType</h3>
<ul>
<li>description: The DeleteQualificationType disposes a Qualification type and disposes any HIT types that are associated with the Qualification type</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteworkerblock"><a aria-hidden="true" class="anchor-heading" href="#deleteworkerblock"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteWorkerBlock</h3>
<ul>
<li>description: The DeleteWorkerBlock operation allows you to reinstate a blocked Worker to work on your HITs</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociatequalificationfromworker"><a aria-hidden="true" class="anchor-heading" href="#disassociatequalificationfromworker"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateQualificationFromWorker</h3>
<ul>
<li>description: The DisassociateQualificationFromWorker revokes a previously granted Qualification from a user</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getaccountbalance"><a aria-hidden="true" class="anchor-heading" href="#getaccountbalance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAccountBalance</h3>
<ul>
<li>description: The GetAccountBalance operation retrieves the amount of money in your Amazon Mechanical Turk account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getassignment"><a aria-hidden="true" class="anchor-heading" href="#getassignment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAssignment</h3>
<ul>
<li>description: The GetAssignment retrieves an assignment with an AssignmentStatus value of Submitted, Approved, or Rejected, using the assignment's ID</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getfileuploadurl"><a aria-hidden="true" class="anchor-heading" href="#getfileuploadurl"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetFileUploadURL</h3>
<ul>
<li>description: The GetFileUploadURL operation generates and returns a temporary URL</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gethit"><a aria-hidden="true" class="anchor-heading" href="#gethit"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetHIT</h3>
<ul>
<li>description: The GetHIT operation retrieves the details of the specified HIT</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getqualificationscore"><a aria-hidden="true" class="anchor-heading" href="#getqualificationscore"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetQualificationScore</h3>
<ul>
<li>description: The GetQualificationScore operation returns the value of a Worker's Qualification for a given Qualification type</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getqualificationtype"><a aria-hidden="true" class="anchor-heading" href="#getqualificationtype"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetQualificationType</h3>
<ul>
<li>description: The GetQualificationType operation retrieves information about a Qualification type using its ID</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listassignmentsforhit"><a aria-hidden="true" class="anchor-heading" href="#listassignmentsforhit"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAssignmentsForHIT</h3>
<ul>
<li>description: The ListAssignmentsForHIT operation retrieves completed assignments for a HIT</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listbonuspayments"><a aria-hidden="true" class="anchor-heading" href="#listbonuspayments"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListBonusPayments</h3>
<ul>
<li>description: The ListBonusPayments operation retrieves the amounts of bonuses you have paid to Workers for a given HIT or assignment</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listhits"><a aria-hidden="true" class="anchor-heading" href="#listhits"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListHITs</h3>
<ul>
<li>description: The ListHITs operation returns all of a Requester's HITs</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listhitsforqualificationtype"><a aria-hidden="true" class="anchor-heading" href="#listhitsforqualificationtype"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListHITsForQualificationType</h3>
<ul>
<li>description: The ListHITsForQualificationType operation returns the HITs that use the given QualififcationType for a QualificationRequirement</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listqualificationrequests"><a aria-hidden="true" class="anchor-heading" href="#listqualificationrequests"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListQualificationRequests</h3>
<ul>
<li>description: The ListQualificationRequests operation retrieves requests for Qualifications of a particular Qualification type</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listqualificationtypes"><a aria-hidden="true" class="anchor-heading" href="#listqualificationtypes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListQualificationTypes</h3>
<ul>
<li>description: The ListQualificationTypes operation searches for Qualification types using the specified search query, and returns a list of Qualification types</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listreviewpolicyresultsforhit"><a aria-hidden="true" class="anchor-heading" href="#listreviewpolicyresultsforhit"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListReviewPolicyResultsForHIT</h3>
<ul>
<li>description: The ListReviewPolicyResultsForHIT operation retrieves the computed results and the actions taken in the course of executing your Review Policies during a CreateHIT operation</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listreviewablehits"><a aria-hidden="true" class="anchor-heading" href="#listreviewablehits"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListReviewableHITs</h3>
<ul>
<li>description: The ListReviewableHITs operation returns all of a Requester's HITs that have not been approved or rejected</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listworkerblocks"><a aria-hidden="true" class="anchor-heading" href="#listworkerblocks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListWorkerBlocks</h3>
<ul>
<li>description: The ListWorkersBlocks operation retrieves a list of Workers who are blocked from working on your HITs</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listworkerswithqualificationtype"><a aria-hidden="true" class="anchor-heading" href="#listworkerswithqualificationtype"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListWorkersWithQualificationType</h3>
<ul>
<li>description: The ListWorkersWithQualificationType operation returns all of the Workers with a given Qualification type</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="notifyworkers"><a aria-hidden="true" class="anchor-heading" href="#notifyworkers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>NotifyWorkers</h3>
<ul>
<li>description: The NotifyWorkers operation sends an email to one or more Workers that you specify with the Worker ID</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="rejectassignment"><a aria-hidden="true" class="anchor-heading" href="#rejectassignment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RejectAssignment</h3>
<ul>
<li>description: The RejectAssignment operation rejects the results of a completed assignment</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="rejectqualificationrequest"><a aria-hidden="true" class="anchor-heading" href="#rejectqualificationrequest"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RejectQualificationRequest</h3>
<ul>
<li>description: The RejectQualificationRequest operation rejects a user's request for a Qualification</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="sendbonus"><a aria-hidden="true" class="anchor-heading" href="#sendbonus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SendBonus</h3>
<ul>
<li>description: The SendBonus operation issues a payment of money from your account to a Worker</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="sendtesteventnotification"><a aria-hidden="true" class="anchor-heading" href="#sendtesteventnotification"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SendTestEventNotification</h3>
<ul>
<li>description: The SendTestEventNotification operation causes Amazon Mechanical Turk to send a notification message as if a HIT event occurred, according to the provided notification specification</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateexpirationforhit"><a aria-hidden="true" class="anchor-heading" href="#updateexpirationforhit"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateExpirationForHIT</h3>
<ul>
<li>description: The UpdateExpirationForHIT operation allows you extend the expiration time of a HIT beyond is current expiration or expire a HIT immediately</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatehitreviewstatus"><a aria-hidden="true" class="anchor-heading" href="#updatehitreviewstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateHITReviewStatus</h3>
<ul>
<li>description: The UpdateHITReviewStatus operation toggles the status of a HIT</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatehittypeofhit"><a aria-hidden="true" class="anchor-heading" href="#updatehittypeofhit"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateHITTypeOfHIT</h3>
<ul>
<li>description: The UpdateHITTypeOfHIT operation allows you to change the HITType properties of a HIT</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatenotificationsettings"><a aria-hidden="true" class="anchor-heading" href="#updatenotificationsettings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateNotificationSettings</h3>
<ul>
<li>description: The UpdateNotificationSettings operation creates, updates, disables or re-enables notifications for a HIT type</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatequalificationtype"><a aria-hidden="true" class="anchor-heading" href="#updatequalificationtype"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateQualificationType</h3>
<ul>
<li>description: The UpdateQualificationType operation modifies the attributes of an existing Qualification type, which is represented by a QualificationType data structure</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Mechanical Turk"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Event Bridge.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Event Bridge - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Event Bridge.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Event Bridge.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Event Bridge.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Event Bridge - undefined" />
  <meta name="twitter:title" content="Event Bridge - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Event Bridge</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Event Bridge">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="event-bridge"><a aria-hidden="true" class="anchor-heading" href="#event-bridge"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Event Bridge</h1>
<ul>
<li>prefix: events</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="activateeventsource"><a aria-hidden="true" class="anchor-heading" href="#activateeventsource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ActivateEventSource</h3>
<ul>
<li>description: Activates a partner event source that has been deactivated. Once activated, your matching event bus will start receiving events from the event source.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "event-source": {
        "resource_type": "event-source",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createeventbus"><a aria-hidden="true" class="anchor-heading" href="#createeventbus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateEventBus</h3>
<ul>
<li>description: Creates a new event bus within your account. This can be a custom event bus which you can use to receive events from your own custom applications and services, or it can be a partner event bus which can be matched to a partner event source.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "event-bus": {
        "resource_type": "event-bus",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createpartnereventsource"><a aria-hidden="true" class="anchor-heading" href="#createpartnereventsource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreatePartnerEventSource</h3>
<ul>
<li>description: Called by an AWS partner to create a partner event source.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "event-source": {
        "resource_type": "event-source",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deactivateeventsource"><a aria-hidden="true" class="anchor-heading" href="#deactivateeventsource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeactivateEventSource</h3>
<ul>
<li>description: Called by an AWS partner to create a partner event source.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "event-source": {
        "resource_type": "event-source",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteeventbus"><a aria-hidden="true" class="anchor-heading" href="#deleteeventbus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteEventBus</h3>
<ul>
<li>description: Deletes the specified custom event bus or partner event bus. All rules associated with this event bus are also deleted. You can't delete your account's default event bus.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "event-bus": {
        "resource_type": "event-bus",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletepartnereventsource"><a aria-hidden="true" class="anchor-heading" href="#deletepartnereventsource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeletePartnerEventSource</h3>
<ul>
<li>description: Called by an AWS partner to delete a partner event source.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "event-source": {
        "resource_type": "event-source",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleterule"><a aria-hidden="true" class="anchor-heading" href="#deleterule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteRule</h3>
<ul>
<li>description: Deletes a rule. You must remove all targets from a rule using RemoveTargets before you can delete the rule.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "rule": {
        "resource_type": "rule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeeventbus"><a aria-hidden="true" class="anchor-heading" href="#describeeventbus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEventBus</h3>
<ul>
<li>description: Displays the external AWS accounts that are permitted to write events to your account using your account's event bus, and the associated policy.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "event-bus": {
        "resource_type": "event-bus",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeeventsource"><a aria-hidden="true" class="anchor-heading" href="#describeeventsource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEventSource</h3>
<ul>
<li>description: Describes the details of the specified partner event source that is shared with your account.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "event-source": {
        "resource_type": "event-source",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describepartnereventsource"><a aria-hidden="true" class="anchor-heading" href="#describepartnereventsource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribePartnerEventSource</h3>
<ul>
<li>description: Called by an AWS partner describe the details of the specified partner event source that they have created.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "event-source": {
        "resource_type": "event-source",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describerule"><a aria-hidden="true" class="anchor-heading" href="#describerule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeRule</h3>
<ul>
<li>description: Describes the details of the specified rule.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "rule": {
        "resource_type": "rule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disablerule"><a aria-hidden="true" class="anchor-heading" href="#disablerule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisableRule</h3>
<ul>
<li>description: Disables a rule. A disabled rule won't match any events, and won't self-trigger if it has a schedule expression.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "rule": {
        "resource_type": "rule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="enablerule"><a aria-hidden="true" class="anchor-heading" href="#enablerule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EnableRule</h3>
<ul>
<li>description: Enables a rule. If the rule does not exist, the operation fails.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "rule": {
        "resource_type": "rule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listeventbuses"><a aria-hidden="true" class="anchor-heading" href="#listeventbuses"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListEventBuses</h3>
<ul>
<li>description: Lists all the event buses in your account, including the default event bus, custom event buses, and partner event buses.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listeventsources"><a aria-hidden="true" class="anchor-heading" href="#listeventsources"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListEventSources</h3>
<ul>
<li>description: Lists the event sources shared with this account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listpartnereventsourceaccounts"><a aria-hidden="true" class="anchor-heading" href="#listpartnereventsourceaccounts"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPartnerEventSourceAccounts</h3>
<ul>
<li>description: Called by an AWS partner to display the AWS account ID that the specified partner event source is associated with.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "event-source": {
        "resource_type": "event-source",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listpartnereventsources"><a aria-hidden="true" class="anchor-heading" href="#listpartnereventsources"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPartnerEventSources</h3>
<ul>
<li>description: Called by an AWS partner to list all the partner event sources that they have created.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listrulenamesbytarget"><a aria-hidden="true" class="anchor-heading" href="#listrulenamesbytarget"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListRuleNamesByTarget</h3>
<ul>
<li>description: Lists the names of the rules that the given target is put to.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listrules"><a aria-hidden="true" class="anchor-heading" href="#listrules"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListRules</h3>
<ul>
<li>description: Lists the Amazon EventBridge rules in your account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: This action lists tags for an Amazon EventBridge resource.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "event-bus": {
        "resource_type": "event-bus",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "rule": {
        "resource_type": "rule",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtargetsbyrule"><a aria-hidden="true" class="anchor-heading" href="#listtargetsbyrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTargetsByRule</h3>
<ul>
<li>description: Lists of targets assigned to the rule.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "rule": {
        "resource_type": "rule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putevents"><a aria-hidden="true" class="anchor-heading" href="#putevents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutEvents</h3>
<ul>
<li>description: Sends custom events to Amazon EventBridge so that they can be matched to rules.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "event-bus": {
        "resource_type": "event-bus",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putpartnerevents"><a aria-hidden="true" class="anchor-heading" href="#putpartnerevents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutPartnerEvents</h3>
<ul>
<li>description: Sends custom events to Amazon EventBridge so that they can be matched to rules.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putpermission"><a aria-hidden="true" class="anchor-heading" href="#putpermission"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutPermission</h3>
<ul>
<li>description: Running PutPermission permits the specified AWS account to put events to your account's default event bus.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putrule"><a aria-hidden="true" class="anchor-heading" href="#putrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutRule</h3>
<ul>
<li>description: Creates or updates a rule. Rules are enabled by default, or based on value of the State parameter.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "rule": {
        "resource_type": "rule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "events:detail.userIdentity.principalId",
            "events:detail-type",
            "events:source",
            "events:detail.service",
            "events:detail.eventTypeCode",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="puttargets"><a aria-hidden="true" class="anchor-heading" href="#puttargets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutTargets</h3>
<ul>
<li>description: Adds target(s) to a rule. Targets are the resources that can be invoked when a rule is triggered.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "rule": {
        "resource_type": "rule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "events:TargetArn"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="removepermission"><a aria-hidden="true" class="anchor-heading" href="#removepermission"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemovePermission</h3>
<ul>
<li>description: Revokes the permission of another AWS account to be able to put events to your default event bus.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="removetargets"><a aria-hidden="true" class="anchor-heading" href="#removetargets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemoveTargets</h3>
<ul>
<li>description: Removes target(s) from a rule so that when the rule is triggered, those targets will no longer be invoked.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "rule": {
        "resource_type": "rule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: This action tags an Amazon EventBridge resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "event-bus": {
        "resource_type": "event-bus",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "rule": {
        "resource_type": "rule",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys",
            "aws:RequestTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="testeventpattern"><a aria-hidden="true" class="anchor-heading" href="#testeventpattern"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TestEventPattern</h3>
<ul>
<li>description: Tests whether an event pattern matches the provided event.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: This action removes a tag from an Amazon EventBridge resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "event-bus": {
        "resource_type": "event-bus",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "rule": {
        "resource_type": "rule",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Event Bridge"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/auto-scaling.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Auto Scaling - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/auto-scaling.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/auto-scaling.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/auto-scaling.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Auto Scaling - undefined" />
  <meta name="twitter:title" content="Auto Scaling - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/1f759d8c-cca7-4fc4-9aa2-6dbf6e596abf.html">Services</a></li><li class="breadcrumb-nav-list-item">Auto Scaling</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/open-guides/og-aws" target="_blank"> og-aws  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Auto Scaling">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="auto-scaling"><a aria-hidden="true" class="anchor-heading" href="#auto-scaling"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Auto Scaling</h1>
<h3 id="auto-scaling-basics"><a aria-hidden="true" class="anchor-heading" href="#auto-scaling-basics"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Auto Scaling Basics</h3>
<ul>
<li>📒 <a href="https://aws.amazon.com/autoscaling/">Homepage</a> ∙ <a href="http://docs.aws.amazon.com/autoscaling/latest/userguide/">User guide</a> ∙ <a href="https://aws.amazon.com/ec2/faqs/#Auto_Scaling">FAQ</a> ∙ <a href="https://aws.amazon.com/autoscaling/pricing/">Pricing</a> at no additional charge</li>
<li><a href="https://aws.amazon.com/autoscaling/"><strong>Auto Scaling Groups (ASGs)</strong></a> are used to control the number of instances in a service, reducing manual effort to provision or deprovision EC2 instances.</li>
<li>They can be configured through <a href="http://docs.aws.amazon.com/autoscaling/latest/userguide/policy_creating.html">Scaling Policies</a> to automatically increase or decrease instance counts based on metrics like CPU utilization, or based on a schedule.</li>
<li>There are three common ways of using ASGs - dynamic (automatically adjust instance count based on metrics for things like CPU utilization), static (maintain a specific instance count at all times), scheduled (maintain different instance counts at different times of day or on days of the week).</li>
<li>💸ASGs <a href="https://aws.amazon.com/autoscaling/pricing/">have no additional charge</a> themselves; you pay for underlying EC2 and CloudWatch services.</li>
</ul>
<h3 id="auto-scaling-tips"><a aria-hidden="true" class="anchor-heading" href="#auto-scaling-tips"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Auto Scaling Tips</h3>
<ul>
<li>💸 Better matching your cluster size to your current resource requirements through use of ASGs can result in significant cost savings for many types of workloads.</li>
<li>Pairing ASGs with CLBs is a common pattern used to deal with changes in the amount of traffic a service receives.</li>
<li>Dynamic Auto Scaling is easiest to use with stateless, horizontally scalable services.</li>
<li>Even if you are not using ASGs to dynamically increase or decrease instance counts, you should seriously consider maintaining all instances inside of ASGs – given a target instance count, the ASG will work to ensure that number of instances running is equal to that target, replacing instances for you if they die or are marked as being unhealthy. This results in consistent capacity and better stability for your service.</li>
<li>Autoscalers can be <a href="http://docs.aws.amazon.com/autoscaling/latest/userguide/healthcheck.html">configured to terminate</a> instances that a CLB or ALB has marked as being unhealthy.</li>
</ul>
<h3 id="auto-scaling-gotchas-and-limitations"><a aria-hidden="true" class="anchor-heading" href="#auto-scaling-gotchas-and-limitations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Auto Scaling Gotchas and Limitations</h3>
<ul>
<li>🔸<strong>ReplaceUnhealthy setting:</strong> By default, ASGs will kill instances that the EC2 instance manager considers to be unresponsive. It is possible for instances whose CPU is completely saturated for minutes at a time to appear to be unresponsive, causing an ASG with the default <a href="http://docs.aws.amazon.com/autoscaling/latest/userguide/as-suspend-resume-processes.html#process-types">ReplaceUnhealthy setting</a> turned on to replace them. When instances that are managed by ASGs are expected to consistently run with very high CPU, consider deactivating this setting. If you do so, however, detecting and killing unhealthy nodes will become your responsibility.</li>
</ul><span id="navId" data="auto-scaling"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-CodeCommit.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>CodeCommit - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-CodeCommit.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-CodeCommit.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-CodeCommit.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="CodeCommit - undefined" />
  <meta name="twitter:title" content="CodeCommit - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">CodeCommit</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="CodeCommit">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="codecommit"><a aria-hidden="true" class="anchor-heading" href="#codecommit"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CodeCommit</h1>
<ul>
<li>prefix: codecommit</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="associateapprovalruletemplatewithrepository"><a aria-hidden="true" class="anchor-heading" href="#associateapprovalruletemplatewithrepository"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateApprovalRuleTemplateWithRepository</h3>
<ul>
<li>description: Grants permission to associate an approval rule template with a repository</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchassociateapprovalruletemplatewithrepositories"><a aria-hidden="true" class="anchor-heading" href="#batchassociateapprovalruletemplatewithrepositories"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchAssociateApprovalRuleTemplateWithRepositories</h3>
<ul>
<li>description: Grants permission to associate an approval rule template with multiple repositories in a single operation</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchdescribemergeconflicts"><a aria-hidden="true" class="anchor-heading" href="#batchdescribemergeconflicts"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchDescribeMergeConflicts</h3>
<ul>
<li>description: Grants permission to get information about multiple merge conflicts when attempting to merge two commits using either the three-way merge or the squash merge option</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchdisassociateapprovalruletemplatefromrepositories"><a aria-hidden="true" class="anchor-heading" href="#batchdisassociateapprovalruletemplatefromrepositories"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchDisassociateApprovalRuleTemplateFromRepositories</h3>
<ul>
<li>description: Grants permission to remove the association between an approval rule template and multiple repositories in a single operation</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchgetcommits"><a aria-hidden="true" class="anchor-heading" href="#batchgetcommits"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchGetCommits</h3>
<ul>
<li>description: Grants permission to get return information about one or more commits in an AWS CodeCommit repository.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchgetpullrequests"><a aria-hidden="true" class="anchor-heading" href="#batchgetpullrequests"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchGetPullRequests</h3>
<ul>
<li>description: Grants permission to return information about one or more pull requests in an AWS CodeCommit repository</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchgetrepositories"><a aria-hidden="true" class="anchor-heading" href="#batchgetrepositories"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchGetRepositories</h3>
<ul>
<li>description: Grants permission to get information about multiple repositories</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="canceluploadarchive"><a aria-hidden="true" class="anchor-heading" href="#canceluploadarchive"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CancelUploadArchive</h3>
<ul>
<li>description: Grants permission to cancel the uploading of an archive to a pipeline in AWS CodePipeline</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createapprovalruletemplate"><a aria-hidden="true" class="anchor-heading" href="#createapprovalruletemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateApprovalRuleTemplate</h3>
<ul>
<li>description: Grants permission to create an approval rule template that will automatically create approval rules in pull requests that match the conditions defined in the template; does not grant permission to create approval rules for individual pull requests</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createbranch"><a aria-hidden="true" class="anchor-heading" href="#createbranch"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateBranch</h3>
<ul>
<li>description: Grants permission to create a branch in an AWS CodeCommit repository with this API; does not control Git create branch actions</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "codecommit:References"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createcommit"><a aria-hidden="true" class="anchor-heading" href="#createcommit"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateCommit</h3>
<ul>
<li>description: Grants permission to add, copy, move or update single or multiple files in a branch in an AWS CodeCommit repository, and generate a commit for the changes in the specified branch.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "codecommit:References"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createpullrequest"><a aria-hidden="true" class="anchor-heading" href="#createpullrequest"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreatePullRequest</h3>
<ul>
<li>description: Grants permission to create a pull request in the specified repository</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createpullrequestapprovalrule"><a aria-hidden="true" class="anchor-heading" href="#createpullrequestapprovalrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreatePullRequestApprovalRule</h3>
<ul>
<li>description: Grants permission to create an approval rule specific to an individual pull request; does not grant permission to create approval rule templates</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createrepository"><a aria-hidden="true" class="anchor-heading" href="#createrepository"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateRepository</h3>
<ul>
<li>description: Grants permission to create an AWS CodeCommit repository</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createunreferencedmergecommit"><a aria-hidden="true" class="anchor-heading" href="#createunreferencedmergecommit"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateUnreferencedMergeCommit</h3>
<ul>
<li>description: Grants permission to create an unreferenced commit that contains the result of merging two commits using either the three-way or the squash merge option; does not control Git merge actions</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "codecommit:References"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteapprovalruletemplate"><a aria-hidden="true" class="anchor-heading" href="#deleteapprovalruletemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteApprovalRuleTemplate</h3>
<ul>
<li>description: Grants permission to delete an approval rule template</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletebranch"><a aria-hidden="true" class="anchor-heading" href="#deletebranch"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteBranch</h3>
<ul>
<li>description: Grants permission to delete a branch in an AWS CodeCommit repository with this API; does not control Git delete branch actions</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "codecommit:References"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletecommentcontent"><a aria-hidden="true" class="anchor-heading" href="#deletecommentcontent"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteCommentContent</h3>
<ul>
<li>description: Grants permission to delete the content of a comment made on a change, file, or commit in a repository</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletefile"><a aria-hidden="true" class="anchor-heading" href="#deletefile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteFile</h3>
<ul>
<li>description: Grants permission to delete a specified file from a specified branch</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "codecommit:References"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletepullrequestapprovalrule"><a aria-hidden="true" class="anchor-heading" href="#deletepullrequestapprovalrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeletePullRequestApprovalRule</h3>
<ul>
<li>description: Grants permission to delete approval rule created for a pull request if the rule was not created by an approval rule template</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleterepository"><a aria-hidden="true" class="anchor-heading" href="#deleterepository"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteRepository</h3>
<ul>
<li>description: Grants permission to delete an AWS CodeCommit repository</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describemergeconflicts"><a aria-hidden="true" class="anchor-heading" href="#describemergeconflicts"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeMergeConflicts</h3>
<ul>
<li>description: Grants permission to get information about specific merge conflicts when attempting to merge two commits using either the three-way or the squash merge option</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describepullrequestevents"><a aria-hidden="true" class="anchor-heading" href="#describepullrequestevents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribePullRequestEvents</h3>
<ul>
<li>description: Grants permission to return information about one or more pull request events</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociateapprovalruletemplatefromrepository"><a aria-hidden="true" class="anchor-heading" href="#disassociateapprovalruletemplatefromrepository"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateApprovalRuleTemplateFromRepository</h3>
<ul>
<li>description: Grants permission to remove the association between an approval rule template and a repository</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="evaluatepullrequestapprovalrules"><a aria-hidden="true" class="anchor-heading" href="#evaluatepullrequestapprovalrules"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EvaluatePullRequestApprovalRules</h3>
<ul>
<li>description: Grants permission to evaluate whether a pull request is mergable based on its current approval state and approval rule requirements</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getapprovalruletemplate"><a aria-hidden="true" class="anchor-heading" href="#getapprovalruletemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetApprovalRuleTemplate</h3>
<ul>
<li>description: Grants permission to return information about an approval rule template</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getblob"><a aria-hidden="true" class="anchor-heading" href="#getblob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBlob</h3>
<ul>
<li>description: Grants permission to view the encoded content of an individual file in an AWS CodeCommit repository from the AWS CodeCommit console</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbranch"><a aria-hidden="true" class="anchor-heading" href="#getbranch"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBranch</h3>
<ul>
<li>description: Grants permission to get details about a branch in an AWS CodeCommit repository with this API; does not control Git branch actions</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcomment"><a aria-hidden="true" class="anchor-heading" href="#getcomment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetComment</h3>
<ul>
<li>description: Grants permission to get the content of a comment made on a change, file, or commit in a repository</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcommentreactions"><a aria-hidden="true" class="anchor-heading" href="#getcommentreactions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCommentReactions</h3>
<ul>
<li>description: Grants permission to get the reactions on a comment</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcommentsforcomparedcommit"><a aria-hidden="true" class="anchor-heading" href="#getcommentsforcomparedcommit"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCommentsForComparedCommit</h3>
<ul>
<li>description: Grants permission to get information about comments made on the comparison between two commits</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcommentsforpullrequest"><a aria-hidden="true" class="anchor-heading" href="#getcommentsforpullrequest"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCommentsForPullRequest</h3>
<ul>
<li>description: Grants permission to get comments made on a pull request</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcommit"><a aria-hidden="true" class="anchor-heading" href="#getcommit"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCommit</h3>
<ul>
<li>description: Grants permission to return information about a commit, including commit message and committer information, with this API; does not control Git log actions</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcommithistory"><a aria-hidden="true" class="anchor-heading" href="#getcommithistory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCommitHistory</h3>
<ul>
<li>description: Grants permission to get information about the history of commits in a repository</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcommitsfrommergebase"><a aria-hidden="true" class="anchor-heading" href="#getcommitsfrommergebase"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCommitsFromMergeBase</h3>
<ul>
<li>description: Grants permission to get information about the difference between commits in the context of a potential merge</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdifferences"><a aria-hidden="true" class="anchor-heading" href="#getdifferences"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDifferences</h3>
<ul>
<li>description: Grants permission to view information about the differences between valid commit specifiers such as a branch, tag, HEAD, commit ID, or other fully qualified reference</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getfile"><a aria-hidden="true" class="anchor-heading" href="#getfile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetFile</h3>
<ul>
<li>description: Grants permission to return the base-64 encoded contents of a specified file and its metadata</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getfolder"><a aria-hidden="true" class="anchor-heading" href="#getfolder"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetFolder</h3>
<ul>
<li>description: Grants permission to return the contents of a specified folder in a repository</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmergecommit"><a aria-hidden="true" class="anchor-heading" href="#getmergecommit"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetMergeCommit</h3>
<ul>
<li>description: Grants permission to get information about a merge commit created by one of the merge options for pull requests that creates merge commits. Not all merge options create merge commits. This permission does not control Git merge actions</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "codecommit:References"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmergeconflicts"><a aria-hidden="true" class="anchor-heading" href="#getmergeconflicts"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetMergeConflicts</h3>
<ul>
<li>description: Grants permission to get information about merge conflicts between the before and after commit IDs for a pull request in a repository</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmergeoptions"><a aria-hidden="true" class="anchor-heading" href="#getmergeoptions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetMergeOptions</h3>
<ul>
<li>description: Grants permission to get information about merge options for pull requests that can be used to merge two commits; does not control Git merge actions</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getobjectidentifier"><a aria-hidden="true" class="anchor-heading" href="#getobjectidentifier"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetObjectIdentifier</h3>
<ul>
<li>description: Grants permission to resolve blobs, trees, and commits to their identifier</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getpullrequest"><a aria-hidden="true" class="anchor-heading" href="#getpullrequest"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetPullRequest</h3>
<ul>
<li>description: Grants permission to get information about a pull request in a specified repository</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getpullrequestapprovalstates"><a aria-hidden="true" class="anchor-heading" href="#getpullrequestapprovalstates"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetPullRequestApprovalStates</h3>
<ul>
<li>description: Grants permission to retrieve the current approvals on an inputted pull request</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getpullrequestoverridestate"><a aria-hidden="true" class="anchor-heading" href="#getpullrequestoverridestate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetPullRequestOverrideState</h3>
<ul>
<li>description: Grants permission to retrieve the current override state of a given pull request</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getreferences"><a aria-hidden="true" class="anchor-heading" href="#getreferences"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetReferences</h3>
<ul>
<li>description: Grants permission to get details about references in an AWS CodeCommit repository; does not control Git reference actions</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getrepository"><a aria-hidden="true" class="anchor-heading" href="#getrepository"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRepository</h3>
<ul>
<li>description: Grants permission to get information about an AWS CodeCommit repository</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getrepositorytriggers"><a aria-hidden="true" class="anchor-heading" href="#getrepositorytriggers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRepositoryTriggers</h3>
<ul>
<li>description: Grants permission to get information about triggers configured for a repository</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gettree"><a aria-hidden="true" class="anchor-heading" href="#gettree"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetTree</h3>
<ul>
<li>description: Grants permission to view the contents of a specified tree in an AWS CodeCommit repository from the AWS CodeCommit console</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getuploadarchivestatus"><a aria-hidden="true" class="anchor-heading" href="#getuploadarchivestatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetUploadArchiveStatus</h3>
<ul>
<li>description: Grants permission to get status information about an archive upload to a pipeline in AWS CodePipeline</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gitpull"><a aria-hidden="true" class="anchor-heading" href="#gitpull"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GitPull</h3>
<ul>
<li>description: Grants permission to pull information from an AWS CodeCommit repository to a local repo</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gitpush"><a aria-hidden="true" class="anchor-heading" href="#gitpush"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GitPush</h3>
<ul>
<li>description: Grants permission to push information from a local repo to an AWS CodeCommit repository</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "codecommit:References"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listapprovalruletemplates"><a aria-hidden="true" class="anchor-heading" href="#listapprovalruletemplates"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListApprovalRuleTemplates</h3>
<ul>
<li>description: Grants permission to list all approval rule templates in an AWS Region for the AWS account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listassociatedapprovalruletemplatesforrepository"><a aria-hidden="true" class="anchor-heading" href="#listassociatedapprovalruletemplatesforrepository"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAssociatedApprovalRuleTemplatesForRepository</h3>
<ul>
<li>description: Grants permission to list approval rule templates that are associated with a repository</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listbranches"><a aria-hidden="true" class="anchor-heading" href="#listbranches"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListBranches</h3>
<ul>
<li>description: Grants permission to list branches for an AWS CodeCommit repository with this API; does not control Git branch actions</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listpullrequests"><a aria-hidden="true" class="anchor-heading" href="#listpullrequests"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPullRequests</h3>
<ul>
<li>description: Grants permission to list pull requests for a specified repository</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listrepositories"><a aria-hidden="true" class="anchor-heading" href="#listrepositories"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListRepositories</h3>
<ul>
<li>description: Grants permission to list information about AWS CodeCommit repositories in the current Region for your AWS account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listrepositoriesforapprovalruletemplate"><a aria-hidden="true" class="anchor-heading" href="#listrepositoriesforapprovalruletemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListRepositoriesForApprovalRuleTemplate</h3>
<ul>
<li>description: Grants permission to list repositories that are associated with an approval rule template</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Grants permission to list the resource attached to a CodeCommit resource ARN</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="mergebranchesbyfastforward"><a aria-hidden="true" class="anchor-heading" href="#mergebranchesbyfastforward"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>MergeBranchesByFastForward</h3>
<ul>
<li>description: Grants permission to merge two commits into the specified destination branch using the fast-forward merge option</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "codecommit:References"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="mergebranchesbysquash"><a aria-hidden="true" class="anchor-heading" href="#mergebranchesbysquash"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>MergeBranchesBySquash</h3>
<ul>
<li>description: Grants permission to merge two commits into the specified destination branch using the squash merge option</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "codecommit:References"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="mergebranchesbythreeway"><a aria-hidden="true" class="anchor-heading" href="#mergebranchesbythreeway"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>MergeBranchesByThreeWay</h3>
<ul>
<li>description: Grants permission to merge two commits into the specified destination branch using the three-way merge option</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "codecommit:References"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="mergepullrequestbyfastforward"><a aria-hidden="true" class="anchor-heading" href="#mergepullrequestbyfastforward"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>MergePullRequestByFastForward</h3>
<ul>
<li>description: Grants permission to close a pull request and attempt to merge it into the specified destination branch for that pull request at the specified commit using the fast-forward merge option</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "codecommit:References"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="mergepullrequestbysquash"><a aria-hidden="true" class="anchor-heading" href="#mergepullrequestbysquash"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>MergePullRequestBySquash</h3>
<ul>
<li>description: Grants permission to close a pull request and attempt to merge it into the specified destination branch for that pull request at the specified commit using the squash merge option</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "codecommit:References"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="mergepullrequestbythreeway"><a aria-hidden="true" class="anchor-heading" href="#mergepullrequestbythreeway"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>MergePullRequestByThreeWay</h3>
<ul>
<li>description: Grants permission to close a pull request and attempt to merge it into the specified destination branch for that pull request at the specified commit using the three-way merge option</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "codecommit:References"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="overridepullrequestapprovalrules"><a aria-hidden="true" class="anchor-heading" href="#overridepullrequestapprovalrules"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>OverridePullRequestApprovalRules</h3>
<ul>
<li>description: Grants permission to override all approval rules for a pull request, including approval rules created by a template</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="postcommentforcomparedcommit"><a aria-hidden="true" class="anchor-heading" href="#postcommentforcomparedcommit"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PostCommentForComparedCommit</h3>
<ul>
<li>description: Grants permission to post a comment on the comparison between two commits</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="postcommentforpullrequest"><a aria-hidden="true" class="anchor-heading" href="#postcommentforpullrequest"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PostCommentForPullRequest</h3>
<ul>
<li>description: Grants permission to post a comment on a pull request</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="postcommentreply"><a aria-hidden="true" class="anchor-heading" href="#postcommentreply"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PostCommentReply</h3>
<ul>
<li>description: Grants permission to post a comment in reply to a comment on a comparison between commits or a pull request</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putcommentreaction"><a aria-hidden="true" class="anchor-heading" href="#putcommentreaction"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutCommentReaction</h3>
<ul>
<li>description: Grants permission to post a reaction on a comment</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putfile"><a aria-hidden="true" class="anchor-heading" href="#putfile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutFile</h3>
<ul>
<li>description: Grants permission to add or update a file in a branch in an AWS CodeCommit repository, and generate a commit for the addition in the specified branch</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "codecommit:References"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putrepositorytriggers"><a aria-hidden="true" class="anchor-heading" href="#putrepositorytriggers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutRepositoryTriggers</h3>
<ul>
<li>description: Grants permission to create, update, or delete triggers for a repository</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Grants permission to attach resource tags to a CodeCommit resource ARN</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="testrepositorytriggers"><a aria-hidden="true" class="anchor-heading" href="#testrepositorytriggers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TestRepositoryTriggers</h3>
<ul>
<li>description: Grants permission to test the functionality of repository triggers by sending information to the trigger target</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Grants permission to disassociate resource tags from a CodeCommit resource ARN</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateapprovalruletemplatecontent"><a aria-hidden="true" class="anchor-heading" href="#updateapprovalruletemplatecontent"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateApprovalRuleTemplateContent</h3>
<ul>
<li>description: Grants permission to update the content of approval rule templates; does not grant permission to update content of approval rules created specifically for pull requests</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateapprovalruletemplatedescription"><a aria-hidden="true" class="anchor-heading" href="#updateapprovalruletemplatedescription"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateApprovalRuleTemplateDescription</h3>
<ul>
<li>description: Grants permission to update the description of approval rule templates</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateapprovalruletemplatename"><a aria-hidden="true" class="anchor-heading" href="#updateapprovalruletemplatename"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateApprovalRuleTemplateName</h3>
<ul>
<li>description: Grants permission to update the name of approval rule templates</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatecomment"><a aria-hidden="true" class="anchor-heading" href="#updatecomment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateComment</h3>
<ul>
<li>description: Grants permission to update the contents of a comment if the identity matches the identity used to create the comment</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatedefaultbranch"><a aria-hidden="true" class="anchor-heading" href="#updatedefaultbranch"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateDefaultBranch</h3>
<ul>
<li>description: Grants permission to change the default branch in an AWS CodeCommit repository</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatepullrequestapprovalrulecontent"><a aria-hidden="true" class="anchor-heading" href="#updatepullrequestapprovalrulecontent"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdatePullRequestApprovalRuleContent</h3>
<ul>
<li>description: Grants permission to update the content for approval rules created for a specific pull requests; does not grant permission to update approval rule content for rules created with an approval rule template</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatepullrequestapprovalstate"><a aria-hidden="true" class="anchor-heading" href="#updatepullrequestapprovalstate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdatePullRequestApprovalState</h3>
<ul>
<li>description: Grants permission to update the approval state for pull requests</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatepullrequestdescription"><a aria-hidden="true" class="anchor-heading" href="#updatepullrequestdescription"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdatePullRequestDescription</h3>
<ul>
<li>description: Grants permission to update the description of a pull request</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatepullrequeststatus"><a aria-hidden="true" class="anchor-heading" href="#updatepullrequeststatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdatePullRequestStatus</h3>
<ul>
<li>description: Grants permission to update the status of a pull request</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatepullrequesttitle"><a aria-hidden="true" class="anchor-heading" href="#updatepullrequesttitle"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdatePullRequestTitle</h3>
<ul>
<li>description: Grants permission to update the title of a pull request</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updaterepositorydescription"><a aria-hidden="true" class="anchor-heading" href="#updaterepositorydescription"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateRepositoryDescription</h3>
<ul>
<li>description: Grants permission to change the description of an AWS CodeCommit repository</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updaterepositoryname"><a aria-hidden="true" class="anchor-heading" href="#updaterepositoryname"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateRepositoryName</h3>
<ul>
<li>description: Grants permission to change the name of an AWS CodeCommit repository</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="uploadarchive"><a aria-hidden="true" class="anchor-heading" href="#uploadarchive"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UploadArchive</h3>
<ul>
<li>description: Grants permission to the service role for AWS CodePipeline to upload repository changes into a pipeline</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-CodeCommit"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Macie.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Macie - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Macie.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Macie.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Macie.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Macie - undefined" />
  <meta name="twitter:title" content="Macie - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Macie</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Macie">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="macie"><a aria-hidden="true" class="anchor-heading" href="#macie"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Macie</h1>
<ul>
<li>prefix: macie2</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="acceptinvitation"><a aria-hidden="true" class="anchor-heading" href="#acceptinvitation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AcceptInvitation</h3>
<ul>
<li>description: Grants permission to accept an Amazon Macie membership invitation</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="archivefindings"><a aria-hidden="true" class="anchor-heading" href="#archivefindings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ArchiveFindings</h3>
<ul>
<li>description: Grants permission to archive one or more findings</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchgetcustomdataidentifiers"><a aria-hidden="true" class="anchor-heading" href="#batchgetcustomdataidentifiers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchGetCustomDataIdentifiers</h3>
<ul>
<li>description: Grants permission to retrieve information about one or more custom data identifiers</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "CustomDataIdentifier": {
        "resource_type": "CustomDataIdentifier",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createclassificationjob"><a aria-hidden="true" class="anchor-heading" href="#createclassificationjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateClassificationJob</h3>
<ul>
<li>description: Grants permission to create and define the settings for a classification job</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ClassificationJob": {
        "resource_type": "ClassificationJob",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createcustomdataidentifier"><a aria-hidden="true" class="anchor-heading" href="#createcustomdataidentifier"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateCustomDataIdentifier</h3>
<ul>
<li>description: Grants permission to create and define the settings for a custom data identifier</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "CustomDataIdentifier": {
        "resource_type": "CustomDataIdentifier",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createfindingsfilter"><a aria-hidden="true" class="anchor-heading" href="#createfindingsfilter"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateFindingsFilter</h3>
<ul>
<li>description: Grants permission to create and define the settings for a findings filter</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "FindingsFilter": {
        "resource_type": "FindingsFilter",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createinvitations"><a aria-hidden="true" class="anchor-heading" href="#createinvitations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateInvitations</h3>
<ul>
<li>description: Grants permission to send an Amazon Macie membership invitation</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createmember"><a aria-hidden="true" class="anchor-heading" href="#createmember"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateMember</h3>
<ul>
<li>description: Grants permission to associate an account with an Amazon Macie master account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Member": {
        "resource_type": "Member",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createsamplefindings"><a aria-hidden="true" class="anchor-heading" href="#createsamplefindings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSampleFindings</h3>
<ul>
<li>description: Grants permission to create sample findings</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="declineinvitations"><a aria-hidden="true" class="anchor-heading" href="#declineinvitations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeclineInvitations</h3>
<ul>
<li>description: Grants permission to decline Amazon Macie membership invitations</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletecustomdataidentifier"><a aria-hidden="true" class="anchor-heading" href="#deletecustomdataidentifier"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteCustomDataIdentifier</h3>
<ul>
<li>description: Grants permission to delete a custom data identifier</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "CustomDataIdentifier": {
        "resource_type": "CustomDataIdentifier",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletefindingsfilter"><a aria-hidden="true" class="anchor-heading" href="#deletefindingsfilter"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteFindingsFilter</h3>
<ul>
<li>description: Grants permission to delete a findings filter</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "FindingsFilter": {
        "resource_type": "FindingsFilter",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteinvitations"><a aria-hidden="true" class="anchor-heading" href="#deleteinvitations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteInvitations</h3>
<ul>
<li>description: Grants permission to delete Amazon Macie membership invitations</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletemember"><a aria-hidden="true" class="anchor-heading" href="#deletemember"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteMember</h3>
<ul>
<li>description: Grants permission to delete the association between an Amazon Macie master account and an account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Member": {
        "resource_type": "Member",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describebuckets"><a aria-hidden="true" class="anchor-heading" href="#describebuckets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeBuckets</h3>
<ul>
<li>description: Grants permission to retrieve statistical and other data about S3 buckets that Amazon Macie monitors and analyzes</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeclassificationjob"><a aria-hidden="true" class="anchor-heading" href="#describeclassificationjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeClassificationJob</h3>
<ul>
<li>description: Grants permission to retrieve information about the status and settings for a classification job</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ClassificationJob": {
        "resource_type": "ClassificationJob",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeorganizationconfiguration"><a aria-hidden="true" class="anchor-heading" href="#describeorganizationconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeOrganizationConfiguration</h3>
<ul>
<li>description: Grants permission to retrieve information about the Amazon Macie configuration settings for an AWS organization</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disablemacie"><a aria-hidden="true" class="anchor-heading" href="#disablemacie"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisableMacie</h3>
<ul>
<li>description: Grants permission to disable an Amazon Macie account, which also deletes Macie resources for the account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disableorganizationadminaccount"><a aria-hidden="true" class="anchor-heading" href="#disableorganizationadminaccount"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisableOrganizationAdminAccount</h3>
<ul>
<li>description: Grants permission to disable an account as a delegated administrator of Amazon Macie for an AWS organization</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociatefrommasteraccount"><a aria-hidden="true" class="anchor-heading" href="#disassociatefrommasteraccount"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateFromMasterAccount</h3>
<ul>
<li>description: Grants an Amazon Macie member account with permission to disassociate from its master account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociatemember"><a aria-hidden="true" class="anchor-heading" href="#disassociatemember"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateMember</h3>
<ul>
<li>description: Grants an Amazon Macie master account with permission to disassociate from a member account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Member": {
        "resource_type": "Member",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="enablemacie"><a aria-hidden="true" class="anchor-heading" href="#enablemacie"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EnableMacie</h3>
<ul>
<li>description: Grants permission to enable and specify the configuration settings for a new Amazon Macie account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="enableorganizationadminaccount"><a aria-hidden="true" class="anchor-heading" href="#enableorganizationadminaccount"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EnableOrganizationAdminAccount</h3>
<ul>
<li>description: Grants permission to enable an account as a delegated administrator of Amazon Macie for an AWS organization</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbucketstatistics"><a aria-hidden="true" class="anchor-heading" href="#getbucketstatistics"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBucketStatistics</h3>
<ul>
<li>description: Grants permission to retrieve aggregated statistical data for all the S3 buckets that Amazon Macie monitors and analyzes</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getclassificationexportconfiguration"><a aria-hidden="true" class="anchor-heading" href="#getclassificationexportconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetClassificationExportConfiguration</h3>
<ul>
<li>description: Grants permission to retrieve the settings for exporting data classification results</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcustomdataidentifier"><a aria-hidden="true" class="anchor-heading" href="#getcustomdataidentifier"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCustomDataIdentifier</h3>
<ul>
<li>description: Grants permission to retrieve information about the settings for a custom data identifier</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "CustomDataIdentifier": {
        "resource_type": "CustomDataIdentifier",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getfindingstatistics"><a aria-hidden="true" class="anchor-heading" href="#getfindingstatistics"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetFindingStatistics</h3>
<ul>
<li>description: Grants permission to retrieve aggregated statistical data about findings</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getfindings"><a aria-hidden="true" class="anchor-heading" href="#getfindings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetFindings</h3>
<ul>
<li>description: Grants permission to retrieve information about one or more findings</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getfindingsfilter"><a aria-hidden="true" class="anchor-heading" href="#getfindingsfilter"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetFindingsFilter</h3>
<ul>
<li>description: Grants permission to retrieve information about the settings for a findings filter</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "FindingsFilter": {
        "resource_type": "FindingsFilter",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getinvitationscount"><a aria-hidden="true" class="anchor-heading" href="#getinvitationscount"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetInvitationsCount</h3>
<ul>
<li>description: Grants permission to retrieve the count of Amazon Macie membership invitations that were received by an account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmaciesession"><a aria-hidden="true" class="anchor-heading" href="#getmaciesession"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetMacieSession</h3>
<ul>
<li>description: Grants permission to retrieve information about the status and configuration settings for an Amazon Macie account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmasteraccount"><a aria-hidden="true" class="anchor-heading" href="#getmasteraccount"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetMasterAccount</h3>
<ul>
<li>description: Grants permission to retrieve information about the Amazon Macie master account for an account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmember"><a aria-hidden="true" class="anchor-heading" href="#getmember"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetMember</h3>
<ul>
<li>description: Grants permission to retrieve information about an account that's associated with an Amazon Macie master account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Member": {
        "resource_type": "Member",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getusagestatistics"><a aria-hidden="true" class="anchor-heading" href="#getusagestatistics"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetUsageStatistics</h3>
<ul>
<li>description: Grants permission to retrieve quotas and aggregated usage data for one or more accounts</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getusagetotals"><a aria-hidden="true" class="anchor-heading" href="#getusagetotals"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetUsageTotals</h3>
<ul>
<li>description: Grants permission to retrieve aggregated usage data for an account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listclassificationjobs"><a aria-hidden="true" class="anchor-heading" href="#listclassificationjobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListClassificationJobs</h3>
<ul>
<li>description: Grants permission to retrieve information about the status and settings for one or more classification jobs</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listcustomdataidentifiers"><a aria-hidden="true" class="anchor-heading" href="#listcustomdataidentifiers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListCustomDataIdentifiers</h3>
<ul>
<li>description: Grants permission to retrieve information about all custom data identifiers</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listfindings"><a aria-hidden="true" class="anchor-heading" href="#listfindings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListFindings</h3>
<ul>
<li>description: Grants permission to retrieve a subset of information about one or more findings</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listfindingsfilters"><a aria-hidden="true" class="anchor-heading" href="#listfindingsfilters"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListFindingsFilters</h3>
<ul>
<li>description: Grants permission to retrieve information about all findings filters</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listinvitations"><a aria-hidden="true" class="anchor-heading" href="#listinvitations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListInvitations</h3>
<ul>
<li>description: Grants permission to retrieve information about all the Amazon Macie membership invitations that were received by an account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listmembers"><a aria-hidden="true" class="anchor-heading" href="#listmembers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListMembers</h3>
<ul>
<li>description: Grants permission to retrieve information about all the accounts that are associated with an Amazon Macie master account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listorganizationadminaccounts"><a aria-hidden="true" class="anchor-heading" href="#listorganizationadminaccounts"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListOrganizationAdminAccounts</h3>
<ul>
<li>description: Grants permission to retrieve information about the delegated, Amazon Macie administrator account for an AWS organization</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresources"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresources"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResources</h3>
<ul>
<li>description: Grants permission to retrieve the tags for an Amazon Macie resource or member account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putclassificationexportconfiguration"><a aria-hidden="true" class="anchor-heading" href="#putclassificationexportconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutClassificationExportConfiguration</h3>
<ul>
<li>description: Grants permission to create or update the settings for exporting data classification results</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Grants permission to add or update the tags for an Amazon Macie resource or member account</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="testcustomdataidentifier"><a aria-hidden="true" class="anchor-heading" href="#testcustomdataidentifier"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TestCustomDataIdentifier</h3>
<ul>
<li>description: Grants permission to test a custom data identifier</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="unarchivefindings"><a aria-hidden="true" class="anchor-heading" href="#unarchivefindings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UnarchiveFindings</h3>
<ul>
<li>description: Grants permission to reactivate (unarchive) one or more findings</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Grants permission to remove tags from an Amazon Macie resource or member account</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateclassificationjob"><a aria-hidden="true" class="anchor-heading" href="#updateclassificationjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateClassificationJob</h3>
<ul>
<li>description: Grants permission to cancel a classification job</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ClassificationJob": {
        "resource_type": "ClassificationJob",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatefindingsfilter"><a aria-hidden="true" class="anchor-heading" href="#updatefindingsfilter"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateFindingsFilter</h3>
<ul>
<li>description: Grants permission to update the settings for a findings filter</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "FindingsFilter": {
        "resource_type": "FindingsFilter",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatemaciesession"><a aria-hidden="true" class="anchor-heading" href="#updatemaciesession"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateMacieSession</h3>
<ul>
<li>description: Grants permission to suspend or re-enable an Amazon Macie account, or update the configuration settings for a Macie account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatemembersession"><a aria-hidden="true" class="anchor-heading" href="#updatemembersession"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateMemberSession</h3>
<ul>
<li>description: Grants an Amazon Macie master account with permission to suspend or re-enable a member account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateorganizationconfiguration"><a aria-hidden="true" class="anchor-heading" href="#updateorganizationconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateOrganizationConfiguration</h3>
<ul>
<li>description: Grants permission to update Amazon Macie configuration settings for an AWS organization</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Macie"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Security Hub.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Security Hub - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Security Hub.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Security Hub.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Security Hub.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Security Hub - undefined" />
  <meta name="twitter:title" content="Security Hub - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Security Hub</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Security Hub">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="security-hub"><a aria-hidden="true" class="anchor-heading" href="#security-hub"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Security Hub</h1>
<ul>
<li>prefix: securityhub</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="acceptinvitation"><a aria-hidden="true" class="anchor-heading" href="#acceptinvitation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AcceptInvitation</h3>
<ul>
<li>description: Grants permission to accept Security Hub invitations to become a member account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchdisablestandards"><a aria-hidden="true" class="anchor-heading" href="#batchdisablestandards"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchDisableStandards</h3>
<ul>
<li>description: Grants permission to disable standards in Security Hub</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchenablestandards"><a aria-hidden="true" class="anchor-heading" href="#batchenablestandards"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchEnableStandards</h3>
<ul>
<li>description: Grants permission to enable standards in Security Hub</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchimportfindings"><a aria-hidden="true" class="anchor-heading" href="#batchimportfindings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchImportFindings</h3>
<ul>
<li>description: Grants permission to import findings into Security Hub from an integrated product</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "product": {
        "resource_type": "product",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "securityhub:TargetAccount"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchupdatefindings"><a aria-hidden="true" class="anchor-heading" href="#batchupdatefindings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchUpdateFindings</h3>
<ul>
<li>description: Grants permission to update customer-controlled fields for a selected set of Security Hub findings</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "securityhub:ASFFSyntaxPath/${ASFFSyntaxPath}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createactiontarget"><a aria-hidden="true" class="anchor-heading" href="#createactiontarget"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateActionTarget</h3>
<ul>
<li>description: Grants permission to create custom actions in Security Hub</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createinsight"><a aria-hidden="true" class="anchor-heading" href="#createinsight"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateInsight</h3>
<ul>
<li>description: Grants permission to create insights in Security Hub. Insights are collections of related findings</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createmembers"><a aria-hidden="true" class="anchor-heading" href="#createmembers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateMembers</h3>
<ul>
<li>description: Grants permission to create member accounts in Security Hub</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="declineinvitations"><a aria-hidden="true" class="anchor-heading" href="#declineinvitations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeclineInvitations</h3>
<ul>
<li>description: Grants permission to decline Security Hub invitations to become a member account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteactiontarget"><a aria-hidden="true" class="anchor-heading" href="#deleteactiontarget"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteActionTarget</h3>
<ul>
<li>description: Grants permission to delete custom actions in Security Hub</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteinsight"><a aria-hidden="true" class="anchor-heading" href="#deleteinsight"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteInsight</h3>
<ul>
<li>description: Grants permission to delete insights from Security Hub</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteinvitations"><a aria-hidden="true" class="anchor-heading" href="#deleteinvitations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteInvitations</h3>
<ul>
<li>description: Grants permission to delete Security Hub invitations to become a member account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletemembers"><a aria-hidden="true" class="anchor-heading" href="#deletemembers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteMembers</h3>
<ul>
<li>description: Grants permission to delete Security Hub member accounts</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeactiontargets"><a aria-hidden="true" class="anchor-heading" href="#describeactiontargets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeActionTargets</h3>
<ul>
<li>description: Grants permission to retrieve a list of custom actions using the API</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describehub"><a aria-hidden="true" class="anchor-heading" href="#describehub"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeHub</h3>
<ul>
<li>description: Grants permission to retrieve information about the hub resource in your account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeproducts"><a aria-hidden="true" class="anchor-heading" href="#describeproducts"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeProducts</h3>
<ul>
<li>description: Grants permission to retrieve information about the available Security Hub product integrations</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describestandards"><a aria-hidden="true" class="anchor-heading" href="#describestandards"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeStandards</h3>
<ul>
<li>description: Grants permission to retrieve information about Security Hub standards</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describestandardscontrols"><a aria-hidden="true" class="anchor-heading" href="#describestandardscontrols"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeStandardsControls</h3>
<ul>
<li>description: Grants permission to retrieve information about Security Hub standards controls</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disableimportfindingsforproduct"><a aria-hidden="true" class="anchor-heading" href="#disableimportfindingsforproduct"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisableImportFindingsForProduct</h3>
<ul>
<li>description: Grants permission to disable the findings importing for a Security Hub integrated product</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disablesecurityhub"><a aria-hidden="true" class="anchor-heading" href="#disablesecurityhub"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisableSecurityHub</h3>
<ul>
<li>description: Grants permission to disable Security Hub</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociatefrommasteraccount"><a aria-hidden="true" class="anchor-heading" href="#disassociatefrommasteraccount"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateFromMasterAccount</h3>
<ul>
<li>description: Grants permission to a Security Hub member account to disassociate from the associated master account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociatemembers"><a aria-hidden="true" class="anchor-heading" href="#disassociatemembers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateMembers</h3>
<ul>
<li>description: Grants permission to disassociate Security Hub member accounts from the associated master account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="enableimportfindingsforproduct"><a aria-hidden="true" class="anchor-heading" href="#enableimportfindingsforproduct"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EnableImportFindingsForProduct</h3>
<ul>
<li>description: Grants permission to enable the findings importing for a Security Hub integrated product</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="enablesecurityhub"><a aria-hidden="true" class="anchor-heading" href="#enablesecurityhub"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EnableSecurityHub</h3>
<ul>
<li>description: Grants permission to enable Security Hub</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getenabledstandards"><a aria-hidden="true" class="anchor-heading" href="#getenabledstandards"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetEnabledStandards</h3>
<ul>
<li>description: Grants permission to retrieve a list of the standards that are enabled in Security Hub</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getfindings"><a aria-hidden="true" class="anchor-heading" href="#getfindings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetFindings</h3>
<ul>
<li>description: Grants permission to retrieve a list of findings from Security Hub</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getinsightresults"><a aria-hidden="true" class="anchor-heading" href="#getinsightresults"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetInsightResults</h3>
<ul>
<li>description: Grants permission to retrieve insight results from Security Hub</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getinsights"><a aria-hidden="true" class="anchor-heading" href="#getinsights"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetInsights</h3>
<ul>
<li>description: Grants permission to retrieve Security Hub insights</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getinvitationscount"><a aria-hidden="true" class="anchor-heading" href="#getinvitationscount"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetInvitationsCount</h3>
<ul>
<li>description: Grants permission to retrieve the count of Security Hub membership invitations sent to the account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmasteraccount"><a aria-hidden="true" class="anchor-heading" href="#getmasteraccount"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetMasterAccount</h3>
<ul>
<li>description: Grants permission to retrieve details about the Security Hub master account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmembers"><a aria-hidden="true" class="anchor-heading" href="#getmembers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetMembers</h3>
<ul>
<li>description: Grants permission to retrieve the details of Security Hub member accounts</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="invitemembers"><a aria-hidden="true" class="anchor-heading" href="#invitemembers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>InviteMembers</h3>
<ul>
<li>description: Grants permission to invite other AWS accounts to become Security Hub member accounts</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listenabledproductsforimport"><a aria-hidden="true" class="anchor-heading" href="#listenabledproductsforimport"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListEnabledProductsForImport</h3>
<ul>
<li>description: Grants permission to retrieve the Security Hub integrated products that are currently enabled</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listinvitations"><a aria-hidden="true" class="anchor-heading" href="#listinvitations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListInvitations</h3>
<ul>
<li>description: Grants permission to retrieve the Security Hub invitations sent to the account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listmembers"><a aria-hidden="true" class="anchor-heading" href="#listmembers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListMembers</h3>
<ul>
<li>description: Grants permission to retrieve details about Security Hub member accounts associated with the master account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Grants permission to list of tags associated with a resource</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Grants permission to add tags to a Security Hub resource</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Grants permission to remove tags from a Security Hub resource</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateactiontarget"><a aria-hidden="true" class="anchor-heading" href="#updateactiontarget"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateActionTarget</h3>
<ul>
<li>description: Grants permission to update custom actions in Security Hub</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatefindings"><a aria-hidden="true" class="anchor-heading" href="#updatefindings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateFindings</h3>
<ul>
<li>description: Grants permission to update Security Hub findings</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateinsight"><a aria-hidden="true" class="anchor-heading" href="#updateinsight"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateInsight</h3>
<ul>
<li>description: Grants permission to update insights in Security Hub</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatesecurityhubconfiguration"><a aria-hidden="true" class="anchor-heading" href="#updatesecurityhubconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateSecurityHubConfiguration</h3>
<ul>
<li>description: Grants permission to update Security Hub configuration</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatestandardscontrol"><a aria-hidden="true" class="anchor-heading" href="#updatestandardscontrol"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateStandardsControl</h3>
<ul>
<li>description: Grants permission to update Security Hub standards controls</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hub": {
        "resource_type": "hub",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Security Hub"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/classic-load-balancer.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Classic Load Balancer - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/classic-load-balancer.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/classic-load-balancer.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/classic-load-balancer.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Classic Load Balancer - undefined" />
  <meta name="twitter:title" content="Classic Load Balancer - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/1f759d8c-cca7-4fc4-9aa2-6dbf6e596abf.html">Services</a></li><li class="breadcrumb-nav-list-item">Classic Load Balancer</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/open-guides/og-aws" target="_blank"> og-aws  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Classic Load Balancer">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="classic-load-balancer"><a aria-hidden="true" class="anchor-heading" href="#classic-load-balancer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Classic Load Balancer</h1>
<h3 id="clb-basics"><a aria-hidden="true" class="anchor-heading" href="#clb-basics"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CLB Basics</h3>
<ul>
<li>📒 <a href="https://aws.amazon.com/elasticloadbalancing/classicloadbalancer/">Homepage</a> ∙ <a href="https://aws.amazon.com/elasticloadbalancing/classicloadbalancer/developer-resources/">User guide</a> ∙ <a href="https://aws.amazon.com/elasticloadbalancing/classicloadbalancer/faqs/">FAQ</a> ∙ <a href="https://aws.amazon.com/elasticloadbalancing/classicloadbalancer/pricing/">Pricing</a></li>
<li>Classic Load Balancers, formerly known as Elastic Load Balancers, are HTTP and TCP load balancers that are managed and scaled for you by Amazon.</li>
</ul>
<h3 id="clb-tips"><a aria-hidden="true" class="anchor-heading" href="#clb-tips"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CLB Tips</h3>
<ul>
<li><strong>Best practices:</strong> <a href="http://aws.amazon.com/articles/1636185810492479">This article</a> is a must-read if you use CLBs heavily, and has a lot more detail.</li>
</ul>
<h3 id="clb-gotchas-and-limitations"><a aria-hidden="true" class="anchor-heading" href="#clb-gotchas-and-limitations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CLB Gotchas and Limitations</h3>
<ul>
<li>In general, CLBs are not as “smart” as some load balancers, and don’t have fancy features or fine-grained control a traditional hardware load balancer would offer. For most common cases involving sessionless apps or cookie-based sessions over HTTP, or SSL termination, they work well.</li>
<li>🔸By default, CLBs will refuse to route traffic from a load balancer in one Availability Zone (AZ) to a backend instance in another. This <a href="http://docs.aws.amazon.com/elasticloadbalancing/latest/classic/ts-elb-error-message.html#ts-elb-errorcodes-http503">will cause 503s</a> if the last instance in an AZ becomes unavailable, even if there are healthy instances in other zones. If you’re running fewer than two backend instances per AZ, you almost certainly want to <a href="http://docs.aws.amazon.com/elasticloadbalancing/latest/classic/enable-disable-crosszone-lb.html#enable-cross-zone">enable cross-zone load balancing</a>.</li>
<li>🔸Complex rules for directing traffic are not supported. For example, you can’t direct traffic based on a regular expression in the URL, like HAProxy offers.</li>
<li><strong>Apex DNS names:</strong> Once upon a time, you couldn’t assign a CLB to an apex DNS record (i.e. example.com instead of foo.example.com) because it needed to be an A record instead of a CNAME. This is now possible with a Route 53 alias record directly pointing to the load balancer.</li>
<li>🔸CLBs use <a href="https://en.wikipedia.org/wiki/HTTP_persistent_connection">HTTP keep-alives</a> on the internal side. This can cause an unexpected side effect: Requests from different clients, each in their own TCP connection on the external side, can end up on the same TCP connection on the internal side. Never assume that multiple requests on the same TCP connection are from the same client!</li>
<li>🔸 Traffic between CLBs and back-end instances in the same subnet <strong>will</strong> have <a href="http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_ACLs.html">Network ACL</a> rules evaluated (EC2 to EC2 traffic in the same subnet would not have Network ACL rules evaluated). If the default '0.0.0.0/0 ALLOW' rule is removed from the Network ACL applied to the subnet, a rule that allows traffic on both the health check port and any listener port must be added.</li>
<li>As of December 2016, CLBs launched in VPCs do not support IPv6 addressing. CLBs launched in EC2-Classic support both IPv4 and IPv6 <a href="http://docs.aws.amazon.com/elasticloadbalancing/latest/classic/elb-internet-facing-load-balancers.html#internet-facing-ip-addresses">with the "dualstack" DNS name</a>.</li>
</ul><span id="navId" data="classic-load-balancer"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Organizations.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Organizations - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Organizations.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Organizations.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Organizations.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Organizations - undefined" />
  <meta name="twitter:title" content="Organizations - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Organizations</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Organizations">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="organizations"><a aria-hidden="true" class="anchor-heading" href="#organizations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Organizations</h1>
<ul>
<li>prefix: organizations</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="accepthandshake"><a aria-hidden="true" class="anchor-heading" href="#accepthandshake"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AcceptHandshake</h3>
<ul>
<li>description: Grants permission to send a response to the originator of a handshake agreeing to the action proposed by the handshake request.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "handshake": {
        "resource_type": "handshake",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="attachpolicy"><a aria-hidden="true" class="anchor-heading" href="#attachpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AttachPolicy</h3>
<ul>
<li>description: Grants permission to attach a policy to a root, an organizational unit, or an individual account.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "policy": {
        "resource_type": "policy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "account": {
        "resource_type": "account",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "organizationalunit": {
        "resource_type": "organizationalunit",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "root": {
        "resource_type": "root",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "organizations:PolicyType"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="cancelhandshake"><a aria-hidden="true" class="anchor-heading" href="#cancelhandshake"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CancelHandshake</h3>
<ul>
<li>description: Grants permission to cancel a handshake.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "handshake": {
        "resource_type": "handshake",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createaccount"><a aria-hidden="true" class="anchor-heading" href="#createaccount"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateAccount</h3>
<ul>
<li>description: Grants permission to create an AWS account that is automatically a member of the organization with the credentials that made the request.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="creategovcloudaccount"><a aria-hidden="true" class="anchor-heading" href="#creategovcloudaccount"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateGovCloudAccount</h3>
<ul>
<li>description: Grants permission to create an AWS GovCloud (US) account.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createorganization"><a aria-hidden="true" class="anchor-heading" href="#createorganization"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateOrganization</h3>
<ul>
<li>description: Grants permission to create an organization. The account with the credentials that calls the CreateOrganization operation automatically becomes the master account of the new organization.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createorganizationalunit"><a aria-hidden="true" class="anchor-heading" href="#createorganizationalunit"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateOrganizationalUnit</h3>
<ul>
<li>description: Grants permission to create an organizational unit (OU) within a root or parent OU.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organizationalunit": {
        "resource_type": "organizationalunit",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "root": {
        "resource_type": "root",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createpolicy"><a aria-hidden="true" class="anchor-heading" href="#createpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreatePolicy</h3>
<ul>
<li>description: Grants permission to create a policy that you can attach to a root, an organizational unit (OU), or an individual AWS account.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "organizations:PolicyType",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="declinehandshake"><a aria-hidden="true" class="anchor-heading" href="#declinehandshake"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeclineHandshake</h3>
<ul>
<li>description: Grants permission to decline a handshake request. This sets the handshake state to DECLINED and effectively deactivates the request.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "handshake": {
        "resource_type": "handshake",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteorganization"><a aria-hidden="true" class="anchor-heading" href="#deleteorganization"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteOrganization</h3>
<ul>
<li>description: Grants permission to delete the organization.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteorganizationalunit"><a aria-hidden="true" class="anchor-heading" href="#deleteorganizationalunit"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteOrganizationalUnit</h3>
<ul>
<li>description: Grants permission to delete an organizational unit from a root or another OU.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organizationalunit": {
        "resource_type": "organizationalunit",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletepolicy"><a aria-hidden="true" class="anchor-heading" href="#deletepolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeletePolicy</h3>
<ul>
<li>description: Grants permission to delete a policy from your organization.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "policy": {
        "resource_type": "policy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "organizations:PolicyType"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deregisterdelegatedadministrator"><a aria-hidden="true" class="anchor-heading" href="#deregisterdelegatedadministrator"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeregisterDelegatedAdministrator</h3>
<ul>
<li>description: Grants permission to deregister the specified member AWS account as a delegated administrator for the AWS service that is specified by ServicePrincipal.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "account": {
        "resource_type": "account",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "organizations:ServicePrincipal"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeaccount"><a aria-hidden="true" class="anchor-heading" href="#describeaccount"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAccount</h3>
<ul>
<li>description: Grants permission to retrieve Organizations-related details about the specified account.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "account": {
        "resource_type": "account",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecreateaccountstatus"><a aria-hidden="true" class="anchor-heading" href="#describecreateaccountstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeCreateAccountStatus</h3>
<ul>
<li>description: Grants permission to retrieve the current status of an asynchronous request to create an account.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeeffectivepolicy"><a aria-hidden="true" class="anchor-heading" href="#describeeffectivepolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEffectivePolicy</h3>
<ul>
<li>description: Grants permission to retrieve the effective policy for an account.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "account": {
        "resource_type": "account",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "organizations:PolicyType"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describehandshake"><a aria-hidden="true" class="anchor-heading" href="#describehandshake"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeHandshake</h3>
<ul>
<li>description: Grants permission to retrieve details about a previously requested handshake.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "handshake": {
        "resource_type": "handshake",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeorganization"><a aria-hidden="true" class="anchor-heading" href="#describeorganization"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeOrganization</h3>
<ul>
<li>description: Grants permission to retrieves details about the organization that the calling credentials belong to.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeorganizationalunit"><a aria-hidden="true" class="anchor-heading" href="#describeorganizationalunit"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeOrganizationalUnit</h3>
<ul>
<li>description: Grants permission to retrieve details about an organizational unit (OU).</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organizationalunit": {
        "resource_type": "organizationalunit",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describepolicy"><a aria-hidden="true" class="anchor-heading" href="#describepolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribePolicy</h3>
<ul>
<li>description: Grants permission to retrieves details about a policy.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "policy": {
        "resource_type": "policy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "organizations:PolicyType"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="detachpolicy"><a aria-hidden="true" class="anchor-heading" href="#detachpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DetachPolicy</h3>
<ul>
<li>description: Grants permission to detach a policy from a target root, organizational unit, or account.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "policy": {
        "resource_type": "policy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "account": {
        "resource_type": "account",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "organizationalunit": {
        "resource_type": "organizationalunit",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "root": {
        "resource_type": "root",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "organizations:PolicyType"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disableawsserviceaccess"><a aria-hidden="true" class="anchor-heading" href="#disableawsserviceaccess"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisableAWSServiceAccess</h3>
<ul>
<li>description: Grants permission to disable integration of an AWS service (the service that is specified by ServicePrincipal) with AWS Organizations.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "organizations:ServicePrincipal"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disablepolicytype"><a aria-hidden="true" class="anchor-heading" href="#disablepolicytype"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisablePolicyType</h3>
<ul>
<li>description: Grants permission to disable an organization policy type in a root.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "root": {
        "resource_type": "root",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "organizations:PolicyType"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="enableawsserviceaccess"><a aria-hidden="true" class="anchor-heading" href="#enableawsserviceaccess"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EnableAWSServiceAccess</h3>
<ul>
<li>description: Grants permission to enable integration of an AWS service (the service that is specified by ServicePrincipal) with AWS Organizations.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "organizations:ServicePrincipal"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="enableallfeatures"><a aria-hidden="true" class="anchor-heading" href="#enableallfeatures"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EnableAllFeatures</h3>
<ul>
<li>description: Grants permission to start the process to enable all features in an organization, upgrading it from supporting only Consolidated Billing features.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="enablepolicytype"><a aria-hidden="true" class="anchor-heading" href="#enablepolicytype"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EnablePolicyType</h3>
<ul>
<li>description: Grants permission to enable a policy type in a root.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "root": {
        "resource_type": "root",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "organizations:PolicyType"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="inviteaccounttoorganization"><a aria-hidden="true" class="anchor-heading" href="#inviteaccounttoorganization"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>InviteAccountToOrganization</h3>
<ul>
<li>description: Grants permission to send an invitation to another AWS account, asking it to join your organization as a member account.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "account": {
        "resource_type": "account",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="leaveorganization"><a aria-hidden="true" class="anchor-heading" href="#leaveorganization"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>LeaveOrganization</h3>
<ul>
<li>description: Grants permission to remove a member account from its parent organization.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listawsserviceaccessfororganization"><a aria-hidden="true" class="anchor-heading" href="#listawsserviceaccessfororganization"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAWSServiceAccessForOrganization</h3>
<ul>
<li>description: Grants permission to retrieve the list of the AWS services for which you enabled integration with your organization.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listaccounts"><a aria-hidden="true" class="anchor-heading" href="#listaccounts"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAccounts</h3>
<ul>
<li>description: Grants permission to list all of the the accounts in the organization.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listaccountsforparent"><a aria-hidden="true" class="anchor-heading" href="#listaccountsforparent"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAccountsForParent</h3>
<ul>
<li>description: Grants permission to list the accounts in an organization that are contained by a root or organizational unit (OU).</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organizationalunit": {
        "resource_type": "organizationalunit",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "root": {
        "resource_type": "root",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listchildren"><a aria-hidden="true" class="anchor-heading" href="#listchildren"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListChildren</h3>
<ul>
<li>description: Grants permission to list all of the OUs or accounts that are contained in a parent OU or root.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organizationalunit": {
        "resource_type": "organizationalunit",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "root": {
        "resource_type": "root",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listcreateaccountstatus"><a aria-hidden="true" class="anchor-heading" href="#listcreateaccountstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListCreateAccountStatus</h3>
<ul>
<li>description: Grants permission to list the asynchronous account creation requests that are currently being tracked for the organization.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdelegatedadministrators"><a aria-hidden="true" class="anchor-heading" href="#listdelegatedadministrators"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDelegatedAdministrators</h3>
<ul>
<li>description: Grants permission to list the AWS accounts that are designated as delegated administrators in this organization.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "organizations:ServicePrincipal"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdelegatedservicesforaccount"><a aria-hidden="true" class="anchor-heading" href="#listdelegatedservicesforaccount"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDelegatedServicesForAccount</h3>
<ul>
<li>description: Grants permission to list the AWS services for which the specified account is a delegated administrator in this organization.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "account": {
        "resource_type": "account",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listhandshakesforaccount"><a aria-hidden="true" class="anchor-heading" href="#listhandshakesforaccount"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListHandshakesForAccount</h3>
<ul>
<li>description: Grants permission to list all of the handshakes that are associated with an account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listhandshakesfororganization"><a aria-hidden="true" class="anchor-heading" href="#listhandshakesfororganization"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListHandshakesForOrganization</h3>
<ul>
<li>description: Grants permission to list the handshakes that are associated with the organization.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listorganizationalunitsforparent"><a aria-hidden="true" class="anchor-heading" href="#listorganizationalunitsforparent"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListOrganizationalUnitsForParent</h3>
<ul>
<li>description: Grants permission to lists all of the organizational units (OUs) in a parent organizational unit or root.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organizationalunit": {
        "resource_type": "organizationalunit",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "root": {
        "resource_type": "root",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listparents"><a aria-hidden="true" class="anchor-heading" href="#listparents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListParents</h3>
<ul>
<li>description: Grants permission to list the root or organizational units (OUs) that serve as the immediate parent of a child OU or account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "account": {
        "resource_type": "account",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "organizationalunit": {
        "resource_type": "organizationalunit",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listpolicies"><a aria-hidden="true" class="anchor-heading" href="#listpolicies"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPolicies</h3>
<ul>
<li>description: Grants permission to list all of the policies in an organization.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "organizations:PolicyType"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listpoliciesfortarget"><a aria-hidden="true" class="anchor-heading" href="#listpoliciesfortarget"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPoliciesForTarget</h3>
<ul>
<li>description: Grants permission to list all of the policies that are directly attached to a root, organizational unit (OU), or account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "account": {
        "resource_type": "account",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "organizationalunit": {
        "resource_type": "organizationalunit",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "root": {
        "resource_type": "root",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "organizations:PolicyType"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listroots"><a aria-hidden="true" class="anchor-heading" href="#listroots"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListRoots</h3>
<ul>
<li>description: Grants permission to list all of the roots that are defined in the organization.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Grants permission to list all tags for the specified resource.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "account": {
        "resource_type": "account",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "organizationalunit": {
        "resource_type": "organizationalunit",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "policy": {
        "resource_type": "policy",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "root": {
        "resource_type": "root",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtargetsforpolicy"><a aria-hidden="true" class="anchor-heading" href="#listtargetsforpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTargetsForPolicy</h3>
<ul>
<li>description: Grants permission to list all the roots, OUs, and accounts to which a policy is attached.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "policy": {
        "resource_type": "policy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "organizations:PolicyType"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="moveaccount"><a aria-hidden="true" class="anchor-heading" href="#moveaccount"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>MoveAccount</h3>
<ul>
<li>description: Grants permission to move an account from its current root or OU to another parent root or OU.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "account": {
        "resource_type": "account",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "organizationalunit": {
        "resource_type": "organizationalunit",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "root": {
        "resource_type": "root",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registerdelegatedadministrator"><a aria-hidden="true" class="anchor-heading" href="#registerdelegatedadministrator"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterDelegatedAdministrator</h3>
<ul>
<li>description: Grants permission to register the specified member account to administer the Organizations features of the AWS service that is specified by ServicePrincipal.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "account": {
        "resource_type": "account",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "organizations:ServicePrincipal"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="removeaccountfromorganization"><a aria-hidden="true" class="anchor-heading" href="#removeaccountfromorganization"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemoveAccountFromOrganization</h3>
<ul>
<li>description: Grants permission to removes the specified account from the organization.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "account": {
        "resource_type": "account",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Grants permission to add one or more tags to the specified resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "account": {
        "resource_type": "account",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "organizationalunit": {
        "resource_type": "organizationalunit",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "policy": {
        "resource_type": "policy",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "root": {
        "resource_type": "root",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys",
            "aws:RequestTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Grants permission to remove one or more tags from the specified resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "account": {
        "resource_type": "account",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "organizationalunit": {
        "resource_type": "organizationalunit",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "policy": {
        "resource_type": "policy",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "root": {
        "resource_type": "root",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateorganizationalunit"><a aria-hidden="true" class="anchor-heading" href="#updateorganizationalunit"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateOrganizationalUnit</h3>
<ul>
<li>description: Grants permission to rename an organizational unit (OU).</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organizationalunit": {
        "resource_type": "organizationalunit",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatepolicy"><a aria-hidden="true" class="anchor-heading" href="#updatepolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdatePolicy</h3>
<ul>
<li>description: Grants permission to update an existing policy with a new name, description, or content.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "policy": {
        "resource_type": "policy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "organizations:PolicyType"
        ],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Organizations"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-CloudWatch.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>CloudWatch - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-CloudWatch.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-CloudWatch.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-CloudWatch.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="CloudWatch - undefined" />
  <meta name="twitter:title" content="CloudWatch - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">CloudWatch</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="CloudWatch">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="cloudwatch"><a aria-hidden="true" class="anchor-heading" href="#cloudwatch"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CloudWatch</h1>
<ul>
<li>prefix: cloudwatch</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="deletealarms"><a aria-hidden="true" class="anchor-heading" href="#deletealarms"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAlarms</h3>
<ul>
<li>description: Deletes all specified alarms. In the event of an error, no alarms are deleted</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "alarm": {
        "resource_type": "alarm",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteanomalydetector"><a aria-hidden="true" class="anchor-heading" href="#deleteanomalydetector"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAnomalyDetector</h3>
<ul>
<li>description: Deletes the specified anomaly detection model from your account.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedashboards"><a aria-hidden="true" class="anchor-heading" href="#deletedashboards"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDashboards</h3>
<ul>
<li>description: Deletes all CloudWatch dashboards that you specify</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dashboard": {
        "resource_type": "dashboard",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteinsightrules"><a aria-hidden="true" class="anchor-heading" href="#deleteinsightrules"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteInsightRules</h3>
<ul>
<li>description: Grants permission to delete a collection of insight rules.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "insight-rule": {
        "resource_type": "insight-rule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describealarmhistory"><a aria-hidden="true" class="anchor-heading" href="#describealarmhistory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAlarmHistory</h3>
<ul>
<li>description: Retrieves history for the specified alarm</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "alarm": {
        "resource_type": "alarm",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describealarms"><a aria-hidden="true" class="anchor-heading" href="#describealarms"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAlarms</h3>
<ul>
<li>description: Retrieves alarms with the specified names</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "alarm": {
        "resource_type": "alarm",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describealarmsformetric"><a aria-hidden="true" class="anchor-heading" href="#describealarmsformetric"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAlarmsForMetric</h3>
<ul>
<li>description: Retrieves all alarms for a single metric</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeanomalydetectors"><a aria-hidden="true" class="anchor-heading" href="#describeanomalydetectors"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAnomalyDetectors</h3>
<ul>
<li>description: Lists the anomaly detection models that you have created in your account.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeinsightrules"><a aria-hidden="true" class="anchor-heading" href="#describeinsightrules"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeInsightRules</h3>
<ul>
<li>description: Grants permission to describe all insight rules, currently owned by the user's account.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disablealarmactions"><a aria-hidden="true" class="anchor-heading" href="#disablealarmactions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisableAlarmActions</h3>
<ul>
<li>description: Disables actions for the specified alarms</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "alarm": {
        "resource_type": "alarm",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disableinsightrules"><a aria-hidden="true" class="anchor-heading" href="#disableinsightrules"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisableInsightRules</h3>
<ul>
<li>description: Grants permission to disable a collection of insight rules.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "insight-rule": {
        "resource_type": "insight-rule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="enablealarmactions"><a aria-hidden="true" class="anchor-heading" href="#enablealarmactions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EnableAlarmActions</h3>
<ul>
<li>description: Enables actions for the specified alarms</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "alarm": {
        "resource_type": "alarm",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="enableinsightrules"><a aria-hidden="true" class="anchor-heading" href="#enableinsightrules"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EnableInsightRules</h3>
<ul>
<li>description: Grants permission to enable a collection of insight rules.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "insight-rule": {
        "resource_type": "insight-rule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdashboard"><a aria-hidden="true" class="anchor-heading" href="#getdashboard"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDashboard</h3>
<ul>
<li>description: Displays the details of the CloudWatch dashboard you specify</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dashboard": {
        "resource_type": "dashboard",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getinsightrulereport"><a aria-hidden="true" class="anchor-heading" href="#getinsightrulereport"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetInsightRuleReport</h3>
<ul>
<li>description: Grants permission to return the top-N report of unique contributors over a time range for a given insight rule.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "insight-rule": {
        "resource_type": "insight-rule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmetricdata"><a aria-hidden="true" class="anchor-heading" href="#getmetricdata"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetMetricData</h3>
<ul>
<li>description: Required to retrieve batch amounts of CloudWatch metric data and perform metric math on retrieved data</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmetricstatistics"><a aria-hidden="true" class="anchor-heading" href="#getmetricstatistics"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetMetricStatistics</h3>
<ul>
<li>description: Gets statistics for the specified metric</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmetricwidgetimage"><a aria-hidden="true" class="anchor-heading" href="#getmetricwidgetimage"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetMetricWidgetImage</h3>
<ul>
<li>description: Required to retrieve snapshots of metric widgets</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdashboards"><a aria-hidden="true" class="anchor-heading" href="#listdashboards"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDashboards</h3>
<ul>
<li>description: Returns a list of all CloudWatch dashboards in your account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listmetrics"><a aria-hidden="true" class="anchor-heading" href="#listmetrics"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListMetrics</h3>
<ul>
<li>description: Returns a list of valid metrics stored for the AWS account owner</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: This action lists tags for an Amazon CloudWatch resource.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "alarm": {
        "resource_type": "alarm",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "insight-rule": {
        "resource_type": "insight-rule",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putanomalydetector"><a aria-hidden="true" class="anchor-heading" href="#putanomalydetector"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutAnomalyDetector</h3>
<ul>
<li>description: Creates or updates an anomaly detection model for a CloudWatch metric.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putdashboard"><a aria-hidden="true" class="anchor-heading" href="#putdashboard"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutDashboard</h3>
<ul>
<li>description: Creates a CloudWatch dashboard, or updates an existing dashboard if it already exists</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dashboard": {
        "resource_type": "dashboard",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putinsightrule"><a aria-hidden="true" class="anchor-heading" href="#putinsightrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutInsightRule</h3>
<ul>
<li>description: Grants permission to create a new insight rule or replace an existing insight rule.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "insight-rule": {
        "resource_type": "insight-rule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putmetricalarm"><a aria-hidden="true" class="anchor-heading" href="#putmetricalarm"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutMetricAlarm</h3>
<ul>
<li>description: Creates or updates an alarm and associates it with the specified Amazon CloudWatch metric</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "alarm": {
        "resource_type": "alarm",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putmetricdata"><a aria-hidden="true" class="anchor-heading" href="#putmetricdata"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutMetricData</h3>
<ul>
<li>description: Publishes metric data points to Amazon CloudWatch</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "cloudwatch:namespace"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setalarmstate"><a aria-hidden="true" class="anchor-heading" href="#setalarmstate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetAlarmState</h3>
<ul>
<li>description: Temporarily sets the state of an alarm for testing purposes</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "alarm": {
        "resource_type": "alarm",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: This action tags an Amazon CloudWatch resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "alarm": {
        "resource_type": "alarm",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "insight-rule": {
        "resource_type": "insight-rule",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys",
            "aws:RequestTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: This action removes a tag from an Amazon CloudWatch resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "alarm": {
        "resource_type": "alarm",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "insight-rule": {
        "resource_type": "insight-rule",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-CloudWatch"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-DataSync.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>DataSync - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-DataSync.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-DataSync.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-DataSync.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="DataSync - undefined" />
  <meta name="twitter:title" content="DataSync - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">DataSync</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="DataSync">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="datasync"><a aria-hidden="true" class="anchor-heading" href="#datasync"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DataSync</h1>
<ul>
<li>prefix: datasync</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="canceltaskexecution"><a aria-hidden="true" class="anchor-heading" href="#canceltaskexecution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CancelTaskExecution</h3>
<ul>
<li>description: Cancels execution of a sync task.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "taskexecution": {
        "resource_type": "taskexecution",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createagent"><a aria-hidden="true" class="anchor-heading" href="#createagent"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateAgent</h3>
<ul>
<li>description: Activates an agent that you have deployed on your host.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createlocationefs"><a aria-hidden="true" class="anchor-heading" href="#createlocationefs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateLocationEfs</h3>
<ul>
<li>description: Creates an endpoint for an Amazon EFS file system.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createlocationfsxwindows"><a aria-hidden="true" class="anchor-heading" href="#createlocationfsxwindows"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateLocationFsxWindows</h3>
<ul>
<li>description: Creates an endpoint for an Amazon FSx Windows File Server file system.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createlocationnfs"><a aria-hidden="true" class="anchor-heading" href="#createlocationnfs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateLocationNfs</h3>
<ul>
<li>description: Creates an endpoint for a NFS file system.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createlocationobjectstorage"><a aria-hidden="true" class="anchor-heading" href="#createlocationobjectstorage"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateLocationObjectStorage</h3>
<ul>
<li>description: Creates an endpoint for a self-managed object storage bucket.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createlocations3"><a aria-hidden="true" class="anchor-heading" href="#createlocations3"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateLocationS3</h3>
<ul>
<li>description: Creates an endpoint for an Amazon S3 bucket.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createlocationsmb"><a aria-hidden="true" class="anchor-heading" href="#createlocationsmb"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateLocationSmb</h3>
<ul>
<li>description: Creates an endpoint for an SMB file system.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtask"><a aria-hidden="true" class="anchor-heading" href="#createtask"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTask</h3>
<ul>
<li>description: Creates a sync task.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteagent"><a aria-hidden="true" class="anchor-heading" href="#deleteagent"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAgent</h3>
<ul>
<li>description: Deletes an agent.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "agent": {
        "resource_type": "agent",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletelocation"><a aria-hidden="true" class="anchor-heading" href="#deletelocation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteLocation</h3>
<ul>
<li>description: Deletes the configuration of a location used by AWS DataSync.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "location": {
        "resource_type": "location",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetask"><a aria-hidden="true" class="anchor-heading" href="#deletetask"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTask</h3>
<ul>
<li>description: Deletes a sync task.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "task": {
        "resource_type": "task",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeagent"><a aria-hidden="true" class="anchor-heading" href="#describeagent"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAgent</h3>
<ul>
<li>description: Returns metadata such as name, network interfaces, and the status (that is, whether the agent is running or not) about a sync agent.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "agent": {
        "resource_type": "agent",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describelocationefs"><a aria-hidden="true" class="anchor-heading" href="#describelocationefs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeLocationEfs</h3>
<ul>
<li>description: Returns metadata, such as the path information about an Amazon EFS sync location.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "location": {
        "resource_type": "location",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describelocationfsxwindows"><a aria-hidden="true" class="anchor-heading" href="#describelocationfsxwindows"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeLocationFsxWindows</h3>
<ul>
<li>description: Returns metadata, such as the path information about an Amazon FSx Windows sync location.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "location": {
        "resource_type": "location",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describelocationnfs"><a aria-hidden="true" class="anchor-heading" href="#describelocationnfs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeLocationNfs</h3>
<ul>
<li>description: Returns metadata, such as the path information, about a NFS sync location.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "location": {
        "resource_type": "location",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describelocationobjectstorage"><a aria-hidden="true" class="anchor-heading" href="#describelocationobjectstorage"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeLocationObjectStorage</h3>
<ul>
<li>description: Returns metadata about a self-managed object storage server location.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "location": {
        "resource_type": "location",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describelocations3"><a aria-hidden="true" class="anchor-heading" href="#describelocations3"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeLocationS3</h3>
<ul>
<li>description: Returns metadata, such as bucket name, about an Amazon S3 bucket sync location.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "location": {
        "resource_type": "location",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describelocationsmb"><a aria-hidden="true" class="anchor-heading" href="#describelocationsmb"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeLocationSmb</h3>
<ul>
<li>description: Returns metadata, such as the path information, about an SMB sync location.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "location": {
        "resource_type": "location",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetask"><a aria-hidden="true" class="anchor-heading" href="#describetask"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTask</h3>
<ul>
<li>description: Returns metadata about a sync task.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "task": {
        "resource_type": "task",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetaskexecution"><a aria-hidden="true" class="anchor-heading" href="#describetaskexecution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTaskExecution</h3>
<ul>
<li>description: Returns detailed metadata about a sync task that is being executed.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "taskexecution": {
        "resource_type": "taskexecution",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listagents"><a aria-hidden="true" class="anchor-heading" href="#listagents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAgents</h3>
<ul>
<li>description: Returns a list of agents owned by an AWS account in a region specified in the request.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listlocations"><a aria-hidden="true" class="anchor-heading" href="#listlocations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListLocations</h3>
<ul>
<li>description: Returns a lists of source and destination sync locations.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: This operation lists the tags that have been added to the specified resource.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "agent": {
        "resource_type": "agent",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "location": {
        "resource_type": "location",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "task": {
        "resource_type": "task",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtaskexecutions"><a aria-hidden="true" class="anchor-heading" href="#listtaskexecutions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTaskExecutions</h3>
<ul>
<li>description: Returns a list of executed sync tasks.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtasks"><a aria-hidden="true" class="anchor-heading" href="#listtasks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTasks</h3>
<ul>
<li>description: Returns a list of all the sync tasks.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="starttaskexecution"><a aria-hidden="true" class="anchor-heading" href="#starttaskexecution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartTaskExecution</h3>
<ul>
<li>description: Starts a specific invocation of a sync task.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "task": {
        "resource_type": "task",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Applies a key-value pair to an AWS resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "agent": {
        "resource_type": "agent",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "location": {
        "resource_type": "location",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "task": {
        "resource_type": "task",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: This operation removes one or more tags from the specified resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "agent": {
        "resource_type": "agent",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "location": {
        "resource_type": "location",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "task": {
        "resource_type": "task",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateagent"><a aria-hidden="true" class="anchor-heading" href="#updateagent"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateAgent</h3>
<ul>
<li>description: Updates the name of an agent.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "agent": {
        "resource_type": "agent",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatetask"><a aria-hidden="true" class="anchor-heading" href="#updatetask"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateTask</h3>
<ul>
<li>description: Updates the metadata associated with a sync task.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "task": {
        "resource_type": "task",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-DataSync"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Firewall Manager.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Firewall Manager - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Firewall Manager.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Firewall Manager.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Firewall Manager.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Firewall Manager - undefined" />
  <meta name="twitter:title" content="Firewall Manager - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Firewall Manager</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Firewall Manager">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="firewall-manager"><a aria-hidden="true" class="anchor-heading" href="#firewall-manager"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Firewall Manager</h1>
<ul>
<li>prefix: fms</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="associateadminaccount"><a aria-hidden="true" class="anchor-heading" href="#associateadminaccount"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateAdminAccount</h3>
<ul>
<li>description: Sets the AWS Firewall Manager administrator account and enables the service in all organization accounts</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteappslist"><a aria-hidden="true" class="anchor-heading" href="#deleteappslist"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAppsList</h3>
<ul>
<li>description: Grants permission to permanently deletes an AWS Firewall Manager applications list.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "applications-list": {
        "resource_type": "applications-list",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletenotificationchannel"><a aria-hidden="true" class="anchor-heading" href="#deletenotificationchannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteNotificationChannel</h3>
<ul>
<li>description: Deletes an AWS Firewall Manager association with the IAM role and the Amazon Simple Notification Service (SNS) topic that is used to notify the FM administrator about major FM events and errors across the organization.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletepolicy"><a aria-hidden="true" class="anchor-heading" href="#deletepolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeletePolicy</h3>
<ul>
<li>description: Permanently deletes an AWS Firewall Manager policy.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "policy": {
        "resource_type": "policy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteprotocolslist"><a aria-hidden="true" class="anchor-heading" href="#deleteprotocolslist"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteProtocolsList</h3>
<ul>
<li>description: Grants permission to permanently deletes an AWS Firewall Manager protocols list.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "protocols-list": {
        "resource_type": "protocols-list",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociateadminaccount"><a aria-hidden="true" class="anchor-heading" href="#disassociateadminaccount"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateAdminAccount</h3>
<ul>
<li>description: Disassociates the account that has been set as the AWS Firewall Manager administrator account and and disables the service in all organization accounts</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getadminaccount"><a aria-hidden="true" class="anchor-heading" href="#getadminaccount"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAdminAccount</h3>
<ul>
<li>description: Returns the AWS Organizations master account that is associated with AWS Firewall Manager as the AWS Firewall Manager administrator.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getappslist"><a aria-hidden="true" class="anchor-heading" href="#getappslist"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAppsList</h3>
<ul>
<li>description: Grants permission to return information about the specified AWS Firewall Manager applications list.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "applications-list": {
        "resource_type": "applications-list",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcompliancedetail"><a aria-hidden="true" class="anchor-heading" href="#getcompliancedetail"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetComplianceDetail</h3>
<ul>
<li>description: Returns detailed compliance information about the specified member account. Details include resources that are in and out of compliance with the specified policy.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "policy": {
        "resource_type": "policy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getnotificationchannel"><a aria-hidden="true" class="anchor-heading" href="#getnotificationchannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetNotificationChannel</h3>
<ul>
<li>description: Returns information about the Amazon Simple Notification Service (SNS) topic that is used to record AWS Firewall Manager SNS logs.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getpolicy"><a aria-hidden="true" class="anchor-heading" href="#getpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetPolicy</h3>
<ul>
<li>description: Returns information about the specified AWS Firewall Manager policy.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "policy": {
        "resource_type": "policy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getprotectionstatus"><a aria-hidden="true" class="anchor-heading" href="#getprotectionstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetProtectionStatus</h3>
<ul>
<li>description: Returns policy-level attack summary information in the event of a potential DDoS attack.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "policy": {
        "resource_type": "policy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getprotocolslist"><a aria-hidden="true" class="anchor-heading" href="#getprotocolslist"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetProtocolsList</h3>
<ul>
<li>description: Grants permission to return information about the specified AWS Firewall Manager protocols list.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "protocols-list": {
        "resource_type": "protocols-list",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listappslists"><a aria-hidden="true" class="anchor-heading" href="#listappslists"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAppsLists</h3>
<ul>
<li>description: Grants permission to return an array of AppsListDataSummary objects.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listcompliancestatus"><a aria-hidden="true" class="anchor-heading" href="#listcompliancestatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListComplianceStatus</h3>
<ul>
<li>description: Returns an array of PolicyComplianceStatus objects in the response. Use PolicyComplianceStatus to get a summary of which member accounts are protected by the specified policy.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "policy": {
        "resource_type": "policy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listmemberaccounts"><a aria-hidden="true" class="anchor-heading" href="#listmemberaccounts"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListMemberAccounts</h3>
<ul>
<li>description: Returns an array of member account ids if the caller is FMS admin account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listpolicies"><a aria-hidden="true" class="anchor-heading" href="#listpolicies"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPolicies</h3>
<ul>
<li>description: Returns an array of PolicySummary objects in the response.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listprotocolslists"><a aria-hidden="true" class="anchor-heading" href="#listprotocolslists"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListProtocolsLists</h3>
<ul>
<li>description: Grants permission to return an array of ProtocolsListDataSummary objects.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Lists the Tags for a given resource.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "policy": {
        "resource_type": "policy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putappslist"><a aria-hidden="true" class="anchor-heading" href="#putappslist"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutAppsList</h3>
<ul>
<li>description: Grants permission to create an AWS Firewall Manager applications list.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "applications-list": {
        "resource_type": "applications-list",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putnotificationchannel"><a aria-hidden="true" class="anchor-heading" href="#putnotificationchannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutNotificationChannel</h3>
<ul>
<li>description: Designates the IAM role and Amazon Simple Notification Service (SNS) topic that AWS Firewall Manager (FM) could use to notify the FM administrator about major FM events and errors across the organization.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putpolicy"><a aria-hidden="true" class="anchor-heading" href="#putpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutPolicy</h3>
<ul>
<li>description: Creates an AWS Firewall Manager policy.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "policy": {
        "resource_type": "policy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putprotocolslist"><a aria-hidden="true" class="anchor-heading" href="#putprotocolslist"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutProtocolsList</h3>
<ul>
<li>description: Grants permission to creates an AWS Firewall Manager protocols list.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "protocols-list": {
        "resource_type": "protocols-list",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Adds a Tag to a given resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "policy": {
        "resource_type": "policy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Removes a Tag from a given resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "policy": {
        "resource_type": "policy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Firewall Manager"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Simple Workflow Service.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Simple Workflow Service - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Simple Workflow Service.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Simple Workflow Service.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Simple Workflow Service.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Simple Workflow Service - undefined" />
  <meta name="twitter:title" content="Simple Workflow Service - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Simple Workflow Service</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Simple Workflow Service">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="simple-workflow-service"><a aria-hidden="true" class="anchor-heading" href="#simple-workflow-service"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Simple Workflow Service</h1>
<ul>
<li>prefix: swf</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="canceltimer"><a aria-hidden="true" class="anchor-heading" href="#canceltimer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CancelTimer</h3>
<ul>
<li>description: Description for CancelTimer</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="cancelworkflowexecution"><a aria-hidden="true" class="anchor-heading" href="#cancelworkflowexecution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CancelWorkflowExecution</h3>
<ul>
<li>description: Description for CancelWorkflowExecution</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="completeworkflowexecution"><a aria-hidden="true" class="anchor-heading" href="#completeworkflowexecution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CompleteWorkflowExecution</h3>
<ul>
<li>description: Description for CompleteWorkflowExecution</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="continueasnewworkflowexecution"><a aria-hidden="true" class="anchor-heading" href="#continueasnewworkflowexecution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ContinueAsNewWorkflowExecution</h3>
<ul>
<li>description: Description for ContinueAsNewWorkflowExecution</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="countclosedworkflowexecutions"><a aria-hidden="true" class="anchor-heading" href="#countclosedworkflowexecutions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CountClosedWorkflowExecutions</h3>
<ul>
<li>description: Returns the number of closed workflow executions within the given domain that meet the specified filtering criteria.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "swf:tagFilter.tag",
            "swf:typeFilter.name",
            "swf:typeFilter.version"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="countopenworkflowexecutions"><a aria-hidden="true" class="anchor-heading" href="#countopenworkflowexecutions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CountOpenWorkflowExecutions</h3>
<ul>
<li>description: Returns the number of open workflow executions within the given domain that meet the specified filtering criteria.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "swf:tagFilter.tag",
            "swf:typeFilter.name",
            "swf:typeFilter.version"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="countpendingactivitytasks"><a aria-hidden="true" class="anchor-heading" href="#countpendingactivitytasks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CountPendingActivityTasks</h3>
<ul>
<li>description: Returns the estimated number of activity tasks in the specified task list.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "swf:taskList.name"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="countpendingdecisiontasks"><a aria-hidden="true" class="anchor-heading" href="#countpendingdecisiontasks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CountPendingDecisionTasks</h3>
<ul>
<li>description: Returns the estimated number of decision tasks in the specified task list.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "swf:taskList.name"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deprecateactivitytype"><a aria-hidden="true" class="anchor-heading" href="#deprecateactivitytype"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeprecateActivityType</h3>
<ul>
<li>description: Deprecates the specified activity type.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "swf:activityType.name",
            "swf:activityType.version"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deprecatedomain"><a aria-hidden="true" class="anchor-heading" href="#deprecatedomain"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeprecateDomain</h3>
<ul>
<li>description: Deprecates the specified domain.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deprecateworkflowtype"><a aria-hidden="true" class="anchor-heading" href="#deprecateworkflowtype"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeprecateWorkflowType</h3>
<ul>
<li>description: Deprecates the specified workflow type.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "swf:workflowType.name",
            "swf:workflowType.version"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeactivitytype"><a aria-hidden="true" class="anchor-heading" href="#describeactivitytype"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeActivityType</h3>
<ul>
<li>description: Returns information about the specified activity type.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "swf:activityType.name",
            "swf:activityType.version"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedomain"><a aria-hidden="true" class="anchor-heading" href="#describedomain"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDomain</h3>
<ul>
<li>description: Returns information about the specified domain, including description and status.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeworkflowexecution"><a aria-hidden="true" class="anchor-heading" href="#describeworkflowexecution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeWorkflowExecution</h3>
<ul>
<li>description: Returns information about the specified workflow execution including its type and some statistics.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeworkflowtype"><a aria-hidden="true" class="anchor-heading" href="#describeworkflowtype"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeWorkflowType</h3>
<ul>
<li>description: Returns information about the specified workflow type.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "swf:workflowType.name",
            "swf:workflowType.version"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="failworkflowexecution"><a aria-hidden="true" class="anchor-heading" href="#failworkflowexecution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>FailWorkflowExecution</h3>
<ul>
<li>description: Description for FailWorkflowExecution</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getworkflowexecutionhistory"><a aria-hidden="true" class="anchor-heading" href="#getworkflowexecutionhistory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetWorkflowExecutionHistory</h3>
<ul>
<li>description: Returns the history of the specified workflow execution.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listactivitytypes"><a aria-hidden="true" class="anchor-heading" href="#listactivitytypes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListActivityTypes</h3>
<ul>
<li>description: Returns information about all activities registered in the specified domain that match the specified name and registration status.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listclosedworkflowexecutions"><a aria-hidden="true" class="anchor-heading" href="#listclosedworkflowexecutions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListClosedWorkflowExecutions</h3>
<ul>
<li>description: Returns a list of closed workflow executions in the specified domain that meet the filtering criteria.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "swf:tagFilter.tag",
            "swf:typeFilter.name",
            "swf:typeFilter.version"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdomains"><a aria-hidden="true" class="anchor-heading" href="#listdomains"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDomains</h3>
<ul>
<li>description: Returns the list of domains registered in the account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listopenworkflowexecutions"><a aria-hidden="true" class="anchor-heading" href="#listopenworkflowexecutions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListOpenWorkflowExecutions</h3>
<ul>
<li>description: Returns a list of open workflow executions in the specified domain that meet the filtering criteria.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "swf:tagFilter.tag",
            "swf:typeFilter.name",
            "swf:typeFilter.version"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: This action lists tags for an AWS SWF resource.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listworkflowtypes"><a aria-hidden="true" class="anchor-heading" href="#listworkflowtypes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListWorkflowTypes</h3>
<ul>
<li>description: Returns information about workflow types in the specified domain.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="pollforactivitytask"><a aria-hidden="true" class="anchor-heading" href="#pollforactivitytask"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PollForActivityTask</h3>
<ul>
<li>description: Used by workers to get an ActivityTask from the specified activity taskList.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "swf:taskList.name"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="pollfordecisiontask"><a aria-hidden="true" class="anchor-heading" href="#pollfordecisiontask"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PollForDecisionTask</h3>
<ul>
<li>description: Used by deciders to get a DecisionTask from the specified decision taskList.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "swf:taskList.name"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="recordactivitytaskheartbeat"><a aria-hidden="true" class="anchor-heading" href="#recordactivitytaskheartbeat"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RecordActivityTaskHeartbeat</h3>
<ul>
<li>description: Used by activity workers to report to the service that the ActivityTask represented by the specified taskToken is still making progress.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="recordmarker"><a aria-hidden="true" class="anchor-heading" href="#recordmarker"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RecordMarker</h3>
<ul>
<li>description: Description for RecordMarker</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registeractivitytype"><a aria-hidden="true" class="anchor-heading" href="#registeractivitytype"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterActivityType</h3>
<ul>
<li>description: Registers a new activity type along with its configuration settings in the specified domain.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "swf:defaultTaskList.name",
            "swf:name",
            "swf:version"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registerdomain"><a aria-hidden="true" class="anchor-heading" href="#registerdomain"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterDomain</h3>
<ul>
<li>description: Registers a new domain.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys",
            "aws:RequestTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registerworkflowtype"><a aria-hidden="true" class="anchor-heading" href="#registerworkflowtype"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterWorkflowType</h3>
<ul>
<li>description: Registers a new workflow type and its configuration settings in the specified domain.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "swf:defaultTaskList.name",
            "swf:name",
            "swf:version"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="requestcancelactivitytask"><a aria-hidden="true" class="anchor-heading" href="#requestcancelactivitytask"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RequestCancelActivityTask</h3>
<ul>
<li>description: Description for RequestCancelActivityTask</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="requestcancelexternalworkflowexecution"><a aria-hidden="true" class="anchor-heading" href="#requestcancelexternalworkflowexecution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RequestCancelExternalWorkflowExecution</h3>
<ul>
<li>description: Description for RequestCancelExternalWorkflowExecution</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="requestcancelworkflowexecution"><a aria-hidden="true" class="anchor-heading" href="#requestcancelworkflowexecution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RequestCancelWorkflowExecution</h3>
<ul>
<li>description: Records a WorkflowExecutionCancelRequested event in the currently running workflow execution identified by the given domain, workflowId, and runId.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="respondactivitytaskcanceled"><a aria-hidden="true" class="anchor-heading" href="#respondactivitytaskcanceled"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RespondActivityTaskCanceled</h3>
<ul>
<li>description: Used by workers to tell the service that the ActivityTask identified by the taskToken was successfully canceled.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="respondactivitytaskcompleted"><a aria-hidden="true" class="anchor-heading" href="#respondactivitytaskcompleted"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RespondActivityTaskCompleted</h3>
<ul>
<li>description: Used by workers to tell the service that the ActivityTask identified by the taskToken completed successfully with a result (if provided).</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "swf:activityType.name",
            "swf:activityType.version",
            "swf:tagList.member.0",
            "swf:tagList.member.1",
            "swf:tagList.member.2",
            "swf:tagList.member.3",
            "swf:tagList.member.4",
            "swf:taskList.name",
            "swf:workflowType.name",
            "swf:workflowType.version"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="respondactivitytaskfailed"><a aria-hidden="true" class="anchor-heading" href="#respondactivitytaskfailed"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RespondActivityTaskFailed</h3>
<ul>
<li>description: Used by workers to tell the service that the ActivityTask identified by the taskToken has failed with reason (if specified).</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="responddecisiontaskcompleted"><a aria-hidden="true" class="anchor-heading" href="#responddecisiontaskcompleted"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RespondDecisionTaskCompleted</h3>
<ul>
<li>description: Used by deciders to tell the service that the DecisionTask identified by the taskToken has successfully completed.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="scheduleactivitytask"><a aria-hidden="true" class="anchor-heading" href="#scheduleactivitytask"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ScheduleActivityTask</h3>
<ul>
<li>description: Description for ScheduleActivityTask</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="signalexternalworkflowexecution"><a aria-hidden="true" class="anchor-heading" href="#signalexternalworkflowexecution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SignalExternalWorkflowExecution</h3>
<ul>
<li>description: Description for SignalExternalWorkflowExecution</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="signalworkflowexecution"><a aria-hidden="true" class="anchor-heading" href="#signalworkflowexecution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SignalWorkflowExecution</h3>
<ul>
<li>description: Records a WorkflowExecutionSignaled event in the workflow execution history and creates a decision task for the workflow execution identified by the given domain, workflowId and runId.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startchildworkflowexecution"><a aria-hidden="true" class="anchor-heading" href="#startchildworkflowexecution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartChildWorkflowExecution</h3>
<ul>
<li>description: Description for StartChildWorkflowExecution</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="starttimer"><a aria-hidden="true" class="anchor-heading" href="#starttimer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartTimer</h3>
<ul>
<li>description: Description for StartTimer</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startworkflowexecution"><a aria-hidden="true" class="anchor-heading" href="#startworkflowexecution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartWorkflowExecution</h3>
<ul>
<li>description: Starts an execution of the workflow type in the specified domain using the provided workflowId and input data.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "swf:tagList.member.0",
            "swf:tagList.member.1",
            "swf:tagList.member.2",
            "swf:tagList.member.3",
            "swf:tagList.member.4",
            "swf:taskList.name",
            "swf:workflowType.name",
            "swf:workflowType.version"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: This action tags an AWS SWF resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys",
            "aws:RequestTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="terminateworkflowexecution"><a aria-hidden="true" class="anchor-heading" href="#terminateworkflowexecution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TerminateWorkflowExecution</h3>
<ul>
<li>description: Records a WorkflowExecutionTerminated event and forces closure of the workflow execution identified by the given domain, runId, and workflowId.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: This action removes a tag from an AWS SWF resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Simple Workflow Service"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-CloudWatch Logs.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>CloudWatch Logs - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-CloudWatch Logs.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-CloudWatch Logs.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-CloudWatch Logs.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="CloudWatch Logs - undefined" />
  <meta name="twitter:title" content="CloudWatch Logs - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">CloudWatch Logs</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="CloudWatch Logs">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="cloudwatch-logs"><a aria-hidden="true" class="anchor-heading" href="#cloudwatch-logs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CloudWatch Logs</h1>
<ul>
<li>prefix: logs</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="associatekmskey"><a aria-hidden="true" class="anchor-heading" href="#associatekmskey"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateKmsKey</h3>
<ul>
<li>description: Associates the specified AWS Key Management Service (AWS KMS) customer master key (CMK) with the specified log group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "log-group": {
        "resource_type": "log-group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="cancelexporttask"><a aria-hidden="true" class="anchor-heading" href="#cancelexporttask"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CancelExportTask</h3>
<ul>
<li>description: Cancels an export task if it is in PENDING or RUNNING state</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createexporttask"><a aria-hidden="true" class="anchor-heading" href="#createexporttask"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateExportTask</h3>
<ul>
<li>description: Creates an ExportTask which allows you to efficiently export data from a Log Group to your Amazon S3 bucket</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "log-group": {
        "resource_type": "log-group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createlogdelivery"><a aria-hidden="true" class="anchor-heading" href="#createlogdelivery"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateLogDelivery</h3>
<ul>
<li>description: Creates the log delivery</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createloggroup"><a aria-hidden="true" class="anchor-heading" href="#createloggroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateLogGroup</h3>
<ul>
<li>description: Creates a new log group with the specified name</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "log-group": {
        "resource_type": "log-group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createlogstream"><a aria-hidden="true" class="anchor-heading" href="#createlogstream"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateLogStream</h3>
<ul>
<li>description: Creates a new log stream with the specified name</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "log-group": {
        "resource_type": "log-group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedestination"><a aria-hidden="true" class="anchor-heading" href="#deletedestination"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDestination</h3>
<ul>
<li>description: Deletes the destination with the specified name and eventually disables all the subscription filters that publish to it</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletelogdelivery"><a aria-hidden="true" class="anchor-heading" href="#deletelogdelivery"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteLogDelivery</h3>
<ul>
<li>description: Deletes the log delivery information for specified log delivery</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteloggroup"><a aria-hidden="true" class="anchor-heading" href="#deleteloggroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteLogGroup</h3>
<ul>
<li>description: Deletes the log group with the specified name and permanently deletes all the archived log events associated with it</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "log-group": {
        "resource_type": "log-group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletelogstream"><a aria-hidden="true" class="anchor-heading" href="#deletelogstream"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteLogStream</h3>
<ul>
<li>description: Deletes a log stream and permanently deletes all the archived log events associated with it</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "log-stream": {
        "resource_type": "log-stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletemetricfilter"><a aria-hidden="true" class="anchor-heading" href="#deletemetricfilter"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteMetricFilter</h3>
<ul>
<li>description: Deletes a metric filter associated with the specified log group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "log-group": {
        "resource_type": "log-group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteresourcepolicy"><a aria-hidden="true" class="anchor-heading" href="#deleteresourcepolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteResourcePolicy</h3>
<ul>
<li>description: Deletes a resource policy from this account</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteretentionpolicy"><a aria-hidden="true" class="anchor-heading" href="#deleteretentionpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteRetentionPolicy</h3>
<ul>
<li>description: Deletes the retention policy of the specified log group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "log-group": {
        "resource_type": "log-group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletesubscriptionfilter"><a aria-hidden="true" class="anchor-heading" href="#deletesubscriptionfilter"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteSubscriptionFilter</h3>
<ul>
<li>description: Deletes a subscription filter associated with the specified log group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "log-group": {
        "resource_type": "log-group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedestinations"><a aria-hidden="true" class="anchor-heading" href="#describedestinations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDestinations</h3>
<ul>
<li>description: Returns all the destinations that are associated with the AWS account making the request</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeexporttasks"><a aria-hidden="true" class="anchor-heading" href="#describeexporttasks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeExportTasks</h3>
<ul>
<li>description: Returns all the export tasks that are associated with the AWS account making the request</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeloggroups"><a aria-hidden="true" class="anchor-heading" href="#describeloggroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeLogGroups</h3>
<ul>
<li>description: Returns all the log groups that are associated with the AWS account making the request</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "log-group": {
        "resource_type": "log-group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describelogstreams"><a aria-hidden="true" class="anchor-heading" href="#describelogstreams"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeLogStreams</h3>
<ul>
<li>description: Returns all the log streams that are associated with the specified log group</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "log-group": {
        "resource_type": "log-group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describemetricfilters"><a aria-hidden="true" class="anchor-heading" href="#describemetricfilters"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeMetricFilters</h3>
<ul>
<li>description: Returns all the metrics filters associated with the specified log group</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "log-group": {
        "resource_type": "log-group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describequeries"><a aria-hidden="true" class="anchor-heading" href="#describequeries"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeQueries</h3>
<ul>
<li>description: Returns a list of CloudWatch Logs Insights queries that are scheduled, executing, or have been executed recently in this account. You can request all queries, or limit it to queries of a specific log group or queries with a certain status.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeresourcepolicies"><a aria-hidden="true" class="anchor-heading" href="#describeresourcepolicies"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeResourcePolicies</h3>
<ul>
<li>description: Return all the resource policies in this account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describesubscriptionfilters"><a aria-hidden="true" class="anchor-heading" href="#describesubscriptionfilters"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSubscriptionFilters</h3>
<ul>
<li>description: Returns all the subscription filters associated with the specified log group</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "log-group": {
        "resource_type": "log-group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociatekmskey"><a aria-hidden="true" class="anchor-heading" href="#disassociatekmskey"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateKmsKey</h3>
<ul>
<li>description: Disassociates the associated AWS Key Management Service (AWS KMS) customer master key (CMK) from the specified log group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "log-group": {
        "resource_type": "log-group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="filterlogevents"><a aria-hidden="true" class="anchor-heading" href="#filterlogevents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>FilterLogEvents</h3>
<ul>
<li>description: Retrieves log events, optionally filtered by a filter pattern from the specified log group</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "log-group": {
        "resource_type": "log-group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getlogdelivery"><a aria-hidden="true" class="anchor-heading" href="#getlogdelivery"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetLogDelivery</h3>
<ul>
<li>description: Gets the log delivery information for specified log delivery</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getlogevents"><a aria-hidden="true" class="anchor-heading" href="#getlogevents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetLogEvents</h3>
<ul>
<li>description: Retrieves log events from the specified log stream</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "log-stream": {
        "resource_type": "log-stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getloggroupfields"><a aria-hidden="true" class="anchor-heading" href="#getloggroupfields"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetLogGroupFields</h3>
<ul>
<li>description: Returns a list of the fields that are included in log events in the specified log group, along with the percentage of log events that contain each field. The search is limited to a time period that you specify.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "log-group": {
        "resource_type": "log-group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getlogrecord"><a aria-hidden="true" class="anchor-heading" href="#getlogrecord"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetLogRecord</h3>
<ul>
<li>description: Retrieves all the fields and values of a single log event. All fields are retrieved, even if the original query that produced the logRecordPointer retrieved only a subset of fields. Fields are returned as field name/field value pairs.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getqueryresults"><a aria-hidden="true" class="anchor-heading" href="#getqueryresults"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetQueryResults</h3>
<ul>
<li>description: Returns the results from the specified query. If the query is in progress, partial results of that current execution are returned. Only the fields requested in the query are returned.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listlogdeliveries"><a aria-hidden="true" class="anchor-heading" href="#listlogdeliveries"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListLogDeliveries</h3>
<ul>
<li>description: Lists all the log deliveries for specified account and/or log source</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsloggroup"><a aria-hidden="true" class="anchor-heading" href="#listtagsloggroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsLogGroup</h3>
<ul>
<li>description: Lists the tags for the specified log group</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "log-group": {
        "resource_type": "log-group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putdestination"><a aria-hidden="true" class="anchor-heading" href="#putdestination"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutDestination</h3>
<ul>
<li>description: Creates or updates a Destination</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    }
}
</code></pre>
<h3 id="putdestinationpolicy"><a aria-hidden="true" class="anchor-heading" href="#putdestinationpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutDestinationPolicy</h3>
<ul>
<li>description: Creates or updates an access policy associated with an existing Destination</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putlogevents"><a aria-hidden="true" class="anchor-heading" href="#putlogevents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutLogEvents</h3>
<ul>
<li>description: Uploads a batch of log events to the specified log stream</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "log-stream": {
        "resource_type": "log-stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putmetricfilter"><a aria-hidden="true" class="anchor-heading" href="#putmetricfilter"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutMetricFilter</h3>
<ul>
<li>description: Creates or updates a metric filter and associates it with the specified log group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "log-group": {
        "resource_type": "log-group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putresourcepolicy"><a aria-hidden="true" class="anchor-heading" href="#putresourcepolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutResourcePolicy</h3>
<ul>
<li>description: Creates or updates a resource policy allowing other AWS services to put log events to this account</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putretentionpolicy"><a aria-hidden="true" class="anchor-heading" href="#putretentionpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutRetentionPolicy</h3>
<ul>
<li>description: Sets the retention of the specified log group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "log-group": {
        "resource_type": "log-group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putsubscriptionfilter"><a aria-hidden="true" class="anchor-heading" href="#putsubscriptionfilter"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutSubscriptionFilter</h3>
<ul>
<li>description: Creates or updates a subscription filter and associates it with the specified log group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "log-group": {
        "resource_type": "log-group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    }
}
</code></pre>
<h3 id="startquery"><a aria-hidden="true" class="anchor-heading" href="#startquery"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartQuery</h3>
<ul>
<li>description: Schedules a query of a log group using CloudWatch Logs Insights. You specify the log group and time range to query, and the query string to use.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "log-group": {
        "resource_type": "log-group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopquery"><a aria-hidden="true" class="anchor-heading" href="#stopquery"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopQuery</h3>
<ul>
<li>description: Stops a CloudWatch Logs Insights query that is in progress. If the query has already ended, the operation returns an error indicating that the specified query is not running.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagloggroup"><a aria-hidden="true" class="anchor-heading" href="#tagloggroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagLogGroup</h3>
<ul>
<li>description: Adds or updates the specified tags for the specified log group</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "log-group": {
        "resource_type": "log-group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="testmetricfilter"><a aria-hidden="true" class="anchor-heading" href="#testmetricfilter"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TestMetricFilter</h3>
<ul>
<li>description: Tests the filter pattern of a metric filter against a sample of log event messages</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagloggroup"><a aria-hidden="true" class="anchor-heading" href="#untagloggroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagLogGroup</h3>
<ul>
<li>description: Removes the specified tags from the specified log group</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "log-group": {
        "resource_type": "log-group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatelogdelivery"><a aria-hidden="true" class="anchor-heading" href="#updatelogdelivery"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateLogDelivery</h3>
<ul>
<li>description: Updates the log delivery information for specified log delivery</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-CloudWatch Logs"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Kendra.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Kendra - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Kendra.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Kendra.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Kendra.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Kendra - undefined" />
  <meta name="twitter:title" content="Kendra - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Kendra</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Kendra">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="kendra"><a aria-hidden="true" class="anchor-heading" href="#kendra"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Kendra</h1>
<ul>
<li>prefix: kendra</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="batchdeletedocument"><a aria-hidden="true" class="anchor-heading" href="#batchdeletedocument"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchDeleteDocument</h3>
<ul>
<li>description: Batch Delete document</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "index": {
        "resource_type": "index",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchputdocument"><a aria-hidden="true" class="anchor-heading" href="#batchputdocument"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchPutDocument</h3>
<ul>
<li>description: Batch put document</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "index": {
        "resource_type": "index",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdatasource"><a aria-hidden="true" class="anchor-heading" href="#createdatasource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDataSource</h3>
<ul>
<li>description: Create a data source</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "index": {
        "resource_type": "index",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createfaq"><a aria-hidden="true" class="anchor-heading" href="#createfaq"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateFaq</h3>
<ul>
<li>description: Create an Faq</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "index": {
        "resource_type": "index",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createindex"><a aria-hidden="true" class="anchor-heading" href="#createindex"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateIndex</h3>
<ul>
<li>description: Create an Index</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedatasource"><a aria-hidden="true" class="anchor-heading" href="#deletedatasource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDataSource</h3>
<ul>
<li>description: Delete a data source</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "data-source": {
        "resource_type": "data-source",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "index": {
        "resource_type": "index",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletefaq"><a aria-hidden="true" class="anchor-heading" href="#deletefaq"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteFaq</h3>
<ul>
<li>description: Delete an Faq</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "faq": {
        "resource_type": "faq",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "index": {
        "resource_type": "index",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteindex"><a aria-hidden="true" class="anchor-heading" href="#deleteindex"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteIndex</h3>
<ul>
<li>description: Delete an Index</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "index": {
        "resource_type": "index",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedatasource"><a aria-hidden="true" class="anchor-heading" href="#describedatasource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDataSource</h3>
<ul>
<li>description: Describe a data source</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "data-source": {
        "resource_type": "data-source",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "index": {
        "resource_type": "index",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describefaq"><a aria-hidden="true" class="anchor-heading" href="#describefaq"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeFaq</h3>
<ul>
<li>description: Describe an Faq</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "faq": {
        "resource_type": "faq",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "index": {
        "resource_type": "index",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeindex"><a aria-hidden="true" class="anchor-heading" href="#describeindex"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeIndex</h3>
<ul>
<li>description: Describe an Index</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "index": {
        "resource_type": "index",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdatasourcesyncjobs"><a aria-hidden="true" class="anchor-heading" href="#listdatasourcesyncjobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDataSourceSyncJobs</h3>
<ul>
<li>description: Get Data Source sync job history</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "data-source": {
        "resource_type": "data-source",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "index": {
        "resource_type": "index",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdatasources"><a aria-hidden="true" class="anchor-heading" href="#listdatasources"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDataSources</h3>
<ul>
<li>description: List the data sources</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "index": {
        "resource_type": "index",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listfaqs"><a aria-hidden="true" class="anchor-heading" href="#listfaqs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListFaqs</h3>
<ul>
<li>description: List the Faqs</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "index": {
        "resource_type": "index",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listindices"><a aria-hidden="true" class="anchor-heading" href="#listindices"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListIndices</h3>
<ul>
<li>description: List the indexes</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Lists tags for a resource</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "data-source": {
        "resource_type": "data-source",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "faq": {
        "resource_type": "faq",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "index": {
        "resource_type": "index",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="query"><a aria-hidden="true" class="anchor-heading" href="#query"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Query</h3>
<ul>
<li>description: Query documents and Faqs</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "index": {
        "resource_type": "index",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startdatasourcesyncjob"><a aria-hidden="true" class="anchor-heading" href="#startdatasourcesyncjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartDataSourceSyncJob</h3>
<ul>
<li>description: Start Data Source sync job</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "data-source": {
        "resource_type": "data-source",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "index": {
        "resource_type": "index",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopdatasourcesyncjob"><a aria-hidden="true" class="anchor-heading" href="#stopdatasourcesyncjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopDataSourceSyncJob</h3>
<ul>
<li>description: Stop Data Source sync job</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "data-source": {
        "resource_type": "data-source",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "index": {
        "resource_type": "index",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="submitfeedback"><a aria-hidden="true" class="anchor-heading" href="#submitfeedback"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SubmitFeedback</h3>
<ul>
<li>description: Send feedback about a query results</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "index": {
        "resource_type": "index",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Tags a resource with given key value pairs</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "data-source": {
        "resource_type": "data-source",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "faq": {
        "resource_type": "faq",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "index": {
        "resource_type": "index",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Removes the tag with the given key from a resource</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "data-source": {
        "resource_type": "data-source",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "faq": {
        "resource_type": "faq",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "index": {
        "resource_type": "index",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatedatasource"><a aria-hidden="true" class="anchor-heading" href="#updatedatasource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateDataSource</h3>
<ul>
<li>description: Update a data source</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "data-source": {
        "resource_type": "data-source",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "index": {
        "resource_type": "index",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateindex"><a aria-hidden="true" class="anchor-heading" href="#updateindex"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateIndex</h3>
<ul>
<li>description: Update an Index</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "index": {
        "resource_type": "index",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Kendra"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Glue.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Glue - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Glue.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Glue.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Glue.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Glue - undefined" />
  <meta name="twitter:title" content="Glue - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Glue</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Glue">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="glue"><a aria-hidden="true" class="anchor-heading" href="#glue"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Glue</h1>
<ul>
<li>prefix: glue</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="batchcreatepartition"><a aria-hidden="true" class="anchor-heading" href="#batchcreatepartition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchCreatePartition</h3>
<ul>
<li>description: Grants permission to create one or more partitions</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "catalog": {
        "resource_type": "catalog",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "database": {
        "resource_type": "database",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchdeleteconnection"><a aria-hidden="true" class="anchor-heading" href="#batchdeleteconnection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchDeleteConnection</h3>
<ul>
<li>description: Grants permission to delete one or more connections</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "catalog": {
        "resource_type": "catalog",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "connection": {
        "resource_type": "connection",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchdeletepartition"><a aria-hidden="true" class="anchor-heading" href="#batchdeletepartition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchDeletePartition</h3>
<ul>
<li>description: Grants permission to delete one or more partitions</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "catalog": {
        "resource_type": "catalog",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "database": {
        "resource_type": "database",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchdeletetable"><a aria-hidden="true" class="anchor-heading" href="#batchdeletetable"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchDeleteTable</h3>
<ul>
<li>description: Grants permission to delete one or more tables</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "catalog": {
        "resource_type": "catalog",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "database": {
        "resource_type": "database",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchdeletetableversion"><a aria-hidden="true" class="anchor-heading" href="#batchdeletetableversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchDeleteTableVersion</h3>
<ul>
<li>description: Grants permission to delete one or more versions of a table</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "catalog": {
        "resource_type": "catalog",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "database": {
        "resource_type": "database",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "tableversion": {
        "resource_type": "tableversion",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchgetcrawlers"><a aria-hidden="true" class="anchor-heading" href="#batchgetcrawlers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchGetCrawlers</h3>
<ul>
<li>description: Grants permission to retrieve one or more crawlers</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchgetdevendpoints"><a aria-hidden="true" class="anchor-heading" href="#batchgetdevendpoints"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchGetDevEndpoints</h3>
<ul>
<li>description: Grants permission to retrieve one or more development endpoints</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchgetjobs"><a aria-hidden="true" class="anchor-heading" href="#batchgetjobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchGetJobs</h3>
<ul>
<li>description: Grants permission to retrieve one or more jobs</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchgetpartition"><a aria-hidden="true" class="anchor-heading" href="#batchgetpartition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchGetPartition</h3>
<ul>
<li>description: Grants permission to retrieve one or more partitions</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "catalog": {
        "resource_type": "catalog",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "database": {
        "resource_type": "database",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchgettriggers"><a aria-hidden="true" class="anchor-heading" href="#batchgettriggers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchGetTriggers</h3>
<ul>
<li>description: Grants permission to retrieve one or more triggers</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchgetworkflows"><a aria-hidden="true" class="anchor-heading" href="#batchgetworkflows"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchGetWorkflows</h3>
<ul>
<li>description: Grants permission to retrieve one or more workflows</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchstopjobrun"><a aria-hidden="true" class="anchor-heading" href="#batchstopjobrun"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchStopJobRun</h3>
<ul>
<li>description: Grants permission to stop one or more job runs for a job</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="cancelmltaskrun"><a aria-hidden="true" class="anchor-heading" href="#cancelmltaskrun"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CancelMLTaskRun</h3>
<ul>
<li>description: Grants permission to stop a running ML Task Run</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "mlTransform": {
        "resource_type": "mlTransform",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createclassifier"><a aria-hidden="true" class="anchor-heading" href="#createclassifier"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateClassifier</h3>
<ul>
<li>description: Grants permission to create a classifier</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createconnection"><a aria-hidden="true" class="anchor-heading" href="#createconnection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateConnection</h3>
<ul>
<li>description: Grants permission to create a connection</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "catalog": {
        "resource_type": "catalog",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "connection": {
        "resource_type": "connection",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createcrawler"><a aria-hidden="true" class="anchor-heading" href="#createcrawler"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateCrawler</h3>
<ul>
<li>description: Grants permission to create a crawler</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdatabase"><a aria-hidden="true" class="anchor-heading" href="#createdatabase"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDatabase</h3>
<ul>
<li>description: Grants permission to create a database</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "catalog": {
        "resource_type": "catalog",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "database": {
        "resource_type": "database",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdevendpoint"><a aria-hidden="true" class="anchor-heading" href="#createdevendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDevEndpoint</h3>
<ul>
<li>description: Grants permission to create a development endpoint</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createjob"><a aria-hidden="true" class="anchor-heading" href="#createjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateJob</h3>
<ul>
<li>description: Grants permission to create a job</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createmltransform"><a aria-hidden="true" class="anchor-heading" href="#createmltransform"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateMLTransform</h3>
<ul>
<li>description: Grants permission to create an ML Transform</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createpartition"><a aria-hidden="true" class="anchor-heading" href="#createpartition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreatePartition</h3>
<ul>
<li>description: Grants permission to create a partition</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "catalog": {
        "resource_type": "catalog",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "database": {
        "resource_type": "database",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createscript"><a aria-hidden="true" class="anchor-heading" href="#createscript"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateScript</h3>
<ul>
<li>description: Grants permission to create a script</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createsecurityconfiguration"><a aria-hidden="true" class="anchor-heading" href="#createsecurityconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSecurityConfiguration</h3>
<ul>
<li>description: Grants permission to create a security configuration</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtable"><a aria-hidden="true" class="anchor-heading" href="#createtable"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTable</h3>
<ul>
<li>description: Grants permission to create a table</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "catalog": {
        "resource_type": "catalog",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "database": {
        "resource_type": "database",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtrigger"><a aria-hidden="true" class="anchor-heading" href="#createtrigger"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTrigger</h3>
<ul>
<li>description: Grants permission to create a trigger</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createuserdefinedfunction"><a aria-hidden="true" class="anchor-heading" href="#createuserdefinedfunction"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateUserDefinedFunction</h3>
<ul>
<li>description: Grants permission to create a function definition</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "catalog": {
        "resource_type": "catalog",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "database": {
        "resource_type": "database",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "userdefinedfunction": {
        "resource_type": "userdefinedfunction",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createworkflow"><a aria-hidden="true" class="anchor-heading" href="#createworkflow"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateWorkflow</h3>
<ul>
<li>description: Grants permission to create a workflow</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteclassifier"><a aria-hidden="true" class="anchor-heading" href="#deleteclassifier"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteClassifier</h3>
<ul>
<li>description: Grants permission to delete a classifier</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteconnection"><a aria-hidden="true" class="anchor-heading" href="#deleteconnection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteConnection</h3>
<ul>
<li>description: Grants permission to delete a connection</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "catalog": {
        "resource_type": "catalog",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "connection": {
        "resource_type": "connection",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletecrawler"><a aria-hidden="true" class="anchor-heading" href="#deletecrawler"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteCrawler</h3>
<ul>
<li>description: Grants permission to delete a crawler</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedatabase"><a aria-hidden="true" class="anchor-heading" href="#deletedatabase"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDatabase</h3>
<ul>
<li>description: Grants permission to delete a database</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "catalog": {
        "resource_type": "catalog",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "database": {
        "resource_type": "database",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedevendpoint"><a aria-hidden="true" class="anchor-heading" href="#deletedevendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDevEndpoint</h3>
<ul>
<li>description: Grants permission to delete a development endpoint</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletejob"><a aria-hidden="true" class="anchor-heading" href="#deletejob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteJob</h3>
<ul>
<li>description: Grants permission to delete a job</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletemltransform"><a aria-hidden="true" class="anchor-heading" href="#deletemltransform"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteMLTransform</h3>
<ul>
<li>description: Grants permission to delete an ML Transform</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "mlTransform": {
        "resource_type": "mlTransform",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletepartition"><a aria-hidden="true" class="anchor-heading" href="#deletepartition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeletePartition</h3>
<ul>
<li>description: Grants permission to delete a partition</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "catalog": {
        "resource_type": "catalog",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "database": {
        "resource_type": "database",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteresourcepolicy"><a aria-hidden="true" class="anchor-heading" href="#deleteresourcepolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteResourcePolicy</h3>
<ul>
<li>description: Grants permission to delete a resource policy</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "catalog": {
        "resource_type": "catalog",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletesecurityconfiguration"><a aria-hidden="true" class="anchor-heading" href="#deletesecurityconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteSecurityConfiguration</h3>
<ul>
<li>description: Grants permission to delete a security configuration</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetable"><a aria-hidden="true" class="anchor-heading" href="#deletetable"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTable</h3>
<ul>
<li>description: Grants permission to delete a table</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "catalog": {
        "resource_type": "catalog",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "database": {
        "resource_type": "database",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetableversion"><a aria-hidden="true" class="anchor-heading" href="#deletetableversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTableVersion</h3>
<ul>
<li>description: Grants permission to delete a version of a table</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "catalog": {
        "resource_type": "catalog",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "database": {
        "resource_type": "database",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "tableversion": {
        "resource_type": "tableversion",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetrigger"><a aria-hidden="true" class="anchor-heading" href="#deletetrigger"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTrigger</h3>
<ul>
<li>description: Grants permission to delete a trigger</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteuserdefinedfunction"><a aria-hidden="true" class="anchor-heading" href="#deleteuserdefinedfunction"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteUserDefinedFunction</h3>
<ul>
<li>description: Grants permission to delete a function definition</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "catalog": {
        "resource_type": "catalog",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "database": {
        "resource_type": "database",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "userdefinedfunction": {
        "resource_type": "userdefinedfunction",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteworkflow"><a aria-hidden="true" class="anchor-heading" href="#deleteworkflow"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteWorkflow</h3>
<ul>
<li>description: Grants permission to delete a workflow</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcatalogimportstatus"><a aria-hidden="true" class="anchor-heading" href="#getcatalogimportstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCatalogImportStatus</h3>
<ul>
<li>description: Grants permission to retrieve the catalog import status</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "catalog": {
        "resource_type": "catalog",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getclassifier"><a aria-hidden="true" class="anchor-heading" href="#getclassifier"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetClassifier</h3>
<ul>
<li>description: Grants permission to retrieve a classifier</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getclassifiers"><a aria-hidden="true" class="anchor-heading" href="#getclassifiers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetClassifiers</h3>
<ul>
<li>description: Grants permission to list all classifiers</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getconnection"><a aria-hidden="true" class="anchor-heading" href="#getconnection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetConnection</h3>
<ul>
<li>description: Grants permission to retrieve a connection</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "catalog": {
        "resource_type": "catalog",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "connection": {
        "resource_type": "connection",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getconnections"><a aria-hidden="true" class="anchor-heading" href="#getconnections"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetConnections</h3>
<ul>
<li>description: Grants permission to retrieve a list of connections</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "catalog": {
        "resource_type": "catalog",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "connection": {
        "resource_type": "connection",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcrawler"><a aria-hidden="true" class="anchor-heading" href="#getcrawler"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCrawler</h3>
<ul>
<li>description: Grants permission to retrieve a crawler</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcrawlermetrics"><a aria-hidden="true" class="anchor-heading" href="#getcrawlermetrics"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCrawlerMetrics</h3>
<ul>
<li>description: Grants permission to retrieve metrics about crawlers</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcrawlers"><a aria-hidden="true" class="anchor-heading" href="#getcrawlers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCrawlers</h3>
<ul>
<li>description: Grants permission to retrieve all crawlers</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdatacatalogencryptionsettings"><a aria-hidden="true" class="anchor-heading" href="#getdatacatalogencryptionsettings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDataCatalogEncryptionSettings</h3>
<ul>
<li>description: Grants permission to retrieve catalog encryption settings</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdatabase"><a aria-hidden="true" class="anchor-heading" href="#getdatabase"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDatabase</h3>
<ul>
<li>description: Grants permission to retrieve a database</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "catalog": {
        "resource_type": "catalog",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "database": {
        "resource_type": "database",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdatabases"><a aria-hidden="true" class="anchor-heading" href="#getdatabases"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDatabases</h3>
<ul>
<li>description: Grants permission to retrieve all databases</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "catalog": {
        "resource_type": "catalog",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "database": {
        "resource_type": "database",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdataflowgraph"><a aria-hidden="true" class="anchor-heading" href="#getdataflowgraph"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDataflowGraph</h3>
<ul>
<li>description: Grants permission to transform a script into a directed acyclic graph (DAG)</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdevendpoint"><a aria-hidden="true" class="anchor-heading" href="#getdevendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDevEndpoint</h3>
<ul>
<li>description: Grants permission to retrieve a development endpoint</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdevendpoints"><a aria-hidden="true" class="anchor-heading" href="#getdevendpoints"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDevEndpoints</h3>
<ul>
<li>description: Grants permission to retrieve all development endpoints</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getjob"><a aria-hidden="true" class="anchor-heading" href="#getjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetJob</h3>
<ul>
<li>description: Grants permission to retrieve a job</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getjobbookmark"><a aria-hidden="true" class="anchor-heading" href="#getjobbookmark"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetJobBookmark</h3>
<ul>
<li>description: Grants permission to retrieve a job bookmark</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getjobrun"><a aria-hidden="true" class="anchor-heading" href="#getjobrun"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetJobRun</h3>
<ul>
<li>description: Grants permission to retrieve a job run</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getjobruns"><a aria-hidden="true" class="anchor-heading" href="#getjobruns"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetJobRuns</h3>
<ul>
<li>description: Grants permission to retrieve all job runs of a job</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getjobs"><a aria-hidden="true" class="anchor-heading" href="#getjobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetJobs</h3>
<ul>
<li>description: Grants permission to retrieve all current jobs</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmltaskrun"><a aria-hidden="true" class="anchor-heading" href="#getmltaskrun"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetMLTaskRun</h3>
<ul>
<li>description: Grants permission to retrieve an ML Task Run</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "mlTransform": {
        "resource_type": "mlTransform",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmltaskruns"><a aria-hidden="true" class="anchor-heading" href="#getmltaskruns"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetMLTaskRuns</h3>
<ul>
<li>description: Grants permission to retrieve all ML Task Runs</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "mlTransform": {
        "resource_type": "mlTransform",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmltransform"><a aria-hidden="true" class="anchor-heading" href="#getmltransform"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetMLTransform</h3>
<ul>
<li>description: Grants permission to retrieve an ML Transform</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "mlTransform": {
        "resource_type": "mlTransform",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmltransforms"><a aria-hidden="true" class="anchor-heading" href="#getmltransforms"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetMLTransforms</h3>
<ul>
<li>description: Grants permission to retrieve all ML Transforms</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmapping"><a aria-hidden="true" class="anchor-heading" href="#getmapping"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetMapping</h3>
<ul>
<li>description: Grants permission to create a mapping</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getpartition"><a aria-hidden="true" class="anchor-heading" href="#getpartition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetPartition</h3>
<ul>
<li>description: Grants permission to retrieve a partition</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "catalog": {
        "resource_type": "catalog",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "database": {
        "resource_type": "database",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getpartitions"><a aria-hidden="true" class="anchor-heading" href="#getpartitions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetPartitions</h3>
<ul>
<li>description: Grants permission to retrieve the partitions of a table</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "catalog": {
        "resource_type": "catalog",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "database": {
        "resource_type": "database",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getplan"><a aria-hidden="true" class="anchor-heading" href="#getplan"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetPlan</h3>
<ul>
<li>description: Grants permission to retrieve a mapping for a script</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getresourcepolicy"><a aria-hidden="true" class="anchor-heading" href="#getresourcepolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetResourcePolicy</h3>
<ul>
<li>description: Grants permission to retrieve a resource policy</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "catalog": {
        "resource_type": "catalog",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsecurityconfiguration"><a aria-hidden="true" class="anchor-heading" href="#getsecurityconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSecurityConfiguration</h3>
<ul>
<li>description: Grants permission to retrieve a security configuration</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsecurityconfigurations"><a aria-hidden="true" class="anchor-heading" href="#getsecurityconfigurations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSecurityConfigurations</h3>
<ul>
<li>description: Grants permission to retrieve one or more security configurations</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gettable"><a aria-hidden="true" class="anchor-heading" href="#gettable"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetTable</h3>
<ul>
<li>description: Grants permission to retrieve a table</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "catalog": {
        "resource_type": "catalog",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "database": {
        "resource_type": "database",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gettableversion"><a aria-hidden="true" class="anchor-heading" href="#gettableversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetTableVersion</h3>
<ul>
<li>description: Grants permission to retrieve a version of a table</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "catalog": {
        "resource_type": "catalog",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "database": {
        "resource_type": "database",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "tableversion": {
        "resource_type": "tableversion",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gettableversions"><a aria-hidden="true" class="anchor-heading" href="#gettableversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetTableVersions</h3>
<ul>
<li>description: Grants permission to retrieve a list of versions of a table</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "catalog": {
        "resource_type": "catalog",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "database": {
        "resource_type": "database",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "tableversion": {
        "resource_type": "tableversion",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gettables"><a aria-hidden="true" class="anchor-heading" href="#gettables"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetTables</h3>
<ul>
<li>description: Grants permission to retrieve the tables in a database</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "catalog": {
        "resource_type": "catalog",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "database": {
        "resource_type": "database",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gettags"><a aria-hidden="true" class="anchor-heading" href="#gettags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetTags</h3>
<ul>
<li>description: Grants permission to retrieve all tags associated with a resource</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "crawler": {
        "resource_type": "crawler",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "devendpoint": {
        "resource_type": "devendpoint",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "job": {
        "resource_type": "job",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "trigger": {
        "resource_type": "trigger",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "workflow": {
        "resource_type": "workflow",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gettrigger"><a aria-hidden="true" class="anchor-heading" href="#gettrigger"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetTrigger</h3>
<ul>
<li>description: Grants permission to retrieve a trigger</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gettriggers"><a aria-hidden="true" class="anchor-heading" href="#gettriggers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetTriggers</h3>
<ul>
<li>description: Grants permission to retrieve the triggers associated with a job</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getuserdefinedfunction"><a aria-hidden="true" class="anchor-heading" href="#getuserdefinedfunction"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetUserDefinedFunction</h3>
<ul>
<li>description: Grants permission to retrieve a function definition.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "catalog": {
        "resource_type": "catalog",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "database": {
        "resource_type": "database",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "userdefinedfunction": {
        "resource_type": "userdefinedfunction",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getuserdefinedfunctions"><a aria-hidden="true" class="anchor-heading" href="#getuserdefinedfunctions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetUserDefinedFunctions</h3>
<ul>
<li>description: Grants permission to retrieve multiple function definitions</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "catalog": {
        "resource_type": "catalog",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "database": {
        "resource_type": "database",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "userdefinedfunction": {
        "resource_type": "userdefinedfunction",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getworkflow"><a aria-hidden="true" class="anchor-heading" href="#getworkflow"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetWorkflow</h3>
<ul>
<li>description: Grants permission to retrieve a workflow</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getworkflowrun"><a aria-hidden="true" class="anchor-heading" href="#getworkflowrun"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetWorkflowRun</h3>
<ul>
<li>description: Grants permission to retrieve a workflow run</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getworkflowrunproperties"><a aria-hidden="true" class="anchor-heading" href="#getworkflowrunproperties"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetWorkflowRunProperties</h3>
<ul>
<li>description: Grants permission to retrieve workflow run properties</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getworkflowruns"><a aria-hidden="true" class="anchor-heading" href="#getworkflowruns"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetWorkflowRuns</h3>
<ul>
<li>description: Grants permission to retrieve all runs of a workflow</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="importcatalogtoglue"><a aria-hidden="true" class="anchor-heading" href="#importcatalogtoglue"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ImportCatalogToGlue</h3>
<ul>
<li>description: Grants permission to import an Athena data catalog into AWS Glue</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "catalog": {
        "resource_type": "catalog",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listcrawlers"><a aria-hidden="true" class="anchor-heading" href="#listcrawlers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListCrawlers</h3>
<ul>
<li>description: Grants permission to retrieve all crawlers</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdevendpoints"><a aria-hidden="true" class="anchor-heading" href="#listdevendpoints"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDevEndpoints</h3>
<ul>
<li>description: Grants permission to retrieve all development endpoints</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listjobs"><a aria-hidden="true" class="anchor-heading" href="#listjobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListJobs</h3>
<ul>
<li>description: Grants permission to retrieve all current jobs</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listmltransforms"><a aria-hidden="true" class="anchor-heading" href="#listmltransforms"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListMLTransforms</h3>
<ul>
<li>description: Grants permission to retrieve all ML Transforms</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtriggers"><a aria-hidden="true" class="anchor-heading" href="#listtriggers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTriggers</h3>
<ul>
<li>description: Grants permission to retrieve all triggers</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listworkflows"><a aria-hidden="true" class="anchor-heading" href="#listworkflows"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListWorkflows</h3>
<ul>
<li>description: Grants permission to retrieve all workflows</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putdatacatalogencryptionsettings"><a aria-hidden="true" class="anchor-heading" href="#putdatacatalogencryptionsettings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutDataCatalogEncryptionSettings</h3>
<ul>
<li>description: Grants permission to update catalog encryption settings</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putresourcepolicy"><a aria-hidden="true" class="anchor-heading" href="#putresourcepolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutResourcePolicy</h3>
<ul>
<li>description: Grants permission to update a resource policy</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "catalog": {
        "resource_type": "catalog",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putworkflowrunproperties"><a aria-hidden="true" class="anchor-heading" href="#putworkflowrunproperties"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutWorkflowRunProperties</h3>
<ul>
<li>description: Grants permission to update workflow run properties</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="resetjobbookmark"><a aria-hidden="true" class="anchor-heading" href="#resetjobbookmark"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ResetJobBookmark</h3>
<ul>
<li>description: Grants permission to reset a job bookmark</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="searchtables"><a aria-hidden="true" class="anchor-heading" href="#searchtables"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SearchTables</h3>
<ul>
<li>description: Grants permission to retrieve the tables in the catalog</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "catalog": {
        "resource_type": "catalog",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "database": {
        "resource_type": "database",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startcrawler"><a aria-hidden="true" class="anchor-heading" href="#startcrawler"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartCrawler</h3>
<ul>
<li>description: Grants permission to start a crawler</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startcrawlerschedule"><a aria-hidden="true" class="anchor-heading" href="#startcrawlerschedule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartCrawlerSchedule</h3>
<ul>
<li>description: Grants permission to change the schedule state of a crawler to SCHEDULED</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startexportlabelstaskrun"><a aria-hidden="true" class="anchor-heading" href="#startexportlabelstaskrun"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartExportLabelsTaskRun</h3>
<ul>
<li>description: Grants permission to start an Export Labels ML Task Run</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "mlTransform": {
        "resource_type": "mlTransform",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startimportlabelstaskrun"><a aria-hidden="true" class="anchor-heading" href="#startimportlabelstaskrun"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartImportLabelsTaskRun</h3>
<ul>
<li>description: Grants permission to start an Import Labels ML Task Run</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "mlTransform": {
        "resource_type": "mlTransform",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startjobrun"><a aria-hidden="true" class="anchor-heading" href="#startjobrun"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartJobRun</h3>
<ul>
<li>description: Grants permission to start running a job</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startmlevaluationtaskrun"><a aria-hidden="true" class="anchor-heading" href="#startmlevaluationtaskrun"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartMLEvaluationTaskRun</h3>
<ul>
<li>description: Grants permission to start an Evaluation ML Task Run</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "mlTransform": {
        "resource_type": "mlTransform",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startmllabelingsetgenerationtaskrun"><a aria-hidden="true" class="anchor-heading" href="#startmllabelingsetgenerationtaskrun"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartMLLabelingSetGenerationTaskRun</h3>
<ul>
<li>description: Grants permission to start a Labeling Set Generation ML Task Run</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "mlTransform": {
        "resource_type": "mlTransform",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="starttrigger"><a aria-hidden="true" class="anchor-heading" href="#starttrigger"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartTrigger</h3>
<ul>
<li>description: Grants permission to start a trigger</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startworkflowrun"><a aria-hidden="true" class="anchor-heading" href="#startworkflowrun"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartWorkflowRun</h3>
<ul>
<li>description: Grants permission to start running a workflow</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopcrawler"><a aria-hidden="true" class="anchor-heading" href="#stopcrawler"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopCrawler</h3>
<ul>
<li>description: Grants permission to stop a running crawler</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopcrawlerschedule"><a aria-hidden="true" class="anchor-heading" href="#stopcrawlerschedule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopCrawlerSchedule</h3>
<ul>
<li>description: Grants permission to set the schedule state of a crawler to NOT_SCHEDULED</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stoptrigger"><a aria-hidden="true" class="anchor-heading" href="#stoptrigger"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopTrigger</h3>
<ul>
<li>description: Grants permission to stop a trigger</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Grants permission to add tags to a resource</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "crawler": {
        "resource_type": "crawler",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "devendpoint": {
        "resource_type": "devendpoint",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "job": {
        "resource_type": "job",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "trigger": {
        "resource_type": "trigger",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "workflow": {
        "resource_type": "workflow",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys",
            "aws:RequestTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Grants permission to remove tags associated with a resource</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "crawler": {
        "resource_type": "crawler",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "devendpoint": {
        "resource_type": "devendpoint",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "job": {
        "resource_type": "job",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "trigger": {
        "resource_type": "trigger",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "workflow": {
        "resource_type": "workflow",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateclassifier"><a aria-hidden="true" class="anchor-heading" href="#updateclassifier"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateClassifier</h3>
<ul>
<li>description: Grants permission to update a classifier</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateconnection"><a aria-hidden="true" class="anchor-heading" href="#updateconnection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateConnection</h3>
<ul>
<li>description: Grants permission to update a connection</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "catalog": {
        "resource_type": "catalog",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "connection": {
        "resource_type": "connection",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatecrawler"><a aria-hidden="true" class="anchor-heading" href="#updatecrawler"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateCrawler</h3>
<ul>
<li>description: Grants permission to update a crawler</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatecrawlerschedule"><a aria-hidden="true" class="anchor-heading" href="#updatecrawlerschedule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateCrawlerSchedule</h3>
<ul>
<li>description: Grants permission to update the schedule of a crawler</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatedatabase"><a aria-hidden="true" class="anchor-heading" href="#updatedatabase"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateDatabase</h3>
<ul>
<li>description: Grants permission to update a database</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "catalog": {
        "resource_type": "catalog",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "database": {
        "resource_type": "database",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatedevendpoint"><a aria-hidden="true" class="anchor-heading" href="#updatedevendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateDevEndpoint</h3>
<ul>
<li>description: Grants permission to update a development endpoint</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatejob"><a aria-hidden="true" class="anchor-heading" href="#updatejob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateJob</h3>
<ul>
<li>description: Grants permission to update a job</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatemltransform"><a aria-hidden="true" class="anchor-heading" href="#updatemltransform"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateMLTransform</h3>
<ul>
<li>description: Grants permission to update an ML Transform</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "mlTransform": {
        "resource_type": "mlTransform",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatepartition"><a aria-hidden="true" class="anchor-heading" href="#updatepartition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdatePartition</h3>
<ul>
<li>description: Grants permission to update a partition</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "catalog": {
        "resource_type": "catalog",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "database": {
        "resource_type": "database",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatetable"><a aria-hidden="true" class="anchor-heading" href="#updatetable"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateTable</h3>
<ul>
<li>description: Grants permission to update a table</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "catalog": {
        "resource_type": "catalog",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "database": {
        "resource_type": "database",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "table": {
        "resource_type": "table",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatetrigger"><a aria-hidden="true" class="anchor-heading" href="#updatetrigger"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateTrigger</h3>
<ul>
<li>description: Grants permission to update a trigger</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateuserdefinedfunction"><a aria-hidden="true" class="anchor-heading" href="#updateuserdefinedfunction"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateUserDefinedFunction</h3>
<ul>
<li>description: Grants permission to update a function definition</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "catalog": {
        "resource_type": "catalog",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "database": {
        "resource_type": "database",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "userdefinedfunction": {
        "resource_type": "userdefinedfunction",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateworkflow"><a aria-hidden="true" class="anchor-heading" href="#updateworkflow"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateWorkflow</h3>
<ul>
<li>description: Grants permission to update a workflow</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="usemltransforms"><a aria-hidden="true" class="anchor-heading" href="#usemltransforms"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UseMLTransforms</h3>
<ul>
<li>description: Grants permission to use an ML Transform from within a Glue ETL Script</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "mlTransform": {
        "resource_type": "mlTransform",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Glue"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-SageMaker.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>SageMaker - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-SageMaker.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-SageMaker.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-SageMaker.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="SageMaker - undefined" />
  <meta name="twitter:title" content="SageMaker - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">SageMaker</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="SageMaker">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="sagemaker"><a aria-hidden="true" class="anchor-heading" href="#sagemaker"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SageMaker</h1>
<ul>
<li>prefix: sagemaker</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="addtags"><a aria-hidden="true" class="anchor-heading" href="#addtags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddTags</h3>
<ul>
<li>description: Adds or overwrites one or more tags for the specified Amazon SageMaker resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "app": {
        "resource_type": "app",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "automl-job": {
        "resource_type": "automl-job",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "domain": {
        "resource_type": "domain",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "endpoint": {
        "resource_type": "endpoint",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "endpoint-config": {
        "resource_type": "endpoint-config",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "experiment": {
        "resource_type": "experiment",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "experiment-trial": {
        "resource_type": "experiment-trial",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "experiment-trial-component": {
        "resource_type": "experiment-trial-component",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "flow-definition": {
        "resource_type": "flow-definition",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "human-task-ui": {
        "resource_type": "human-task-ui",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "hyper-parameter-tuning-job": {
        "resource_type": "hyper-parameter-tuning-job",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "labeling-job": {
        "resource_type": "labeling-job",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "model": {
        "resource_type": "model",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "monitoring-schedule": {
        "resource_type": "monitoring-schedule",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "notebook-instance": {
        "resource_type": "notebook-instance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "processing-job": {
        "resource_type": "processing-job",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "training-job": {
        "resource_type": "training-job",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "transform-job": {
        "resource_type": "transform-job",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "user-profile": {
        "resource_type": "user-profile",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "workteam": {
        "resource_type": "workteam",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="associatetrialcomponent"><a aria-hidden="true" class="anchor-heading" href="#associatetrialcomponent"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateTrialComponent</h3>
<ul>
<li>description: Associate a trial component with a trial.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "experiment-trial": {
        "resource_type": "experiment-trial",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "experiment-trial-component": {
        "resource_type": "experiment-trial-component",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchgetmetrics"><a aria-hidden="true" class="anchor-heading" href="#batchgetmetrics"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchGetMetrics</h3>
<ul>
<li>description: Retrieve metrics associated with SageMaker Resources such as Training Jobs. This API is not publicly exposed at this point, however admins can control this action</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "training-job": {
        "resource_type": "training-job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchputmetrics"><a aria-hidden="true" class="anchor-heading" href="#batchputmetrics"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchPutMetrics</h3>
<ul>
<li>description: Publish metrics associated with a SageMaker Resource such as a Training Job. This API is not publicly exposed at this point, however admins can control this action</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "training-job": {
        "resource_type": "training-job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createalgorithm"><a aria-hidden="true" class="anchor-heading" href="#createalgorithm"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateAlgorithm</h3>
<ul>
<li>description: Create an algorithm.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "algorithm": {
        "resource_type": "algorithm",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createapp"><a aria-hidden="true" class="anchor-heading" href="#createapp"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateApp</h3>
<ul>
<li>description: Grants permission to create an App for a SageMaker Studio UserProfile</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "app": {
        "resource_type": "app",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "sagemaker:InstanceTypes"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createautomljob"><a aria-hidden="true" class="anchor-heading" href="#createautomljob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateAutoMLJob</h3>
<ul>
<li>description: Creates automl job.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "automl-job": {
        "resource_type": "automl-job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "sagemaker:InterContainerTrafficEncryption",
            "sagemaker:OutputKmsKey",
            "sagemaker:VolumeKmsKey",
            "sagemaker:VpcSecurityGroupIds",
            "sagemaker:VpcSubnets"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createcoderepository"><a aria-hidden="true" class="anchor-heading" href="#createcoderepository"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateCodeRepository</h3>
<ul>
<li>description: Create a code repository.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "code-repository": {
        "resource_type": "code-repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createcompilationjob"><a aria-hidden="true" class="anchor-heading" href="#createcompilationjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateCompilationJob</h3>
<ul>
<li>description: Create a compilation job.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "compilation-job": {
        "resource_type": "compilation-job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    }
}
</code></pre>
<h3 id="createdomain"><a aria-hidden="true" class="anchor-heading" href="#createdomain"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDomain</h3>
<ul>
<li>description: Grants permission to create a Domain for SageMaker Studio</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:CreateServiceLinkedRole",
            "iam:PassRole"
        ]
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "sagemaker:AppNetworkAccess",
            "sagemaker:InstanceTypes",
            "sagemaker:VpcSecurityGroupIds",
            "sagemaker:VpcSubnets",
            "sagemaker:DomainSharingOutputKmsKey",
            "sagemaker:HomeEfsFileSystemKmsKey"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createendpoint"><a aria-hidden="true" class="anchor-heading" href="#createendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateEndpoint</h3>
<ul>
<li>description: Creates an endpoint using the endpoint configuration specified in the request.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "endpoint": {
        "resource_type": "endpoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createendpointconfig"><a aria-hidden="true" class="anchor-heading" href="#createendpointconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateEndpointConfig</h3>
<ul>
<li>description: Creates an endpoint configuration that can be deployed using Amazon SageMaker hosting services.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "endpoint-config": {
        "resource_type": "endpoint-config",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "sagemaker:AcceleratorTypes",
            "sagemaker:InstanceTypes",
            "sagemaker:ModelArn",
            "sagemaker:VolumeKmsKey"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createexperiment"><a aria-hidden="true" class="anchor-heading" href="#createexperiment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateExperiment</h3>
<ul>
<li>description: Create an experiment.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "experiment": {
        "resource_type": "experiment",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createflowdefinition"><a aria-hidden="true" class="anchor-heading" href="#createflowdefinition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateFlowDefinition</h3>
<ul>
<li>description: Creates a flow definition, which defines settings for a human workflow.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "flow-definition": {
        "resource_type": "flow-definition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "sagemaker:WorkteamArn",
            "sagemaker:WorkteamType",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createhumantaskui"><a aria-hidden="true" class="anchor-heading" href="#createhumantaskui"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateHumanTaskUi</h3>
<ul>
<li>description: Defines the settings you will use for the human review workflow user interface.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "human-task-ui": {
        "resource_type": "human-task-ui",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createhyperparametertuningjob"><a aria-hidden="true" class="anchor-heading" href="#createhyperparametertuningjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateHyperParameterTuningJob</h3>
<ul>
<li>description: Creates hyper parameter tuning job that can be deployed using Amazon SageMaker.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hyper-parameter-tuning-job": {
        "resource_type": "hyper-parameter-tuning-job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "sagemaker:FileSystemAccessMode",
            "sagemaker:FileSystemDirectoryPath",
            "sagemaker:FileSystemId",
            "sagemaker:FileSystemType",
            "sagemaker:InstanceTypes",
            "sagemaker:InterContainerTrafficEncryption",
            "sagemaker:MaxRuntimeInSeconds",
            "sagemaker:NetworkIsolation",
            "sagemaker:OutputKmsKey",
            "sagemaker:VolumeKmsKey",
            "sagemaker:VpcSecurityGroupIds",
            "sagemaker:VpcSubnets"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createlabelingjob"><a aria-hidden="true" class="anchor-heading" href="#createlabelingjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateLabelingJob</h3>
<ul>
<li>description: Starts a labeling job. A labeling job takes unlabeled data in and produces labeled data as output, which can be used for training SageMaker models.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "labeling-job": {
        "resource_type": "labeling-job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "sagemaker:WorkteamArn",
            "sagemaker:WorkteamType",
            "sagemaker:VolumeKmsKey",
            "sagemaker:OutputKmsKey",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createmodel"><a aria-hidden="true" class="anchor-heading" href="#createmodel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateModel</h3>
<ul>
<li>description: Creates a model in Amazon SageMaker. In the request, you specify a name for the model and describe one or more containers.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "model": {
        "resource_type": "model",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "sagemaker:NetworkIsolation",
            "sagemaker:VpcSecurityGroupIds",
            "sagemaker:VpcSubnets"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createmodelpackage"><a aria-hidden="true" class="anchor-heading" href="#createmodelpackage"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateModelPackage</h3>
<ul>
<li>description: Create a model package.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "model-package": {
        "resource_type": "model-package",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createmonitoringschedule"><a aria-hidden="true" class="anchor-heading" href="#createmonitoringschedule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateMonitoringSchedule</h3>
<ul>
<li>description: Creates a monitoring schedule.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "monitoring-schedule": {
        "resource_type": "monitoring-schedule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "sagemaker:InstanceTypes",
            "sagemaker:MaxRuntimeInSeconds",
            "sagemaker:NetworkIsolation",
            "sagemaker:OutputKmsKey",
            "sagemaker:VolumeKmsKey",
            "sagemaker:VpcSecurityGroupIds",
            "sagemaker:VpcSubnets"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createnotebookinstance"><a aria-hidden="true" class="anchor-heading" href="#createnotebookinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateNotebookInstance</h3>
<ul>
<li>description: Creates an Amazon SageMaker notebook instance. A notebook instance is an Amazon EC2 instance running on a Jupyter Notebook.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "notebook-instance": {
        "resource_type": "notebook-instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "sagemaker:AcceleratorTypes",
            "sagemaker:DirectInternetAccess",
            "sagemaker:InstanceTypes",
            "sagemaker:RootAccess",
            "sagemaker:VolumeKmsKey",
            "sagemaker:VpcSecurityGroupIds",
            "sagemaker:VpcSubnets"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createnotebookinstancelifecycleconfig"><a aria-hidden="true" class="anchor-heading" href="#createnotebookinstancelifecycleconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateNotebookInstanceLifecycleConfig</h3>
<ul>
<li>description: Creates an notebook instance lifecycle configuration that can be deployed using Amazon SageMaker.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "notebook-instance-lifecycle-config": {
        "resource_type": "notebook-instance-lifecycle-config",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createpresigneddomainurl"><a aria-hidden="true" class="anchor-heading" href="#createpresigneddomainurl"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreatePresignedDomainUrl</h3>
<ul>
<li>description: Grants permission to return a URL that you can use from your browser to connect to the Domain as a specified UserProfile when AuthMode is 'IAM'</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user-profile": {
        "resource_type": "user-profile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createpresignednotebookinstanceurl"><a aria-hidden="true" class="anchor-heading" href="#createpresignednotebookinstanceurl"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreatePresignedNotebookInstanceUrl</h3>
<ul>
<li>description: Returns a URL that you can use from your browser to connect to the Notebook Instance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "notebook-instance": {
        "resource_type": "notebook-instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createprocessingjob"><a aria-hidden="true" class="anchor-heading" href="#createprocessingjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateProcessingJob</h3>
<ul>
<li>description: Starts a processing job. After processing completes, Amazon SageMaker saves the resulting artifacts and other optional output to an Amazon S3 location that you specify.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "processing-job": {
        "resource_type": "processing-job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "sagemaker:InstanceTypes",
            "sagemaker:MaxRuntimeInSeconds",
            "sagemaker:NetworkIsolation",
            "sagemaker:OutputKmsKey",
            "sagemaker:VolumeKmsKey",
            "sagemaker:VpcSecurityGroupIds",
            "sagemaker:VpcSubnets",
            "sagemaker:InterContainerTrafficEncryption"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtrainingjob"><a aria-hidden="true" class="anchor-heading" href="#createtrainingjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTrainingJob</h3>
<ul>
<li>description: Starts a model training job. After training completes, Amazon SageMaker saves the resulting model artifacts and other optional output to an Amazon S3 location that you specify.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "training-job": {
        "resource_type": "training-job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "sagemaker:FileSystemAccessMode",
            "sagemaker:FileSystemDirectoryPath",
            "sagemaker:FileSystemId",
            "sagemaker:FileSystemType",
            "sagemaker:InstanceTypes",
            "sagemaker:InterContainerTrafficEncryption",
            "sagemaker:MaxRuntimeInSeconds",
            "sagemaker:NetworkIsolation",
            "sagemaker:OutputKmsKey",
            "sagemaker:VolumeKmsKey",
            "sagemaker:VpcSecurityGroupIds",
            "sagemaker:VpcSubnets"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtransformjob"><a aria-hidden="true" class="anchor-heading" href="#createtransformjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTransformJob</h3>
<ul>
<li>description: Starts a transform job. After the results are obtained, Amazon SageMaker saves them to an Amazon S3 location that you specify.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "transform-job": {
        "resource_type": "transform-job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "sagemaker:InstanceTypes",
            "sagemaker:ModelArn",
            "sagemaker:OutputKmsKey",
            "sagemaker:VolumeKmsKey"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtrial"><a aria-hidden="true" class="anchor-heading" href="#createtrial"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTrial</h3>
<ul>
<li>description: Create a trial.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "experiment-trial": {
        "resource_type": "experiment-trial",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtrialcomponent"><a aria-hidden="true" class="anchor-heading" href="#createtrialcomponent"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTrialComponent</h3>
<ul>
<li>description: Create a trial component.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "experiment-trial-component": {
        "resource_type": "experiment-trial-component",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createuserprofile"><a aria-hidden="true" class="anchor-heading" href="#createuserprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateUserProfile</h3>
<ul>
<li>description: Grants permission to create a UserProfile for a SageMaker Studio Domain</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user-profile": {
        "resource_type": "user-profile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "sagemaker:VpcSecurityGroupIds",
            "sagemaker:InstanceTypes",
            "sagemaker:DomainSharingOutputKmsKey"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createworkforce"><a aria-hidden="true" class="anchor-heading" href="#createworkforce"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateWorkforce</h3>
<ul>
<li>description: Create a workforce.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "workforce": {
        "resource_type": "workforce",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createworkteam"><a aria-hidden="true" class="anchor-heading" href="#createworkteam"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateWorkteam</h3>
<ul>
<li>description: Create a workteam.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "workteam": {
        "resource_type": "workteam",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletealgorithm"><a aria-hidden="true" class="anchor-heading" href="#deletealgorithm"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAlgorithm</h3>
<ul>
<li>description: Deletes an algorithm.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "algorithm": {
        "resource_type": "algorithm",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteapp"><a aria-hidden="true" class="anchor-heading" href="#deleteapp"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteApp</h3>
<ul>
<li>description: Grants permission to delete an App</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "app": {
        "resource_type": "app",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletecoderepository"><a aria-hidden="true" class="anchor-heading" href="#deletecoderepository"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteCodeRepository</h3>
<ul>
<li>description: Deletes a code repository.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "code-repository": {
        "resource_type": "code-repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedomain"><a aria-hidden="true" class="anchor-heading" href="#deletedomain"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDomain</h3>
<ul>
<li>description: Grants permission to delete a Domain</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteendpoint"><a aria-hidden="true" class="anchor-heading" href="#deleteendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteEndpoint</h3>
<ul>
<li>description: Deletes an endpoint. Amazon SageMaker frees up all the resources that were deployed when the endpoint was created.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "endpoint": {
        "resource_type": "endpoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteendpointconfig"><a aria-hidden="true" class="anchor-heading" href="#deleteendpointconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteEndpointConfig</h3>
<ul>
<li>description: Deletes the endpoint configuration created using the CreateEndpointConfig API. The DeleteEndpointConfig API deletes only the specified configuration. It does not delete any endpoints created using the configuration.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "endpoint-config": {
        "resource_type": "endpoint-config",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteexperiment"><a aria-hidden="true" class="anchor-heading" href="#deleteexperiment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteExperiment</h3>
<ul>
<li>description: Deletes an experiment.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "experiment": {
        "resource_type": "experiment",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteflowdefinition"><a aria-hidden="true" class="anchor-heading" href="#deleteflowdefinition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteFlowDefinition</h3>
<ul>
<li>description: Deltes the specified flow definition.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "flow-definition": {
        "resource_type": "flow-definition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletehumanloop"><a aria-hidden="true" class="anchor-heading" href="#deletehumanloop"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteHumanLoop</h3>
<ul>
<li>description: Deletes the specified human loop.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "human-loop": {
        "resource_type": "human-loop",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletemodel"><a aria-hidden="true" class="anchor-heading" href="#deletemodel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteModel</h3>
<ul>
<li>description: Deletes a model created using the CreateModel API. The DeleteModel API deletes only the model entry in Amazon SageMaker that you created by calling the CreateModel API. It does not delete model artifacts, inference code, or the IAM role that you specified when creating the model.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "model": {
        "resource_type": "model",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletemodelpackage"><a aria-hidden="true" class="anchor-heading" href="#deletemodelpackage"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteModelPackage</h3>
<ul>
<li>description: Deletes a model package.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "model-package": {
        "resource_type": "model-package",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletemonitoringschedule"><a aria-hidden="true" class="anchor-heading" href="#deletemonitoringschedule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteMonitoringSchedule</h3>
<ul>
<li>description: Deletes a monitoring schedule. Amazon SageMaker will no longer run the scheduled monitoring.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "monitoring-schedule": {
        "resource_type": "monitoring-schedule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletenotebookinstance"><a aria-hidden="true" class="anchor-heading" href="#deletenotebookinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteNotebookInstance</h3>
<ul>
<li>description: Deletes an Amazon SageMaker notebook instance. Before you can delete a notebook instance, you must call the StopNotebookInstance API.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "notebook-instance": {
        "resource_type": "notebook-instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletenotebookinstancelifecycleconfig"><a aria-hidden="true" class="anchor-heading" href="#deletenotebookinstancelifecycleconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteNotebookInstanceLifecycleConfig</h3>
<ul>
<li>description: Deletes an notebook instance lifecycle configuration that can be deployed using Amazon SageMaker.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "notebook-instance-lifecycle-config": {
        "resource_type": "notebook-instance-lifecycle-config",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetags"><a aria-hidden="true" class="anchor-heading" href="#deletetags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTags</h3>
<ul>
<li>description: Deletes the specified set of tags from an Amazon SageMaker resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "app": {
        "resource_type": "app",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "automl-job": {
        "resource_type": "automl-job",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "compilation-job": {
        "resource_type": "compilation-job",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "domain": {
        "resource_type": "domain",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "endpoint": {
        "resource_type": "endpoint",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "endpoint-config": {
        "resource_type": "endpoint-config",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "experiment": {
        "resource_type": "experiment",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "experiment-trial": {
        "resource_type": "experiment-trial",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "experiment-trial-component": {
        "resource_type": "experiment-trial-component",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "flow-definition": {
        "resource_type": "flow-definition",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "human-task-ui": {
        "resource_type": "human-task-ui",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "hyper-parameter-tuning-job": {
        "resource_type": "hyper-parameter-tuning-job",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "labeling-job": {
        "resource_type": "labeling-job",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "model": {
        "resource_type": "model",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "monitoring-schedule": {
        "resource_type": "monitoring-schedule",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "notebook-instance": {
        "resource_type": "notebook-instance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "processing-job": {
        "resource_type": "processing-job",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "training-job": {
        "resource_type": "training-job",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "transform-job": {
        "resource_type": "transform-job",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "user-profile": {
        "resource_type": "user-profile",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "workteam": {
        "resource_type": "workteam",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetrial"><a aria-hidden="true" class="anchor-heading" href="#deletetrial"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTrial</h3>
<ul>
<li>description: Deletes a trial.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "experiment-trial": {
        "resource_type": "experiment-trial",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetrialcomponent"><a aria-hidden="true" class="anchor-heading" href="#deletetrialcomponent"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTrialComponent</h3>
<ul>
<li>description: Deletes a trial component.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "experiment-trial-component": {
        "resource_type": "experiment-trial-component",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteuserprofile"><a aria-hidden="true" class="anchor-heading" href="#deleteuserprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteUserProfile</h3>
<ul>
<li>description: Grants permission to delete a UserProfile</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user-profile": {
        "resource_type": "user-profile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteworkforce"><a aria-hidden="true" class="anchor-heading" href="#deleteworkforce"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteWorkforce</h3>
<ul>
<li>description: Deletes a workforce.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "workforce": {
        "resource_type": "workforce",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteworkteam"><a aria-hidden="true" class="anchor-heading" href="#deleteworkteam"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteWorkteam</h3>
<ul>
<li>description: Deletes a workteam.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "workteam": {
        "resource_type": "workteam",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describealgorithm"><a aria-hidden="true" class="anchor-heading" href="#describealgorithm"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAlgorithm</h3>
<ul>
<li>description: Returns information about an algorithm.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "algorithm": {
        "resource_type": "algorithm",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeapp"><a aria-hidden="true" class="anchor-heading" href="#describeapp"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeApp</h3>
<ul>
<li>description: Grants permission to describe an App</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "app": {
        "resource_type": "app",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeautomljob"><a aria-hidden="true" class="anchor-heading" href="#describeautomljob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAutoMLJob</h3>
<ul>
<li>description: Describes an automl job that was created via CreateAutoMLJob API.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "automl-job": {
        "resource_type": "automl-job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecoderepository"><a aria-hidden="true" class="anchor-heading" href="#describecoderepository"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeCodeRepository</h3>
<ul>
<li>description: Returns information about a code repository.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "code-repository": {
        "resource_type": "code-repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecompilationjob"><a aria-hidden="true" class="anchor-heading" href="#describecompilationjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeCompilationJob</h3>
<ul>
<li>description: Returns information about a compilation job.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "compilation-job": {
        "resource_type": "compilation-job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedomain"><a aria-hidden="true" class="anchor-heading" href="#describedomain"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDomain</h3>
<ul>
<li>description: Grants permission to describe a Domain</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeendpoint"><a aria-hidden="true" class="anchor-heading" href="#describeendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEndpoint</h3>
<ul>
<li>description: Returns the description of an endpoint.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "endpoint": {
        "resource_type": "endpoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeendpointconfig"><a aria-hidden="true" class="anchor-heading" href="#describeendpointconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEndpointConfig</h3>
<ul>
<li>description: Returns the description of an endpoint configuration, which was created using the CreateEndpointConfig API.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "endpoint-config": {
        "resource_type": "endpoint-config",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeexperiment"><a aria-hidden="true" class="anchor-heading" href="#describeexperiment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeExperiment</h3>
<ul>
<li>description: Returns information about an experiment.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "experiment": {
        "resource_type": "experiment",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeflowdefinition"><a aria-hidden="true" class="anchor-heading" href="#describeflowdefinition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeFlowDefinition</h3>
<ul>
<li>description: Returns detailed information about the specified flow definition.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "flow-definition": {
        "resource_type": "flow-definition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describehumanloop"><a aria-hidden="true" class="anchor-heading" href="#describehumanloop"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeHumanLoop</h3>
<ul>
<li>description: Returns detailed information about the specified human loop.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "human-loop": {
        "resource_type": "human-loop",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describehumantaskui"><a aria-hidden="true" class="anchor-heading" href="#describehumantaskui"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeHumanTaskUi</h3>
<ul>
<li>description: Returns detailed information about the specified human review workflow user interface.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "human-task-ui": {
        "resource_type": "human-task-ui",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describehyperparametertuningjob"><a aria-hidden="true" class="anchor-heading" href="#describehyperparametertuningjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeHyperParameterTuningJob</h3>
<ul>
<li>description: Describes a hyper parameter tuning job that was created via CreateHyperParameterTuningJob API.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hyper-parameter-tuning-job": {
        "resource_type": "hyper-parameter-tuning-job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describelabelingjob"><a aria-hidden="true" class="anchor-heading" href="#describelabelingjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeLabelingJob</h3>
<ul>
<li>description: Returns information about a labeling job.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "labeling-job": {
        "resource_type": "labeling-job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describemodel"><a aria-hidden="true" class="anchor-heading" href="#describemodel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeModel</h3>
<ul>
<li>description: Describes a model that you created using the CreateModel API.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "model": {
        "resource_type": "model",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describemodelpackage"><a aria-hidden="true" class="anchor-heading" href="#describemodelpackage"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeModelPackage</h3>
<ul>
<li>description: Returns information about a model package.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "model-package": {
        "resource_type": "model-package",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describemonitoringschedule"><a aria-hidden="true" class="anchor-heading" href="#describemonitoringschedule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeMonitoringSchedule</h3>
<ul>
<li>description: Returns information about a monitoring schedule.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "monitoring-schedule": {
        "resource_type": "monitoring-schedule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describenotebookinstance"><a aria-hidden="true" class="anchor-heading" href="#describenotebookinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeNotebookInstance</h3>
<ul>
<li>description: Returns information about a notebook instance.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "notebook-instance": {
        "resource_type": "notebook-instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describenotebookinstancelifecycleconfig"><a aria-hidden="true" class="anchor-heading" href="#describenotebookinstancelifecycleconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeNotebookInstanceLifecycleConfig</h3>
<ul>
<li>description: Describes an notebook instance lifecycle configuration that was created via CreateNotebookInstanceLifecycleConfig API.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "notebook-instance-lifecycle-config": {
        "resource_type": "notebook-instance-lifecycle-config",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeprocessingjob"><a aria-hidden="true" class="anchor-heading" href="#describeprocessingjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeProcessingJob</h3>
<ul>
<li>description: Returns information about a processing job.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "processing-job": {
        "resource_type": "processing-job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describesubscribedworkteam"><a aria-hidden="true" class="anchor-heading" href="#describesubscribedworkteam"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSubscribedWorkteam</h3>
<ul>
<li>description: Returns information about a subscribed workteam.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "workteam": {
        "resource_type": "workteam",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetrainingjob"><a aria-hidden="true" class="anchor-heading" href="#describetrainingjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTrainingJob</h3>
<ul>
<li>description: Returns information about a training job.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "training-job": {
        "resource_type": "training-job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetransformjob"><a aria-hidden="true" class="anchor-heading" href="#describetransformjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTransformJob</h3>
<ul>
<li>description: Returns information about a transform job.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "transform-job": {
        "resource_type": "transform-job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetrial"><a aria-hidden="true" class="anchor-heading" href="#describetrial"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTrial</h3>
<ul>
<li>description: Returns information about a trial.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "experiment-trial": {
        "resource_type": "experiment-trial",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetrialcomponent"><a aria-hidden="true" class="anchor-heading" href="#describetrialcomponent"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTrialComponent</h3>
<ul>
<li>description: Returns information about a trial component.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "experiment-trial-component": {
        "resource_type": "experiment-trial-component",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeuserprofile"><a aria-hidden="true" class="anchor-heading" href="#describeuserprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeUserProfile</h3>
<ul>
<li>description: Grants permission to describe a UserProfile</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user-profile": {
        "resource_type": "user-profile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeworkforce"><a aria-hidden="true" class="anchor-heading" href="#describeworkforce"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeWorkforce</h3>
<ul>
<li>description: Returns information about a workforce.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "workforce": {
        "resource_type": "workforce",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeworkteam"><a aria-hidden="true" class="anchor-heading" href="#describeworkteam"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeWorkteam</h3>
<ul>
<li>description: Returns information about a workteam.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "workteam": {
        "resource_type": "workteam",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociatetrialcomponent"><a aria-hidden="true" class="anchor-heading" href="#disassociatetrialcomponent"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateTrialComponent</h3>
<ul>
<li>description: Disassociate a trial component with a trial.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "experiment-trial": {
        "resource_type": "experiment-trial",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "experiment-trial-component": {
        "resource_type": "experiment-trial-component",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "processing-job": {
        "resource_type": "processing-job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsearchsuggestions"><a aria-hidden="true" class="anchor-heading" href="#getsearchsuggestions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSearchSuggestions</h3>
<ul>
<li>description: Get search suggestions when provided with keyword.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="invokeendpoint"><a aria-hidden="true" class="anchor-heading" href="#invokeendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>InvokeEndpoint</h3>
<ul>
<li>description: After you deploy a model into production using Amazon SageMaker hosting services, your client applications use this API to get inferences from the model hosted at the specified endpoint.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "endpoint": {
        "resource_type": "endpoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "sagemaker:TargetModel"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listalgorithms"><a aria-hidden="true" class="anchor-heading" href="#listalgorithms"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAlgorithms</h3>
<ul>
<li>description: Lists algorithms.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listapps"><a aria-hidden="true" class="anchor-heading" href="#listapps"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListApps</h3>
<ul>
<li>description: Grants permission to list the Apps in your account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listautomljobs"><a aria-hidden="true" class="anchor-heading" href="#listautomljobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAutoMLJobs</h3>
<ul>
<li>description: Lists automl jobs created via the CreateAutoMLJob.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listcandidatesforautomljob"><a aria-hidden="true" class="anchor-heading" href="#listcandidatesforautomljob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListCandidatesForAutoMLJob</h3>
<ul>
<li>description: Lists candidates for automl job created via the CreateAutoMLJob.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listcoderepositories"><a aria-hidden="true" class="anchor-heading" href="#listcoderepositories"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListCodeRepositories</h3>
<ul>
<li>description: Lists code repositories.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listcompilationjobs"><a aria-hidden="true" class="anchor-heading" href="#listcompilationjobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListCompilationJobs</h3>
<ul>
<li>description: Lists compilation jobs.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdomains"><a aria-hidden="true" class="anchor-heading" href="#listdomains"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDomains</h3>
<ul>
<li>description: Grants permission to list the Domains in your account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listendpointconfigs"><a aria-hidden="true" class="anchor-heading" href="#listendpointconfigs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListEndpointConfigs</h3>
<ul>
<li>description: Lists endpoint configurations.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listendpoints"><a aria-hidden="true" class="anchor-heading" href="#listendpoints"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListEndpoints</h3>
<ul>
<li>description: Lists endpoints.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listexperiments"><a aria-hidden="true" class="anchor-heading" href="#listexperiments"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListExperiments</h3>
<ul>
<li>description: Lists experiments.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listflowdefinitions"><a aria-hidden="true" class="anchor-heading" href="#listflowdefinitions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListFlowDefinitions</h3>
<ul>
<li>description: Returns summary information about flow definitions, given the specified parameters.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listhumanloops"><a aria-hidden="true" class="anchor-heading" href="#listhumanloops"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListHumanLoops</h3>
<ul>
<li>description: Returns summary information about human loops, given the specified parameters.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listhumantaskuis"><a aria-hidden="true" class="anchor-heading" href="#listhumantaskuis"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListHumanTaskUis</h3>
<ul>
<li>description: Returns summary information about human review workflow user interfaces, given the specified parameters.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listhyperparametertuningjobs"><a aria-hidden="true" class="anchor-heading" href="#listhyperparametertuningjobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListHyperParameterTuningJobs</h3>
<ul>
<li>description: Lists hyper parameter tuning jobs that was created using Amazon SageMaker.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listlabelingjobs"><a aria-hidden="true" class="anchor-heading" href="#listlabelingjobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListLabelingJobs</h3>
<ul>
<li>description: Lists labeling jobs.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listlabelingjobsforworkteam"><a aria-hidden="true" class="anchor-heading" href="#listlabelingjobsforworkteam"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListLabelingJobsForWorkteam</h3>
<ul>
<li>description: Lists labeling jobs for workteam.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "workteam": {
        "resource_type": "workteam",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listmodelpackages"><a aria-hidden="true" class="anchor-heading" href="#listmodelpackages"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListModelPackages</h3>
<ul>
<li>description: Lists model packages.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listmodels"><a aria-hidden="true" class="anchor-heading" href="#listmodels"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListModels</h3>
<ul>
<li>description: Lists the models created with the CreateModel API.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listmonitoringexecutions"><a aria-hidden="true" class="anchor-heading" href="#listmonitoringexecutions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListMonitoringExecutions</h3>
<ul>
<li>description: Lists monitoring executions.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listmonitoringschedules"><a aria-hidden="true" class="anchor-heading" href="#listmonitoringschedules"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListMonitoringSchedules</h3>
<ul>
<li>description: Lists monitoring schedules.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listnotebookinstancelifecycleconfigs"><a aria-hidden="true" class="anchor-heading" href="#listnotebookinstancelifecycleconfigs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListNotebookInstanceLifecycleConfigs</h3>
<ul>
<li>description: Lists notebook instance lifecycle configurations that can be deployed using Amazon SageMaker.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listnotebookinstances"><a aria-hidden="true" class="anchor-heading" href="#listnotebookinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListNotebookInstances</h3>
<ul>
<li>description: Returns a list of the Amazon SageMaker notebook instances in the requester's account in an AWS Region.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listprocessingjobs"><a aria-hidden="true" class="anchor-heading" href="#listprocessingjobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListProcessingJobs</h3>
<ul>
<li>description: Lists processing jobs.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listsubscribedworkteams"><a aria-hidden="true" class="anchor-heading" href="#listsubscribedworkteams"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListSubscribedWorkteams</h3>
<ul>
<li>description: Lists subscribed workteams.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtags"><a aria-hidden="true" class="anchor-heading" href="#listtags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTags</h3>
<ul>
<li>description: Returns the tag set associated with the specified resource.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "app": {
        "resource_type": "app",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "automl-job": {
        "resource_type": "automl-job",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "domain": {
        "resource_type": "domain",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "endpoint": {
        "resource_type": "endpoint",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "endpoint-config": {
        "resource_type": "endpoint-config",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "experiment": {
        "resource_type": "experiment",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "experiment-trial": {
        "resource_type": "experiment-trial",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "experiment-trial-component": {
        "resource_type": "experiment-trial-component",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "flow-definition": {
        "resource_type": "flow-definition",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "human-task-ui": {
        "resource_type": "human-task-ui",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "hyper-parameter-tuning-job": {
        "resource_type": "hyper-parameter-tuning-job",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "labeling-job": {
        "resource_type": "labeling-job",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "model": {
        "resource_type": "model",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "monitoring-schedule": {
        "resource_type": "monitoring-schedule",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "notebook-instance": {
        "resource_type": "notebook-instance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "training-job": {
        "resource_type": "training-job",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "transform-job": {
        "resource_type": "transform-job",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "user-profile": {
        "resource_type": "user-profile",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "workteam": {
        "resource_type": "workteam",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtrainingjobs"><a aria-hidden="true" class="anchor-heading" href="#listtrainingjobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTrainingJobs</h3>
<ul>
<li>description: Lists training jobs.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtrainingjobsforhyperparametertuningjob"><a aria-hidden="true" class="anchor-heading" href="#listtrainingjobsforhyperparametertuningjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTrainingJobsForHyperParameterTuningJob</h3>
<ul>
<li>description: Lists training jobs for a hyper parameter tuning job that was created using Amazon SageMaker.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hyper-parameter-tuning-job": {
        "resource_type": "hyper-parameter-tuning-job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtransformjobs"><a aria-hidden="true" class="anchor-heading" href="#listtransformjobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTransformJobs</h3>
<ul>
<li>description: Lists transform jobs.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtrialcomponents"><a aria-hidden="true" class="anchor-heading" href="#listtrialcomponents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTrialComponents</h3>
<ul>
<li>description: Lists trial components.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtrials"><a aria-hidden="true" class="anchor-heading" href="#listtrials"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTrials</h3>
<ul>
<li>description: Lists trials.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listuserprofiles"><a aria-hidden="true" class="anchor-heading" href="#listuserprofiles"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListUserProfiles</h3>
<ul>
<li>description: Grants permission to list the UserProfiles in your account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listworkforces"><a aria-hidden="true" class="anchor-heading" href="#listworkforces"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListWorkforces</h3>
<ul>
<li>description: Lists workforces.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listworkteams"><a aria-hidden="true" class="anchor-heading" href="#listworkteams"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListWorkteams</h3>
<ul>
<li>description: Lists workteams.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="renderuitemplate"><a aria-hidden="true" class="anchor-heading" href="#renderuitemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RenderUiTemplate</h3>
<ul>
<li>description: Render a UI template used for a human annotation task.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    }
}
</code></pre>
<h3 id="search"><a aria-hidden="true" class="anchor-heading" href="#search"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Search</h3>
<ul>
<li>description: Search for SageMaker objects.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="starthumanloop"><a aria-hidden="true" class="anchor-heading" href="#starthumanloop"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartHumanLoop</h3>
<ul>
<li>description: Starts a human loop.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "flow-definition": {
        "resource_type": "flow-definition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startmonitoringschedule"><a aria-hidden="true" class="anchor-heading" href="#startmonitoringschedule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartMonitoringSchedule</h3>
<ul>
<li>description: Starts a monitoring schedule.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "monitoring-schedule": {
        "resource_type": "monitoring-schedule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startnotebookinstance"><a aria-hidden="true" class="anchor-heading" href="#startnotebookinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartNotebookInstance</h3>
<ul>
<li>description: Launches an EC2 instance with the latest version of the libraries and attaches your EBS volume.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "notebook-instance": {
        "resource_type": "notebook-instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopautomljob"><a aria-hidden="true" class="anchor-heading" href="#stopautomljob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopAutoMLJob</h3>
<ul>
<li>description: Stops a running automl job created via the CreateAutoMLJob.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "automl-job": {
        "resource_type": "automl-job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopcompilationjob"><a aria-hidden="true" class="anchor-heading" href="#stopcompilationjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopCompilationJob</h3>
<ul>
<li>description: Stops a compilation job.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "compilation-job": {
        "resource_type": "compilation-job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stophumanloop"><a aria-hidden="true" class="anchor-heading" href="#stophumanloop"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopHumanLoop</h3>
<ul>
<li>description: Stops the specified human loop.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "human-loop": {
        "resource_type": "human-loop",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stophyperparametertuningjob"><a aria-hidden="true" class="anchor-heading" href="#stophyperparametertuningjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopHyperParameterTuningJob</h3>
<ul>
<li>description: Stops a running hyper parameter tuning job create via the CreateHyperParameterTuningJob.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "hyper-parameter-tuning-job": {
        "resource_type": "hyper-parameter-tuning-job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stoplabelingjob"><a aria-hidden="true" class="anchor-heading" href="#stoplabelingjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopLabelingJob</h3>
<ul>
<li>description: Stops a labeling job. Any labels already generated will be exported before stopping.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "labeling-job": {
        "resource_type": "labeling-job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopmonitoringschedule"><a aria-hidden="true" class="anchor-heading" href="#stopmonitoringschedule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopMonitoringSchedule</h3>
<ul>
<li>description: Stops a monitoring schedule.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "monitoring-schedule": {
        "resource_type": "monitoring-schedule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopnotebookinstance"><a aria-hidden="true" class="anchor-heading" href="#stopnotebookinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopNotebookInstance</h3>
<ul>
<li>description: Terminates the EC2 instance. Before terminating the instance, Amazon SageMaker disconnects the EBS volume from it. Amazon SageMaker preserves the EBS volume.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "notebook-instance": {
        "resource_type": "notebook-instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopprocessingjob"><a aria-hidden="true" class="anchor-heading" href="#stopprocessingjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopProcessingJob</h3>
<ul>
<li>description: Stops a processing job. To stop a job, Amazon SageMaker sends the algorithm the SIGTERM signal, which delays job termination for 120 seconds.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "processing-job": {
        "resource_type": "processing-job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stoptrainingjob"><a aria-hidden="true" class="anchor-heading" href="#stoptrainingjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopTrainingJob</h3>
<ul>
<li>description: Stops a training job. To stop a job, Amazon SageMaker sends the algorithm the SIGTERM signal, which delays job termination for 120 seconds.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "training-job": {
        "resource_type": "training-job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stoptransformjob"><a aria-hidden="true" class="anchor-heading" href="#stoptransformjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopTransformJob</h3>
<ul>
<li>description: Stops a transform job. When Amazon SageMaker receives a StopTransformJob request, the status of the job changes to Stopping. After Amazon SageMaker stops the job, the status is set to Stopped</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "transform-job": {
        "resource_type": "transform-job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatecoderepository"><a aria-hidden="true" class="anchor-heading" href="#updatecoderepository"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateCodeRepository</h3>
<ul>
<li>description: Updates a code repository.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "code-repository": {
        "resource_type": "code-repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatedomain"><a aria-hidden="true" class="anchor-heading" href="#updatedomain"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateDomain</h3>
<ul>
<li>description: Grants permission to update a Domain</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "domain": {
        "resource_type": "domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "sagemaker:VpcSecurityGroupIds",
            "sagemaker:InstanceTypes",
            "sagemaker:DomainSharingOutputKmsKey"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateendpoint"><a aria-hidden="true" class="anchor-heading" href="#updateendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateEndpoint</h3>
<ul>
<li>description: Updates an endpoint to use the endpoint configuration specified in the request.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "endpoint": {
        "resource_type": "endpoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateendpointweightsandcapacities"><a aria-hidden="true" class="anchor-heading" href="#updateendpointweightsandcapacities"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateEndpointWeightsAndCapacities</h3>
<ul>
<li>description: Updates variant weight, capacity, or both of one or more variants associated with an endpoint.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "endpoint": {
        "resource_type": "endpoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateexperiment"><a aria-hidden="true" class="anchor-heading" href="#updateexperiment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateExperiment</h3>
<ul>
<li>description: Updates an experiment.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "experiment": {
        "resource_type": "experiment",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatemonitoringschedule"><a aria-hidden="true" class="anchor-heading" href="#updatemonitoringschedule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateMonitoringSchedule</h3>
<ul>
<li>description: Updates a monitoring schedule.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "monitoring-schedule": {
        "resource_type": "monitoring-schedule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "sagemaker:InstanceTypes",
            "sagemaker:MaxRuntimeInSeconds",
            "sagemaker:NetworkIsolation",
            "sagemaker:OutputKmsKey",
            "sagemaker:VolumeKmsKey",
            "sagemaker:VpcSecurityGroupIds",
            "sagemaker:VpcSubnets"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatenotebookinstance"><a aria-hidden="true" class="anchor-heading" href="#updatenotebookinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateNotebookInstance</h3>
<ul>
<li>description: Updates a notebook instance. Notebook instance updates include upgrading or downgrading the EC2 instance used for your notebook instance to accommodate changes in your workload requirements. You can also update the VPC security groups.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "notebook-instance": {
        "resource_type": "notebook-instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "sagemaker:AcceleratorTypes",
            "sagemaker:InstanceTypes",
            "sagemaker:RootAccess"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatenotebookinstancelifecycleconfig"><a aria-hidden="true" class="anchor-heading" href="#updatenotebookinstancelifecycleconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateNotebookInstanceLifecycleConfig</h3>
<ul>
<li>description: Updates a notebook instance lifecycle configuration created with the CreateNotebookInstanceLifecycleConfig API.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "notebook-instance-lifecycle-config": {
        "resource_type": "notebook-instance-lifecycle-config",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatetrial"><a aria-hidden="true" class="anchor-heading" href="#updatetrial"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateTrial</h3>
<ul>
<li>description: Updates a trial.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "experiment-trial": {
        "resource_type": "experiment-trial",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatetrialcomponent"><a aria-hidden="true" class="anchor-heading" href="#updatetrialcomponent"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateTrialComponent</h3>
<ul>
<li>description: Updates a trial component.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "experiment-trial-component": {
        "resource_type": "experiment-trial-component",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateuserprofile"><a aria-hidden="true" class="anchor-heading" href="#updateuserprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateUserProfile</h3>
<ul>
<li>description: Grants permission to update a UserProfile</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user-profile": {
        "resource_type": "user-profile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "sagemaker:InstanceTypes",
            "sagemaker:VpcSecurityGroupIds",
            "sagemaker:InstanceTypes",
            "sagemaker:DomainSharingOutputKmsKey"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateworkforce"><a aria-hidden="true" class="anchor-heading" href="#updateworkforce"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateWorkforce</h3>
<ul>
<li>description: Updates a workforce.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "workforce": {
        "resource_type": "workforce",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateworkteam"><a aria-hidden="true" class="anchor-heading" href="#updateworkteam"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateWorkteam</h3>
<ul>
<li>description: Updates a workteam.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "workteam": {
        "resource_type": "workteam",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-SageMaker"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/cloudformation.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>CloudFormation - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/cloudformation.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/cloudformation.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/cloudformation.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="CloudFormation - undefined" />
  <meta name="twitter:title" content="CloudFormation - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/1f759d8c-cca7-4fc4-9aa2-6dbf6e596abf.html">Services</a></li><li class="breadcrumb-nav-list-item">CloudFormation</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/open-guides/og-aws" target="_blank"> og-aws  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="CloudFormation">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="cloudformation"><a aria-hidden="true" class="anchor-heading" href="#cloudformation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CloudFormation</h1>
<h3 id="cloudformation-basics"><a aria-hidden="true" class="anchor-heading" href="#cloudformation-basics"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CloudFormation Basics</h3>
<ul>
<li>📒 <a href="https://aws.amazon.com/cloudformation/">Homepage</a> ∙ <a href="http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/">Developer guide</a> ∙ <a href="https://aws.amazon.com/cloudformation/faqs/">FAQ</a> ∙ <a href="https://aws.amazon.com/cloudformation/pricing/">Pricing</a> at no additional charge</li>
<li><strong>CloudFormation</strong> allows you to manage sets of resources from other AWS services grouped into <strong><a href="http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/cfn-whatis-concepts.html#d0e3917">stacks</a></strong>. CloudFormation allows you to define these stacks in a template using <a href="http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance.html#aws-properties-ec2-instance-syntax.json">JSON</a> or <a href="http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance.html#aws-properties-ec2-instance-syntax.yaml">YAML</a>. CloudFormation is one of the major services underpinning AWS' <a href="https://d0.awsstatic.com/whitepapers/DevOps/infrastructure-as-code.pdf">infrastructure as code capabilities</a> and is crucial in enabling repeatable and consistent deployments of infrastructure.</li>
<li>💸CloudFormation itself has <a href="https://aws.amazon.com/cloudformation/pricing/">no additional charge</a>; you pay for the underlying resources.</li>
</ul>
<h3 id="cloudformation-alternatives-and-lock-in"><a aria-hidden="true" class="anchor-heading" href="#cloudformation-alternatives-and-lock-in"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CloudFormation Alternatives and Lock-In</h3>
<ul>
<li>HashiCorp’s <a href="https://www.terraform.io/intro/vs/cloudformation.html">Terraform</a> is a third-party alternative that can support other cloud platforms/providers including <a href="https://www.terraform.io/docs/providers/azure/">Azure</a> and <a href="https://www.terraform.io/docs/providers/openstack/">OpenStack</a>.</li>
<li>🔸Some AWS features may not be available in Terraform (e.g. multi-AZ ElastiCache using Redis), and you may have to resort to embedded CloudFormation templates.</li>
<li><a href="https://www.pulumi.com/">Pulumi</a> enables teams to define and deliver Cloud Native Infrastructure as Code on any cloud, with any language. From containers to serverless to Kubernetes to infrastructure.</li>
</ul>
<h3 id="cloudformation-tips"><a aria-hidden="true" class="anchor-heading" href="#cloudformation-tips"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CloudFormation Tips</h3>
<ul>
<li>Validate your stack in a different AWS account! CloudFormation truly shines when making multiple deployments of the same stack to different accounts and regions. A common practice is to deploy stacks in successive stages ending in a production rollout.</li>
<li>Avoid potentially time-consuming syntax errors from eating into your deployment time by running <code>validate-template</code>.</li>
<li>CloudFormation is sometimes slow to update what resources (and new features on old services) a user is able to define in the template. If you need to deploy a resource or feature that isn't supported by the template, CloudFormation allows running arbitrary code (using <a href="#lambda">Lambda</a>) on a stack create or update via <a href="http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/template-custom-resources.html">custom resources</a>.</li>
<li>Custom resources make CloudFormation into a truly powerful tool, as you can do all sorts of neat things quite easily such as sanity tests, initial configuration of Dynamo tables or S3 buckets, cleaning up old CloudWatch logs, etc.
<ul>
<li>For writing Custom Resources in Javascript, AWS provides a good reference in the <a href="http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/walkthrough-custom-resources-lambda-lookup-amiids.html">documentation.</a></li>
</ul>
</li>
<li>CloudFormation offers a visual <a href="http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/working-with-templates-cfn-designer-walkthrough-createbasicwebserver.html">template designer</a> that can be useful when getting up to speed with the template syntax.</li>
<li>By using <a href="http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-concepts.html">StackSets</a>, users can define and deploy an entire production application consisting of multiple stacks (one service per stack) in a single CloudFormation template.</li>
<li>If you're developing a serverless application (i.e., using Lambda, API Gateway) CloudFormation offers a simplified template format called <a href="https://github.com/awslabs/serverless-application-model">SAM</a>.</li>
<li>❗Use a restrictive <a href="http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/protect-stack-resources.html">stack policy</a>! Without one, you can inadvertently delete live production resources, probably causing a severe outage.</li>
<li>❗Turn on <a href="https://aws.amazon.com/about-aws/whats-new/2017/09/aws-cloudformation-provides-stack-termination-protection/">termination protection</a> on all of your stacks to avoid costly accidents!</li>
<li>The CloudFormation <a href="http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/template-reference.html">template reference</a> is indispensable when discovering what is and isn't possible in a CloudFormation template.</li>
<li><a href="https://github.com/cloudtools/troposphere">Troposphere</a> is a Python library that makes it much easier to create CloudFormation templates.
<ul>
<li>Currently supports <a href="https://github.com/cloudtools/troposphere#currently-supported-aws-resource-types">AWS</a> and <a href="https://github.com/cloudtools/troposphere#currently-supported-openstack-resource-types">OpenStack</a> resource types.</li>
<li>Troposphere attempts to support all resources types that can be described in CloudFormation templates.</li>
<li>Built in <a href="https://github.com/cloudtools/troposphere#examples-of-the-error-checking-full-tracebacks-removed-for-clarity">error</a> checking.</li>
<li>A recommended soft dependency is <a href="https://github.com/cloudtools/awacs">awacs</a>, which allows you to generate AWS access policy in JSON by writing Python code.</li>
</ul>
</li>
<li><a href="http://stacker.readthedocs.io/en/latest/">stacker</a> is a Python application that makes it easy to define, configure, orchestrate and manage dependencies for CloudFormation stacks across multiple user-defined environments.</li>
<li>If you are building different stacks with similar layers, it may be useful to build separate templates for each layer that you can reuse using <a href="http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-stack.html">AWS::CloudFormation::Stack</a>.</li>
<li>🔸Avoid hardcoding resource parameters that can potentially change. Use stack parameters as much as you can, and resort to default parameter values.</li>
<li>🔹Until <a href="https://aws.amazon.com/about-aws/whats-new/2016/09/aws-cloudformation-introduces-yaml-template-support-and-cross-stack-references/">2016</a>, CloudFormation used only an awkward JSON format that makes both reading and debugging difficult. To use it effectively typically involved building additional tooling, including converting it to YAML, but now <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/template-formats.html">this is supported directly</a>.</li>
<li>Wherever possible, export relevant <a href="http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html">physical IDs</a> from your Stacks by defining <a href="http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/outputs-section-structure.html">Outputs in your CloudFormation Templates</a>. These are the actual names assigned to the resources being created. Outputs can be returned from <code>DescribeStack</code> API calls, and get imported to other Stacks as part of the <a href="https://aws.amazon.com/about-aws/whats-new/2016/09/aws-cloudformation-introduces-yaml-template-support-and-cross-stack-references/">recent addition</a> of <a href="http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/walkthrough-crossstackref.html">cross-stack references</a>.
-Note that importing outputs in a stack from another stack creates a hard dependency that is tracked by CloudFormation. You will not be able to delete the stack with the outputs until there are no importing stacks.</li>
<li>CloudFormation can be set up to <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/cfn-console-add-tags.html">send SNS notifications</a> upon state changes, enabling programmatic handling of situations where stacks fail to build, or simple email alerts so the appropriate people are informed.</li>
<li>CloudFormation allows the use of <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/conditions-section-structure.html"><strong>conditionals</strong></a> when creating a stack.
<ul>
<li>One common way to leverage this capability is in support of multi-environment CloudFormation templates – by configuring them to use ‘if-else’ statements on the value of a <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/parameters-section-structure.html">parameter passed in</a> (e.g.  “env”), environment-specific values for things like VPC IDs, SecurityGroup IDs, and AMI names can be passed into reusable generic templates.</li>
</ul>
</li>
<li><strong>Version control your CloudFormation templates!</strong> In the Cloud, an application is the combination of the code written and the infrastructure it runs on. By version controlling <strong>both</strong>, it is easy to roll back to known good states.</li>
<li>Avoid naming your resources explicitly (e.g. DynamoDB tables). When deploying multiple stacks to the same AWS account, these names can come into conflict, potentially slowing down your testing. Prefer using resource references instead.</li>
<li>For things that shouldn't ever be deleted, you can set an explicit DeletionPolicy on the resource that will prevent the resource from being deleted even if the CloudFormation stack itself is deleted. This is useful for anything that can maintain expensive-to-rebuild state, such as DynamoDB tables, and things that are exposed to the outside world, such as API Gateway APIs.</li>
</ul>
<h3 id="cloudformation-gotchas-and-limitations"><a aria-hidden="true" class="anchor-heading" href="#cloudformation-gotchas-and-limitations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CloudFormation Gotchas and Limitations</h3>
<ul>
<li>🔸A given CloudFormation stack can end up in a wide variety of states. Error reporting is generally weak, and often times multiple observe-tweak-redeploy cycles are needed to get a working template. The internal state machine for <a href="http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-describing-stacks.html">all the varying states</a> is extremely opaque.</li>
<li>🔸Some cross-region operations are not possible in CloudFormation without using a custom resource, such as <a href="https://github.com/serverless/serverless/issues/3676">cross-region SNS subscriptions</a>.</li>
<li>🔸While having hand-made resources live alongside CloudFormation-created resources is inadvisable, it's sometimes unavoidable. If at all possible, leave ALL resource management up to a CloudFormation template and only provide read-only access to the console.</li>
<li>❗Modifications to stack resources made outside CloudFormation can potentially lead to stacks stuck in UPDATE_ROLLBACK_FAILED mode. Stacks in this state can be recovered using the <a href="https://aws.amazon.com/blogs/devops/continue-rolling-back-an-update-for-aws-cloudformation-stacks-in-the-update_rollback_failed-state/">continue-update-rollback command</a>. This command can be initiated in the console or in the CLI. The <a href="http://docs.aws.amazon.com/cli/latest/reference/cloudformation/continue-update-rollback.html">--resources-to-skip</a> parameter usable in the CLI can be useful if the continue-update-rollback command fails. New feature <a href="https://aws.amazon.com/blogs/aws/new-cloudformation-drift-detection/">Drift Detection</a> can be used to detect outside changes made to stack.</li>
<li>🔸CloudFormation is useful but complex and with a variety of pain points. Many companies find alternate solutions, and many companies use it, but only with significant additional tooling.</li>
<li>🔸CloudFormation can be very slow, especially for items like CloudFront distributions and Route53 CNAME entries.</li>
<li>🔸It’s hard to assemble good CloudFormation configurations from existing state. AWS does <a href="http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/cfn-using-cloudformer.html">offer a trick to do this</a>, but it’s very clumsy.
<ul>
<li>CloudFormer also hasn't been updated in ages (as of Oct 2017), doesn't support templatizing many new services, and won't fully define even existing services that have since been updated. For example, Dynamo tables defined through CloudFormer won't contain TTL definitions or auto-scaling configuration. There is a third-party version of the tool with more supported resources called <a href="https://github.com/iann0036/former2">Former2</a>.</li>
</ul>
</li>
<li>🔸Many users don’t use CloudFormation at all because of its limitations, or because they find other solutions preferable. Often there are other ways to accomplish the same goals, such as local scripts (Boto, Bash, Ansible, etc.) you manage yourself that build infrastructure, or Docker-based solutions (<a href="https://convox.com/">Convox</a>, etc.).</li>
<li>🔸Deploying large stacks (i.e., many resources) can be problematic due to unintuitive API limits. For instance, API Gateway's <code>CreateDeployment</code> API has a default limit of <a href="https://docs.aws.amazon.com/apigateway/latest/developerguide/limits.html">3 requests per minute</a> as of 1/12/2018. This limit is readily exceeded even in moderately-sized CloudFormation stacks. Creating CW alarms is another commonly seen limit (<code>PutMetricAlarm</code>, 3 tps as of 1/12/2018) especially when creating many autoscaling policies for DynamoDB. One way to work around this limit is to include CloudFormation 'DependsOn' clauses to artificially chain resource creation.</li>
<li>🔸Creating/deleting stacks can be a little less clean than ideal. Some resources will leave behind traces in your AWS account even after deletion. E.g., Lambda will leave behind CloudWatch log groups that never expire.</li>
</ul><span id="navId" data="cloudformation"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Lex.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Lex - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Lex.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Lex.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Lex.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Lex - undefined" />
  <meta name="twitter:title" content="Lex - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Lex</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Lex">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="lex"><a aria-hidden="true" class="anchor-heading" href="#lex"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Lex</h1>
<ul>
<li>prefix: lex</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="createbotversion"><a aria-hidden="true" class="anchor-heading" href="#createbotversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateBotVersion</h3>
<ul>
<li>description: Creates a new version based on the $LATEST version of the specified bot.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bot version": {
        "resource_type": "bot version",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createintentversion"><a aria-hidden="true" class="anchor-heading" href="#createintentversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateIntentVersion</h3>
<ul>
<li>description: Creates a new version based on the $LATEST version of the specified intent.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "intent version": {
        "resource_type": "intent version",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createslottypeversion"><a aria-hidden="true" class="anchor-heading" href="#createslottypeversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSlotTypeVersion</h3>
<ul>
<li>description: Creates a new version based on the $LATEST version of the specified slot type.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "slottype version": {
        "resource_type": "slottype version",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletebot"><a aria-hidden="true" class="anchor-heading" href="#deletebot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteBot</h3>
<ul>
<li>description: Deletes all versions of a bot.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bot version": {
        "resource_type": "bot version",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletebotalias"><a aria-hidden="true" class="anchor-heading" href="#deletebotalias"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteBotAlias</h3>
<ul>
<li>description: Deletes an alias for a specific bot.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bot alias": {
        "resource_type": "bot alias",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletebotchannelassociation"><a aria-hidden="true" class="anchor-heading" href="#deletebotchannelassociation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteBotChannelAssociation</h3>
<ul>
<li>description: Deletes the association between a Amazon Lex bot alias and a messaging platform.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "channel": {
        "resource_type": "channel",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletebotversion"><a aria-hidden="true" class="anchor-heading" href="#deletebotversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteBotVersion</h3>
<ul>
<li>description: Deletes a specific version of a bot.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bot version": {
        "resource_type": "bot version",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteintent"><a aria-hidden="true" class="anchor-heading" href="#deleteintent"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteIntent</h3>
<ul>
<li>description: Deletes all versions of an intent.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "intent version": {
        "resource_type": "intent version",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteintentversion"><a aria-hidden="true" class="anchor-heading" href="#deleteintentversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteIntentVersion</h3>
<ul>
<li>description: Deletes a specific version of an intent.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "intent version": {
        "resource_type": "intent version",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletesession"><a aria-hidden="true" class="anchor-heading" href="#deletesession"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteSession</h3>
<ul>
<li>description: Removes session information for a specified bot, alias, and user ID.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bot alias": {
        "resource_type": "bot alias",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "bot version": {
        "resource_type": "bot version",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteslottype"><a aria-hidden="true" class="anchor-heading" href="#deleteslottype"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteSlotType</h3>
<ul>
<li>description: Deletes all versions of a slot type.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "slottype version": {
        "resource_type": "slottype version",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteslottypeversion"><a aria-hidden="true" class="anchor-heading" href="#deleteslottypeversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteSlotTypeVersion</h3>
<ul>
<li>description: Deletes a specific version of a slot type.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "slottype version": {
        "resource_type": "slottype version",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteutterances"><a aria-hidden="true" class="anchor-heading" href="#deleteutterances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteUtterances</h3>
<ul>
<li>description: Deletes the information Amazon Lex maintains for utterances on a specific bot and userId.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bot version": {
        "resource_type": "bot version",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbot"><a aria-hidden="true" class="anchor-heading" href="#getbot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBot</h3>
<ul>
<li>description: Returns information for a specific bot. In addition to the bot name, the bot version or alias is required.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bot alias": {
        "resource_type": "bot alias",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "bot version": {
        "resource_type": "bot version",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbotalias"><a aria-hidden="true" class="anchor-heading" href="#getbotalias"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBotAlias</h3>
<ul>
<li>description: Returns information about a Amazon Lex bot alias.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bot alias": {
        "resource_type": "bot alias",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbotaliases"><a aria-hidden="true" class="anchor-heading" href="#getbotaliases"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBotAliases</h3>
<ul>
<li>description: Returns a list of aliases for a given Amazon Lex bot.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbotchannelassociation"><a aria-hidden="true" class="anchor-heading" href="#getbotchannelassociation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBotChannelAssociation</h3>
<ul>
<li>description: Returns information about the association between a Amazon Lex bot and a messaging platform.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "channel": {
        "resource_type": "channel",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbotchannelassociations"><a aria-hidden="true" class="anchor-heading" href="#getbotchannelassociations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBotChannelAssociations</h3>
<ul>
<li>description: Returns a list of all of the channels associated with a single bot.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "channel": {
        "resource_type": "channel",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbotversions"><a aria-hidden="true" class="anchor-heading" href="#getbotversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBotVersions</h3>
<ul>
<li>description: Returns information for all versions of a specific bot.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bot version": {
        "resource_type": "bot version",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbots"><a aria-hidden="true" class="anchor-heading" href="#getbots"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBots</h3>
<ul>
<li>description: Returns information for the $LATEST version of all bots, subject to filters provided by the client.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbuiltinintent"><a aria-hidden="true" class="anchor-heading" href="#getbuiltinintent"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBuiltinIntent</h3>
<ul>
<li>description: Returns information about a built-in intent.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbuiltinintents"><a aria-hidden="true" class="anchor-heading" href="#getbuiltinintents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBuiltinIntents</h3>
<ul>
<li>description: Gets a list of built-in intents that meet the specified criteria.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbuiltinslottypes"><a aria-hidden="true" class="anchor-heading" href="#getbuiltinslottypes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBuiltinSlotTypes</h3>
<ul>
<li>description: Gets a list of built-in slot types that meet the specified criteria.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getexport"><a aria-hidden="true" class="anchor-heading" href="#getexport"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetExport</h3>
<ul>
<li>description: Exports Amazon Lex Resource in a requested format.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bot version": {
        "resource_type": "bot version",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getimport"><a aria-hidden="true" class="anchor-heading" href="#getimport"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetImport</h3>
<ul>
<li>description: Gets information about an import job started with StartImport.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getintent"><a aria-hidden="true" class="anchor-heading" href="#getintent"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetIntent</h3>
<ul>
<li>description: Returns information for a specific intent. In addition to the intent name, you must also specify the intent version.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "intent version": {
        "resource_type": "intent version",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getintentversions"><a aria-hidden="true" class="anchor-heading" href="#getintentversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetIntentVersions</h3>
<ul>
<li>description: Returns information for all versions of a specific intent.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "intent version": {
        "resource_type": "intent version",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getintents"><a aria-hidden="true" class="anchor-heading" href="#getintents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetIntents</h3>
<ul>
<li>description: Returns information for the $LATEST version of all intents, subject to filters provided by the client.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsession"><a aria-hidden="true" class="anchor-heading" href="#getsession"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSession</h3>
<ul>
<li>description: Returns session information for a specified bot, alias, and user ID.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bot alias": {
        "resource_type": "bot alias",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "bot version": {
        "resource_type": "bot version",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getslottype"><a aria-hidden="true" class="anchor-heading" href="#getslottype"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSlotType</h3>
<ul>
<li>description: Returns information about a specific version of a slot type. In addition to specifying the slot type name, you must also specify the slot type version.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "slottype version": {
        "resource_type": "slottype version",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getslottypeversions"><a aria-hidden="true" class="anchor-heading" href="#getslottypeversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSlotTypeVersions</h3>
<ul>
<li>description: Returns information for all versions of a specific slot type.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "slottype version": {
        "resource_type": "slottype version",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getslottypes"><a aria-hidden="true" class="anchor-heading" href="#getslottypes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSlotTypes</h3>
<ul>
<li>description: Returns information for the $LATEST version of all slot types, subject to filters provided by the client.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getutterancesview"><a aria-hidden="true" class="anchor-heading" href="#getutterancesview"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetUtterancesView</h3>
<ul>
<li>description: Returns a view of aggregate utterance data for versions of a bot for a recent time period.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bot version": {
        "resource_type": "bot version",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Lists tags for a Lex resource</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bot": {
        "resource_type": "bot",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "bot alias": {
        "resource_type": "bot alias",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "channel": {
        "resource_type": "channel",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="postcontent"><a aria-hidden="true" class="anchor-heading" href="#postcontent"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PostContent</h3>
<ul>
<li>description: Sends user input (text or speech) to Amazon Lex.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bot alias": {
        "resource_type": "bot alias",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "bot version": {
        "resource_type": "bot version",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="posttext"><a aria-hidden="true" class="anchor-heading" href="#posttext"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PostText</h3>
<ul>
<li>description: Sends user input (text-only) to Amazon Lex.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bot alias": {
        "resource_type": "bot alias",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "bot version": {
        "resource_type": "bot version",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putbot"><a aria-hidden="true" class="anchor-heading" href="#putbot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutBot</h3>
<ul>
<li>description: Creates or updates the $LATEST version of a Amazon Lex conversational bot.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bot version": {
        "resource_type": "bot version",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys",
            "aws:RequestTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putbotalias"><a aria-hidden="true" class="anchor-heading" href="#putbotalias"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutBotAlias</h3>
<ul>
<li>description: Creates or updates an alias for the specific bot.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bot alias": {
        "resource_type": "bot alias",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys",
            "aws:RequestTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putintent"><a aria-hidden="true" class="anchor-heading" href="#putintent"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutIntent</h3>
<ul>
<li>description: Creates or updates the $LATEST version of an intent.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "intent version": {
        "resource_type": "intent version",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putsession"><a aria-hidden="true" class="anchor-heading" href="#putsession"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutSession</h3>
<ul>
<li>description: Creates a new session or modifies an existing session with an Amazon Lex bot.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bot alias": {
        "resource_type": "bot alias",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "bot version": {
        "resource_type": "bot version",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putslottype"><a aria-hidden="true" class="anchor-heading" href="#putslottype"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutSlotType</h3>
<ul>
<li>description: Creates or updates the $LATEST version of a slot type.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "slottype version": {
        "resource_type": "slottype version",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startimport"><a aria-hidden="true" class="anchor-heading" href="#startimport"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartImport</h3>
<ul>
<li>description: Starts a job to import a resource to Amazon Lex.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Adds or overwrites tags to a Lex resource</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bot": {
        "resource_type": "bot",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "bot alias": {
        "resource_type": "bot alias",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "channel": {
        "resource_type": "channel",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys",
            "aws:RequestTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Removes tags from a Lex resource</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bot": {
        "resource_type": "bot",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "bot alias": {
        "resource_type": "bot alias",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "channel": {
        "resource_type": "channel",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys",
            "aws:RequestTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Lex"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-S3 on Outposts.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>S3 on Outposts - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-S3 on Outposts.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-S3 on Outposts.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-S3 on Outposts.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="S3 on Outposts - undefined" />
  <meta name="twitter:title" content="S3 on Outposts - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">S3 on Outposts</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="S3 on Outposts">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="s3-on-outposts"><a aria-hidden="true" class="anchor-heading" href="#s3-on-outposts"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>S3 on Outposts</h1>
<ul>
<li>prefix: s3-outposts</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="abortmultipartupload"><a aria-hidden="true" class="anchor-heading" href="#abortmultipartupload"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AbortMultipartUpload</h3>
<ul>
<li>description: Grants permission to abort a multipart upload</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "object": {
        "resource_type": "object",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3-outposts:DataAccessPointArn",
            "s3-outposts:DataAccessPointAccount",
            "s3-outposts:AccessPointNetworkOrigin",
            "s3-outposts:authType",
            "s3-outposts:signatureAge",
            "s3-outposts:signatureversion",
            "s3-outposts:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createaccesspoint"><a aria-hidden="true" class="anchor-heading" href="#createaccesspoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateAccessPoint</h3>
<ul>
<li>description: Grants permission to create a new access point</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "accesspoint": {
        "resource_type": "accesspoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3-outposts:DataAccessPointAccount",
            "s3-outposts:DataAccessPointArn",
            "s3-outposts:AccessPointNetworkOrigin",
            "s3-outposts:authType",
            "s3-outposts:signatureAge",
            "s3-outposts:signatureversion",
            "s3-outposts:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createbucket"><a aria-hidden="true" class="anchor-heading" href="#createbucket"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateBucket</h3>
<ul>
<li>description: Grants permission to create a new bucket</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3-outposts:authType",
            "s3-outposts:signatureAge",
            "s3-outposts:signatureversion",
            "s3-outposts:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createendpoint"><a aria-hidden="true" class="anchor-heading" href="#createendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateEndpoint</h3>
<ul>
<li>description: Grants permission to create a new endpoint</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "endpoint": {
        "resource_type": "endpoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteaccesspoint"><a aria-hidden="true" class="anchor-heading" href="#deleteaccesspoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAccessPoint</h3>
<ul>
<li>description: Grants permission to delete the access point named in the URI</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "accesspoint": {
        "resource_type": "accesspoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3-outposts:DataAccessPointArn",
            "s3-outposts:DataAccessPointAccount",
            "s3-outposts:AccessPointNetworkOrigin",
            "s3-outposts:authType",
            "s3-outposts:signatureAge",
            "s3-outposts:signatureversion",
            "s3-outposts:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteaccesspointpolicy"><a aria-hidden="true" class="anchor-heading" href="#deleteaccesspointpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAccessPointPolicy</h3>
<ul>
<li>description: Grants permission to delete the policy on a specified access point</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "accesspoint": {
        "resource_type": "accesspoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3-outposts:DataAccessPointArn",
            "s3-outposts:DataAccessPointAccount",
            "s3-outposts:AccessPointNetworkOrigin",
            "s3-outposts:authType",
            "s3-outposts:signatureAge",
            "s3-outposts:signatureversion",
            "s3-outposts:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletebucket"><a aria-hidden="true" class="anchor-heading" href="#deletebucket"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteBucket</h3>
<ul>
<li>description: Grants permission to delete the bucket named in the URI</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3-outposts:authType",
            "s3-outposts:signatureAge",
            "s3-outposts:signatureversion",
            "s3-outposts:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletebucketpolicy"><a aria-hidden="true" class="anchor-heading" href="#deletebucketpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteBucketPolicy</h3>
<ul>
<li>description: Grants permission to delete the policy on a specified bucket</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3-outposts:authType",
            "s3-outposts:signatureAge",
            "s3-outposts:signatureversion",
            "s3-outposts:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteendpoint"><a aria-hidden="true" class="anchor-heading" href="#deleteendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteEndpoint</h3>
<ul>
<li>description: Grants permission to delete the endpoint named in the URI</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "endpoint": {
        "resource_type": "endpoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteobject"><a aria-hidden="true" class="anchor-heading" href="#deleteobject"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteObject</h3>
<ul>
<li>description: Grants permission to remove the null version of an object and insert a delete marker, which becomes the current version of the object</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "object": {
        "resource_type": "object",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3-outposts:DataAccessPointAccount",
            "s3-outposts:DataAccessPointArn",
            "s3-outposts:AccessPointNetworkOrigin",
            "s3-outposts:authType",
            "s3-outposts:signatureAge",
            "s3-outposts:signatureversion",
            "s3-outposts:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteobjecttagging"><a aria-hidden="true" class="anchor-heading" href="#deleteobjecttagging"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteObjectTagging</h3>
<ul>
<li>description: Grants permission to use the tagging subresource to remove the entire tag set from the specified object</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "object": {
        "resource_type": "object",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3-outposts:DataAccessPointAccount",
            "s3-outposts:DataAccessPointArn",
            "s3-outposts:AccessPointNetworkOrigin",
            "s3-outposts:ExistingObjectTag/&#x3C;key>",
            "s3-outposts:authType",
            "s3-outposts:signatureAge",
            "s3-outposts:signatureversion",
            "s3-outposts:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getaccesspoint"><a aria-hidden="true" class="anchor-heading" href="#getaccesspoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAccessPoint</h3>
<ul>
<li>description: Grants permission to return configuration information about the specified access point</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3-outposts:DataAccessPointAccount",
            "s3-outposts:DataAccessPointArn",
            "s3-outposts:AccessPointNetworkOrigin",
            "s3-outposts:authType",
            "s3-outposts:signatureAge",
            "s3-outposts:signatureversion",
            "s3-outposts:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getaccesspointpolicy"><a aria-hidden="true" class="anchor-heading" href="#getaccesspointpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAccessPointPolicy</h3>
<ul>
<li>description: Grants permission to returns the access point policy associated with the specified access point</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "accesspoint": {
        "resource_type": "accesspoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3-outposts:DataAccessPointAccount",
            "s3-outposts:DataAccessPointArn",
            "s3-outposts:AccessPointNetworkOrigin",
            "s3-outposts:authType",
            "s3-outposts:signatureAge",
            "s3-outposts:signatureversion",
            "s3-outposts:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbucket"><a aria-hidden="true" class="anchor-heading" href="#getbucket"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBucket</h3>
<ul>
<li>description: Grants permission to return the bucket configuration associated with an Amazon S3 bucket</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3-outposts:authType",
            "s3-outposts:signatureAge",
            "s3-outposts:signatureversion",
            "s3-outposts:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbucketpolicy"><a aria-hidden="true" class="anchor-heading" href="#getbucketpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBucketPolicy</h3>
<ul>
<li>description: Grants permission to return the policy of the specified bucket</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3-outposts:authType",
            "s3-outposts:signatureAge",
            "s3-outposts:signatureversion",
            "s3-outposts:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbuckettagging"><a aria-hidden="true" class="anchor-heading" href="#getbuckettagging"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBucketTagging</h3>
<ul>
<li>description: Grants permission to return the tag set associated with an Amazon S3 bucket</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3-outposts:authType",
            "s3-outposts:signatureAge",
            "s3-outposts:signatureversion",
            "s3-outposts:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getlifecycleconfiguration"><a aria-hidden="true" class="anchor-heading" href="#getlifecycleconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetLifecycleConfiguration</h3>
<ul>
<li>description: Grants permission to return the lifecycle configuration information set on an Amazon S3 bucket</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3-outposts:authType",
            "s3-outposts:signatureAge",
            "s3-outposts:signatureversion",
            "s3-outposts:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getobject"><a aria-hidden="true" class="anchor-heading" href="#getobject"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetObject</h3>
<ul>
<li>description: Grants permission to retrieve objects from Amazon S3</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "object": {
        "resource_type": "object",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3-outposts:DataAccessPointAccount",
            "s3-outposts:DataAccessPointArn",
            "s3-outposts:AccessPointNetworkOrigin",
            "s3-outposts:ExistingObjectTag/&#x3C;key>",
            "s3-outposts:authType",
            "s3-outposts:signatureAge",
            "s3-outposts:signatureversion",
            "s3-outposts:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getobjecttagging"><a aria-hidden="true" class="anchor-heading" href="#getobjecttagging"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetObjectTagging</h3>
<ul>
<li>description: Grants permission to return the tag set of an object</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "object": {
        "resource_type": "object",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3-outposts:DataAccessPointAccount",
            "s3-outposts:DataAccessPointArn",
            "s3-outposts:AccessPointNetworkOrigin",
            "s3-outposts:ExistingObjectTag/&#x3C;key>",
            "s3-outposts:authType",
            "s3-outposts:signatureAge",
            "s3-outposts:signatureversion",
            "s3-outposts:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listaccesspoints"><a aria-hidden="true" class="anchor-heading" href="#listaccesspoints"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAccessPoints</h3>
<ul>
<li>description: Grants permission to list access points</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3-outposts:authType",
            "s3-outposts:signatureAge",
            "s3-outposts:signatureversion",
            "s3-outposts:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listbucket"><a aria-hidden="true" class="anchor-heading" href="#listbucket"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListBucket</h3>
<ul>
<li>description: Grants permission to list some or all of the objects in an Amazon S3 bucket (up to 1000)</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "accesspoint": {
        "resource_type": "accesspoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3-outposts:DataAccessPointAccount",
            "s3-outposts:DataAccessPointArn",
            "s3-outposts:AccessPointNetworkOrigin",
            "s3-outposts:authType",
            "s3-outposts:delimiter",
            "s3-outposts:max-keys",
            "s3-outposts:prefix",
            "s3-outposts:signatureAge",
            "s3-outposts:signatureversion",
            "s3-outposts:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listbucketmultipartuploads"><a aria-hidden="true" class="anchor-heading" href="#listbucketmultipartuploads"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListBucketMultipartUploads</h3>
<ul>
<li>description: Grants permission to list in-progress multipart uploads</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "accesspoint": {
        "resource_type": "accesspoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3-outposts:DataAccessPointAccount",
            "s3-outposts:DataAccessPointArn",
            "s3-outposts:AccessPointNetworkOrigin",
            "s3-outposts:authType",
            "s3-outposts:signatureAge",
            "s3-outposts:signatureversion",
            "s3-outposts:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listendpoints"><a aria-hidden="true" class="anchor-heading" href="#listendpoints"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListEndpoints</h3>
<ul>
<li>description: Grants permission to list endpoints</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listmultipartuploadparts"><a aria-hidden="true" class="anchor-heading" href="#listmultipartuploadparts"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListMultipartUploadParts</h3>
<ul>
<li>description: Grants permission to list the parts that have been uploaded for a specific multipart upload</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "object": {
        "resource_type": "object",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3-outposts:DataAccessPointAccount",
            "s3-outposts:DataAccessPointArn",
            "s3-outposts:AccessPointNetworkOrigin",
            "s3-outposts:authType",
            "s3-outposts:signatureAge",
            "s3-outposts:signatureversion",
            "s3-outposts:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listregionalbuckets"><a aria-hidden="true" class="anchor-heading" href="#listregionalbuckets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListRegionalBuckets</h3>
<ul>
<li>description: Grants permission to list all buckets owned by the authenticated sender of the request</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3-outposts:authType",
            "s3-outposts:signatureAge",
            "s3-outposts:signatureversion",
            "s3-outposts:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putaccesspointpolicy"><a aria-hidden="true" class="anchor-heading" href="#putaccesspointpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutAccessPointPolicy</h3>
<ul>
<li>description: Grants permission to associate an access policy with a specified access point</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "accesspoint": {
        "resource_type": "accesspoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3-outposts:DataAccessPointAccount",
            "s3-outposts:DataAccessPointArn",
            "s3-outposts:AccessPointNetworkOrigin",
            "s3-outposts:authType",
            "s3-outposts:signatureAge",
            "s3-outposts:signatureversion",
            "s3-outposts:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putbucketpolicy"><a aria-hidden="true" class="anchor-heading" href="#putbucketpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutBucketPolicy</h3>
<ul>
<li>description: Grants permission to add or replace a bucket policy on a bucket</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3-outposts:authType",
            "s3-outposts:signatureAge",
            "s3-outposts:signatureversion",
            "s3-outposts:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putbuckettagging"><a aria-hidden="true" class="anchor-heading" href="#putbuckettagging"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutBucketTagging</h3>
<ul>
<li>description: Grants permission to add a set of tags to an existing Amazon S3 bucket</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3-outposts:authType",
            "s3-outposts:signatureAge",
            "s3-outposts:signatureversion",
            "s3-outposts:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putlifecycleconfiguration"><a aria-hidden="true" class="anchor-heading" href="#putlifecycleconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutLifecycleConfiguration</h3>
<ul>
<li>description: Grants permission to create a new lifecycle configuration for the bucket or replace an existing lifecycle configuration</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bucket": {
        "resource_type": "bucket",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3-outposts:authType",
            "s3-outposts:signatureAge",
            "s3-outposts:signatureversion",
            "s3-outposts:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putobject"><a aria-hidden="true" class="anchor-heading" href="#putobject"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutObject</h3>
<ul>
<li>description: Grants permission to add an object to a bucket</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "object": {
        "resource_type": "object",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3-outposts:DataAccessPointAccount",
            "s3-outposts:DataAccessPointArn",
            "s3-outposts:AccessPointNetworkOrigin",
            "s3-outposts:RequestObjectTag/&#x3C;key>",
            "s3-outposts:RequestObjectTagKeys",
            "s3-outposts:authType",
            "s3-outposts:signatureAge",
            "s3-outposts:signatureversion",
            "s3-outposts:x-amz-acl",
            "s3-outposts:x-amz-content-sha256",
            "s3-outposts:x-amz-copy-source",
            "s3-outposts:x-amz-metadata-directive",
            "s3-outposts:x-amz-server-side-encryption",
            "s3-outposts:x-amz-storage-class"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putobjectacl"><a aria-hidden="true" class="anchor-heading" href="#putobjectacl"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutObjectAcl</h3>
<ul>
<li>description: Grants permission to set the access control list (ACL) permissions for an object that already exists in a bucket</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "object": {
        "resource_type": "object",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3-outposts:DataAccessPointAccount",
            "s3-outposts:DataAccessPointArn",
            "s3-outposts:AccessPointNetworkOrigin",
            "s3-outposts:ExistingObjectTag/&#x3C;key>",
            "s3-outposts:authType",
            "s3-outposts:signatureAge",
            "s3-outposts:signatureversion",
            "s3-outposts:x-amz-acl",
            "s3-outposts:x-amz-content-sha256",
            "s3-outposts:x-amz-storage-class"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putobjecttagging"><a aria-hidden="true" class="anchor-heading" href="#putobjecttagging"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutObjectTagging</h3>
<ul>
<li>description: Grants permission to set the supplied tag-set to an object that already exists in a bucket</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "object": {
        "resource_type": "object",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "s3-outposts:DataAccessPointAccount",
            "s3-outposts:DataAccessPointArn",
            "s3-outposts:AccessPointNetworkOrigin",
            "s3-outposts:ExistingObjectTag/&#x3C;key>",
            "s3-outposts:RequestObjectTag/&#x3C;key>",
            "s3-outposts:RequestObjectTagKeys",
            "s3-outposts:authType",
            "s3-outposts:signatureAge",
            "s3-outposts:signatureversion",
            "s3-outposts:x-amz-content-sha256"
        ],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-S3 on Outposts"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Fraud Detector.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Fraud Detector - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Fraud Detector.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Fraud Detector.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Fraud Detector.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Fraud Detector - undefined" />
  <meta name="twitter:title" content="Fraud Detector - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Fraud Detector</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Fraud Detector">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="fraud-detector"><a aria-hidden="true" class="anchor-heading" href="#fraud-detector"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Fraud Detector</h1>
<ul>
<li>prefix: frauddetector</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="batchcreatevariable"><a aria-hidden="true" class="anchor-heading" href="#batchcreatevariable"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchCreateVariable</h3>
<ul>
<li>description: Creates a batch of variables.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchgetvariable"><a aria-hidden="true" class="anchor-heading" href="#batchgetvariable"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchGetVariable</h3>
<ul>
<li>description: Gets a batch of variables.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "variable": {
        "resource_type": "variable",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdetectorversion"><a aria-hidden="true" class="anchor-heading" href="#createdetectorversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDetectorVersion</h3>
<ul>
<li>description: Creates a detector version. The detector version starts in a DRAFT status.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createmodel"><a aria-hidden="true" class="anchor-heading" href="#createmodel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateModel</h3>
<ul>
<li>description: Creates a model using the specified model type.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "model": {
        "resource_type": "model",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createmodelversion"><a aria-hidden="true" class="anchor-heading" href="#createmodelversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateModelVersion</h3>
<ul>
<li>description: Creates a version of the model using the specified model type and model id.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "model": {
        "resource_type": "model",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createrule"><a aria-hidden="true" class="anchor-heading" href="#createrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateRule</h3>
<ul>
<li>description: Creates a rule for use with the specified detector.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createvariable"><a aria-hidden="true" class="anchor-heading" href="#createvariable"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateVariable</h3>
<ul>
<li>description: Creates a variable.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedetector"><a aria-hidden="true" class="anchor-heading" href="#deletedetector"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDetector</h3>
<ul>
<li>description: Deletes the detector. Before deleting a detector, you must first delete all detector versions and rule versions associated with the detector.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedetectorversion"><a aria-hidden="true" class="anchor-heading" href="#deletedetectorversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDetectorVersion</h3>
<ul>
<li>description: Deletes the detector version. You cannot delete detector versions that are in ACTIVE status.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector-version": {
        "resource_type": "detector-version",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteevent"><a aria-hidden="true" class="anchor-heading" href="#deleteevent"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteEvent</h3>
<ul>
<li>description: Deletes the specified event.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleterule"><a aria-hidden="true" class="anchor-heading" href="#deleterule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteRule</h3>
<ul>
<li>description: Deletes the rule. You cannot delete a rule if it is used by an ACTIVE or INACTIVE detector version.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "rule": {
        "resource_type": "rule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedetector"><a aria-hidden="true" class="anchor-heading" href="#describedetector"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDetector</h3>
<ul>
<li>description: Gets all versions for a specified detector.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describemodelversions"><a aria-hidden="true" class="anchor-heading" href="#describemodelversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeModelVersions</h3>
<ul>
<li>description: Gets all of the model versions for the specified model type or for the specified model type and model ID. You can also get details for a single, specified model version.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "model-version": {
        "resource_type": "model-version",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdetectorversion"><a aria-hidden="true" class="anchor-heading" href="#getdetectorversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDetectorVersion</h3>
<ul>
<li>description: Gets a particular detector version.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector-version": {
        "resource_type": "detector-version",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdetectors"><a aria-hidden="true" class="anchor-heading" href="#getdetectors"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDetectors</h3>
<ul>
<li>description: Gets all detectors or a single detector if a detectorId is specified. This is a paginated API. If you provide a null maxResults, this action retrieves a maximum of 10 records per page. If you provide a maxResults, the value must be between 5 and 10. To get the next page results, provide the pagination token from the GetDetectorsResponse as part of your request. A null pagination token fetches the records from the beginning.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getentitytypes"><a aria-hidden="true" class="anchor-heading" href="#getentitytypes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetEntityTypes</h3>
<ul>
<li>description: Gets all entity types or a specific entity type if a name is specified. This is a paginated API. If you provide a null maxResults, this action retrieves a maximum of 10 records per page. If you provide a maxResults, the value must be between 5 and 10. To get the next page results, provide the pagination token from the GetEntityTypesResponse as part of your request. A null pagination token fetches the records from the beginning.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "entity-type": {
        "resource_type": "entity-type",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="geteventprediction"><a aria-hidden="true" class="anchor-heading" href="#geteventprediction"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetEventPrediction</h3>
<ul>
<li>description: Evaluates an event against a detector version. If a version ID is not provided, the detector’s (ACTIVE) version is used.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="geteventtypes"><a aria-hidden="true" class="anchor-heading" href="#geteventtypes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetEventTypes</h3>
<ul>
<li>description: Gets all event types or a specific event type if name is provided. This is a paginated API. If you provide a null maxResults, this action retrieves a maximum of 10 records per page. If you provide a maxResults, the value must be between 5 and 10. To get the next page results, provide the pagination token from the GetEventTypesResponse as part of your request. A null pagination token fetches the records from the beginning.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "event-type": {
        "resource_type": "event-type",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getexternalmodels"><a aria-hidden="true" class="anchor-heading" href="#getexternalmodels"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetExternalModels</h3>
<ul>
<li>description: Gets the details for one or more Amazon SageMaker models that have been imported into the service. This is a paginated API. If you provide a null maxResults, this actions retrieves a maximum of 10 records per page. If you provide a maxResults, the value must be between 5 and 10. To get the next page results, provide the pagination token from the GetExternalModelsResult as part of your request. A null pagination token fetches the records from the beginning.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "external-model": {
        "resource_type": "external-model",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getkmsencryptionkey"><a aria-hidden="true" class="anchor-heading" href="#getkmsencryptionkey"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetKMSEncryptionKey</h3>
<ul>
<li>description: Gets the encryption key if a Key Management Service (KMS) customer master key (CMK) has been specified to be used to encrypt content in Amazon Fraud Detector.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getlabels"><a aria-hidden="true" class="anchor-heading" href="#getlabels"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetLabels</h3>
<ul>
<li>description: Gets all labels or a specific label if name is provided. This is a paginated API. If you provide a null maxResults, this action retrieves a maximum of 50 records per page. If you provide a maxResults, the value must be between 10 and 50. To get the next page results, provide the pagination token from the GetGetLabelsResponse as part of your request. A null pagination token fetches the records from the beginning.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "label": {
        "resource_type": "label",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmodelversion"><a aria-hidden="true" class="anchor-heading" href="#getmodelversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetModelVersion</h3>
<ul>
<li>description: Gets the details of the specified model version.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "model-version": {
        "resource_type": "model-version",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmodels"><a aria-hidden="true" class="anchor-heading" href="#getmodels"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetModels</h3>
<ul>
<li>description: Gets one or more models. Gets all models for the AWS account if no model type and no model id provided. Gets all models for the AWS account and model type, if the model type is specified but model id is not provided. Gets a specific model if (model type, model id) tuple is specified.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "model": {
        "resource_type": "model",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getoutcomes"><a aria-hidden="true" class="anchor-heading" href="#getoutcomes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetOutcomes</h3>
<ul>
<li>description: Gets one or more outcomes. This is a paginated API. If you provide a null maxResults, this actions retrieves a maximum of 100 records per page. If you provide a maxResults, the value must be between 50 and 100. To get the next page results, provide the pagination token from the GetOutcomesResult as part of your request. A null pagination token fetches the records from the beginning.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "outcome": {
        "resource_type": "outcome",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getrules"><a aria-hidden="true" class="anchor-heading" href="#getrules"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRules</h3>
<ul>
<li>description: Get all rules for a detector (paginated) if ruleId and ruleVersion are not specified. Gets all rules for the detector and the ruleId if present (paginated). Gets a specific rule if both the ruleId and the ruleVersion are specified.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "rule": {
        "resource_type": "rule",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getvariables"><a aria-hidden="true" class="anchor-heading" href="#getvariables"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetVariables</h3>
<ul>
<li>description: Gets all of the variables or the specific variable. This is a paginated API. Providing null maxSizePerPage results in retrieving maximum of 100 records per page. If you provide maxSizePerPage the value must be between 50 and 100. To get the next page result, a provide a pagination token from GetVariablesResult as part of your request. Null pagination token fetches the records from the beginning.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "variable": {
        "resource_type": "variable",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Lists all tags associated with the resource. This is a paginated API. To get the next page results, provide the pagination token from the response as part of your request. A null pagination token fetches the records from the beginning.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "detector-version": {
        "resource_type": "detector-version",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "entity-type": {
        "resource_type": "entity-type",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "event-type": {
        "resource_type": "event-type",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "external-model": {
        "resource_type": "external-model",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "label": {
        "resource_type": "label",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "model": {
        "resource_type": "model",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "model-version": {
        "resource_type": "model-version",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "outcome": {
        "resource_type": "outcome",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "rule": {
        "resource_type": "rule",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "variable": {
        "resource_type": "variable",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putdetector"><a aria-hidden="true" class="anchor-heading" href="#putdetector"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutDetector</h3>
<ul>
<li>description: Creates or updates a detector.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putentitytype"><a aria-hidden="true" class="anchor-heading" href="#putentitytype"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutEntityType</h3>
<ul>
<li>description: Creates or updates an entity type. An entity represents who is performing the event. As part of a fraud prediction, you pass the entity ID to indicate the specific entity who performed the event. An entity type classifies the entity. Example classifications include customer, merchant, or account.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "entity-type": {
        "resource_type": "entity-type",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="puteventtype"><a aria-hidden="true" class="anchor-heading" href="#puteventtype"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutEventType</h3>
<ul>
<li>description: Creates or updates an event type. An event is a business activity that is evaluated for fraud risk. With Amazon Fraud Detector, you generate fraud predictions for events. An event type defines the structure for an event sent to Amazon Fraud Detector. This includes the variables sent as part of the event, the entity performing the event (such as a customer), and the labels that classify the event. Example event types include online payment transactions, account registrations, and authentications.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "event-type": {
        "resource_type": "event-type",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putexternalmodel"><a aria-hidden="true" class="anchor-heading" href="#putexternalmodel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutExternalModel</h3>
<ul>
<li>description: Creates or updates an Amazon SageMaker model endpoint. You can also use this action to update the configuration of the model endpoint, including the IAM role and/or the mapped variables.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "external-model": {
        "resource_type": "external-model",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putkmsencryptionkey"><a aria-hidden="true" class="anchor-heading" href="#putkmsencryptionkey"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutKMSEncryptionKey</h3>
<ul>
<li>description: Specifies the Key Management Service (KMS) customer master key (CMK) to be used to encrypt content in Amazon Fraud Detector.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putlabel"><a aria-hidden="true" class="anchor-heading" href="#putlabel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutLabel</h3>
<ul>
<li>description: Creates or updates label. A label classifies an event as fraudulent or legitimate. Labels are associated with event types and used to train supervised machine learning models in Amazon Fraud Detector.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "label": {
        "resource_type": "label",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putoutcome"><a aria-hidden="true" class="anchor-heading" href="#putoutcome"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutOutcome</h3>
<ul>
<li>description: Creates or updates an outcome.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "outcome": {
        "resource_type": "outcome",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Assigns tags to a resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "detector-version": {
        "resource_type": "detector-version",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "entity-type": {
        "resource_type": "entity-type",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "event-type": {
        "resource_type": "event-type",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "external-model": {
        "resource_type": "external-model",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "label": {
        "resource_type": "label",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "model": {
        "resource_type": "model",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "model-version": {
        "resource_type": "model-version",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "outcome": {
        "resource_type": "outcome",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "rule": {
        "resource_type": "rule",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "variable": {
        "resource_type": "variable",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys",
            "aws:RequestTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Removes tags from a resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "detector-version": {
        "resource_type": "detector-version",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "entity-type": {
        "resource_type": "entity-type",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "event-type": {
        "resource_type": "event-type",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "external-model": {
        "resource_type": "external-model",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "label": {
        "resource_type": "label",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "model": {
        "resource_type": "model",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "model-version": {
        "resource_type": "model-version",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "outcome": {
        "resource_type": "outcome",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "rule": {
        "resource_type": "rule",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "variable": {
        "resource_type": "variable",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys",
            "aws:RequestTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatedetectorversion"><a aria-hidden="true" class="anchor-heading" href="#updatedetectorversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateDetectorVersion</h3>
<ul>
<li>description: Updates a detector version. The detector version attributes that you can update include models, external model endpoints, rules, rule execution mode, and description. You can only update a DRAFT detector version.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatedetectorversionmetadata"><a aria-hidden="true" class="anchor-heading" href="#updatedetectorversionmetadata"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateDetectorVersionMetadata</h3>
<ul>
<li>description: Updates the detector version's description. You can update the metadata for any detector version (DRAFT, ACTIVE, or INACTIVE).</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector-version": {
        "resource_type": "detector-version",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatedetectorversionstatus"><a aria-hidden="true" class="anchor-heading" href="#updatedetectorversionstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateDetectorVersionStatus</h3>
<ul>
<li>description: Updates the detector version’s status. You can perform the following promotions or demotions using UpdateDetectorVersionStatus: DRAFT to ACTIVE, ACTIVE to INACTIVE, and INACTIVE to ACTIVE.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector-version": {
        "resource_type": "detector-version",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatemodel"><a aria-hidden="true" class="anchor-heading" href="#updatemodel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateModel</h3>
<ul>
<li>description: Updates a model. You can update the description attribute using this action.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "model": {
        "resource_type": "model",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatemodelversion"><a aria-hidden="true" class="anchor-heading" href="#updatemodelversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateModelVersion</h3>
<ul>
<li>description: Updates a model version. Updating a model version retrains an existing model version using updated training data and produces a new minor version of the model. You can update the training data set location and data access role attributes using this action. This action creates and trains a new minor version of the model, for example version 1.01, 1.02, 1.03.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "model": {
        "resource_type": "model",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatemodelversionstatus"><a aria-hidden="true" class="anchor-heading" href="#updatemodelversionstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateModelVersionStatus</h3>
<ul>
<li>description: Updates the status of a model version.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updaterulemetadata"><a aria-hidden="true" class="anchor-heading" href="#updaterulemetadata"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateRuleMetadata</h3>
<ul>
<li>description: Updates a rule's metadata. The description attribute can be updated.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "rule": {
        "resource_type": "rule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateruleversion"><a aria-hidden="true" class="anchor-heading" href="#updateruleversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateRuleVersion</h3>
<ul>
<li>description: Updates a rule version resulting in a new rule version. Updates a rule version resulting in a new rule version (version 1, 2, 3 ...).</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "rule": {
        "resource_type": "rule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatevariable"><a aria-hidden="true" class="anchor-heading" href="#updatevariable"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateVariable</h3>
<ul>
<li>description: Updates a variable.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "variable": {
        "resource_type": "variable",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Fraud Detector"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/elastic-container-service.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Elastic Container Service - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/elastic-container-service.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/elastic-container-service.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/elastic-container-service.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Elastic Container Service - undefined" />
  <meta name="twitter:title" content="Elastic Container Service - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/1f759d8c-cca7-4fc4-9aa2-6dbf6e596abf.html">Services</a></li><li class="breadcrumb-nav-list-item">Elastic Container Service</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/open-guides/og-aws" target="_blank"> og-aws  </li>
              
              <li> <a href="https://www.awsgeek.com/" target="_blank"> <NAME>  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Elastic Container Service">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <p><img src="/assets/images/Amazon-ECS_en.jpg"></p>
<blockquote>
<p>Image from <a href="https://www.awsgeek.com/Amazon-ECS/">@awsgeek</a></p>
</blockquote>
<h1 id="elastic-container-service"><a aria-hidden="true" class="anchor-heading" href="#elastic-container-service"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Elastic Container Service</h1>
<h3 id="ecs-basics"><a aria-hidden="true" class="anchor-heading" href="#ecs-basics"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ECS Basics</h3>
<ul>
<li>📒 <a href="https://aws.amazon.com/ecs/">Homepage</a> ∙ <a href="http://docs.aws.amazon.com/AmazonECS/latest/developerguide/">Developer guide</a> ∙ <a href="https://aws.amazon.com/ecs/faqs/">FAQ</a> ∙ <a href="https://aws.amazon.com/ecs/pricing/">Pricing</a></li>
<li><strong>ECS</strong> (EC2 Container Service) is a relatively new service (launched end of 2014) that manages clusters of services deployed via Docker.</li>
<li>See the <a href="#containers-and-aws">Containers and AWS</a> section for more context on containers.</li>
<li>ECS is growing in adoption, especially for companies that embrace microservices.</li>
<li>Deploying Docker directly in EC2 yourself is another common approach to using Docker on AWS. Using ECS is not required, and ECS does not (yet) seem to be the predominant way many companies are using Docker on AWS.</li>
<li>It’s also possible to use <a href="http://docs.aws.amazon.com/elasticbeanstalk/latest/dg/create_deploy_docker.html">Elastic Beanstalk with Docker</a>, which is reasonable if you’re already using Elastic Beanstalk.</li>
<li>Using Docker may change the way your services are deployed within EC2 or Elastic Beanstalk, but it does not radically change how most other services are used.</li>
<li><a href="https://aws.amazon.com/ecr/">ECR</a> (EC2 Container Registry) is Amazon’s managed Docker registry service. While simpler than running your own registry, it is missing some features that might be desired by some users:
<ul>
<li>Doesn’t support cross-region replication of images.
<ul>
<li>If you want fast fleet-wide pulls of large images, you’ll need to push your image into a region-local registry.</li>
</ul>
</li>
<li>Doesn’t support custom domains / certificates.</li>
</ul>
</li>
<li>A container’s health is monitored via <a href="#clb">CLB</a> or <a href="#alb">ALB</a>. Those can also be used to address a containerized service. When using an ALB you do not need to handle port contention (i.e. services exposing the same port on the same host) since an ALB’s target groups can be associated with ECS-based services directly.</li>
<li><a href="http://start.jcolemorrison.com/the-hitchhikers-guide-to-aws-ecs-and-docker/">The Hitchhikers Guide to AWS ECS and Docker</a> by <NAME> is an excellent article for Introduction to AWS ECS concepts.</li>
</ul>
<h3 id="ecs-tips"><a aria-hidden="true" class="anchor-heading" href="#ecs-tips"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ECS Tips</h3>
<ul>
<li><strong>Log drivers:</strong> ECS supports multiple log drivers (awslogs, splunk, fluentd, syslog, json, ... ). Use <a href="http://docs.aws.amazon.com/AmazonECS/latest/developerguide/using_awslogs.html"><code>awslogs</code></a> for CloudWatch (make sure a group is made for the logs first). <a href="https://github.com/aws/amazon-ecs-agent/issues/535">Drivers such as fluentd are not enabled by default</a>. You can, install the agent and enable the driver by adding <code>ECS_AVAILABLE_LOGGING_DRIVERS='["awslogs","fluentd"]'</code> to <code>/etc/ecs/ecs.config</code>.</li>
<li><a href="https://convox.com/blog/ecs-challenges">This blog from Convox</a> (and <a href="https://news.ycombinator.com/item?id=11598058">commentary</a>) lists a number of common challenges with ECS as of early 2016.</li>
<li>It is possible to optimize disk clean up on ECS. By default, the unused containers are deleted after 3 hours and the unused images after 30 minutes. These settings can be changed by adding <code>ECS_ENGINE_TASK_CLEANUP_WAIT_DURATION=10m</code> and <code>ECS_IMAGE_CLEANUP_INTERVAL=10m</code> to <code>/etc/ecs/ecs.config</code>. <a href="https://aws.amazon.com/blogs/compute/optimizing-disk-usage-on-amazon-ecs/">More information on optimizing ECS disk cleanup</a>.</li>
</ul>
<h3 id="ecs-alternatives-and-lock-in"><a aria-hidden="true" class="anchor-heading" href="#ecs-alternatives-and-lock-in"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ECS Alternatives and Lock-in</h3>
<ul>
<li><a href="https://kubernetes.io">Kubernetes</a>: Extensive container platform. Available as a hosted solution on Google Cloud (<a href="https://cloud.google.com/container-engine/">https://cloud.google.com/container-engine/</a>) and AWS (<a href="https://tectonic.com/">https://tectonic.com/</a>). AWS has a Kubernetes Quickstart (<a href="https://aws.amazon.com/quickstart/architecture/heptio-kubernetes/">https://aws.amazon.com/quickstart/architecture/heptio-kubernetes/</a>) developed in collaboration with Heptio.</li>
<li><a href="https://www.nomadproject.io/">Nomad</a>: Orchestrator/Scheduler, tightly integrated in the HashiCorp stack (Consul, Vault, etc).</li>
</ul>
<p>🚧 <a href="CONTRIBUTING.md"><em>Please help expand this incomplete section.</em></a></p><span id="navId" data="elastic-container-service"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Elastic MapReduce.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Elastic MapReduce - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Elastic MapReduce.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Elastic MapReduce.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Elastic MapReduce.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Elastic MapReduce - undefined" />
  <meta name="twitter:title" content="Elastic MapReduce - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Elastic MapReduce</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Elastic MapReduce">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="elastic-mapreduce"><a aria-hidden="true" class="anchor-heading" href="#elastic-mapreduce"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Elastic MapReduce</h1>
<ul>
<li>prefix: elasticmapreduce</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="addinstancefleet"><a aria-hidden="true" class="anchor-heading" href="#addinstancefleet"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddInstanceFleet</h3>
<ul>
<li>description: Grants permission to add an instance fleet to a running cluster.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="addinstancegroups"><a aria-hidden="true" class="anchor-heading" href="#addinstancegroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddInstanceGroups</h3>
<ul>
<li>description: Grants permission to add instance groups to a running cluster.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="addjobflowsteps"><a aria-hidden="true" class="anchor-heading" href="#addjobflowsteps"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddJobFlowSteps</h3>
<ul>
<li>description: Grants permission to add new steps to a running cluster.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="addtags"><a aria-hidden="true" class="anchor-heading" href="#addtags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddTags</h3>
<ul>
<li>description: Grants permission to add tags to an Amazon EMR resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "editor": {
        "resource_type": "editor",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "elasticmapreduce:RequestTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="cancelsteps"><a aria-hidden="true" class="anchor-heading" href="#cancelsteps"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CancelSteps</h3>
<ul>
<li>description: Grants permission to cancel a pending step or steps in a running cluster.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createeditor"><a aria-hidden="true" class="anchor-heading" href="#createeditor"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateEditor</h3>
<ul>
<li>description: Grants permission to create an EMR notebook.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "elasticmapreduce:RequestTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createsecurityconfiguration"><a aria-hidden="true" class="anchor-heading" href="#createsecurityconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSecurityConfiguration</h3>
<ul>
<li>description: Grants permission to create a security configuration.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteeditor"><a aria-hidden="true" class="anchor-heading" href="#deleteeditor"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteEditor</h3>
<ul>
<li>description: Grants permission to delete an EMR notebook.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "editor": {
        "resource_type": "editor",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletesecurityconfiguration"><a aria-hidden="true" class="anchor-heading" href="#deletesecurityconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteSecurityConfiguration</h3>
<ul>
<li>description: Grants permission to delete a security configuration.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecluster"><a aria-hidden="true" class="anchor-heading" href="#describecluster"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeCluster</h3>
<ul>
<li>description: Grants permission to get details about a cluster, including status, hardware and software configuration, VPC settings, and so on.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeeditor"><a aria-hidden="true" class="anchor-heading" href="#describeeditor"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEditor</h3>
<ul>
<li>description: Grants permission to view information about a notebook, including status, user, role, tags, location, and more.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "editor": {
        "resource_type": "editor",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describejobflows"><a aria-hidden="true" class="anchor-heading" href="#describejobflows"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeJobFlows</h3>
<ul>
<li>description: This API is deprecated and will eventually be removed. We recommend you use ListClusters, DescribeCluster, ListSteps, ListInstanceGroups and ListBootstrapActions instead.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describesecurityconfiguration"><a aria-hidden="true" class="anchor-heading" href="#describesecurityconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSecurityConfiguration</h3>
<ul>
<li>description: Grants permission to get details of a security configuration.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describestep"><a aria-hidden="true" class="anchor-heading" href="#describestep"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeStep</h3>
<ul>
<li>description: Grants permission to get details about a cluster step.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getblockpublicaccessconfiguration"><a aria-hidden="true" class="anchor-heading" href="#getblockpublicaccessconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBlockPublicAccessConfiguration</h3>
<ul>
<li>description: Grants permission to retrieve the EMR block public access configuration for the AWS account in the Region.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmanagedscalingpolicy"><a aria-hidden="true" class="anchor-heading" href="#getmanagedscalingpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetManagedScalingPolicy</h3>
<ul>
<li>description: Grants permission to retrieve the managed scaling policy associated with a cluster.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listbootstrapactions"><a aria-hidden="true" class="anchor-heading" href="#listbootstrapactions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListBootstrapActions</h3>
<ul>
<li>description: Grants permission to get details about the bootstrap actions associated with a cluster.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listclusters"><a aria-hidden="true" class="anchor-heading" href="#listclusters"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListClusters</h3>
<ul>
<li>description: Grants permission to get the status of accessible clusters.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listeditors"><a aria-hidden="true" class="anchor-heading" href="#listeditors"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListEditors</h3>
<ul>
<li>description: Grants permission to list summary information for accessible EMR notebooks.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listinstancefleets"><a aria-hidden="true" class="anchor-heading" href="#listinstancefleets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListInstanceFleets</h3>
<ul>
<li>description: Grants permission to get details of instance fleets in a cluster.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listinstancegroups"><a aria-hidden="true" class="anchor-heading" href="#listinstancegroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListInstanceGroups</h3>
<ul>
<li>description: Grants permission to get details of instance groups in a cluster.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listinstances"><a aria-hidden="true" class="anchor-heading" href="#listinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListInstances</h3>
<ul>
<li>description: Grants permission to get details about the Amazon EC2 instances in a cluster.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listsecurityconfigurations"><a aria-hidden="true" class="anchor-heading" href="#listsecurityconfigurations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListSecurityConfigurations</h3>
<ul>
<li>description: Grants permission to list available security configurations in this account by name, along with creation dates and times.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="liststeps"><a aria-hidden="true" class="anchor-heading" href="#liststeps"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListSteps</h3>
<ul>
<li>description: Grants permission to list steps associated with a cluster.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifycluster"><a aria-hidden="true" class="anchor-heading" href="#modifycluster"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyCluster</h3>
<ul>
<li>description: Grants permission to change cluster settings such as number of steps that can be executed concurrently for a cluster.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyinstancefleet"><a aria-hidden="true" class="anchor-heading" href="#modifyinstancefleet"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyInstanceFleet</h3>
<ul>
<li>description: Grants permission to change the target On-Demand and target Spot capacities for a instance fleet.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyinstancegroups"><a aria-hidden="true" class="anchor-heading" href="#modifyinstancegroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyInstanceGroups</h3>
<ul>
<li>description: Grants permission to change the number and configuration of EC2 instances for an instance group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="openeditorinconsole"><a aria-hidden="true" class="anchor-heading" href="#openeditorinconsole"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>OpenEditorInConsole</h3>
<ul>
<li>description: Grants permission to launch the Jupyter notebook editor for an EMR notebook from within the console.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "editor": {
        "resource_type": "editor",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putautoscalingpolicy"><a aria-hidden="true" class="anchor-heading" href="#putautoscalingpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutAutoScalingPolicy</h3>
<ul>
<li>description: Grants permission to create or update an automatic scaling policy for a core instance group or task instance group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putblockpublicaccessconfiguration"><a aria-hidden="true" class="anchor-heading" href="#putblockpublicaccessconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutBlockPublicAccessConfiguration</h3>
<ul>
<li>description: Grants permission to create or update the EMR block public access configuration for the AWS account in the Region.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putmanagedscalingpolicy"><a aria-hidden="true" class="anchor-heading" href="#putmanagedscalingpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutManagedScalingPolicy</h3>
<ul>
<li>description: Grants permission to create or update the managed scaling policy associated with a cluster.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="removeautoscalingpolicy"><a aria-hidden="true" class="anchor-heading" href="#removeautoscalingpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemoveAutoScalingPolicy</h3>
<ul>
<li>description: Grants permission to remove an automatic scaling policy from an instance group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="removemanagedscalingpolicy"><a aria-hidden="true" class="anchor-heading" href="#removemanagedscalingpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemoveManagedScalingPolicy</h3>
<ul>
<li>description: Grants permission to remove the managed scaling policy associated with a cluster.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="removetags"><a aria-hidden="true" class="anchor-heading" href="#removetags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemoveTags</h3>
<ul>
<li>description: Grants permission to remove tags from an Amazon EMR resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "editor": {
        "resource_type": "editor",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="runjobflow"><a aria-hidden="true" class="anchor-heading" href="#runjobflow"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RunJobFlow</h3>
<ul>
<li>description: Grants permission to create and launch a cluster (job flow).</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "elasticmapreduce:RequestTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setterminationprotection"><a aria-hidden="true" class="anchor-heading" href="#setterminationprotection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetTerminationProtection</h3>
<ul>
<li>description: Grants permission to add and remove termination protection for a cluster.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="starteditor"><a aria-hidden="true" class="anchor-heading" href="#starteditor"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartEditor</h3>
<ul>
<li>description: Grants permission to start an EMR notebook.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "editor": {
        "resource_type": "editor",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopeditor"><a aria-hidden="true" class="anchor-heading" href="#stopeditor"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopEditor</h3>
<ul>
<li>description: Grants permission to shut down an EMR notebook.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "editor": {
        "resource_type": "editor",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="terminatejobflows"><a aria-hidden="true" class="anchor-heading" href="#terminatejobflows"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TerminateJobFlows</h3>
<ul>
<li>description: Grants permission to terminate a cluster (job flow).</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="vieweventsfromallclustersinconsole"><a aria-hidden="true" class="anchor-heading" href="#vieweventsfromallclustersinconsole"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ViewEventsFromAllClustersInConsole</h3>
<ul>
<li>description: Grants permission to use the EMR management console to view events from all clusters.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Elastic MapReduce"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Directory Service.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Directory Service - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Directory Service.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Directory Service.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Directory Service.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Directory Service - undefined" />
  <meta name="twitter:title" content="Directory Service - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Directory Service</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Directory Service">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="directory-service"><a aria-hidden="true" class="anchor-heading" href="#directory-service"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Directory Service</h1>
<ul>
<li>prefix: ds</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="acceptshareddirectory"><a aria-hidden="true" class="anchor-heading" href="#acceptshareddirectory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AcceptSharedDirectory</h3>
<ul>
<li>description: Accepts a directory sharing request that was sent from the directory owner account.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="addiproutes"><a aria-hidden="true" class="anchor-heading" href="#addiproutes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddIpRoutes</h3>
<ul>
<li>description: Adds a CIDR address block to correctly route traffic to and from your Microsoft AD on Amazon Web Services</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "ec2:AuthorizeSecurityGroupEgress",
            "ec2:AuthorizeSecurityGroupIngress",
            "ec2:DescribeSecurityGroups"
        ]
    }
}
</code></pre>
<h3 id="addtagstoresource"><a aria-hidden="true" class="anchor-heading" href="#addtagstoresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddTagsToResource</h3>
<ul>
<li>description: Adds or overwrites one or more tags for the specified Amazon Directory Services directory.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "ec2:CreateTags"
        ]
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="authorizeapplication"><a aria-hidden="true" class="anchor-heading" href="#authorizeapplication"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AuthorizeApplication</h3>
<ul>
<li>description: Authorizes an application for your AWS Directory.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="cancelschemaextension"><a aria-hidden="true" class="anchor-heading" href="#cancelschemaextension"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CancelSchemaExtension</h3>
<ul>
<li>description: Cancels an in-progress schema extension to a Microsoft AD directory.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="checkalias"><a aria-hidden="true" class="anchor-heading" href="#checkalias"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CheckAlias</h3>
<ul>
<li>description: Verifies that the alias is available for use.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="connectdirectory"><a aria-hidden="true" class="anchor-heading" href="#connectdirectory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ConnectDirectory</h3>
<ul>
<li>description: Creates an AD Connector to connect to an on-premises directory.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": [
            "ec2:AuthorizeSecurityGroupEgress",
            "ec2:AuthorizeSecurityGroupIngress",
            "ec2:CreateNetworkInterface",
            "ec2:CreateSecurityGroup",
            "ec2:CreateTags",
            "ec2:DescribeNetworkInterfaces",
            "ec2:DescribeSubnets",
            "ec2:DescribeVpcs"
        ]
    }
}
</code></pre>
<h3 id="createalias"><a aria-hidden="true" class="anchor-heading" href="#createalias"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateAlias</h3>
<ul>
<li>description: Creates an alias for a directory and assigns the alias to the directory.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createcomputer"><a aria-hidden="true" class="anchor-heading" href="#createcomputer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateComputer</h3>
<ul>
<li>description: Creates a computer account in the specified directory, and joins the computer to the directory.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createconditionalforwarder"><a aria-hidden="true" class="anchor-heading" href="#createconditionalforwarder"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateConditionalForwarder</h3>
<ul>
<li>description: Creates a conditional forwarder associated with your AWS directory.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdirectory"><a aria-hidden="true" class="anchor-heading" href="#createdirectory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDirectory</h3>
<ul>
<li>description: Creates a Simple AD directory.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": [
            "ec2:AuthorizeSecurityGroupEgress",
            "ec2:AuthorizeSecurityGroupIngress",
            "ec2:CreateNetworkInterface",
            "ec2:CreateSecurityGroup",
            "ec2:CreateTags",
            "ec2:DescribeNetworkInterfaces",
            "ec2:DescribeSubnets",
            "ec2:DescribeVpcs"
        ]
    }
}
</code></pre>
<h3 id="createidentitypooldirectory"><a aria-hidden="true" class="anchor-heading" href="#createidentitypooldirectory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateIdentityPoolDirectory</h3>
<ul>
<li>description: Creates a IdentityPool Directory in the AWS cloud.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createlogsubscription"><a aria-hidden="true" class="anchor-heading" href="#createlogsubscription"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateLogSubscription</h3>
<ul>
<li>description: Creates a subscription to forward real time Directory Service domain controller security logs to the specified CloudWatch log group in your AWS account.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createmicrosoftad"><a aria-hidden="true" class="anchor-heading" href="#createmicrosoftad"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateMicrosoftAD</h3>
<ul>
<li>description: Creates a Microsoft AD in the AWS cloud.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": [
            "ec2:AuthorizeSecurityGroupEgress",
            "ec2:AuthorizeSecurityGroupIngress",
            "ec2:CreateNetworkInterface",
            "ec2:CreateSecurityGroup",
            "ec2:CreateTags",
            "ec2:DescribeNetworkInterfaces",
            "ec2:DescribeSubnets",
            "ec2:DescribeVpcs"
        ]
    }
}
</code></pre>
<h3 id="createsnapshot"><a aria-hidden="true" class="anchor-heading" href="#createsnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSnapshot</h3>
<ul>
<li>description: Creates a snapshot of a Simple AD or Microsoft AD directory in the AWS cloud.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtrust"><a aria-hidden="true" class="anchor-heading" href="#createtrust"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTrust</h3>
<ul>
<li>description: Initiates the creation of the AWS side of a trust relationship between a Microsoft AD in the AWS cloud and an external domain.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteconditionalforwarder"><a aria-hidden="true" class="anchor-heading" href="#deleteconditionalforwarder"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteConditionalForwarder</h3>
<ul>
<li>description: Deletes a conditional forwarder that has been set up for your AWS directory.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedirectory"><a aria-hidden="true" class="anchor-heading" href="#deletedirectory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDirectory</h3>
<ul>
<li>description: Deletes an AWS Directory Service directory.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "ec2:DeleteNetworkInterface",
            "ec2:DeleteSecurityGroup",
            "ec2:DescribeNetworkInterfaces",
            "ec2:RevokeSecurityGroupEgress",
            "ec2:RevokeSecurityGroupIngress"
        ]
    }
}
</code></pre>
<h3 id="deletelogsubscription"><a aria-hidden="true" class="anchor-heading" href="#deletelogsubscription"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteLogSubscription</h3>
<ul>
<li>description: Deletes the specified log subscription.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletesnapshot"><a aria-hidden="true" class="anchor-heading" href="#deletesnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteSnapshot</h3>
<ul>
<li>description: Deletes a directory snapshot.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetrust"><a aria-hidden="true" class="anchor-heading" href="#deletetrust"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTrust</h3>
<ul>
<li>description: Deletes an existing trust relationship between your Microsoft AD in the AWS cloud and an external domain.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deregistercertificate"><a aria-hidden="true" class="anchor-heading" href="#deregistercertificate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeregisterCertificate</h3>
<ul>
<li>description: Deletes from the system the certificate that was registered for a secured LDAP connection.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deregistereventtopic"><a aria-hidden="true" class="anchor-heading" href="#deregistereventtopic"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeregisterEventTopic</h3>
<ul>
<li>description: Removes the specified directory as a publisher to the specified SNS topic.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecertificate"><a aria-hidden="true" class="anchor-heading" href="#describecertificate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeCertificate</h3>
<ul>
<li>description: Displays information about the certificate registered for a secured LDAP connection.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeconditionalforwarders"><a aria-hidden="true" class="anchor-heading" href="#describeconditionalforwarders"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeConditionalForwarders</h3>
<ul>
<li>description: Obtains information about the conditional forwarders for this account.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedirectories"><a aria-hidden="true" class="anchor-heading" href="#describedirectories"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDirectories</h3>
<ul>
<li>description: Obtains information about the directories that belong to this account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedomaincontrollers"><a aria-hidden="true" class="anchor-heading" href="#describedomaincontrollers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDomainControllers</h3>
<ul>
<li>description: Provides information about any domain controllers in your directory.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeeventtopics"><a aria-hidden="true" class="anchor-heading" href="#describeeventtopics"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEventTopics</h3>
<ul>
<li>description: Obtains information about which SNS topics receive status messages from the specified directory.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeldapssettings"><a aria-hidden="true" class="anchor-heading" href="#describeldapssettings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeLDAPSSettings</h3>
<ul>
<li>description: Describes the status of LDAP security for the specified directory.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeshareddirectories"><a aria-hidden="true" class="anchor-heading" href="#describeshareddirectories"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSharedDirectories</h3>
<ul>
<li>description: Returns the shared directories in your account.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describesnapshots"><a aria-hidden="true" class="anchor-heading" href="#describesnapshots"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSnapshots</h3>
<ul>
<li>description: Obtains information about the directory snapshots that belong to this account.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetrusts"><a aria-hidden="true" class="anchor-heading" href="#describetrusts"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTrusts</h3>
<ul>
<li>description: Obtains information about the trust relationships for this account.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disableldaps"><a aria-hidden="true" class="anchor-heading" href="#disableldaps"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisableLDAPS</h3>
<ul>
<li>description: Deactivates LDAP secure calls for the specified directory.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disableradius"><a aria-hidden="true" class="anchor-heading" href="#disableradius"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisableRadius</h3>
<ul>
<li>description: Disables multi-factor authentication (MFA) with the Remote Authentication Dial In User Service (RADIUS) server for an AD Connector directory.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disablesso"><a aria-hidden="true" class="anchor-heading" href="#disablesso"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisableSso</h3>
<ul>
<li>description: Disables single-sign on for a directory.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="enableldaps"><a aria-hidden="true" class="anchor-heading" href="#enableldaps"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EnableLDAPS</h3>
<ul>
<li>description: Activates the switch for the specific directory to always use LDAP secure calls.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="enableradius"><a aria-hidden="true" class="anchor-heading" href="#enableradius"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EnableRadius</h3>
<ul>
<li>description: Enables multi-factor authentication (MFA) with the Remote Authentication Dial In User Service (RADIUS) server for an AD Connector directory.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="enablesso"><a aria-hidden="true" class="anchor-heading" href="#enablesso"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EnableSso</h3>
<ul>
<li>description: Enables single-sign on for a directory.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getauthorizedapplicationdetails"><a aria-hidden="true" class="anchor-heading" href="#getauthorizedapplicationdetails"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAuthorizedApplicationDetails</h3>
<ul>
<li>description: </li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdirectorylimits"><a aria-hidden="true" class="anchor-heading" href="#getdirectorylimits"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDirectoryLimits</h3>
<ul>
<li>description: Obtains directory limit information for the current region.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsnapshotlimits"><a aria-hidden="true" class="anchor-heading" href="#getsnapshotlimits"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSnapshotLimits</h3>
<ul>
<li>description: Obtains the manual snapshot limits for a directory.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listauthorizedapplications"><a aria-hidden="true" class="anchor-heading" href="#listauthorizedapplications"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAuthorizedApplications</h3>
<ul>
<li>description: Obtains the aws applications authorized for a directory.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listcertificates"><a aria-hidden="true" class="anchor-heading" href="#listcertificates"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListCertificates</h3>
<ul>
<li>description: For the specified directory, lists all the certificates registered for a secured LDAP connection.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listiproutes"><a aria-hidden="true" class="anchor-heading" href="#listiproutes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListIpRoutes</h3>
<ul>
<li>description: Lists the address blocks that you have added to a directory.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listlogsubscriptions"><a aria-hidden="true" class="anchor-heading" href="#listlogsubscriptions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListLogSubscriptions</h3>
<ul>
<li>description: Lists the active log subscriptions for the AWS account.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listschemaextensions"><a aria-hidden="true" class="anchor-heading" href="#listschemaextensions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListSchemaExtensions</h3>
<ul>
<li>description: Lists all schema extensions applied to a Microsoft AD Directory.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Lists all tags on an Amazon Directory Services directory.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registercertificate"><a aria-hidden="true" class="anchor-heading" href="#registercertificate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterCertificate</h3>
<ul>
<li>description: Registers a certificate for secured LDAP connection.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registereventtopic"><a aria-hidden="true" class="anchor-heading" href="#registereventtopic"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterEventTopic</h3>
<ul>
<li>description: Associates a directory with an SNS topic.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "sns:GetTopicAttributes"
        ]
    }
}
</code></pre>
<h3 id="rejectshareddirectory"><a aria-hidden="true" class="anchor-heading" href="#rejectshareddirectory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RejectSharedDirectory</h3>
<ul>
<li>description: Rejects a directory sharing request that was sent from the directory owner account.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="removeiproutes"><a aria-hidden="true" class="anchor-heading" href="#removeiproutes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemoveIpRoutes</h3>
<ul>
<li>description: Removes IP address blocks from a directory.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="removetagsfromresource"><a aria-hidden="true" class="anchor-heading" href="#removetagsfromresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemoveTagsFromResource</h3>
<ul>
<li>description: Removes tags from an Amazon Directory Services directory.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "ec2:DeleteTags"
        ]
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="resetuserpassword"><a aria-hidden="true" class="anchor-heading" href="#resetuserpassword"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ResetUserPassword</h3>
<ul>
<li>description: Resets the password for any user in your AWS Managed Microsoft AD or Simple AD directory.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="restorefromsnapshot"><a aria-hidden="true" class="anchor-heading" href="#restorefromsnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RestoreFromSnapshot</h3>
<ul>
<li>description: Restores a directory using an existing directory snapshot.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="sharedirectory"><a aria-hidden="true" class="anchor-heading" href="#sharedirectory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ShareDirectory</h3>
<ul>
<li>description: Shares a specified directory in your AWS account (directory owner) with another AWS account (directory consumer). With this operation you can use your directory from any AWS account and from any Amazon VPC within an AWS Region.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startschemaextension"><a aria-hidden="true" class="anchor-heading" href="#startschemaextension"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartSchemaExtension</h3>
<ul>
<li>description: Applies a schema extension to a Microsoft AD directory.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="unauthorizeapplication"><a aria-hidden="true" class="anchor-heading" href="#unauthorizeapplication"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UnauthorizeApplication</h3>
<ul>
<li>description: Unauthorizes an application from your AWS Directory.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="unsharedirectory"><a aria-hidden="true" class="anchor-heading" href="#unsharedirectory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UnshareDirectory</h3>
<ul>
<li>description: Stops the directory sharing between the directory owner and consumer accounts.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateconditionalforwarder"><a aria-hidden="true" class="anchor-heading" href="#updateconditionalforwarder"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateConditionalForwarder</h3>
<ul>
<li>description: Updates a conditional forwarder that has been set up for your AWS directory.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatenumberofdomaincontrollers"><a aria-hidden="true" class="anchor-heading" href="#updatenumberofdomaincontrollers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateNumberOfDomainControllers</h3>
<ul>
<li>description: Adds or removes domain controllers to or from the directory. Based on the difference between current value and new value (provided through this API call), domain controllers will be added or removed. It may take up to 45 minutes for any new domain controllers to become fully active once the requested number of domain controllers is updated. During this time, you cannot make another update request.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateradius"><a aria-hidden="true" class="anchor-heading" href="#updateradius"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateRadius</h3>
<ul>
<li>description: Updates the Remote Authentication Dial In User Service (RADIUS) server information for an AD Connector directory.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatetrust"><a aria-hidden="true" class="anchor-heading" href="#updatetrust"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateTrust</h3>
<ul>
<li>description: Updates the trust that has been set up between your AWS Managed Microsoft AD directory and an on-premises Active Directory.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="verifytrust"><a aria-hidden="true" class="anchor-heading" href="#verifytrust"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>VerifyTrust</h3>
<ul>
<li>description: Verifies a trust relationship between your Microsoft AD in the AWS cloud and an external domain.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "directory": {
        "resource_type": "directory",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Directory Service"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Elemental MediaConnect.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Elemental MediaConnect - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Elemental MediaConnect.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Elemental MediaConnect.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Elemental MediaConnect.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Elemental MediaConnect - undefined" />
  <meta name="twitter:title" content="Elemental MediaConnect - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Elemental MediaConnect</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Elemental MediaConnect">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="elemental-mediaconnect"><a aria-hidden="true" class="anchor-heading" href="#elemental-mediaconnect"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Elemental MediaConnect</h1>
<ul>
<li>prefix: mediaconnect</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="addflowoutputs"><a aria-hidden="true" class="anchor-heading" href="#addflowoutputs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddFlowOutputs</h3>
<ul>
<li>description: Grants permission to add outputs to any flow.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createflow"><a aria-hidden="true" class="anchor-heading" href="#createflow"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateFlow</h3>
<ul>
<li>description: Grants permission to create flows.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteflow"><a aria-hidden="true" class="anchor-heading" href="#deleteflow"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteFlow</h3>
<ul>
<li>description: Grants permission to delete flows.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeflow"><a aria-hidden="true" class="anchor-heading" href="#describeflow"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeFlow</h3>
<ul>
<li>description: Grants permission to display the details of a flow including the flow ARN, name, and Availability Zone, as well as details about the source, outputs, and entitlements.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="grantflowentitlements"><a aria-hidden="true" class="anchor-heading" href="#grantflowentitlements"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GrantFlowEntitlements</h3>
<ul>
<li>description: Grants permission to grant entitlements on any flow.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listentitlements"><a aria-hidden="true" class="anchor-heading" href="#listentitlements"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListEntitlements</h3>
<ul>
<li>description: Grants permission to display a list of all entitlements that have been granted to the account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listflows"><a aria-hidden="true" class="anchor-heading" href="#listflows"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListFlows</h3>
<ul>
<li>description: Grants permission to display a list of flows that are associated with this account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="removeflowoutput"><a aria-hidden="true" class="anchor-heading" href="#removeflowoutput"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemoveFlowOutput</h3>
<ul>
<li>description: Grants permission to remove outputs from any flow.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="revokeflowentitlement"><a aria-hidden="true" class="anchor-heading" href="#revokeflowentitlement"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RevokeFlowEntitlement</h3>
<ul>
<li>description: Grants permission to revoke entitlements on any flow.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startflow"><a aria-hidden="true" class="anchor-heading" href="#startflow"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartFlow</h3>
<ul>
<li>description: Grants permission to start flows.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopflow"><a aria-hidden="true" class="anchor-heading" href="#stopflow"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopFlow</h3>
<ul>
<li>description: Grants permission to stop flows.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateflowentitlement"><a aria-hidden="true" class="anchor-heading" href="#updateflowentitlement"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateFlowEntitlement</h3>
<ul>
<li>description: Grants permission to update entitlements on any flow.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateflowoutput"><a aria-hidden="true" class="anchor-heading" href="#updateflowoutput"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateFlowOutput</h3>
<ul>
<li>description: Grants permission to update outputs on any flow.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateflowsource"><a aria-hidden="true" class="anchor-heading" href="#updateflowsource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateFlowSource</h3>
<ul>
<li>description: Grants permission to update the source of any flow.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Elemental MediaConnect"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Lambda.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Lambda - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Lambda.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Lambda.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Lambda.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Lambda - undefined" />
  <meta name="twitter:title" content="Lambda - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Lambda</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Lambda">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="lambda"><a aria-hidden="true" class="anchor-heading" href="#lambda"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Lambda</h1>
<ul>
<li>prefix: lambda</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="addlayerversionpermission"><a aria-hidden="true" class="anchor-heading" href="#addlayerversionpermission"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddLayerVersionPermission</h3>
<ul>
<li>description: Grants permission to add permissions to the resource-based policy of a version of an AWS Lambda layer</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "layerVersion": {
        "resource_type": "layerVersion",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="addpermission"><a aria-hidden="true" class="anchor-heading" href="#addpermission"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddPermission</h3>
<ul>
<li>description: Grants permission to give an AWS service or another account permission to use an AWS Lambda function</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "function": {
        "resource_type": "function",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "lambda:Principal"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createalias"><a aria-hidden="true" class="anchor-heading" href="#createalias"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateAlias</h3>
<ul>
<li>description: Grants permission to create an alias for a Lambda function version</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "function": {
        "resource_type": "function",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createeventsourcemapping"><a aria-hidden="true" class="anchor-heading" href="#createeventsourcemapping"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateEventSourceMapping</h3>
<ul>
<li>description: Grants permission to create a mapping between an event source and an AWS Lambda function</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "lambda:FunctionArn"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createfunction"><a aria-hidden="true" class="anchor-heading" href="#createfunction"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateFunction</h3>
<ul>
<li>description: Grants permission to create an AWS Lambda function</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "function": {
        "resource_type": "function",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "lambda:Layer",
            "lambda:VpcIds",
            "lambda:SubnetIds",
            "lambda:SecurityGroupIds"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletealias"><a aria-hidden="true" class="anchor-heading" href="#deletealias"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAlias</h3>
<ul>
<li>description: Grants permission to delete an AWS Lambda function alias</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "function": {
        "resource_type": "function",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteeventsourcemapping"><a aria-hidden="true" class="anchor-heading" href="#deleteeventsourcemapping"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteEventSourceMapping</h3>
<ul>
<li>description: Grants permission to delete an AWS Lambda event source mapping</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "eventSourceMapping": {
        "resource_type": "eventSourceMapping",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "lambda:FunctionArn"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletefunction"><a aria-hidden="true" class="anchor-heading" href="#deletefunction"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteFunction</h3>
<ul>
<li>description: Grants permission to delete an AWS Lambda function</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "function": {
        "resource_type": "function",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletefunctionconcurrency"><a aria-hidden="true" class="anchor-heading" href="#deletefunctionconcurrency"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteFunctionConcurrency</h3>
<ul>
<li>description: Grants permission to remove a concurrent execution limit from an AWS Lambda function</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "function": {
        "resource_type": "function",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletefunctioneventinvokeconfig"><a aria-hidden="true" class="anchor-heading" href="#deletefunctioneventinvokeconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteFunctionEventInvokeConfig</h3>
<ul>
<li>description: Grants permission to delete the configuration for asynchronous invocation for an AWS Lambda function, version, or alias</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "function": {
        "resource_type": "function",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletelayerversion"><a aria-hidden="true" class="anchor-heading" href="#deletelayerversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteLayerVersion</h3>
<ul>
<li>description: Grants permission to delete a version of an AWS Lambda layer</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "layerVersion": {
        "resource_type": "layerVersion",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteprovisionedconcurrencyconfig"><a aria-hidden="true" class="anchor-heading" href="#deleteprovisionedconcurrencyconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteProvisionedConcurrencyConfig</h3>
<ul>
<li>description: Grants permission to delete the provisioned concurrency configuration for an AWS Lambda function</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "function alias": {
        "resource_type": "function alias",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "function version": {
        "resource_type": "function version",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disablereplication"><a aria-hidden="true" class="anchor-heading" href="#disablereplication"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisableReplication</h3>
<ul>
<li>description: Grants permission to disable replication for a Lambda@Edge function</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "function": {
        "resource_type": "function",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="enablereplication"><a aria-hidden="true" class="anchor-heading" href="#enablereplication"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EnableReplication</h3>
<ul>
<li>description: Grants permission to enable replication for a Lambda@Edge function</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "function": {
        "resource_type": "function",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getaccountsettings"><a aria-hidden="true" class="anchor-heading" href="#getaccountsettings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAccountSettings</h3>
<ul>
<li>description: Grants permission to view details about an account's limits and usage in an AWS Region</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getalias"><a aria-hidden="true" class="anchor-heading" href="#getalias"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAlias</h3>
<ul>
<li>description: Grants permission to view details about an AWS Lambda function alias</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "function": {
        "resource_type": "function",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="geteventsourcemapping"><a aria-hidden="true" class="anchor-heading" href="#geteventsourcemapping"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetEventSourceMapping</h3>
<ul>
<li>description: Grants permission to view details about an AWS Lambda event source mapping</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "eventSourceMapping": {
        "resource_type": "eventSourceMapping",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "lambda:FunctionArn"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getfunction"><a aria-hidden="true" class="anchor-heading" href="#getfunction"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetFunction</h3>
<ul>
<li>description: Grants permission to view details about an AWS Lambda function</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "function": {
        "resource_type": "function",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getfunctionconcurrency"><a aria-hidden="true" class="anchor-heading" href="#getfunctionconcurrency"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetFunctionConcurrency</h3>
<ul>
<li>description: Grants permission to view details about the reserved concurrency configuration for a function</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "function": {
        "resource_type": "function",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getfunctionconfiguration"><a aria-hidden="true" class="anchor-heading" href="#getfunctionconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetFunctionConfiguration</h3>
<ul>
<li>description: Grants permission to view details about the version-specific settings of an AWS Lambda function or version</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "function": {
        "resource_type": "function",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getfunctioneventinvokeconfig"><a aria-hidden="true" class="anchor-heading" href="#getfunctioneventinvokeconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetFunctionEventInvokeConfig</h3>
<ul>
<li>description: Grants permission to view the configuration for asynchronous invocation for a function, version, or alias</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "function": {
        "resource_type": "function",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getlayerversion"><a aria-hidden="true" class="anchor-heading" href="#getlayerversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetLayerVersion</h3>
<ul>
<li>description: Grants permission to view details about a version of an AWS Lambda layer. Note this action also supports GetLayerVersionByArn API</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "layerVersion": {
        "resource_type": "layerVersion",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getlayerversionpolicy"><a aria-hidden="true" class="anchor-heading" href="#getlayerversionpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetLayerVersionPolicy</h3>
<ul>
<li>description: Grants permission to view the resource-based policy for a version of an AWS Lambda layer</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "layerVersion": {
        "resource_type": "layerVersion",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getpolicy"><a aria-hidden="true" class="anchor-heading" href="#getpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetPolicy</h3>
<ul>
<li>description: Grants permission to view the resource-based policy for an AWS Lambda function, version, or alias</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "function": {
        "resource_type": "function",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getprovisionedconcurrencyconfig"><a aria-hidden="true" class="anchor-heading" href="#getprovisionedconcurrencyconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetProvisionedConcurrencyConfig</h3>
<ul>
<li>description: Grants permission to view the provisioned concurrency configuration for an AWS Lambda function's alias or version</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "function alias": {
        "resource_type": "function alias",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "function version": {
        "resource_type": "function version",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="invokeasync"><a aria-hidden="true" class="anchor-heading" href="#invokeasync"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>InvokeAsync</h3>
<ul>
<li>description: (Deprecated) Grants permission to invoke a function asynchronously</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "function": {
        "resource_type": "function",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="invokefunction"><a aria-hidden="true" class="anchor-heading" href="#invokefunction"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>InvokeFunction</h3>
<ul>
<li>description: Grants permission to invoke an AWS Lambda function</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "function": {
        "resource_type": "function",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listaliases"><a aria-hidden="true" class="anchor-heading" href="#listaliases"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAliases</h3>
<ul>
<li>description: Grants permission to retrieve a list of aliases for an AWS Lambda function</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "function": {
        "resource_type": "function",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listeventsourcemappings"><a aria-hidden="true" class="anchor-heading" href="#listeventsourcemappings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListEventSourceMappings</h3>
<ul>
<li>description: Grants permission to retrieve a list of AWS Lambda event source mappings</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listfunctioneventinvokeconfigs"><a aria-hidden="true" class="anchor-heading" href="#listfunctioneventinvokeconfigs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListFunctionEventInvokeConfigs</h3>
<ul>
<li>description: Grants permission to retrieve a list of configurations for asynchronous invocation for a function</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "function": {
        "resource_type": "function",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listfunctions"><a aria-hidden="true" class="anchor-heading" href="#listfunctions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListFunctions</h3>
<ul>
<li>description: Grants permission to retrieve a list of AWS Lambda functions, with the version-specific configuration of each function</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listlayerversions"><a aria-hidden="true" class="anchor-heading" href="#listlayerversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListLayerVersions</h3>
<ul>
<li>description: Grants permission to retrieve a list of versions of an AWS Lambda layer</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listlayers"><a aria-hidden="true" class="anchor-heading" href="#listlayers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListLayers</h3>
<ul>
<li>description: Grants permission to retrieve a list of AWS Lambda layers, with details about the latest version of each layer</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listprovisionedconcurrencyconfigs"><a aria-hidden="true" class="anchor-heading" href="#listprovisionedconcurrencyconfigs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListProvisionedConcurrencyConfigs</h3>
<ul>
<li>description: Grants permission to retrieve a list of provisioned concurrency configurations for an AWS Lambda function</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "function": {
        "resource_type": "function",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtags"><a aria-hidden="true" class="anchor-heading" href="#listtags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTags</h3>
<ul>
<li>description: Grants permission to retrieve a list of tags for an AWS Lambda function</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "function": {
        "resource_type": "function",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listversionsbyfunction"><a aria-hidden="true" class="anchor-heading" href="#listversionsbyfunction"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListVersionsByFunction</h3>
<ul>
<li>description: Grants permission to retrieve a list of versions for an AWS Lambda function</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "function": {
        "resource_type": "function",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="publishlayerversion"><a aria-hidden="true" class="anchor-heading" href="#publishlayerversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PublishLayerVersion</h3>
<ul>
<li>description: Grants permission to create an AWS Lambda layer</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "layer": {
        "resource_type": "layer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="publishversion"><a aria-hidden="true" class="anchor-heading" href="#publishversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PublishVersion</h3>
<ul>
<li>description: Grants permission to create an AWS Lambda function version</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "function": {
        "resource_type": "function",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putfunctionconcurrency"><a aria-hidden="true" class="anchor-heading" href="#putfunctionconcurrency"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutFunctionConcurrency</h3>
<ul>
<li>description: Grants permission to configure reserved concurrency for an AWS Lambda function</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "function": {
        "resource_type": "function",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putfunctioneventinvokeconfig"><a aria-hidden="true" class="anchor-heading" href="#putfunctioneventinvokeconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutFunctionEventInvokeConfig</h3>
<ul>
<li>description: Grants permission to configures options for asynchronous invocation on an AWS Lambda function, version, or alias</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "function": {
        "resource_type": "function",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putprovisionedconcurrencyconfig"><a aria-hidden="true" class="anchor-heading" href="#putprovisionedconcurrencyconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutProvisionedConcurrencyConfig</h3>
<ul>
<li>description: Grants permission to configure provisioned concurrency for an AWS Lambda function's alias or version</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "function alias": {
        "resource_type": "function alias",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "function version": {
        "resource_type": "function version",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="removelayerversionpermission"><a aria-hidden="true" class="anchor-heading" href="#removelayerversionpermission"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemoveLayerVersionPermission</h3>
<ul>
<li>description: Grants permission to remove a statement from the permissions policy for a version of an AWS Lambda layer</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "layerVersion": {
        "resource_type": "layerVersion",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="removepermission"><a aria-hidden="true" class="anchor-heading" href="#removepermission"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemovePermission</h3>
<ul>
<li>description: Grants permission to revoke function-use permission from an AWS service or another account</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "function": {
        "resource_type": "function",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "lambda:Principal"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Grants permission to add tags to an AWS Lambda function</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "function": {
        "resource_type": "function",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Grants permission to remove tags from an AWS Lambda function</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "function": {
        "resource_type": "function",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatealias"><a aria-hidden="true" class="anchor-heading" href="#updatealias"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateAlias</h3>
<ul>
<li>description: Grants permission to update the configuration of an AWS Lambda function's alias</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "function": {
        "resource_type": "function",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateeventsourcemapping"><a aria-hidden="true" class="anchor-heading" href="#updateeventsourcemapping"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateEventSourceMapping</h3>
<ul>
<li>description: Grants permission to update the configuration of an AWS Lambda event source mapping</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "eventSourceMapping": {
        "resource_type": "eventSourceMapping",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "lambda:FunctionArn"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatefunctioncode"><a aria-hidden="true" class="anchor-heading" href="#updatefunctioncode"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateFunctionCode</h3>
<ul>
<li>description: Grants permission to update the code of an AWS Lambda function</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "function": {
        "resource_type": "function",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatefunctionconfiguration"><a aria-hidden="true" class="anchor-heading" href="#updatefunctionconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateFunctionConfiguration</h3>
<ul>
<li>description: Grants permission to modify the version-specific settings of an AWS Lambda function</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "function": {
        "resource_type": "function",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "lambda:Layer",
            "lambda:VpcIds",
            "lambda:SubnetIds",
            "lambda:SecurityGroupIds"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatefunctioneventinvokeconfig"><a aria-hidden="true" class="anchor-heading" href="#updatefunctioneventinvokeconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateFunctionEventInvokeConfig</h3>
<ul>
<li>description: Grants permission to modify the configuration for asynchronous invocation for an AWS Lambda function, version, or alias</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "function": {
        "resource_type": "function",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Lambda"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-RDS.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>RDS - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-RDS.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-RDS.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-RDS.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="RDS - undefined" />
  <meta name="twitter:title" content="RDS - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">RDS</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="RDS">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="rds"><a aria-hidden="true" class="anchor-heading" href="#rds"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RDS</h1>
<ul>
<li>prefix: rds</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="addroletodbcluster"><a aria-hidden="true" class="anchor-heading" href="#addroletodbcluster"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddRoleToDBCluster</h3>
<ul>
<li>description: Grants permission to associate an Identity and Access Management (IAM) role from an Aurora DB cluster</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    }
}
</code></pre>
<h3 id="addroletodbinstance"><a aria-hidden="true" class="anchor-heading" href="#addroletodbinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddRoleToDBInstance</h3>
<ul>
<li>description: Grants permission to associate an AWS Identity and Access Management (IAM) role with a DB instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "db": {
        "resource_type": "db",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    }
}
</code></pre>
<h3 id="addsourceidentifiertosubscription"><a aria-hidden="true" class="anchor-heading" href="#addsourceidentifiertosubscription"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddSourceIdentifierToSubscription</h3>
<ul>
<li>description: Grants permission to add a source identifier to an existing RDS event notification subscription</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "es": {
        "resource_type": "es",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="addtagstoresource"><a aria-hidden="true" class="anchor-heading" href="#addtagstoresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddTagsToResource</h3>
<ul>
<li>description: Grants permission to add metadata tags to an Amazon RDS resource</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "db": {
        "resource_type": "db",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "es": {
        "resource_type": "es",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "og": {
        "resource_type": "og",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "pg": {
        "resource_type": "pg",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "proxy": {
        "resource_type": "proxy",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "ri": {
        "resource_type": "ri",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "secgrp": {
        "resource_type": "secgrp",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "snapshot": {
        "resource_type": "snapshot",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "subgrp": {
        "resource_type": "subgrp",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "target-group": {
        "resource_type": "target-group",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "rds:req-tag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="applypendingmaintenanceaction"><a aria-hidden="true" class="anchor-heading" href="#applypendingmaintenanceaction"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ApplyPendingMaintenanceAction</h3>
<ul>
<li>description: Grants permission to apply a pending maintenance action to a resource</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "db": {
        "resource_type": "db",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="authorizedbsecuritygroupingress"><a aria-hidden="true" class="anchor-heading" href="#authorizedbsecuritygroupingress"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AuthorizeDBSecurityGroupIngress</h3>
<ul>
<li>description: Grants permission to enable ingress to a DBSecurityGroup using one of two forms of authorization</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "secgrp": {
        "resource_type": "secgrp",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="backtrackdbcluster"><a aria-hidden="true" class="anchor-heading" href="#backtrackdbcluster"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BacktrackDBCluster</h3>
<ul>
<li>description: Grants permission to backtrack a DB cluster to a specific time, without creating a new DB cluster</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="cancelexporttask"><a aria-hidden="true" class="anchor-heading" href="#cancelexporttask"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CancelExportTask</h3>
<ul>
<li>description: Grants permission to cancel an export task in progress</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="copydbclusterparametergroup"><a aria-hidden="true" class="anchor-heading" href="#copydbclusterparametergroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CopyDBClusterParameterGroup</h3>
<ul>
<li>description: Grants permission to copy the specified DB cluster parameter group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster-pg": {
        "resource_type": "cluster-pg",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="copydbclustersnapshot"><a aria-hidden="true" class="anchor-heading" href="#copydbclustersnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CopyDBClusterSnapshot</h3>
<ul>
<li>description: Grants permission to create a snapshot of a DB cluster</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster-snapshot": {
        "resource_type": "cluster-snapshot",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="copydbparametergroup"><a aria-hidden="true" class="anchor-heading" href="#copydbparametergroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CopyDBParameterGroup</h3>
<ul>
<li>description: Grants permission to copy the specified DB parameter group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "pg": {
        "resource_type": "pg",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="copydbsnapshot"><a aria-hidden="true" class="anchor-heading" href="#copydbsnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CopyDBSnapshot</h3>
<ul>
<li>description: Grants permission to copy the specified DB snapshot</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "snapshot": {
        "resource_type": "snapshot",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="copyoptiongroup"><a aria-hidden="true" class="anchor-heading" href="#copyoptiongroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CopyOptionGroup</h3>
<ul>
<li>description: Grants permission to copy the specified option group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "og": {
        "resource_type": "og",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdbcluster"><a aria-hidden="true" class="anchor-heading" href="#createdbcluster"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDBCluster</h3>
<ul>
<li>description: Grants permission to create a new Amazon Aurora DB cluster</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    },
    "cluster-pg": {
        "resource_type": "cluster-pg",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "og": {
        "resource_type": "og",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "subgrp": {
        "resource_type": "subgrp",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "rds:req-tag/${TagKey}",
            "rds:DatabaseEngine",
            "rds:DatabaseName",
            "rds:StorageEncrypted"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdbclusterendpoint"><a aria-hidden="true" class="anchor-heading" href="#createdbclusterendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDBClusterEndpoint</h3>
<ul>
<li>description: Grants permission to create a new custom endpoint and associates it with an Amazon Aurora DB cluster</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "cluster-endpoint": {
        "resource_type": "cluster-endpoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "rds:EndpointType",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdbclusterparametergroup"><a aria-hidden="true" class="anchor-heading" href="#createdbclusterparametergroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDBClusterParameterGroup</h3>
<ul>
<li>description: Grants permission to create a new DB cluster parameter group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster-pg": {
        "resource_type": "cluster-pg",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "rds:req-tag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdbclustersnapshot"><a aria-hidden="true" class="anchor-heading" href="#createdbclustersnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDBClusterSnapshot</h3>
<ul>
<li>description: Grants permission to create a snapshot of a DB cluster</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "cluster-snapshot": {
        "resource_type": "cluster-snapshot",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "rds:req-tag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdbinstance"><a aria-hidden="true" class="anchor-heading" href="#createdbinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDBInstance</h3>
<ul>
<li>description: Grants permission to create a new DB instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "db": {
        "resource_type": "db",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    },
    "og": {
        "resource_type": "og",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "pg": {
        "resource_type": "pg",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "secgrp": {
        "resource_type": "secgrp",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "subgrp": {
        "resource_type": "subgrp",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "rds:req-tag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdbinstancereadreplica"><a aria-hidden="true" class="anchor-heading" href="#createdbinstancereadreplica"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDBInstanceReadReplica</h3>
<ul>
<li>description: Grants permission to create a DB instance that acts as a Read Replica of a source DB instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "db": {
        "resource_type": "db",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    },
    "og": {
        "resource_type": "og",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "subgrp": {
        "resource_type": "subgrp",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "rds:req-tag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdbparametergroup"><a aria-hidden="true" class="anchor-heading" href="#createdbparametergroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDBParameterGroup</h3>
<ul>
<li>description: Grants permission to create a new DB parameter group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "pg": {
        "resource_type": "pg",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "rds:req-tag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdbproxy"><a aria-hidden="true" class="anchor-heading" href="#createdbproxy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDBProxy</h3>
<ul>
<li>description: Grants permission to create a database proxy</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": [
            "iam:PassRole"
        ]
    }
}
</code></pre>
<h3 id="createdbsecuritygroup"><a aria-hidden="true" class="anchor-heading" href="#createdbsecuritygroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDBSecurityGroup</h3>
<ul>
<li>description: Grants permission to create a new DB security group. DB security groups control access to a DB instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "secgrp": {
        "resource_type": "secgrp",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "rds:req-tag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdbsnapshot"><a aria-hidden="true" class="anchor-heading" href="#createdbsnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDBSnapshot</h3>
<ul>
<li>description: Grants permission to create a DBSnapshot</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "db": {
        "resource_type": "db",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "snapshot": {
        "resource_type": "snapshot",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "rds:req-tag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdbsubnetgroup"><a aria-hidden="true" class="anchor-heading" href="#createdbsubnetgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDBSubnetGroup</h3>
<ul>
<li>description: Grants permission to create a new DB subnet group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "subgrp": {
        "resource_type": "subgrp",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "rds:req-tag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createeventsubscription"><a aria-hidden="true" class="anchor-heading" href="#createeventsubscription"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateEventSubscription</h3>
<ul>
<li>description: Grants permission to create an RDS event notification subscription</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "es": {
        "resource_type": "es",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "rds:req-tag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createglobalcluster"><a aria-hidden="true" class="anchor-heading" href="#createglobalcluster"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateGlobalCluster</h3>
<ul>
<li>description: Grants permission to create an Aurora global database spread across multiple regions</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "global-cluster": {
        "resource_type": "global-cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createoptiongroup"><a aria-hidden="true" class="anchor-heading" href="#createoptiongroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateOptionGroup</h3>
<ul>
<li>description: Grants permission to create a new option group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "og": {
        "resource_type": "og",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "rds:req-tag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedbcluster"><a aria-hidden="true" class="anchor-heading" href="#deletedbcluster"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDBCluster</h3>
<ul>
<li>description: Grants permission to delete a previously provisioned DB cluster</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "cluster-snapshot": {
        "resource_type": "cluster-snapshot",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedbclusterendpoint"><a aria-hidden="true" class="anchor-heading" href="#deletedbclusterendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDBClusterEndpoint</h3>
<ul>
<li>description: Grants permission to delete a custom endpoint and removes it from an Amazon Aurora DB cluster</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster-endpoint": {
        "resource_type": "cluster-endpoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedbclusterparametergroup"><a aria-hidden="true" class="anchor-heading" href="#deletedbclusterparametergroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDBClusterParameterGroup</h3>
<ul>
<li>description: Grants permission to delete a specified DB cluster parameter group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster-pg": {
        "resource_type": "cluster-pg",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedbclustersnapshot"><a aria-hidden="true" class="anchor-heading" href="#deletedbclustersnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDBClusterSnapshot</h3>
<ul>
<li>description: Grants permission to delete a DB cluster snapshot</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster-snapshot": {
        "resource_type": "cluster-snapshot",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedbinstance"><a aria-hidden="true" class="anchor-heading" href="#deletedbinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDBInstance</h3>
<ul>
<li>description: Grants permission to delete a previously provisioned DB instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "db": {
        "resource_type": "db",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedbinstanceautomatedbackup"><a aria-hidden="true" class="anchor-heading" href="#deletedbinstanceautomatedbackup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDBInstanceAutomatedBackup</h3>
<ul>
<li>description: Grants permission to deletes automated backups based on the source instance's DbiResourceId value or the restorable instance's resource ID</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedbparametergroup"><a aria-hidden="true" class="anchor-heading" href="#deletedbparametergroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDBParameterGroup</h3>
<ul>
<li>description: Grants permission to delete a specified DBParameterGroup</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "pg": {
        "resource_type": "pg",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedbproxy"><a aria-hidden="true" class="anchor-heading" href="#deletedbproxy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDBProxy</h3>
<ul>
<li>description: Grants permission to delete a database proxy</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "proxy": {
        "resource_type": "proxy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedbsecuritygroup"><a aria-hidden="true" class="anchor-heading" href="#deletedbsecuritygroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDBSecurityGroup</h3>
<ul>
<li>description: Grants permission to delete a DB security group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "secgrp": {
        "resource_type": "secgrp",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedbsnapshot"><a aria-hidden="true" class="anchor-heading" href="#deletedbsnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDBSnapshot</h3>
<ul>
<li>description: Grants permission to delete a DBSnapshot</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "snapshot": {
        "resource_type": "snapshot",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedbsubnetgroup"><a aria-hidden="true" class="anchor-heading" href="#deletedbsubnetgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDBSubnetGroup</h3>
<ul>
<li>description: Grants permission to delete a DB subnet group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "subgrp": {
        "resource_type": "subgrp",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteeventsubscription"><a aria-hidden="true" class="anchor-heading" href="#deleteeventsubscription"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteEventSubscription</h3>
<ul>
<li>description: Grants permission to delete an RDS event notification subscription</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "es": {
        "resource_type": "es",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteglobalcluster"><a aria-hidden="true" class="anchor-heading" href="#deleteglobalcluster"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteGlobalCluster</h3>
<ul>
<li>description: Grants permission to delete a global database cluster</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "global-cluster": {
        "resource_type": "global-cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteoptiongroup"><a aria-hidden="true" class="anchor-heading" href="#deleteoptiongroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteOptionGroup</h3>
<ul>
<li>description: Grants permission to delete an existing option group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "og": {
        "resource_type": "og",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deregisterdbproxytargets"><a aria-hidden="true" class="anchor-heading" href="#deregisterdbproxytargets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeregisterDBProxyTargets</h3>
<ul>
<li>description: Grants permission to remove targets from a database proxy target group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "db": {
        "resource_type": "db",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "proxy": {
        "resource_type": "proxy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "target-group": {
        "resource_type": "target-group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeaccountattributes"><a aria-hidden="true" class="anchor-heading" href="#describeaccountattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAccountAttributes</h3>
<ul>
<li>description: Grants permission to list all of the attributes for a customer account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecertificates"><a aria-hidden="true" class="anchor-heading" href="#describecertificates"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeCertificates</h3>
<ul>
<li>description: Lists the set of CA certificates provided by Amazon RDS for this AWS account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedbclusterbacktracks"><a aria-hidden="true" class="anchor-heading" href="#describedbclusterbacktracks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDBClusterBacktracks</h3>
<ul>
<li>description: Grants permission to return information about backtracks for a DB cluster</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedbclusterendpoints"><a aria-hidden="true" class="anchor-heading" href="#describedbclusterendpoints"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDBClusterEndpoints</h3>
<ul>
<li>description: Grants permission to return information about endpoints for an Amazon Aurora DB cluster</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster-endpoint": {
        "resource_type": "cluster-endpoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "cluster": {
        "resource_type": "cluster",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedbclusterparametergroups"><a aria-hidden="true" class="anchor-heading" href="#describedbclusterparametergroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDBClusterParameterGroups</h3>
<ul>
<li>description: Grants permission to return a list of DBClusterParameterGroup descriptions</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster-pg": {
        "resource_type": "cluster-pg",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedbclusterparameters"><a aria-hidden="true" class="anchor-heading" href="#describedbclusterparameters"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDBClusterParameters</h3>
<ul>
<li>description: Grants permission to return the detailed parameter list for a particular DB cluster parameter group</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster-pg": {
        "resource_type": "cluster-pg",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedbclustersnapshotattributes"><a aria-hidden="true" class="anchor-heading" href="#describedbclustersnapshotattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDBClusterSnapshotAttributes</h3>
<ul>
<li>description: Grants permission to return a list of DB cluster snapshot attribute names and values for a manual DB cluster snapshot</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster-snapshot": {
        "resource_type": "cluster-snapshot",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedbclustersnapshots"><a aria-hidden="true" class="anchor-heading" href="#describedbclustersnapshots"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDBClusterSnapshots</h3>
<ul>
<li>description: Grants permission to return information about DB cluster snapshots</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster-snapshot": {
        "resource_type": "cluster-snapshot",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedbclusters"><a aria-hidden="true" class="anchor-heading" href="#describedbclusters"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDBClusters</h3>
<ul>
<li>description: Grants permission to return information about provisioned Aurora DB clusters</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedbengineversions"><a aria-hidden="true" class="anchor-heading" href="#describedbengineversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDBEngineVersions</h3>
<ul>
<li>description: Grants permission to return a list of the available DB engines</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedbinstanceautomatedbackups"><a aria-hidden="true" class="anchor-heading" href="#describedbinstanceautomatedbackups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDBInstanceAutomatedBackups</h3>
<ul>
<li>description: Grants permission to return a list of automated backups for both current and deleted instances</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "db": {
        "resource_type": "db",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedbinstances"><a aria-hidden="true" class="anchor-heading" href="#describedbinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDBInstances</h3>
<ul>
<li>description: Grants permission to return information about provisioned RDS instances</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "db": {
        "resource_type": "db",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedblogfiles"><a aria-hidden="true" class="anchor-heading" href="#describedblogfiles"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDBLogFiles</h3>
<ul>
<li>description: Grants permission to return a list of DB log files for the DB instance</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "db": {
        "resource_type": "db",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedbparametergroups"><a aria-hidden="true" class="anchor-heading" href="#describedbparametergroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDBParameterGroups</h3>
<ul>
<li>description: Grants permission to return a list of DBParameterGroup descriptions</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "pg": {
        "resource_type": "pg",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedbparameters"><a aria-hidden="true" class="anchor-heading" href="#describedbparameters"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDBParameters</h3>
<ul>
<li>description: Grants permission to return the detailed parameter list for a particular DB parameter group</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "pg": {
        "resource_type": "pg",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedbproxies"><a aria-hidden="true" class="anchor-heading" href="#describedbproxies"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDBProxies</h3>
<ul>
<li>description: Grants permission to view proxies</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "proxy": {
        "resource_type": "proxy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedbproxytargetgroups"><a aria-hidden="true" class="anchor-heading" href="#describedbproxytargetgroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDBProxyTargetGroups</h3>
<ul>
<li>description: Grants permission to view database proxy target group details</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "proxy": {
        "resource_type": "proxy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedbproxytargets"><a aria-hidden="true" class="anchor-heading" href="#describedbproxytargets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDBProxyTargets</h3>
<ul>
<li>description: Grants permission to view database proxy target details</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "db": {
        "resource_type": "db",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "proxy": {
        "resource_type": "proxy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "target-group": {
        "resource_type": "target-group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedbsecuritygroups"><a aria-hidden="true" class="anchor-heading" href="#describedbsecuritygroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDBSecurityGroups</h3>
<ul>
<li>description: Grants permission to return a list of DBSecurityGroup descriptions</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "secgrp": {
        "resource_type": "secgrp",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedbsnapshotattributes"><a aria-hidden="true" class="anchor-heading" href="#describedbsnapshotattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDBSnapshotAttributes</h3>
<ul>
<li>description: Grants permission to return a list of DB snapshot attribute names and values for a manual DB snapshot</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "snapshot": {
        "resource_type": "snapshot",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedbsnapshots"><a aria-hidden="true" class="anchor-heading" href="#describedbsnapshots"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDBSnapshots</h3>
<ul>
<li>description: Grants permission to return information about DB snapshots</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "snapshot": {
        "resource_type": "snapshot",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "db": {
        "resource_type": "db",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedbsubnetgroups"><a aria-hidden="true" class="anchor-heading" href="#describedbsubnetgroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDBSubnetGroups</h3>
<ul>
<li>description: Grants permission to return a list of DBSubnetGroup descriptions</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "subgrp": {
        "resource_type": "subgrp",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeenginedefaultclusterparameters"><a aria-hidden="true" class="anchor-heading" href="#describeenginedefaultclusterparameters"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEngineDefaultClusterParameters</h3>
<ul>
<li>description: Grants permission to return the default engine and system parameter information for the cluster database engine</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeenginedefaultparameters"><a aria-hidden="true" class="anchor-heading" href="#describeenginedefaultparameters"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEngineDefaultParameters</h3>
<ul>
<li>description: Grants permission to return the default engine and system parameter information for the specified database engine</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeeventcategories"><a aria-hidden="true" class="anchor-heading" href="#describeeventcategories"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEventCategories</h3>
<ul>
<li>description: Grants permission to display a list of categories for all event source types, or, if specified, for a specified source type</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeeventsubscriptions"><a aria-hidden="true" class="anchor-heading" href="#describeeventsubscriptions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEventSubscriptions</h3>
<ul>
<li>description: Grants permission to list all the subscription descriptions for a customer account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "es": {
        "resource_type": "es",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeevents"><a aria-hidden="true" class="anchor-heading" href="#describeevents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEvents</h3>
<ul>
<li>description: Grants permission to return events related to DB instances, DB security groups, DB snapshots, and DB parameter groups for the past 14 days</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeexporttasks"><a aria-hidden="true" class="anchor-heading" href="#describeexporttasks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeExportTasks</h3>
<ul>
<li>description: Grants permission to return information about the export tasks</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeglobalclusters"><a aria-hidden="true" class="anchor-heading" href="#describeglobalclusters"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeGlobalClusters</h3>
<ul>
<li>description: Grants permission to return information about Aurora global database clusters</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "global-cluster": {
        "resource_type": "global-cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeoptiongroupoptions"><a aria-hidden="true" class="anchor-heading" href="#describeoptiongroupoptions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeOptionGroupOptions</h3>
<ul>
<li>description: Grants permission to describe all available options</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "og": {
        "resource_type": "og",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeoptiongroups"><a aria-hidden="true" class="anchor-heading" href="#describeoptiongroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeOptionGroups</h3>
<ul>
<li>description: Grants permission to describe the available option groups</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "og": {
        "resource_type": "og",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeorderabledbinstanceoptions"><a aria-hidden="true" class="anchor-heading" href="#describeorderabledbinstanceoptions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeOrderableDBInstanceOptions</h3>
<ul>
<li>description: Grants permission to return a list of orderable DB instance options for the specified engine</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describependingmaintenanceactions"><a aria-hidden="true" class="anchor-heading" href="#describependingmaintenanceactions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribePendingMaintenanceActions</h3>
<ul>
<li>description: Grants permission to return a list of resources (for example, DB instances) that have at least one pending maintenance action</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "db": {
        "resource_type": "db",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describereserveddbinstances"><a aria-hidden="true" class="anchor-heading" href="#describereserveddbinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeReservedDBInstances</h3>
<ul>
<li>description: Grants permission to return information about reserved DB instances for this account, or about a specified reserved DB instance</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ri": {
        "resource_type": "ri",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describereserveddbinstancesofferings"><a aria-hidden="true" class="anchor-heading" href="#describereserveddbinstancesofferings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeReservedDBInstancesOfferings</h3>
<ul>
<li>description: Grants permission to list available reserved DB instance offerings</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describesourceregions"><a aria-hidden="true" class="anchor-heading" href="#describesourceregions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSourceRegions</h3>
<ul>
<li>description: Grants permission to return a list of the source AWS Regions where the current AWS Region can create a Read Replica or copy a DB snapshot from</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describevaliddbinstancemodifications"><a aria-hidden="true" class="anchor-heading" href="#describevaliddbinstancemodifications"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeValidDBInstanceModifications</h3>
<ul>
<li>description: Grants permission to list available modifications you can make to your DB instance</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "db": {
        "resource_type": "db",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="downloaddblogfileportion"><a aria-hidden="true" class="anchor-heading" href="#downloaddblogfileportion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DownloadDBLogFilePortion</h3>
<ul>
<li>description: Grants permission to download all or a portion of the specified log file, up to 1 MB in size</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "db": {
        "resource_type": "db",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="failoverdbcluster"><a aria-hidden="true" class="anchor-heading" href="#failoverdbcluster"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>FailoverDBCluster</h3>
<ul>
<li>description: Grants permission to force a failover for a DB cluster</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Grants permission to list all tags on an Amazon RDS resource</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "db": {
        "resource_type": "db",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "es": {
        "resource_type": "es",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "og": {
        "resource_type": "og",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "pg": {
        "resource_type": "pg",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "proxy": {
        "resource_type": "proxy",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "ri": {
        "resource_type": "ri",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "secgrp": {
        "resource_type": "secgrp",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "snapshot": {
        "resource_type": "snapshot",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "subgrp": {
        "resource_type": "subgrp",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "target-group": {
        "resource_type": "target-group",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifycurrentdbclustercapacity"><a aria-hidden="true" class="anchor-heading" href="#modifycurrentdbclustercapacity"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyCurrentDBClusterCapacity</h3>
<ul>
<li>description: Grants permission to modify current cluster capacity for an Amazon Aurora Severless DB cluster</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifydbcluster"><a aria-hidden="true" class="anchor-heading" href="#modifydbcluster"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyDBCluster</h3>
<ul>
<li>description: Grants permission to modify a setting for an Amazon Aurora DB cluster</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    },
    "cluster-pg": {
        "resource_type": "cluster-pg",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "og": {
        "resource_type": "og",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifydbclusterendpoint"><a aria-hidden="true" class="anchor-heading" href="#modifydbclusterendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyDBClusterEndpoint</h3>
<ul>
<li>description: Grants permission to modify the properties of an endpoint in an Amazon Aurora DB cluster</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster-endpoint": {
        "resource_type": "cluster-endpoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifydbclusterparametergroup"><a aria-hidden="true" class="anchor-heading" href="#modifydbclusterparametergroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyDBClusterParameterGroup</h3>
<ul>
<li>description: Grants permission to modify the parameters of a DB cluster parameter group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster-pg": {
        "resource_type": "cluster-pg",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifydbclustersnapshotattribute"><a aria-hidden="true" class="anchor-heading" href="#modifydbclustersnapshotattribute"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyDBClusterSnapshotAttribute</h3>
<ul>
<li>description: Grants permission to add an attribute and values to, or removes an attribute and values from, a manual DB cluster snapshot</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster-snapshot": {
        "resource_type": "cluster-snapshot",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifydbinstance"><a aria-hidden="true" class="anchor-heading" href="#modifydbinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyDBInstance</h3>
<ul>
<li>description: Grants permission to modify settings for a DB instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "db": {
        "resource_type": "db",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    },
    "og": {
        "resource_type": "og",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "pg": {
        "resource_type": "pg",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "secgrp": {
        "resource_type": "secgrp",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifydbparametergroup"><a aria-hidden="true" class="anchor-heading" href="#modifydbparametergroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyDBParameterGroup</h3>
<ul>
<li>description: Grants permission to modify the parameters of a DB parameter group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "pg": {
        "resource_type": "pg",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifydbproxy"><a aria-hidden="true" class="anchor-heading" href="#modifydbproxy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyDBProxy</h3>
<ul>
<li>description: Grants permission to modify database proxy</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "proxy": {
        "resource_type": "proxy",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    }
}
</code></pre>
<h3 id="modifydbproxytargetgroup"><a aria-hidden="true" class="anchor-heading" href="#modifydbproxytargetgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyDBProxyTargetGroup</h3>
<ul>
<li>description: Grants permission to modify target group for a database proxy</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "target-group": {
        "resource_type": "target-group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifydbsnapshot"><a aria-hidden="true" class="anchor-heading" href="#modifydbsnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyDBSnapshot</h3>
<ul>
<li>description: Grants permission to update a manual DB snapshot, which can be encrypted or not encrypted, with a new engine version</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "snapshot": {
        "resource_type": "snapshot",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifydbsnapshotattribute"><a aria-hidden="true" class="anchor-heading" href="#modifydbsnapshotattribute"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyDBSnapshotAttribute</h3>
<ul>
<li>description: Grants permission to add an attribute and values to, or removes an attribute and values from, a manual DB snapshot</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "snapshot": {
        "resource_type": "snapshot",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifydbsubnetgroup"><a aria-hidden="true" class="anchor-heading" href="#modifydbsubnetgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyDBSubnetGroup</h3>
<ul>
<li>description: Grants permission to modify an existing DB subnet group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "subgrp": {
        "resource_type": "subgrp",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyeventsubscription"><a aria-hidden="true" class="anchor-heading" href="#modifyeventsubscription"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyEventSubscription</h3>
<ul>
<li>description: Grants permission to modify an existing RDS event notification subscription</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "es": {
        "resource_type": "es",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyglobalcluster"><a aria-hidden="true" class="anchor-heading" href="#modifyglobalcluster"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyGlobalCluster</h3>
<ul>
<li>description: Grants permission to modify a setting for an Amazon Aurora global cluster</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "global-cluster": {
        "resource_type": "global-cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyoptiongroup"><a aria-hidden="true" class="anchor-heading" href="#modifyoptiongroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyOptionGroup</h3>
<ul>
<li>description: Grants permission to modify an existing option group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "og": {
        "resource_type": "og",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    }
}
</code></pre>
<h3 id="promotereadreplica"><a aria-hidden="true" class="anchor-heading" href="#promotereadreplica"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PromoteReadReplica</h3>
<ul>
<li>description: Grants permission to promote a Read Replica DB instance to a standalone DB instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "db": {
        "resource_type": "db",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="promotereadreplicadbcluster"><a aria-hidden="true" class="anchor-heading" href="#promotereadreplicadbcluster"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PromoteReadReplicaDBCluster</h3>
<ul>
<li>description: Grants permission to promote a Read Replica DB cluster to a standalone DB cluster</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="purchasereserveddbinstancesoffering"><a aria-hidden="true" class="anchor-heading" href="#purchasereserveddbinstancesoffering"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PurchaseReservedDBInstancesOffering</h3>
<ul>
<li>description: Grants permission to purchase a reserved DB instance offering</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ri": {
        "resource_type": "ri",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="rebootdbinstance"><a aria-hidden="true" class="anchor-heading" href="#rebootdbinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RebootDBInstance</h3>
<ul>
<li>description: Grants permission to restart the database engine service</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "db": {
        "resource_type": "db",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registerdbproxytargets"><a aria-hidden="true" class="anchor-heading" href="#registerdbproxytargets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterDBProxyTargets</h3>
<ul>
<li>description: Grants permission to add targets to a database proxy target group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "target-group": {
        "resource_type": "target-group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="removefromglobalcluster"><a aria-hidden="true" class="anchor-heading" href="#removefromglobalcluster"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemoveFromGlobalCluster</h3>
<ul>
<li>description: Grants permission to detach an Aurora secondary cluster from an Aurora global database cluster</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "global-cluster": {
        "resource_type": "global-cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="removerolefromdbcluster"><a aria-hidden="true" class="anchor-heading" href="#removerolefromdbcluster"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemoveRoleFromDBCluster</h3>
<ul>
<li>description: Grants permission to disassociate an AWS Identity and Access Management (IAM) role from an Amazon Aurora DB cluster</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    }
}
</code></pre>
<h3 id="removerolefromdbinstance"><a aria-hidden="true" class="anchor-heading" href="#removerolefromdbinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemoveRoleFromDBInstance</h3>
<ul>
<li>description: Grants permission to disassociate an AWS Identity and Access Management (IAM) role from a DB instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "db": {
        "resource_type": "db",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    }
}
</code></pre>
<h3 id="removesourceidentifierfromsubscription"><a aria-hidden="true" class="anchor-heading" href="#removesourceidentifierfromsubscription"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemoveSourceIdentifierFromSubscription</h3>
<ul>
<li>description: Grants permission to remove a source identifier from an existing RDS event notification subscription</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "es": {
        "resource_type": "es",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="removetagsfromresource"><a aria-hidden="true" class="anchor-heading" href="#removetagsfromresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemoveTagsFromResource</h3>
<ul>
<li>description: Grants permission to remove metadata tags from an Amazon RDS resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "db": {
        "resource_type": "db",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "es": {
        "resource_type": "es",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "og": {
        "resource_type": "og",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "pg": {
        "resource_type": "pg",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "proxy": {
        "resource_type": "proxy",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "ri": {
        "resource_type": "ri",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "secgrp": {
        "resource_type": "secgrp",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "snapshot": {
        "resource_type": "snapshot",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "subgrp": {
        "resource_type": "subgrp",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "target-group": {
        "resource_type": "target-group",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "rds:req-tag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="resetdbclusterparametergroup"><a aria-hidden="true" class="anchor-heading" href="#resetdbclusterparametergroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ResetDBClusterParameterGroup</h3>
<ul>
<li>description: Grants permission to modify the parameters of a DB cluster parameter group to the default value</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster-pg": {
        "resource_type": "cluster-pg",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="resetdbparametergroup"><a aria-hidden="true" class="anchor-heading" href="#resetdbparametergroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ResetDBParameterGroup</h3>
<ul>
<li>description: Grants permission to modify the parameters of a DB parameter group to the engine/system default value</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "pg": {
        "resource_type": "pg",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="restoredbclusterfroms3"><a aria-hidden="true" class="anchor-heading" href="#restoredbclusterfroms3"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RestoreDBClusterFromS3</h3>
<ul>
<li>description: Grants permission to create an Amazon Aurora DB cluster from data stored in an Amazon S3 bucket</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "rds:req-tag/${TagKey}",
            "rds:DatabaseEngine",
            "rds:DatabaseName",
            "rds:StorageEncrypted"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="restoredbclusterfromsnapshot"><a aria-hidden="true" class="anchor-heading" href="#restoredbclusterfromsnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RestoreDBClusterFromSnapshot</h3>
<ul>
<li>description: Grants permission to create a new DB cluster from a DB cluster snapshot</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    },
    "cluster-snapshot": {
        "resource_type": "cluster-snapshot",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "og": {
        "resource_type": "og",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "rds:req-tag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="restoredbclustertopointintime"><a aria-hidden="true" class="anchor-heading" href="#restoredbclustertopointintime"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RestoreDBClusterToPointInTime</h3>
<ul>
<li>description: Grants permission to restore a DB cluster to an arbitrary point in time</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    },
    "og": {
        "resource_type": "og",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "subgrp": {
        "resource_type": "subgrp",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "rds:req-tag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="restoredbinstancefromdbsnapshot"><a aria-hidden="true" class="anchor-heading" href="#restoredbinstancefromdbsnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RestoreDBInstanceFromDBSnapshot</h3>
<ul>
<li>description: Grants permission to create a new DB instance from a DB snapshot</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "db": {
        "resource_type": "db",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    },
    "og": {
        "resource_type": "og",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "snapshot": {
        "resource_type": "snapshot",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "subgrp": {
        "resource_type": "subgrp",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "rds:req-tag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="restoredbinstancefroms3"><a aria-hidden="true" class="anchor-heading" href="#restoredbinstancefroms3"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RestoreDBInstanceFromS3</h3>
<ul>
<li>description: Grants permission to create a new DB instance from an Amazon S3 bucket</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "db": {
        "resource_type": "db",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "rds:req-tag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="restoredbinstancetopointintime"><a aria-hidden="true" class="anchor-heading" href="#restoredbinstancetopointintime"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RestoreDBInstanceToPointInTime</h3>
<ul>
<li>description: Grants permission to restore a DB instance to an arbitrary point in time</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "db": {
        "resource_type": "db",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    },
    "og": {
        "resource_type": "og",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "subgrp": {
        "resource_type": "subgrp",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "rds:req-tag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="revokedbsecuritygroupingress"><a aria-hidden="true" class="anchor-heading" href="#revokedbsecuritygroupingress"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RevokeDBSecurityGroupIngress</h3>
<ul>
<li>description: Grants permission to revoke ingress from a DBSecurityGroup for previously authorized IP ranges or EC2 or VPC Security Groups</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "secgrp": {
        "resource_type": "secgrp",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startactivitystream"><a aria-hidden="true" class="anchor-heading" href="#startactivitystream"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartActivityStream</h3>
<ul>
<li>description: Grants permission to start Activity Stream</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startdbcluster"><a aria-hidden="true" class="anchor-heading" href="#startdbcluster"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartDBCluster</h3>
<ul>
<li>description: Starts the DB cluster</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startdbinstance"><a aria-hidden="true" class="anchor-heading" href="#startdbinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartDBInstance</h3>
<ul>
<li>description: Grants permission to start the DB instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "db": {
        "resource_type": "db",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startexporttask"><a aria-hidden="true" class="anchor-heading" href="#startexporttask"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartExportTask</h3>
<ul>
<li>description: Grants permission to start a new Export task for a DB snapshot</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    }
}
</code></pre>
<h3 id="stopactivitystream"><a aria-hidden="true" class="anchor-heading" href="#stopactivitystream"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopActivityStream</h3>
<ul>
<li>description: Grants permission to stop Activity Stream</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopdbcluster"><a aria-hidden="true" class="anchor-heading" href="#stopdbcluster"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopDBCluster</h3>
<ul>
<li>description: Grants permission to stop the DB cluster</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopdbinstance"><a aria-hidden="true" class="anchor-heading" href="#stopdbinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopDBInstance</h3>
<ul>
<li>description: Grants permission to stop the DB instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "db": {
        "resource_type": "db",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-RDS"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Key Management Service.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Key Management Service - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Key Management Service.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Key Management Service.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Key Management Service.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Key Management Service - undefined" />
  <meta name="twitter:title" content="Key Management Service - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Key Management Service</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Key Management Service">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="key-management-service"><a aria-hidden="true" class="anchor-heading" href="#key-management-service"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Key Management Service</h1>
<ul>
<li>prefix: kms</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="cancelkeydeletion"><a aria-hidden="true" class="anchor-heading" href="#cancelkeydeletion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CancelKeyDeletion</h3>
<ul>
<li>description: Controls permission to cancel the scheduled deletion of a customer master key.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "key": {
        "resource_type": "key",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "kms:CallerAccount",
            "kms:ViaService"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="connectcustomkeystore"><a aria-hidden="true" class="anchor-heading" href="#connectcustomkeystore"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ConnectCustomKeyStore</h3>
<ul>
<li>description: Controls permission to connect or reconnect a custom key store to its associated AWS CloudHSM cluster.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createalias"><a aria-hidden="true" class="anchor-heading" href="#createalias"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateAlias</h3>
<ul>
<li>description: Controls permission to create an alias for a customer master key (CMK). Aliases are optional friendly names that you can associate with customer master keys.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "alias": {
        "resource_type": "alias",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "key": {
        "resource_type": "key",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "kms:CallerAccount",
            "kms:ViaService"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createcustomkeystore"><a aria-hidden="true" class="anchor-heading" href="#createcustomkeystore"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateCustomKeyStore</h3>
<ul>
<li>description: Controls permission to create a custom key store that is associated with an AWS CloudHSM cluster that you own and manage.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": [
            "cloudhsm:DescribeClusters"
        ]
    }
}
</code></pre>
<h3 id="creategrant"><a aria-hidden="true" class="anchor-heading" href="#creategrant"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateGrant</h3>
<ul>
<li>description: Controls permission to add a grant to a customer master key. You can use grants to add permissions without changing the key policy or IAM policy.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "key": {
        "resource_type": "key",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "kms:CallerAccount",
            "kms:GrantConstraintType",
            "kms:GrantIsForAWSResource",
            "kms:ViaService"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createkey"><a aria-hidden="true" class="anchor-heading" href="#createkey"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateKey</h3>
<ul>
<li>description: Controls permission to create a customer master key that can be used to protect data keys and other sensitive information.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "kms:BypassPolicyLockoutSafetyCheck",
            "kms:CustomerMasterKeySpec",
            "kms:CustomerMasterKeyUsage",
            "kms:KeyOrigin"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="decrypt"><a aria-hidden="true" class="anchor-heading" href="#decrypt"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Decrypt</h3>
<ul>
<li>description: Controls permission to decrypt ciphertext that was encrypted under a customer master key.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "key": {
        "resource_type": "key",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "kms:CallerAccount",
            "kms:EncryptionAlgorithm",
            "kms:EncryptionContextKeys",
            "kms:ViaService"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletealias"><a aria-hidden="true" class="anchor-heading" href="#deletealias"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAlias</h3>
<ul>
<li>description: Controls permission to delete an alias. Aliases are optional friendly names that you can associate with customer master keys.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "alias": {
        "resource_type": "alias",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "key": {
        "resource_type": "key",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "kms:CallerAccount",
            "kms:ViaService"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletecustomkeystore"><a aria-hidden="true" class="anchor-heading" href="#deletecustomkeystore"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteCustomKeyStore</h3>
<ul>
<li>description: Controls permission to delete a custom key store.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteimportedkeymaterial"><a aria-hidden="true" class="anchor-heading" href="#deleteimportedkeymaterial"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteImportedKeyMaterial</h3>
<ul>
<li>description: Controls permission to delete cryptographic material that you imported into a customer master key. This action makes the key unusable.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "key": {
        "resource_type": "key",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "kms:CallerAccount",
            "kms:ViaService"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecustomkeystores"><a aria-hidden="true" class="anchor-heading" href="#describecustomkeystores"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeCustomKeyStores</h3>
<ul>
<li>description: Controls permission to view detailed information about custom key stores in the account and region.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describekey"><a aria-hidden="true" class="anchor-heading" href="#describekey"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeKey</h3>
<ul>
<li>description: Controls permission to view detailed information about a customer master key.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "key": {
        "resource_type": "key",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "kms:CallerAccount",
            "kms:ViaService"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disablekey"><a aria-hidden="true" class="anchor-heading" href="#disablekey"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisableKey</h3>
<ul>
<li>description: Controls permission to disable a customer master key, which prevents it from being used in cryptographic operations.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "key": {
        "resource_type": "key",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "kms:CallerAccount",
            "kms:ViaService"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disablekeyrotation"><a aria-hidden="true" class="anchor-heading" href="#disablekeyrotation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisableKeyRotation</h3>
<ul>
<li>description: Controls permission to disable automatic rotation of a customer managed customer master key.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "key": {
        "resource_type": "key",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "kms:CallerAccount",
            "kms:ViaService"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disconnectcustomkeystore"><a aria-hidden="true" class="anchor-heading" href="#disconnectcustomkeystore"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisconnectCustomKeyStore</h3>
<ul>
<li>description: Controls permission to disconnect the custom key store from its associated AWS CloudHSM cluster.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="enablekey"><a aria-hidden="true" class="anchor-heading" href="#enablekey"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EnableKey</h3>
<ul>
<li>description: Controls permission to change the state of a customer master key (CMK) to enabled. This allows the CMK to be used in cryptographic operations.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "key": {
        "resource_type": "key",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "kms:CallerAccount",
            "kms:ViaService"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="enablekeyrotation"><a aria-hidden="true" class="anchor-heading" href="#enablekeyrotation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EnableKeyRotation</h3>
<ul>
<li>description: Controls permission to enable automatic rotation of the cryptographic material in a customer master key.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "key": {
        "resource_type": "key",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "kms:CallerAccount",
            "kms:ViaService"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="encrypt"><a aria-hidden="true" class="anchor-heading" href="#encrypt"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Encrypt</h3>
<ul>
<li>description: Controls permission to use the specified customer master key to encrypt data and data keys.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "key": {
        "resource_type": "key",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "kms:CallerAccount",
            "kms:EncryptionAlgorithm",
            "kms:EncryptionContextKeys",
            "kms:ViaService"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="generatedatakey"><a aria-hidden="true" class="anchor-heading" href="#generatedatakey"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GenerateDataKey</h3>
<ul>
<li>description: Controls permission to use the customer master key to generate data keys. You can use the data keys to encrypt data outside of AWS KMS.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "key": {
        "resource_type": "key",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "kms:CallerAccount",
            "kms:EncryptionAlgorithm",
            "kms:EncryptionContextKeys",
            "kms:ViaService"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="generatedatakeypair"><a aria-hidden="true" class="anchor-heading" href="#generatedatakeypair"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GenerateDataKeyPair</h3>
<ul>
<li>description: Controls permission to use the customer master key to generate data key pairs.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "key": {
        "resource_type": "key",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "kms:CallerAccount",
            "kms:DataKeyPairSpec",
            "kms:EncryptionAlgorithm",
            "kms:EncryptionContextKeys",
            "kms:ViaService"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="generatedatakeypairwithoutplaintext"><a aria-hidden="true" class="anchor-heading" href="#generatedatakeypairwithoutplaintext"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GenerateDataKeyPairWithoutPlaintext</h3>
<ul>
<li>description: Controls permission to use the customer master key to generate data key pairs. Unlike the GenerateDataKeyPair operation, this operation returns an encrypted private key without a plaintext copy.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "key": {
        "resource_type": "key",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "kms:CallerAccount",
            "kms:DataKeyPairSpec",
            "kms:EncryptionAlgorithm",
            "kms:EncryptionContextKeys",
            "kms:ViaService"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="generatedatakeywithoutplaintext"><a aria-hidden="true" class="anchor-heading" href="#generatedatakeywithoutplaintext"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GenerateDataKeyWithoutPlaintext</h3>
<ul>
<li>description: Controls permission to use the customer master key to generate a data key. Unlike the GenerateDataKey operation, this operation returns an encrypted data key without a plaintext version of the data key.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "key": {
        "resource_type": "key",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "kms:CallerAccount",
            "kms:EncryptionAlgorithm",
            "kms:EncryptionContextKeys",
            "kms:ViaService"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="generaterandom"><a aria-hidden="true" class="anchor-heading" href="#generaterandom"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GenerateRandom</h3>
<ul>
<li>description: Controls permission to get a cryptographically secure random byte string from AWS KMS.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getkeypolicy"><a aria-hidden="true" class="anchor-heading" href="#getkeypolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetKeyPolicy</h3>
<ul>
<li>description: Controls permission to view the key policy for the specified customer master key.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "key": {
        "resource_type": "key",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "kms:CallerAccount",
            "kms:ViaService"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getkeyrotationstatus"><a aria-hidden="true" class="anchor-heading" href="#getkeyrotationstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetKeyRotationStatus</h3>
<ul>
<li>description: Controls permission to determine whether automatic key rotation is enabled on the customer master key.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "key": {
        "resource_type": "key",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "kms:CallerAccount",
            "kms:ViaService"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getparametersforimport"><a aria-hidden="true" class="anchor-heading" href="#getparametersforimport"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetParametersForImport</h3>
<ul>
<li>description: Controls permission to get data that is required to import cryptographic material into a customer managed key, including a public key and import token.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "key": {
        "resource_type": "key",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "kms:CallerAccount",
            "kms:ViaService",
            "kms:WrappingAlgorithm",
            "kms:WrappingKeySpec"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getpublickey"><a aria-hidden="true" class="anchor-heading" href="#getpublickey"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetPublicKey</h3>
<ul>
<li>description: Controls permission to download the public key of an asymmetric customer master key.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "key": {
        "resource_type": "key",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "kms:CallerAccount",
            "kms:ViaService"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="importkeymaterial"><a aria-hidden="true" class="anchor-heading" href="#importkeymaterial"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ImportKeyMaterial</h3>
<ul>
<li>description: Controls permission to import cryptographic material into a customer master key.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "key": {
        "resource_type": "key",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "kms:CallerAccount",
            "kms:ExpirationModel",
            "kms:ValidTo",
            "kms:ViaService"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listaliases"><a aria-hidden="true" class="anchor-heading" href="#listaliases"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAliases</h3>
<ul>
<li>description: Controls permission to view the aliases that are defined in the account. Aliases are optional friendly names that you can associate with customer master keys.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listgrants"><a aria-hidden="true" class="anchor-heading" href="#listgrants"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListGrants</h3>
<ul>
<li>description: Controls permission to view all grants for a customer master key.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "key": {
        "resource_type": "key",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "kms:CallerAccount",
            "kms:GrantIsForAWSResource",
            "kms:ViaService"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listkeypolicies"><a aria-hidden="true" class="anchor-heading" href="#listkeypolicies"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListKeyPolicies</h3>
<ul>
<li>description: Controls permission to view the names of key policies for a customer master key.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "key": {
        "resource_type": "key",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "kms:CallerAccount",
            "kms:ViaService"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listkeys"><a aria-hidden="true" class="anchor-heading" href="#listkeys"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListKeys</h3>
<ul>
<li>description: Controls permission to view the key ID and Amazon Resource Name (ARN) of all customer master keys in the account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listresourcetags"><a aria-hidden="true" class="anchor-heading" href="#listresourcetags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListResourceTags</h3>
<ul>
<li>description: Controls permission to view all tags that are attached to a customer master key.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "key": {
        "resource_type": "key",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "kms:CallerAccount",
            "kms:ViaService"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listretirablegrants"><a aria-hidden="true" class="anchor-heading" href="#listretirablegrants"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListRetirableGrants</h3>
<ul>
<li>description: Controls permission to view grants in which the specified principal is the retiring principal. Other principals might be able to retire the grant and this principal might be able to retire other grants.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "key": {
        "resource_type": "key",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putkeypolicy"><a aria-hidden="true" class="anchor-heading" href="#putkeypolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutKeyPolicy</h3>
<ul>
<li>description: Controls permission to replace the key policy for the specified customer master key.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "key": {
        "resource_type": "key",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "kms:BypassPolicyLockoutSafetyCheck",
            "kms:CallerAccount",
            "kms:ViaService"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="reencryptfrom"><a aria-hidden="true" class="anchor-heading" href="#reencryptfrom"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ReEncryptFrom</h3>
<ul>
<li>description: Controls permission to decrypt data as part of the process that decrypts and reencrypts the data within AWS KMS.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "key": {
        "resource_type": "key",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "kms:CallerAccount",
            "kms:EncryptionAlgorithm",
            "kms:EncryptionContextKeys",
            "kms:ReEncryptOnSameKey",
            "kms:ViaService"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="reencryptto"><a aria-hidden="true" class="anchor-heading" href="#reencryptto"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ReEncryptTo</h3>
<ul>
<li>description: Controls permission to encrypt data as part of the process that decrypts and reencrypts the data within AWS KMS.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "key": {
        "resource_type": "key",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "kms:CallerAccount",
            "kms:EncryptionAlgorithm",
            "kms:EncryptionContextKeys",
            "kms:ReEncryptOnSameKey",
            "kms:ViaService"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="retiregrant"><a aria-hidden="true" class="anchor-heading" href="#retiregrant"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RetireGrant</h3>
<ul>
<li>description: Controls permission to retire a grant. The RetireGrant operation is typically called by the grant user after they complete the tasks that the grant allowed them to perform.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "key": {
        "resource_type": "key",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="revokegrant"><a aria-hidden="true" class="anchor-heading" href="#revokegrant"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RevokeGrant</h3>
<ul>
<li>description: Controls permission to revoke a grant, which denies permission for all operations that depend on the grant.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "key": {
        "resource_type": "key",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "kms:CallerAccount",
            "kms:GrantIsForAWSResource",
            "kms:ViaService"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="schedulekeydeletion"><a aria-hidden="true" class="anchor-heading" href="#schedulekeydeletion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ScheduleKeyDeletion</h3>
<ul>
<li>description: Controls permission to schedule deletion of a customer master key.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "key": {
        "resource_type": "key",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "kms:CallerAccount",
            "kms:ViaService"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="sign"><a aria-hidden="true" class="anchor-heading" href="#sign"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Sign</h3>
<ul>
<li>description: Controls permission to produce a digital signature for a message.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "key": {
        "resource_type": "key",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "kms:CallerAccount",
            "kms:MessageType",
            "kms:SigningAlgorithm",
            "kms:ViaService"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Controls permission to create or update tags that are attached to a customer master key.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "key": {
        "resource_type": "key",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "kms:CallerAccount",
            "kms:ViaService"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Controls permission to delete tags that are attached to a customer master key.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "key": {
        "resource_type": "key",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "kms:CallerAccount",
            "kms:ViaService"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatealias"><a aria-hidden="true" class="anchor-heading" href="#updatealias"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateAlias</h3>
<ul>
<li>description: Controls permission to associate an alias with a different customer master key. An alias is an optional friendly name that you can associate with a customer master key.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "alias": {
        "resource_type": "alias",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "key": {
        "resource_type": "key",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "kms:CallerAccount",
            "kms:ViaService"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatecustomkeystore"><a aria-hidden="true" class="anchor-heading" href="#updatecustomkeystore"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateCustomKeyStore</h3>
<ul>
<li>description: Controls permission to change the properties of a custom key store.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatekeydescription"><a aria-hidden="true" class="anchor-heading" href="#updatekeydescription"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateKeyDescription</h3>
<ul>
<li>description: Controls permission to delete or change the description of a customer master key.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "key": {
        "resource_type": "key",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "kms:CallerAccount",
            "kms:ViaService"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="verify"><a aria-hidden="true" class="anchor-heading" href="#verify"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Verify</h3>
<ul>
<li>description: Controls permission to use the specified customer master key to verify digital signatures.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "key": {
        "resource_type": "key",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "kms:CallerAccount",
            "kms:MessageType",
            "kms:SigningAlgorithm",
            "kms:ViaService"
        ],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Key Management Service"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Kinesis Video Streams.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Kinesis Video Streams - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Kinesis Video Streams.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Kinesis Video Streams.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Kinesis Video Streams.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Kinesis Video Streams - undefined" />
  <meta name="twitter:title" content="Kinesis Video Streams - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Kinesis Video Streams</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Kinesis Video Streams">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="kinesis-video-streams"><a aria-hidden="true" class="anchor-heading" href="#kinesis-video-streams"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Kinesis Video Streams</h1>
<ul>
<li>prefix: kinesisvideo</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="connectasmaster"><a aria-hidden="true" class="anchor-heading" href="#connectasmaster"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ConnectAsMaster</h3>
<ul>
<li>description: Grants permission to connect as a master to the signaling channel specified by the endpoint</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "channel": {
        "resource_type": "channel",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="connectasviewer"><a aria-hidden="true" class="anchor-heading" href="#connectasviewer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ConnectAsViewer</h3>
<ul>
<li>description: Grants permission to connect as a viewer to the signaling channel specified by the endpoint</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "channel": {
        "resource_type": "channel",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createsignalingchannel"><a aria-hidden="true" class="anchor-heading" href="#createsignalingchannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSignalingChannel</h3>
<ul>
<li>description: Grants permission to create a signaling channel</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "channel": {
        "resource_type": "channel",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createstream"><a aria-hidden="true" class="anchor-heading" href="#createstream"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateStream</h3>
<ul>
<li>description: Grants permission to create a Kinesis video stream</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletesignalingchannel"><a aria-hidden="true" class="anchor-heading" href="#deletesignalingchannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteSignalingChannel</h3>
<ul>
<li>description: Grants permission to delete an existing signaling channel</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "channel": {
        "resource_type": "channel",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletestream"><a aria-hidden="true" class="anchor-heading" href="#deletestream"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteStream</h3>
<ul>
<li>description: Grants permission to delete an existing Kinesis video stream</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describesignalingchannel"><a aria-hidden="true" class="anchor-heading" href="#describesignalingchannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSignalingChannel</h3>
<ul>
<li>description: Grants permission to describe the specified signaling channel</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "channel": {
        "resource_type": "channel",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describestream"><a aria-hidden="true" class="anchor-heading" href="#describestream"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeStream</h3>
<ul>
<li>description: Grants permission to describe the specified Kinesis video stream</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getclip"><a aria-hidden="true" class="anchor-heading" href="#getclip"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetClip</h3>
<ul>
<li>description: Grants permission to get a media clip from a video stream</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdashstreamingsessionurl"><a aria-hidden="true" class="anchor-heading" href="#getdashstreamingsessionurl"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDASHStreamingSessionURL</h3>
<ul>
<li>description: Grants permission to create a URL for MPEG-DASH video streaming</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdataendpoint"><a aria-hidden="true" class="anchor-heading" href="#getdataendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDataEndpoint</h3>
<ul>
<li>description: Grants permission to get an endpoint for a specified stream for either reading or writing media data to Kinesis Video Streams</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gethlsstreamingsessionurl"><a aria-hidden="true" class="anchor-heading" href="#gethlsstreamingsessionurl"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetHLSStreamingSessionURL</h3>
<ul>
<li>description: Grants permission to create a URL for HLS video streaming</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="geticeserverconfig"><a aria-hidden="true" class="anchor-heading" href="#geticeserverconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetIceServerConfig</h3>
<ul>
<li>description: Grants permission to get the ICE server configuration</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "channel": {
        "resource_type": "channel",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmedia"><a aria-hidden="true" class="anchor-heading" href="#getmedia"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetMedia</h3>
<ul>
<li>description: Grants permission to return media content of a Kinesis video stream</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmediaforfragmentlist"><a aria-hidden="true" class="anchor-heading" href="#getmediaforfragmentlist"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetMediaForFragmentList</h3>
<ul>
<li>description: Grants permission to read and return media data only from persisted storage</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsignalingchannelendpoint"><a aria-hidden="true" class="anchor-heading" href="#getsignalingchannelendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSignalingChannelEndpoint</h3>
<ul>
<li>description: Grants permission to get endpoints for a specified combination of protocol and role for a signaling channel</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "channel": {
        "resource_type": "channel",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listfragments"><a aria-hidden="true" class="anchor-heading" href="#listfragments"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListFragments</h3>
<ul>
<li>description: Grants permission to list the fragments from archival storage based on the pagination token or selector type with range specified</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listsignalingchannels"><a aria-hidden="true" class="anchor-heading" href="#listsignalingchannels"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListSignalingChannels</h3>
<ul>
<li>description: Grants permission to list your signaling channels</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="liststreams"><a aria-hidden="true" class="anchor-heading" href="#liststreams"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListStreams</h3>
<ul>
<li>description: Grants permission to list your Kinesis video streams</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Grants permission to fetch the tags associated with your resource</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "channel": {
        "resource_type": "channel",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "stream": {
        "resource_type": "stream",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforstream"><a aria-hidden="true" class="anchor-heading" href="#listtagsforstream"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForStream</h3>
<ul>
<li>description: Grants permission to fetch the tags associated with Kinesis video stream</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putmedia"><a aria-hidden="true" class="anchor-heading" href="#putmedia"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutMedia</h3>
<ul>
<li>description: Grants permission to send media data to a Kinesis video stream</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="sendalexaoffertomaster"><a aria-hidden="true" class="anchor-heading" href="#sendalexaoffertomaster"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SendAlexaOfferToMaster</h3>
<ul>
<li>description: Grants permission to send the Alexa SDP offer to the master</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "channel": {
        "resource_type": "channel",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Grants permission to attach set of tags to your resource</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "channel": {
        "resource_type": "channel",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "stream": {
        "resource_type": "stream",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagstream"><a aria-hidden="true" class="anchor-heading" href="#tagstream"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagStream</h3>
<ul>
<li>description: Grants permission to attach set of tags to your Kinesis video streams</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Grants permission to remove one or more tags from your resource</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "channel": {
        "resource_type": "channel",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "stream": {
        "resource_type": "stream",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagstream"><a aria-hidden="true" class="anchor-heading" href="#untagstream"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagStream</h3>
<ul>
<li>description: Grants permission to remove one or more tags from your Kinesis video streams</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatedataretention"><a aria-hidden="true" class="anchor-heading" href="#updatedataretention"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateDataRetention</h3>
<ul>
<li>description: Grants permission to update the data retention period of your Kinesis video stream</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatesignalingchannel"><a aria-hidden="true" class="anchor-heading" href="#updatesignalingchannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateSignalingChannel</h3>
<ul>
<li>description: Grants permission to update an existing signaling channel</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "channel": {
        "resource_type": "channel",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatestream"><a aria-hidden="true" class="anchor-heading" href="#updatestream"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateStream</h3>
<ul>
<li>description: Grants permission to update an existing Kinesis video stream</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Kinesis Video Streams"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Kinesis.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Kinesis - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Kinesis.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Kinesis.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Kinesis.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Kinesis - undefined" />
  <meta name="twitter:title" content="Kinesis - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Kinesis</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Kinesis">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="kinesis"><a aria-hidden="true" class="anchor-heading" href="#kinesis"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Kinesis</h1>
<ul>
<li>prefix: kinesis</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="addtagstostream"><a aria-hidden="true" class="anchor-heading" href="#addtagstostream"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddTagsToStream</h3>
<ul>
<li>description: Adds or updates tags for the specified Amazon Kinesis stream. Each stream can have up to 10 tags.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createstream"><a aria-hidden="true" class="anchor-heading" href="#createstream"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateStream</h3>
<ul>
<li>description: Creates a Amazon Kinesis stream.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="decreasestreamretentionperiod"><a aria-hidden="true" class="anchor-heading" href="#decreasestreamretentionperiod"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DecreaseStreamRetentionPeriod</h3>
<ul>
<li>description: Decreases the stream's retention period, which is the length of time data records are accessible after they are added to the stream.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletestream"><a aria-hidden="true" class="anchor-heading" href="#deletestream"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteStream</h3>
<ul>
<li>description: Deletes a stream and all its shards and data.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deregisterstreamconsumer"><a aria-hidden="true" class="anchor-heading" href="#deregisterstreamconsumer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeregisterStreamConsumer</h3>
<ul>
<li>description: Deregisters a stream consumer with a Kinesis data stream.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "consumer": {
        "resource_type": "consumer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describelimits"><a aria-hidden="true" class="anchor-heading" href="#describelimits"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeLimits</h3>
<ul>
<li>description: Describes the shard limits and usage for the account.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describestream"><a aria-hidden="true" class="anchor-heading" href="#describestream"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeStream</h3>
<ul>
<li>description: Describes the specified stream.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describestreamconsumer"><a aria-hidden="true" class="anchor-heading" href="#describestreamconsumer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeStreamConsumer</h3>
<ul>
<li>description: Gets the description of a registered stream consumer.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "consumer": {
        "resource_type": "consumer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describestreamsummary"><a aria-hidden="true" class="anchor-heading" href="#describestreamsummary"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeStreamSummary</h3>
<ul>
<li>description: Provides a summarized description of the specified Kinesis data stream without the shard list.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disableenhancedmonitoring"><a aria-hidden="true" class="anchor-heading" href="#disableenhancedmonitoring"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisableEnhancedMonitoring</h3>
<ul>
<li>description: Disables enhanced monitoring.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="enableenhancedmonitoring"><a aria-hidden="true" class="anchor-heading" href="#enableenhancedmonitoring"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EnableEnhancedMonitoring</h3>
<ul>
<li>description: API_EnableEnhancedMonitoring.html</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getrecords"><a aria-hidden="true" class="anchor-heading" href="#getrecords"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRecords</h3>
<ul>
<li>description: Gets data records from a shard.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsharditerator"><a aria-hidden="true" class="anchor-heading" href="#getsharditerator"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetShardIterator</h3>
<ul>
<li>description: Gets a shard iterator. A shard iterator expires five minutes after it is returned to the requester.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="increasestreamretentionperiod"><a aria-hidden="true" class="anchor-heading" href="#increasestreamretentionperiod"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>IncreaseStreamRetentionPeriod</h3>
<ul>
<li>description: Increases the stream's retention period, which is the length of time data records are accessible after they are added to the stream.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listshards"><a aria-hidden="true" class="anchor-heading" href="#listshards"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListShards</h3>
<ul>
<li>description: Lists the shards in a stream and provides information about each shard.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="liststreamconsumers"><a aria-hidden="true" class="anchor-heading" href="#liststreamconsumers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListStreamConsumers</h3>
<ul>
<li>description: Lists the stream consumers registered to receive data from a Kinesis stream using enhanced fan-out, and provides information about each consumer.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="liststreams"><a aria-hidden="true" class="anchor-heading" href="#liststreams"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListStreams</h3>
<ul>
<li>description: Lists your streams.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforstream"><a aria-hidden="true" class="anchor-heading" href="#listtagsforstream"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForStream</h3>
<ul>
<li>description: Lists the tags for the specified Amazon Kinesis stream.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="mergeshards"><a aria-hidden="true" class="anchor-heading" href="#mergeshards"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>MergeShards</h3>
<ul>
<li>description: Merges two adjacent shards in a stream and combines them into a single shard to reduce the stream's capacity to ingest and transport data.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putrecord"><a aria-hidden="true" class="anchor-heading" href="#putrecord"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutRecord</h3>
<ul>
<li>description: Writes a single data record from a producer into an Amazon Kinesis stream.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putrecords"><a aria-hidden="true" class="anchor-heading" href="#putrecords"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutRecords</h3>
<ul>
<li>description: Writes multiple data records from a producer into an Amazon Kinesis stream in a single call (also referred to as a PutRecords request).</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registerstreamconsumer"><a aria-hidden="true" class="anchor-heading" href="#registerstreamconsumer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterStreamConsumer</h3>
<ul>
<li>description: Registers a stream consumer with a Kinesis data stream.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "consumer": {
        "resource_type": "consumer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="removetagsfromstream"><a aria-hidden="true" class="anchor-heading" href="#removetagsfromstream"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemoveTagsFromStream</h3>
<ul>
<li>description: Description for SplitShard</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="splitshard"><a aria-hidden="true" class="anchor-heading" href="#splitshard"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SplitShard</h3>
<ul>
<li>description: Description for SplitShard</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startstreamencryption"><a aria-hidden="true" class="anchor-heading" href="#startstreamencryption"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartStreamEncryption</h3>
<ul>
<li>description: Grants permission to enable or update server-side encryption using an AWS KMS key for a specified stream.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "kmsKey": {
        "resource_type": "kmsKey",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopstreamencryption"><a aria-hidden="true" class="anchor-heading" href="#stopstreamencryption"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopStreamEncryption</h3>
<ul>
<li>description: Grants permission to disable server-side encryption for a specified stream.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "kmsKey": {
        "resource_type": "kmsKey",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="subscribetoshard"><a aria-hidden="true" class="anchor-heading" href="#subscribetoshard"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SubscribeToShard</h3>
<ul>
<li>description: Listening to a specific shard with enhanced fan-out.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "consumer": {
        "resource_type": "consumer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "stream": {
        "resource_type": "stream",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateshardcount"><a aria-hidden="true" class="anchor-heading" href="#updateshardcount"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateShardCount</h3>
<ul>
<li>description: Updates the shard count of the specified stream to the specified number of shards.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Kinesis"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Simple Email Service.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Simple Email Service - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Simple Email Service.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Simple Email Service.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Simple Email Service.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Simple Email Service - undefined" />
  <meta name="twitter:title" content="Simple Email Service - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Simple Email Service</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Simple Email Service">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="simple-email-service"><a aria-hidden="true" class="anchor-heading" href="#simple-email-service"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Simple Email Service</h1>
<ul>
<li>prefix: ses</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="clonereceiptruleset"><a aria-hidden="true" class="anchor-heading" href="#clonereceiptruleset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CloneReceiptRuleSet</h3>
<ul>
<li>description: Creates a receipt rule set by cloning an existing one</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createconfigurationset"><a aria-hidden="true" class="anchor-heading" href="#createconfigurationset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateConfigurationSet</h3>
<ul>
<li>description: Creates a new configuration set</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createconfigurationseteventdestination"><a aria-hidden="true" class="anchor-heading" href="#createconfigurationseteventdestination"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateConfigurationSetEventDestination</h3>
<ul>
<li>description: Creates a configuration set event destination</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createconfigurationsettrackingoptions"><a aria-hidden="true" class="anchor-heading" href="#createconfigurationsettrackingoptions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateConfigurationSetTrackingOptions</h3>
<ul>
<li>description: Creates an association between a configuration set and a custom domain for open and click event tracking</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createcustomverificationemailtemplate"><a aria-hidden="true" class="anchor-heading" href="#createcustomverificationemailtemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateCustomVerificationEmailTemplate</h3>
<ul>
<li>description: Creates a new custom verification email template</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createreceiptfilter"><a aria-hidden="true" class="anchor-heading" href="#createreceiptfilter"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateReceiptFilter</h3>
<ul>
<li>description: Creates a new IP address filter</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createreceiptrule"><a aria-hidden="true" class="anchor-heading" href="#createreceiptrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateReceiptRule</h3>
<ul>
<li>description: Creates a receipt rule</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createreceiptruleset"><a aria-hidden="true" class="anchor-heading" href="#createreceiptruleset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateReceiptRuleSet</h3>
<ul>
<li>description: Creates an empty receipt rule set</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtemplate"><a aria-hidden="true" class="anchor-heading" href="#createtemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTemplate</h3>
<ul>
<li>description: Creates an email template</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteconfigurationset"><a aria-hidden="true" class="anchor-heading" href="#deleteconfigurationset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteConfigurationSet</h3>
<ul>
<li>description: Deletes the configuration set</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteconfigurationseteventdestination"><a aria-hidden="true" class="anchor-heading" href="#deleteconfigurationseteventdestination"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteConfigurationSetEventDestination</h3>
<ul>
<li>description: Deletes a configuration set event destination</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteconfigurationsettrackingoptions"><a aria-hidden="true" class="anchor-heading" href="#deleteconfigurationsettrackingoptions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteConfigurationSetTrackingOptions</h3>
<ul>
<li>description: Deletes an association between a configuration set and a custom domain for open and click event tracking</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletecustomverificationemailtemplate"><a aria-hidden="true" class="anchor-heading" href="#deletecustomverificationemailtemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteCustomVerificationEmailTemplate</h3>
<ul>
<li>description: Deletes an existing custom verification email template</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteidentity"><a aria-hidden="true" class="anchor-heading" href="#deleteidentity"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteIdentity</h3>
<ul>
<li>description: Deletes the specified identity (an email address or a domain) from the list of verified identities</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteidentitypolicy"><a aria-hidden="true" class="anchor-heading" href="#deleteidentitypolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteIdentityPolicy</h3>
<ul>
<li>description: Deletes the specified identity (an email address or a domain) from the list of verified identities</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletereceiptfilter"><a aria-hidden="true" class="anchor-heading" href="#deletereceiptfilter"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteReceiptFilter</h3>
<ul>
<li>description: Deletes the specified IP address filter</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletereceiptrule"><a aria-hidden="true" class="anchor-heading" href="#deletereceiptrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteReceiptRule</h3>
<ul>
<li>description: Deletes the specified receipt rule</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletereceiptruleset"><a aria-hidden="true" class="anchor-heading" href="#deletereceiptruleset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteReceiptRuleSet</h3>
<ul>
<li>description: Deletes the specified receipt rule set and all of the receipt rules it contains</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetemplate"><a aria-hidden="true" class="anchor-heading" href="#deletetemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTemplate</h3>
<ul>
<li>description: Deletes an email template</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteverifiedemailaddress"><a aria-hidden="true" class="anchor-heading" href="#deleteverifiedemailaddress"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteVerifiedEmailAddress</h3>
<ul>
<li>description: Deletes the specified email address from the list of verified addresses</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeactivereceiptruleset"><a aria-hidden="true" class="anchor-heading" href="#describeactivereceiptruleset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeActiveReceiptRuleSet</h3>
<ul>
<li>description: Returns the metadata and receipt rules for the receipt rule set that is currently active</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeconfigurationset"><a aria-hidden="true" class="anchor-heading" href="#describeconfigurationset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeConfigurationSet</h3>
<ul>
<li>description: Returns the details of the specified configuration set</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describereceiptrule"><a aria-hidden="true" class="anchor-heading" href="#describereceiptrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeReceiptRule</h3>
<ul>
<li>description: Returns the details of the specified receipt rule</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describereceiptruleset"><a aria-hidden="true" class="anchor-heading" href="#describereceiptruleset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeReceiptRuleSet</h3>
<ul>
<li>description: Returns the details of the specified receipt rule set</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getaccountsendingenabled"><a aria-hidden="true" class="anchor-heading" href="#getaccountsendingenabled"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAccountSendingEnabled</h3>
<ul>
<li>description: Returns the email sending status of the Amazon SES account for the current region</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcustomverificationemailtemplate"><a aria-hidden="true" class="anchor-heading" href="#getcustomverificationemailtemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCustomVerificationEmailTemplate</h3>
<ul>
<li>description: Returns the custom email verification template for the template name you specify</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getidentitydkimattributes"><a aria-hidden="true" class="anchor-heading" href="#getidentitydkimattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetIdentityDkimAttributes</h3>
<ul>
<li>description: Returns the current status of Easy DKIM signing for an entity</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getidentitymailfromdomainattributes"><a aria-hidden="true" class="anchor-heading" href="#getidentitymailfromdomainattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetIdentityMailFromDomainAttributes</h3>
<ul>
<li>description: Returns the custom MAIL FROM attributes for a list of identities (email addresses and/or domains)</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getidentitynotificationattributes"><a aria-hidden="true" class="anchor-heading" href="#getidentitynotificationattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetIdentityNotificationAttributes</h3>
<ul>
<li>description: Given a list of verified identities (email addresses and/or domains), returns a structure describing identity notification attributes</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getidentitypolicies"><a aria-hidden="true" class="anchor-heading" href="#getidentitypolicies"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetIdentityPolicies</h3>
<ul>
<li>description: Returns the requested sending authorization policies for the given identity (an email address or a domain)</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getidentityverificationattributes"><a aria-hidden="true" class="anchor-heading" href="#getidentityverificationattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetIdentityVerificationAttributes</h3>
<ul>
<li>description: Given a list of identities (email addresses and/or domains), returns the verification status and (for domain identities) the verification token for each identity</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsendquota"><a aria-hidden="true" class="anchor-heading" href="#getsendquota"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSendQuota</h3>
<ul>
<li>description: Returns the user's current sending limits</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsendstatistics"><a aria-hidden="true" class="anchor-heading" href="#getsendstatistics"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSendStatistics</h3>
<ul>
<li>description: Returns the user's sending statistics. The result is a list of data points, representing the last two weeks of sending activity</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gettemplate"><a aria-hidden="true" class="anchor-heading" href="#gettemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetTemplate</h3>
<ul>
<li>description: Returns the template object (which includes the Subject line, HTML part and text part) for the template you specify</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listconfigurationsets"><a aria-hidden="true" class="anchor-heading" href="#listconfigurationsets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListConfigurationSets</h3>
<ul>
<li>description: Returns a list of the configuration sets associated with your Amazon SES account in the current AWS Region</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listcustomverificationemailtemplates"><a aria-hidden="true" class="anchor-heading" href="#listcustomverificationemailtemplates"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListCustomVerificationEmailTemplates</h3>
<ul>
<li>description: Lists the existing custom verification email templates for your account in the current AWS Region</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listidentities"><a aria-hidden="true" class="anchor-heading" href="#listidentities"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListIdentities</h3>
<ul>
<li>description: Returns a list containing all of the identities (email addresses and domains) for your AWS account, regardless of verification status</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listidentitypolicies"><a aria-hidden="true" class="anchor-heading" href="#listidentitypolicies"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListIdentityPolicies</h3>
<ul>
<li>description: Returns a list of sending authorization policies that are attached to the given identity (an email address or a domain)</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listreceiptfilters"><a aria-hidden="true" class="anchor-heading" href="#listreceiptfilters"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListReceiptFilters</h3>
<ul>
<li>description: Lists the IP address filters associated with your AWS account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listreceiptrulesets"><a aria-hidden="true" class="anchor-heading" href="#listreceiptrulesets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListReceiptRuleSets</h3>
<ul>
<li>description: Lists the receipt rule sets that exist under your AWS account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtemplates"><a aria-hidden="true" class="anchor-heading" href="#listtemplates"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTemplates</h3>
<ul>
<li>description: Lists the email templates present in your Amazon SES account in the current AWS Region</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listverifiedemailaddresses"><a aria-hidden="true" class="anchor-heading" href="#listverifiedemailaddresses"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListVerifiedEmailAddresses</h3>
<ul>
<li>description: Returns a list containing all of the email addresses that have been verified</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putidentitypolicy"><a aria-hidden="true" class="anchor-heading" href="#putidentitypolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutIdentityPolicy</h3>
<ul>
<li>description: Adds or updates a sending authorization policy for the specified identity (an email address or a domain)</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="reorderreceiptruleset"><a aria-hidden="true" class="anchor-heading" href="#reorderreceiptruleset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ReorderReceiptRuleSet</h3>
<ul>
<li>description: Reorders the receipt rules within a receipt rule set</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="sendbounce"><a aria-hidden="true" class="anchor-heading" href="#sendbounce"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SendBounce</h3>
<ul>
<li>description: Generates and sends a bounce message to the sender of an email you received through Amazon SES</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "ses:FromAddress"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="sendbulktemplatedemail"><a aria-hidden="true" class="anchor-heading" href="#sendbulktemplatedemail"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SendBulkTemplatedEmail</h3>
<ul>
<li>description: Composes an email message to multiple destinations</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "identity": {
        "resource_type": "identity",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "ses:FeedbackAddress",
            "ses:FromAddress",
            "ses:FromDisplayName",
            "ses:Recipients"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="sendcustomverificationemail"><a aria-hidden="true" class="anchor-heading" href="#sendcustomverificationemail"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SendCustomVerificationEmail</h3>
<ul>
<li>description: Adds an email address to the list of identities for your Amazon SES account in the current AWS Region and attempts to verify it</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "identity": {
        "resource_type": "identity",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "ses:FeedbackAddress",
            "ses:FromAddress",
            "ses:FromDisplayName",
            "ses:Recipients"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="sendemail"><a aria-hidden="true" class="anchor-heading" href="#sendemail"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SendEmail</h3>
<ul>
<li>description: Composes an email message based on input data, and then immediately queues the message for sending</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "identity": {
        "resource_type": "identity",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "ses:FeedbackAddress",
            "ses:FromAddress",
            "ses:FromDisplayName",
            "ses:Recipients"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="sendrawemail"><a aria-hidden="true" class="anchor-heading" href="#sendrawemail"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SendRawEmail</h3>
<ul>
<li>description: Sends an email message, with header and content specified by the client</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "identity": {
        "resource_type": "identity",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "ses:FeedbackAddress",
            "ses:FromAddress",
            "ses:FromDisplayName",
            "ses:Recipients"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="sendtemplatedemail"><a aria-hidden="true" class="anchor-heading" href="#sendtemplatedemail"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SendTemplatedEmail</h3>
<ul>
<li>description: Composes an email message using an email template and immediately queues it for sending</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "identity": {
        "resource_type": "identity",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "ses:FeedbackAddress",
            "ses:FromAddress",
            "ses:FromDisplayName",
            "ses:Recipients"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setactivereceiptruleset"><a aria-hidden="true" class="anchor-heading" href="#setactivereceiptruleset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetActiveReceiptRuleSet</h3>
<ul>
<li>description: Sets the specified receipt rule set as the active receipt rule set</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setidentitydkimenabled"><a aria-hidden="true" class="anchor-heading" href="#setidentitydkimenabled"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetIdentityDkimEnabled</h3>
<ul>
<li>description: Enables or disables Easy DKIM signing of email sent from an identity</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setidentityfeedbackforwardingenabled"><a aria-hidden="true" class="anchor-heading" href="#setidentityfeedbackforwardingenabled"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetIdentityFeedbackForwardingEnabled</h3>
<ul>
<li>description: Given an identity (an email address or a domain), enables or disables whether Amazon SES forwards bounce and complaint notifications as email</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setidentityheadersinnotificationsenabled"><a aria-hidden="true" class="anchor-heading" href="#setidentityheadersinnotificationsenabled"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetIdentityHeadersInNotificationsEnabled</h3>
<ul>
<li>description: Given an identity (an email address or a domain), sets whether Amazon SES includes the original email headers in the Amazon Simple Notification Service (Amazon SNS) notifications of a specified type</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setidentitymailfromdomain"><a aria-hidden="true" class="anchor-heading" href="#setidentitymailfromdomain"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetIdentityMailFromDomain</h3>
<ul>
<li>description: Enables or disables the custom MAIL FROM domain setup for a verified identity (an email address or a domain)</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setidentitynotificationtopic"><a aria-hidden="true" class="anchor-heading" href="#setidentitynotificationtopic"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetIdentityNotificationTopic</h3>
<ul>
<li>description: Given an identity (an email address or a domain), sets the Amazon Simple Notification Service (Amazon SNS) topic to which Amazon SES will publish bounce, complaint, and/or delivery notifications for emails sent with that identity as the Source</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setreceiptruleposition"><a aria-hidden="true" class="anchor-heading" href="#setreceiptruleposition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetReceiptRulePosition</h3>
<ul>
<li>description: Sets the position of the specified receipt rule in the receipt rule set</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="testrendertemplate"><a aria-hidden="true" class="anchor-heading" href="#testrendertemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TestRenderTemplate</h3>
<ul>
<li>description: Creates a preview of the MIME content of an email when provided with a template and a set of replacement data</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateaccountsendingenabled"><a aria-hidden="true" class="anchor-heading" href="#updateaccountsendingenabled"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateAccountSendingEnabled</h3>
<ul>
<li>description: Enables or disables email sending across your entire Amazon SES account in the current AWS Region</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateconfigurationseteventdestination"><a aria-hidden="true" class="anchor-heading" href="#updateconfigurationseteventdestination"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateConfigurationSetEventDestination</h3>
<ul>
<li>description: Updates the event destination of a configuration set</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateconfigurationsetreputationmetricsenabled"><a aria-hidden="true" class="anchor-heading" href="#updateconfigurationsetreputationmetricsenabled"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateConfigurationSetReputationMetricsEnabled</h3>
<ul>
<li>description: Enables or disables the publishing of reputation metrics for emails sent using a specific configuration set in a given AWS Region</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateconfigurationsetsendingenabled"><a aria-hidden="true" class="anchor-heading" href="#updateconfigurationsetsendingenabled"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateConfigurationSetSendingEnabled</h3>
<ul>
<li>description: Enables or disables email sending for messages sent using a specific configuration set in a given AWS Region</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateconfigurationsettrackingoptions"><a aria-hidden="true" class="anchor-heading" href="#updateconfigurationsettrackingoptions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateConfigurationSetTrackingOptions</h3>
<ul>
<li>description: Modifies an association between a configuration set and a custom domain for open and click event tracking</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatecustomverificationemailtemplate"><a aria-hidden="true" class="anchor-heading" href="#updatecustomverificationemailtemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateCustomVerificationEmailTemplate</h3>
<ul>
<li>description: Updates an existing custom verification email template</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatereceiptrule"><a aria-hidden="true" class="anchor-heading" href="#updatereceiptrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateReceiptRule</h3>
<ul>
<li>description: Updates a receipt rule</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatetemplate"><a aria-hidden="true" class="anchor-heading" href="#updatetemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateTemplate</h3>
<ul>
<li>description: Updates an email template</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="verifydomaindkim"><a aria-hidden="true" class="anchor-heading" href="#verifydomaindkim"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>VerifyDomainDkim</h3>
<ul>
<li>description: Returns a set of DKIM tokens for a domain</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="verifydomainidentity"><a aria-hidden="true" class="anchor-heading" href="#verifydomainidentity"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>VerifyDomainIdentity</h3>
<ul>
<li>description: Verifies a domain</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="verifyemailaddress"><a aria-hidden="true" class="anchor-heading" href="#verifyemailaddress"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>VerifyEmailAddress</h3>
<ul>
<li>description: Verifies an email address. This action causes a confirmation email message to be sent to the specified address. This action is throttled at one request per second</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="verifyemailidentity"><a aria-hidden="true" class="anchor-heading" href="#verifyemailidentity"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>VerifyEmailIdentity</h3>
<ul>
<li>description: Verifies an email address. This action causes a confirmation email message to be sent to the specified address. This action is throttled at one request per second</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Simple Email Service"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-SSO Directory.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>SSO Directory - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-SSO Directory.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-SSO Directory.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-SSO Directory.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="SSO Directory - undefined" />
  <meta name="twitter:title" content="SSO Directory - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">SSO Directory</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="SSO Directory">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="sso-directory"><a aria-hidden="true" class="anchor-heading" href="#sso-directory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SSO Directory</h1>
<ul>
<li>prefix: sso-directory</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="addmembertogroup"><a aria-hidden="true" class="anchor-heading" href="#addmembertogroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddMemberToGroup</h3>
<ul>
<li>description: Adds member to the group in the directory that AWS SSO provides by default</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="completevirtualmfadeviceregistration"><a aria-hidden="true" class="anchor-heading" href="#completevirtualmfadeviceregistration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CompleteVirtualMfaDeviceRegistration</h3>
<ul>
<li>description: Completes the creation process of a virtual MFA device</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createalias"><a aria-hidden="true" class="anchor-heading" href="#createalias"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateAlias</h3>
<ul>
<li>description: Creates an alias for the directory that AWS SSO provides by default</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createbearertoken"><a aria-hidden="true" class="anchor-heading" href="#createbearertoken"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateBearerToken</h3>
<ul>
<li>description: Creates a bearer token for a given provisioning tenant.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createexternalidpconfigurationfordirectory"><a aria-hidden="true" class="anchor-heading" href="#createexternalidpconfigurationfordirectory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateExternalIdPConfigurationForDirectory</h3>
<ul>
<li>description: Create an External Identity Provider configuration for the directory</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="creategroup"><a aria-hidden="true" class="anchor-heading" href="#creategroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateGroup</h3>
<ul>
<li>description: Creates a group in the directory that AWS SSO provides by default</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createprovisioningtenant"><a aria-hidden="true" class="anchor-heading" href="#createprovisioningtenant"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateProvisioningTenant</h3>
<ul>
<li>description: Creates a provisioning tenant for a given directory.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createuser"><a aria-hidden="true" class="anchor-heading" href="#createuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateUser</h3>
<ul>
<li>description: Creates a user in the directory that AWS SSO provides by default</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletebearertoken"><a aria-hidden="true" class="anchor-heading" href="#deletebearertoken"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteBearerToken</h3>
<ul>
<li>description: Deletes the bearer token.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteexternalidpconfigurationfordirectory"><a aria-hidden="true" class="anchor-heading" href="#deleteexternalidpconfigurationfordirectory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteExternalIdPConfigurationForDirectory</h3>
<ul>
<li>description: Delete an External Identity Provider configuration associated with the directory</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletegroup"><a aria-hidden="true" class="anchor-heading" href="#deletegroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteGroup</h3>
<ul>
<li>description: Deletes a group from the directory that AWS SSO provides by default</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletemfadeviceforuser"><a aria-hidden="true" class="anchor-heading" href="#deletemfadeviceforuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteMfaDeviceForUser</h3>
<ul>
<li>description: Deletes a MFA device by device name for a given user</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteprovisioningtenant"><a aria-hidden="true" class="anchor-heading" href="#deleteprovisioningtenant"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteProvisioningTenant</h3>
<ul>
<li>description: Deletes the provisioning tenant.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteuser"><a aria-hidden="true" class="anchor-heading" href="#deleteuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteUser</h3>
<ul>
<li>description: Deletes a user from the directory that AWS SSO provides by default</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedirectory"><a aria-hidden="true" class="anchor-heading" href="#describedirectory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDirectory</h3>
<ul>
<li>description: Retrieve information about the directory that AWS SSO provides by default</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describegroups"><a aria-hidden="true" class="anchor-heading" href="#describegroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeGroups</h3>
<ul>
<li>description: Retrieves information about group from the directory that AWS SSO provides by default</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeusers"><a aria-hidden="true" class="anchor-heading" href="#describeusers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeUsers</h3>
<ul>
<li>description: Retrieves information about user from the directory that AWS SSO provides by default</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disableexternalidpconfigurationfordirectory"><a aria-hidden="true" class="anchor-heading" href="#disableexternalidpconfigurationfordirectory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisableExternalIdPConfigurationForDirectory</h3>
<ul>
<li>description: Disable authentication of end users with an External Identity Provider</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disableuser"><a aria-hidden="true" class="anchor-heading" href="#disableuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisableUser</h3>
<ul>
<li>description: Deactivates user in the directory that AWS SSO provides by default</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="enableexternalidpconfigurationfordirectory"><a aria-hidden="true" class="anchor-heading" href="#enableexternalidpconfigurationfordirectory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EnableExternalIdPConfigurationForDirectory</h3>
<ul>
<li>description: Enable authentication of end users with an External Identity Provider</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="enableuser"><a aria-hidden="true" class="anchor-heading" href="#enableuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EnableUser</h3>
<ul>
<li>description: Activates user in the directory that AWS SSO provides by default</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getawsspconfigurationfordirectory"><a aria-hidden="true" class="anchor-heading" href="#getawsspconfigurationfordirectory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAWSSPConfigurationForDirectory</h3>
<ul>
<li>description: Retrieve the AWS SSO Service Provider configurations for the directory</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listbearertokens"><a aria-hidden="true" class="anchor-heading" href="#listbearertokens"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListBearerTokens</h3>
<ul>
<li>description: Lists bearer tokens for a given provisioning tenant.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listexternalidpconfigurationsfordirectory"><a aria-hidden="true" class="anchor-heading" href="#listexternalidpconfigurationsfordirectory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListExternalIdPConfigurationsForDirectory</h3>
<ul>
<li>description: List all the External Identity Provider configurations created for the directory</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listgroupsforuser"><a aria-hidden="true" class="anchor-heading" href="#listgroupsforuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListGroupsForUser</h3>
<ul>
<li>description: Lists groups for a user from the directory that AWS SSO provides by default</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listmembersingroup"><a aria-hidden="true" class="anchor-heading" href="#listmembersingroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListMembersInGroup</h3>
<ul>
<li>description: Retrieves all members that are part of the group in the directory that AWS SSO provides by default</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listmfadevicesforuser"><a aria-hidden="true" class="anchor-heading" href="#listmfadevicesforuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListMfaDevicesForUser</h3>
<ul>
<li>description: Lists all active MFA devices and their MFA device metadata for a user</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listprovisioningtenants"><a aria-hidden="true" class="anchor-heading" href="#listprovisioningtenants"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListProvisioningTenants</h3>
<ul>
<li>description: Lists provisioning tenants for a given directory.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="removememberfromgroup"><a aria-hidden="true" class="anchor-heading" href="#removememberfromgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemoveMemberFromGroup</h3>
<ul>
<li>description: Removes member that are part of the group in the directory that AWS SSO provides by default</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="searchgroups"><a aria-hidden="true" class="anchor-heading" href="#searchgroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SearchGroups</h3>
<ul>
<li>description: Search for groups within the associated directory</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="searchusers"><a aria-hidden="true" class="anchor-heading" href="#searchusers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SearchUsers</h3>
<ul>
<li>description: Search for users within the associated directory</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startvirtualmfadeviceregistration"><a aria-hidden="true" class="anchor-heading" href="#startvirtualmfadeviceregistration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartVirtualMfaDeviceRegistration</h3>
<ul>
<li>description: Begins the creation process of virtual mfa device</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateexternalidpconfigurationfordirectory"><a aria-hidden="true" class="anchor-heading" href="#updateexternalidpconfigurationfordirectory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateExternalIdPConfigurationForDirectory</h3>
<ul>
<li>description: Update an External Identity Provider configuration associated with the directory</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updategroup"><a aria-hidden="true" class="anchor-heading" href="#updategroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateGroup</h3>
<ul>
<li>description: Updates information about group in the directory that AWS SSO provides by default</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatepassword"><a aria-hidden="true" class="anchor-heading" href="#updatepassword"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdatePassword</h3>
<ul>
<li>description: Updates password by sending password reset link via email or generating one time password for a user in the directory that AWS SSO provides by default</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateuser"><a aria-hidden="true" class="anchor-heading" href="#updateuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateUser</h3>
<ul>
<li>description: Updates user information in the directory that AWS SSO provides by default</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="verifyemail"><a aria-hidden="true" class="anchor-heading" href="#verifyemail"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>VerifyEmail</h3>
<ul>
<li>description: Verify email address of an User</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-SSO Directory"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/cloudwatch.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>CloudWatch - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/cloudwatch.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/cloudwatch.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/cloudwatch.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="CloudWatch - undefined" />
  <meta name="twitter:title" content="CloudWatch - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/1f759d8c-cca7-4fc4-9aa2-6dbf6e596abf.html">Services</a></li><li class="breadcrumb-nav-list-item">CloudWatch</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/open-guides/og-aws" target="_blank"> og-aws  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="CloudWatch">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="cloudwatch"><a aria-hidden="true" class="anchor-heading" href="#cloudwatch"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CloudWatch</h1>
<h3 id="cloudwatch-basics"><a aria-hidden="true" class="anchor-heading" href="#cloudwatch-basics"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CloudWatch Basics</h3>
<ul>
<li>📒  <a href="https://aws.amazon.com/cloudwatch/">Homepage</a> ∙ <a href="https://aws.amazon.com/documentation/cloudwatch/">Documentation</a> ∙ <a href="https://aws.amazon.com/cloudwatch/faqs/">FAQ</a> ∙ <a href="https://aws.amazon.com/cloudwatch/pricing/">Pricing</a></li>
<li><strong>CloudWatch</strong> monitors resources and applications, captures logs, and sends events.</li>
<li>CloudWatch monitoring is the standard mechanism for keeping tabs on AWS resources. A wide range of  <a href="http://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CW_Support_For_AWS.html"><strong>metrics and dimensions</strong></a> are available via CloudWatch, allowing you to create time based graphs, <strong><a href="http://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/AlarmThatSendsEmail.html">alarms</a></strong>, and <strong><a href="http://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch_Dashboards.html">dashboards</a></strong>.
<ul>
<li>Alarms are the most practical use of CloudWatch, allowing you to trigger notifications from any given metric.</li>
<li>Alarms can trigger <a href="http://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/ConsoleAlarms.html">SNS notifications</a>, <a href="http://docs.aws.amazon.com/autoscaling/latest/userguide/policy_creating.html">Auto Scaling actions</a>, or <a href="http://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/UsingAlarmActions.html">EC2 actions</a>.</li>
<li>Alarms also support <a href="https://aws.amazon.com/about-aws/whats-new/2017/12/amazon-cloudwatch-alarms-now-alerts-you-when-any-m-out-of-n-metric-datapoints-in-an-interval-are-above-your-threshold/">alerting when any M out of N datapoints cross the alarm threshold</a>.</li>
<li>Publish and share graphs of metrics by creating <a href="https://aws.amazon.com/blogs/aws/cloudwatch-dashboards-create-use-customized-metrics-views/">customizable dashboard views</a>.
<ul>
<li>Monitor and report on EC2 <a href="http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/monitoring-system-instance-status-check.html#creating_status_check_alarms">instance system check failure alarms</a>.</li>
</ul>
</li>
</ul>
</li>
<li><strong>Using CloudWatch Events:</strong>
<ul>
<li>Events create a mechanism to automate actions in various services on AWS. You can create <a href="http://docs.aws.amazon.com/AmazonCloudWatch/latest/events/EventTypes.html">event rules</a> from instance states, AWS APIs, Auto Scaling, Run commands, deployments or time-based schedules (think Cron).</li>
<li><a href="http://docs.aws.amazon.com/AmazonCloudWatch/latest/events/CWE_GettingStarted.html">Triggered events</a> can invoke Lambda functions, send SNS/SQS/Kinesis messages, or perform instance actions (terminate, restart, stop, or snapshot volumes).</li>
<li>Custom payloads can be sent to targets in JSON format, this is especially useful when triggering Lambdas.</li>
</ul>
</li>
<li><strong>Using CloudWatch Logs:</strong>
<ul>
<li><a href="http://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/WhatIsCloudWatchLogs.html">CloudWatch Logs</a> is a streaming log storage system. By storing logs within AWS you have access to unlimited paid storage, but you also have the option of streaming logs directly to ElasticSearch or custom Lambdas.</li>
<li>A <a href="http://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CWL_GettingStarted.html">log agent installed</a> on your servers will process logs over time and send them to CloudWatch Logs.</li>
<li>You can <a href="http://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/S3Export.html">export logged data to S3</a> or stream results to other AWS services.</li>
<li>CloudWatch Logs can be <a href="http://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/encrypt-log-data-kms.html">encrypted using keys managed through KMS</a>.</li>
</ul>
</li>
<li><strong>Detailed monitoring:</strong> <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-cloudwatch-new.html">Detailed monitoring</a> for EC2 instances must be enabled to get granular metrics, and is <a href="https://aws.amazon.com/cloudwatch/pricing/">billed under CloudWatch</a>.</li>
</ul>
<h3 id="cloudwatch-alternatives-and-lock-in"><a aria-hidden="true" class="anchor-heading" href="#cloudwatch-alternatives-and-lock-in"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CloudWatch Alternatives and Lock-In</h3>
<ul>
<li>CloudWatch offers fairly basic functionality that doesn't create significant (additional) AWS lock-in. Most of the metrics provided by the service can be obtained through APIs that can be imported into other aggregation or visualization tools or services (many specifically provide CloudWatch data import services).</li>
<li>🚪 Alternatives to CloudWatch monitoring services include <a href="http://newrelic.com/">NewRelic</a>, <a href="http://datadog.com/">Datadog</a>, <a href="http://sumologic.com/">Sumo Logic</a>, <a href="http://zabbix.com/">Zabbix</a>, <a href="http://nagios.org/">Nagios</a>, <a href="http://ruxit.com/">Ruxit</a>, <a href="https://www.elastic.co/elk-stack">Elastic Stack</a>, open source options such as <a href="https://github.com/etsy/statsd">StatsD</a> or <a href="https://collectd.org/">collectd</a> with <a href="https://graphiteapp.org/">Graphite</a>, and many others.</li>
<li>🚪 CloudWatch Log alternatives include <a href="http://splunk.com/">Splunk</a>, <a href="http://sumologic.com/">Sumo Logic</a>, <a href="http://loggly.com/">Loggly</a>, <a href="https://logdna.com/">LogDNA</a>, <a href="https://www.elastic.co/products/logstash">Logstash</a>, <a href="https://papertrailapp.com/">Papertrail</a>, <a href="https://www.elastic.co/elk-stack">Elastic Stack</a>, and other centralized logging solutions.</li>
</ul>
<h3 id="cloudwatch-tips"><a aria-hidden="true" class="anchor-heading" href="#cloudwatch-tips"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CloudWatch Tips</h3>
<ul>
<li>Some very common use cases for CloudWatch are <strong><a href="http://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/monitor_estimated_charges_with_cloudwatch.html">billing alarms</a></strong>, <strong>instance</strong> <strong>or <a href="http://docs.aws.amazon.com/elasticloadbalancing/latest/application/load-balancer-cloudwatch-metrics.html">load balancer up/down alarms</a></strong>, and <strong>disk usage alerts</strong>.</li>
<li>You can use <a href="http://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/UsingConfig_WinAMI.html#send_logs_to_cwl">EC2Config</a> to monitor watch memory and disk metrics on Windows platform instances. For Linux, there are <a href="http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/mon-scripts.html">example scripts</a> that do the same thing.</li>
<li>You can <a href="http://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/publishingMetrics.html">publish your own metrics</a> using the AWS API. <a href="https://aws.amazon.com/cloudwatch/pricing/">Incurs additional cost</a>.</li>
<li>You can stream directly from CloudWatch Logs to a Lambda or ElasticSearch cluster by creating <a href="http://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/Subscriptions.html">subscriptions</a> on Log Groups.</li>
<li>Don't forget to take advantage of the <a href="https://aws.amazon.com/free/#Amazon_CloudWatch">CloudWatch non-expiring free tier</a>.</li>
</ul>
<h3 id="cloudwatch-gotchas-and-limitations"><a aria-hidden="true" class="anchor-heading" href="#cloudwatch-gotchas-and-limitations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CloudWatch Gotchas and Limitations</h3>
<ul>
<li>🔸Metrics in CloudWatch originate <a href="https://forums.aws.amazon.com/message.jspa?messageID=403578">on the hypervisor</a>. The hypervisor doesn't have access to OS information, so certain metrics (most notably memory utilization) are not available unless pushed to CloudWatch from inside the instance.</li>
<li>🔸You can not use <a href="https://forums.aws.amazon.com/thread.jspa?threadID=94984">more than one metric for an alarm</a>.</li>
<li>🔸Notifications you receive from alarms will not have any contextual detail; they have only the specifics of the threshold, alarm state, and timing.</li>
<li>🔸By default, CloudWatch metric resolution is 1 minute. If you send multiple values of a metric within the same minute, they will be aggregated into minimum, maximum, average and total (sum) per minute.</li>
<li>🐥In July 2017, a new <a href="http://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/publishingMetrics.html#high-resolution-metrics">high-resolution option</a> was added for CloudWatch metrics and alarms. This feature allows you to record metrics with 1-second resolution, and to evaluate CloudWatch alarms every 10 seconds.
<ul>
<li>The <a href="https://aws.amazon.com/blogs/aws/new-high-resolution-custom-metrics-and-alarms-for-amazon-cloudwatch/">blog post introducing this feature</a> describes how to publish a high-resolution metric to CloudWatch. Note that when calling the <code>PutMetricData</code> API, <code>StorageResolution</code> is an attribute of each item you send in the <code>MetricData</code> array, not a direct parameter of the <code>PutMetricData</code> API call.</li>
</ul>
</li>
<li>🔸Data about metrics is kept in CloudWatch <a href="https://aws.amazon.com/blogs/aws/amazon-cloudwatch-update-extended-metrics-retention-user-interface-update/">for 15 months</a>, starting November 2016 (used to be 14 days). Minimum granularity increases after 15 days.</li>
</ul><span id="navId" data="cloudwatch"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Database Migration Service.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Database Migration Service - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Database Migration Service.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Database Migration Service.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Database Migration Service.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Database Migration Service - undefined" />
  <meta name="twitter:title" content="Database Migration Service - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Database Migration Service</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Database Migration Service">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="database-migration-service"><a aria-hidden="true" class="anchor-heading" href="#database-migration-service"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Database Migration Service</h1>
<ul>
<li>prefix: dms</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="addtagstoresource"><a aria-hidden="true" class="anchor-heading" href="#addtagstoresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddTagsToResource</h3>
<ul>
<li>description: Adds metadata tags to a DMS resource, including replication instance, endpoint, security group, and migration task</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Certificate": {
        "resource_type": "Certificate",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "Endpoint": {
        "resource_type": "Endpoint",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "EventSubscription": {
        "resource_type": "EventSubscription",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "ReplicationInstance": {
        "resource_type": "ReplicationInstance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "ReplicationSubnetGroup": {
        "resource_type": "ReplicationSubnetGroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "ReplicationTask": {
        "resource_type": "ReplicationTask",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "dms:req-tag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="applypendingmaintenanceaction"><a aria-hidden="true" class="anchor-heading" href="#applypendingmaintenanceaction"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ApplyPendingMaintenanceAction</h3>
<ul>
<li>description: Applies a pending maintenance action to a resource (for example, to a replication instance).</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ReplicationInstance": {
        "resource_type": "ReplicationInstance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createendpoint"><a aria-hidden="true" class="anchor-heading" href="#createendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateEndpoint</h3>
<ul>
<li>description: Creates an endpoint using the provided settings</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "dms:req-tag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createeventsubscription"><a aria-hidden="true" class="anchor-heading" href="#createeventsubscription"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateEventSubscription</h3>
<ul>
<li>description: Creates an AWS DMS event notification subscription.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "dms:req-tag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createreplicationinstance"><a aria-hidden="true" class="anchor-heading" href="#createreplicationinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateReplicationInstance</h3>
<ul>
<li>description: Creates the replication instance using the specified parameters</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "dms:req-tag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createreplicationsubnetgroup"><a aria-hidden="true" class="anchor-heading" href="#createreplicationsubnetgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateReplicationSubnetGroup</h3>
<ul>
<li>description: Creates a replication subnet group given a list of the subnet IDs in a VPC</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "dms:req-tag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createreplicationtask"><a aria-hidden="true" class="anchor-heading" href="#createreplicationtask"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateReplicationTask</h3>
<ul>
<li>description: Creates a replication task using the specified parameters</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Endpoint": {
        "resource_type": "Endpoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "ReplicationInstance": {
        "resource_type": "ReplicationInstance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "dms:req-tag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletecertificate"><a aria-hidden="true" class="anchor-heading" href="#deletecertificate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteCertificate</h3>
<ul>
<li>description: Deletes the specified certificate</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Certificate": {
        "resource_type": "Certificate",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteendpoint"><a aria-hidden="true" class="anchor-heading" href="#deleteendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteEndpoint</h3>
<ul>
<li>description: Deletes the specified endpoint</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Endpoint": {
        "resource_type": "Endpoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteeventsubscription"><a aria-hidden="true" class="anchor-heading" href="#deleteeventsubscription"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteEventSubscription</h3>
<ul>
<li>description: Deletes an AWS DMS event subscription.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "EventSubscription": {
        "resource_type": "EventSubscription",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletereplicationinstance"><a aria-hidden="true" class="anchor-heading" href="#deletereplicationinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteReplicationInstance</h3>
<ul>
<li>description: Deletes the specified replication instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ReplicationInstance": {
        "resource_type": "ReplicationInstance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletereplicationsubnetgroup"><a aria-hidden="true" class="anchor-heading" href="#deletereplicationsubnetgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteReplicationSubnetGroup</h3>
<ul>
<li>description: Deletes a subnet group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ReplicationSubnetGroup": {
        "resource_type": "ReplicationSubnetGroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletereplicationtask"><a aria-hidden="true" class="anchor-heading" href="#deletereplicationtask"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteReplicationTask</h3>
<ul>
<li>description: Deletes the specified replication task</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ReplicationTask": {
        "resource_type": "ReplicationTask",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeaccountattributes"><a aria-hidden="true" class="anchor-heading" href="#describeaccountattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAccountAttributes</h3>
<ul>
<li>description: Lists all of the AWS DMS attributes for a customer account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecertificates"><a aria-hidden="true" class="anchor-heading" href="#describecertificates"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeCertificates</h3>
<ul>
<li>description: Provides a description of the certificate.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeconnections"><a aria-hidden="true" class="anchor-heading" href="#describeconnections"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeConnections</h3>
<ul>
<li>description: Describes the status of the connections that have been made between the replication instance and an endpoint</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeendpointtypes"><a aria-hidden="true" class="anchor-heading" href="#describeendpointtypes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEndpointTypes</h3>
<ul>
<li>description: Returns information about the type of endpoints available</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeendpoints"><a aria-hidden="true" class="anchor-heading" href="#describeendpoints"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEndpoints</h3>
<ul>
<li>description: Returns information about the endpoints for your account in the current region</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeeventcategories"><a aria-hidden="true" class="anchor-heading" href="#describeeventcategories"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEventCategories</h3>
<ul>
<li>description: Lists categories for all event source types, or, if specified, for a specified source type.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeeventsubscriptions"><a aria-hidden="true" class="anchor-heading" href="#describeeventsubscriptions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEventSubscriptions</h3>
<ul>
<li>description: Lists all the event subscriptions for a customer account.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeevents"><a aria-hidden="true" class="anchor-heading" href="#describeevents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEvents</h3>
<ul>
<li>description: Lists events for a given source identifier and source type.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeorderablereplicationinstances"><a aria-hidden="true" class="anchor-heading" href="#describeorderablereplicationinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeOrderableReplicationInstances</h3>
<ul>
<li>description: Returns information about the replication instance types that can be created in the specified region</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describerefreshschemasstatus"><a aria-hidden="true" class="anchor-heading" href="#describerefreshschemasstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeRefreshSchemasStatus</h3>
<ul>
<li>description: Returns the status of the RefreshSchemas operation</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Endpoint": {
        "resource_type": "Endpoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describereplicationinstancetasklogs"><a aria-hidden="true" class="anchor-heading" href="#describereplicationinstancetasklogs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeReplicationInstanceTaskLogs</h3>
<ul>
<li>description: Returns information about the task logs for the specified task.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ReplicationInstance": {
        "resource_type": "ReplicationInstance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describereplicationinstances"><a aria-hidden="true" class="anchor-heading" href="#describereplicationinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeReplicationInstances</h3>
<ul>
<li>description: Returns information about replication instances for your account in the current region</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describereplicationsubnetgroups"><a aria-hidden="true" class="anchor-heading" href="#describereplicationsubnetgroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeReplicationSubnetGroups</h3>
<ul>
<li>description: Returns information about the replication subnet groups</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describereplicationtaskassessmentresults"><a aria-hidden="true" class="anchor-heading" href="#describereplicationtaskassessmentresults"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeReplicationTaskAssessmentResults</h3>
<ul>
<li>description: Returns the task assessment results from Amazon S3. This action always returns the latest results.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ReplicationTask": {
        "resource_type": "ReplicationTask",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describereplicationtasks"><a aria-hidden="true" class="anchor-heading" href="#describereplicationtasks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeReplicationTasks</h3>
<ul>
<li>description: Returns information about replication tasks for your account in the current region</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeschemas"><a aria-hidden="true" class="anchor-heading" href="#describeschemas"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSchemas</h3>
<ul>
<li>description: Returns information about the schema for the specified endpoint</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Endpoint": {
        "resource_type": "Endpoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetablestatistics"><a aria-hidden="true" class="anchor-heading" href="#describetablestatistics"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTableStatistics</h3>
<ul>
<li>description: Returns table statistics on the database migration task, including table name, rows inserted, rows updated, and rows deleted</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ReplicationTask": {
        "resource_type": "ReplicationTask",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="importcertificate"><a aria-hidden="true" class="anchor-heading" href="#importcertificate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ImportCertificate</h3>
<ul>
<li>description: Uploads the specified certificate.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Lists all tags for an AWS DMS resource</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Certificate": {
        "resource_type": "Certificate",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "Endpoint": {
        "resource_type": "Endpoint",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "EventSubscription": {
        "resource_type": "EventSubscription",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "ReplicationInstance": {
        "resource_type": "ReplicationInstance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "ReplicationSubnetGroup": {
        "resource_type": "ReplicationSubnetGroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "ReplicationTask": {
        "resource_type": "ReplicationTask",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyendpoint"><a aria-hidden="true" class="anchor-heading" href="#modifyendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyEndpoint</h3>
<ul>
<li>description: Modifies the specified endpoint</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Endpoint": {
        "resource_type": "Endpoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "Certificate": {
        "resource_type": "Certificate",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyeventsubscription"><a aria-hidden="true" class="anchor-heading" href="#modifyeventsubscription"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyEventSubscription</h3>
<ul>
<li>description: Modifies an existing AWS DMS event notification subscription.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyreplicationinstance"><a aria-hidden="true" class="anchor-heading" href="#modifyreplicationinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyReplicationInstance</h3>
<ul>
<li>description: Modifies the replication instance to apply new settings</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ReplicationInstance": {
        "resource_type": "ReplicationInstance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyreplicationsubnetgroup"><a aria-hidden="true" class="anchor-heading" href="#modifyreplicationsubnetgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyReplicationSubnetGroup</h3>
<ul>
<li>description: Modifies the settings for the specified replication subnet group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyreplicationtask"><a aria-hidden="true" class="anchor-heading" href="#modifyreplicationtask"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyReplicationTask</h3>
<ul>
<li>description: Modifies the specified replication task.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ReplicationTask": {
        "resource_type": "ReplicationTask",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="rebootreplicationinstance"><a aria-hidden="true" class="anchor-heading" href="#rebootreplicationinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RebootReplicationInstance</h3>
<ul>
<li>description: Reboots a replication instance. Rebooting results in a momentary outage, until the replication instance becomes available again.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ReplicationInstance": {
        "resource_type": "ReplicationInstance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="refreshschemas"><a aria-hidden="true" class="anchor-heading" href="#refreshschemas"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RefreshSchemas</h3>
<ul>
<li>description: Populates the schema for the specified endpoint</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Endpoint": {
        "resource_type": "Endpoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "ReplicationInstance": {
        "resource_type": "ReplicationInstance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="reloadtables"><a aria-hidden="true" class="anchor-heading" href="#reloadtables"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ReloadTables</h3>
<ul>
<li>description: Reloads the target database table with the source data.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ReplicationTask": {
        "resource_type": "ReplicationTask",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="removetagsfromresource"><a aria-hidden="true" class="anchor-heading" href="#removetagsfromresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemoveTagsFromResource</h3>
<ul>
<li>description: Removes metadata tags from a DMS resource</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Certificate": {
        "resource_type": "Certificate",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "Endpoint": {
        "resource_type": "Endpoint",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "EventSubscription": {
        "resource_type": "EventSubscription",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "ReplicationInstance": {
        "resource_type": "ReplicationInstance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "ReplicationSubnetGroup": {
        "resource_type": "ReplicationSubnetGroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "ReplicationTask": {
        "resource_type": "ReplicationTask",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startreplicationtask"><a aria-hidden="true" class="anchor-heading" href="#startreplicationtask"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartReplicationTask</h3>
<ul>
<li>description: Starts the replication task</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ReplicationTask": {
        "resource_type": "ReplicationTask",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startreplicationtaskassessment"><a aria-hidden="true" class="anchor-heading" href="#startreplicationtaskassessment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartReplicationTaskAssessment</h3>
<ul>
<li>description: Starts the replication task assessment for unsupported data types in the source database.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ReplicationTask": {
        "resource_type": "ReplicationTask",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopreplicationtask"><a aria-hidden="true" class="anchor-heading" href="#stopreplicationtask"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopReplicationTask</h3>
<ul>
<li>description: Stops the replication task</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ReplicationTask": {
        "resource_type": "ReplicationTask",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="testconnection"><a aria-hidden="true" class="anchor-heading" href="#testconnection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TestConnection</h3>
<ul>
<li>description: Tests the connection between the replication instance and the endpoint</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Endpoint": {
        "resource_type": "Endpoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "ReplicationInstance": {
        "resource_type": "ReplicationInstance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Database Migration Service"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/opsworks.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>OpsWorks - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/opsworks.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/opsworks.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/opsworks.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="OpsWorks - undefined" />
  <meta name="twitter:title" content="OpsWorks - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/1f759d8c-cca7-4fc4-9aa2-6dbf6e596abf.html">Services</a></li><li class="breadcrumb-nav-list-item">OpsWorks</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/open-guides/og-aws" target="_blank"> og-aws  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="OpsWorks">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="opsworks"><a aria-hidden="true" class="anchor-heading" href="#opsworks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>OpsWorks</h1>
<h3 id="opsworks-basics"><a aria-hidden="true" class="anchor-heading" href="#opsworks-basics"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>OpsWorks Basics</h3>
<ul>
<li>📒 <a href="https://aws.amazon.com/opsworks/">Homepage</a> ∙ <a href="https://aws.amazon.com/documentation/opsworks/">Documentation</a> ∙ <a href="https://aws.amazon.com/opsworks/faqs/">FAQ</a> ∙ Pricing: <a href="https://aws.amazon.com/opsworks/stacks/pricing/">Stacks</a>, <a href="https://aws.amazon.com/opsworks/chefautomate/pricing/">Chef Automate</a>, <a href="https://aws.amazon.com/opsworks/puppetenterprise/pricing/">Puppet Enterprise</a></li>
<li>OpsWorks is a configuration management service that uses <a href="https://www.chef.io/chef/">Chef</a> or <a href="https://www.puppet.com">Puppet</a> configuration management. It is broken out into three different services:
<ul>
<li><a href="https://aws.amazon.com/opsworks/stacks/">OpsWorks Stacks</a>: The service lets you configure and launch stacks specific to your application's needs, and allows you to automate application deployments. Chef runs can be performed manually via the Execute Cookbooks command, otherwise they are only run as part of lifecycle events.
<ul>
<li>OpsWorks Stacks differs from standard configuration management services in that it also allows you to perform some infrastructure and application automation (such as creating Amazon EC2 instances and deploying applications via Chef cookbooks).</li>
</ul>
</li>
<li><a href="https://aws.amazon.com/opsworks/chefautomate/">OpsWorks for Chef Automate</a>: This service launches a dedicated Chef Automate server in your account, which can be used to associate nodes, upload cookbook code, and configure systems. Automated patching, backups, OS updates, and minor Chef version upgrades are provided as part of the service. An AWS API is provided for associating/disassociating nodes. Chef runs can be scheduled on nodes using the <a href="https://supermarket.chef.io/cookbooks/chef-client">chef-client cookbook</a>.</li>
<li><a href="https://aws.amazon.com/opsworks/puppetenterprise/">OpsWorks for Puppet Enterprise</a>: This service launches a dedicated Puppet Master in your account, which can be used to associate nodes, upload modules, and configure systems. Automated patching, backups, OS updates, and minor Puppet version upgrades are provided as part of the service. An AWS API is provided for associating/disassociating nodes. By default, the Puppet agent will run automatically every 30 minutes on associated nodes.</li>
</ul>
</li>
<li>OpsWorks for Chef Automate and OpsWorks for Puppet Enterprise are strictly designed for configuration management, and do not provision infrastructure outside the Chef Server/Puppet Master that is created in our account.</li>
<li>All three OpsWorks services support managing both Amazon EC2 and on-premises infrastructure, however the implementation details differ slightly.
<ul>
<li>OpsWorks Stacks allows you to register instances and install the OpsWorks Agent to connect to your stack.</li>
<li>OpsWorks for Chef Automate and OpsWorks for Puppet Enterprise allow you to associate new or existing infrastructure using either the opsworks-cm:AssociateNode API action or the vendor-supported method for associating nodes to Chef Server or Puppet Enterprise.</li>
</ul>
</li>
<li>Although OpsWorks will let you work with common Chef recipes or Puppet modules when creating your stacks, creating custom recipes will require familiarity with Chef or Puppet syntax. Chef/Puppet code is not supported as part of AWS Support.</li>
<li>As of December 2016, OpsWorks Stacks supports Chef versions <a href="http://docs.aws.amazon.com/opsworks/latest/userguide/workingcookbook.html">12, 11.10.4, 11.4.4 and 0.9.15.5</a>.</li>
<li>As of December 2016, OpsWorks for Chef Automate uses <a href="http://docs.aws.amazon.com/opsworks/latest/userguide/welcome_opscm.html">Chef Server version 12.11.1</a> This is the current stable version of Chef.</li>
<li><a href="http://docs.aws.amazon.com/opsworks/latest/userguide/workingcookbook-chef11-10.html#workingcookbook-chef11-10-berkshelf">Berkshelf</a>can be used  with Chef stacks of version 11.10 and later for managing cookbooks and their respective dependencies. However, on Chef 12.x stacks, Berkshelf must be installed by the stack administrator.</li>
<li>Running your own Chef environment may be an alternative to consider - some considerations are listed <a href="http://www.bitlancer.com/blog/2015/10/05/opsworks-vs-chef.html">in this Bitlancer article.</a></li>
</ul>
<h3 id="opsworks-alternatives-and-lock-in"><a aria-hidden="true" class="anchor-heading" href="#opsworks-alternatives-and-lock-in"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>OpsWorks Alternatives and Lock-in</h3>
<ul>
<li>Major competitors in Configuration Management include:
<ul>
<li><a href="https://chef.io">Chef</a></li>
<li><a href="https://puppet.com">Puppet</a></li>
<li><a href="https://www.ansible.com">Ansible</a>.</li>
</ul>
</li>
</ul>
<h3 id="opsworks-tips"><a aria-hidden="true" class="anchor-heading" href="#opsworks-tips"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>OpsWorks Tips</h3>
<ul>
<li>OpsWorks Stacks and OpsWorks for Chef Automate use Chef cookbooks for configuration. Chef provides free training to learn syntax, best practices, etc. at <a href="https://learn.chef.io">https://learn.chef.io</a>.</li>
<li>OpsWorks for Puppet Enterprise uses Puppet manifests for configuration. Puppet provides a very useful learning VM for download at <a href="https://learn.puppet.com/">https://learn.puppet.com/</a>.</li>
</ul>
<h3 id="opsworks-gotchas-and-limitations"><a aria-hidden="true" class="anchor-heading" href="#opsworks-gotchas-and-limitations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>OpsWorks Gotchas and Limitations</h3>
<ul>
<li>OpsWorks Stacks is not available in the following regions:
<ul>
<li>Montreal</li>
<li>GovCloud</li>
<li>Beijing</li>
</ul>
</li>
<li>OpsWorks for Chef Automate and OpsWorks for Puppet Enterprise are not available in the following regions:
<ul>
<li>Montreal</li>
<li>Sao Paulo</li>
<li>GovCloud</li>
<li>London</li>
<li>Paris</li>
<li>Seoul</li>
<li>Mumbai</li>
</ul>
</li>
</ul><span id="navId" data="opsworks"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Config.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Config - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Config.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Config.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Config.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Config - undefined" />
  <meta name="twitter:title" content="Config - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Config</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Config">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="config"><a aria-hidden="true" class="anchor-heading" href="#config"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Config</h1>
<ul>
<li>prefix: config</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="batchgetaggregateresourceconfig"><a aria-hidden="true" class="anchor-heading" href="#batchgetaggregateresourceconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchGetAggregateResourceConfig</h3>
<ul>
<li>description: Returns the current configuration items for resources that are present in your AWS Config aggregator</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ConfigurationAggregator": {
        "resource_type": "ConfigurationAggregator",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchgetresourceconfig"><a aria-hidden="true" class="anchor-heading" href="#batchgetresourceconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchGetResourceConfig</h3>
<ul>
<li>description: Returns the current configuration for one or more requested resources</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteaggregationauthorization"><a aria-hidden="true" class="anchor-heading" href="#deleteaggregationauthorization"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAggregationAuthorization</h3>
<ul>
<li>description: Deletes the authorization granted to the specified configuration aggregator account in a specified region</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "AggregationAuthorization": {
        "resource_type": "AggregationAuthorization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteconfigrule"><a aria-hidden="true" class="anchor-heading" href="#deleteconfigrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteConfigRule</h3>
<ul>
<li>description: Deletes the specified AWS Config rule and all of its evaluation results</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ConfigRule": {
        "resource_type": "ConfigRule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteconfigurationaggregator"><a aria-hidden="true" class="anchor-heading" href="#deleteconfigurationaggregator"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteConfigurationAggregator</h3>
<ul>
<li>description: Deletes the specified configuration aggregator and the aggregated data associated with the aggregator</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ConfigurationAggregator": {
        "resource_type": "ConfigurationAggregator",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteconfigurationrecorder"><a aria-hidden="true" class="anchor-heading" href="#deleteconfigurationrecorder"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteConfigurationRecorder</h3>
<ul>
<li>description: Deletes the configuration recorder</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteconformancepack"><a aria-hidden="true" class="anchor-heading" href="#deleteconformancepack"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteConformancePack</h3>
<ul>
<li>description: Deletes the specified conformance pack and all the AWS Config rules and all evaluation results within that conformance pack.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedeliverychannel"><a aria-hidden="true" class="anchor-heading" href="#deletedeliverychannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDeliveryChannel</h3>
<ul>
<li>description: Deletes the delivery channel</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteevaluationresults"><a aria-hidden="true" class="anchor-heading" href="#deleteevaluationresults"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteEvaluationResults</h3>
<ul>
<li>description: Deletes the evaluation results for the specified Config rule</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ConfigRule": {
        "resource_type": "ConfigRule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteorganizationconfigrule"><a aria-hidden="true" class="anchor-heading" href="#deleteorganizationconfigrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteOrganizationConfigRule</h3>
<ul>
<li>description: Deletes the specified organization config rule and all of its evaluation results from all member accounts in that organization.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteorganizationconformancepack"><a aria-hidden="true" class="anchor-heading" href="#deleteorganizationconformancepack"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteOrganizationConformancePack</h3>
<ul>
<li>description: Deletes the specified organization conformance pack and all of its evaluation results from all member accounts in that organization.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletependingaggregationrequest"><a aria-hidden="true" class="anchor-heading" href="#deletependingaggregationrequest"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeletePendingAggregationRequest</h3>
<ul>
<li>description: Deletes pending authorization requests for a specified aggregator account in a specified region</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteremediationconfiguration"><a aria-hidden="true" class="anchor-heading" href="#deleteremediationconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteRemediationConfiguration</h3>
<ul>
<li>description: Deletes the remediation configuration</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "RemediationConfiguration": {
        "resource_type": "RemediationConfiguration",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteremediationexceptions"><a aria-hidden="true" class="anchor-heading" href="#deleteremediationexceptions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteRemediationExceptions</h3>
<ul>
<li>description: Deletes one or more remediation exceptions for specific resource keys for a specific AWS Config Rule.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteresourceconfig"><a aria-hidden="true" class="anchor-heading" href="#deleteresourceconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteResourceConfig</h3>
<ul>
<li>description: Records the configuration state for a custom resource that has been deleted.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteretentionconfiguration"><a aria-hidden="true" class="anchor-heading" href="#deleteretentionconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteRetentionConfiguration</h3>
<ul>
<li>description: Deletes the retention configuration</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deliverconfigsnapshot"><a aria-hidden="true" class="anchor-heading" href="#deliverconfigsnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeliverConfigSnapshot</h3>
<ul>
<li>description: Schedules delivery of a configuration snapshot to the Amazon S3 bucket in the specified delivery channel</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeaggregatecompliancebyconfigrules"><a aria-hidden="true" class="anchor-heading" href="#describeaggregatecompliancebyconfigrules"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAggregateComplianceByConfigRules</h3>
<ul>
<li>description: Returns a list of compliant and noncompliant rules with the number of resources for compliant and noncompliant rules</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ConfigurationAggregator": {
        "resource_type": "ConfigurationAggregator",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeaggregationauthorizations"><a aria-hidden="true" class="anchor-heading" href="#describeaggregationauthorizations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAggregationAuthorizations</h3>
<ul>
<li>description: Returns a list of authorizations granted to various aggregator accounts and regions</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecompliancebyconfigrule"><a aria-hidden="true" class="anchor-heading" href="#describecompliancebyconfigrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeComplianceByConfigRule</h3>
<ul>
<li>description: Indicates whether the specified AWS Config rules are compliant</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ConfigRule": {
        "resource_type": "ConfigRule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecompliancebyresource"><a aria-hidden="true" class="anchor-heading" href="#describecompliancebyresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeComplianceByResource</h3>
<ul>
<li>description: Indicates whether the specified AWS resources are compliant</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeconfigruleevaluationstatus"><a aria-hidden="true" class="anchor-heading" href="#describeconfigruleevaluationstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeConfigRuleEvaluationStatus</h3>
<ul>
<li>description: Returns status information for each of your AWS managed Config rules</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ConfigRule": {
        "resource_type": "ConfigRule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeconfigrules"><a aria-hidden="true" class="anchor-heading" href="#describeconfigrules"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeConfigRules</h3>
<ul>
<li>description: Returns details about your AWS Config rules</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ConfigRule": {
        "resource_type": "ConfigRule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeconfigurationaggregatorsourcesstatus"><a aria-hidden="true" class="anchor-heading" href="#describeconfigurationaggregatorsourcesstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeConfigurationAggregatorSourcesStatus</h3>
<ul>
<li>description: Returns status information for sources within an aggregator</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ConfigurationAggregator": {
        "resource_type": "ConfigurationAggregator",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeconfigurationaggregators"><a aria-hidden="true" class="anchor-heading" href="#describeconfigurationaggregators"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeConfigurationAggregators</h3>
<ul>
<li>description: Returns the details of one or more configuration aggregators</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeconfigurationrecorderstatus"><a aria-hidden="true" class="anchor-heading" href="#describeconfigurationrecorderstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeConfigurationRecorderStatus</h3>
<ul>
<li>description: Returns the current status of the specified configuration recorder</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeconfigurationrecorders"><a aria-hidden="true" class="anchor-heading" href="#describeconfigurationrecorders"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeConfigurationRecorders</h3>
<ul>
<li>description: Returns the name of one or more specified configuration recorders</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeconformancepackcompliance"><a aria-hidden="true" class="anchor-heading" href="#describeconformancepackcompliance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeConformancePackCompliance</h3>
<ul>
<li>description: Returns compliance information for each rule in that conformance pack.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeconformancepackstatus"><a aria-hidden="true" class="anchor-heading" href="#describeconformancepackstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeConformancePackStatus</h3>
<ul>
<li>description: Provides one or more conformance packs deployment status.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeconformancepacks"><a aria-hidden="true" class="anchor-heading" href="#describeconformancepacks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeConformancePacks</h3>
<ul>
<li>description: Returns a list of one or more conformance packs.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedeliverychannelstatus"><a aria-hidden="true" class="anchor-heading" href="#describedeliverychannelstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDeliveryChannelStatus</h3>
<ul>
<li>description: Returns the current status of the specified delivery channel</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedeliverychannels"><a aria-hidden="true" class="anchor-heading" href="#describedeliverychannels"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDeliveryChannels</h3>
<ul>
<li>description: Returns details about the specified delivery channel</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeorganizationconfigrulestatuses"><a aria-hidden="true" class="anchor-heading" href="#describeorganizationconfigrulestatuses"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeOrganizationConfigRuleStatuses</h3>
<ul>
<li>description: Provides organization config rule deployment status for an organization.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeorganizationconfigrules"><a aria-hidden="true" class="anchor-heading" href="#describeorganizationconfigrules"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeOrganizationConfigRules</h3>
<ul>
<li>description: Returns a list of organization config rules.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeorganizationconformancepackstatuses"><a aria-hidden="true" class="anchor-heading" href="#describeorganizationconformancepackstatuses"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeOrganizationConformancePackStatuses</h3>
<ul>
<li>description: Provides organization conformance pack deployment status for an organization.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeorganizationconformancepacks"><a aria-hidden="true" class="anchor-heading" href="#describeorganizationconformancepacks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeOrganizationConformancePacks</h3>
<ul>
<li>description: Returns a list of organization conformance packs.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describependingaggregationrequests"><a aria-hidden="true" class="anchor-heading" href="#describependingaggregationrequests"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribePendingAggregationRequests</h3>
<ul>
<li>description: Returns a list of all pending aggregation requests</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeremediationconfigurations"><a aria-hidden="true" class="anchor-heading" href="#describeremediationconfigurations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeRemediationConfigurations</h3>
<ul>
<li>description: Returns the details of one or more remediation configurations</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "RemediationConfiguration": {
        "resource_type": "RemediationConfiguration",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeremediationexceptions"><a aria-hidden="true" class="anchor-heading" href="#describeremediationexceptions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeRemediationExceptions</h3>
<ul>
<li>description: Returns the details of one or more remediation exceptions.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeremediationexecutionstatus"><a aria-hidden="true" class="anchor-heading" href="#describeremediationexecutionstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeRemediationExecutionStatus</h3>
<ul>
<li>description: Provides a detailed view of a Remediation Execution for a set of resources including state, timestamps and any error messages for steps that have failed</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "RemediationConfiguration": {
        "resource_type": "RemediationConfiguration",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeretentionconfigurations"><a aria-hidden="true" class="anchor-heading" href="#describeretentionconfigurations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeRetentionConfigurations</h3>
<ul>
<li>description: Returns the details of one or more retention configurations</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getaggregatecompliancedetailsbyconfigrule"><a aria-hidden="true" class="anchor-heading" href="#getaggregatecompliancedetailsbyconfigrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAggregateComplianceDetailsByConfigRule</h3>
<ul>
<li>description: Returns the evaluation results for the specified AWS Config rule for a specific resource in a rule</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ConfigurationAggregator": {
        "resource_type": "ConfigurationAggregator",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getaggregateconfigrulecompliancesummary"><a aria-hidden="true" class="anchor-heading" href="#getaggregateconfigrulecompliancesummary"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAggregateConfigRuleComplianceSummary</h3>
<ul>
<li>description: Returns the number of compliant and noncompliant rules for one or more accounts and regions in an aggregator</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ConfigurationAggregator": {
        "resource_type": "ConfigurationAggregator",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getaggregatediscoveredresourcecounts"><a aria-hidden="true" class="anchor-heading" href="#getaggregatediscoveredresourcecounts"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAggregateDiscoveredResourceCounts</h3>
<ul>
<li>description: Returns the resource counts across accounts and regions that are present in your AWS Config aggregator</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ConfigurationAggregator": {
        "resource_type": "ConfigurationAggregator",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getaggregateresourceconfig"><a aria-hidden="true" class="anchor-heading" href="#getaggregateresourceconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAggregateResourceConfig</h3>
<ul>
<li>description: Returns configuration item that is aggregated for your specific resource in a specific source account and region</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ConfigurationAggregator": {
        "resource_type": "ConfigurationAggregator",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcompliancedetailsbyconfigrule"><a aria-hidden="true" class="anchor-heading" href="#getcompliancedetailsbyconfigrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetComplianceDetailsByConfigRule</h3>
<ul>
<li>description: Returns the evaluation results for the specified AWS Config rule</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ConfigRule": {
        "resource_type": "ConfigRule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcompliancedetailsbyresource"><a aria-hidden="true" class="anchor-heading" href="#getcompliancedetailsbyresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetComplianceDetailsByResource</h3>
<ul>
<li>description: Returns the evaluation results for the specified AWS resource</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcompliancesummarybyconfigrule"><a aria-hidden="true" class="anchor-heading" href="#getcompliancesummarybyconfigrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetComplianceSummaryByConfigRule</h3>
<ul>
<li>description: Returns the number of AWS Config rules that are compliant and noncompliant, up to a maximum of 25 for each</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcompliancesummarybyresourcetype"><a aria-hidden="true" class="anchor-heading" href="#getcompliancesummarybyresourcetype"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetComplianceSummaryByResourceType</h3>
<ul>
<li>description: Returns the number of resources that are compliant and the number that are noncompliant</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getconformancepackcompliancedetails"><a aria-hidden="true" class="anchor-heading" href="#getconformancepackcompliancedetails"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetConformancePackComplianceDetails</h3>
<ul>
<li>description: Returns compliance details of a conformance pack for all AWS resources that are monitered by conformance pack.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getconformancepackcompliancesummary"><a aria-hidden="true" class="anchor-heading" href="#getconformancepackcompliancesummary"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetConformancePackComplianceSummary</h3>
<ul>
<li>description: Provides compliance summary for one or more conformance packs.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdiscoveredresourcecounts"><a aria-hidden="true" class="anchor-heading" href="#getdiscoveredresourcecounts"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDiscoveredResourceCounts</h3>
<ul>
<li>description: Returns the resource types, the number of each resource type, and the total number of resources that AWS Config is recording in this region for your AWS account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getorganizationconfigruledetailedstatus"><a aria-hidden="true" class="anchor-heading" href="#getorganizationconfigruledetailedstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetOrganizationConfigRuleDetailedStatus</h3>
<ul>
<li>description: Returns detailed status for each member account within an organization for a given organization config rule.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getorganizationconformancepackdetailedstatus"><a aria-hidden="true" class="anchor-heading" href="#getorganizationconformancepackdetailedstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetOrganizationConformancePackDetailedStatus</h3>
<ul>
<li>description: Returns detailed status for each member account within an organization for a given organization conformance pack.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getresourceconfighistory"><a aria-hidden="true" class="anchor-heading" href="#getresourceconfighistory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetResourceConfigHistory</h3>
<ul>
<li>description: Returns a list of configuration items for the specified resource</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listaggregatediscoveredresources"><a aria-hidden="true" class="anchor-heading" href="#listaggregatediscoveredresources"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAggregateDiscoveredResources</h3>
<ul>
<li>description: Accepts a resource type and returns a list of resource identifiers that are aggregated for a specific resource type across accounts and regions</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ConfigurationAggregator": {
        "resource_type": "ConfigurationAggregator",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdiscoveredresources"><a aria-hidden="true" class="anchor-heading" href="#listdiscoveredresources"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDiscoveredResources</h3>
<ul>
<li>description: Accepts a resource type and returns a list of resource identifiers for the resources of that type</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: List the tags for AWS Config resource</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "AggregationAuthorization": {
        "resource_type": "AggregationAuthorization",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "ConfigRule": {
        "resource_type": "ConfigRule",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "ConfigurationAggregator": {
        "resource_type": "ConfigurationAggregator",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putaggregationauthorization"><a aria-hidden="true" class="anchor-heading" href="#putaggregationauthorization"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutAggregationAuthorization</h3>
<ul>
<li>description: Authorizes the aggregator account and region to collect data from the source account and region</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "AggregationAuthorization": {
        "resource_type": "AggregationAuthorization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putconfigrule"><a aria-hidden="true" class="anchor-heading" href="#putconfigrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutConfigRule</h3>
<ul>
<li>description: Adds or updates an AWS Config rule for evaluating whether your AWS resources comply with your desired configurations</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ConfigRule": {
        "resource_type": "ConfigRule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putconfigurationaggregator"><a aria-hidden="true" class="anchor-heading" href="#putconfigurationaggregator"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutConfigurationAggregator</h3>
<ul>
<li>description: Creates and updates the configuration aggregator with the selected source accounts and regions</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ConfigurationAggregator": {
        "resource_type": "ConfigurationAggregator",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putconfigurationrecorder"><a aria-hidden="true" class="anchor-heading" href="#putconfigurationrecorder"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutConfigurationRecorder</h3>
<ul>
<li>description: Creates a new configuration recorder to record the selected resource configurations</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putconformancepack"><a aria-hidden="true" class="anchor-heading" href="#putconformancepack"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutConformancePack</h3>
<ul>
<li>description: Creates or updates a conformance pack.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putdeliverychannel"><a aria-hidden="true" class="anchor-heading" href="#putdeliverychannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutDeliveryChannel</h3>
<ul>
<li>description: Creates a delivery channel object to deliver configuration information to an Amazon S3 bucket and Amazon SNS topic</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putevaluations"><a aria-hidden="true" class="anchor-heading" href="#putevaluations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutEvaluations</h3>
<ul>
<li>description: Used by an AWS Lambda function to deliver evaluation results to AWS Config</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putorganizationconfigrule"><a aria-hidden="true" class="anchor-heading" href="#putorganizationconfigrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutOrganizationConfigRule</h3>
<ul>
<li>description: Adds or updates organization config rule for your entire organization evaluating whether your AWS resources comply with your desired configurations.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putorganizationconformancepack"><a aria-hidden="true" class="anchor-heading" href="#putorganizationconformancepack"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutOrganizationConformancePack</h3>
<ul>
<li>description: Adds or updates organization conformance pack for your entire organization evaluating whether your AWS resources comply with your desired configurations.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putremediationconfigurations"><a aria-hidden="true" class="anchor-heading" href="#putremediationconfigurations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutRemediationConfigurations</h3>
<ul>
<li>description: Adds or updates the remediation configuration with a specific AWS Config rule with the selected target or action</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "RemediationConfiguration": {
        "resource_type": "RemediationConfiguration",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putremediationexceptions"><a aria-hidden="true" class="anchor-heading" href="#putremediationexceptions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutRemediationExceptions</h3>
<ul>
<li>description: Adds or updates remediation exceptions for specific resources for a specific AWS Config rule.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putresourceconfig"><a aria-hidden="true" class="anchor-heading" href="#putresourceconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutResourceConfig</h3>
<ul>
<li>description: Records the configuration state for the resource provided in the request.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putretentionconfiguration"><a aria-hidden="true" class="anchor-heading" href="#putretentionconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutRetentionConfiguration</h3>
<ul>
<li>description: Creates and updates the retention configuration with details about retention period (number of days) that AWS Config stores your historical information</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="selectaggregateresourceconfig"><a aria-hidden="true" class="anchor-heading" href="#selectaggregateresourceconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SelectAggregateResourceConfig</h3>
<ul>
<li>description: Accepts a structured query language (SQL) SELECT command and an aggregator to query configuration state of AWS resources across multiple accounts and regions, performs the corresponding search, and returns resource configurations matching the properties.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="selectresourceconfig"><a aria-hidden="true" class="anchor-heading" href="#selectresourceconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SelectResourceConfig</h3>
<ul>
<li>description: Accepts a structured query language (SQL) SELECT command, performs the corresponding search, and returns resource configurations matching the properties</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startconfigrulesevaluation"><a aria-hidden="true" class="anchor-heading" href="#startconfigrulesevaluation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartConfigRulesEvaluation</h3>
<ul>
<li>description: Evaluates your resources against the specified Config rules</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ConfigRule": {
        "resource_type": "ConfigRule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startconfigurationrecorder"><a aria-hidden="true" class="anchor-heading" href="#startconfigurationrecorder"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartConfigurationRecorder</h3>
<ul>
<li>description: Starts recording configurations of the AWS resources you have selected to record in your AWS account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startremediationexecution"><a aria-hidden="true" class="anchor-heading" href="#startremediationexecution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartRemediationExecution</h3>
<ul>
<li>description: Runs an on-demand remediation for the specified AWS Config rules against the last known remediation configuration</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "RemediationConfiguration": {
        "resource_type": "RemediationConfiguration",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopconfigurationrecorder"><a aria-hidden="true" class="anchor-heading" href="#stopconfigurationrecorder"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopConfigurationRecorder</h3>
<ul>
<li>description: Stops recording configurations of the AWS resources you have selected to record in your AWS account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Associates the specified tags to a resource with the specified resourceArn</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "AggregationAuthorization": {
        "resource_type": "AggregationAuthorization",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "ConfigRule": {
        "resource_type": "ConfigRule",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "ConfigurationAggregator": {
        "resource_type": "ConfigurationAggregator",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "ConformancePack": {
        "resource_type": "ConformancePack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Deletes specified tags from a resource</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "AggregationAuthorization": {
        "resource_type": "AggregationAuthorization",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "ConfigRule": {
        "resource_type": "ConfigRule",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "ConfigurationAggregator": {
        "resource_type": "ConfigurationAggregator",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "ConformancePack": {
        "resource_type": "ConformancePack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Config"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Lightsail.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Lightsail - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Lightsail.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Lightsail.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Lightsail.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Lightsail - undefined" />
  <meta name="twitter:title" content="Lightsail - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Lightsail</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Lightsail">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="lightsail"><a aria-hidden="true" class="anchor-heading" href="#lightsail"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Lightsail</h1>
<ul>
<li>prefix: lightsail</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="allocatestaticip"><a aria-hidden="true" class="anchor-heading" href="#allocatestaticip"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AllocateStaticIp</h3>
<ul>
<li>description: Creates a static IP address that can be attached to an instance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "StaticIp": {
        "resource_type": "StaticIp",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="attachdisk"><a aria-hidden="true" class="anchor-heading" href="#attachdisk"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AttachDisk</h3>
<ul>
<li>description: Attaches a disk to an instance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Disk": {
        "resource_type": "Disk",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="attachinstancestoloadbalancer"><a aria-hidden="true" class="anchor-heading" href="#attachinstancestoloadbalancer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AttachInstancesToLoadBalancer</h3>
<ul>
<li>description: Attaches one or more instances to a load balancer.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "LoadBalancer": {
        "resource_type": "LoadBalancer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="attachloadbalancertlscertificate"><a aria-hidden="true" class="anchor-heading" href="#attachloadbalancertlscertificate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AttachLoadBalancerTlsCertificate</h3>
<ul>
<li>description: Attaches a TLS certificate to a load balancer.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "LoadBalancer": {
        "resource_type": "LoadBalancer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="attachstaticip"><a aria-hidden="true" class="anchor-heading" href="#attachstaticip"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AttachStaticIp</h3>
<ul>
<li>description: Attaches a static IP address to an instance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "StaticIp": {
        "resource_type": "StaticIp",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="closeinstancepublicports"><a aria-hidden="true" class="anchor-heading" href="#closeinstancepublicports"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CloseInstancePublicPorts</h3>
<ul>
<li>description: Closes a public port of an instance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="copysnapshot"><a aria-hidden="true" class="anchor-heading" href="#copysnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CopySnapshot</h3>
<ul>
<li>description: Copies a snapshot from one AWS Region to another in Amazon Lightsail.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createcloudformationstack"><a aria-hidden="true" class="anchor-heading" href="#createcloudformationstack"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateCloudFormationStack</h3>
<ul>
<li>description: Creates a new Amazon EC2 instance from an exported Amazon Lightsail snapshot.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ExportSnapshotRecord": {
        "resource_type": "ExportSnapshotRecord",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdisk"><a aria-hidden="true" class="anchor-heading" href="#createdisk"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDisk</h3>
<ul>
<li>description: Creates a disk.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Disk": {
        "resource_type": "Disk",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="creatediskfromsnapshot"><a aria-hidden="true" class="anchor-heading" href="#creatediskfromsnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDiskFromSnapshot</h3>
<ul>
<li>description: Creates a disk from snapshot.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Disk": {
        "resource_type": "Disk",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdisksnapshot"><a aria-hidden="true" class="anchor-heading" href="#createdisksnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDiskSnapshot</h3>
<ul>
<li>description: Creates a disk snapshot.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Disk": {
        "resource_type": "Disk",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdomain"><a aria-hidden="true" class="anchor-heading" href="#createdomain"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDomain</h3>
<ul>
<li>description: Creates a domain resource for the specified domain name.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Domain": {
        "resource_type": "Domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdomainentry"><a aria-hidden="true" class="anchor-heading" href="#createdomainentry"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDomainEntry</h3>
<ul>
<li>description: Creates one or more DNS record entries for a domain resource: Address (A), canonical name (CNAME), mail exchanger (MX), name server (NS), start of authority (SOA), service locator (SRV), or text (TXT).</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Domain": {
        "resource_type": "Domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createinstancesnapshot"><a aria-hidden="true" class="anchor-heading" href="#createinstancesnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateInstanceSnapshot</h3>
<ul>
<li>description: Creates an instance snapshot.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "InstanceSnapshot": {
        "resource_type": "InstanceSnapshot",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createinstances"><a aria-hidden="true" class="anchor-heading" href="#createinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateInstances</h3>
<ul>
<li>description: Creates one or more instances.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "KeyPair": {
        "resource_type": "KeyPair",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createinstancesfromsnapshot"><a aria-hidden="true" class="anchor-heading" href="#createinstancesfromsnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateInstancesFromSnapshot</h3>
<ul>
<li>description: Creates one or more instances based on an instance snapshot.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "InstanceSnapshot": {
        "resource_type": "InstanceSnapshot",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createkeypair"><a aria-hidden="true" class="anchor-heading" href="#createkeypair"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateKeyPair</h3>
<ul>
<li>description: Creates a key pair used to authenticate and connect to an instance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "KeyPair": {
        "resource_type": "KeyPair",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createloadbalancer"><a aria-hidden="true" class="anchor-heading" href="#createloadbalancer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateLoadBalancer</h3>
<ul>
<li>description: Creates a load balancer.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "LoadBalancer": {
        "resource_type": "LoadBalancer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createloadbalancertlscertificate"><a aria-hidden="true" class="anchor-heading" href="#createloadbalancertlscertificate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateLoadBalancerTlsCertificate</h3>
<ul>
<li>description: Creates a load balancer TLS certificate.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "LoadBalancer": {
        "resource_type": "LoadBalancer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createrelationaldatabase"><a aria-hidden="true" class="anchor-heading" href="#createrelationaldatabase"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateRelationalDatabase</h3>
<ul>
<li>description: Creates a new relational database.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "RelationalDatabase": {
        "resource_type": "RelationalDatabase",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createrelationaldatabasefromsnapshot"><a aria-hidden="true" class="anchor-heading" href="#createrelationaldatabasefromsnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateRelationalDatabaseFromSnapshot</h3>
<ul>
<li>description: Creates a new relational database from a snapshot.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "RelationalDatabase": {
        "resource_type": "RelationalDatabase",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createrelationaldatabasesnapshot"><a aria-hidden="true" class="anchor-heading" href="#createrelationaldatabasesnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateRelationalDatabaseSnapshot</h3>
<ul>
<li>description: Creates a relational database snapshot.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "RelationalDatabaseSnapshot": {
        "resource_type": "RelationalDatabaseSnapshot",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedisk"><a aria-hidden="true" class="anchor-heading" href="#deletedisk"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDisk</h3>
<ul>
<li>description: Deletes a disk.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Disk": {
        "resource_type": "Disk",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedisksnapshot"><a aria-hidden="true" class="anchor-heading" href="#deletedisksnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDiskSnapshot</h3>
<ul>
<li>description: Deletes a disk snapshot.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Disk": {
        "resource_type": "Disk",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedomain"><a aria-hidden="true" class="anchor-heading" href="#deletedomain"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDomain</h3>
<ul>
<li>description: Deletes a domain resource and all of its DNS records.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Domain": {
        "resource_type": "Domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedomainentry"><a aria-hidden="true" class="anchor-heading" href="#deletedomainentry"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDomainEntry</h3>
<ul>
<li>description: Deletes a DNS record entry for a domain resource.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Domain": {
        "resource_type": "Domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteinstance"><a aria-hidden="true" class="anchor-heading" href="#deleteinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteInstance</h3>
<ul>
<li>description: Deletes an instance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteinstancesnapshot"><a aria-hidden="true" class="anchor-heading" href="#deleteinstancesnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteInstanceSnapshot</h3>
<ul>
<li>description: Deletes an instance snapshot.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "InstanceSnapshot": {
        "resource_type": "InstanceSnapshot",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletekeypair"><a aria-hidden="true" class="anchor-heading" href="#deletekeypair"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteKeyPair</h3>
<ul>
<li>description: Deletes a key pair used to authenticate and connect to an instance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "KeyPair": {
        "resource_type": "KeyPair",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteknownhostkeys"><a aria-hidden="true" class="anchor-heading" href="#deleteknownhostkeys"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteKnownHostKeys</h3>
<ul>
<li>description: Deletes the known host key or certificate used by the Amazon Lightsail browser-based SSH or RDP clients to authenticate an instance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteloadbalancer"><a aria-hidden="true" class="anchor-heading" href="#deleteloadbalancer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteLoadBalancer</h3>
<ul>
<li>description: Deletes a load balancer.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "LoadBalancer": {
        "resource_type": "LoadBalancer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteloadbalancertlscertificate"><a aria-hidden="true" class="anchor-heading" href="#deleteloadbalancertlscertificate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteLoadBalancerTlsCertificate</h3>
<ul>
<li>description: Deletes a load balancer TLS certificate.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "LoadBalancer": {
        "resource_type": "LoadBalancer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleterelationaldatabase"><a aria-hidden="true" class="anchor-heading" href="#deleterelationaldatabase"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteRelationalDatabase</h3>
<ul>
<li>description: Deletes a relational database.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "RelationalDatabase": {
        "resource_type": "RelationalDatabase",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleterelationaldatabasesnapshot"><a aria-hidden="true" class="anchor-heading" href="#deleterelationaldatabasesnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteRelationalDatabaseSnapshot</h3>
<ul>
<li>description: Deletes relational database snapshot.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "RelationalDatabaseSnapshot": {
        "resource_type": "RelationalDatabaseSnapshot",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="detachdisk"><a aria-hidden="true" class="anchor-heading" href="#detachdisk"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DetachDisk</h3>
<ul>
<li>description: Detaches a disk from an instance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Disk": {
        "resource_type": "Disk",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="detachinstancesfromloadbalancer"><a aria-hidden="true" class="anchor-heading" href="#detachinstancesfromloadbalancer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DetachInstancesFromLoadBalancer</h3>
<ul>
<li>description: Detaches one or more instances from a load balancer.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "LoadBalancer": {
        "resource_type": "LoadBalancer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="detachstaticip"><a aria-hidden="true" class="anchor-heading" href="#detachstaticip"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DetachStaticIp</h3>
<ul>
<li>description: Detaches a static IP from an instance to which it is attached.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "StaticIp": {
        "resource_type": "StaticIp",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="downloaddefaultkeypair"><a aria-hidden="true" class="anchor-heading" href="#downloaddefaultkeypair"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DownloadDefaultKeyPair</h3>
<ul>
<li>description: Downloads the default key pair used to authenticate and connect to instances in a specific AWS Region.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "KeyPair": {
        "resource_type": "KeyPair",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="exportsnapshot"><a aria-hidden="true" class="anchor-heading" href="#exportsnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ExportSnapshot</h3>
<ul>
<li>description: Exports an Amazon Lightsail snapshot to Amazon EC2.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getactivenames"><a aria-hidden="true" class="anchor-heading" href="#getactivenames"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetActiveNames</h3>
<ul>
<li>description: Returns the names of all active (not deleted) resources.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getblueprints"><a aria-hidden="true" class="anchor-heading" href="#getblueprints"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBlueprints</h3>
<ul>
<li>description: Returns a list of instance images, or blueprints. You can use a blueprint to create a new instance already running a specific operating system, as well as a pre-installed application or development stack. The software that runs on your instance depends on the blueprint you define when creating the instance.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbundles"><a aria-hidden="true" class="anchor-heading" href="#getbundles"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBundles</h3>
<ul>
<li>description: Returns a list of instance bundles. You can use a bundle to create a new instance with a set of performance specifications, such as CPU count, disk size, RAM size, and network transfer allowance. The cost of your instance depends on the bundle you define when creating the instance.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcloudformationstackrecords"><a aria-hidden="true" class="anchor-heading" href="#getcloudformationstackrecords"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCloudFormationStackRecords</h3>
<ul>
<li>description: Returns information about all CloudFormation stacks used to create Amazon EC2 resources from exported Amazon Lightsail snapshots.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "CloudFormationStackRecord": {
        "resource_type": "CloudFormationStackRecord",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdisk"><a aria-hidden="true" class="anchor-heading" href="#getdisk"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDisk</h3>
<ul>
<li>description: Returns information about a disk.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Disk": {
        "resource_type": "Disk",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdisksnapshot"><a aria-hidden="true" class="anchor-heading" href="#getdisksnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDiskSnapshot</h3>
<ul>
<li>description: Returns information about a disk snapshot.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Disk": {
        "resource_type": "Disk",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdisksnapshots"><a aria-hidden="true" class="anchor-heading" href="#getdisksnapshots"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDiskSnapshots</h3>
<ul>
<li>description: Returns information about all disk snapshots.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Disk": {
        "resource_type": "Disk",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdisks"><a aria-hidden="true" class="anchor-heading" href="#getdisks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDisks</h3>
<ul>
<li>description: Returns information about all disks.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdomain"><a aria-hidden="true" class="anchor-heading" href="#getdomain"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDomain</h3>
<ul>
<li>description: Returns DNS records for a domain resource.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Domain": {
        "resource_type": "Domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdomains"><a aria-hidden="true" class="anchor-heading" href="#getdomains"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDomains</h3>
<ul>
<li>description: Returns DNS records for all domain resources.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Domain": {
        "resource_type": "Domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getexportsnapshotrecords"><a aria-hidden="true" class="anchor-heading" href="#getexportsnapshotrecords"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetExportSnapshotRecords</h3>
<ul>
<li>description: Returns information about all records to export Amazon Lightsail snapshots to Amazon EC2.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "ExportSnapshotRecord": {
        "resource_type": "ExportSnapshotRecord",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getinstance"><a aria-hidden="true" class="anchor-heading" href="#getinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetInstance</h3>
<ul>
<li>description: Returns information about an instance.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getinstanceaccessdetails"><a aria-hidden="true" class="anchor-heading" href="#getinstanceaccessdetails"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetInstanceAccessDetails</h3>
<ul>
<li>description: Returns temporary keys you can use to authenticate and connect to an instance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getinstancemetricdata"><a aria-hidden="true" class="anchor-heading" href="#getinstancemetricdata"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetInstanceMetricData</h3>
<ul>
<li>description: Returns the data points for the specified metric of an instance.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getinstanceportstates"><a aria-hidden="true" class="anchor-heading" href="#getinstanceportstates"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetInstancePortStates</h3>
<ul>
<li>description: Returns the port states of an instance.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getinstancesnapshot"><a aria-hidden="true" class="anchor-heading" href="#getinstancesnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetInstanceSnapshot</h3>
<ul>
<li>description: Returns information about an instance snapshot.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "InstanceSnapshot": {
        "resource_type": "InstanceSnapshot",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getinstancesnapshots"><a aria-hidden="true" class="anchor-heading" href="#getinstancesnapshots"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetInstanceSnapshots</h3>
<ul>
<li>description: Returns information about all instance snapshots.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "InstanceSnapshot": {
        "resource_type": "InstanceSnapshot",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getinstancestate"><a aria-hidden="true" class="anchor-heading" href="#getinstancestate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetInstanceState</h3>
<ul>
<li>description: Returns the state of an instance.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getinstances"><a aria-hidden="true" class="anchor-heading" href="#getinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetInstances</h3>
<ul>
<li>description: Returns information about all instances.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getkeypair"><a aria-hidden="true" class="anchor-heading" href="#getkeypair"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetKeyPair</h3>
<ul>
<li>description: Returns information about a key pair.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "KeyPair": {
        "resource_type": "KeyPair",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getkeypairs"><a aria-hidden="true" class="anchor-heading" href="#getkeypairs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetKeyPairs</h3>
<ul>
<li>description: Returns information about all key pairs.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "KeyPair": {
        "resource_type": "KeyPair",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getloadbalancer"><a aria-hidden="true" class="anchor-heading" href="#getloadbalancer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetLoadBalancer</h3>
<ul>
<li>description: Returns information about a load balancer.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "LoadBalancer": {
        "resource_type": "LoadBalancer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getloadbalancermetricdata"><a aria-hidden="true" class="anchor-heading" href="#getloadbalancermetricdata"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetLoadBalancerMetricData</h3>
<ul>
<li>description: Returns the data points for the specified metric of a load balancer.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "LoadBalancer": {
        "resource_type": "LoadBalancer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getloadbalancertlscertificates"><a aria-hidden="true" class="anchor-heading" href="#getloadbalancertlscertificates"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetLoadBalancerTlsCertificates</h3>
<ul>
<li>description: Returns information about a load balancer TLS certificate.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "LoadBalancer": {
        "resource_type": "LoadBalancer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getloadbalancers"><a aria-hidden="true" class="anchor-heading" href="#getloadbalancers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetLoadBalancers</h3>
<ul>
<li>description: Returns information about load balancers.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "LoadBalancer": {
        "resource_type": "LoadBalancer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getoperation"><a aria-hidden="true" class="anchor-heading" href="#getoperation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetOperation</h3>
<ul>
<li>description: Returns information about an operation. Operations include events such as when you create an instance, allocate a static IP, attach a static IP, and so on.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getoperations"><a aria-hidden="true" class="anchor-heading" href="#getoperations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetOperations</h3>
<ul>
<li>description: Returns information about all operations. Operations include events such as when you create an instance, allocate a static IP, attach a static IP, and so on.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getoperationsforresource"><a aria-hidden="true" class="anchor-heading" href="#getoperationsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetOperationsForResource</h3>
<ul>
<li>description: Returns operations for a resource.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Domain": {
        "resource_type": "Domain",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "Instance": {
        "resource_type": "Instance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "InstanceSnapshot": {
        "resource_type": "InstanceSnapshot",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "KeyPair": {
        "resource_type": "KeyPair",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "StaticIp": {
        "resource_type": "StaticIp",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getregions"><a aria-hidden="true" class="anchor-heading" href="#getregions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRegions</h3>
<ul>
<li>description: Returns a list of all valid AWS Regions for Amazon Lightsail.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getrelationaldatabase"><a aria-hidden="true" class="anchor-heading" href="#getrelationaldatabase"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRelationalDatabase</h3>
<ul>
<li>description: Returns information about a relational database.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "RelationalDatabase": {
        "resource_type": "RelationalDatabase",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getrelationaldatabaseblueprints"><a aria-hidden="true" class="anchor-heading" href="#getrelationaldatabaseblueprints"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRelationalDatabaseBlueprints</h3>
<ul>
<li>description: Returns a list of relational database images, or blueprints. You can use a blueprint to create a new database running a specific database engine. The database engine that runs on your database depends on the blueprint you define when creating the relational database.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getrelationaldatabasebundles"><a aria-hidden="true" class="anchor-heading" href="#getrelationaldatabasebundles"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRelationalDatabaseBundles</h3>
<ul>
<li>description: Returns a list of relational database bundles. You can use a bundle to create a new database with a set of performance specifications, such as CPU count, disk size, RAM size, network transfer allowance, and standard of high availability. The cost of your database depends on the bundle you define when creating the relational database.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getrelationaldatabaseevents"><a aria-hidden="true" class="anchor-heading" href="#getrelationaldatabaseevents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRelationalDatabaseEvents</h3>
<ul>
<li>description: Returns events for a relational database.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getrelationaldatabaselogevents"><a aria-hidden="true" class="anchor-heading" href="#getrelationaldatabaselogevents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRelationalDatabaseLogEvents</h3>
<ul>
<li>description: Returns events for the specified log stream of a relational database.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getrelationaldatabaselogstreams"><a aria-hidden="true" class="anchor-heading" href="#getrelationaldatabaselogstreams"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRelationalDatabaseLogStreams</h3>
<ul>
<li>description: Returns the log streams available for a relational database.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getrelationaldatabasemasteruserpassword"><a aria-hidden="true" class="anchor-heading" href="#getrelationaldatabasemasteruserpassword"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRelationalDatabaseMasterUserPassword</h3>
<ul>
<li>description: Returns the master user password of a relational database.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getrelationaldatabasemetricdata"><a aria-hidden="true" class="anchor-heading" href="#getrelationaldatabasemetricdata"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRelationalDatabaseMetricData</h3>
<ul>
<li>description: Returns the data points for the specified metric of a relational database.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getrelationaldatabaseparameters"><a aria-hidden="true" class="anchor-heading" href="#getrelationaldatabaseparameters"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRelationalDatabaseParameters</h3>
<ul>
<li>description: Returns the parameters of a relational database.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getrelationaldatabasesnapshot"><a aria-hidden="true" class="anchor-heading" href="#getrelationaldatabasesnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRelationalDatabaseSnapshot</h3>
<ul>
<li>description: Returns information about a relational database snapshot.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "RelationalDatabase": {
        "resource_type": "RelationalDatabase",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getrelationaldatabasesnapshots"><a aria-hidden="true" class="anchor-heading" href="#getrelationaldatabasesnapshots"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRelationalDatabaseSnapshots</h3>
<ul>
<li>description: Returns information about all relational database snapshots.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "RelationalDatabase": {
        "resource_type": "RelationalDatabase",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getrelationaldatabases"><a aria-hidden="true" class="anchor-heading" href="#getrelationaldatabases"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRelationalDatabases</h3>
<ul>
<li>description: Return information about all relational databases.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "RelationalDatabase": {
        "resource_type": "RelationalDatabase",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getstaticip"><a aria-hidden="true" class="anchor-heading" href="#getstaticip"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetStaticIp</h3>
<ul>
<li>description: Returns information about a static IP.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "StaticIp": {
        "resource_type": "StaticIp",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getstaticips"><a aria-hidden="true" class="anchor-heading" href="#getstaticips"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetStaticIps</h3>
<ul>
<li>description: Returns information about all static IPs.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "StaticIp": {
        "resource_type": "StaticIp",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="importkeypair"><a aria-hidden="true" class="anchor-heading" href="#importkeypair"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ImportKeyPair</h3>
<ul>
<li>description: Imports a public key from a key pair.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "KeyPair": {
        "resource_type": "KeyPair",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="isvpcpeered"><a aria-hidden="true" class="anchor-heading" href="#isvpcpeered"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>IsVpcPeered</h3>
<ul>
<li>description: Returns a boolean value indicating whether the Amazon Lightsail virtual private cloud (VPC) is peered.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="openinstancepublicports"><a aria-hidden="true" class="anchor-heading" href="#openinstancepublicports"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>OpenInstancePublicPorts</h3>
<ul>
<li>description: Adds, or opens a public port of an instance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="peervpc"><a aria-hidden="true" class="anchor-heading" href="#peervpc"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PeerVpc</h3>
<ul>
<li>description: Tries to peer the Amazon Lightsail virtual private cloud (VPC) with the default VPC.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putinstancepublicports"><a aria-hidden="true" class="anchor-heading" href="#putinstancepublicports"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutInstancePublicPorts</h3>
<ul>
<li>description: Sets the specified open ports for an instance, and closes all ports for every protocol not included in the request.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="rebootinstance"><a aria-hidden="true" class="anchor-heading" href="#rebootinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RebootInstance</h3>
<ul>
<li>description: Reboots an instance that is in a running state.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="rebootrelationaldatabase"><a aria-hidden="true" class="anchor-heading" href="#rebootrelationaldatabase"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RebootRelationalDatabase</h3>
<ul>
<li>description: Reboots a relational database that is in a running state.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "RelationalDatabase": {
        "resource_type": "RelationalDatabase",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="releasestaticip"><a aria-hidden="true" class="anchor-heading" href="#releasestaticip"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ReleaseStaticIp</h3>
<ul>
<li>description: Deletes a static IP.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "StaticIp": {
        "resource_type": "StaticIp",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startinstance"><a aria-hidden="true" class="anchor-heading" href="#startinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartInstance</h3>
<ul>
<li>description: Starts an instance that is in a stopped state.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startrelationaldatabase"><a aria-hidden="true" class="anchor-heading" href="#startrelationaldatabase"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartRelationalDatabase</h3>
<ul>
<li>description: Starts a relational database that is in a stopped state.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "RelationalDatabase": {
        "resource_type": "RelationalDatabase",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopinstance"><a aria-hidden="true" class="anchor-heading" href="#stopinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopInstance</h3>
<ul>
<li>description: Stops an instance that is in a running state.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stoprelationaldatabase"><a aria-hidden="true" class="anchor-heading" href="#stoprelationaldatabase"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopRelationalDatabase</h3>
<ul>
<li>description: Stops a relational database that is in a running state.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "RelationalDatabase": {
        "resource_type": "RelationalDatabase",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Tags a resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Disk": {
        "resource_type": "Disk",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "DiskSnapshot": {
        "resource_type": "DiskSnapshot",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "Domain": {
        "resource_type": "Domain",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "Instance": {
        "resource_type": "Instance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "InstanceSnapshot": {
        "resource_type": "InstanceSnapshot",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "KeyPair": {
        "resource_type": "KeyPair",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "LoadBalancer": {
        "resource_type": "LoadBalancer",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "RelationalDatabase": {
        "resource_type": "RelationalDatabase",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "RelationalDatabaseSnapshot": {
        "resource_type": "RelationalDatabaseSnapshot",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "StaticIp": {
        "resource_type": "StaticIp",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="unpeervpc"><a aria-hidden="true" class="anchor-heading" href="#unpeervpc"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UnpeerVpc</h3>
<ul>
<li>description: Attempts to unpeer the Amazon Lightsail virtual private cloud (VPC) from the default VPC.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Untags a resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Disk": {
        "resource_type": "Disk",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "DiskSnapshot": {
        "resource_type": "DiskSnapshot",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "Domain": {
        "resource_type": "Domain",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "Instance": {
        "resource_type": "Instance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "InstanceSnapshot": {
        "resource_type": "InstanceSnapshot",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "KeyPair": {
        "resource_type": "KeyPair",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "LoadBalancer": {
        "resource_type": "LoadBalancer",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "RelationalDatabase": {
        "resource_type": "RelationalDatabase",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "RelationalDatabaseSnapshot": {
        "resource_type": "RelationalDatabaseSnapshot",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "StaticIp": {
        "resource_type": "StaticIp",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatedomainentry"><a aria-hidden="true" class="anchor-heading" href="#updatedomainentry"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateDomainEntry</h3>
<ul>
<li>description: Updates a domain recordset after it is created.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Domain": {
        "resource_type": "Domain",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateloadbalancerattribute"><a aria-hidden="true" class="anchor-heading" href="#updateloadbalancerattribute"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateLoadBalancerAttribute</h3>
<ul>
<li>description: Updates a load balancer attribute, such as the health check path and session stickiness.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "LoadBalancer": {
        "resource_type": "LoadBalancer",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updaterelationaldatabase"><a aria-hidden="true" class="anchor-heading" href="#updaterelationaldatabase"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateRelationalDatabase</h3>
<ul>
<li>description: Updates a relational database.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "RelationalDatabase": {
        "resource_type": "RelationalDatabase",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updaterelationaldatabaseparameters"><a aria-hidden="true" class="anchor-heading" href="#updaterelationaldatabaseparameters"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateRelationalDatabaseParameters</h3>
<ul>
<li>description: Updates the parameters of a relational database.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Lightsail"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Service Catalog.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Service Catalog - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Service Catalog.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Service Catalog.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Service Catalog.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Service Catalog - undefined" />
  <meta name="twitter:title" content="Service Catalog - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Service Catalog</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Service Catalog">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="service-catalog"><a aria-hidden="true" class="anchor-heading" href="#service-catalog"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Service Catalog</h1>
<ul>
<li>prefix: servicecatalog</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="acceptportfolioshare"><a aria-hidden="true" class="anchor-heading" href="#acceptportfolioshare"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AcceptPortfolioShare</h3>
<ul>
<li>description: Grants permission to accept a portfolio that has been shared with you</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Portfolio": {
        "resource_type": "Portfolio",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="associatebudgetwithresource"><a aria-hidden="true" class="anchor-heading" href="#associatebudgetwithresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateBudgetWithResource</h3>
<ul>
<li>description: Grants permission to associate a budget with a resource</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="associateprincipalwithportfolio"><a aria-hidden="true" class="anchor-heading" href="#associateprincipalwithportfolio"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociatePrincipalWithPortfolio</h3>
<ul>
<li>description: Grants permission to associate an IAM principal with a portfolio, giving the specified principal access to any products associated with the specified portfolio</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Portfolio": {
        "resource_type": "Portfolio",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="associateproductwithportfolio"><a aria-hidden="true" class="anchor-heading" href="#associateproductwithportfolio"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateProductWithPortfolio</h3>
<ul>
<li>description: Grants permission to associate a product with a portfolio</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="associateserviceactionwithprovisioningartifact"><a aria-hidden="true" class="anchor-heading" href="#associateserviceactionwithprovisioningartifact"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateServiceActionWithProvisioningArtifact</h3>
<ul>
<li>description: Grants permission to associate an action with a provisioning artifact</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Product": {
        "resource_type": "Product",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="associatetagoptionwithresource"><a aria-hidden="true" class="anchor-heading" href="#associatetagoptionwithresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateTagOptionWithResource</h3>
<ul>
<li>description: Grants permission to associate the specified TagOption with the specified portfolio or product</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Portfolio": {
        "resource_type": "Portfolio",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "Product": {
        "resource_type": "Product",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchassociateserviceactionwithprovisioningartifact"><a aria-hidden="true" class="anchor-heading" href="#batchassociateserviceactionwithprovisioningartifact"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchAssociateServiceActionWithProvisioningArtifact</h3>
<ul>
<li>description: Grants permission to associate multiple self-service actions with provisioning artifacts</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchdisassociateserviceactionfromprovisioningartifact"><a aria-hidden="true" class="anchor-heading" href="#batchdisassociateserviceactionfromprovisioningartifact"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchDisassociateServiceActionFromProvisioningArtifact</h3>
<ul>
<li>description: Grants permission to disassociate a batch of self-service actions from the specified provisioning artifact</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="copyproduct"><a aria-hidden="true" class="anchor-heading" href="#copyproduct"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CopyProduct</h3>
<ul>
<li>description: Grants permission to copy the specified source product to the specified target product or a new product</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createconstraint"><a aria-hidden="true" class="anchor-heading" href="#createconstraint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateConstraint</h3>
<ul>
<li>description: Grants permission to create a constraint on an associated product and portfolio</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Product": {
        "resource_type": "Product",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createportfolio"><a aria-hidden="true" class="anchor-heading" href="#createportfolio"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreatePortfolio</h3>
<ul>
<li>description: Grants permission to create a portfolio</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Portfolio": {
        "resource_type": "Portfolio",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createportfolioshare"><a aria-hidden="true" class="anchor-heading" href="#createportfolioshare"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreatePortfolioShare</h3>
<ul>
<li>description: Grants permission to share a portfolio you own with another AWS account</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Portfolio": {
        "resource_type": "Portfolio",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createproduct"><a aria-hidden="true" class="anchor-heading" href="#createproduct"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateProduct</h3>
<ul>
<li>description: Grants permission to create a product and that product's first provisioning artifact</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Product": {
        "resource_type": "Product",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createprovisionedproductplan"><a aria-hidden="true" class="anchor-heading" href="#createprovisionedproductplan"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateProvisionedProductPlan</h3>
<ul>
<li>description: Grants permission to add a new provisioned product plan</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createprovisioningartifact"><a aria-hidden="true" class="anchor-heading" href="#createprovisioningartifact"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateProvisioningArtifact</h3>
<ul>
<li>description: Grants permission to add a new provisioning artifact to an existing product</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Product": {
        "resource_type": "Product",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createserviceaction"><a aria-hidden="true" class="anchor-heading" href="#createserviceaction"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateServiceAction</h3>
<ul>
<li>description: Grants permission to create a self-service action</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtagoption"><a aria-hidden="true" class="anchor-heading" href="#createtagoption"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTagOption</h3>
<ul>
<li>description: Grants permission to create a TagOption</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteconstraint"><a aria-hidden="true" class="anchor-heading" href="#deleteconstraint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteConstraint</h3>
<ul>
<li>description: Grants permission to remove and delete an existing constraint from an associated product and portfolio</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteportfolio"><a aria-hidden="true" class="anchor-heading" href="#deleteportfolio"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeletePortfolio</h3>
<ul>
<li>description: Grants permission to delete a portfolio if all associations and shares have been removed from the portfolio</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Portfolio": {
        "resource_type": "Portfolio",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteportfolioshare"><a aria-hidden="true" class="anchor-heading" href="#deleteportfolioshare"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeletePortfolioShare</h3>
<ul>
<li>description: Grants permission to unshare a portfolio you own from an AWS account you previously shared the portfolio with</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Portfolio": {
        "resource_type": "Portfolio",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteproduct"><a aria-hidden="true" class="anchor-heading" href="#deleteproduct"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteProduct</h3>
<ul>
<li>description: Grants permission to delete a product if all associations have been removed from the product</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Product": {
        "resource_type": "Product",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteprovisionedproductplan"><a aria-hidden="true" class="anchor-heading" href="#deleteprovisionedproductplan"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteProvisionedProductPlan</h3>
<ul>
<li>description: Grants permission to delete a provisioned product plan</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteprovisioningartifact"><a aria-hidden="true" class="anchor-heading" href="#deleteprovisioningartifact"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteProvisioningArtifact</h3>
<ul>
<li>description: Grants permission to delete a provisioning artifact from a product</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Product": {
        "resource_type": "Product",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteserviceaction"><a aria-hidden="true" class="anchor-heading" href="#deleteserviceaction"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteServiceAction</h3>
<ul>
<li>description: Grants permission to delete a self-service action</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetagoption"><a aria-hidden="true" class="anchor-heading" href="#deletetagoption"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTagOption</h3>
<ul>
<li>description: Grants permission to delete the specified TagOption</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeconstraint"><a aria-hidden="true" class="anchor-heading" href="#describeconstraint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeConstraint</h3>
<ul>
<li>description: Grants permission to describe a constraint</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecopyproductstatus"><a aria-hidden="true" class="anchor-heading" href="#describecopyproductstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeCopyProductStatus</h3>
<ul>
<li>description: Grants permission to get the status of the specified copy product operation</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeportfolio"><a aria-hidden="true" class="anchor-heading" href="#describeportfolio"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribePortfolio</h3>
<ul>
<li>description: Grants permission to describe a portfolio</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Portfolio": {
        "resource_type": "Portfolio",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeportfoliosharestatus"><a aria-hidden="true" class="anchor-heading" href="#describeportfoliosharestatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribePortfolioShareStatus</h3>
<ul>
<li>description: Grants permission to get the status of the specified portfolio share operation</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeproduct"><a aria-hidden="true" class="anchor-heading" href="#describeproduct"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeProduct</h3>
<ul>
<li>description: Grants permission to describe a product as an end-user</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Product": {
        "resource_type": "Product",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeproductasadmin"><a aria-hidden="true" class="anchor-heading" href="#describeproductasadmin"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeProductAsAdmin</h3>
<ul>
<li>description: Grants permission to describe a product as an admin</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Product": {
        "resource_type": "Product",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeproductview"><a aria-hidden="true" class="anchor-heading" href="#describeproductview"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeProductView</h3>
<ul>
<li>description: Grants permission to describe a product as an end-user</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeprovisionedproduct"><a aria-hidden="true" class="anchor-heading" href="#describeprovisionedproduct"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeProvisionedProduct</h3>
<ul>
<li>description: Grants permission to describe a provisioned product</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeprovisionedproductplan"><a aria-hidden="true" class="anchor-heading" href="#describeprovisionedproductplan"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeProvisionedProductPlan</h3>
<ul>
<li>description: Grants permission to describe a provisioned product plan</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeprovisioningartifact"><a aria-hidden="true" class="anchor-heading" href="#describeprovisioningartifact"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeProvisioningArtifact</h3>
<ul>
<li>description: Grants permission to describe a provisioning artifact</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Product": {
        "resource_type": "Product",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeprovisioningparameters"><a aria-hidden="true" class="anchor-heading" href="#describeprovisioningparameters"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeProvisioningParameters</h3>
<ul>
<li>description: Grants permission to describe the parameters that you need to specify to successfully provision a specified provisioning artifact</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Product": {
        "resource_type": "Product",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describerecord"><a aria-hidden="true" class="anchor-heading" href="#describerecord"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeRecord</h3>
<ul>
<li>description: Grants permission to describe a record and lists any outputs</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "servicecatalog:accountLevel",
            "servicecatalog:roleLevel",
            "servicecatalog:userLevel"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeserviceaction"><a aria-hidden="true" class="anchor-heading" href="#describeserviceaction"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeServiceAction</h3>
<ul>
<li>description: Grants permission to describe a self-service action</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeserviceactionexecutionparameters"><a aria-hidden="true" class="anchor-heading" href="#describeserviceactionexecutionparameters"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeServiceActionExecutionParameters</h3>
<ul>
<li>description: Grants permission to get the default parameters if you executed the specified Service Action on the specified Provisioned Product</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetagoption"><a aria-hidden="true" class="anchor-heading" href="#describetagoption"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTagOption</h3>
<ul>
<li>description: Grants permission to get information about the specified TagOption</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disableawsorganizationsaccess"><a aria-hidden="true" class="anchor-heading" href="#disableawsorganizationsaccess"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisableAWSOrganizationsAccess</h3>
<ul>
<li>description: Grants permission to disable portfolio sharing through AWS Organizations feature</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociatebudgetfromresource"><a aria-hidden="true" class="anchor-heading" href="#disassociatebudgetfromresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateBudgetFromResource</h3>
<ul>
<li>description: Grants permission to disassociate a budget from a resource</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociateprincipalfromportfolio"><a aria-hidden="true" class="anchor-heading" href="#disassociateprincipalfromportfolio"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociatePrincipalFromPortfolio</h3>
<ul>
<li>description: Grants permission to disassociate an IAM principal from a portfolio</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Portfolio": {
        "resource_type": "Portfolio",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociateproductfromportfolio"><a aria-hidden="true" class="anchor-heading" href="#disassociateproductfromportfolio"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateProductFromPortfolio</h3>
<ul>
<li>description: Grants permission to disassociate a product from a portfolio</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociateserviceactionfromprovisioningartifact"><a aria-hidden="true" class="anchor-heading" href="#disassociateserviceactionfromprovisioningartifact"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateServiceActionFromProvisioningArtifact</h3>
<ul>
<li>description: Grants permission to disassociate the specified self-service action association from the specified provisioning artifact</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Product": {
        "resource_type": "Product",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociatetagoptionfromresource"><a aria-hidden="true" class="anchor-heading" href="#disassociatetagoptionfromresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateTagOptionFromResource</h3>
<ul>
<li>description: Grants permission to disassociate the specified TagOption from the specified resource</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Portfolio": {
        "resource_type": "Portfolio",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "Product": {
        "resource_type": "Product",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="enableawsorganizationsaccess"><a aria-hidden="true" class="anchor-heading" href="#enableawsorganizationsaccess"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EnableAWSOrganizationsAccess</h3>
<ul>
<li>description: Grants permission to enable portfolio sharing feature through AWS Organizations</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="executeprovisionedproductplan"><a aria-hidden="true" class="anchor-heading" href="#executeprovisionedproductplan"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ExecuteProvisionedProductPlan</h3>
<ul>
<li>description: Grants permission to execute a provisioned product plan</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="executeprovisionedproductserviceaction"><a aria-hidden="true" class="anchor-heading" href="#executeprovisionedproductserviceaction"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ExecuteProvisionedProductServiceAction</h3>
<ul>
<li>description: Grants permission to executes a provisioned product plan</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getawsorganizationsaccessstatus"><a aria-hidden="true" class="anchor-heading" href="#getawsorganizationsaccessstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAWSOrganizationsAccessStatus</h3>
<ul>
<li>description: Grants permission to get the access status of AWS Organization portfolio share feature</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listacceptedportfolioshares"><a aria-hidden="true" class="anchor-heading" href="#listacceptedportfolioshares"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAcceptedPortfolioShares</h3>
<ul>
<li>description: Grants permission to list the portfolios that have been shared with you and you have accepted</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listbudgetsforresource"><a aria-hidden="true" class="anchor-heading" href="#listbudgetsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListBudgetsForResource</h3>
<ul>
<li>description: Grants permission to list all the budgets associated to a resource</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listconstraintsforportfolio"><a aria-hidden="true" class="anchor-heading" href="#listconstraintsforportfolio"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListConstraintsForPortfolio</h3>
<ul>
<li>description: Grants permission to list constraints associated with a given portfolio</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listlaunchpaths"><a aria-hidden="true" class="anchor-heading" href="#listlaunchpaths"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListLaunchPaths</h3>
<ul>
<li>description: Grants permission to list the different ways to launch a given product as an end-user</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Product": {
        "resource_type": "Product",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listorganizationportfolioaccess"><a aria-hidden="true" class="anchor-heading" href="#listorganizationportfolioaccess"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListOrganizationPortfolioAccess</h3>
<ul>
<li>description: Grants permission to list the organization nodes that have access to the specified portfolio</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listportfolioaccess"><a aria-hidden="true" class="anchor-heading" href="#listportfolioaccess"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPortfolioAccess</h3>
<ul>
<li>description: Grants permission to list the AWS accounts you have shared a given portfolio with</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Portfolio": {
        "resource_type": "Portfolio",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listportfolios"><a aria-hidden="true" class="anchor-heading" href="#listportfolios"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPortfolios</h3>
<ul>
<li>description: Grants permission to list the portfolios in your account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listportfoliosforproduct"><a aria-hidden="true" class="anchor-heading" href="#listportfoliosforproduct"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPortfoliosForProduct</h3>
<ul>
<li>description: Grants permission to list the portfolios associated with a given product</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Product": {
        "resource_type": "Product",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listprincipalsforportfolio"><a aria-hidden="true" class="anchor-heading" href="#listprincipalsforportfolio"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPrincipalsForPortfolio</h3>
<ul>
<li>description: Grants permission to list the IAM principals associated with a given portfolio</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Portfolio": {
        "resource_type": "Portfolio",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listprovisionedproductplans"><a aria-hidden="true" class="anchor-heading" href="#listprovisionedproductplans"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListProvisionedProductPlans</h3>
<ul>
<li>description: Grants permission to list the provisioned product plans</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listprovisioningartifacts"><a aria-hidden="true" class="anchor-heading" href="#listprovisioningartifacts"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListProvisioningArtifacts</h3>
<ul>
<li>description: Grants permission to list the provisioning artifacts associated with a given product</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Product": {
        "resource_type": "Product",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listprovisioningartifactsforserviceaction"><a aria-hidden="true" class="anchor-heading" href="#listprovisioningartifactsforserviceaction"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListProvisioningArtifactsForServiceAction</h3>
<ul>
<li>description: Grants permission to list all provisioning artifacts for the specified self-service action</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listrecordhistory"><a aria-hidden="true" class="anchor-heading" href="#listrecordhistory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListRecordHistory</h3>
<ul>
<li>description: Grants permission to list all the records in your account or all the records related to a given provisioned product</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "servicecatalog:accountLevel",
            "servicecatalog:roleLevel",
            "servicecatalog:userLevel"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listresourcesfortagoption"><a aria-hidden="true" class="anchor-heading" href="#listresourcesfortagoption"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListResourcesForTagOption</h3>
<ul>
<li>description: Grants permission to list the resources associated with the specified TagOption</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listserviceactions"><a aria-hidden="true" class="anchor-heading" href="#listserviceactions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListServiceActions</h3>
<ul>
<li>description: Grants permission to list all self-service actions</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listserviceactionsforprovisioningartifact"><a aria-hidden="true" class="anchor-heading" href="#listserviceactionsforprovisioningartifact"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListServiceActionsForProvisioningArtifact</h3>
<ul>
<li>description: Grants permission to list all the service actions associated with the specified provisioning artifact in your account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Product": {
        "resource_type": "Product",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="liststackinstancesforprovisionedproduct"><a aria-hidden="true" class="anchor-heading" href="#liststackinstancesforprovisionedproduct"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListStackInstancesForProvisionedProduct</h3>
<ul>
<li>description: Grants permission to list account, region and status of each stack instances that are associated with a CFN_STACKSET type provisioned product</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagoptions"><a aria-hidden="true" class="anchor-heading" href="#listtagoptions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagOptions</h3>
<ul>
<li>description: Grants permission to list the specified TagOptions or all TagOptions</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="provisionproduct"><a aria-hidden="true" class="anchor-heading" href="#provisionproduct"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ProvisionProduct</h3>
<ul>
<li>description: Grants permission to provision a product with a specified provisioning artifact and launch parameters</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Product": {
        "resource_type": "Product",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="rejectportfolioshare"><a aria-hidden="true" class="anchor-heading" href="#rejectportfolioshare"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RejectPortfolioShare</h3>
<ul>
<li>description: Grants permission to reject a portfolio that has been shared with you that you previously accepted</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Portfolio": {
        "resource_type": "Portfolio",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="scanprovisionedproducts"><a aria-hidden="true" class="anchor-heading" href="#scanprovisionedproducts"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ScanProvisionedProducts</h3>
<ul>
<li>description: Grants permission to list all the provisioned products in your account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "servicecatalog:accountLevel",
            "servicecatalog:roleLevel",
            "servicecatalog:userLevel"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="searchproducts"><a aria-hidden="true" class="anchor-heading" href="#searchproducts"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SearchProducts</h3>
<ul>
<li>description: Grants permission to list the products available to you as an end-user</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="searchproductsasadmin"><a aria-hidden="true" class="anchor-heading" href="#searchproductsasadmin"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SearchProductsAsAdmin</h3>
<ul>
<li>description: Grants permission to list all the products in your account or all the products associated with a given portfolio</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="searchprovisionedproducts"><a aria-hidden="true" class="anchor-heading" href="#searchprovisionedproducts"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SearchProvisionedProducts</h3>
<ul>
<li>description: Grants permission to list all the provisioned products in your account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "servicecatalog:accountLevel",
            "servicecatalog:roleLevel",
            "servicecatalog:userLevel"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="terminateprovisionedproduct"><a aria-hidden="true" class="anchor-heading" href="#terminateprovisionedproduct"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TerminateProvisionedProduct</h3>
<ul>
<li>description: Grants permission to terminate an existing provisioned product</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "servicecatalog:accountLevel",
            "servicecatalog:roleLevel",
            "servicecatalog:userLevel"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateconstraint"><a aria-hidden="true" class="anchor-heading" href="#updateconstraint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateConstraint</h3>
<ul>
<li>description: Grants permission to update the metadata fields of an existing constraint</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateportfolio"><a aria-hidden="true" class="anchor-heading" href="#updateportfolio"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdatePortfolio</h3>
<ul>
<li>description: Grants permission to update the metadata fields and/or tags of an existing portfolio</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Portfolio": {
        "resource_type": "Portfolio",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateproduct"><a aria-hidden="true" class="anchor-heading" href="#updateproduct"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateProduct</h3>
<ul>
<li>description: Grants permission to update the metadata fields and/or tags of an existing product</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Product": {
        "resource_type": "Product",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateprovisionedproduct"><a aria-hidden="true" class="anchor-heading" href="#updateprovisionedproduct"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateProvisionedProduct</h3>
<ul>
<li>description: Grants permission to update an existing provisioned product</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "servicecatalog:accountLevel",
            "servicecatalog:roleLevel",
            "servicecatalog:userLevel"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateprovisionedproductproperties"><a aria-hidden="true" class="anchor-heading" href="#updateprovisionedproductproperties"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateProvisionedProductProperties</h3>
<ul>
<li>description: Grants permission to update the properties of an existing provisioned product</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateprovisioningartifact"><a aria-hidden="true" class="anchor-heading" href="#updateprovisioningartifact"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateProvisioningArtifact</h3>
<ul>
<li>description: Grants permission to update the metadata fields of an existing provisioning artifact</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Product": {
        "resource_type": "Product",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateserviceaction"><a aria-hidden="true" class="anchor-heading" href="#updateserviceaction"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateServiceAction</h3>
<ul>
<li>description: Grants permission to update a self-service action</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatetagoption"><a aria-hidden="true" class="anchor-heading" href="#updatetagoption"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateTagOption</h3>
<ul>
<li>description: Grants permission to update the specified TagOption</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Service Catalog"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/cloudfront.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>CloudFront - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/cloudfront.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/cloudfront.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/cloudfront.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="CloudFront - undefined" />
  <meta name="twitter:title" content="CloudFront - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/1f759d8c-cca7-4fc4-9aa2-6dbf6e596abf.html">Services</a></li><li class="breadcrumb-nav-list-item">CloudFront</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/open-guides/og-aws" target="_blank"> og-aws  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="CloudFront">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="cloudfront"><a aria-hidden="true" class="anchor-heading" href="#cloudfront"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CloudFront</h1>
<h3 id="cloudfront-basics"><a aria-hidden="true" class="anchor-heading" href="#cloudfront-basics"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CloudFront Basics</h3>
<ul>
<li>📒 <a href="https://aws.amazon.com/cloudfront/">Homepage</a> ∙ <a href="http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/">Developer guide</a> ∙ <a href="https://aws.amazon.com/cloudfront/faqs/">FAQ</a> ∙ <a href="https://aws.amazon.com/cloudfront/pricing/">Pricing</a></li>
<li><strong>CloudFront</strong> is AWS’ <a href="https://en.wikipedia.org/wiki/Content_delivery_network">content delivery network (CDN)</a>.</li>
<li>Its primary use is improving latency for end users through accessing cacheable content by hosting it at <a href="http://aws.amazon.com/cloudfront/details/">over 60 global edge locations</a>.</li>
</ul>
<h3 id="cloudfront-alternatives-and-lock-in"><a aria-hidden="true" class="anchor-heading" href="#cloudfront-alternatives-and-lock-in"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CloudFront Alternatives and Lock-in</h3>
<ul>
<li>🚪CDNs are <a href="https://www.datanyze.com/market-share/cdn/">a highly fragmented market</a>. CloudFront has grown to be a leader, but there are many alternatives that might better suit specific needs.</li>
</ul>
<h3 id="cloudfront-tips"><a aria-hidden="true" class="anchor-heading" href="#cloudfront-tips"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CloudFront Tips</h3>
<ul>
<li>🐥<strong>IPv6</strong> is <a href="https://aws.amazon.com/about-aws/whats-new/2016/10/ipv6-support-for-cloudfront-waf-and-s3-transfer-acceleration/">supported</a>. This is a configurable setting, and is enabled by default on new CloudFront distributions. IPv6 support extends to the use of WAF with CloudFront.</li>
<li>🐥<strong>HTTP/2</strong> is <a href="https://aws.amazon.com/about-aws/whats-new/2016/09/amazon-cloudfront-now-supports-http2/">now supported</a>! Clients <a href="https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#DownloadDistValuesSupportedHTTPVersions">must support TLS 1.2 and SNI</a>.</li>
<li>While the most common use is for users to browse and download content (GET or HEAD methods) requests, CloudFront also supports (<a href="https://aws.amazon.com/blogs/aws/amazon-cloudfront-content-uploads-post-put-other-methods/">since 2013</a>) uploaded data (POST, PUT, DELETE, OPTIONS, and PATCH).
<ul>
<li>You must enable this by specifying the <a href="https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#DownloadDistValuesAllowedHTTPMethods">allowed HTTP methods</a> when you create the distribution.</li>
<li>Interestingly, the cost of accepting (uploaded) data <a href="https://aws.amazon.com/cloudfront/pricing/">is usually less</a> than for sending (downloaded) data.</li>
</ul>
</li>
<li>In its basic version, CloudFront <a href="http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/SecureConnections.html">supports SSL</a> via the <a href="https://en.wikipedia.org/wiki/Server_Name_Indication">SNI extension to TLS</a>, which is supported by all modern web browsers. If you need to support older browsers, you need to pay a few hundred dollars a month for dedicated IPs.
<ul>
<li>💸⏱Consider invalidation needs carefully. CloudFront <a href="http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Invalidation.html">does support invalidation</a> of objects from edge locations, but this typically takes many minutes to propagate to edge locations, and costs $0.005 per request after the first 1000 requests. (Some other CDNs support this better.)</li>
</ul>
</li>
<li>Everyone should use TLS nowadays if possible. <a href="https://istlsfastyet.com/#cdn-paas"><NAME>’s table</a> offers a good summary of features regarding TLS performance features of CloudFront.</li>
<li>An alternative to invalidation that is often easier to manage, and instant, is to configure the distribution to <a href="http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/QueryStringParameters.html">cache with query strings</a> and then append unique query strings with versions onto assets that are updated frequently.</li>
<li>⏱For good web performance, it is recommended to <a href="http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/ServingCompressedFiles.html">enable compression</a> on CloudFront distributions if the origin is S3 or another source that does not already compress.</li>
</ul>
<h3 id="cloudfront-gotchas-and-limitations"><a aria-hidden="true" class="anchor-heading" href="#cloudfront-gotchas-and-limitations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CloudFront Gotchas and Limitations</h3>
<ul>
<li>🔸If using S3 as a backing store, remember that the endpoints for website hosting and for general S3 are different. Example: “bucketname.s3.amazonaws.com” is a standard S3 serving endpoint, but to have redirect and error page support, you need to use the website hosting endpoint listed for that bucket, e.g. “bucketname.s3-website-us-east-1.amazonaws.com” (or the appropriate region).</li>
<li>🔸By default, CloudFront will not forward HTTP Host: headers through to your origin servers. This can be problematic for your origin if you run multiple sites switched with host headers. You can <a href="http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/RequestAndResponseBehaviorCustomOrigin.html#request-custom-headers-behavior">enable host header forwarding</a> in the default cache behavior settings.</li>
<li>🔸4096-bit SSL certificates: CloudFront do not support 4096-bit SSL certificates as of late 2016. If you are using an externally issued SSL certificate, you’ll need to make sure it’s 2048 bits. See <a href="https://forums.aws.amazon.com/thread.jspa?threadID=148783">ongoing discussion</a>.</li>
<li>Although connections from clients to CloudFront edge servers can make use of IPv6, <a href="https://aws.amazon.com/about-aws/whats-new/2016/10/ipv6-support-for-cloudfront-waf-and-s3-transfer-acceleration/">connections to the origin server will continue to use IPv4.</a></li>
</ul><span id="navId" data="cloudfront"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/certificate-manager.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Certificate Manager - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/certificate-manager.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/certificate-manager.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/certificate-manager.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Certificate Manager - undefined" />
  <meta name="twitter:title" content="Certificate Manager - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/1f759d8c-cca7-4fc4-9aa2-6dbf6e596abf.html">Services</a></li><li class="breadcrumb-nav-list-item">Certificate Manager</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/open-guides/og-aws" target="_blank"> og-aws  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Certificate Manager">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="certificate-manager"><a aria-hidden="true" class="anchor-heading" href="#certificate-manager"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Certificate Manager</h1>
<h3 id="certificate-manager-basics"><a aria-hidden="true" class="anchor-heading" href="#certificate-manager-basics"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Certificate Manager Basics</h3>
<ul>
<li>📒 <a href="https://aws.amazon.com/certificate-manager/">Homepage</a> ∙ <a href="http://docs.aws.amazon.com/acm/latest/userguide/acm-overview.html">User guide</a> ∙ <a href="https://aws.amazon.com/certificate-manager/faqs/">FAQ</a> ∙ <a href="https://aws.amazon.com/certificate-manager/pricing/">Pricing</a></li>
<li>Use the <strong>Certificate Manager</strong> to manage SSL/TLS certificates in other AWS services.</li>
<li>Supports importing existing certificates as well as issuing new ones.</li>
<li>Provides Domain Validated (DV) certificates. <a href="http://docs.aws.amazon.com/acm/latest/userguide/gs-acm-validate.html">Validation</a> can be done in two ways. The first (and recommended) way is <a href="https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-validate-dns.html">via DNS</a>. If the zone lives within Route 53 and the user has access, the necessary record can be added in the console via a single click during the certificate request process. If the zone is not within Route 53 the user is required to update DNS manually. This is still preferred to the second way, which requires more user interaction, and is done by sending an email to 3 contact addresses in WHOIS and 5 common addresses for the domain, for each domain name present in the request.</li>
<li>ACM will attempt to automatically <a href="http://docs.aws.amazon.com/acm/latest/userguide/how-domain-validation-works.html">renew</a> a certificate issued by Amazon. It will first attempt to connect to the domain on HTTPS and check that the certificate used by the domain is the same with the certificate that it intends to renew. Failing that, it will check the DNS record used previously for validation. Failing that, ACM will attempt manual validation by sending emails to all domains in the certificate.</li>
</ul>
<h3 id="certificate-manager-alternatives-and-lock-in"><a aria-hidden="true" class="anchor-heading" href="#certificate-manager-alternatives-and-lock-in"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Certificate Manager Alternatives and Lock-in</h3>
<ul>
<li>⛓Certificates issued by the Certificate Manager can’t be used outside of the services that support it. Imported certificates, however, can still be used elsewhere.</li>
</ul>
<h3 id="certificate-manager-tips"><a aria-hidden="true" class="anchor-heading" href="#certificate-manager-tips"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Certificate Manager Tips</h3>
<ul>
<li>🔹<strong>Supported services:</strong> Managed <a href="#load-balancers">Load Balancers</a>, <a href="#cloudfront">CloudFront</a>, <a href="#api-gateway">API Gateway</a> and <a href="https://aws.amazon.com/elasticbeanstalk/">Elastic Beanstalk</a>.</li>
<li>🔸During the domain validation process, if DNS validation is unsuccessful Certificate Manager will send an email to every contact address specified in the domain’s WHOIS record and up to five common administrative addresses. Some anti-spam filters can mark emails as spam because of this. You should check the spam folder of your email if you don’t receive a confirmation email.</li>
<li>🔹 Setting up a certificate for a test domain you don't have email set up on? You can now use DNS validation instead.</li>
<li>🔹Remember when requesting a wildcard domain that the request will not be valid for the level just below the wildcard, or any subdomains preceding the wildcard. Take for example an approved, issued certificate for <code>*.bar.example.com</code>. This would be valid for <code>foo.bar.example.com</code> but not <code>bar.example.com</code>. Likewise it would also not be valid for <code>www.bar.foo.example.com</code>. You would need to add each of these domains to the certificate request.</li>
</ul>
<h3 id="certificate-manager-gotchas-and-limitations"><a aria-hidden="true" class="anchor-heading" href="#certificate-manager-gotchas-and-limitations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Certificate Manager Gotchas and Limitations</h3>
<ul>
<li>🔸In order to use <strong>Certificate Manager</strong> for CloudFront distributions, the certificate must be issued or imported from us-east-1 (N. Virginia) region.</li>
<li>🔸Certificates used with Elastic Load Balancers must be issued in the same region as the load balancer. Certificates can not be moved or copied between regions, as of July 2017. If a domain uses load balancers present in multiple regions, a different certificate must be requested for each region.</li>
<li>🔸<strong>IoT</strong> has its <a href="http://docs.aws.amazon.com/iot/latest/developerguide/create-device-certificate.html">own way</a> of setting up certificates.</li>
<li>🔸By default the maximum number of domains per certificate is 10. You can get this limit increased to a maximum of 100 by contacting AWS support. <strong>Note</strong> for every different domain you have on the requested cert, you'll need to press accept on an email sent to that domain. For example if you request a cert with 42 different domains or sub domains, you'll need to press accept on 42 different links.
<pre><code>- 🔹If you request a limit increase to AWS support for this, they will respond to you asking to confirm this. Bypass this by saying in the body of your initial request:
</code></pre>
<code>"I acknowledge at the moment, there is no method to add or remove a name from a certificate. Instead, you must request a new certificate with the revised namelist and you must then re-approve all of the names in the certificate, even if they'd been previously approved."</code></li>
<li>🔸There is no way at the moment to add or remove a domain to/from an existing certificate. You must request a new certificate and re-approve it from each of the domains requested.</li>
</ul><span id="navId" data="certificate-manager"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-CodeDeploy.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>CodeDeploy - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-CodeDeploy.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-CodeDeploy.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-CodeDeploy.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="CodeDeploy - undefined" />
  <meta name="twitter:title" content="CodeDeploy - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">CodeDeploy</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="CodeDeploy">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="codedeploy"><a aria-hidden="true" class="anchor-heading" href="#codedeploy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CodeDeploy</h1>
<ul>
<li>prefix: codedeploy</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="addtagstoonpremisesinstances"><a aria-hidden="true" class="anchor-heading" href="#addtagstoonpremisesinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddTagsToOnPremisesInstances</h3>
<ul>
<li>description: Add tags to one or more on-premises instances.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchgetapplicationrevisions"><a aria-hidden="true" class="anchor-heading" href="#batchgetapplicationrevisions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchGetApplicationRevisions</h3>
<ul>
<li>description: Gets information about one or more application revisions.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchgetapplications"><a aria-hidden="true" class="anchor-heading" href="#batchgetapplications"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchGetApplications</h3>
<ul>
<li>description: Get information about multiple applications associated with the IAM user.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchgetdeploymentgroups"><a aria-hidden="true" class="anchor-heading" href="#batchgetdeploymentgroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchGetDeploymentGroups</h3>
<ul>
<li>description: Get information about one or more deployment groups.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "deploymentgroup": {
        "resource_type": "deploymentgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchgetdeploymentinstances"><a aria-hidden="true" class="anchor-heading" href="#batchgetdeploymentinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchGetDeploymentInstances</h3>
<ul>
<li>description: Gets information about one or more instance that are part of a deployment group.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "deploymentgroup": {
        "resource_type": "deploymentgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchgetdeploymenttargets"><a aria-hidden="true" class="anchor-heading" href="#batchgetdeploymenttargets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchGetDeploymentTargets</h3>
<ul>
<li>description: Returns an array of one or more targets associated with a deployment. This method works with all compute types and should be used instead of the deprecated BatchGetDeploymentInstances. The maximum number of targets that can be returned is 25.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchgetdeployments"><a aria-hidden="true" class="anchor-heading" href="#batchgetdeployments"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchGetDeployments</h3>
<ul>
<li>description: Get information about multiple deployments associated with the IAM user.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "deploymentgroup": {
        "resource_type": "deploymentgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchgetonpremisesinstances"><a aria-hidden="true" class="anchor-heading" href="#batchgetonpremisesinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchGetOnPremisesInstances</h3>
<ul>
<li>description: Get information about one or more on-premises instances.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="continuedeployment"><a aria-hidden="true" class="anchor-heading" href="#continuedeployment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ContinueDeployment</h3>
<ul>
<li>description: Starts the process of rerouting traffic from instances in the original environment to instances in thereplacement environment without waiting for a specified wait time to elapse.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createapplication"><a aria-hidden="true" class="anchor-heading" href="#createapplication"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateApplication</h3>
<ul>
<li>description: Create an application associated with the IAM user.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createcloudformationdeployment"><a aria-hidden="true" class="anchor-heading" href="#createcloudformationdeployment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateCloudFormationDeployment</h3>
<ul>
<li>description: Create CloudFormation deployment to cooperate ochestration for a CloudFormation stack update.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdeployment"><a aria-hidden="true" class="anchor-heading" href="#createdeployment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDeployment</h3>
<ul>
<li>description: Create a deployment for an application associated with the IAM user.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "deploymentgroup": {
        "resource_type": "deploymentgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdeploymentconfig"><a aria-hidden="true" class="anchor-heading" href="#createdeploymentconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDeploymentConfig</h3>
<ul>
<li>description: Create a custom deployment configuration associated with the IAM user.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "deploymentconfig": {
        "resource_type": "deploymentconfig",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdeploymentgroup"><a aria-hidden="true" class="anchor-heading" href="#createdeploymentgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDeploymentGroup</h3>
<ul>
<li>description: Create a deployment group for an application associated with the IAM user.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "deploymentgroup": {
        "resource_type": "deploymentgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteapplication"><a aria-hidden="true" class="anchor-heading" href="#deleteapplication"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteApplication</h3>
<ul>
<li>description: Delete an application associated with the IAM user.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedeploymentconfig"><a aria-hidden="true" class="anchor-heading" href="#deletedeploymentconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDeploymentConfig</h3>
<ul>
<li>description: Delete a custom deployment configuration associated with the IAM user.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "deploymentconfig": {
        "resource_type": "deploymentconfig",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedeploymentgroup"><a aria-hidden="true" class="anchor-heading" href="#deletedeploymentgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDeploymentGroup</h3>
<ul>
<li>description: Delete a deployment group for an application associated with the IAM user.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "deploymentgroup": {
        "resource_type": "deploymentgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletegithubaccounttoken"><a aria-hidden="true" class="anchor-heading" href="#deletegithubaccounttoken"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteGitHubAccountToken</h3>
<ul>
<li>description: Deletes a GitHub account connection.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteresourcesbyexternalid"><a aria-hidden="true" class="anchor-heading" href="#deleteresourcesbyexternalid"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteResourcesByExternalId</h3>
<ul>
<li>description: Delete resources associated with the given external Id.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deregisteronpremisesinstance"><a aria-hidden="true" class="anchor-heading" href="#deregisteronpremisesinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeregisterOnPremisesInstance</h3>
<ul>
<li>description: Deregister an on-premises instance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getapplication"><a aria-hidden="true" class="anchor-heading" href="#getapplication"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetApplication</h3>
<ul>
<li>description: Get information about a single application associated with the IAM user.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getapplicationrevision"><a aria-hidden="true" class="anchor-heading" href="#getapplicationrevision"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetApplicationRevision</h3>
<ul>
<li>description: Get information about a single application revision for an application associated with the IAM user.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdeployment"><a aria-hidden="true" class="anchor-heading" href="#getdeployment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDeployment</h3>
<ul>
<li>description: Get information about a single deployment to a deployment group for an application associated with the IAM user.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "deploymentgroup": {
        "resource_type": "deploymentgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdeploymentconfig"><a aria-hidden="true" class="anchor-heading" href="#getdeploymentconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDeploymentConfig</h3>
<ul>
<li>description: Get information about a single deployment configuration associated with the IAM user.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "deploymentconfig": {
        "resource_type": "deploymentconfig",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdeploymentgroup"><a aria-hidden="true" class="anchor-heading" href="#getdeploymentgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDeploymentGroup</h3>
<ul>
<li>description: Get information about a single deployment group for an application associated with the IAM user.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "deploymentgroup": {
        "resource_type": "deploymentgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdeploymentinstance"><a aria-hidden="true" class="anchor-heading" href="#getdeploymentinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDeploymentInstance</h3>
<ul>
<li>description: Get information about a single instance in a deployment associated with the IAM user.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "deploymentgroup": {
        "resource_type": "deploymentgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdeploymenttarget"><a aria-hidden="true" class="anchor-heading" href="#getdeploymenttarget"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDeploymentTarget</h3>
<ul>
<li>description: Returns information about a deployment target.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getonpremisesinstance"><a aria-hidden="true" class="anchor-heading" href="#getonpremisesinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetOnPremisesInstance</h3>
<ul>
<li>description: Get information about a single on-premises instance.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listapplicationrevisions"><a aria-hidden="true" class="anchor-heading" href="#listapplicationrevisions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListApplicationRevisions</h3>
<ul>
<li>description: Get information about all application revisions for an application associated with the IAM user.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listapplications"><a aria-hidden="true" class="anchor-heading" href="#listapplications"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListApplications</h3>
<ul>
<li>description: Get information about all applications associated with the IAM user.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdeploymentconfigs"><a aria-hidden="true" class="anchor-heading" href="#listdeploymentconfigs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDeploymentConfigs</h3>
<ul>
<li>description: Get information about all deployment configurations associated with the IAM user.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdeploymentgroups"><a aria-hidden="true" class="anchor-heading" href="#listdeploymentgroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDeploymentGroups</h3>
<ul>
<li>description: Get information about all deployment groups for an application associated with the IAM user.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdeploymentinstances"><a aria-hidden="true" class="anchor-heading" href="#listdeploymentinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDeploymentInstances</h3>
<ul>
<li>description: Get information about all instances in a deployment associated with the IAM user.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "deploymentgroup": {
        "resource_type": "deploymentgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdeploymenttargets"><a aria-hidden="true" class="anchor-heading" href="#listdeploymenttargets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDeploymentTargets</h3>
<ul>
<li>description: Returns an array of target IDs that are associated a deployment.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdeployments"><a aria-hidden="true" class="anchor-heading" href="#listdeployments"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDeployments</h3>
<ul>
<li>description: Get information about all deployments to a deployment group associated with the IAM user, or to get all deployments associated with the IAM user.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "deploymentgroup": {
        "resource_type": "deploymentgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listgithubaccounttokennames"><a aria-hidden="true" class="anchor-heading" href="#listgithubaccounttokennames"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListGitHubAccountTokenNames</h3>
<ul>
<li>description: Lists the names of stored connections to GitHub accounts.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listonpremisesinstances"><a aria-hidden="true" class="anchor-heading" href="#listonpremisesinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListOnPremisesInstances</h3>
<ul>
<li>description: Get a list of one or more on-premises instance names.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Returns a list of tags for the resource identified by a specified ARN. Tags are used to organize and categorize your CodeDeploy resources.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "deploymentgroup": {
        "resource_type": "deploymentgroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putlifecycleeventhookexecutionstatus"><a aria-hidden="true" class="anchor-heading" href="#putlifecycleeventhookexecutionstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutLifecycleEventHookExecutionStatus</h3>
<ul>
<li>description: Notify a lifecycle event hook execution status for associated deployment with the IAM user.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registerapplicationrevision"><a aria-hidden="true" class="anchor-heading" href="#registerapplicationrevision"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterApplicationRevision</h3>
<ul>
<li>description: Register information about an application revision for an application associated with the IAM user.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registeronpremisesinstance"><a aria-hidden="true" class="anchor-heading" href="#registeronpremisesinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterOnPremisesInstance</h3>
<ul>
<li>description: Register an on-premises instance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="removetagsfromonpremisesinstances"><a aria-hidden="true" class="anchor-heading" href="#removetagsfromonpremisesinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemoveTagsFromOnPremisesInstances</h3>
<ul>
<li>description: Remove tags from one or more on-premises instances.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="skipwaittimeforinstancetermination"><a aria-hidden="true" class="anchor-heading" href="#skipwaittimeforinstancetermination"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SkipWaitTimeForInstanceTermination</h3>
<ul>
<li>description: In a blue/green deployment, overrides any specified wait time and starts terminating instances immediately after the traffic routing is complete.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopdeployment"><a aria-hidden="true" class="anchor-heading" href="#stopdeployment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopDeployment</h3>
<ul>
<li>description: Description for StopDeployment</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Associates the list of tags in the input Tags parameter with the resource identified by the ResourceArn input parameter.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "deploymentgroup": {
        "resource_type": "deploymentgroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Disassociates a resource from a list of tags. The resource is identified by the ResourceArn input parameter. The tags are identfied by the list of keys in the TagKeys input parameter.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "deploymentgroup": {
        "resource_type": "deploymentgroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateapplication"><a aria-hidden="true" class="anchor-heading" href="#updateapplication"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateApplication</h3>
<ul>
<li>description: Description for UpdateApplication</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "application": {
        "resource_type": "application",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatedeploymentgroup"><a aria-hidden="true" class="anchor-heading" href="#updatedeploymentgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateDeploymentGroup</h3>
<ul>
<li>description: Change information about a single deployment group for an application associated with the IAM user.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "deploymentgroup": {
        "resource_type": "deploymentgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-CodeDeploy"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/load-balancers.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Load Balancers - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/load-balancers.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/load-balancers.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/load-balancers.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Load Balancers - undefined" />
  <meta name="twitter:title" content="Load Balancers - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/1f759d8c-cca7-4fc4-9aa2-6dbf6e596abf.html">Services</a></li><li class="breadcrumb-nav-list-item">Load Balancers</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/open-guides/og-aws" target="_blank"> og-aws  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Load Balancers">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="load-balancers"><a aria-hidden="true" class="anchor-heading" href="#load-balancers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Load Balancers</h1>
<h3 id="load-balancer-basics"><a aria-hidden="true" class="anchor-heading" href="#load-balancer-basics"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Load Balancer Basics</h3>
<ul>
<li>AWS has 3 load balancing products - “Classic Load Balancers” (CLBs), “Application Load Balancers” (ALBs), and "Network Load Balancers" (NLB).</li>
<li>Before the introduction of ALBs, “Classic Load Balancers” were known as “Elastic Load Balancers” (ELBs), so older documentation, tooling, and blog posts may still reference “ELBs”.</li>
<li>CLBs have been around since 2009, ALBs in 2016, NLBs were added in 2017 to AWS.</li>
<li>CLBs support TCP and HTTP load balancing. ALBs support HTTP load balancing only. NLBs support TCP layer 4 load balancing.</li>
<li>CLBs and ALBs can optionally handle termination for a single SSL certificate.</li>
<li>All can optionally perform active health checks of instances and remove them from the destination pool if they become unhealthy.</li>
<li>CLBs don't support complex / rule-based routing. ALBs support a (currently small) set of rule-based routing features. NLBs have most extensive routing options.</li>
<li>CLBs can only forward traffic to a single globally configured port on destination instances, while ALBs can forward to ports that are configured on a per-instance basis, better supporting routing to services on shared clusters with dynamic port assignment (like ECS or Mesos). NLBs support multiple ports on same IP; registering targets by IP address, including targets outside the VPC for the load balancer; ECS can select unused port for scheduling a task then register a target group using this port.</li>
<li>CLBs are supported in EC2 Classic as well as in VPCs while ALBs are supported in VPCs only.</li>
<li>ALBs can target groups of instances and IP based targets in the RFC1918 ranges allowing you to use on premise destinations via VPN or Direct Connect.</li>
</ul>
<h3 id="load-balancer-tips"><a aria-hidden="true" class="anchor-heading" href="#load-balancer-tips"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Load Balancer Tips</h3>
<ul>
<li>If you don’t have opinions on your load balancing up front, and don’t have complex load balancing needs like application-specific routing of requests, it’s reasonable just to use a CLB or ALB for load balancing instead.</li>
<li>Even if you don’t want to think about load balancing at all, because your architecture is so simple (say, just one server), put a load balancer in front of it anyway. This gives you more flexibility when upgrading, since you won’t have to change any DNS settings that will be slow to propagate, and also it lets you do a few things like terminate SSL more easily.</li>
<li><strong>CLBs and ALBs have many IPs:</strong> Internally, an AWS load balancer is simply a collection of individual software load balancers hosted within EC2, with DNS load balancing traffic among them. The pool can contain many IPs, at least one per availability zone, and depending on traffic levels. They also support SSL termination, which is very convenient.</li>
<li><strong>Scaling:</strong> CLBs and ALBs can scale to very high throughput, but scaling up is not instantaneous. If you’re expecting to be hit with a lot of traffic suddenly, it can make sense to load test them so they scale up in advance. You can also <a href="http://aws.amazon.com/articles/1636185810492479">contact Amazon</a> and have them “pre-warm” the load balancer.</li>
<li><strong>Client IPs:</strong> In general, if servers want to know true client IP addresses, load balancers must forward this information somehow. CLBs add the standard <a href="https://en.wikipedia.org/wiki/X-Forwarded-For">X-Forwarded-For</a> header. When using a CLB as an HTTP load balancer, it’s possible to get the client’s IP address from this.</li>
<li><strong>Using load balancers when deploying:</strong> One common pattern is to swap instances in the load balancer after spinning up a new stack with your latest version, keep old stack running for one or two hours, and either flip back to old stack in case of problems or tear it down.</li>
<li><strong>Rotating Certificates while retaining ARN:</strong> Rotating IAM Server Certificates can be difficult as the standard practice is to upload a new one then update all resources with the new ARN. You can however retain the same ARN using the <code>update-certificate</code> call with the following process:</li>
</ul>
<ol>
<li>Upload a new IAM Server Certificate with a unique name (e.g fuzzy.com.new)</li>
<li>Rename the existing IAM Server Certificate (e.g fuzzy.com to fuzzy.com.expired)</li>
<li>Rename the new IAM Server Certificate to the name of the previously existing certificate (e.g fuzzy.com.new to fuzzy.com)</li>
<li>Jiggle the CLB/ALB Listener to pick up the change:
<ul>
<li>ALB: Invoke modify-listener with the existing details for the ALB Listener</li>
<li>CLB: Invoke create-load-balancer-listeners with the existing details for the CLB listener</li>
</ul>
</li>
</ol>
<h3 id="load-balancer-gotchas-and-limitations"><a aria-hidden="true" class="anchor-heading" href="#load-balancer-gotchas-and-limitations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Load Balancer Gotchas and Limitations</h3>
<ul>
<li>❗CLBs and ALBs have <strong>no fixed external IP</strong> that all clients see. For most consumer apps this doesn’t matter, but enterprise customers of yours may want this. IPs will be different for each user, and will vary unpredictably for a single client over time (within the standard <a href="http://docs.aws.amazon.com/general/latest/gr/aws-ip-ranges.html">EC2 IP ranges</a>). And similarly, never resolve a CLB name to an IP and put it as the value of an A record — it will work for a while, then break!</li>
<li>❗Some web clients or reverse proxies cache DNS lookups for a long time, which is problematic for CLBs and ALBs, since they change their IPs. This means after a few minutes, hours, or days, your client will stop working, unless you disable DNS caching. Watch out for <a href="http://docs.oracle.com/javase/8/docs/api/java/net/InetAddress.html">Java’s settings</a> and be sure to <a href="http://docs.aws.amazon.com/AWSSdkDocsJava/latest/DeveloperGuide/java-dg-jvm-ttl.html">adjust them properly</a>. Another example is nginx as a reverse proxy, which <a href="https://www.jethrocarr.com/2013/11/02/nginx-reverse-proxies-and-dns-resolution/">normally resolves backends only at start-up</a> (although there is <a href="https://tenzer.dk/nginx-with-dynamic-upstreams/">a way to get around this</a>).</li>
<li>❗It’s not unheard of for IPs to be recycled between customers without a long cool-off period. So as a client, if you cache an IP and are not using SSL (to verify the server), you might get not just errors, but responses from completely different services or companies!</li>
<li>🔸As an operator of a service behind a CLB or ALB, the latter phenomenon means you can also see puzzling or erroneous requests by clients of other companies. This is most common with clients using back-end APIs (since web browsers typically cache for a limited period).</li>
<li>❗CLBs and ALBs take time to scale up, it does not handle sudden spikes in traffic well. Therefore, if you anticipate a spike, you need to “pre-warm” the load balancer by gradually sending an increasing amount of traffic.</li>
<li>❗Tune your healthchecks carefully — if you are too aggressive about deciding when to remove an instance and conservative about adding it back into the pool, the service that your load balancer is fronting may become inaccessible for seconds or minutes at a time. Be extra careful about this when an autoscaler is configured to terminate instances that are marked as being unhealthy by a managed load balancer.</li>
<li>❗CLB HTTPS listeners don't support Server Name Indication (SNI). If you need SNI, you can work around this limitation by either providing a certificate with Subject Alternative Names (SANs) or by using TCP listeners and terminating SSL at your backend.</li>
<li>🔸 There is a limit on the number of ALBs, CLBs and NLBs per region (separately). As of late 2017, the default limit for each is 20 per region. These limits can be easily raised for ALB and CLB, but AWS is quite reluctant to raise the limit on NLBs.</li>
<li>🔸 If using a Network Load Balancer (NLB) then EC2 clients cannot connect to an NLB that resides in another VPC (VPC Peering) or AWS managed VPN unless the EC2 client is a C5, i3.metal or M5 instance type. For VPC peering, both VPCs must be in the same region. See <a href="https://docs.aws.amazon.com/elasticloadbalancing/latest/network/load-balancer-troubleshooting.html#target-not-in-service">Troubleshooting</a>.</li>
</ul><span id="navId" data="load-balancers"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-GameLift.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>GameLift - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-GameLift.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-GameLift.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-GameLift.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="GameLift - undefined" />
  <meta name="twitter:title" content="GameLift - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">GameLift</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="GameLift">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="gamelift"><a aria-hidden="true" class="anchor-heading" href="#gamelift"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GameLift</h1>
<ul>
<li>prefix: gamelift</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="acceptmatch"><a aria-hidden="true" class="anchor-heading" href="#acceptmatch"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AcceptMatch</h3>
<ul>
<li>description: Registers player acceptance or rejection of a proposed FlexMatch match.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="claimgameserver"><a aria-hidden="true" class="anchor-heading" href="#claimgameserver"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ClaimGameServer</h3>
<ul>
<li>description: Locates and reserves a game server to host a new game session.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gameServerGroup": {
        "resource_type": "gameServerGroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createalias"><a aria-hidden="true" class="anchor-heading" href="#createalias"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateAlias</h3>
<ul>
<li>description: Defines a new alias for a fleet.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createbuild"><a aria-hidden="true" class="anchor-heading" href="#createbuild"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateBuild</h3>
<ul>
<li>description: Creates a new game build using files stored in an Amazon S3 bucket.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createfleet"><a aria-hidden="true" class="anchor-heading" href="#createfleet"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateFleet</h3>
<ul>
<li>description: Creates a new fleet of computing resources to run your game servers.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="creategameservergroup"><a aria-hidden="true" class="anchor-heading" href="#creategameservergroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateGameServerGroup</h3>
<ul>
<li>description: Creates a new game server group, sets up a corresponding Auto Scaling group, and launches instances to host game servers.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="creategamesession"><a aria-hidden="true" class="anchor-heading" href="#creategamesession"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateGameSession</h3>
<ul>
<li>description: Starts a new game session on a specified fleet.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="creategamesessionqueue"><a aria-hidden="true" class="anchor-heading" href="#creategamesessionqueue"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateGameSessionQueue</h3>
<ul>
<li>description: Sets up a new queue for processing new game session placement requests.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="creatematchmakingconfiguration"><a aria-hidden="true" class="anchor-heading" href="#creatematchmakingconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateMatchmakingConfiguration</h3>
<ul>
<li>description: Creates a new FlexMatch matchmaker.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="creatematchmakingruleset"><a aria-hidden="true" class="anchor-heading" href="#creatematchmakingruleset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateMatchmakingRuleSet</h3>
<ul>
<li>description: Creates a new matchmaking rule set for FlexMatch.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createplayersession"><a aria-hidden="true" class="anchor-heading" href="#createplayersession"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreatePlayerSession</h3>
<ul>
<li>description: Reserves an available game session slot for a player.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createplayersessions"><a aria-hidden="true" class="anchor-heading" href="#createplayersessions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreatePlayerSessions</h3>
<ul>
<li>description: Reserves available game session slots for multiple players.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createscript"><a aria-hidden="true" class="anchor-heading" href="#createscript"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateScript</h3>
<ul>
<li>description: Creates a new Realtime Servers script.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createvpcpeeringauthorization"><a aria-hidden="true" class="anchor-heading" href="#createvpcpeeringauthorization"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateVpcPeeringAuthorization</h3>
<ul>
<li>description: Allows GameLift to create or delete a peering connection between a GameLift fleet VPC and a VPC on another AWS account.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createvpcpeeringconnection"><a aria-hidden="true" class="anchor-heading" href="#createvpcpeeringconnection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateVpcPeeringConnection</h3>
<ul>
<li>description: Establishes a peering connection between your GameLift fleet VPC and a VPC on another account.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletealias"><a aria-hidden="true" class="anchor-heading" href="#deletealias"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAlias</h3>
<ul>
<li>description: Deletes an alias.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "alias": {
        "resource_type": "alias",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletebuild"><a aria-hidden="true" class="anchor-heading" href="#deletebuild"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteBuild</h3>
<ul>
<li>description: Deletes a game build.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "build": {
        "resource_type": "build",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletefleet"><a aria-hidden="true" class="anchor-heading" href="#deletefleet"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteFleet</h3>
<ul>
<li>description: Deletes an empty fleet.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletegameservergroup"><a aria-hidden="true" class="anchor-heading" href="#deletegameservergroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteGameServerGroup</h3>
<ul>
<li>description: Permanently deletes a game server group and terminates FleetIQ activity for the corresponding Auto Scaling group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gameServerGroup": {
        "resource_type": "gameServerGroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletegamesessionqueue"><a aria-hidden="true" class="anchor-heading" href="#deletegamesessionqueue"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteGameSessionQueue</h3>
<ul>
<li>description: Deletes an existing game session queue.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gameSessionQueue": {
        "resource_type": "gameSessionQueue",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletematchmakingconfiguration"><a aria-hidden="true" class="anchor-heading" href="#deletematchmakingconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteMatchmakingConfiguration</h3>
<ul>
<li>description: Deletes an existing FlexMatch matchmaker.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "matchmakingConfiguration": {
        "resource_type": "matchmakingConfiguration",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletematchmakingruleset"><a aria-hidden="true" class="anchor-heading" href="#deletematchmakingruleset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteMatchmakingRuleSet</h3>
<ul>
<li>description: Deletes an existing FlexMatch matchmaking rule set.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "matchmakingRuleSet": {
        "resource_type": "matchmakingRuleSet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletescalingpolicy"><a aria-hidden="true" class="anchor-heading" href="#deletescalingpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteScalingPolicy</h3>
<ul>
<li>description: Deletes a set of auto-scaling rules.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletescript"><a aria-hidden="true" class="anchor-heading" href="#deletescript"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteScript</h3>
<ul>
<li>description: Deletes a Realtime Servers script.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "script": {
        "resource_type": "script",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletevpcpeeringauthorization"><a aria-hidden="true" class="anchor-heading" href="#deletevpcpeeringauthorization"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteVpcPeeringAuthorization</h3>
<ul>
<li>description: Cancels a VPC peering authorization.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletevpcpeeringconnection"><a aria-hidden="true" class="anchor-heading" href="#deletevpcpeeringconnection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteVpcPeeringConnection</h3>
<ul>
<li>description: Removes a peering connection between VPCs.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deregistergameserver"><a aria-hidden="true" class="anchor-heading" href="#deregistergameserver"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeregisterGameServer</h3>
<ul>
<li>description: Removes a game server from a game server group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gameServerGroup": {
        "resource_type": "gameServerGroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describealias"><a aria-hidden="true" class="anchor-heading" href="#describealias"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAlias</h3>
<ul>
<li>description: Retrieves properties for an alias.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "alias": {
        "resource_type": "alias",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describebuild"><a aria-hidden="true" class="anchor-heading" href="#describebuild"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeBuild</h3>
<ul>
<li>description: Retrieves properties for a game build.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "build": {
        "resource_type": "build",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeec2instancelimits"><a aria-hidden="true" class="anchor-heading" href="#describeec2instancelimits"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEC2InstanceLimits</h3>
<ul>
<li>description: Retrieves the maximum allowed and current usage for EC2 instance types.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describefleetattributes"><a aria-hidden="true" class="anchor-heading" href="#describefleetattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeFleetAttributes</h3>
<ul>
<li>description: Retrieves general properties, including status, for fleets.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describefleetcapacity"><a aria-hidden="true" class="anchor-heading" href="#describefleetcapacity"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeFleetCapacity</h3>
<ul>
<li>description: Retrieves the current capacity setting for fleets.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describefleetevents"><a aria-hidden="true" class="anchor-heading" href="#describefleetevents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeFleetEvents</h3>
<ul>
<li>description: Retrieves entries from a fleet's event log.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describefleetportsettings"><a aria-hidden="true" class="anchor-heading" href="#describefleetportsettings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeFleetPortSettings</h3>
<ul>
<li>description: Retrieves the inbound connection permissions for a fleet.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describefleetutilization"><a aria-hidden="true" class="anchor-heading" href="#describefleetutilization"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeFleetUtilization</h3>
<ul>
<li>description: Retrieves utilization statistics for fleets.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describegameserver"><a aria-hidden="true" class="anchor-heading" href="#describegameserver"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeGameServer</h3>
<ul>
<li>description: Retrieves properties for a game server.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gameServerGroup": {
        "resource_type": "gameServerGroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describegameservergroup"><a aria-hidden="true" class="anchor-heading" href="#describegameservergroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeGameServerGroup</h3>
<ul>
<li>description: Retrieves properties for a game server group.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gameServerGroup": {
        "resource_type": "gameServerGroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describegameserverinstances"><a aria-hidden="true" class="anchor-heading" href="#describegameserverinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeGameServerInstances</h3>
<ul>
<li>description: Retrieves the status of EC2 instances in a game server group.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gameServerGroup": {
        "resource_type": "gameServerGroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describegamesessiondetails"><a aria-hidden="true" class="anchor-heading" href="#describegamesessiondetails"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeGameSessionDetails</h3>
<ul>
<li>description: Retrieves properties for game sessions in a fleet, including the protection policy.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describegamesessionplacement"><a aria-hidden="true" class="anchor-heading" href="#describegamesessionplacement"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeGameSessionPlacement</h3>
<ul>
<li>description: Retrieves details of a game session placement request.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describegamesessionqueues"><a aria-hidden="true" class="anchor-heading" href="#describegamesessionqueues"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeGameSessionQueues</h3>
<ul>
<li>description: Retrieves properties for game session queues.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describegamesessions"><a aria-hidden="true" class="anchor-heading" href="#describegamesessions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeGameSessions</h3>
<ul>
<li>description: Retrieves properties for game sessions in a fleet.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeinstances"><a aria-hidden="true" class="anchor-heading" href="#describeinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeInstances</h3>
<ul>
<li>description: Retrieves information about instances in a fleet.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describematchmaking"><a aria-hidden="true" class="anchor-heading" href="#describematchmaking"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeMatchmaking</h3>
<ul>
<li>description: Retrieves details of matchmaking tickets.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describematchmakingconfigurations"><a aria-hidden="true" class="anchor-heading" href="#describematchmakingconfigurations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeMatchmakingConfigurations</h3>
<ul>
<li>description: Retrieves properties for FlexMatch matchmakers.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describematchmakingrulesets"><a aria-hidden="true" class="anchor-heading" href="#describematchmakingrulesets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeMatchmakingRuleSets</h3>
<ul>
<li>description: Retrieves properties for FlexMatch matchmaking rule sets.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeplayersessions"><a aria-hidden="true" class="anchor-heading" href="#describeplayersessions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribePlayerSessions</h3>
<ul>
<li>description: Retrieves properties for player sessions in a game session.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeruntimeconfiguration"><a aria-hidden="true" class="anchor-heading" href="#describeruntimeconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeRuntimeConfiguration</h3>
<ul>
<li>description: Retrieves the current runtime configuration for a fleet.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describescalingpolicies"><a aria-hidden="true" class="anchor-heading" href="#describescalingpolicies"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeScalingPolicies</h3>
<ul>
<li>description: Retrieves all scaling policies that are applied to a fleet.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describescript"><a aria-hidden="true" class="anchor-heading" href="#describescript"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeScript</h3>
<ul>
<li>description: Retrieves properties for a Realtime Servers script.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "script": {
        "resource_type": "script",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describevpcpeeringauthorizations"><a aria-hidden="true" class="anchor-heading" href="#describevpcpeeringauthorizations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeVpcPeeringAuthorizations</h3>
<ul>
<li>description: Retrieves valid VPC peering authorizations.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describevpcpeeringconnections"><a aria-hidden="true" class="anchor-heading" href="#describevpcpeeringconnections"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeVpcPeeringConnections</h3>
<ul>
<li>description: Retrieves details on active or pending VPC peering connections.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getgamesessionlogurl"><a aria-hidden="true" class="anchor-heading" href="#getgamesessionlogurl"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetGameSessionLogUrl</h3>
<ul>
<li>description: Retrieves the location of stored logs for a game session.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getinstanceaccess"><a aria-hidden="true" class="anchor-heading" href="#getinstanceaccess"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetInstanceAccess</h3>
<ul>
<li>description: Requests remote access to a specified fleet instance.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listaliases"><a aria-hidden="true" class="anchor-heading" href="#listaliases"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAliases</h3>
<ul>
<li>description: Retrieves all aliases that are defined in the current region.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listbuilds"><a aria-hidden="true" class="anchor-heading" href="#listbuilds"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListBuilds</h3>
<ul>
<li>description: Retrieves all game build in the current region.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listfleets"><a aria-hidden="true" class="anchor-heading" href="#listfleets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListFleets</h3>
<ul>
<li>description: Retrieves a list of fleet IDs for all fleets in the current region.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listgameservergroups"><a aria-hidden="true" class="anchor-heading" href="#listgameservergroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListGameServerGroups</h3>
<ul>
<li>description: Retrieves all game server groups that are defined in the current region.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listgameservers"><a aria-hidden="true" class="anchor-heading" href="#listgameservers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListGameServers</h3>
<ul>
<li>description: Retrieves all game servers that are currently running in a game server group.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gameServerGroup": {
        "resource_type": "gameServerGroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listscripts"><a aria-hidden="true" class="anchor-heading" href="#listscripts"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListScripts</h3>
<ul>
<li>description: Retrieves properties for all Realtime Servers scripts in the current region.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Lists tags for GameLift resources</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "alias": {
        "resource_type": "alias",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "build": {
        "resource_type": "build",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "fleet": {
        "resource_type": "fleet",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "gameServerGroup": {
        "resource_type": "gameServerGroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "gameSessionQueue": {
        "resource_type": "gameSessionQueue",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "matchmakingConfiguration": {
        "resource_type": "matchmakingConfiguration",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "matchmakingRuleSet": {
        "resource_type": "matchmakingRuleSet",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "script": {
        "resource_type": "script",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putscalingpolicy"><a aria-hidden="true" class="anchor-heading" href="#putscalingpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutScalingPolicy</h3>
<ul>
<li>description: Creates or updates a fleet auto-scaling policy.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registergameserver"><a aria-hidden="true" class="anchor-heading" href="#registergameserver"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterGameServer</h3>
<ul>
<li>description: Notifies GameLift FleetIQ when a new game server is ready to host gameplay.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gameServerGroup": {
        "resource_type": "gameServerGroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="requestuploadcredentials"><a aria-hidden="true" class="anchor-heading" href="#requestuploadcredentials"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RequestUploadCredentials</h3>
<ul>
<li>description: Retrieves fresh upload credentials to use when uploading a new game build.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "build": {
        "resource_type": "build",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="resolvealias"><a aria-hidden="true" class="anchor-heading" href="#resolvealias"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ResolveAlias</h3>
<ul>
<li>description: Retrieves the fleet ID associated with an alias.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "alias": {
        "resource_type": "alias",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="resumegameservergroup"><a aria-hidden="true" class="anchor-heading" href="#resumegameservergroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ResumeGameServerGroup</h3>
<ul>
<li>description: Reinstates suspended FleetIQ activity for a game server group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gameServerGroup": {
        "resource_type": "gameServerGroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="searchgamesessions"><a aria-hidden="true" class="anchor-heading" href="#searchgamesessions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SearchGameSessions</h3>
<ul>
<li>description: Retrieves game sessions that match a set of search criteria.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startfleetactions"><a aria-hidden="true" class="anchor-heading" href="#startfleetactions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartFleetActions</h3>
<ul>
<li>description: Resumes auto-scaling activity on a fleet after it was suspended with StopFleetActions().</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startgamesessionplacement"><a aria-hidden="true" class="anchor-heading" href="#startgamesessionplacement"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartGameSessionPlacement</h3>
<ul>
<li>description: Sends a game session placement request to a game session queue.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gameSessionQueue": {
        "resource_type": "gameSessionQueue",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startmatchbackfill"><a aria-hidden="true" class="anchor-heading" href="#startmatchbackfill"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartMatchBackfill</h3>
<ul>
<li>description: Requests FlexMatch matchmaking to fill available player slots in an existing game session.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startmatchmaking"><a aria-hidden="true" class="anchor-heading" href="#startmatchmaking"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartMatchmaking</h3>
<ul>
<li>description: Requests FlexMatch matchmaking for one or a group of players and game session placement for a resulting match.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopfleetactions"><a aria-hidden="true" class="anchor-heading" href="#stopfleetactions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopFleetActions</h3>
<ul>
<li>description: Suspends auto-scaling activity on a fleet.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopgamesessionplacement"><a aria-hidden="true" class="anchor-heading" href="#stopgamesessionplacement"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopGameSessionPlacement</h3>
<ul>
<li>description: Cancels a game session placement request that is in progress.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopmatchmaking"><a aria-hidden="true" class="anchor-heading" href="#stopmatchmaking"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopMatchmaking</h3>
<ul>
<li>description: Cancels a matchmaking or match backfill request that is in progress.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="suspendgameservergroup"><a aria-hidden="true" class="anchor-heading" href="#suspendgameservergroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SuspendGameServerGroup</h3>
<ul>
<li>description: Temporarily stops FleetIQ activity for a game server group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gameServerGroup": {
        "resource_type": "gameServerGroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Tags GameLift resources</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "alias": {
        "resource_type": "alias",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "build": {
        "resource_type": "build",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "fleet": {
        "resource_type": "fleet",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "gameServerGroup": {
        "resource_type": "gameServerGroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "gameSessionQueue": {
        "resource_type": "gameSessionQueue",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "matchmakingConfiguration": {
        "resource_type": "matchmakingConfiguration",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "matchmakingRuleSet": {
        "resource_type": "matchmakingRuleSet",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "script": {
        "resource_type": "script",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Untags GameLift resources</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "alias": {
        "resource_type": "alias",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "build": {
        "resource_type": "build",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "fleet": {
        "resource_type": "fleet",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "gameServerGroup": {
        "resource_type": "gameServerGroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "gameSessionQueue": {
        "resource_type": "gameSessionQueue",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "matchmakingConfiguration": {
        "resource_type": "matchmakingConfiguration",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "matchmakingRuleSet": {
        "resource_type": "matchmakingRuleSet",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "script": {
        "resource_type": "script",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatealias"><a aria-hidden="true" class="anchor-heading" href="#updatealias"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateAlias</h3>
<ul>
<li>description: Updates the properties of an existing alias.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "alias": {
        "resource_type": "alias",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatebuild"><a aria-hidden="true" class="anchor-heading" href="#updatebuild"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateBuild</h3>
<ul>
<li>description: Updates an existing build's metadata.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "build": {
        "resource_type": "build",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatefleetattributes"><a aria-hidden="true" class="anchor-heading" href="#updatefleetattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateFleetAttributes</h3>
<ul>
<li>description: Updates the general properties of an existing fleet.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatefleetcapacity"><a aria-hidden="true" class="anchor-heading" href="#updatefleetcapacity"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateFleetCapacity</h3>
<ul>
<li>description: Adjusts a fleet's capacity settings.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatefleetportsettings"><a aria-hidden="true" class="anchor-heading" href="#updatefleetportsettings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateFleetPortSettings</h3>
<ul>
<li>description: Adjusts a fleet's port settings.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updategameserver"><a aria-hidden="true" class="anchor-heading" href="#updategameserver"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateGameServer</h3>
<ul>
<li>description: Changes game server properties, health status, or utilization status.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gameServerGroup": {
        "resource_type": "gameServerGroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updategameservergroup"><a aria-hidden="true" class="anchor-heading" href="#updategameservergroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateGameServerGroup</h3>
<ul>
<li>description: Updates properties for game server group, including allowed instance types.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gameServerGroup": {
        "resource_type": "gameServerGroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updategamesession"><a aria-hidden="true" class="anchor-heading" href="#updategamesession"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateGameSession</h3>
<ul>
<li>description: Updates the properties of an existing game session.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updategamesessionqueue"><a aria-hidden="true" class="anchor-heading" href="#updategamesessionqueue"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateGameSessionQueue</h3>
<ul>
<li>description: Updates properties of an existing game session queue.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "gameSessionQueue": {
        "resource_type": "gameSessionQueue",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatematchmakingconfiguration"><a aria-hidden="true" class="anchor-heading" href="#updatematchmakingconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateMatchmakingConfiguration</h3>
<ul>
<li>description: Updates properties of an existing FlexMatch matchmaking configuration.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "matchmakingConfiguration": {
        "resource_type": "matchmakingConfiguration",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateruntimeconfiguration"><a aria-hidden="true" class="anchor-heading" href="#updateruntimeconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateRuntimeConfiguration</h3>
<ul>
<li>description: Updates how server processes are configured on instances in an existing fleet.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatescript"><a aria-hidden="true" class="anchor-heading" href="#updatescript"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateScript</h3>
<ul>
<li>description: Updates the metadata and content of an existing Realtime Servers script.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "script": {
        "resource_type": "script",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="validatematchmakingruleset"><a aria-hidden="true" class="anchor-heading" href="#validatematchmakingruleset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ValidateMatchmakingRuleSet</h3>
<ul>
<li>description: Validates the syntax of a FlexMatch matchmaking rule set.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-GameLift"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Systems Manager.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Systems Manager - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Systems Manager.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Systems Manager.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Systems Manager.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Systems Manager - undefined" />
  <meta name="twitter:title" content="Systems Manager - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Systems Manager</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Systems Manager">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="systems-manager"><a aria-hidden="true" class="anchor-heading" href="#systems-manager"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Systems Manager</h1>
<ul>
<li>prefix: ssm</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="addtagstoresource"><a aria-hidden="true" class="anchor-heading" href="#addtagstoresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddTagsToResource</h3>
<ul>
<li>description: Grants permission to add or overwrite one or more tags for a specified AWS resource</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "document": {
        "resource_type": "document",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "maintenancewindow": {
        "resource_type": "maintenancewindow",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "managed-instance": {
        "resource_type": "managed-instance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "parameter": {
        "resource_type": "parameter",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "patchbaseline": {
        "resource_type": "patchbaseline",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="cancelcommand"><a aria-hidden="true" class="anchor-heading" href="#cancelcommand"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CancelCommand</h3>
<ul>
<li>description: Grants permission to cancel a specified Run Command command</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="cancelmaintenancewindowexecution"><a aria-hidden="true" class="anchor-heading" href="#cancelmaintenancewindowexecution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CancelMaintenanceWindowExecution</h3>
<ul>
<li>description: Grants permission to cancel an in-progress maintenance window execution</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createactivation"><a aria-hidden="true" class="anchor-heading" href="#createactivation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateActivation</h3>
<ul>
<li>description: Grants permission to create an activation that is used to register on-premises servers and virtual machines (VMs) with Systems Manager</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createassociation"><a aria-hidden="true" class="anchor-heading" href="#createassociation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateAssociation</h3>
<ul>
<li>description: Grants permission to associate a specified Systems Manager document with specified instances or other targets</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "document": {
        "resource_type": "document",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "instance": {
        "resource_type": "instance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "managed-instance": {
        "resource_type": "managed-instance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createassociationbatch"><a aria-hidden="true" class="anchor-heading" href="#createassociationbatch"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateAssociationBatch</h3>
<ul>
<li>description: Grants permission to combine entries for multiple CreateAssociation operations in a single command</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "document": {
        "resource_type": "document",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "instance": {
        "resource_type": "instance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "managed-instance": {
        "resource_type": "managed-instance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdocument"><a aria-hidden="true" class="anchor-heading" href="#createdocument"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDocument</h3>
<ul>
<li>description: Grants permission to create a Systems Manager SSM document</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "document": {
        "resource_type": "document",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createmaintenancewindow"><a aria-hidden="true" class="anchor-heading" href="#createmaintenancewindow"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateMaintenanceWindow</h3>
<ul>
<li>description: Grants permission to create a maintenance window</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createopsitem"><a aria-hidden="true" class="anchor-heading" href="#createopsitem"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateOpsItem</h3>
<ul>
<li>description: Grants permission to create an OpsItem in OpsCenter</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createpatchbaseline"><a aria-hidden="true" class="anchor-heading" href="#createpatchbaseline"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreatePatchBaseline</h3>
<ul>
<li>description: Grants permission to create a patch baseline</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createresourcedatasync"><a aria-hidden="true" class="anchor-heading" href="#createresourcedatasync"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateResourceDataSync</h3>
<ul>
<li>description: Grants permission to create a resource data sync configuration, which regularly collects inventory data from managed instances and updates the data in an Amazon S3 bucket</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "resourcedatasync": {
        "resource_type": "resourcedatasync",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "ssm:SyncType"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteactivation"><a aria-hidden="true" class="anchor-heading" href="#deleteactivation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteActivation</h3>
<ul>
<li>description: Grants permission to delete a specified activation for managed instances</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteassociation"><a aria-hidden="true" class="anchor-heading" href="#deleteassociation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAssociation</h3>
<ul>
<li>description: Grants permission to disassociate a specified SSM document from a specified instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "association": {
        "resource_type": "association",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "document": {
        "resource_type": "document",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "instance": {
        "resource_type": "instance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "managed-instance": {
        "resource_type": "managed-instance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedocument"><a aria-hidden="true" class="anchor-heading" href="#deletedocument"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDocument</h3>
<ul>
<li>description: Grants permission to delete a specified SSM document and its instance associations</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "document": {
        "resource_type": "document",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteinventory"><a aria-hidden="true" class="anchor-heading" href="#deleteinventory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteInventory</h3>
<ul>
<li>description: Grants permission to delete a specified custom inventory type, or the data associated with a custom inventory type</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletemaintenancewindow"><a aria-hidden="true" class="anchor-heading" href="#deletemaintenancewindow"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteMaintenanceWindow</h3>
<ul>
<li>description: Grants permission to delete a specified maintenance window</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "maintenancewindow": {
        "resource_type": "maintenancewindow",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteparameter"><a aria-hidden="true" class="anchor-heading" href="#deleteparameter"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteParameter</h3>
<ul>
<li>description: Grants permission to delete a specified SSM parameter</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "parameter": {
        "resource_type": "parameter",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteparameters"><a aria-hidden="true" class="anchor-heading" href="#deleteparameters"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteParameters</h3>
<ul>
<li>description: Grants permission to delete multiple specified SSM parameters</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "parameter": {
        "resource_type": "parameter",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletepatchbaseline"><a aria-hidden="true" class="anchor-heading" href="#deletepatchbaseline"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeletePatchBaseline</h3>
<ul>
<li>description: Grants permission to delete a specified patch baseline</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "patchbaseline": {
        "resource_type": "patchbaseline",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteresourcedatasync"><a aria-hidden="true" class="anchor-heading" href="#deleteresourcedatasync"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteResourceDataSync</h3>
<ul>
<li>description: Grants permission to delete a specified resource data sync</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "resourcedatasync": {
        "resource_type": "resourcedatasync",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "ssm:SyncType"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deregistermanagedinstance"><a aria-hidden="true" class="anchor-heading" href="#deregistermanagedinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeregisterManagedInstance</h3>
<ul>
<li>description: Grants permission to deregister a specified on-premises server or virtual machine (VM) from Systems Manager</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "managed-instance": {
        "resource_type": "managed-instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deregisterpatchbaselineforpatchgroup"><a aria-hidden="true" class="anchor-heading" href="#deregisterpatchbaselineforpatchgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeregisterPatchBaselineForPatchGroup</h3>
<ul>
<li>description: Grants permission to deregister a specified patch baseline from being the default patch baseline for a specified patch group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "patchbaseline": {
        "resource_type": "patchbaseline",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deregistertargetfrommaintenancewindow"><a aria-hidden="true" class="anchor-heading" href="#deregistertargetfrommaintenancewindow"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeregisterTargetFromMaintenanceWindow</h3>
<ul>
<li>description: Grants permission to deregister a specified target from a maintenance window</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "maintenancewindow": {
        "resource_type": "maintenancewindow",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deregistertaskfrommaintenancewindow"><a aria-hidden="true" class="anchor-heading" href="#deregistertaskfrommaintenancewindow"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeregisterTaskFromMaintenanceWindow</h3>
<ul>
<li>description: Grants permission to deregister a specified task from a maintenance window</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "maintenancewindow": {
        "resource_type": "maintenancewindow",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeactivations"><a aria-hidden="true" class="anchor-heading" href="#describeactivations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeActivations</h3>
<ul>
<li>description: Grants permission to view details about a specified managed instance activation, such as when it was created and the number of instances registered using the activation</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeassociation"><a aria-hidden="true" class="anchor-heading" href="#describeassociation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAssociation</h3>
<ul>
<li>description: Grants permission to view details about the specified association for a specified instance or target</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "association": {
        "resource_type": "association",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "document": {
        "resource_type": "document",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "instance": {
        "resource_type": "instance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "managed-instance": {
        "resource_type": "managed-instance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeassociationexecutiontargets"><a aria-hidden="true" class="anchor-heading" href="#describeassociationexecutiontargets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAssociationExecutionTargets</h3>
<ul>
<li>description: Grants permission to view information about a specified association execution</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeassociationexecutions"><a aria-hidden="true" class="anchor-heading" href="#describeassociationexecutions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAssociationExecutions</h3>
<ul>
<li>description: Grants permission to view all executions for a specified association</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeautomationexecutions"><a aria-hidden="true" class="anchor-heading" href="#describeautomationexecutions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAutomationExecutions</h3>
<ul>
<li>description: Grants permission to view details about all active and terminated Automation executions</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeautomationstepexecutions"><a aria-hidden="true" class="anchor-heading" href="#describeautomationstepexecutions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAutomationStepExecutions</h3>
<ul>
<li>description: Grants permission to view information about all active and terminated step executions in an Automation workflow</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeavailablepatches"><a aria-hidden="true" class="anchor-heading" href="#describeavailablepatches"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAvailablePatches</h3>
<ul>
<li>description: Grants permission to view all patches eligible to include in a patch baseline</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedocument"><a aria-hidden="true" class="anchor-heading" href="#describedocument"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDocument</h3>
<ul>
<li>description: Grants permission to view details about a specified SSM document</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "document": {
        "resource_type": "document",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedocumentparameters"><a aria-hidden="true" class="anchor-heading" href="#describedocumentparameters"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDocumentParameters</h3>
<ul>
<li>description: Grants permission to display information about SSM document parameters in the Systems Manager console (internal Systems Manager action)</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "document": {
        "resource_type": "document",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedocumentpermission"><a aria-hidden="true" class="anchor-heading" href="#describedocumentpermission"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDocumentPermission</h3>
<ul>
<li>description: Grants permission to view the permissions for a specified SSM document</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "document": {
        "resource_type": "document",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeeffectiveinstanceassociations"><a aria-hidden="true" class="anchor-heading" href="#describeeffectiveinstanceassociations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEffectiveInstanceAssociations</h3>
<ul>
<li>description: Grants permission to view all current associations for a specified instance</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "managed-instance": {
        "resource_type": "managed-instance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeeffectivepatchesforpatchbaseline"><a aria-hidden="true" class="anchor-heading" href="#describeeffectivepatchesforpatchbaseline"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEffectivePatchesForPatchBaseline</h3>
<ul>
<li>description: Grants permission to view details about the patches currently associated with the specified patch baseline (Windows only)</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "patchbaseline": {
        "resource_type": "patchbaseline",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeinstanceassociationsstatus"><a aria-hidden="true" class="anchor-heading" href="#describeinstanceassociationsstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeInstanceAssociationsStatus</h3>
<ul>
<li>description: Grants permission to view the status of the associations for a specified instance</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "managed-instance": {
        "resource_type": "managed-instance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeinstanceinformation"><a aria-hidden="true" class="anchor-heading" href="#describeinstanceinformation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeInstanceInformation</h3>
<ul>
<li>description: Grants permission to view details about a specified instance</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeinstancepatchstates"><a aria-hidden="true" class="anchor-heading" href="#describeinstancepatchstates"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeInstancePatchStates</h3>
<ul>
<li>description: Grants permission to view status details about patches on a specified instance</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeinstancepatchstatesforpatchgroup"><a aria-hidden="true" class="anchor-heading" href="#describeinstancepatchstatesforpatchgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeInstancePatchStatesForPatchGroup</h3>
<ul>
<li>description: Grants permission to describe the high-level patch state for the instances in the specified patch group</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeinstancepatches"><a aria-hidden="true" class="anchor-heading" href="#describeinstancepatches"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeInstancePatches</h3>
<ul>
<li>description: Grants permission to view general details about the patches on a specified instance</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeinstanceproperties"><a aria-hidden="true" class="anchor-heading" href="#describeinstanceproperties"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeInstanceProperties</h3>
<ul>
<li>description: Grants permission to user's Amazon EC2 console to render managed instances' nodes</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeinventorydeletions"><a aria-hidden="true" class="anchor-heading" href="#describeinventorydeletions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeInventoryDeletions</h3>
<ul>
<li>description: Grants permission to view details about a specified inventory deletion</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describemaintenancewindowexecutiontaskinvocations"><a aria-hidden="true" class="anchor-heading" href="#describemaintenancewindowexecutiontaskinvocations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeMaintenanceWindowExecutionTaskInvocations</h3>
<ul>
<li>description: Grants permission to view details of a specified task execution for a maintenance window</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describemaintenancewindowexecutiontasks"><a aria-hidden="true" class="anchor-heading" href="#describemaintenancewindowexecutiontasks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeMaintenanceWindowExecutionTasks</h3>
<ul>
<li>description: Grants permission to view details about the tasks that ran during a specified maintenance window execution</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describemaintenancewindowexecutions"><a aria-hidden="true" class="anchor-heading" href="#describemaintenancewindowexecutions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeMaintenanceWindowExecutions</h3>
<ul>
<li>description: Grants permission to view the executions of a specified maintenance window</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "maintenancewindow": {
        "resource_type": "maintenancewindow",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describemaintenancewindowschedule"><a aria-hidden="true" class="anchor-heading" href="#describemaintenancewindowschedule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeMaintenanceWindowSchedule</h3>
<ul>
<li>description: Grants permission to view details about upcoming executions of a specified maintenance window</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describemaintenancewindowtargets"><a aria-hidden="true" class="anchor-heading" href="#describemaintenancewindowtargets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeMaintenanceWindowTargets</h3>
<ul>
<li>description: Grants permission to view a list of the targets associated with a specified maintenance window</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "maintenancewindow": {
        "resource_type": "maintenancewindow",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describemaintenancewindowtasks"><a aria-hidden="true" class="anchor-heading" href="#describemaintenancewindowtasks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeMaintenanceWindowTasks</h3>
<ul>
<li>description: Grants permission to view a list of the tasks associated with a specified maintenance window</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "maintenancewindow": {
        "resource_type": "maintenancewindow",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describemaintenancewindows"><a aria-hidden="true" class="anchor-heading" href="#describemaintenancewindows"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeMaintenanceWindows</h3>
<ul>
<li>description: Grants permission to view information about all or specified maintenance windows</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describemaintenancewindowsfortarget"><a aria-hidden="true" class="anchor-heading" href="#describemaintenancewindowsfortarget"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeMaintenanceWindowsForTarget</h3>
<ul>
<li>description: Grants permission to view information about the maintenance window targets and tasks associated with a specified instance</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeopsitems"><a aria-hidden="true" class="anchor-heading" href="#describeopsitems"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeOpsItems</h3>
<ul>
<li>description: Grants permission to view details about specified OpsItems</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeparameters"><a aria-hidden="true" class="anchor-heading" href="#describeparameters"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeParameters</h3>
<ul>
<li>description: Grants permission to view details about a specified SSM parameter</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describepatchbaselines"><a aria-hidden="true" class="anchor-heading" href="#describepatchbaselines"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribePatchBaselines</h3>
<ul>
<li>description: Grants permission to view information about patch baselines that meet the specified criteria</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describepatchgroupstate"><a aria-hidden="true" class="anchor-heading" href="#describepatchgroupstate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribePatchGroupState</h3>
<ul>
<li>description: Grants permission to view aggregated status details for patches for a specified patch group</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describepatchgroups"><a aria-hidden="true" class="anchor-heading" href="#describepatchgroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribePatchGroups</h3>
<ul>
<li>description: Grants permission to view information about the patch baseline for a specified patch group</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describepatchproperties"><a aria-hidden="true" class="anchor-heading" href="#describepatchproperties"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribePatchProperties</h3>
<ul>
<li>description: Grants permission to view details of available patches for a specified operating system and patch property</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describesessions"><a aria-hidden="true" class="anchor-heading" href="#describesessions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSessions</h3>
<ul>
<li>description: Grants permission to view a list of recent Session Manager sessions that meet the specified search criteria</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getautomationexecution"><a aria-hidden="true" class="anchor-heading" href="#getautomationexecution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAutomationExecution</h3>
<ul>
<li>description: Grants permission to view details of a specified Automation execution</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcalendarstate"><a aria-hidden="true" class="anchor-heading" href="#getcalendarstate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCalendarState</h3>
<ul>
<li>description: Grants permission to view the calendar state for a change calendar or a list of change calendars</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "document": {
        "resource_type": "document",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcommandinvocation"><a aria-hidden="true" class="anchor-heading" href="#getcommandinvocation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCommandInvocation</h3>
<ul>
<li>description: Grants permission to view details about the command execution of a specified invocation or plugin</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getconnectionstatus"><a aria-hidden="true" class="anchor-heading" href="#getconnectionstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetConnectionStatus</h3>
<ul>
<li>description: Grants permission to view the Session Manager connection status for a specified managed instance</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdefaultpatchbaseline"><a aria-hidden="true" class="anchor-heading" href="#getdefaultpatchbaseline"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDefaultPatchBaseline</h3>
<ul>
<li>description: Grants permission to view the current default patch baseline for a specified operating system type</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "patchbaseline": {
        "resource_type": "patchbaseline",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdeployablepatchsnapshotforinstance"><a aria-hidden="true" class="anchor-heading" href="#getdeployablepatchsnapshotforinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDeployablePatchSnapshotForInstance</h3>
<ul>
<li>description: Grants permission to retrieve the current patch baseline snapshot for a specified instance</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdocument"><a aria-hidden="true" class="anchor-heading" href="#getdocument"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDocument</h3>
<ul>
<li>description: Grants permission to view the contents of a specified SSM document</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "document": {
        "resource_type": "document",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getinventory"><a aria-hidden="true" class="anchor-heading" href="#getinventory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetInventory</h3>
<ul>
<li>description: Grants permission to view instance inventory details per the specified criteria</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getinventoryschema"><a aria-hidden="true" class="anchor-heading" href="#getinventoryschema"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetInventorySchema</h3>
<ul>
<li>description: Grants permission to view a list of inventory types or attribute names for a specified inventory item type</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmaintenancewindow"><a aria-hidden="true" class="anchor-heading" href="#getmaintenancewindow"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetMaintenanceWindow</h3>
<ul>
<li>description: Grants permission to view details about a specified maintenance window</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "maintenancewindow": {
        "resource_type": "maintenancewindow",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmaintenancewindowexecution"><a aria-hidden="true" class="anchor-heading" href="#getmaintenancewindowexecution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetMaintenanceWindowExecution</h3>
<ul>
<li>description: Grants permission to view details about a specified maintenance window execution</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmaintenancewindowexecutiontask"><a aria-hidden="true" class="anchor-heading" href="#getmaintenancewindowexecutiontask"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetMaintenanceWindowExecutionTask</h3>
<ul>
<li>description: Grants permission to view details about a specified maintenance window execution task</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmaintenancewindowexecutiontaskinvocation"><a aria-hidden="true" class="anchor-heading" href="#getmaintenancewindowexecutiontaskinvocation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetMaintenanceWindowExecutionTaskInvocation</h3>
<ul>
<li>description: Grants permission to view details about a specific maintenance window task running on a specific target</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmaintenancewindowtask"><a aria-hidden="true" class="anchor-heading" href="#getmaintenancewindowtask"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetMaintenanceWindowTask</h3>
<ul>
<li>description: Grants permission to view details about tasks registered with a specified maintenance window</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "maintenancewindow": {
        "resource_type": "maintenancewindow",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmanifest"><a aria-hidden="true" class="anchor-heading" href="#getmanifest"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetManifest</h3>
<ul>
<li>description: Used by Systems Manager and SSM Agent to determine package installation requirements for an instance (internal Systems Manager call)</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getopsitem"><a aria-hidden="true" class="anchor-heading" href="#getopsitem"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetOpsItem</h3>
<ul>
<li>description: Grants permission to view information about a specified OpsItem</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getopssummary"><a aria-hidden="true" class="anchor-heading" href="#getopssummary"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetOpsSummary</h3>
<ul>
<li>description: Grants permission to view summary information about OpsItems based on specified filters and aggregators</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "resourcedatasync": {
        "resource_type": "resourcedatasync",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getparameter"><a aria-hidden="true" class="anchor-heading" href="#getparameter"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetParameter</h3>
<ul>
<li>description: Grants permission to view information about a specified parameter</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "parameter": {
        "resource_type": "parameter",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getparameterhistory"><a aria-hidden="true" class="anchor-heading" href="#getparameterhistory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetParameterHistory</h3>
<ul>
<li>description: Grants permission to view details and changes for a specified parameter</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "parameter": {
        "resource_type": "parameter",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getparameters"><a aria-hidden="true" class="anchor-heading" href="#getparameters"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetParameters</h3>
<ul>
<li>description: Grants permission to view information about multiple specified parameters</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "parameter": {
        "resource_type": "parameter",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getparametersbypath"><a aria-hidden="true" class="anchor-heading" href="#getparametersbypath"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetParametersByPath</h3>
<ul>
<li>description: Grants permission to view information about parameters in a specified hierarchy</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "parameter": {
        "resource_type": "parameter",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getpatchbaseline"><a aria-hidden="true" class="anchor-heading" href="#getpatchbaseline"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetPatchBaseline</h3>
<ul>
<li>description: Grants permission to view information about a specified patch baseline</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "patchbaseline": {
        "resource_type": "patchbaseline",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getpatchbaselineforpatchgroup"><a aria-hidden="true" class="anchor-heading" href="#getpatchbaselineforpatchgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetPatchBaselineForPatchGroup</h3>
<ul>
<li>description: Grants permission to view the ID of the current patch baseline for a specified patch group</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "patchbaseline": {
        "resource_type": "patchbaseline",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getservicesetting"><a aria-hidden="true" class="anchor-heading" href="#getservicesetting"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetServiceSetting</h3>
<ul>
<li>description: Grants permission to view the account-level setting for an AWS service</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "servicesetting": {
        "resource_type": "servicesetting",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="labelparameterversion"><a aria-hidden="true" class="anchor-heading" href="#labelparameterversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>LabelParameterVersion</h3>
<ul>
<li>description: Grants permission to apply an identifying label to a specified version of a parameter</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "parameter": {
        "resource_type": "parameter",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listassociationversions"><a aria-hidden="true" class="anchor-heading" href="#listassociationversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAssociationVersions</h3>
<ul>
<li>description: Grants permission to list versions of the specified association</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listassociations"><a aria-hidden="true" class="anchor-heading" href="#listassociations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAssociations</h3>
<ul>
<li>description: Grants permission to list the associations for a specified SSM document or managed instance</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listcommandinvocations"><a aria-hidden="true" class="anchor-heading" href="#listcommandinvocations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListCommandInvocations</h3>
<ul>
<li>description: Grants permission to list information about command invocations sent to a specified instance</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listcommands"><a aria-hidden="true" class="anchor-heading" href="#listcommands"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListCommands</h3>
<ul>
<li>description: Grants permission to list the commands sent to a specified instance</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listcomplianceitems"><a aria-hidden="true" class="anchor-heading" href="#listcomplianceitems"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListComplianceItems</h3>
<ul>
<li>description: Grants permission to list compliance status for specified resource types on a specified resource</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listcompliancesummaries"><a aria-hidden="true" class="anchor-heading" href="#listcompliancesummaries"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListComplianceSummaries</h3>
<ul>
<li>description: Grants permission to list a summary count of compliant and noncompliant resources for a specified compliance type</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdocumentversions"><a aria-hidden="true" class="anchor-heading" href="#listdocumentversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDocumentVersions</h3>
<ul>
<li>description: Grants permission to list all versions of a specified document</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "document": {
        "resource_type": "document",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdocuments"><a aria-hidden="true" class="anchor-heading" href="#listdocuments"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDocuments</h3>
<ul>
<li>description: Grants permission to view information about a specified SSM document</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listinstanceassociations"><a aria-hidden="true" class="anchor-heading" href="#listinstanceassociations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListInstanceAssociations</h3>
<ul>
<li>description: Used by SSM Agent to check for new State Manager associations (internal Systems Manager call)</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "managed-instance": {
        "resource_type": "managed-instance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listinventoryentries"><a aria-hidden="true" class="anchor-heading" href="#listinventoryentries"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListInventoryEntries</h3>
<ul>
<li>description: Grants permission to view a list of specified inventory types for a specified instance</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listresourcecompliancesummaries"><a aria-hidden="true" class="anchor-heading" href="#listresourcecompliancesummaries"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListResourceComplianceSummaries</h3>
<ul>
<li>description: Grants permission to list resource-level summary count</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listresourcedatasync"><a aria-hidden="true" class="anchor-heading" href="#listresourcedatasync"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListResourceDataSync</h3>
<ul>
<li>description: Grants permission to list information about resource data sync configurations in an account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "ssm:SyncType"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Grants permission to view a list of resource tags for a specified resource</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "document": {
        "resource_type": "document",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "maintenancewindow": {
        "resource_type": "maintenancewindow",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "managed-instance": {
        "resource_type": "managed-instance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "parameter": {
        "resource_type": "parameter",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "patchbaseline": {
        "resource_type": "patchbaseline",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifydocumentpermission"><a aria-hidden="true" class="anchor-heading" href="#modifydocumentpermission"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyDocumentPermission</h3>
<ul>
<li>description: Grants permission to share a custom SSM document publicly or privately with specified AWS accounts</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "document": {
        "resource_type": "document",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putcomplianceitems"><a aria-hidden="true" class="anchor-heading" href="#putcomplianceitems"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutComplianceItems</h3>
<ul>
<li>description: Grants permission to register a compliance type and other compliance details on a specified resource</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "managed-instance": {
        "resource_type": "managed-instance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putconfigurepackageresult"><a aria-hidden="true" class="anchor-heading" href="#putconfigurepackageresult"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutConfigurePackageResult</h3>
<ul>
<li>description: Used by SSM Agent to generate a report of the results of specific agent requests (internal Systems Manager call)</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putinventory"><a aria-hidden="true" class="anchor-heading" href="#putinventory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutInventory</h3>
<ul>
<li>description: Grants permission to add or update inventory items on multiple specified managed instances</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putparameter"><a aria-hidden="true" class="anchor-heading" href="#putparameter"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutParameter</h3>
<ul>
<li>description: Grants permission to create an SSM parameter</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "parameter": {
        "resource_type": "parameter",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registerdefaultpatchbaseline"><a aria-hidden="true" class="anchor-heading" href="#registerdefaultpatchbaseline"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterDefaultPatchBaseline</h3>
<ul>
<li>description: Grants permission to specify the default patch baseline for an operating system type</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "patchbaseline": {
        "resource_type": "patchbaseline",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registerpatchbaselineforpatchgroup"><a aria-hidden="true" class="anchor-heading" href="#registerpatchbaselineforpatchgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterPatchBaselineForPatchGroup</h3>
<ul>
<li>description: Grants permission to specify the default patch baseline for a specified patch group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "patchbaseline": {
        "resource_type": "patchbaseline",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registertargetwithmaintenancewindow"><a aria-hidden="true" class="anchor-heading" href="#registertargetwithmaintenancewindow"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterTargetWithMaintenanceWindow</h3>
<ul>
<li>description: Grants permission to register a target with a specified maintenance window</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "maintenancewindow": {
        "resource_type": "maintenancewindow",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registertaskwithmaintenancewindow"><a aria-hidden="true" class="anchor-heading" href="#registertaskwithmaintenancewindow"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterTaskWithMaintenanceWindow</h3>
<ul>
<li>description: Grants permission to register a task with a specified maintenance window</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "maintenancewindow": {
        "resource_type": "maintenancewindow",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="removetagsfromresource"><a aria-hidden="true" class="anchor-heading" href="#removetagsfromresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemoveTagsFromResource</h3>
<ul>
<li>description: Grants permission to remove a specified tag key from a specified resource</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "document": {
        "resource_type": "document",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "maintenancewindow": {
        "resource_type": "maintenancewindow",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "managed-instance": {
        "resource_type": "managed-instance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "parameter": {
        "resource_type": "parameter",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "patchbaseline": {
        "resource_type": "patchbaseline",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="resetservicesetting"><a aria-hidden="true" class="anchor-heading" href="#resetservicesetting"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ResetServiceSetting</h3>
<ul>
<li>description: Grants permission to reset the service setting for an AWS account to the default value</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "servicesetting": {
        "resource_type": "servicesetting",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="resumesession"><a aria-hidden="true" class="anchor-heading" href="#resumesession"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ResumeSession</h3>
<ul>
<li>description: Grants permission to reconnect a Session Manager session to a managed instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "session": {
        "resource_type": "session",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="sendautomationsignal"><a aria-hidden="true" class="anchor-heading" href="#sendautomationsignal"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SendAutomationSignal</h3>
<ul>
<li>description: Grants permission to send a signal to change the current behavior or status of a specified Automation execution</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="sendcommand"><a aria-hidden="true" class="anchor-heading" href="#sendcommand"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SendCommand</h3>
<ul>
<li>description: Grants permission to run commands on one or more specified managed instances</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "document": {
        "resource_type": "document",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "instance": {
        "resource_type": "instance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "managed-instance": {
        "resource_type": "managed-instance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ssm:resourceTag/tag-key"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startassociationsonce"><a aria-hidden="true" class="anchor-heading" href="#startassociationsonce"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartAssociationsOnce</h3>
<ul>
<li>description: Grants permission to run a specified association manually</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "association": {
        "resource_type": "association",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startautomationexecution"><a aria-hidden="true" class="anchor-heading" href="#startautomationexecution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartAutomationExecution</h3>
<ul>
<li>description: Grants permission to initiate the execution of an Automation document</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "automation-definition": {
        "resource_type": "automation-definition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startsession"><a aria-hidden="true" class="anchor-heading" href="#startsession"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartSession</h3>
<ul>
<li>description: Grants permission to initiate a connection to a specified target for a Session Manager session</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "document": {
        "resource_type": "document",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "ssm:SessionDocumentAccessCheck"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopautomationexecution"><a aria-hidden="true" class="anchor-heading" href="#stopautomationexecution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopAutomationExecution</h3>
<ul>
<li>description: Grants permission to stop a specified Automation execution that is already in progress</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="terminatesession"><a aria-hidden="true" class="anchor-heading" href="#terminatesession"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TerminateSession</h3>
<ul>
<li>description: Grants permission to permanently end a Session Manager connection to an instance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "session": {
        "resource_type": "session",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateassociation"><a aria-hidden="true" class="anchor-heading" href="#updateassociation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateAssociation</h3>
<ul>
<li>description: Grants permission to update an association and immediately run the association on the specified targets</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "association": {
        "resource_type": "association",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "document": {
        "resource_type": "document",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "instance": {
        "resource_type": "instance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "managed-instance": {
        "resource_type": "managed-instance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateassociationstatus"><a aria-hidden="true" class="anchor-heading" href="#updateassociationstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateAssociationStatus</h3>
<ul>
<li>description: Grants permission to update the status of the SSM document associated with a specified instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "document": {
        "resource_type": "document",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "instance": {
        "resource_type": "instance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "managed-instance": {
        "resource_type": "managed-instance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatedocument"><a aria-hidden="true" class="anchor-heading" href="#updatedocument"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateDocument</h3>
<ul>
<li>description: Grants permission to update one or more values for an SSM document</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "document": {
        "resource_type": "document",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatedocumentdefaultversion"><a aria-hidden="true" class="anchor-heading" href="#updatedocumentdefaultversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateDocumentDefaultVersion</h3>
<ul>
<li>description: Grants permission to change the default version of an SSM document</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "document": {
        "resource_type": "document",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateinstanceassociationstatus"><a aria-hidden="true" class="anchor-heading" href="#updateinstanceassociationstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateInstanceAssociationStatus</h3>
<ul>
<li>description: Used by SSM Agent to update the status of the association that it is currently running (internal Systems Manager call)</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "association": {
        "resource_type": "association",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "instance": {
        "resource_type": "instance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "managed-instance": {
        "resource_type": "managed-instance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateinstanceinformation"><a aria-hidden="true" class="anchor-heading" href="#updateinstanceinformation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateInstanceInformation</h3>
<ul>
<li>description: Used by SSM Agent to send a heartbeat signal to the Systems Manager service in the cloud</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatemaintenancewindow"><a aria-hidden="true" class="anchor-heading" href="#updatemaintenancewindow"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateMaintenanceWindow</h3>
<ul>
<li>description: Grants permission to update a specified maintenance window</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "maintenancewindow": {
        "resource_type": "maintenancewindow",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatemaintenancewindowtarget"><a aria-hidden="true" class="anchor-heading" href="#updatemaintenancewindowtarget"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateMaintenanceWindowTarget</h3>
<ul>
<li>description: Grants permission to update a specified maintenance window target</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "maintenancewindow": {
        "resource_type": "maintenancewindow",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatemaintenancewindowtask"><a aria-hidden="true" class="anchor-heading" href="#updatemaintenancewindowtask"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateMaintenanceWindowTask</h3>
<ul>
<li>description: Grants permission to update a specified maintenance window task</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "maintenancewindow": {
        "resource_type": "maintenancewindow",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatemanagedinstancerole"><a aria-hidden="true" class="anchor-heading" href="#updatemanagedinstancerole"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateManagedInstanceRole</h3>
<ul>
<li>description: Grants permission to assign or change the IAM role assigned to a specified managed instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "managed-instance": {
        "resource_type": "managed-instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateopsitem"><a aria-hidden="true" class="anchor-heading" href="#updateopsitem"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateOpsItem</h3>
<ul>
<li>description: Grants permission to edit or change an OpsItem</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatepatchbaseline"><a aria-hidden="true" class="anchor-heading" href="#updatepatchbaseline"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdatePatchBaseline</h3>
<ul>
<li>description: Grants permission to update a specified patch baseline</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "patchbaseline": {
        "resource_type": "patchbaseline",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateresourcedatasync"><a aria-hidden="true" class="anchor-heading" href="#updateresourcedatasync"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateResourceDataSync</h3>
<ul>
<li>description: Grants permission to update a resource data sync</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "resourcedatasync": {
        "resource_type": "resourcedatasync",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "ssm:SyncType"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateservicesetting"><a aria-hidden="true" class="anchor-heading" href="#updateservicesetting"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateServiceSetting</h3>
<ul>
<li>description: Grants permission to update the service setting for an AWS account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "servicesetting": {
        "resource_type": "servicesetting",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Systems Manager"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-CodeStar Connections.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>CodeStar Connections - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-CodeStar Connections.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-CodeStar Connections.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-CodeStar Connections.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="CodeStar Connections - undefined" />
  <meta name="twitter:title" content="CodeStar Connections - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">CodeStar Connections</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="CodeStar Connections">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="codestar-connections"><a aria-hidden="true" class="anchor-heading" href="#codestar-connections"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CodeStar Connections</h1>
<ul>
<li>prefix: codestar-connections</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="createconnection"><a aria-hidden="true" class="anchor-heading" href="#createconnection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateConnection</h3>
<ul>
<li>description: Grants permission to create a Connection resource</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "codestar-connections:ProviderType"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createhost"><a aria-hidden="true" class="anchor-heading" href="#createhost"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateHost</h3>
<ul>
<li>description: Grants permission to create a host resource</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "codestar-connections:ProviderType"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteconnection"><a aria-hidden="true" class="anchor-heading" href="#deleteconnection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteConnection</h3>
<ul>
<li>description: Grants permission to delete a Connection resource</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Connection": {
        "resource_type": "Connection",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletehost"><a aria-hidden="true" class="anchor-heading" href="#deletehost"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteHost</h3>
<ul>
<li>description: Grants permission to delete a host resource</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Host": {
        "resource_type": "Host",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getconnection"><a aria-hidden="true" class="anchor-heading" href="#getconnection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetConnection</h3>
<ul>
<li>description: Grants permission to get details about a Connection resource</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Connection": {
        "resource_type": "Connection",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gethost"><a aria-hidden="true" class="anchor-heading" href="#gethost"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetHost</h3>
<ul>
<li>description: Grants permission to get details about a host resource</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Host": {
        "resource_type": "Host",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getindividualaccesstoken"><a aria-hidden="true" class="anchor-heading" href="#getindividualaccesstoken"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetIndividualAccessToken</h3>
<ul>
<li>description: Grants permission to associate a third party, such as a Bitbucket App installation, with a Connection</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "codestar-connections:ProviderType"
        ],
        "dependent_actions": [
            "codestar-connections:StartOAuthHandshake"
        ]
    }
}
</code></pre>
<h3 id="getinstallationurl"><a aria-hidden="true" class="anchor-heading" href="#getinstallationurl"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetInstallationUrl</h3>
<ul>
<li>description: Grants permission to associate a third party, such as a Bitbucket App installation, with a Connection</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "codestar-connections:ProviderType"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listconnections"><a aria-hidden="true" class="anchor-heading" href="#listconnections"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListConnections</h3>
<ul>
<li>description: Grants permission to list Connection resources</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "codestar-connections:ProviderTypeFilter"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listhosts"><a aria-hidden="true" class="anchor-heading" href="#listhosts"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListHosts</h3>
<ul>
<li>description: Grants permission to list host resources</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "codestar-connections:ProviderTypeFilter"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listinstallationtargets"><a aria-hidden="true" class="anchor-heading" href="#listinstallationtargets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListInstallationTargets</h3>
<ul>
<li>description: Grants permission to associate a third party, such as a Bitbucket App installation, with a Connection</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": [
            "codestar-connections:GetIndividualAccessToken",
            "codestar-connections:StartOAuthHandshake"
        ]
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Gets the set of key-value pairs that are used to manage the resource</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Connection": {
        "resource_type": "Connection",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="passconnection"><a aria-hidden="true" class="anchor-heading" href="#passconnection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PassConnection</h3>
<ul>
<li>description: Grants permission to pass a Connection resource to an AWS service that accepts a Connection ARN as input, such as codepipeline:CreatePipeline</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Connection": {
        "resource_type": "Connection",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "codestar-connections:PassedToService"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registerappcode"><a aria-hidden="true" class="anchor-heading" href="#registerappcode"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterAppCode</h3>
<ul>
<li>description: Grants permission to associate a third party server, such as a GitHub Enterprise Server instance, with a Host</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "codestar-connections:HostArn"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startappregistrationhandshake"><a aria-hidden="true" class="anchor-heading" href="#startappregistrationhandshake"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartAppRegistrationHandshake</h3>
<ul>
<li>description: Grants permission to associate a third party server, such as a GitHub Enterprise Server instance, with a Host</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "codestar-connections:HostArn"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startoauthhandshake"><a aria-hidden="true" class="anchor-heading" href="#startoauthhandshake"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartOAuthHandshake</h3>
<ul>
<li>description: Grants permission to associate a third party, such as a Bitbucket App installation, with a Connection</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "codestar-connections:ProviderType"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Adds to or modifies the tags of the given resource</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Connection": {
        "resource_type": "Connection",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys",
            "aws:RequestTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Removes tags from an AWS resource</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Connection": {
        "resource_type": "Connection",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateconnectioninstallation"><a aria-hidden="true" class="anchor-heading" href="#updateconnectioninstallation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateConnectionInstallation</h3>
<ul>
<li>description: Grants permission to update a Connection resource with an installation of the CodeStar Connections App</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Connection": {
        "resource_type": "Connection",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "codestar-connections:GetIndividualAccessToken",
            "codestar-connections:GetInstallationUrl",
            "codestar-connections:ListInstallationTargets",
            "codestar-connections:StartOAuthHandshake"
        ]
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "codestar-connections:InstallationId"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="useconnection"><a aria-hidden="true" class="anchor-heading" href="#useconnection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UseConnection</h3>
<ul>
<li>description: Grants permission to use a Connection resource to call provider actions</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Connection": {
        "resource_type": "Connection",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "codestar-connections:FullRepositoryId",
            "codestar-connections:ProviderAction",
            "codestar-connections:ProviderPermissionsRequired"
        ],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-CodeStar Connections"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-EC2.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>EC2 - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-EC2.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-EC2.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-EC2.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="EC2 - undefined" />
  <meta name="twitter:title" content="EC2 - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">EC2</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="EC2">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="ec2"><a aria-hidden="true" class="anchor-heading" href="#ec2"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EC2</h1>
<ul>
<li>prefix: ec2</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="acceptreservedinstancesexchangequote"><a aria-hidden="true" class="anchor-heading" href="#acceptreservedinstancesexchangequote"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AcceptReservedInstancesExchangeQuote</h3>
<ul>
<li>description: Grants permission to accept a Convertible Reserved Instance exchange quote</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="accepttransitgatewaypeeringattachment"><a aria-hidden="true" class="anchor-heading" href="#accepttransitgatewaypeeringattachment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AcceptTransitGatewayPeeringAttachment</h3>
<ul>
<li>description: Grants permission to accept a transit gateway peering attachment request</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "transit-gateway-attachment": {
        "resource_type": "transit-gateway-attachment",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="accepttransitgatewayvpcattachment"><a aria-hidden="true" class="anchor-heading" href="#accepttransitgatewayvpcattachment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AcceptTransitGatewayVpcAttachment</h3>
<ul>
<li>description: Grants permission to accept a request to attach a VPC to a transit gateway</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "transit-gateway-attachment": {
        "resource_type": "transit-gateway-attachment",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="acceptvpcendpointconnections"><a aria-hidden="true" class="anchor-heading" href="#acceptvpcendpointconnections"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AcceptVpcEndpointConnections</h3>
<ul>
<li>description: Grants permission to accept one or more interface VPC endpoint connections to your VPC endpoint service</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vpc-endpoint-service": {
        "resource_type": "vpc-endpoint-service",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="acceptvpcpeeringconnection"><a aria-hidden="true" class="anchor-heading" href="#acceptvpcpeeringconnection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AcceptVpcPeeringConnection</h3>
<ul>
<li>description: Grants permission to accept a VPC peering connection request</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vpc": {
        "resource_type": "vpc",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:Tenancy"
        ],
        "dependent_actions": []
    },
    "vpc-peering-connection": {
        "resource_type": "vpc-peering-connection",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:AccepterVpc",
            "ec2:Region",
            "ec2:RequesterVpc",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="advertisebyoipcidr"><a aria-hidden="true" class="anchor-heading" href="#advertisebyoipcidr"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AdvertiseByoipCidr</h3>
<ul>
<li>description: Grants permission to advertise an IP address range that is provisioned for use in AWS through bring your own IP addresses (BYOIP)</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="allocateaddress"><a aria-hidden="true" class="anchor-heading" href="#allocateaddress"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AllocateAddress</h3>
<ul>
<li>description: Grants permission to allocate an Elastic IP address (EIP) to your account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="allocatehosts"><a aria-hidden="true" class="anchor-heading" href="#allocatehosts"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AllocateHosts</h3>
<ul>
<li>description: Grants permission to allocate a Dedicated Host to your account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dedicated-host": {
        "resource_type": "dedicated-host",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="applysecuritygroupstoclientvpntargetnetwork"><a aria-hidden="true" class="anchor-heading" href="#applysecuritygroupstoclientvpntargetnetwork"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ApplySecurityGroupsToClientVpnTargetNetwork</h3>
<ul>
<li>description: Grants permission to apply a security group to the association between a Client VPN endpoint and a target network</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "client-vpn-endpoint": {
        "resource_type": "client-vpn-endpoint",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "security-group": {
        "resource_type": "security-group",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "vpc": {
        "resource_type": "vpc",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="assignipv6addresses"><a aria-hidden="true" class="anchor-heading" href="#assignipv6addresses"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssignIpv6Addresses</h3>
<ul>
<li>description: Grants permission to assign one or more IPv6 addresses to a network interface</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="assignprivateipaddresses"><a aria-hidden="true" class="anchor-heading" href="#assignprivateipaddresses"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssignPrivateIpAddresses</h3>
<ul>
<li>description: Grants permission to assign one or more secondary private IP addresses to a network interface</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="associateaddress"><a aria-hidden="true" class="anchor-heading" href="#associateaddress"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateAddress</h3>
<ul>
<li>description: Grants permission to associate an Elastic IP address (EIP) with an instance or a network interface</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="associateclientvpntargetnetwork"><a aria-hidden="true" class="anchor-heading" href="#associateclientvpntargetnetwork"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateClientVpnTargetNetwork</h3>
<ul>
<li>description: Grants permission to associate a target network with a Client VPN endpoint</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "client-vpn-endpoint": {
        "resource_type": "client-vpn-endpoint",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "subnet": {
        "resource_type": "subnet",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="associatedhcpoptions"><a aria-hidden="true" class="anchor-heading" href="#associatedhcpoptions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateDhcpOptions</h3>
<ul>
<li>description: Grants permission to associate or disassociate a set of DHCP options with a VPC</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="associateiaminstanceprofile"><a aria-hidden="true" class="anchor-heading" href="#associateiaminstanceprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateIamInstanceProfile</h3>
<ul>
<li>description: Grants permission to associate an IAM instance profile with a running or stopped instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:AvailabilityZone",
            "ec2:EbsOptimized",
            "ec2:InstanceProfile",
            "ec2:InstanceType",
            "ec2:PlacementGroup",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:RootDeviceType",
            "ec2:Tenancy"
        ],
        "dependent_actions": [
            "iam:PassRole"
        ]
    }
}
</code></pre>
<h3 id="associateroutetable"><a aria-hidden="true" class="anchor-heading" href="#associateroutetable"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateRouteTable</h3>
<ul>
<li>description: Grants permission to associate a subnet or gateway with a route table</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="associatesubnetcidrblock"><a aria-hidden="true" class="anchor-heading" href="#associatesubnetcidrblock"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateSubnetCidrBlock</h3>
<ul>
<li>description: Grants permission to associate a CIDR block with a subnet</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="associatetransitgatewaymulticastdomain"><a aria-hidden="true" class="anchor-heading" href="#associatetransitgatewaymulticastdomain"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateTransitGatewayMulticastDomain</h3>
<ul>
<li>description: Grants permission to associate an attachment and list of subnets with a transit gateway multicast domain</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "subnet": {
        "resource_type": "subnet",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "transit-gateway-attachment": {
        "resource_type": "transit-gateway-attachment",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "transit-gateway-multicast-domain": {
        "resource_type": "transit-gateway-multicast-domain",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="associatetransitgatewayroutetable"><a aria-hidden="true" class="anchor-heading" href="#associatetransitgatewayroutetable"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateTransitGatewayRouteTable</h3>
<ul>
<li>description: Grants permission to associate an attachment with a transit gateway route table</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "transit-gateway-attachment": {
        "resource_type": "transit-gateway-attachment",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "transit-gateway-route-table": {
        "resource_type": "transit-gateway-route-table",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="associatevpccidrblock"><a aria-hidden="true" class="anchor-heading" href="#associatevpccidrblock"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateVpcCidrBlock</h3>
<ul>
<li>description: Grants permission to associate a CIDR block with a VPC</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="attachclassiclinkvpc"><a aria-hidden="true" class="anchor-heading" href="#attachclassiclinkvpc"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AttachClassicLinkVpc</h3>
<ul>
<li>description: Grants permission to link an EC2-Classic instance to a ClassicLink-enabled VPC through one or more of the VPC's security groups</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:AvailabilityZone",
            "ec2:EbsOptimized",
            "ec2:InstanceProfile",
            "ec2:InstanceType",
            "ec2:PlacementGroup",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:RootDeviceType",
            "ec2:Tenancy"
        ],
        "dependent_actions": []
    },
    "security-group": {
        "resource_type": "security-group",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:Vpc"
        ],
        "dependent_actions": []
    },
    "vpc": {
        "resource_type": "vpc",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:Tenancy"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="attachinternetgateway"><a aria-hidden="true" class="anchor-heading" href="#attachinternetgateway"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AttachInternetGateway</h3>
<ul>
<li>description: Grants permission to attach an internet gateway to a VPC</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="attachnetworkinterface"><a aria-hidden="true" class="anchor-heading" href="#attachnetworkinterface"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AttachNetworkInterface</h3>
<ul>
<li>description: Grants permission to attach a network interface to an instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="attachvolume"><a aria-hidden="true" class="anchor-heading" href="#attachvolume"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AttachVolume</h3>
<ul>
<li>description: Grants permission to attach an EBS volume to a running or stopped instance and expose it to the instance with the specified device name</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:AvailabilityZone",
            "ec2:EbsOptimized",
            "ec2:InstanceProfile",
            "ec2:InstanceType",
            "ec2:PlacementGroup",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:RootDeviceType",
            "ec2:Tenancy"
        ],
        "dependent_actions": []
    },
    "volume": {
        "resource_type": "volume",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:AvailabilityZone",
            "ec2:Encrypted",
            "ec2:ParentSnapshot",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:VolumeIops",
            "ec2:VolumeSize",
            "ec2:VolumeType"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="attachvpngateway"><a aria-hidden="true" class="anchor-heading" href="#attachvpngateway"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AttachVpnGateway</h3>
<ul>
<li>description: Grants permission to attach a virtual private gateway to a VPC</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="authorizeclientvpningress"><a aria-hidden="true" class="anchor-heading" href="#authorizeclientvpningress"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AuthorizeClientVpnIngress</h3>
<ul>
<li>description: Grants permission to add an inbound authorization rule to a Client VPN endpoint</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "client-vpn-endpoint": {
        "resource_type": "client-vpn-endpoint",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="authorizesecuritygroupegress"><a aria-hidden="true" class="anchor-heading" href="#authorizesecuritygroupegress"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AuthorizeSecurityGroupEgress</h3>
<ul>
<li>description: Grants permission to add one or more outbound rules to a VPC security group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "security-group": {
        "resource_type": "security-group",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:Vpc"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="authorizesecuritygroupingress"><a aria-hidden="true" class="anchor-heading" href="#authorizesecuritygroupingress"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AuthorizeSecurityGroupIngress</h3>
<ul>
<li>description: Grants permission to add one or more inbound rules to a security group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "security-group": {
        "resource_type": "security-group",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:Vpc"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="bundleinstance"><a aria-hidden="true" class="anchor-heading" href="#bundleinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BundleInstance</h3>
<ul>
<li>description: Grants permission to bundle an instance store-backed Windows instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="cancelbundletask"><a aria-hidden="true" class="anchor-heading" href="#cancelbundletask"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CancelBundleTask</h3>
<ul>
<li>description: Grants permission to cancel a bundling operation</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="cancelcapacityreservation"><a aria-hidden="true" class="anchor-heading" href="#cancelcapacityreservation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CancelCapacityReservation</h3>
<ul>
<li>description: Grants permission to cancel a Capacity Reservation and release the reserved capacity</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "capacity-reservation": {
        "resource_type": "capacity-reservation",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="cancelconversiontask"><a aria-hidden="true" class="anchor-heading" href="#cancelconversiontask"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CancelConversionTask</h3>
<ul>
<li>description: Grants permission to cancel an active conversion task</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="cancelexporttask"><a aria-hidden="true" class="anchor-heading" href="#cancelexporttask"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CancelExportTask</h3>
<ul>
<li>description: Grants permission to cancel an active export task</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="cancelimporttask"><a aria-hidden="true" class="anchor-heading" href="#cancelimporttask"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CancelImportTask</h3>
<ul>
<li>description: Grants permission to cancel an in-process import virtual machine or import snapshot task</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="cancelreservedinstanceslisting"><a aria-hidden="true" class="anchor-heading" href="#cancelreservedinstanceslisting"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CancelReservedInstancesListing</h3>
<ul>
<li>description: Grants permission to cancel a Reserved Instance listing on the Reserved Instance Marketplace</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="cancelspotfleetrequests"><a aria-hidden="true" class="anchor-heading" href="#cancelspotfleetrequests"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CancelSpotFleetRequests</h3>
<ul>
<li>description: Grants permission to cancel one or more Spot Fleet requests</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="cancelspotinstancerequests"><a aria-hidden="true" class="anchor-heading" href="#cancelspotinstancerequests"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CancelSpotInstanceRequests</h3>
<ul>
<li>description: Grants permission to cancel one or more Spot Instance requests</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="confirmproductinstance"><a aria-hidden="true" class="anchor-heading" href="#confirmproductinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ConfirmProductInstance</h3>
<ul>
<li>description: Grants permission to determine whether an owned product code is associated with an instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="copyfpgaimage"><a aria-hidden="true" class="anchor-heading" href="#copyfpgaimage"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CopyFpgaImage</h3>
<ul>
<li>description: Grants permission to copy a source Amazon FPGA image (AFI) to the current Region</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="copyimage"><a aria-hidden="true" class="anchor-heading" href="#copyimage"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CopyImage</h3>
<ul>
<li>description: Grants permission to copy an Amazon Machine Image (AMI) from a source Region to the current Region</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="copysnapshot"><a aria-hidden="true" class="anchor-heading" href="#copysnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CopySnapshot</h3>
<ul>
<li>description: Grants permission to copy a point-in-time snapshot of an EBS volume and store it in Amazon S3</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "snapshot": {
        "resource_type": "snapshot",
        "required": true,
        "condition_keys": [
            "aws:TagKeys",
            "aws:RequestTag/${TagKey}",
            "ec2:Region"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createcapacityreservation"><a aria-hidden="true" class="anchor-heading" href="#createcapacityreservation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateCapacityReservation</h3>
<ul>
<li>description: Grants permission to create a Capacity Reservation</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "capacity-reservation": {
        "resource_type": "capacity-reservation",
        "required": true,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createcarriergateway"><a aria-hidden="true" class="anchor-heading" href="#createcarriergateway"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateCarrierGateway</h3>
<ul>
<li>description: Grants permission to create a carrier gateway and provides CSP connectivity to VPC customers.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "carrier-gateway": {
        "resource_type": "carrier-gateway",
        "required": true,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createclientvpnendpoint"><a aria-hidden="true" class="anchor-heading" href="#createclientvpnendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateClientVpnEndpoint</h3>
<ul>
<li>description: Grants permission to create a Client VPN endpoint</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "client-vpn-endpoint": {
        "resource_type": "client-vpn-endpoint",
        "required": true,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createclientvpnroute"><a aria-hidden="true" class="anchor-heading" href="#createclientvpnroute"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateClientVpnRoute</h3>
<ul>
<li>description: Grants permission to add a network route to a Client VPN endpoint's route table</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "client-vpn-endpoint": {
        "resource_type": "client-vpn-endpoint",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "subnet": {
        "resource_type": "subnet",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createcustomergateway"><a aria-hidden="true" class="anchor-heading" href="#createcustomergateway"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateCustomerGateway</h3>
<ul>
<li>description: Grants permission to create a customer gateway, which provides information to AWS about your customer gateway device</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdefaultsubnet"><a aria-hidden="true" class="anchor-heading" href="#createdefaultsubnet"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDefaultSubnet</h3>
<ul>
<li>description: Grants permission to create a default subnet in a specified Availability Zone in a default VPC</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdefaultvpc"><a aria-hidden="true" class="anchor-heading" href="#createdefaultvpc"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDefaultVpc</h3>
<ul>
<li>description: Grants permission to create a default VPC with a default subnet in each Availability Zone</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdhcpoptions"><a aria-hidden="true" class="anchor-heading" href="#createdhcpoptions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDhcpOptions</h3>
<ul>
<li>description: Grants permission to create a set of DHCP options for a VPC</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dhcp-options": {
        "resource_type": "dhcp-options",
        "required": true,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createegressonlyinternetgateway"><a aria-hidden="true" class="anchor-heading" href="#createegressonlyinternetgateway"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateEgressOnlyInternetGateway</h3>
<ul>
<li>description: Grants permission to create an egress-only internet gateway for a VPC</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "egress-only-internet-gateway": {
        "resource_type": "egress-only-internet-gateway",
        "required": true,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createfleet"><a aria-hidden="true" class="anchor-heading" href="#createfleet"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateFleet</h3>
<ul>
<li>description: Grants permission to launch an EC2 Fleet</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createflowlogs"><a aria-hidden="true" class="anchor-heading" href="#createflowlogs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateFlowLogs</h3>
<ul>
<li>description: Grants permission to create one or more flow logs to capture IP traffic for a network interface</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vpc-flow-log": {
        "resource_type": "vpc-flow-log",
        "required": true,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region"
        ],
        "dependent_actions": [
            "iam:PassRole"
        ]
    },
    "network-interface": {
        "resource_type": "network-interface",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:AvailabilityZone",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:Subnet",
            "ec2:Vpc"
        ],
        "dependent_actions": []
    },
    "subnet": {
        "resource_type": "subnet",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:AvailabilityZone",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:Vpc"
        ],
        "dependent_actions": []
    },
    "vpc": {
        "resource_type": "vpc",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:Tenancy"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createfpgaimage"><a aria-hidden="true" class="anchor-heading" href="#createfpgaimage"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateFpgaImage</h3>
<ul>
<li>description: Grants permission to create an Amazon FPGA Image (AFI) from a design checkpoint (DCP)</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fpga-image": {
        "resource_type": "fpga-image",
        "required": true,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createimage"><a aria-hidden="true" class="anchor-heading" href="#createimage"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateImage</h3>
<ul>
<li>description: Grants permission to create an Amazon EBS-backed AMI from a stopped or running Amazon EBS-backed instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createinstanceexporttask"><a aria-hidden="true" class="anchor-heading" href="#createinstanceexporttask"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateInstanceExportTask</h3>
<ul>
<li>description: Grants permission to export a running or stopped instance to an Amazon S3 bucket</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "export-instance-task": {
        "resource_type": "export-instance-task",
        "required": true,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createinternetgateway"><a aria-hidden="true" class="anchor-heading" href="#createinternetgateway"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateInternetGateway</h3>
<ul>
<li>description: Grants permission to create an internet gateway for a VPC</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "internet-gateway": {
        "resource_type": "internet-gateway",
        "required": true,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createkeypair"><a aria-hidden="true" class="anchor-heading" href="#createkeypair"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateKeyPair</h3>
<ul>
<li>description: Grants permission to create a 2048-bit RSA key pair</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "key-pair": {
        "resource_type": "key-pair",
        "required": true,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createlaunchtemplate"><a aria-hidden="true" class="anchor-heading" href="#createlaunchtemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateLaunchTemplate</h3>
<ul>
<li>description: Grants permission to create a launch template</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "launch-template": {
        "resource_type": "launch-template",
        "required": true,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createlaunchtemplateversion"><a aria-hidden="true" class="anchor-heading" href="#createlaunchtemplateversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateLaunchTemplateVersion</h3>
<ul>
<li>description: Grants permission to create a new version of a launch template</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "launch-template": {
        "resource_type": "launch-template",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createlocalgatewayroute"><a aria-hidden="true" class="anchor-heading" href="#createlocalgatewayroute"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateLocalGatewayRoute</h3>
<ul>
<li>description: Grants permission to create a static route for a local gateway route table</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "local-gateway-route-table": {
        "resource_type": "local-gateway-route-table",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "local-gateway-virtual-interface-group": {
        "resource_type": "local-gateway-virtual-interface-group",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createlocalgatewayroutetablevpcassociation"><a aria-hidden="true" class="anchor-heading" href="#createlocalgatewayroutetablevpcassociation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateLocalGatewayRouteTableVpcAssociation</h3>
<ul>
<li>description: Grants permission to associate a VPC with a local gateway route table</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "local-gateway-route-table": {
        "resource_type": "local-gateway-route-table",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "local-gateway-route-table-vpc-association": {
        "resource_type": "local-gateway-route-table-vpc-association",
        "required": true,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region"
        ],
        "dependent_actions": []
    },
    "vpc": {
        "resource_type": "vpc",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:Tenancy"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createmanagedprefixlist"><a aria-hidden="true" class="anchor-heading" href="#createmanagedprefixlist"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateManagedPrefixList</h3>
<ul>
<li>description: Grants permission to create a managed prefix list</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "prefix-list": {
        "resource_type": "prefix-list",
        "required": true,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createnatgateway"><a aria-hidden="true" class="anchor-heading" href="#createnatgateway"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateNatGateway</h3>
<ul>
<li>description: Grants permission to create a NAT gateway in a subnet</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "natgateway": {
        "resource_type": "natgateway",
        "required": true,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createnetworkacl"><a aria-hidden="true" class="anchor-heading" href="#createnetworkacl"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateNetworkAcl</h3>
<ul>
<li>description: Grants permission to create a network ACL in a VPC</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "network-acl": {
        "resource_type": "network-acl",
        "required": true,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createnetworkaclentry"><a aria-hidden="true" class="anchor-heading" href="#createnetworkaclentry"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateNetworkAclEntry</h3>
<ul>
<li>description: Grants permission to create a numbered entry (a rule) in a network ACL</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createnetworkinterface"><a aria-hidden="true" class="anchor-heading" href="#createnetworkinterface"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateNetworkInterface</h3>
<ul>
<li>description: Grants permission to create a network interface in a subnet</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "network-interface": {
        "resource_type": "network-interface",
        "required": true,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createnetworkinterfacepermission"><a aria-hidden="true" class="anchor-heading" href="#createnetworkinterfacepermission"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateNetworkInterfacePermission</h3>
<ul>
<li>description: Grants permission to create a permission for an AWS-authorized user to perform certain operations on a network interface</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "network-interface": {
        "resource_type": "network-interface",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:AuthorizedUser",
            "ec2:AvailabilityZone",
            "ec2:Permission",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:Subnet",
            "ec2:Vpc",
            "ec2:AuthorizedService"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createplacementgroup"><a aria-hidden="true" class="anchor-heading" href="#createplacementgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreatePlacementGroup</h3>
<ul>
<li>description: Grants permission to create a placement group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "placement-group": {
        "resource_type": "placement-group",
        "required": true,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createreservedinstanceslisting"><a aria-hidden="true" class="anchor-heading" href="#createreservedinstanceslisting"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateReservedInstancesListing</h3>
<ul>
<li>description: Grants permission to create a listing for Standard Reserved Instances to be sold in the Reserved Instance Marketplace</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createroute"><a aria-hidden="true" class="anchor-heading" href="#createroute"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateRoute</h3>
<ul>
<li>description: Grants permission to create a route in a VPC route table</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "route-table": {
        "resource_type": "route-table",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:Vpc"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createroutetable"><a aria-hidden="true" class="anchor-heading" href="#createroutetable"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateRouteTable</h3>
<ul>
<li>description: Grants permission to create a route table for a VPC</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createsecuritygroup"><a aria-hidden="true" class="anchor-heading" href="#createsecuritygroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSecurityGroup</h3>
<ul>
<li>description: Grants permission to create a security group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "security-group": {
        "resource_type": "security-group",
        "required": true,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createsnapshot"><a aria-hidden="true" class="anchor-heading" href="#createsnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSnapshot</h3>
<ul>
<li>description: Grants permission to create a snapshot of an EBS volume and store it in Amazon S3</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "snapshot": {
        "resource_type": "snapshot",
        "required": true,
        "condition_keys": [
            "aws:TagKeys",
            "aws:RequestTag/${TagKey}",
            "ec2:ParentVolume",
            "ec2:Region"
        ],
        "dependent_actions": []
    },
    "volume": {
        "resource_type": "volume",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Encrypted",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:VolumeIops",
            "ec2:VolumeSize",
            "ec2:VolumeType"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createsnapshots"><a aria-hidden="true" class="anchor-heading" href="#createsnapshots"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSnapshots</h3>
<ul>
<li>description: Grants permission to create crash-consistent snapshots of multiple EBS volumes and store them in Amazon S3</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:AvailabilityZone",
            "ec2:EbsOptimized",
            "ec2:InstanceProfile",
            "ec2:InstanceType",
            "ec2:PlacementGroup",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:RootDeviceType",
            "ec2:Tenancy"
        ],
        "dependent_actions": []
    },
    "snapshot": {
        "resource_type": "snapshot",
        "required": true,
        "condition_keys": [
            "aws:TagKeys",
            "aws:RequestTag/${TagKey}",
            "ec2:ParentVolume",
            "ec2:Region"
        ],
        "dependent_actions": []
    },
    "volume": {
        "resource_type": "volume",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Encrypted",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:VolumeIops",
            "ec2:VolumeSize",
            "ec2:VolumeType"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createspotdatafeedsubscription"><a aria-hidden="true" class="anchor-heading" href="#createspotdatafeedsubscription"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSpotDatafeedSubscription</h3>
<ul>
<li>description: Grants permission to create a data feed for Spot Instances to view Spot Instance usage logs</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createsubnet"><a aria-hidden="true" class="anchor-heading" href="#createsubnet"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSubnet</h3>
<ul>
<li>description: Grants permission to create a subnet in a VPC</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "subnet": {
        "resource_type": "subnet",
        "required": true,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtags"><a aria-hidden="true" class="anchor-heading" href="#createtags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTags</h3>
<ul>
<li>description: Grants permission to add or overwrite one or more tags for Amazon EC2 resources</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "capacity-reservation": {
        "resource_type": "capacity-reservation",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "client-vpn-endpoint": {
        "resource_type": "client-vpn-endpoint",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "dedicated-host": {
        "resource_type": "dedicated-host",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dhcp-options": {
        "resource_type": "dhcp-options",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "egress-only-internet-gateway": {
        "resource_type": "egress-only-internet-gateway",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "export-instance-task": {
        "resource_type": "export-instance-task",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "fleet": {
        "resource_type": "fleet",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "fpga-image": {
        "resource_type": "fpga-image",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Owner",
            "ec2:Public",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "image": {
        "resource_type": "image",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:ImageType",
            "ec2:Owner",
            "ec2:Public",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:RootDeviceType"
        ],
        "dependent_actions": []
    },
    "instance": {
        "resource_type": "instance",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:AvailabilityZone",
            "ec2:EbsOptimized",
            "ec2:InstanceProfile",
            "ec2:InstanceType",
            "ec2:PlacementGroup",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:RootDeviceType",
            "ec2:Tenancy"
        ],
        "dependent_actions": []
    },
    "internet-gateway": {
        "resource_type": "internet-gateway",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "local-gateway": {
        "resource_type": "local-gateway",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "local-gateway-route-table": {
        "resource_type": "local-gateway-route-table",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "local-gateway-route-table-virtual-interface-group-association": {
        "resource_type": "local-gateway-route-table-virtual-interface-group-association",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "local-gateway-route-table-vpc-association": {
        "resource_type": "local-gateway-route-table-vpc-association",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "local-gateway-virtual-interface": {
        "resource_type": "local-gateway-virtual-interface",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "local-gateway-virtual-interface-group": {
        "resource_type": "local-gateway-virtual-interface-group",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "natgateway": {
        "resource_type": "natgateway",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "network-acl": {
        "resource_type": "network-acl",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:Vpc"
        ],
        "dependent_actions": []
    },
    "network-interface": {
        "resource_type": "network-interface",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:AvailabilityZone",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:Subnet",
            "ec2:Vpc",
            "ec2:AssociatePublicIpAddress"
        ],
        "dependent_actions": []
    },
    "reserved-instances": {
        "resource_type": "reserved-instances",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:AvailabilityZone",
            "ec2:InstanceType",
            "ec2:Region",
            "ec2:ReservedInstancesOfferingType",
            "ec2:ResourceTag/${TagKey}",
            "ec2:Tenancy"
        ],
        "dependent_actions": []
    },
    "route-table": {
        "resource_type": "route-table",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:Vpc"
        ],
        "dependent_actions": []
    },
    "security-group": {
        "resource_type": "security-group",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:Vpc"
        ],
        "dependent_actions": []
    },
    "snapshot": {
        "resource_type": "snapshot",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Owner",
            "ec2:ParentVolume",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:SnapshotTime",
            "ec2:VolumeSize"
        ],
        "dependent_actions": []
    },
    "spot-instance-request": {
        "resource_type": "spot-instance-request",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "subnet": {
        "resource_type": "subnet",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:AvailabilityZone",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:Vpc"
        ],
        "dependent_actions": []
    },
    "traffic-mirror-filter": {
        "resource_type": "traffic-mirror-filter",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "traffic-mirror-session": {
        "resource_type": "traffic-mirror-session",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "traffic-mirror-target": {
        "resource_type": "traffic-mirror-target",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "transit-gateway": {
        "resource_type": "transit-gateway",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "transit-gateway-attachment": {
        "resource_type": "transit-gateway-attachment",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "transit-gateway-multicast-domain": {
        "resource_type": "transit-gateway-multicast-domain",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "transit-gateway-route-table": {
        "resource_type": "transit-gateway-route-table",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "volume": {
        "resource_type": "volume",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:AvailabilityZone",
            "ec2:Encrypted",
            "ec2:ParentSnapshot",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:VolumeIops",
            "ec2:VolumeSize",
            "ec2:VolumeType"
        ],
        "dependent_actions": []
    },
    "vpc": {
        "resource_type": "vpc",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:Tenancy"
        ],
        "dependent_actions": []
    },
    "vpc-endpoint": {
        "resource_type": "vpc-endpoint",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "vpc-endpoint-service": {
        "resource_type": "vpc-endpoint-service",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "vpc-flow-log": {
        "resource_type": "vpc-flow-log",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "vpn-connection": {
        "resource_type": "vpn-connection",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "vpn-gateway": {
        "resource_type": "vpn-gateway",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "ec2:CreateAction"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtrafficmirrorfilter"><a aria-hidden="true" class="anchor-heading" href="#createtrafficmirrorfilter"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTrafficMirrorFilter</h3>
<ul>
<li>description: Grants permission to create a traffic mirror filter</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "traffic-mirror-filter": {
        "resource_type": "traffic-mirror-filter",
        "required": true,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtrafficmirrorfilterrule"><a aria-hidden="true" class="anchor-heading" href="#createtrafficmirrorfilterrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTrafficMirrorFilterRule</h3>
<ul>
<li>description: Grants permission to create a traffic mirror filter rule</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "traffic-mirror-filter": {
        "resource_type": "traffic-mirror-filter",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "traffic-mirror-filter-rule": {
        "resource_type": "traffic-mirror-filter-rule",
        "required": true,
        "condition_keys": [
            "ec2:Region"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtrafficmirrorsession"><a aria-hidden="true" class="anchor-heading" href="#createtrafficmirrorsession"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTrafficMirrorSession</h3>
<ul>
<li>description: Grants permission to create a traffic mirror session</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "network-interface": {
        "resource_type": "network-interface",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "traffic-mirror-filter": {
        "resource_type": "traffic-mirror-filter",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "traffic-mirror-session": {
        "resource_type": "traffic-mirror-session",
        "required": true,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region"
        ],
        "dependent_actions": []
    },
    "traffic-mirror-target": {
        "resource_type": "traffic-mirror-target",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtrafficmirrortarget"><a aria-hidden="true" class="anchor-heading" href="#createtrafficmirrortarget"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTrafficMirrorTarget</h3>
<ul>
<li>description: Grants permission to create a traffic mirror target</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "traffic-mirror-target": {
        "resource_type": "traffic-mirror-target",
        "required": true,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region"
        ],
        "dependent_actions": []
    },
    "network-interface": {
        "resource_type": "network-interface",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtransitgateway"><a aria-hidden="true" class="anchor-heading" href="#createtransitgateway"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTransitGateway</h3>
<ul>
<li>description: Grants permission to create a transit gateway</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "transit-gateway": {
        "resource_type": "transit-gateway",
        "required": true,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtransitgatewaymulticastdomain"><a aria-hidden="true" class="anchor-heading" href="#createtransitgatewaymulticastdomain"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTransitGatewayMulticastDomain</h3>
<ul>
<li>description: Grants permission to create a multicast domain for a transit gateway</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "transit-gateway": {
        "resource_type": "transit-gateway",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "transit-gateway-multicast-domain": {
        "resource_type": "transit-gateway-multicast-domain",
        "required": true,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtransitgatewaypeeringattachment"><a aria-hidden="true" class="anchor-heading" href="#createtransitgatewaypeeringattachment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTransitGatewayPeeringAttachment</h3>
<ul>
<li>description: Grants permission to request a transit gateway peering attachment between a requester and accepter transit gateway</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "transit-gateway": {
        "resource_type": "transit-gateway",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "transit-gateway-attachment": {
        "resource_type": "transit-gateway-attachment",
        "required": true,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtransitgatewayprefixlistreference"><a aria-hidden="true" class="anchor-heading" href="#createtransitgatewayprefixlistreference"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTransitGatewayPrefixListReference</h3>
<ul>
<li>description: Grants permission to create a transit gateway prefix list reference</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "prefix-list": {
        "resource_type": "prefix-list",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "transit-gateway-route-table": {
        "resource_type": "transit-gateway-route-table",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "transit-gateway-attachment": {
        "resource_type": "transit-gateway-attachment",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtransitgatewayroute"><a aria-hidden="true" class="anchor-heading" href="#createtransitgatewayroute"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTransitGatewayRoute</h3>
<ul>
<li>description: Grants permission to create a static route for a transit gateway route table</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "transit-gateway-route-table": {
        "resource_type": "transit-gateway-route-table",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "transit-gateway-attachment": {
        "resource_type": "transit-gateway-attachment",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtransitgatewayroutetable"><a aria-hidden="true" class="anchor-heading" href="#createtransitgatewayroutetable"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTransitGatewayRouteTable</h3>
<ul>
<li>description: Grants permission to create a route table for a transit gateway</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "transit-gateway": {
        "resource_type": "transit-gateway",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "transit-gateway-route-table": {
        "resource_type": "transit-gateway-route-table",
        "required": true,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtransitgatewayvpcattachment"><a aria-hidden="true" class="anchor-heading" href="#createtransitgatewayvpcattachment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTransitGatewayVpcAttachment</h3>
<ul>
<li>description: Grants permission to attach a VPC to a transit gateway</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "transit-gateway": {
        "resource_type": "transit-gateway",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "transit-gateway-attachment": {
        "resource_type": "transit-gateway-attachment",
        "required": true,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region"
        ],
        "dependent_actions": []
    },
    "vpc": {
        "resource_type": "vpc",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "subnet": {
        "resource_type": "subnet",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createvolume"><a aria-hidden="true" class="anchor-heading" href="#createvolume"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateVolume</h3>
<ul>
<li>description: Grants permission to create an EBS volume</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "volume": {
        "resource_type": "volume",
        "required": true,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:AvailabilityZone",
            "ec2:Encrypted",
            "ec2:ParentSnapshot",
            "ec2:Region",
            "ec2:VolumeIops",
            "ec2:VolumeSize",
            "ec2:VolumeType"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createvpc"><a aria-hidden="true" class="anchor-heading" href="#createvpc"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateVpc</h3>
<ul>
<li>description: Grants permission to create a VPC with a specified CIDR block</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vpc": {
        "resource_type": "vpc",
        "required": true,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createvpcendpoint"><a aria-hidden="true" class="anchor-heading" href="#createvpcendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateVpcEndpoint</h3>
<ul>
<li>description: Grants permission to create a VPC endpoint for an AWS service</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vpc": {
        "resource_type": "vpc",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": [
            "route53:AssociateVPCWithHostedZone"
        ]
    },
    "vpc-endpoint": {
        "resource_type": "vpc-endpoint",
        "required": true,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:VpceServiceName",
            "ec2:VpceServiceOwner"
        ],
        "dependent_actions": []
    },
    "route-table": {
        "resource_type": "route-table",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "security-group": {
        "resource_type": "security-group",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "subnet": {
        "resource_type": "subnet",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createvpcendpointconnectionnotification"><a aria-hidden="true" class="anchor-heading" href="#createvpcendpointconnectionnotification"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateVpcEndpointConnectionNotification</h3>
<ul>
<li>description: Grants permission to create a connection notification for a VPC endpoint or VPC endpoint service</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createvpcendpointserviceconfiguration"><a aria-hidden="true" class="anchor-heading" href="#createvpcendpointserviceconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateVpcEndpointServiceConfiguration</h3>
<ul>
<li>description: Grants permission to create a VPC endpoint service configuration to which service consumers (AWS accounts, IAM users, and IAM roles) can connect</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vpc-endpoint-service": {
        "resource_type": "vpc-endpoint-service",
        "required": true,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:VpceServicePrivateDnsName"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createvpcpeeringconnection"><a aria-hidden="true" class="anchor-heading" href="#createvpcpeeringconnection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateVpcPeeringConnection</h3>
<ul>
<li>description: Grants permission to request a VPC peering connection between two VPCs</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vpc": {
        "resource_type": "vpc",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:Tenancy"
        ],
        "dependent_actions": []
    },
    "vpc-peering-connection": {
        "resource_type": "vpc-peering-connection",
        "required": true,
        "condition_keys": [
            "ec2:AccepterVpc",
            "ec2:Region",
            "ec2:RequesterVpc"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createvpnconnection"><a aria-hidden="true" class="anchor-heading" href="#createvpnconnection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateVpnConnection</h3>
<ul>
<li>description: Grants permission to create a VPN connection between a virtual private gateway or transit gateway and a customer gateway</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vpn-connection": {
        "resource_type": "vpn-connection",
        "required": true,
        "condition_keys": [
            "ec2:Region",
            "ec2:AuthenticationType",
            "ec2:DPDTimeoutSeconds",
            "ec2:GatewayType",
            "ec2:IKEVersions",
            "ec2:InsideTunnelCidr",
            "ec2:Phase1DHGroupNumbers",
            "ec2:Phase2DHGroupNumbers",
            "ec2:Phase1EncryptionAlgorithms",
            "ec2:Phase2EncryptionAlgorithms",
            "ec2:Phase1IntegrityAlgorithms",
            "ec2:Phase2IntegrityAlgorithms",
            "ec2:Phase1LifetimeSeconds",
            "ec2:Phase2LifetimeSeconds",
            "ec2:PresharedKeys",
            "ec2:RekeyFuzzPercentage",
            "ec2:RekeyMarginTimeSeconds",
            "ec2:RoutingType"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createvpnconnectionroute"><a aria-hidden="true" class="anchor-heading" href="#createvpnconnectionroute"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateVpnConnectionRoute</h3>
<ul>
<li>description: Grants permission to create a static route for a VPN connection between a virtual private gateway and a customer gateway</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createvpngateway"><a aria-hidden="true" class="anchor-heading" href="#createvpngateway"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateVpnGateway</h3>
<ul>
<li>description: Grants permission to create a virtual private gateway</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletecarriergateway"><a aria-hidden="true" class="anchor-heading" href="#deletecarriergateway"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteCarrierGateway</h3>
<ul>
<li>description: Grants permission to delete a carrier gateway</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "carrier-gateway": {
        "resource_type": "carrier-gateway",
        "required": true,
        "condition_keys": [
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteclientvpnendpoint"><a aria-hidden="true" class="anchor-heading" href="#deleteclientvpnendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteClientVpnEndpoint</h3>
<ul>
<li>description: Grants permission to delete a Client VPN endpoint</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "client-vpn-endpoint": {
        "resource_type": "client-vpn-endpoint",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteclientvpnroute"><a aria-hidden="true" class="anchor-heading" href="#deleteclientvpnroute"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteClientVpnRoute</h3>
<ul>
<li>description: Grants permission to delete a route from a Client VPN endpoint</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "client-vpn-endpoint": {
        "resource_type": "client-vpn-endpoint",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "subnet": {
        "resource_type": "subnet",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletecustomergateway"><a aria-hidden="true" class="anchor-heading" href="#deletecustomergateway"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteCustomerGateway</h3>
<ul>
<li>description: Grants permission to delete a customer gateway</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "customer-gateway": {
        "resource_type": "customer-gateway",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedhcpoptions"><a aria-hidden="true" class="anchor-heading" href="#deletedhcpoptions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDhcpOptions</h3>
<ul>
<li>description: Grants permission to delete a set of DHCP options</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dhcp-options": {
        "resource_type": "dhcp-options",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteegressonlyinternetgateway"><a aria-hidden="true" class="anchor-heading" href="#deleteegressonlyinternetgateway"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteEgressOnlyInternetGateway</h3>
<ul>
<li>description: Grants permission to delete an egress-only internet gateway</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletefleets"><a aria-hidden="true" class="anchor-heading" href="#deletefleets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteFleets</h3>
<ul>
<li>description: Grants permission to delete one or more EC2 Fleets</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteflowlogs"><a aria-hidden="true" class="anchor-heading" href="#deleteflowlogs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteFlowLogs</h3>
<ul>
<li>description: Grants permission to delete one or more flow logs</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vpc-flow-log": {
        "resource_type": "vpc-flow-log",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletefpgaimage"><a aria-hidden="true" class="anchor-heading" href="#deletefpgaimage"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteFpgaImage</h3>
<ul>
<li>description: Grants permission to delete an Amazon FPGA Image (AFI)</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteinternetgateway"><a aria-hidden="true" class="anchor-heading" href="#deleteinternetgateway"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteInternetGateway</h3>
<ul>
<li>description: Grants permission to delete an internet gateway</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "internet-gateway": {
        "resource_type": "internet-gateway",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletekeypair"><a aria-hidden="true" class="anchor-heading" href="#deletekeypair"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteKeyPair</h3>
<ul>
<li>description: Grants permission to delete a key pair by removing the public key from Amazon EC2</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletelaunchtemplate"><a aria-hidden="true" class="anchor-heading" href="#deletelaunchtemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteLaunchTemplate</h3>
<ul>
<li>description: Grants permission to delete a launch template and its associated versions</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "launch-template": {
        "resource_type": "launch-template",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletelaunchtemplateversions"><a aria-hidden="true" class="anchor-heading" href="#deletelaunchtemplateversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteLaunchTemplateVersions</h3>
<ul>
<li>description: Grants permission to delete one or more versions of a launch template</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "launch-template": {
        "resource_type": "launch-template",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletelocalgatewayroute"><a aria-hidden="true" class="anchor-heading" href="#deletelocalgatewayroute"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteLocalGatewayRoute</h3>
<ul>
<li>description: Grants permission to delete a route from a local gateway route table</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "local-gateway-route-table": {
        "resource_type": "local-gateway-route-table",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletelocalgatewayroutetablevpcassociation"><a aria-hidden="true" class="anchor-heading" href="#deletelocalgatewayroutetablevpcassociation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteLocalGatewayRouteTableVpcAssociation</h3>
<ul>
<li>description: Grants permission to delete an association between a VPC and local gateway route table</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "local-gateway-route-table-vpc-association": {
        "resource_type": "local-gateway-route-table-vpc-association",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletemanagedprefixlist"><a aria-hidden="true" class="anchor-heading" href="#deletemanagedprefixlist"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteManagedPrefixList</h3>
<ul>
<li>description: Grants permission to delete a managed prefix list</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "prefix-list": {
        "resource_type": "prefix-list",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletenatgateway"><a aria-hidden="true" class="anchor-heading" href="#deletenatgateway"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteNatGateway</h3>
<ul>
<li>description: Grants permission to delete a NAT gateway</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletenetworkacl"><a aria-hidden="true" class="anchor-heading" href="#deletenetworkacl"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteNetworkAcl</h3>
<ul>
<li>description: Grants permission to delete a network ACL</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "network-acl": {
        "resource_type": "network-acl",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:Vpc"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletenetworkaclentry"><a aria-hidden="true" class="anchor-heading" href="#deletenetworkaclentry"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteNetworkAclEntry</h3>
<ul>
<li>description: Grants permission to delete an inbound or outbound entry (rule) from a network ACL</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "network-acl": {
        "resource_type": "network-acl",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:Vpc"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletenetworkinterface"><a aria-hidden="true" class="anchor-heading" href="#deletenetworkinterface"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteNetworkInterface</h3>
<ul>
<li>description: Grants permission to delete a detached network interface</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletenetworkinterfacepermission"><a aria-hidden="true" class="anchor-heading" href="#deletenetworkinterfacepermission"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteNetworkInterfacePermission</h3>
<ul>
<li>description: Grants permission to delete a permission that is associated with a network interface</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteplacementgroup"><a aria-hidden="true" class="anchor-heading" href="#deleteplacementgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeletePlacementGroup</h3>
<ul>
<li>description: Grants permission to delete a placement group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteroute"><a aria-hidden="true" class="anchor-heading" href="#deleteroute"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteRoute</h3>
<ul>
<li>description: Grants permission to delete a route from a route table</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "route-table": {
        "resource_type": "route-table",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:Vpc"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteroutetable"><a aria-hidden="true" class="anchor-heading" href="#deleteroutetable"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteRouteTable</h3>
<ul>
<li>description: Grants permission to delete a route table</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "route-table": {
        "resource_type": "route-table",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:Vpc"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletesecuritygroup"><a aria-hidden="true" class="anchor-heading" href="#deletesecuritygroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteSecurityGroup</h3>
<ul>
<li>description: Grants permission to delete a security group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "security-group": {
        "resource_type": "security-group",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:Vpc"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletesnapshot"><a aria-hidden="true" class="anchor-heading" href="#deletesnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteSnapshot</h3>
<ul>
<li>description: Grants permission to delete a snapshot of an EBS volume</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "snapshot": {
        "resource_type": "snapshot",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Owner",
            "ec2:ParentVolume",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:SnapshotTime",
            "ec2:VolumeSize"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletespotdatafeedsubscription"><a aria-hidden="true" class="anchor-heading" href="#deletespotdatafeedsubscription"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteSpotDatafeedSubscription</h3>
<ul>
<li>description: Grants permission to delete a data feed for Spot Instances</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletesubnet"><a aria-hidden="true" class="anchor-heading" href="#deletesubnet"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteSubnet</h3>
<ul>
<li>description: Grants permission to delete a subnet</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetags"><a aria-hidden="true" class="anchor-heading" href="#deletetags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTags</h3>
<ul>
<li>description: Grants permission to delete one or more tags from Amazon EC2 resources</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "capacity-reservation": {
        "resource_type": "capacity-reservation",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "client-vpn-endpoint": {
        "resource_type": "client-vpn-endpoint",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "dedicated-host": {
        "resource_type": "dedicated-host",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dhcp-options": {
        "resource_type": "dhcp-options",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "egress-only-internet-gateway": {
        "resource_type": "egress-only-internet-gateway",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "export-instance-task": {
        "resource_type": "export-instance-task",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "fleet": {
        "resource_type": "fleet",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "fpga-image": {
        "resource_type": "fpga-image",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "image": {
        "resource_type": "image",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "instance": {
        "resource_type": "instance",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "internet-gateway": {
        "resource_type": "internet-gateway",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "local-gateway": {
        "resource_type": "local-gateway",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "local-gateway-route-table": {
        "resource_type": "local-gateway-route-table",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "local-gateway-route-table-virtual-interface-group-association": {
        "resource_type": "local-gateway-route-table-virtual-interface-group-association",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "local-gateway-route-table-vpc-association": {
        "resource_type": "local-gateway-route-table-vpc-association",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "local-gateway-virtual-interface": {
        "resource_type": "local-gateway-virtual-interface",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "local-gateway-virtual-interface-group": {
        "resource_type": "local-gateway-virtual-interface-group",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "natgateway": {
        "resource_type": "natgateway",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "network-acl": {
        "resource_type": "network-acl",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "network-interface": {
        "resource_type": "network-interface",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "reserved-instances": {
        "resource_type": "reserved-instances",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "route-table": {
        "resource_type": "route-table",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "security-group": {
        "resource_type": "security-group",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "snapshot": {
        "resource_type": "snapshot",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "spot-instance-request": {
        "resource_type": "spot-instance-request",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "subnet": {
        "resource_type": "subnet",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "transit-gateway": {
        "resource_type": "transit-gateway",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "transit-gateway-attachment": {
        "resource_type": "transit-gateway-attachment",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "transit-gateway-multicast-domain": {
        "resource_type": "transit-gateway-multicast-domain",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "transit-gateway-route-table": {
        "resource_type": "transit-gateway-route-table",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "volume": {
        "resource_type": "volume",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "vpc": {
        "resource_type": "vpc",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "vpc-endpoint": {
        "resource_type": "vpc-endpoint",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "vpc-endpoint-service": {
        "resource_type": "vpc-endpoint-service",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "vpc-flow-log": {
        "resource_type": "vpc-flow-log",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "vpn-connection": {
        "resource_type": "vpn-connection",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "vpn-gateway": {
        "resource_type": "vpn-gateway",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetrafficmirrorfilter"><a aria-hidden="true" class="anchor-heading" href="#deletetrafficmirrorfilter"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTrafficMirrorFilter</h3>
<ul>
<li>description: Grants permission to delete a traffic mirror filter</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "traffic-mirror-filter": {
        "resource_type": "traffic-mirror-filter",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetrafficmirrorfilterrule"><a aria-hidden="true" class="anchor-heading" href="#deletetrafficmirrorfilterrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTrafficMirrorFilterRule</h3>
<ul>
<li>description: Grants permission to delete a traffic mirror filter rule</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "traffic-mirror-filter": {
        "resource_type": "traffic-mirror-filter",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "traffic-mirror-filter-rule": {
        "resource_type": "traffic-mirror-filter-rule",
        "required": true,
        "condition_keys": [
            "ec2:Region"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetrafficmirrorsession"><a aria-hidden="true" class="anchor-heading" href="#deletetrafficmirrorsession"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTrafficMirrorSession</h3>
<ul>
<li>description: Grants permission to delete a traffic mirror session</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "traffic-mirror-session": {
        "resource_type": "traffic-mirror-session",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetrafficmirrortarget"><a aria-hidden="true" class="anchor-heading" href="#deletetrafficmirrortarget"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTrafficMirrorTarget</h3>
<ul>
<li>description: Grants permission to delete a traffic mirror target</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "traffic-mirror-target": {
        "resource_type": "traffic-mirror-target",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetransitgateway"><a aria-hidden="true" class="anchor-heading" href="#deletetransitgateway"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTransitGateway</h3>
<ul>
<li>description: Grants permission to delete a transit gateway</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "transit-gateway": {
        "resource_type": "transit-gateway",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetransitgatewaymulticastdomain"><a aria-hidden="true" class="anchor-heading" href="#deletetransitgatewaymulticastdomain"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTransitGatewayMulticastDomain</h3>
<ul>
<li>description: Grants permissions to delete a transit gateway multicast domain</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "transit-gateway-multicast-domain": {
        "resource_type": "transit-gateway-multicast-domain",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetransitgatewaypeeringattachment"><a aria-hidden="true" class="anchor-heading" href="#deletetransitgatewaypeeringattachment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTransitGatewayPeeringAttachment</h3>
<ul>
<li>description: Grants permission to delete a peering attachment from a transit gateway</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "transit-gateway-attachment": {
        "resource_type": "transit-gateway-attachment",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetransitgatewayprefixlistreference"><a aria-hidden="true" class="anchor-heading" href="#deletetransitgatewayprefixlistreference"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTransitGatewayPrefixListReference</h3>
<ul>
<li>description: Grants permission to delete a transit gateway prefix list reference</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "prefix-list": {
        "resource_type": "prefix-list",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "transit-gateway-route-table": {
        "resource_type": "transit-gateway-route-table",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetransitgatewayroute"><a aria-hidden="true" class="anchor-heading" href="#deletetransitgatewayroute"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTransitGatewayRoute</h3>
<ul>
<li>description: Grants permission to delete a route from a transit gateway route table</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "transit-gateway-route-table": {
        "resource_type": "transit-gateway-route-table",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetransitgatewayroutetable"><a aria-hidden="true" class="anchor-heading" href="#deletetransitgatewayroutetable"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTransitGatewayRouteTable</h3>
<ul>
<li>description: Grants permission to delete a transit gateway route table</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "transit-gateway-route-table": {
        "resource_type": "transit-gateway-route-table",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetransitgatewayvpcattachment"><a aria-hidden="true" class="anchor-heading" href="#deletetransitgatewayvpcattachment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTransitGatewayVpcAttachment</h3>
<ul>
<li>description: Grants permission to delete a VPC attachment from a transit gateway</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "transit-gateway-attachment": {
        "resource_type": "transit-gateway-attachment",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletevolume"><a aria-hidden="true" class="anchor-heading" href="#deletevolume"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteVolume</h3>
<ul>
<li>description: Grants permission to delete an EBS volume</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "volume": {
        "resource_type": "volume",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:AvailabilityZone",
            "ec2:Encrypted",
            "ec2:ParentSnapshot",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:VolumeIops",
            "ec2:VolumeSize",
            "ec2:VolumeType"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletevpc"><a aria-hidden="true" class="anchor-heading" href="#deletevpc"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteVpc</h3>
<ul>
<li>description: Grants permission to delete a VPC</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletevpcendpointconnectionnotifications"><a aria-hidden="true" class="anchor-heading" href="#deletevpcendpointconnectionnotifications"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteVpcEndpointConnectionNotifications</h3>
<ul>
<li>description: Grants permission to delete one or more VPC endpoint connection notifications</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletevpcendpointserviceconfigurations"><a aria-hidden="true" class="anchor-heading" href="#deletevpcendpointserviceconfigurations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteVpcEndpointServiceConfigurations</h3>
<ul>
<li>description: Grants permission to delete one or more VPC endpoint service configurations</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vpc-endpoint-service": {
        "resource_type": "vpc-endpoint-service",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletevpcendpoints"><a aria-hidden="true" class="anchor-heading" href="#deletevpcendpoints"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteVpcEndpoints</h3>
<ul>
<li>description: Grants permission to delete one or more VPC endpoints</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vpc-endpoint": {
        "resource_type": "vpc-endpoint",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletevpcpeeringconnection"><a aria-hidden="true" class="anchor-heading" href="#deletevpcpeeringconnection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteVpcPeeringConnection</h3>
<ul>
<li>description: Grants permission to delete a VPC peering connection</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vpc-peering-connection": {
        "resource_type": "vpc-peering-connection",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:AccepterVpc",
            "ec2:Region",
            "ec2:RequesterVpc",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletevpnconnection"><a aria-hidden="true" class="anchor-heading" href="#deletevpnconnection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteVpnConnection</h3>
<ul>
<li>description: Grants permission to delete a VPN connection</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletevpnconnectionroute"><a aria-hidden="true" class="anchor-heading" href="#deletevpnconnectionroute"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteVpnConnectionRoute</h3>
<ul>
<li>description: Grants permission to delete a static route for a VPN connection between a virtual private gateway and a customer gateway</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletevpngateway"><a aria-hidden="true" class="anchor-heading" href="#deletevpngateway"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteVpnGateway</h3>
<ul>
<li>description: Grants permission to delete a virtual private gateway</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deprovisionbyoipcidr"><a aria-hidden="true" class="anchor-heading" href="#deprovisionbyoipcidr"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeprovisionByoipCidr</h3>
<ul>
<li>description: Grants permission to release an IP address range that was provisioned through bring your own IP addresses (BYOIP), and to delete the corresponding address pool</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deregisterimage"><a aria-hidden="true" class="anchor-heading" href="#deregisterimage"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeregisterImage</h3>
<ul>
<li>description: Grants permission to deregister an Amazon Machine Image (AMI)</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deregisterinstanceeventnotificationattributes"><a aria-hidden="true" class="anchor-heading" href="#deregisterinstanceeventnotificationattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeregisterInstanceEventNotificationAttributes</h3>
<ul>
<li>description: Grants permission to remove tags from the set of tags to include in notifications about scheduled events for your instances</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deregistertransitgatewaymulticastgroupmembers"><a aria-hidden="true" class="anchor-heading" href="#deregistertransitgatewaymulticastgroupmembers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeregisterTransitGatewayMulticastGroupMembers</h3>
<ul>
<li>description: Grants permission to deregister one or more network interface members from a group IP address in a transit gateway multicast domain</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "network-interface": {
        "resource_type": "network-interface",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "transit-gateway-multicast-domain": {
        "resource_type": "transit-gateway-multicast-domain",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deregistertransitgatewaymulticastgroupsources"><a aria-hidden="true" class="anchor-heading" href="#deregistertransitgatewaymulticastgroupsources"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeregisterTransitGatewayMulticastGroupSources</h3>
<ul>
<li>description: Grants permission to deregister one or more network interface sources from a group IP address in a transit gateway multicast domain</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "network-interface": {
        "resource_type": "network-interface",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "transit-gateway-multicast-domain": {
        "resource_type": "transit-gateway-multicast-domain",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeaccountattributes"><a aria-hidden="true" class="anchor-heading" href="#describeaccountattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAccountAttributes</h3>
<ul>
<li>description: Grants permission to describe the attributes of the AWS account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeaddresses"><a aria-hidden="true" class="anchor-heading" href="#describeaddresses"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAddresses</h3>
<ul>
<li>description: Grants permission to describe one or more Elastic IP addresses</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeaggregateidformat"><a aria-hidden="true" class="anchor-heading" href="#describeaggregateidformat"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAggregateIdFormat</h3>
<ul>
<li>description: Grants permission to describe the longer ID format settings for all resource types</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeavailabilityzones"><a aria-hidden="true" class="anchor-heading" href="#describeavailabilityzones"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAvailabilityZones</h3>
<ul>
<li>description: Grants permission to describe one or more of the Availability Zones that are available to you</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describebundletasks"><a aria-hidden="true" class="anchor-heading" href="#describebundletasks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeBundleTasks</h3>
<ul>
<li>description: Grants permission to describe one or more bundling tasks</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describebyoipcidrs"><a aria-hidden="true" class="anchor-heading" href="#describebyoipcidrs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeByoipCidrs</h3>
<ul>
<li>description: Grants permission to describe the IP address ranges that were provisioned through bring your own IP addresses (BYOIP)</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecapacityreservations"><a aria-hidden="true" class="anchor-heading" href="#describecapacityreservations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeCapacityReservations</h3>
<ul>
<li>description: Grants permission to describe one or more Capacity Reservations</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecarriergateways"><a aria-hidden="true" class="anchor-heading" href="#describecarriergateways"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeCarrierGateways</h3>
<ul>
<li>description: Grants permission to describe one or more Carrier Gateways</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeclassiclinkinstances"><a aria-hidden="true" class="anchor-heading" href="#describeclassiclinkinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeClassicLinkInstances</h3>
<ul>
<li>description: Grants permission to describe one or more linked EC2-Classic instances</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeclientvpnauthorizationrules"><a aria-hidden="true" class="anchor-heading" href="#describeclientvpnauthorizationrules"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeClientVpnAuthorizationRules</h3>
<ul>
<li>description: Grants permission to describe the authorization rules for a Client VPN endpoint</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeclientvpnconnections"><a aria-hidden="true" class="anchor-heading" href="#describeclientvpnconnections"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeClientVpnConnections</h3>
<ul>
<li>description: Grants permission to describe active client connections and connections that have been terminated within the last 60 minutes for a Client VPN endpoint</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeclientvpnendpoints"><a aria-hidden="true" class="anchor-heading" href="#describeclientvpnendpoints"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeClientVpnEndpoints</h3>
<ul>
<li>description: Grants permission to describe one or more Client VPN endpoints</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeclientvpnroutes"><a aria-hidden="true" class="anchor-heading" href="#describeclientvpnroutes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeClientVpnRoutes</h3>
<ul>
<li>description: Grants permission to describe the routes for a Client VPN endpoint</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeclientvpntargetnetworks"><a aria-hidden="true" class="anchor-heading" href="#describeclientvpntargetnetworks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeClientVpnTargetNetworks</h3>
<ul>
<li>description: Grants permission to describe the target networks that are associated with a Client VPN endpoint</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecoippools"><a aria-hidden="true" class="anchor-heading" href="#describecoippools"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeCoipPools</h3>
<ul>
<li>description: Grants permission to describe the specified customer-owned address pools or all of your customer-owned address pools</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeconversiontasks"><a aria-hidden="true" class="anchor-heading" href="#describeconversiontasks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeConversionTasks</h3>
<ul>
<li>description: Grants permission to describe one or more conversion tasks</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecustomergateways"><a aria-hidden="true" class="anchor-heading" href="#describecustomergateways"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeCustomerGateways</h3>
<ul>
<li>description: Grants permission to describe one or more customer gateways</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedhcpoptions"><a aria-hidden="true" class="anchor-heading" href="#describedhcpoptions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDhcpOptions</h3>
<ul>
<li>description: Grants permission to describe one or more DHCP options sets</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeegressonlyinternetgateways"><a aria-hidden="true" class="anchor-heading" href="#describeegressonlyinternetgateways"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEgressOnlyInternetGateways</h3>
<ul>
<li>description: Grants permission to describe one or more egress-only internet gateways</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeelasticgpus"><a aria-hidden="true" class="anchor-heading" href="#describeelasticgpus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeElasticGpus</h3>
<ul>
<li>description: Grants permission to describe an Elastic Graphics accelerator that is associated with an instance</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeexportimagetasks"><a aria-hidden="true" class="anchor-heading" href="#describeexportimagetasks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeExportImageTasks</h3>
<ul>
<li>description: Grants permission to describe one or more export image tasks</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeexporttasks"><a aria-hidden="true" class="anchor-heading" href="#describeexporttasks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeExportTasks</h3>
<ul>
<li>description: Grants permission to describe one or more export instance tasks</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describefastsnapshotrestores"><a aria-hidden="true" class="anchor-heading" href="#describefastsnapshotrestores"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeFastSnapshotRestores</h3>
<ul>
<li>description: Grants permission to describe the state of fast snapshot restores for snapshots</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describefleethistory"><a aria-hidden="true" class="anchor-heading" href="#describefleethistory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeFleetHistory</h3>
<ul>
<li>description: Grants permission to describe the events for an EC2 Fleet during a specified time</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describefleetinstances"><a aria-hidden="true" class="anchor-heading" href="#describefleetinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeFleetInstances</h3>
<ul>
<li>description: Grants permission to describe the running instances for an EC2 Fleet</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describefleets"><a aria-hidden="true" class="anchor-heading" href="#describefleets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeFleets</h3>
<ul>
<li>description: Grants permission to describe one or more EC2 Fleets</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeflowlogs"><a aria-hidden="true" class="anchor-heading" href="#describeflowlogs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeFlowLogs</h3>
<ul>
<li>description: Grants permission to describe one or more flow logs</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describefpgaimageattribute"><a aria-hidden="true" class="anchor-heading" href="#describefpgaimageattribute"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeFpgaImageAttribute</h3>
<ul>
<li>description: Grants permission to describe the attributes of an Amazon FPGA Image (AFI)</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describefpgaimages"><a aria-hidden="true" class="anchor-heading" href="#describefpgaimages"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeFpgaImages</h3>
<ul>
<li>description: Grants permission to describe one or more Amazon FPGA Images (AFIs)</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describehostreservationofferings"><a aria-hidden="true" class="anchor-heading" href="#describehostreservationofferings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeHostReservationOfferings</h3>
<ul>
<li>description: Grants permission to describe the Dedicated Host Reservations that are available to purchase</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describehostreservations"><a aria-hidden="true" class="anchor-heading" href="#describehostreservations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeHostReservations</h3>
<ul>
<li>description: Grants permission to describe the Dedicated Host Reservations that are associated with Dedicated Hosts in the AWS account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describehosts"><a aria-hidden="true" class="anchor-heading" href="#describehosts"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeHosts</h3>
<ul>
<li>description: Grants permission to describe one or more Dedicated Hosts</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeiaminstanceprofileassociations"><a aria-hidden="true" class="anchor-heading" href="#describeiaminstanceprofileassociations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeIamInstanceProfileAssociations</h3>
<ul>
<li>description: Grants permission to describe the IAM instance profile associations</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeidformat"><a aria-hidden="true" class="anchor-heading" href="#describeidformat"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeIdFormat</h3>
<ul>
<li>description: Grants permission to describe the ID format settings for resources</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeidentityidformat"><a aria-hidden="true" class="anchor-heading" href="#describeidentityidformat"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeIdentityIdFormat</h3>
<ul>
<li>description: Grants permission to describe the ID format settings for resources for an IAM user, IAM role, or root user</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeimageattribute"><a aria-hidden="true" class="anchor-heading" href="#describeimageattribute"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeImageAttribute</h3>
<ul>
<li>description: Grants permission to describe an attribute of an Amazon Machine Image (AMI)</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeimages"><a aria-hidden="true" class="anchor-heading" href="#describeimages"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeImages</h3>
<ul>
<li>description: Grants permission to describe one or more images (AMIs, AKIs, and ARIs)</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeimportimagetasks"><a aria-hidden="true" class="anchor-heading" href="#describeimportimagetasks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeImportImageTasks</h3>
<ul>
<li>description: Grants permission to describe import virtual machine or import snapshot tasks</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeimportsnapshottasks"><a aria-hidden="true" class="anchor-heading" href="#describeimportsnapshottasks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeImportSnapshotTasks</h3>
<ul>
<li>description: Grants permission to describe import snapshot tasks</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeinstanceattribute"><a aria-hidden="true" class="anchor-heading" href="#describeinstanceattribute"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeInstanceAttribute</h3>
<ul>
<li>description: Grants permission to describe the attributes of an instance</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeinstancecreditspecifications"><a aria-hidden="true" class="anchor-heading" href="#describeinstancecreditspecifications"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeInstanceCreditSpecifications</h3>
<ul>
<li>description: Grants permission to describe the credit option for CPU usage of one or more burstable performance instances</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeinstanceeventnotificationattributes"><a aria-hidden="true" class="anchor-heading" href="#describeinstanceeventnotificationattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeInstanceEventNotificationAttributes</h3>
<ul>
<li>description: Grants permission to describe the set of tags to include in notifications about scheduled events for your instances</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeinstancestatus"><a aria-hidden="true" class="anchor-heading" href="#describeinstancestatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeInstanceStatus</h3>
<ul>
<li>description: Grants permission to describe the status of one or more instances</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeinstancetypeofferings"><a aria-hidden="true" class="anchor-heading" href="#describeinstancetypeofferings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeInstanceTypeOfferings</h3>
<ul>
<li>description: Grants permission to describe the set of instance types that are offered in a location</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeinstancetypes"><a aria-hidden="true" class="anchor-heading" href="#describeinstancetypes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeInstanceTypes</h3>
<ul>
<li>description: Grants permission to describe the details of instance types that are offered in a location</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeinstances"><a aria-hidden="true" class="anchor-heading" href="#describeinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeInstances</h3>
<ul>
<li>description: Grants permission to describe one or more instances</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeinternetgateways"><a aria-hidden="true" class="anchor-heading" href="#describeinternetgateways"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeInternetGateways</h3>
<ul>
<li>description: Grants permission to describe one or more internet gateways</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describekeypairs"><a aria-hidden="true" class="anchor-heading" href="#describekeypairs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeKeyPairs</h3>
<ul>
<li>description: Grants permission to describe one or more key pairs</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describelaunchtemplateversions"><a aria-hidden="true" class="anchor-heading" href="#describelaunchtemplateversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeLaunchTemplateVersions</h3>
<ul>
<li>description: Grants permission to describe one or more launch template versions</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describelaunchtemplates"><a aria-hidden="true" class="anchor-heading" href="#describelaunchtemplates"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeLaunchTemplates</h3>
<ul>
<li>description: Grants permission to describe one or more launch templates</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describelocalgatewayroutetablevirtualinterfacegroupassociations"><a aria-hidden="true" class="anchor-heading" href="#describelocalgatewayroutetablevirtualinterfacegroupassociations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeLocalGatewayRouteTableVirtualInterfaceGroupAssociations</h3>
<ul>
<li>description: Grants permission to describe the associations between virtual interface groups and local gateway route tables</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describelocalgatewayroutetablevpcassociations"><a aria-hidden="true" class="anchor-heading" href="#describelocalgatewayroutetablevpcassociations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeLocalGatewayRouteTableVpcAssociations</h3>
<ul>
<li>description: Grants permission to describe an association between VPCs and local gateway route tables</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describelocalgatewayroutetables"><a aria-hidden="true" class="anchor-heading" href="#describelocalgatewayroutetables"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeLocalGatewayRouteTables</h3>
<ul>
<li>description: Grants permission to describe one or more local gateway route tables</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describelocalgatewayvirtualinterfacegroups"><a aria-hidden="true" class="anchor-heading" href="#describelocalgatewayvirtualinterfacegroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeLocalGatewayVirtualInterfaceGroups</h3>
<ul>
<li>description: Grants permission to describe local gateway virtual interface groups</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describelocalgatewayvirtualinterfaces"><a aria-hidden="true" class="anchor-heading" href="#describelocalgatewayvirtualinterfaces"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeLocalGatewayVirtualInterfaces</h3>
<ul>
<li>description: Grants permission to describe local gateway virtual interfaces</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describelocalgateways"><a aria-hidden="true" class="anchor-heading" href="#describelocalgateways"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeLocalGateways</h3>
<ul>
<li>description: Grants permission to describe one or more local gateways</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describemanagedprefixlists"><a aria-hidden="true" class="anchor-heading" href="#describemanagedprefixlists"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeManagedPrefixLists</h3>
<ul>
<li>description: Grants permission to describe your managed prefix lists and any AWS-managed prefix lists</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describemovingaddresses"><a aria-hidden="true" class="anchor-heading" href="#describemovingaddresses"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeMovingAddresses</h3>
<ul>
<li>description: Grants permission to describe Elastic IP addresses that are being moved to the EC2-VPC platform</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describenatgateways"><a aria-hidden="true" class="anchor-heading" href="#describenatgateways"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeNatGateways</h3>
<ul>
<li>description: Grants permission to describe one or more NAT gateways</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describenetworkacls"><a aria-hidden="true" class="anchor-heading" href="#describenetworkacls"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeNetworkAcls</h3>
<ul>
<li>description: Grants permission to describe one or more network ACLs</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describenetworkinterfaceattribute"><a aria-hidden="true" class="anchor-heading" href="#describenetworkinterfaceattribute"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeNetworkInterfaceAttribute</h3>
<ul>
<li>description: Grants permission to describe a network interface attribute</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describenetworkinterfacepermissions"><a aria-hidden="true" class="anchor-heading" href="#describenetworkinterfacepermissions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeNetworkInterfacePermissions</h3>
<ul>
<li>description: Grants permission to describe the permissions that are associated with a network interface</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describenetworkinterfaces"><a aria-hidden="true" class="anchor-heading" href="#describenetworkinterfaces"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeNetworkInterfaces</h3>
<ul>
<li>description: Grants permission to describe one or more network interfaces</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeplacementgroups"><a aria-hidden="true" class="anchor-heading" href="#describeplacementgroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribePlacementGroups</h3>
<ul>
<li>description: Grants permission to describe one or more placement groups</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeprefixlists"><a aria-hidden="true" class="anchor-heading" href="#describeprefixlists"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribePrefixLists</h3>
<ul>
<li>description: Grants permission to describe available AWS services in a prefix list format</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeprincipalidformat"><a aria-hidden="true" class="anchor-heading" href="#describeprincipalidformat"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribePrincipalIdFormat</h3>
<ul>
<li>description: Grants permission to describe the ID format settings for the root user and all IAM roles and IAM users that have explicitly specified a longer ID (17-character ID) preference</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describepublicipv4pools"><a aria-hidden="true" class="anchor-heading" href="#describepublicipv4pools"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribePublicIpv4Pools</h3>
<ul>
<li>description: Grants permission to describe one or more IPv4 address pools</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeregions"><a aria-hidden="true" class="anchor-heading" href="#describeregions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeRegions</h3>
<ul>
<li>description: Grants permission to describe one or more AWS Regions that are currently available in your account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describereservedinstances"><a aria-hidden="true" class="anchor-heading" href="#describereservedinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeReservedInstances</h3>
<ul>
<li>description: Grants permission to describe one or more purchased Reserved Instances in your account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describereservedinstanceslistings"><a aria-hidden="true" class="anchor-heading" href="#describereservedinstanceslistings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeReservedInstancesListings</h3>
<ul>
<li>description: Grants permission to describe your account's Reserved Instance listings in the Reserved Instance Marketplace</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describereservedinstancesmodifications"><a aria-hidden="true" class="anchor-heading" href="#describereservedinstancesmodifications"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeReservedInstancesModifications</h3>
<ul>
<li>description: Grants permission to describe the modifications made to one or more Reserved Instances</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describereservedinstancesofferings"><a aria-hidden="true" class="anchor-heading" href="#describereservedinstancesofferings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeReservedInstancesOfferings</h3>
<ul>
<li>description: Grants permission to describe the Reserved Instance offerings that are available for purchase</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeroutetables"><a aria-hidden="true" class="anchor-heading" href="#describeroutetables"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeRouteTables</h3>
<ul>
<li>description: Grants permission to describe one or more route tables</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describescheduledinstanceavailability"><a aria-hidden="true" class="anchor-heading" href="#describescheduledinstanceavailability"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeScheduledInstanceAvailability</h3>
<ul>
<li>description: Grants permission to find available schedules for Scheduled Instances</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describescheduledinstances"><a aria-hidden="true" class="anchor-heading" href="#describescheduledinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeScheduledInstances</h3>
<ul>
<li>description: Grants permission to describe one or more Scheduled Instances in your account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describesecuritygroupreferences"><a aria-hidden="true" class="anchor-heading" href="#describesecuritygroupreferences"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSecurityGroupReferences</h3>
<ul>
<li>description: Grants permission to describe the VPCs on the other side of a VPC peering connection that are referencing specified VPC security groups</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describesecuritygroups"><a aria-hidden="true" class="anchor-heading" href="#describesecuritygroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSecurityGroups</h3>
<ul>
<li>description: Grants permission to describe one or more security groups</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describesnapshotattribute"><a aria-hidden="true" class="anchor-heading" href="#describesnapshotattribute"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSnapshotAttribute</h3>
<ul>
<li>description: Grants permission to describe an attribute of a snapshot</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describesnapshots"><a aria-hidden="true" class="anchor-heading" href="#describesnapshots"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSnapshots</h3>
<ul>
<li>description: Grants permission to describe one or more EBS snapshots</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describespotdatafeedsubscription"><a aria-hidden="true" class="anchor-heading" href="#describespotdatafeedsubscription"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSpotDatafeedSubscription</h3>
<ul>
<li>description: Grants permission to describe the data feed for Spot Instances</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describespotfleetinstances"><a aria-hidden="true" class="anchor-heading" href="#describespotfleetinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSpotFleetInstances</h3>
<ul>
<li>description: Grants permission to describe the running instances for a Spot Fleet</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describespotfleetrequesthistory"><a aria-hidden="true" class="anchor-heading" href="#describespotfleetrequesthistory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSpotFleetRequestHistory</h3>
<ul>
<li>description: Grants permission to describe the events for a Spot Fleet request during a specified time</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describespotfleetrequests"><a aria-hidden="true" class="anchor-heading" href="#describespotfleetrequests"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSpotFleetRequests</h3>
<ul>
<li>description: Grants permission to describe one or more Spot Fleet requests</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describespotinstancerequests"><a aria-hidden="true" class="anchor-heading" href="#describespotinstancerequests"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSpotInstanceRequests</h3>
<ul>
<li>description: Grants permission to describe one or more Spot Instance requests</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describespotpricehistory"><a aria-hidden="true" class="anchor-heading" href="#describespotpricehistory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSpotPriceHistory</h3>
<ul>
<li>description: Grants permission to describe the Spot Instance price history</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describestalesecuritygroups"><a aria-hidden="true" class="anchor-heading" href="#describestalesecuritygroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeStaleSecurityGroups</h3>
<ul>
<li>description: Grants permission to describe the stale security group rules for security groups in a specified VPC</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describesubnets"><a aria-hidden="true" class="anchor-heading" href="#describesubnets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSubnets</h3>
<ul>
<li>description: Grants permission to describe one or more subnets</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetags"><a aria-hidden="true" class="anchor-heading" href="#describetags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTags</h3>
<ul>
<li>description: Grants permission to describe one or more tags for an Amazon EC2 resource</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetrafficmirrorfilters"><a aria-hidden="true" class="anchor-heading" href="#describetrafficmirrorfilters"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTrafficMirrorFilters</h3>
<ul>
<li>description: Grants permission to describe one or more traffic mirror filters</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetrafficmirrorsessions"><a aria-hidden="true" class="anchor-heading" href="#describetrafficmirrorsessions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTrafficMirrorSessions</h3>
<ul>
<li>description: Grants permission to describe one or more traffic mirror sessions</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetrafficmirrortargets"><a aria-hidden="true" class="anchor-heading" href="#describetrafficmirrortargets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTrafficMirrorTargets</h3>
<ul>
<li>description: Grants permission to describe one or more traffic mirror targets</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetransitgatewayattachments"><a aria-hidden="true" class="anchor-heading" href="#describetransitgatewayattachments"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTransitGatewayAttachments</h3>
<ul>
<li>description: Grants permission to describe one or more attachments between resources and transit gateways</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetransitgatewaymulticastdomains"><a aria-hidden="true" class="anchor-heading" href="#describetransitgatewaymulticastdomains"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTransitGatewayMulticastDomains</h3>
<ul>
<li>description: Grants permission to describe one or more transit gateway multicast domains</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetransitgatewaypeeringattachments"><a aria-hidden="true" class="anchor-heading" href="#describetransitgatewaypeeringattachments"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTransitGatewayPeeringAttachments</h3>
<ul>
<li>description: Grants permission to describe one or more transit gateway peering attachments</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetransitgatewayroutetables"><a aria-hidden="true" class="anchor-heading" href="#describetransitgatewayroutetables"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTransitGatewayRouteTables</h3>
<ul>
<li>description: Grants permission to describe one or more transit gateway route tables</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetransitgatewayvpcattachments"><a aria-hidden="true" class="anchor-heading" href="#describetransitgatewayvpcattachments"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTransitGatewayVpcAttachments</h3>
<ul>
<li>description: Grants permission to describe one or more VPC attachments on a transit gateway</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetransitgateways"><a aria-hidden="true" class="anchor-heading" href="#describetransitgateways"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTransitGateways</h3>
<ul>
<li>description: Grants permission to describe one or more transit gateways</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describevolumeattribute"><a aria-hidden="true" class="anchor-heading" href="#describevolumeattribute"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeVolumeAttribute</h3>
<ul>
<li>description: Grants permission to describe an attribute of an EBS volume</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describevolumestatus"><a aria-hidden="true" class="anchor-heading" href="#describevolumestatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeVolumeStatus</h3>
<ul>
<li>description: Grants permission to describe the status of one or more EBS volumes</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describevolumes"><a aria-hidden="true" class="anchor-heading" href="#describevolumes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeVolumes</h3>
<ul>
<li>description: Grants permission to describe one or more EBS volumes</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describevolumesmodifications"><a aria-hidden="true" class="anchor-heading" href="#describevolumesmodifications"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeVolumesModifications</h3>
<ul>
<li>description: Grants permission to describe the current modification status of one or more EBS volumes</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describevpcattribute"><a aria-hidden="true" class="anchor-heading" href="#describevpcattribute"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeVpcAttribute</h3>
<ul>
<li>description: Grants permission to describe an attribute of a VPC</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describevpcclassiclink"><a aria-hidden="true" class="anchor-heading" href="#describevpcclassiclink"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeVpcClassicLink</h3>
<ul>
<li>description: Grants permission to describe the ClassicLink status of one or more VPCs</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describevpcclassiclinkdnssupport"><a aria-hidden="true" class="anchor-heading" href="#describevpcclassiclinkdnssupport"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeVpcClassicLinkDnsSupport</h3>
<ul>
<li>description: Grants permission to describe the ClassicLink DNS support status of one or more VPCs</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describevpcendpointconnectionnotifications"><a aria-hidden="true" class="anchor-heading" href="#describevpcendpointconnectionnotifications"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeVpcEndpointConnectionNotifications</h3>
<ul>
<li>description: Grants permission to describe the connection notifications for VPC endpoints and VPC endpoint services</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describevpcendpointconnections"><a aria-hidden="true" class="anchor-heading" href="#describevpcendpointconnections"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeVpcEndpointConnections</h3>
<ul>
<li>description: Grants permission to describe the VPC endpoint connections to your VPC endpoint services</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describevpcendpointserviceconfigurations"><a aria-hidden="true" class="anchor-heading" href="#describevpcendpointserviceconfigurations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeVpcEndpointServiceConfigurations</h3>
<ul>
<li>description: Grants permission to describe VPC endpoint service configurations (your services)</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describevpcendpointservicepermissions"><a aria-hidden="true" class="anchor-heading" href="#describevpcendpointservicepermissions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeVpcEndpointServicePermissions</h3>
<ul>
<li>description: Grants permission to describe the principals (service consumers) that are permitted to discover your VPC endpoint service</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describevpcendpointservices"><a aria-hidden="true" class="anchor-heading" href="#describevpcendpointservices"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeVpcEndpointServices</h3>
<ul>
<li>description: Grants permission to describe all supported AWS services that can be specified when creating a VPC endpoint</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describevpcendpoints"><a aria-hidden="true" class="anchor-heading" href="#describevpcendpoints"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeVpcEndpoints</h3>
<ul>
<li>description: Grants permission to describe one or more VPC endpoints</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describevpcpeeringconnections"><a aria-hidden="true" class="anchor-heading" href="#describevpcpeeringconnections"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeVpcPeeringConnections</h3>
<ul>
<li>description: Grants permission to describe one or more VPC peering connections</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describevpcs"><a aria-hidden="true" class="anchor-heading" href="#describevpcs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeVpcs</h3>
<ul>
<li>description: Grants permission to describe one or more VPCs</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describevpnconnections"><a aria-hidden="true" class="anchor-heading" href="#describevpnconnections"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeVpnConnections</h3>
<ul>
<li>description: Grants permission to describe one or more VPN connections</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describevpngateways"><a aria-hidden="true" class="anchor-heading" href="#describevpngateways"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeVpnGateways</h3>
<ul>
<li>description: Grants permission to describe one or more virtual private gateways</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="detachclassiclinkvpc"><a aria-hidden="true" class="anchor-heading" href="#detachclassiclinkvpc"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DetachClassicLinkVpc</h3>
<ul>
<li>description: Grants permission to unlink (detach) a linked EC2-Classic instance from a VPC</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:AvailabilityZone",
            "ec2:EbsOptimized",
            "ec2:InstanceProfile",
            "ec2:InstanceType",
            "ec2:PlacementGroup",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:RootDeviceType",
            "ec2:Tenancy"
        ],
        "dependent_actions": []
    },
    "vpc": {
        "resource_type": "vpc",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:Tenancy"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="detachinternetgateway"><a aria-hidden="true" class="anchor-heading" href="#detachinternetgateway"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DetachInternetGateway</h3>
<ul>
<li>description: Grants permission to detach an internet gateway from a VPC</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="detachnetworkinterface"><a aria-hidden="true" class="anchor-heading" href="#detachnetworkinterface"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DetachNetworkInterface</h3>
<ul>
<li>description: Grants permission to detach a network interface from an instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="detachvolume"><a aria-hidden="true" class="anchor-heading" href="#detachvolume"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DetachVolume</h3>
<ul>
<li>description: Grants permission to detach an EBS volume from an instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:AvailabilityZone",
            "ec2:EbsOptimized",
            "ec2:InstanceProfile",
            "ec2:InstanceType",
            "ec2:PlacementGroup",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:RootDeviceType",
            "ec2:Tenancy"
        ],
        "dependent_actions": []
    },
    "volume": {
        "resource_type": "volume",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:AvailabilityZone",
            "ec2:Encrypted",
            "ec2:ParentSnapshot",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:VolumeIops",
            "ec2:VolumeSize",
            "ec2:VolumeType"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="detachvpngateway"><a aria-hidden="true" class="anchor-heading" href="#detachvpngateway"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DetachVpnGateway</h3>
<ul>
<li>description: Grants permission to detach a virtual private gateway from a VPC</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disableebsencryptionbydefault"><a aria-hidden="true" class="anchor-heading" href="#disableebsencryptionbydefault"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisableEbsEncryptionByDefault</h3>
<ul>
<li>description: Grants permission to disable EBS encryption by default for your account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disablefastsnapshotrestores"><a aria-hidden="true" class="anchor-heading" href="#disablefastsnapshotrestores"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisableFastSnapshotRestores</h3>
<ul>
<li>description: Grants permission to disable fast snapshot restores for one or more snapshots in specified Availability Zones</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "snapshot": {
        "resource_type": "snapshot",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Owner",
            "ec2:ParentVolume",
            "ec2:Region",
            "ec2:AvailabilityZone",
            "ec2:SnapshotTime",
            "ec2:Encrypted",
            "ec2:VolumeSize",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disabletransitgatewayroutetablepropagation"><a aria-hidden="true" class="anchor-heading" href="#disabletransitgatewayroutetablepropagation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisableTransitGatewayRouteTablePropagation</h3>
<ul>
<li>description: Grants permission to disable a resource attachment from propagating routes to the specified propagation route table</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "transit-gateway-attachment": {
        "resource_type": "transit-gateway-attachment",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "transit-gateway-route-table": {
        "resource_type": "transit-gateway-route-table",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disablevgwroutepropagation"><a aria-hidden="true" class="anchor-heading" href="#disablevgwroutepropagation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisableVgwRoutePropagation</h3>
<ul>
<li>description: Grants permission to disable a virtual private gateway from propagating routes to a specified route table of a VPC</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disablevpcclassiclink"><a aria-hidden="true" class="anchor-heading" href="#disablevpcclassiclink"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisableVpcClassicLink</h3>
<ul>
<li>description: Grants permission to disable ClassicLink for a VPC</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vpc": {
        "resource_type": "vpc",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:Tenancy"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disablevpcclassiclinkdnssupport"><a aria-hidden="true" class="anchor-heading" href="#disablevpcclassiclinkdnssupport"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisableVpcClassicLinkDnsSupport</h3>
<ul>
<li>description: Grants permission to disable ClassicLink DNS support for a VPC</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociateaddress"><a aria-hidden="true" class="anchor-heading" href="#disassociateaddress"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateAddress</h3>
<ul>
<li>description: Grants permission to disassociate an Elastic IP address from an instance or network interface</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociateclientvpntargetnetwork"><a aria-hidden="true" class="anchor-heading" href="#disassociateclientvpntargetnetwork"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateClientVpnTargetNetwork</h3>
<ul>
<li>description: Grants permission to disassociate a target network from a Client VPN endpoint</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "client-vpn-endpoint": {
        "resource_type": "client-vpn-endpoint",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociateiaminstanceprofile"><a aria-hidden="true" class="anchor-heading" href="#disassociateiaminstanceprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateIamInstanceProfile</h3>
<ul>
<li>description: Grants permission to disassociate an IAM instance profile from a running or stopped instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:AvailabilityZone",
            "ec2:EbsOptimized",
            "ec2:InstanceProfile",
            "ec2:InstanceType",
            "ec2:PlacementGroup",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:RootDeviceType",
            "ec2:Tenancy"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociateroutetable"><a aria-hidden="true" class="anchor-heading" href="#disassociateroutetable"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateRouteTable</h3>
<ul>
<li>description: Grants permission to disassociate a subnet from a route table</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociatesubnetcidrblock"><a aria-hidden="true" class="anchor-heading" href="#disassociatesubnetcidrblock"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateSubnetCidrBlock</h3>
<ul>
<li>description: Grants permission to disassociate a CIDR block from a subnet</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociatetransitgatewaymulticastdomain"><a aria-hidden="true" class="anchor-heading" href="#disassociatetransitgatewaymulticastdomain"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateTransitGatewayMulticastDomain</h3>
<ul>
<li>description: Grants permission to disassociate one or more subnets from a transit gateway multicast domain</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "subnet": {
        "resource_type": "subnet",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "transit-gateway-attachment": {
        "resource_type": "transit-gateway-attachment",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "transit-gateway-multicast-domain": {
        "resource_type": "transit-gateway-multicast-domain",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociatetransitgatewayroutetable"><a aria-hidden="true" class="anchor-heading" href="#disassociatetransitgatewayroutetable"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateTransitGatewayRouteTable</h3>
<ul>
<li>description: Grants permission to disassociate a resource attachment from a transit gateway route table</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "transit-gateway-attachment": {
        "resource_type": "transit-gateway-attachment",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "transit-gateway-route-table": {
        "resource_type": "transit-gateway-route-table",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociatevpccidrblock"><a aria-hidden="true" class="anchor-heading" href="#disassociatevpccidrblock"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateVpcCidrBlock</h3>
<ul>
<li>description: Grants permission to disassociate a CIDR block from a VPC</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="enableebsencryptionbydefault"><a aria-hidden="true" class="anchor-heading" href="#enableebsencryptionbydefault"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EnableEbsEncryptionByDefault</h3>
<ul>
<li>description: Grants permission to enable EBS encryption by default for your account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="enablefastsnapshotrestores"><a aria-hidden="true" class="anchor-heading" href="#enablefastsnapshotrestores"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EnableFastSnapshotRestores</h3>
<ul>
<li>description: Grants permission to enable fast snapshot restores for one or more snapshots in specified Availability Zones</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "snapshot": {
        "resource_type": "snapshot",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Owner",
            "ec2:ParentVolume",
            "ec2:Region",
            "ec2:AvailabilityZone",
            "ec2:SnapshotTime",
            "ec2:Encrypted",
            "ec2:VolumeSize",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="enabletransitgatewayroutetablepropagation"><a aria-hidden="true" class="anchor-heading" href="#enabletransitgatewayroutetablepropagation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EnableTransitGatewayRouteTablePropagation</h3>
<ul>
<li>description: Grants permission to enable an attachment to propagate routes to a propagation route table</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "transit-gateway-attachment": {
        "resource_type": "transit-gateway-attachment",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "transit-gateway-route-table": {
        "resource_type": "transit-gateway-route-table",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="enablevgwroutepropagation"><a aria-hidden="true" class="anchor-heading" href="#enablevgwroutepropagation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EnableVgwRoutePropagation</h3>
<ul>
<li>description: Grants permission to enable a virtual private gateway to propagate routes to a VPC route table</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="enablevolumeio"><a aria-hidden="true" class="anchor-heading" href="#enablevolumeio"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EnableVolumeIO</h3>
<ul>
<li>description: Grants permission to enable I/O operations for a volume that had I/O operations disabled</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="enablevpcclassiclink"><a aria-hidden="true" class="anchor-heading" href="#enablevpcclassiclink"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EnableVpcClassicLink</h3>
<ul>
<li>description: Grants permission to enable a VPC for ClassicLink</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vpc": {
        "resource_type": "vpc",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:Tenancy"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="enablevpcclassiclinkdnssupport"><a aria-hidden="true" class="anchor-heading" href="#enablevpcclassiclinkdnssupport"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EnableVpcClassicLinkDnsSupport</h3>
<ul>
<li>description: Grants permission to enable a VPC to support DNS hostname resolution for ClassicLink</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="exportclientvpnclientcertificaterevocationlist"><a aria-hidden="true" class="anchor-heading" href="#exportclientvpnclientcertificaterevocationlist"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ExportClientVpnClientCertificateRevocationList</h3>
<ul>
<li>description: Grants permission to download the client certificate revocation list for a Client VPN endpoint</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="exportclientvpnclientconfiguration"><a aria-hidden="true" class="anchor-heading" href="#exportclientvpnclientconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ExportClientVpnClientConfiguration</h3>
<ul>
<li>description: Grants permission to download the contents of the Client VPN endpoint configuration file for a Client VPN endpoint</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="exportimage"><a aria-hidden="true" class="anchor-heading" href="#exportimage"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ExportImage</h3>
<ul>
<li>description: Grants permission to export an Amazon Machine Image (AMI) to a VM file</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="exporttransitgatewayroutes"><a aria-hidden="true" class="anchor-heading" href="#exporttransitgatewayroutes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ExportTransitGatewayRoutes</h3>
<ul>
<li>description: Grants permission to export routes from a transit gateway route table to an Amazon S3 bucket</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcapacityreservationusage"><a aria-hidden="true" class="anchor-heading" href="#getcapacityreservationusage"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCapacityReservationUsage</h3>
<ul>
<li>description: Grants permission to get usage information about a Capacity Reservation</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcoippoolusage"><a aria-hidden="true" class="anchor-heading" href="#getcoippoolusage"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCoipPoolUsage</h3>
<ul>
<li>description: Grants permission to describe the allocations from the specified customer-owned address pool</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getconsoleoutput"><a aria-hidden="true" class="anchor-heading" href="#getconsoleoutput"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetConsoleOutput</h3>
<ul>
<li>description: Grants permission to get the console output for an instance</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getconsolescreenshot"><a aria-hidden="true" class="anchor-heading" href="#getconsolescreenshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetConsoleScreenshot</h3>
<ul>
<li>description: Grants permission to retrieve a JPG-format screenshot of a running instance</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:AvailabilityZone",
            "ec2:EbsOptimized",
            "ec2:InstanceProfile",
            "ec2:InstanceType",
            "ec2:PlacementGroup",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:RootDeviceType",
            "ec2:Tenancy"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdefaultcreditspecification"><a aria-hidden="true" class="anchor-heading" href="#getdefaultcreditspecification"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDefaultCreditSpecification</h3>
<ul>
<li>description: Grants permission to get the default credit option for CPU usage of a burstable performance instance family</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getebsdefaultkmskeyid"><a aria-hidden="true" class="anchor-heading" href="#getebsdefaultkmskeyid"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetEbsDefaultKmsKeyId</h3>
<ul>
<li>description: Grants permission to get the ID of the default customer master key (CMK) for EBS encryption by default</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getebsencryptionbydefault"><a aria-hidden="true" class="anchor-heading" href="#getebsencryptionbydefault"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetEbsEncryptionByDefault</h3>
<ul>
<li>description: Grants permission to describe whether EBS encryption by default is enabled for your account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gethostreservationpurchasepreview"><a aria-hidden="true" class="anchor-heading" href="#gethostreservationpurchasepreview"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetHostReservationPurchasePreview</h3>
<ul>
<li>description: Grants permission to preview a reservation purchase with configurations that match those of a Dedicated Host</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getlaunchtemplatedata"><a aria-hidden="true" class="anchor-heading" href="#getlaunchtemplatedata"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetLaunchTemplateData</h3>
<ul>
<li>description: Grants permission to get the configuration data of the specified instance for use with a new launch template or launch template version</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmanagedprefixlistassociations"><a aria-hidden="true" class="anchor-heading" href="#getmanagedprefixlistassociations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetManagedPrefixListAssociations</h3>
<ul>
<li>description: Grants permission to get information about the resources that are associated with the specified managed prefix list</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmanagedprefixlistentries"><a aria-hidden="true" class="anchor-heading" href="#getmanagedprefixlistentries"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetManagedPrefixListEntries</h3>
<ul>
<li>description: Grants permission to get information about the entries for a specified managed prefix list</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getpassworddata"><a aria-hidden="true" class="anchor-heading" href="#getpassworddata"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetPasswordData</h3>
<ul>
<li>description: Grants permission to retrieve the encrypted administrator password for a running Windows instance</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getreservedinstancesexchangequote"><a aria-hidden="true" class="anchor-heading" href="#getreservedinstancesexchangequote"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetReservedInstancesExchangeQuote</h3>
<ul>
<li>description: Grants permission to return a quote and exchange information for exchanging one or more Convertible Reserved Instances for a new Convertible Reserved Instance</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gettransitgatewayattachmentpropagations"><a aria-hidden="true" class="anchor-heading" href="#gettransitgatewayattachmentpropagations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetTransitGatewayAttachmentPropagations</h3>
<ul>
<li>description: Grants permission to list the route tables to which a resource attachment propagates routes</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gettransitgatewaymulticastdomainassociations"><a aria-hidden="true" class="anchor-heading" href="#gettransitgatewaymulticastdomainassociations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetTransitGatewayMulticastDomainAssociations</h3>
<ul>
<li>description: Grants permission to get information about the associations for a transit gateway multicast domain</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gettransitgatewayprefixlistreferences"><a aria-hidden="true" class="anchor-heading" href="#gettransitgatewayprefixlistreferences"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetTransitGatewayPrefixListReferences</h3>
<ul>
<li>description: Grants permission to get information about prefix list references for a transit gateway route table</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gettransitgatewayroutetableassociations"><a aria-hidden="true" class="anchor-heading" href="#gettransitgatewayroutetableassociations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetTransitGatewayRouteTableAssociations</h3>
<ul>
<li>description: Grants permission to get information about associations for a transit gateway route table</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gettransitgatewayroutetablepropagations"><a aria-hidden="true" class="anchor-heading" href="#gettransitgatewayroutetablepropagations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetTransitGatewayRouteTablePropagations</h3>
<ul>
<li>description: Grants permission to get information about the route table propagations for a transit gateway route table</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="importclientvpnclientcertificaterevocationlist"><a aria-hidden="true" class="anchor-heading" href="#importclientvpnclientcertificaterevocationlist"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ImportClientVpnClientCertificateRevocationList</h3>
<ul>
<li>description: Grants permission to upload a client certificate revocation list to a Client VPN endpoint</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "client-vpn-endpoint": {
        "resource_type": "client-vpn-endpoint",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="importimage"><a aria-hidden="true" class="anchor-heading" href="#importimage"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ImportImage</h3>
<ul>
<li>description: Grants permission to import single or multi-volume disk images or EBS snapshots into an Amazon Machine Image (AMI)</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="importinstance"><a aria-hidden="true" class="anchor-heading" href="#importinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ImportInstance</h3>
<ul>
<li>description: Grants permission to create an import instance task using metadata from a disk image</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="importkeypair"><a aria-hidden="true" class="anchor-heading" href="#importkeypair"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ImportKeyPair</h3>
<ul>
<li>description: Grants permission to import a public key from an RSA key pair that was created with a third-party tool</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="importsnapshot"><a aria-hidden="true" class="anchor-heading" href="#importsnapshot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ImportSnapshot</h3>
<ul>
<li>description: Grants permission to import a disk into an EBS snapshot</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="importvolume"><a aria-hidden="true" class="anchor-heading" href="#importvolume"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ImportVolume</h3>
<ul>
<li>description: Grants permission to create an import volume task using metadata from a disk image</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifycapacityreservation"><a aria-hidden="true" class="anchor-heading" href="#modifycapacityreservation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyCapacityReservation</h3>
<ul>
<li>description: Grants permission to modify a Capacity Reservation's capacity and the conditions under which it is to be released</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "capacity-reservation": {
        "resource_type": "capacity-reservation",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyclientvpnendpoint"><a aria-hidden="true" class="anchor-heading" href="#modifyclientvpnendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyClientVpnEndpoint</h3>
<ul>
<li>description: Grants permission to modify a Client VPN endpoint</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "client-vpn-endpoint": {
        "resource_type": "client-vpn-endpoint",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifydefaultcreditspecification"><a aria-hidden="true" class="anchor-heading" href="#modifydefaultcreditspecification"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyDefaultCreditSpecification</h3>
<ul>
<li>description: Grants permission to change the account level default credit option for CPU usage of burstable performance instances</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyebsdefaultkmskeyid"><a aria-hidden="true" class="anchor-heading" href="#modifyebsdefaultkmskeyid"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyEbsDefaultKmsKeyId</h3>
<ul>
<li>description: Grants permission to change the default customer master key (CMK) for EBS encryption by default for your account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyfleet"><a aria-hidden="true" class="anchor-heading" href="#modifyfleet"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyFleet</h3>
<ul>
<li>description: Grants permission to modify an EC2 Fleet</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyfpgaimageattribute"><a aria-hidden="true" class="anchor-heading" href="#modifyfpgaimageattribute"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyFpgaImageAttribute</h3>
<ul>
<li>description: Grants permission to modify an attribute of an Amazon FPGA Image (AFI)</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyhosts"><a aria-hidden="true" class="anchor-heading" href="#modifyhosts"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyHosts</h3>
<ul>
<li>description: Grants permission to modify a Dedicated Host</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyidformat"><a aria-hidden="true" class="anchor-heading" href="#modifyidformat"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyIdFormat</h3>
<ul>
<li>description: Grants permission to modify the ID format for a resource</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyidentityidformat"><a aria-hidden="true" class="anchor-heading" href="#modifyidentityidformat"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyIdentityIdFormat</h3>
<ul>
<li>description: Grants permission to modify the ID format of a resource for a specific principal in your account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyimageattribute"><a aria-hidden="true" class="anchor-heading" href="#modifyimageattribute"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyImageAttribute</h3>
<ul>
<li>description: Grants permission to modify an attribute of an Amazon Machine Image (AMI)</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyinstanceattribute"><a aria-hidden="true" class="anchor-heading" href="#modifyinstanceattribute"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyInstanceAttribute</h3>
<ul>
<li>description: Grants permission to modify an attribute of an instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyinstancecapacityreservationattributes"><a aria-hidden="true" class="anchor-heading" href="#modifyinstancecapacityreservationattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyInstanceCapacityReservationAttributes</h3>
<ul>
<li>description: Grants permission to modify the Capacity Reservation settings for a stopped instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyinstancecreditspecification"><a aria-hidden="true" class="anchor-heading" href="#modifyinstancecreditspecification"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyInstanceCreditSpecification</h3>
<ul>
<li>description: Grants permission to modify the credit option for CPU usage on an instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyinstanceeventstarttime"><a aria-hidden="true" class="anchor-heading" href="#modifyinstanceeventstarttime"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyInstanceEventStartTime</h3>
<ul>
<li>description: Grants permission to modify the start time for a scheduled EC2 instance event</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": true,
        "condition_keys": [
            "ec2:Region"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyinstancemetadataoptions"><a aria-hidden="true" class="anchor-heading" href="#modifyinstancemetadataoptions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyInstanceMetadataOptions</h3>
<ul>
<li>description: Grants permission to modify the metadata options for an instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyinstanceplacement"><a aria-hidden="true" class="anchor-heading" href="#modifyinstanceplacement"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyInstancePlacement</h3>
<ul>
<li>description: Grants permission to modify the placement attributes for an instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifylaunchtemplate"><a aria-hidden="true" class="anchor-heading" href="#modifylaunchtemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyLaunchTemplate</h3>
<ul>
<li>description: Grants permission to modify a launch template</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "launch-template": {
        "resource_type": "launch-template",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifymanagedprefixlist"><a aria-hidden="true" class="anchor-heading" href="#modifymanagedprefixlist"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyManagedPrefixList</h3>
<ul>
<li>description: Grants permission to modify a managed prefix list</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "prefix-list": {
        "resource_type": "prefix-list",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifynetworkinterfaceattribute"><a aria-hidden="true" class="anchor-heading" href="#modifynetworkinterfaceattribute"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyNetworkInterfaceAttribute</h3>
<ul>
<li>description: Grants permission to modify an attribute of a network interface</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyreservedinstances"><a aria-hidden="true" class="anchor-heading" href="#modifyreservedinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyReservedInstances</h3>
<ul>
<li>description: Grants permission to modify attributes of one or more Reserved Instances</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifysnapshotattribute"><a aria-hidden="true" class="anchor-heading" href="#modifysnapshotattribute"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifySnapshotAttribute</h3>
<ul>
<li>description: Grants permission to add or remove permission settings for a snapshot</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "snapshot": {
        "resource_type": "snapshot",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Owner",
            "ec2:ParentVolume",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:SnapshotTime",
            "ec2:VolumeSize"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyspotfleetrequest"><a aria-hidden="true" class="anchor-heading" href="#modifyspotfleetrequest"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifySpotFleetRequest</h3>
<ul>
<li>description: Grants permission to modify a Spot Fleet request</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifysubnetattribute"><a aria-hidden="true" class="anchor-heading" href="#modifysubnetattribute"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifySubnetAttribute</h3>
<ul>
<li>description: Grants permission to modify an attribute of a subnet</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifytrafficmirrorfilternetworkservices"><a aria-hidden="true" class="anchor-heading" href="#modifytrafficmirrorfilternetworkservices"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyTrafficMirrorFilterNetworkServices</h3>
<ul>
<li>description: Grants permission to allow or restrict mirroring network services</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "traffic-mirror-filter": {
        "resource_type": "traffic-mirror-filter",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifytrafficmirrorfilterrule"><a aria-hidden="true" class="anchor-heading" href="#modifytrafficmirrorfilterrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyTrafficMirrorFilterRule</h3>
<ul>
<li>description: Grants permission to modify a traffic mirror rule</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "traffic-mirror-filter": {
        "resource_type": "traffic-mirror-filter",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "traffic-mirror-filter-rule": {
        "resource_type": "traffic-mirror-filter-rule",
        "required": true,
        "condition_keys": [
            "ec2:Region"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifytrafficmirrorsession"><a aria-hidden="true" class="anchor-heading" href="#modifytrafficmirrorsession"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyTrafficMirrorSession</h3>
<ul>
<li>description: Grants permission to modify a traffic mirror session</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "traffic-mirror-session": {
        "resource_type": "traffic-mirror-session",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "traffic-mirror-filter": {
        "resource_type": "traffic-mirror-filter",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "traffic-mirror-target": {
        "resource_type": "traffic-mirror-target",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifytransitgateway"><a aria-hidden="true" class="anchor-heading" href="#modifytransitgateway"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyTransitGateway</h3>
<ul>
<li>description: Grants permission to modify a transit gateway</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "transit-gateway": {
        "resource_type": "transit-gateway",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifytransitgatewayprefixlistreference"><a aria-hidden="true" class="anchor-heading" href="#modifytransitgatewayprefixlistreference"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyTransitGatewayPrefixListReference</h3>
<ul>
<li>description: Grants permission to modify a transit gateway prefix list reference</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "prefix-list": {
        "resource_type": "prefix-list",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "transit-gateway-route-table": {
        "resource_type": "transit-gateway-route-table",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifytransitgatewayvpcattachment"><a aria-hidden="true" class="anchor-heading" href="#modifytransitgatewayvpcattachment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyTransitGatewayVpcAttachment</h3>
<ul>
<li>description: Grants permission to modify a VPC attachment on a transit gateway</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "transit-gateway-attachment": {
        "resource_type": "transit-gateway-attachment",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "subnet": {
        "resource_type": "subnet",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyvolume"><a aria-hidden="true" class="anchor-heading" href="#modifyvolume"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyVolume</h3>
<ul>
<li>description: Grants permission to modify the parameters of an EBS volume</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyvolumeattribute"><a aria-hidden="true" class="anchor-heading" href="#modifyvolumeattribute"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyVolumeAttribute</h3>
<ul>
<li>description: Grants permission to modify an attribute of a volume</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyvpcattribute"><a aria-hidden="true" class="anchor-heading" href="#modifyvpcattribute"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyVpcAttribute</h3>
<ul>
<li>description: Grants permission to modify an attribute of a VPC</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyvpcendpoint"><a aria-hidden="true" class="anchor-heading" href="#modifyvpcendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyVpcEndpoint</h3>
<ul>
<li>description: Grants permission to modify an attribute of a VPC endpoint</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vpc-endpoint": {
        "resource_type": "vpc-endpoint",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "route-table": {
        "resource_type": "route-table",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "security-group": {
        "resource_type": "security-group",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "subnet": {
        "resource_type": "subnet",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyvpcendpointconnectionnotification"><a aria-hidden="true" class="anchor-heading" href="#modifyvpcendpointconnectionnotification"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyVpcEndpointConnectionNotification</h3>
<ul>
<li>description: Grants permission to modify a connection notification for a VPC endpoint or VPC endpoint service</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyvpcendpointserviceconfiguration"><a aria-hidden="true" class="anchor-heading" href="#modifyvpcendpointserviceconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyVpcEndpointServiceConfiguration</h3>
<ul>
<li>description: Grants permission to modify the attributes of a VPC endpoint service configuration</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vpc-endpoint-service": {
        "resource_type": "vpc-endpoint-service",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:VpceServicePrivateDnsName",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyvpcendpointservicepermissions"><a aria-hidden="true" class="anchor-heading" href="#modifyvpcendpointservicepermissions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyVpcEndpointServicePermissions</h3>
<ul>
<li>description: Grants permission to modify the permissions for a VPC endpoint service</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vpc-endpoint-service": {
        "resource_type": "vpc-endpoint-service",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyvpcpeeringconnectionoptions"><a aria-hidden="true" class="anchor-heading" href="#modifyvpcpeeringconnectionoptions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyVpcPeeringConnectionOptions</h3>
<ul>
<li>description: Grants permission to modify the VPC peering connection options on one side of a VPC peering connection</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyvpctenancy"><a aria-hidden="true" class="anchor-heading" href="#modifyvpctenancy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyVpcTenancy</h3>
<ul>
<li>description: Grants permission to modify the instance tenancy attribute of a VPC</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyvpnconnection"><a aria-hidden="true" class="anchor-heading" href="#modifyvpnconnection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyVpnConnection</h3>
<ul>
<li>description: Grants permission to modify the target gateway of a Site-to-Site VPN connection</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vpn-connection": {
        "resource_type": "vpn-connection",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:GatewayType"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyvpntunnelcertificate"><a aria-hidden="true" class="anchor-heading" href="#modifyvpntunnelcertificate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyVpnTunnelCertificate</h3>
<ul>
<li>description: Grants permission to modify the certificate for a Site-to-Site VPN connection</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyvpntunneloptions"><a aria-hidden="true" class="anchor-heading" href="#modifyvpntunneloptions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyVpnTunnelOptions</h3>
<ul>
<li>description: Grants permission to modify the options for a Site-to-Site VPN connection</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vpn-connection": {
        "resource_type": "vpn-connection",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:AuthenticationType",
            "ec2:DPDTimeoutSeconds",
            "ec2:IKEVersions",
            "ec2:InsideTunnelCidr",
            "ec2:Phase1DHGroupNumbers",
            "ec2:Phase2DHGroupNumbers",
            "ec2:Phase1EncryptionAlgorithms",
            "ec2:Phase2EncryptionAlgorithms",
            "ec2:Phase1IntegrityAlgorithms",
            "ec2:Phase2IntegrityAlgorithms",
            "ec2:Phase1LifetimeSeconds",
            "ec2:Phase2LifetimeSeconds",
            "ec2:PresharedKeys",
            "ec2:RekeyFuzzPercentage",
            "ec2:RekeyMarginTimeSeconds",
            "ec2:RoutingType"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="monitorinstances"><a aria-hidden="true" class="anchor-heading" href="#monitorinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>MonitorInstances</h3>
<ul>
<li>description: Grants permission to enable detailed monitoring for a running instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="moveaddresstovpc"><a aria-hidden="true" class="anchor-heading" href="#moveaddresstovpc"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>MoveAddressToVpc</h3>
<ul>
<li>description: Grants permission to move an Elastic IP address from the EC2-Classic platform to the EC2-VPC platform</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="provisionbyoipcidr"><a aria-hidden="true" class="anchor-heading" href="#provisionbyoipcidr"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ProvisionByoipCidr</h3>
<ul>
<li>description: Grants permission to provision an address range for use in AWS through bring your own IP addresses (BYOIP), and to create a corresponding address pool</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="purchasehostreservation"><a aria-hidden="true" class="anchor-heading" href="#purchasehostreservation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PurchaseHostReservation</h3>
<ul>
<li>description: Grants permission to purchase a reservation with configurations that match those of a Dedicated Host</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="purchasereservedinstancesoffering"><a aria-hidden="true" class="anchor-heading" href="#purchasereservedinstancesoffering"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PurchaseReservedInstancesOffering</h3>
<ul>
<li>description: Grants permission to purchase a Reserved Instance offering</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="purchasescheduledinstances"><a aria-hidden="true" class="anchor-heading" href="#purchasescheduledinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PurchaseScheduledInstances</h3>
<ul>
<li>description: Grants permission to purchase one or more Scheduled Instances with a specified schedule</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="rebootinstances"><a aria-hidden="true" class="anchor-heading" href="#rebootinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RebootInstances</h3>
<ul>
<li>description: Grants permission to request a reboot of one or more instances</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:AvailabilityZone",
            "ec2:EbsOptimized",
            "ec2:InstanceProfile",
            "ec2:InstanceType",
            "ec2:PlacementGroup",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:RootDeviceType",
            "ec2:Tenancy"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registerimage"><a aria-hidden="true" class="anchor-heading" href="#registerimage"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterImage</h3>
<ul>
<li>description: Grants permission to register an Amazon Machine Image (AMI)</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registerinstanceeventnotificationattributes"><a aria-hidden="true" class="anchor-heading" href="#registerinstanceeventnotificationattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterInstanceEventNotificationAttributes</h3>
<ul>
<li>description: Grants permission to add tags to the set of tags to include in notifications about scheduled events for your instances</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registertransitgatewaymulticastgroupmembers"><a aria-hidden="true" class="anchor-heading" href="#registertransitgatewaymulticastgroupmembers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterTransitGatewayMulticastGroupMembers</h3>
<ul>
<li>description: Grants permission to register one or more network interfaces as a member of a group IP address in a transit gateway multicast domain</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "network-interface": {
        "resource_type": "network-interface",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "transit-gateway-multicast-domain": {
        "resource_type": "transit-gateway-multicast-domain",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registertransitgatewaymulticastgroupsources"><a aria-hidden="true" class="anchor-heading" href="#registertransitgatewaymulticastgroupsources"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterTransitGatewayMulticastGroupSources</h3>
<ul>
<li>description: Grants permission to register one or more network interfaces as a source of a group IP address in a transit gateway multicast domain</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "network-interface": {
        "resource_type": "network-interface",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "transit-gateway-multicast-domain": {
        "resource_type": "transit-gateway-multicast-domain",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="rejecttransitgatewaypeeringattachment"><a aria-hidden="true" class="anchor-heading" href="#rejecttransitgatewaypeeringattachment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RejectTransitGatewayPeeringAttachment</h3>
<ul>
<li>description: Grants permission to reject a transit gateway peering attachment request</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "transit-gateway-attachment": {
        "resource_type": "transit-gateway-attachment",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="rejecttransitgatewayvpcattachment"><a aria-hidden="true" class="anchor-heading" href="#rejecttransitgatewayvpcattachment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RejectTransitGatewayVpcAttachment</h3>
<ul>
<li>description: Grants permission to reject a request to attach a VPC to a transit gateway</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "transit-gateway-attachment": {
        "resource_type": "transit-gateway-attachment",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="rejectvpcendpointconnections"><a aria-hidden="true" class="anchor-heading" href="#rejectvpcendpointconnections"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RejectVpcEndpointConnections</h3>
<ul>
<li>description: Grants permission to reject one or more VPC endpoint connection requests to a VPC endpoint service</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vpc-endpoint-service": {
        "resource_type": "vpc-endpoint-service",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="rejectvpcpeeringconnection"><a aria-hidden="true" class="anchor-heading" href="#rejectvpcpeeringconnection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RejectVpcPeeringConnection</h3>
<ul>
<li>description: Grants permission to reject a VPC peering connection request</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vpc-peering-connection": {
        "resource_type": "vpc-peering-connection",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:AccepterVpc",
            "ec2:Region",
            "ec2:RequesterVpc",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="releaseaddress"><a aria-hidden="true" class="anchor-heading" href="#releaseaddress"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ReleaseAddress</h3>
<ul>
<li>description: Grants permission to release an Elastic IP address</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="releasehosts"><a aria-hidden="true" class="anchor-heading" href="#releasehosts"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ReleaseHosts</h3>
<ul>
<li>description: Grants permission to release one or more On-Demand Dedicated Hosts</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="replaceiaminstanceprofileassociation"><a aria-hidden="true" class="anchor-heading" href="#replaceiaminstanceprofileassociation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ReplaceIamInstanceProfileAssociation</h3>
<ul>
<li>description: Grants permission to replace an IAM instance profile for an instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:AvailabilityZone",
            "ec2:EbsOptimized",
            "ec2:InstanceProfile",
            "ec2:InstanceType",
            "ec2:PlacementGroup",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:RootDeviceType",
            "ec2:Tenancy"
        ],
        "dependent_actions": [
            "iam:PassRole"
        ]
    }
}
</code></pre>
<h3 id="replacenetworkaclassociation"><a aria-hidden="true" class="anchor-heading" href="#replacenetworkaclassociation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ReplaceNetworkAclAssociation</h3>
<ul>
<li>description: Grants permission to change which network ACL a subnet is associated with</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="replacenetworkaclentry"><a aria-hidden="true" class="anchor-heading" href="#replacenetworkaclentry"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ReplaceNetworkAclEntry</h3>
<ul>
<li>description: Grants permission to replace an entry (rule) in a network ACL</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="replaceroute"><a aria-hidden="true" class="anchor-heading" href="#replaceroute"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ReplaceRoute</h3>
<ul>
<li>description: Grants permission to replace a route within a route table in a VPC</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "route-table": {
        "resource_type": "route-table",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:Vpc"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="replaceroutetableassociation"><a aria-hidden="true" class="anchor-heading" href="#replaceroutetableassociation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ReplaceRouteTableAssociation</h3>
<ul>
<li>description: Grants permission to change the route table that is associated with a subnet</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="replacetransitgatewayroute"><a aria-hidden="true" class="anchor-heading" href="#replacetransitgatewayroute"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ReplaceTransitGatewayRoute</h3>
<ul>
<li>description: Grants permission to replace a route in a transit gateway route table</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "transit-gateway-route-table": {
        "resource_type": "transit-gateway-route-table",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "transit-gateway-attachment": {
        "resource_type": "transit-gateway-attachment",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="reportinstancestatus"><a aria-hidden="true" class="anchor-heading" href="#reportinstancestatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ReportInstanceStatus</h3>
<ul>
<li>description: Grants permission to submit feedback about the status of an instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="requestspotfleet"><a aria-hidden="true" class="anchor-heading" href="#requestspotfleet"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RequestSpotFleet</h3>
<ul>
<li>description: Grants permission to create a Spot Fleet request</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="requestspotinstances"><a aria-hidden="true" class="anchor-heading" href="#requestspotinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RequestSpotInstances</h3>
<ul>
<li>description: Grants permission to create a Spot Instance request</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="resetebsdefaultkmskeyid"><a aria-hidden="true" class="anchor-heading" href="#resetebsdefaultkmskeyid"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ResetEbsDefaultKmsKeyId</h3>
<ul>
<li>description: Grants permission to reset the default customer master key (CMK) for EBS encryption for your account to use the AWS-managed CMK for EBS</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="resetfpgaimageattribute"><a aria-hidden="true" class="anchor-heading" href="#resetfpgaimageattribute"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ResetFpgaImageAttribute</h3>
<ul>
<li>description: Grants permission to reset an attribute of an Amazon FPGA Image (AFI) to its default value</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="resetimageattribute"><a aria-hidden="true" class="anchor-heading" href="#resetimageattribute"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ResetImageAttribute</h3>
<ul>
<li>description: Grants permission to reset an attribute of an Amazon Machine Image (AMI) to its default value</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="resetinstanceattribute"><a aria-hidden="true" class="anchor-heading" href="#resetinstanceattribute"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ResetInstanceAttribute</h3>
<ul>
<li>description: Grants permission to reset an attribute of an instance to its default value</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="resetnetworkinterfaceattribute"><a aria-hidden="true" class="anchor-heading" href="#resetnetworkinterfaceattribute"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ResetNetworkInterfaceAttribute</h3>
<ul>
<li>description: Grants permission to reset an attribute of a network interface</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="resetsnapshotattribute"><a aria-hidden="true" class="anchor-heading" href="#resetsnapshotattribute"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ResetSnapshotAttribute</h3>
<ul>
<li>description: Grants permission to reset permission settings for a snapshot</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="restoreaddresstoclassic"><a aria-hidden="true" class="anchor-heading" href="#restoreaddresstoclassic"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RestoreAddressToClassic</h3>
<ul>
<li>description: Grants permission to restore an Elastic IP address that was previously moved to the EC2-VPC platform back to the EC2-Classic platform</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="restoremanagedprefixlistversion"><a aria-hidden="true" class="anchor-heading" href="#restoremanagedprefixlistversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RestoreManagedPrefixListVersion</h3>
<ul>
<li>description: Grants permission to restore the entries from a previous version of a managed prefix list to a new version of the prefix list</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "prefix-list": {
        "resource_type": "prefix-list",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="revokeclientvpningress"><a aria-hidden="true" class="anchor-heading" href="#revokeclientvpningress"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RevokeClientVpnIngress</h3>
<ul>
<li>description: Grants permission to remove an inbound authorization rule from a Client VPN endpoint</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "client-vpn-endpoint": {
        "resource_type": "client-vpn-endpoint",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="revokesecuritygroupegress"><a aria-hidden="true" class="anchor-heading" href="#revokesecuritygroupegress"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RevokeSecurityGroupEgress</h3>
<ul>
<li>description: Grants permission to remove one or more outbound rules from a VPC security group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "security-group": {
        "resource_type": "security-group",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:Vpc"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="revokesecuritygroupingress"><a aria-hidden="true" class="anchor-heading" href="#revokesecuritygroupingress"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RevokeSecurityGroupIngress</h3>
<ul>
<li>description: Grants permission to remove one or more inbound rules from a security group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "security-group": {
        "resource_type": "security-group",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:Vpc"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="runinstances"><a aria-hidden="true" class="anchor-heading" href="#runinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RunInstances</h3>
<ul>
<li>description: Grants permission to launch one or more instances</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "image": {
        "resource_type": "image",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:ImageType",
            "ec2:IsLaunchTemplateResource",
            "ec2:LaunchTemplate",
            "ec2:Owner",
            "ec2:Public",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:RootDeviceType"
        ],
        "dependent_actions": []
    },
    "instance": {
        "resource_type": "instance",
        "required": true,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:AvailabilityZone",
            "ec2:EbsOptimized",
            "ec2:InstanceProfile",
            "ec2:InstanceType",
            "ec2:IsLaunchTemplateResource",
            "ec2:LaunchTemplate",
            "ec2:PlacementGroup",
            "ec2:Region",
            "ec2:RootDeviceType",
            "ec2:Tenancy",
            "ec2:MetadataHttpEndpoint",
            "ec2:MetadataHttpTokens",
            "ec2:MetadataHttpPutResponseHopLimit"
        ],
        "dependent_actions": []
    },
    "network-interface": {
        "resource_type": "network-interface",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/",
            "ec2:AvailabilityZone",
            "ec2:IsLaunchTemplateResource",
            "ec2:LaunchTemplate",
            "ec2:Region",
            "ec2:ResourceTag/",
            "ec2:Subnet",
            "ec2:Vpc",
            "ec2:AssociatePublicIpAddress"
        ],
        "dependent_actions": []
    },
    "security-group": {
        "resource_type": "security-group",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:IsLaunchTemplateResource",
            "ec2:LaunchTemplate",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:Vpc"
        ],
        "dependent_actions": []
    },
    "subnet": {
        "resource_type": "subnet",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:AvailabilityZone",
            "ec2:IsLaunchTemplateResource",
            "ec2:LaunchTemplate",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:Vpc"
        ],
        "dependent_actions": []
    },
    "volume": {
        "resource_type": "volume",
        "required": true,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:AvailabilityZone",
            "ec2:Encrypted",
            "ec2:IsLaunchTemplateResource",
            "ec2:LaunchTemplate",
            "ec2:ParentSnapshot",
            "ec2:Region",
            "ec2:VolumeIops",
            "ec2:VolumeSize",
            "ec2:VolumeType"
        ],
        "dependent_actions": []
    },
    "capacity-reservation": {
        "resource_type": "capacity-reservation",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    },
    "elastic-gpu": {
        "resource_type": "elastic-gpu",
        "required": false,
        "condition_keys": [
            "ec2:ElasticGpuType"
        ],
        "dependent_actions": []
    },
    "elastic-inference": {
        "resource_type": "elastic-inference",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "key-pair": {
        "resource_type": "key-pair",
        "required": false,
        "condition_keys": [
            "ec2:IsLaunchTemplateResource",
            "ec2:LaunchTemplate",
            "ec2:Region"
        ],
        "dependent_actions": []
    },
    "launch-template": {
        "resource_type": "launch-template",
        "required": false,
        "condition_keys": [
            "ec2:IsLaunchTemplateResource",
            "ec2:LaunchTemplate",
            "ec2:Region"
        ],
        "dependent_actions": []
    },
    "placement-group": {
        "resource_type": "placement-group",
        "required": false,
        "condition_keys": [
            "ec2:IsLaunchTemplateResource",
            "ec2:LaunchTemplate",
            "ec2:PlacementGroupStrategy",
            "ec2:Region"
        ],
        "dependent_actions": []
    },
    "snapshot": {
        "resource_type": "snapshot",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:IsLaunchTemplateResource",
            "ec2:LaunchTemplate",
            "ec2:Owner",
            "ec2:ParentVolume",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:SnapshotTime",
            "ec2:VolumeSize"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="runscheduledinstances"><a aria-hidden="true" class="anchor-heading" href="#runscheduledinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RunScheduledInstances</h3>
<ul>
<li>description: Grants permission to launch one or more Scheduled Instances</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="searchlocalgatewayroutes"><a aria-hidden="true" class="anchor-heading" href="#searchlocalgatewayroutes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SearchLocalGatewayRoutes</h3>
<ul>
<li>description: Grants permission to search for routes in a local gateway route table</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="searchtransitgatewaymulticastgroups"><a aria-hidden="true" class="anchor-heading" href="#searchtransitgatewaymulticastgroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SearchTransitGatewayMulticastGroups</h3>
<ul>
<li>description: Grants permission to search for groups, sources, and members in a transit gateway multicast domain</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="searchtransitgatewayroutes"><a aria-hidden="true" class="anchor-heading" href="#searchtransitgatewayroutes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SearchTransitGatewayRoutes</h3>
<ul>
<li>description: Grants permission to search for routes in a transit gateway route table</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="senddiagnosticinterrupt"><a aria-hidden="true" class="anchor-heading" href="#senddiagnosticinterrupt"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SendDiagnosticInterrupt</h3>
<ul>
<li>description: Grants permission to send a diagnostic interrupt to an Amazon EC2 instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:AvailabilityZone",
            "ec2:EbsOptimized",
            "ec2:InstanceProfile",
            "ec2:InstanceType",
            "ec2:PlacementGroup",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:RootDeviceType",
            "ec2:Tenancy"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startinstances"><a aria-hidden="true" class="anchor-heading" href="#startinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartInstances</h3>
<ul>
<li>description: Grants permission to start a stopped instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:AvailabilityZone",
            "ec2:EbsOptimized",
            "ec2:InstanceProfile",
            "ec2:InstanceType",
            "ec2:PlacementGroup",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:RootDeviceType",
            "ec2:Tenancy"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startvpcendpointserviceprivatednsverification"><a aria-hidden="true" class="anchor-heading" href="#startvpcendpointserviceprivatednsverification"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartVpcEndpointServicePrivateDnsVerification</h3>
<ul>
<li>description: Grants permission to start the private DNS verification process for a VPC endpoint service</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vpc-endpoint-service": {
        "resource_type": "vpc-endpoint-service",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopinstances"><a aria-hidden="true" class="anchor-heading" href="#stopinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopInstances</h3>
<ul>
<li>description: Grants permission to stop an Amazon EBS-backed instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:AvailabilityZone",
            "ec2:EbsOptimized",
            "ec2:InstanceProfile",
            "ec2:InstanceType",
            "ec2:PlacementGroup",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:RootDeviceType",
            "ec2:Tenancy"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="terminateclientvpnconnections"><a aria-hidden="true" class="anchor-heading" href="#terminateclientvpnconnections"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TerminateClientVpnConnections</h3>
<ul>
<li>description: Grants permission to terminate active Client VPN endpoint connections</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "client-vpn-endpoint": {
        "resource_type": "client-vpn-endpoint",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="terminateinstances"><a aria-hidden="true" class="anchor-heading" href="#terminateinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TerminateInstances</h3>
<ul>
<li>description: Grants permission to shut down one or more instances</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instance": {
        "resource_type": "instance",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:AvailabilityZone",
            "ec2:EbsOptimized",
            "ec2:InstanceProfile",
            "ec2:InstanceType",
            "ec2:PlacementGroup",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:RootDeviceType",
            "ec2:Tenancy"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="unassignipv6addresses"><a aria-hidden="true" class="anchor-heading" href="#unassignipv6addresses"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UnassignIpv6Addresses</h3>
<ul>
<li>description: Grants permission to unassign one or more IPv6 addresses from a network interface</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="unassignprivateipaddresses"><a aria-hidden="true" class="anchor-heading" href="#unassignprivateipaddresses"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UnassignPrivateIpAddresses</h3>
<ul>
<li>description: Grants permission to unassign one or more secondary private IP addresses from a network interface</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="unmonitorinstances"><a aria-hidden="true" class="anchor-heading" href="#unmonitorinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UnmonitorInstances</h3>
<ul>
<li>description: Grants permission to disable detailed monitoring for a running instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatesecuritygroupruledescriptionsegress"><a aria-hidden="true" class="anchor-heading" href="#updatesecuritygroupruledescriptionsegress"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateSecurityGroupRuleDescriptionsEgress</h3>
<ul>
<li>description: Grants permission to update descriptions for one or more outbound rules in a VPC security group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "security-group": {
        "resource_type": "security-group",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:Vpc"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatesecuritygroupruledescriptionsingress"><a aria-hidden="true" class="anchor-heading" href="#updatesecuritygroupruledescriptionsingress"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateSecurityGroupRuleDescriptionsIngress</h3>
<ul>
<li>description: Grants permission to update descriptions for one or more inbound rules in a security group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "security-group": {
        "resource_type": "security-group",
        "required": true,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "ec2:Region",
            "ec2:ResourceTag/${TagKey}",
            "ec2:Vpc"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="withdrawbyoipcidr"><a aria-hidden="true" class="anchor-heading" href="#withdrawbyoipcidr"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>WithdrawByoipCidr</h3>
<ul>
<li>description: Grants permission to stop advertising an address range that was provisioned for use in AWS through bring your own IP addresses (BYOIP)</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-EC2"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Single Sign-On.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Single Sign-On - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Single Sign-On.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Single Sign-On.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Single Sign-On.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Single Sign-On - undefined" />
  <meta name="twitter:title" content="Single Sign-On - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Single Sign-On</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Single Sign-On">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="single-sign-on"><a aria-hidden="true" class="anchor-heading" href="#single-sign-on"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Single Sign-On</h1>
<ul>
<li>prefix: sso</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="associatedirectory"><a aria-hidden="true" class="anchor-heading" href="#associatedirectory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateDirectory</h3>
<ul>
<li>description: Connect a directory to be used by AWS Single Sign-On</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="associateprofile"><a aria-hidden="true" class="anchor-heading" href="#associateprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateProfile</h3>
<ul>
<li>description: Create an association between a directory user or group and a profile</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="attachmanagedpolicytopermissionset"><a aria-hidden="true" class="anchor-heading" href="#attachmanagedpolicytopermissionset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AttachManagedPolicyToPermissionSet</h3>
<ul>
<li>description: Attaches an AWS managed policy to a permission set.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "PermissionSet": {
        "resource_type": "PermissionSet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createaccountassignment"><a aria-hidden="true" class="anchor-heading" href="#createaccountassignment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateAccountAssignment</h3>
<ul>
<li>description: Assigns access to a Principal for a specified AWS account using a specified permission set.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Account": {
        "resource_type": "Account",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "PermissionSet": {
        "resource_type": "PermissionSet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createapplicationinstance"><a aria-hidden="true" class="anchor-heading" href="#createapplicationinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateApplicationInstance</h3>
<ul>
<li>description: Add an application instance to AWS Single Sign-On</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createapplicationinstancecertificate"><a aria-hidden="true" class="anchor-heading" href="#createapplicationinstancecertificate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateApplicationInstanceCertificate</h3>
<ul>
<li>description: Add a new certificate for an application instance</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createmanagedapplicationinstance"><a aria-hidden="true" class="anchor-heading" href="#createmanagedapplicationinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateManagedApplicationInstance</h3>
<ul>
<li>description: Add a managed application instance to AWS Single Sign-On</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createpermissionset"><a aria-hidden="true" class="anchor-heading" href="#createpermissionset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreatePermissionSet</h3>
<ul>
<li>description: Create a permission set</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createprofile"><a aria-hidden="true" class="anchor-heading" href="#createprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateProfile</h3>
<ul>
<li>description: Create a profile for an application instance</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtrust"><a aria-hidden="true" class="anchor-heading" href="#createtrust"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTrust</h3>
<ul>
<li>description: Create a federation trust in a target account</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteaccountassignment"><a aria-hidden="true" class="anchor-heading" href="#deleteaccountassignment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAccountAssignment</h3>
<ul>
<li>description: Deletes a Principal's access from a specified AWS account using a specified permission set.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Account": {
        "resource_type": "Account",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "PermissionSet": {
        "resource_type": "PermissionSet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteapplicationinstance"><a aria-hidden="true" class="anchor-heading" href="#deleteapplicationinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteApplicationInstance</h3>
<ul>
<li>description: Delete the application instance</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteapplicationinstancecertificate"><a aria-hidden="true" class="anchor-heading" href="#deleteapplicationinstancecertificate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteApplicationInstanceCertificate</h3>
<ul>
<li>description: Delete an inactive or expired certificate from the application instance</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteinlinepolicyfrompermissionset"><a aria-hidden="true" class="anchor-heading" href="#deleteinlinepolicyfrompermissionset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteInlinePolicyFromPermissionSet</h3>
<ul>
<li>description: Deletes the inline policy from a specified permission set.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "PermissionSet": {
        "resource_type": "PermissionSet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletemanagedapplicationinstance"><a aria-hidden="true" class="anchor-heading" href="#deletemanagedapplicationinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteManagedApplicationInstance</h3>
<ul>
<li>description: Delete the managed application instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletepermissionset"><a aria-hidden="true" class="anchor-heading" href="#deletepermissionset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeletePermissionSet</h3>
<ul>
<li>description: Delete a permission set</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "PermissionSet": {
        "resource_type": "PermissionSet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletepermissionspolicy"><a aria-hidden="true" class="anchor-heading" href="#deletepermissionspolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeletePermissionsPolicy</h3>
<ul>
<li>description: Delete the permission policy associated with a permission set</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteprofile"><a aria-hidden="true" class="anchor-heading" href="#deleteprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteProfile</h3>
<ul>
<li>description: Delete the profile for an application instance</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeaccountassignmentcreationstatus"><a aria-hidden="true" class="anchor-heading" href="#describeaccountassignmentcreationstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAccountAssignmentCreationStatus</h3>
<ul>
<li>description: Describes the status of the assignment creation request.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeaccountassignmentdeletionstatus"><a aria-hidden="true" class="anchor-heading" href="#describeaccountassignmentdeletionstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAccountAssignmentDeletionStatus</h3>
<ul>
<li>description: Describes the status of an assignment deletion request.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describepermissionset"><a aria-hidden="true" class="anchor-heading" href="#describepermissionset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribePermissionSet</h3>
<ul>
<li>description: Describes a permission set</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "PermissionSet": {
        "resource_type": "PermissionSet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describepermissionsetprovisioningstatus"><a aria-hidden="true" class="anchor-heading" href="#describepermissionsetprovisioningstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribePermissionSetProvisioningStatus</h3>
<ul>
<li>description: Describes the status for the given Permission Set Provisioning request.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describepermissionspolicies"><a aria-hidden="true" class="anchor-heading" href="#describepermissionspolicies"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribePermissionsPolicies</h3>
<ul>
<li>description: Retrieve all the permissions policies associated with a permission set</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeregisteredregions"><a aria-hidden="true" class="anchor-heading" href="#describeregisteredregions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeRegisteredRegions</h3>
<ul>
<li>description: Obtains the regions where your organization has enabled AWS Single Sign-on</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="detachmanagedpolicyfrompermissionset"><a aria-hidden="true" class="anchor-heading" href="#detachmanagedpolicyfrompermissionset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DetachManagedPolicyFromPermissionSet</h3>
<ul>
<li>description: Detaches the attached AWS managed policy from the specified permission set.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "PermissionSet": {
        "resource_type": "PermissionSet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociatedirectory"><a aria-hidden="true" class="anchor-heading" href="#disassociatedirectory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateDirectory</h3>
<ul>
<li>description: Disassociate a directory to be used by AWS Single Sign-On</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociateprofile"><a aria-hidden="true" class="anchor-heading" href="#disassociateprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateProfile</h3>
<ul>
<li>description: Disassociate a directory user or group from a profile</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getapplicationinstance"><a aria-hidden="true" class="anchor-heading" href="#getapplicationinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetApplicationInstance</h3>
<ul>
<li>description: Retrieve details for an application instance</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getapplicationtemplate"><a aria-hidden="true" class="anchor-heading" href="#getapplicationtemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetApplicationTemplate</h3>
<ul>
<li>description: Retrieve application template details</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getinlinepolicyforpermissionset"><a aria-hidden="true" class="anchor-heading" href="#getinlinepolicyforpermissionset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetInlinePolicyForPermissionSet</h3>
<ul>
<li>description: Obtains the inline policy assigned to the permission set.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "PermissionSet": {
        "resource_type": "PermissionSet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmanagedapplicationinstance"><a aria-hidden="true" class="anchor-heading" href="#getmanagedapplicationinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetManagedApplicationInstance</h3>
<ul>
<li>description: Retrieve details for an application instance</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmfadevicemanagementfordirectory"><a aria-hidden="true" class="anchor-heading" href="#getmfadevicemanagementfordirectory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetMfaDeviceManagementForDirectory</h3>
<ul>
<li>description: Retrieve Mfa Device Management settings for the directory</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getpermissionset"><a aria-hidden="true" class="anchor-heading" href="#getpermissionset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetPermissionSet</h3>
<ul>
<li>description: Retrieve details of a permission set</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getpermissionspolicy"><a aria-hidden="true" class="anchor-heading" href="#getpermissionspolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetPermissionsPolicy</h3>
<ul>
<li>description: Retrieve all permission policies associated with a permission set</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": [
            "sso:DescribePermissionsPolicies"
        ]
    }
}
</code></pre>
<h3 id="getprofile"><a aria-hidden="true" class="anchor-heading" href="#getprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetProfile</h3>
<ul>
<li>description: Retrieve a profile for an application instance</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getssostatus"><a aria-hidden="true" class="anchor-heading" href="#getssostatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSSOStatus</h3>
<ul>
<li>description: Check if AWS Single Sign-On is enabled</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsharedssoconfiguration"><a aria-hidden="true" class="anchor-heading" href="#getsharedssoconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSharedSsoConfiguration</h3>
<ul>
<li>description: Retrieve shared configuration for the current SSO instance</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getssoconfiguration"><a aria-hidden="true" class="anchor-heading" href="#getssoconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSsoConfiguration</h3>
<ul>
<li>description: Retrieve configuration for the current SSO instance</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gettrust"><a aria-hidden="true" class="anchor-heading" href="#gettrust"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetTrust</h3>
<ul>
<li>description: Retrieve the federation trust in a target account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="importapplicationinstanceserviceprovidermetadata"><a aria-hidden="true" class="anchor-heading" href="#importapplicationinstanceserviceprovidermetadata"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ImportApplicationInstanceServiceProviderMetadata</h3>
<ul>
<li>description: Update the application instance by uploading an application SAML metadata file provided by the service provider</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listaccountassignmentcreationstatus"><a aria-hidden="true" class="anchor-heading" href="#listaccountassignmentcreationstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAccountAssignmentCreationStatus</h3>
<ul>
<li>description: Lists the status of the AWS account assignment creation requests for a specified SSO instance.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listaccountassignmentdeletionstatus"><a aria-hidden="true" class="anchor-heading" href="#listaccountassignmentdeletionstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAccountAssignmentDeletionStatus</h3>
<ul>
<li>description: Lists the status of the AWS account assignment deletion requests for a specified SSO instance.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listaccountassignments"><a aria-hidden="true" class="anchor-heading" href="#listaccountassignments"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAccountAssignments</h3>
<ul>
<li>description: Lists the assignee of the specified AWS account with the specified permission set.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Account": {
        "resource_type": "Account",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "PermissionSet": {
        "resource_type": "PermissionSet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listaccountsforprovisionedpermissionset"><a aria-hidden="true" class="anchor-heading" href="#listaccountsforprovisionedpermissionset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAccountsForProvisionedPermissionSet</h3>
<ul>
<li>description: Lists all the AWS accounts where the specified permission set is provisioned.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "PermissionSet": {
        "resource_type": "PermissionSet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listapplicationinstancecertificates"><a aria-hidden="true" class="anchor-heading" href="#listapplicationinstancecertificates"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListApplicationInstanceCertificates</h3>
<ul>
<li>description: Retrieve all of the certificates for a given application instance</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listapplicationinstances"><a aria-hidden="true" class="anchor-heading" href="#listapplicationinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListApplicationInstances</h3>
<ul>
<li>description: Retrieve all application instances</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": [
            "sso:GetApplicationInstance"
        ]
    }
}
</code></pre>
<h3 id="listapplicationtemplates"><a aria-hidden="true" class="anchor-heading" href="#listapplicationtemplates"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListApplicationTemplates</h3>
<ul>
<li>description: Retrieve all supported application templates</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": [
            "sso:GetApplicationTemplate"
        ]
    }
}
</code></pre>
<h3 id="listapplications"><a aria-hidden="true" class="anchor-heading" href="#listapplications"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListApplications</h3>
<ul>
<li>description: Retrieve all supported applications</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdirectoryassociations"><a aria-hidden="true" class="anchor-heading" href="#listdirectoryassociations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDirectoryAssociations</h3>
<ul>
<li>description: Retrieve details about the directory connected to AWS Single Sign-On</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listinstances"><a aria-hidden="true" class="anchor-heading" href="#listinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListInstances</h3>
<ul>
<li>description: Lists the SSO Instances that the caller has access to.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listmanagedpoliciesinpermissionset"><a aria-hidden="true" class="anchor-heading" href="#listmanagedpoliciesinpermissionset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListManagedPoliciesInPermissionSet</h3>
<ul>
<li>description: Lists the AWS managed policies that are attached to a specified permission set.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "PermissionSet": {
        "resource_type": "PermissionSet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listpermissionsetprovisioningstatus"><a aria-hidden="true" class="anchor-heading" href="#listpermissionsetprovisioningstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPermissionSetProvisioningStatus</h3>
<ul>
<li>description: Lists the status of the Permission Set Provisioning requests for a specified SSO instance.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listpermissionsets"><a aria-hidden="true" class="anchor-heading" href="#listpermissionsets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPermissionSets</h3>
<ul>
<li>description: Retrieve all permission sets</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listpermissionsetsprovisionedtoaccount"><a aria-hidden="true" class="anchor-heading" href="#listpermissionsetsprovisionedtoaccount"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPermissionSetsProvisionedToAccount</h3>
<ul>
<li>description: Lists all the permission sets that are provisioned to a specified AWS account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Account": {
        "resource_type": "Account",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listprofileassociations"><a aria-hidden="true" class="anchor-heading" href="#listprofileassociations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListProfileAssociations</h3>
<ul>
<li>description: Retrieve the directory user or group associated with the profile</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listprofiles"><a aria-hidden="true" class="anchor-heading" href="#listprofiles"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListProfiles</h3>
<ul>
<li>description: Retrieve all profiles for an application instance</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": [
            "sso:GetProfile"
        ]
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Lists the tags that are attached to a specified resource.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "PermissionSet": {
        "resource_type": "PermissionSet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="provisionpermissionset"><a aria-hidden="true" class="anchor-heading" href="#provisionpermissionset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ProvisionPermissionSet</h3>
<ul>
<li>description: The process by which a specified permission set is provisioned to the specified target.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Account": {
        "resource_type": "Account",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "PermissionSet": {
        "resource_type": "PermissionSet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putinlinepolicytopermissionset"><a aria-hidden="true" class="anchor-heading" href="#putinlinepolicytopermissionset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutInlinePolicyToPermissionSet</h3>
<ul>
<li>description: Attaches an IAM inline policy to a permission set.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "PermissionSet": {
        "resource_type": "PermissionSet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putmfadevicemanagementfordirectory"><a aria-hidden="true" class="anchor-heading" href="#putmfadevicemanagementfordirectory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutMfaDeviceManagementForDirectory</h3>
<ul>
<li>description: Put Mfa Device Management settings for the directory</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putpermissionspolicy"><a aria-hidden="true" class="anchor-heading" href="#putpermissionspolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutPermissionsPolicy</h3>
<ul>
<li>description: Add a policy to a permission set</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startsso"><a aria-hidden="true" class="anchor-heading" href="#startsso"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartSSO</h3>
<ul>
<li>description: Initialize AWS Single Sign-On</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Associates a set of tags with a specified resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "PermissionSet": {
        "resource_type": "PermissionSet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Disassociates a set of tags from a specified resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "PermissionSet": {
        "resource_type": "PermissionSet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateapplicationinstanceactivecertificate"><a aria-hidden="true" class="anchor-heading" href="#updateapplicationinstanceactivecertificate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateApplicationInstanceActiveCertificate</h3>
<ul>
<li>description: Set a certificate as the active one for this application instance</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateapplicationinstancedisplaydata"><a aria-hidden="true" class="anchor-heading" href="#updateapplicationinstancedisplaydata"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateApplicationInstanceDisplayData</h3>
<ul>
<li>description: Update display data of an application instance</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateapplicationinstanceresponseconfiguration"><a aria-hidden="true" class="anchor-heading" href="#updateapplicationinstanceresponseconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateApplicationInstanceResponseConfiguration</h3>
<ul>
<li>description: Update federation response configuration for the application instance</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateapplicationinstanceresponseschemaconfiguration"><a aria-hidden="true" class="anchor-heading" href="#updateapplicationinstanceresponseschemaconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateApplicationInstanceResponseSchemaConfiguration</h3>
<ul>
<li>description: Update federation response schema configuration for the application instance</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateapplicationinstancesecurityconfiguration"><a aria-hidden="true" class="anchor-heading" href="#updateapplicationinstancesecurityconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateApplicationInstanceSecurityConfiguration</h3>
<ul>
<li>description: Update security details for the application instance</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateapplicationinstanceserviceproviderconfiguration"><a aria-hidden="true" class="anchor-heading" href="#updateapplicationinstanceserviceproviderconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateApplicationInstanceServiceProviderConfiguration</h3>
<ul>
<li>description: Update service provider related configuration for the application instance</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateapplicationinstancestatus"><a aria-hidden="true" class="anchor-heading" href="#updateapplicationinstancestatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateApplicationInstanceStatus</h3>
<ul>
<li>description: Update the status of an application instance</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatedirectoryassociation"><a aria-hidden="true" class="anchor-heading" href="#updatedirectoryassociation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateDirectoryAssociation</h3>
<ul>
<li>description: Update the user attribute mappings for your connected directory</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatemanagedapplicationinstancestatus"><a aria-hidden="true" class="anchor-heading" href="#updatemanagedapplicationinstancestatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateManagedApplicationInstanceStatus</h3>
<ul>
<li>description: Update the status of a managed application instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatepermissionset"><a aria-hidden="true" class="anchor-heading" href="#updatepermissionset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdatePermissionSet</h3>
<ul>
<li>description: Update the permission set.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Instance": {
        "resource_type": "Instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "PermissionSet": {
        "resource_type": "PermissionSet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateprofile"><a aria-hidden="true" class="anchor-heading" href="#updateprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateProfile</h3>
<ul>
<li>description: Update the profile for an application instance</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatessoconfiguration"><a aria-hidden="true" class="anchor-heading" href="#updatessoconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateSSOConfiguration</h3>
<ul>
<li>description: Update the configuration for the current SSO instance</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatetrust"><a aria-hidden="true" class="anchor-heading" href="#updatetrust"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateTrust</h3>
<ul>
<li>description: Update the federation trust in a target account</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Single Sign-On"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-OpsWorks.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>OpsWorks - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-OpsWorks.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-OpsWorks.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-OpsWorks.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="OpsWorks - undefined" />
  <meta name="twitter:title" content="OpsWorks - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">OpsWorks</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="OpsWorks">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="opsworks"><a aria-hidden="true" class="anchor-heading" href="#opsworks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>OpsWorks</h1>
<ul>
<li>prefix: opsworks</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="assigninstance"><a aria-hidden="true" class="anchor-heading" href="#assigninstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssignInstance</h3>
<ul>
<li>description: Assign a registered instance to a layer</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="assignvolume"><a aria-hidden="true" class="anchor-heading" href="#assignvolume"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssignVolume</h3>
<ul>
<li>description: Assigns one of the stack's registered Amazon EBS volumes to a specified instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="associateelasticip"><a aria-hidden="true" class="anchor-heading" href="#associateelasticip"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateElasticIp</h3>
<ul>
<li>description: Associates one of the stack's registered Elastic IP addresses with a specified instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="attachelasticloadbalancer"><a aria-hidden="true" class="anchor-heading" href="#attachelasticloadbalancer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AttachElasticLoadBalancer</h3>
<ul>
<li>description: Attaches an Elastic Load Balancing load balancer to a specified layer</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="clonestack"><a aria-hidden="true" class="anchor-heading" href="#clonestack"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CloneStack</h3>
<ul>
<li>description: Creates a clone of a specified stack</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createapp"><a aria-hidden="true" class="anchor-heading" href="#createapp"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateApp</h3>
<ul>
<li>description: Creates an app for a specified stack</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdeployment"><a aria-hidden="true" class="anchor-heading" href="#createdeployment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDeployment</h3>
<ul>
<li>description: Runs deployment or stack commands</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createinstance"><a aria-hidden="true" class="anchor-heading" href="#createinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateInstance</h3>
<ul>
<li>description: Creates an instance in a specified stack</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createlayer"><a aria-hidden="true" class="anchor-heading" href="#createlayer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateLayer</h3>
<ul>
<li>description: Creates a layer</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createstack"><a aria-hidden="true" class="anchor-heading" href="#createstack"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateStack</h3>
<ul>
<li>description: Creates a new stack</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createuserprofile"><a aria-hidden="true" class="anchor-heading" href="#createuserprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateUserProfile</h3>
<ul>
<li>description: Creates a new user profile</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteapp"><a aria-hidden="true" class="anchor-heading" href="#deleteapp"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteApp</h3>
<ul>
<li>description: Deletes a specified app</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteinstance"><a aria-hidden="true" class="anchor-heading" href="#deleteinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteInstance</h3>
<ul>
<li>description: Deletes a specified instance, which terminates the associated Amazon EC2 instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletelayer"><a aria-hidden="true" class="anchor-heading" href="#deletelayer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteLayer</h3>
<ul>
<li>description: Deletes a specified layer</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletestack"><a aria-hidden="true" class="anchor-heading" href="#deletestack"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteStack</h3>
<ul>
<li>description: Deletes a specified stack</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteuserprofile"><a aria-hidden="true" class="anchor-heading" href="#deleteuserprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteUserProfile</h3>
<ul>
<li>description: Deletes a user profile</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deregisterecscluster"><a aria-hidden="true" class="anchor-heading" href="#deregisterecscluster"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeregisterEcsCluster</h3>
<ul>
<li>description: Deletes a user profile</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deregisterelasticip"><a aria-hidden="true" class="anchor-heading" href="#deregisterelasticip"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeregisterElasticIp</h3>
<ul>
<li>description: Deregisters a specified Elastic IP address</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deregisterinstance"><a aria-hidden="true" class="anchor-heading" href="#deregisterinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeregisterInstance</h3>
<ul>
<li>description: Deregister a registered Amazon EC2 or on-premises instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deregisterrdsdbinstance"><a aria-hidden="true" class="anchor-heading" href="#deregisterrdsdbinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeregisterRdsDbInstance</h3>
<ul>
<li>description: Deregisters an Amazon RDS instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deregistervolume"><a aria-hidden="true" class="anchor-heading" href="#deregistervolume"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeregisterVolume</h3>
<ul>
<li>description: Deregisters an Amazon EBS volume</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeagentversions"><a aria-hidden="true" class="anchor-heading" href="#describeagentversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAgentVersions</h3>
<ul>
<li>description: Describes the available AWS OpsWorks agent versions</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeapps"><a aria-hidden="true" class="anchor-heading" href="#describeapps"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeApps</h3>
<ul>
<li>description: Requests a description of a specified set of apps</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecommands"><a aria-hidden="true" class="anchor-heading" href="#describecommands"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeCommands</h3>
<ul>
<li>description: Describes the results of specified commands</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedeployments"><a aria-hidden="true" class="anchor-heading" href="#describedeployments"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDeployments</h3>
<ul>
<li>description: Requests a description of a specified set of deployments</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeecsclusters"><a aria-hidden="true" class="anchor-heading" href="#describeecsclusters"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEcsClusters</h3>
<ul>
<li>description: Describes Amazon ECS clusters that are registered with a stack</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeelasticips"><a aria-hidden="true" class="anchor-heading" href="#describeelasticips"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeElasticIps</h3>
<ul>
<li>description: Describes Elastic IP addresses</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeelasticloadbalancers"><a aria-hidden="true" class="anchor-heading" href="#describeelasticloadbalancers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeElasticLoadBalancers</h3>
<ul>
<li>description: Describes a stack's Elastic Load Balancing instances</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeinstances"><a aria-hidden="true" class="anchor-heading" href="#describeinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeInstances</h3>
<ul>
<li>description: Requests a description of a set of instances</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describelayers"><a aria-hidden="true" class="anchor-heading" href="#describelayers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeLayers</h3>
<ul>
<li>description: Requests a description of one or more layers in a specified stack</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeloadbasedautoscaling"><a aria-hidden="true" class="anchor-heading" href="#describeloadbasedautoscaling"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeLoadBasedAutoScaling</h3>
<ul>
<li>description: Describes load-based auto scaling configurations for specified layers</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describemyuserprofile"><a aria-hidden="true" class="anchor-heading" href="#describemyuserprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeMyUserProfile</h3>
<ul>
<li>description: Describes a user's SSH information</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describepermissions"><a aria-hidden="true" class="anchor-heading" href="#describepermissions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribePermissions</h3>
<ul>
<li>description: Describes the permissions for a specified stack</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeraidarrays"><a aria-hidden="true" class="anchor-heading" href="#describeraidarrays"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeRaidArrays</h3>
<ul>
<li>description: Describe an instance's RAID arrays</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describerdsdbinstances"><a aria-hidden="true" class="anchor-heading" href="#describerdsdbinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeRdsDbInstances</h3>
<ul>
<li>description: Describes Amazon RDS instances</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeserviceerrors"><a aria-hidden="true" class="anchor-heading" href="#describeserviceerrors"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeServiceErrors</h3>
<ul>
<li>description: Describes AWS OpsWorks service errors</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describestackprovisioningparameters"><a aria-hidden="true" class="anchor-heading" href="#describestackprovisioningparameters"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeStackProvisioningParameters</h3>
<ul>
<li>description: Requests a description of a stack's provisioning parameters</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describestacksummary"><a aria-hidden="true" class="anchor-heading" href="#describestacksummary"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeStackSummary</h3>
<ul>
<li>description: Describes the number of layers and apps in a specified stack, and the number of instances in each state, such as running_setup or online</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describestacks"><a aria-hidden="true" class="anchor-heading" href="#describestacks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeStacks</h3>
<ul>
<li>description: Requests a description of one or more stacks</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetimebasedautoscaling"><a aria-hidden="true" class="anchor-heading" href="#describetimebasedautoscaling"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTimeBasedAutoScaling</h3>
<ul>
<li>description: Describes time-based auto scaling configurations for specified instances</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeuserprofiles"><a aria-hidden="true" class="anchor-heading" href="#describeuserprofiles"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeUserProfiles</h3>
<ul>
<li>description: Describe specified users</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describevolumes"><a aria-hidden="true" class="anchor-heading" href="#describevolumes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeVolumes</h3>
<ul>
<li>description: Describes an instance's Amazon EBS volumes</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="detachelasticloadbalancer"><a aria-hidden="true" class="anchor-heading" href="#detachelasticloadbalancer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DetachElasticLoadBalancer</h3>
<ul>
<li>description: Detaches a specified Elastic Load Balancing instance from its layer</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociateelasticip"><a aria-hidden="true" class="anchor-heading" href="#disassociateelasticip"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateElasticIp</h3>
<ul>
<li>description: Disassociates an Elastic IP address from its instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gethostnamesuggestion"><a aria-hidden="true" class="anchor-heading" href="#gethostnamesuggestion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetHostnameSuggestion</h3>
<ul>
<li>description: Gets a generated host name for the specified layer, based on the current host name theme</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="grantaccess"><a aria-hidden="true" class="anchor-heading" href="#grantaccess"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GrantAccess</h3>
<ul>
<li>description: Grants RDP access to a Windows instance for a specified time period</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtags"><a aria-hidden="true" class="anchor-heading" href="#listtags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTags</h3>
<ul>
<li>description: Returns a list of tags that are applied to the specified stack or layer</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="rebootinstance"><a aria-hidden="true" class="anchor-heading" href="#rebootinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RebootInstance</h3>
<ul>
<li>description: Reboots a specified instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registerecscluster"><a aria-hidden="true" class="anchor-heading" href="#registerecscluster"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterEcsCluster</h3>
<ul>
<li>description: Registers a specified Amazon ECS cluster with a stack</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registerelasticip"><a aria-hidden="true" class="anchor-heading" href="#registerelasticip"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterElasticIp</h3>
<ul>
<li>description: Registers an Elastic IP address with a specified stack</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registerinstance"><a aria-hidden="true" class="anchor-heading" href="#registerinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterInstance</h3>
<ul>
<li>description: Registers instances with a specified stack that were created outside of AWS OpsWorks</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registerrdsdbinstance"><a aria-hidden="true" class="anchor-heading" href="#registerrdsdbinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterRdsDbInstance</h3>
<ul>
<li>description: Registers an Amazon RDS instance with a stack</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registervolume"><a aria-hidden="true" class="anchor-heading" href="#registervolume"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterVolume</h3>
<ul>
<li>description: Registers an Amazon EBS volume with a specified stack</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setloadbasedautoscaling"><a aria-hidden="true" class="anchor-heading" href="#setloadbasedautoscaling"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetLoadBasedAutoScaling</h3>
<ul>
<li>description: Specify the load-based auto scaling configuration for a specified layer</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setpermission"><a aria-hidden="true" class="anchor-heading" href="#setpermission"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetPermission</h3>
<ul>
<li>description: Specifies a user's permissions</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="settimebasedautoscaling"><a aria-hidden="true" class="anchor-heading" href="#settimebasedautoscaling"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetTimeBasedAutoScaling</h3>
<ul>
<li>description: Specify the time-based auto scaling configuration for a specified instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startinstance"><a aria-hidden="true" class="anchor-heading" href="#startinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartInstance</h3>
<ul>
<li>description: Starts a specified instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startstack"><a aria-hidden="true" class="anchor-heading" href="#startstack"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartStack</h3>
<ul>
<li>description: Starts a stack's instances</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopinstance"><a aria-hidden="true" class="anchor-heading" href="#stopinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopInstance</h3>
<ul>
<li>description: Stops a specified instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopstack"><a aria-hidden="true" class="anchor-heading" href="#stopstack"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopStack</h3>
<ul>
<li>description: Stops a specified stack</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Apply tags to a specified stack or layer</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="unassigninstance"><a aria-hidden="true" class="anchor-heading" href="#unassigninstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UnassignInstance</h3>
<ul>
<li>description: Unassigns a registered instance from all of it's layers</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="unassignvolume"><a aria-hidden="true" class="anchor-heading" href="#unassignvolume"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UnassignVolume</h3>
<ul>
<li>description: Unassigns an assigned Amazon EBS volume</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Removes tags from a specified stack or layer</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateapp"><a aria-hidden="true" class="anchor-heading" href="#updateapp"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateApp</h3>
<ul>
<li>description: Updates a specified app</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateelasticip"><a aria-hidden="true" class="anchor-heading" href="#updateelasticip"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateElasticIp</h3>
<ul>
<li>description: Updates a registered Elastic IP address's name</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateinstance"><a aria-hidden="true" class="anchor-heading" href="#updateinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateInstance</h3>
<ul>
<li>description: Updates a specified instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatelayer"><a aria-hidden="true" class="anchor-heading" href="#updatelayer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateLayer</h3>
<ul>
<li>description: Updates a specified layer</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatemyuserprofile"><a aria-hidden="true" class="anchor-heading" href="#updatemyuserprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateMyUserProfile</h3>
<ul>
<li>description: Updates a user's SSH public key</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updaterdsdbinstance"><a aria-hidden="true" class="anchor-heading" href="#updaterdsdbinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateRdsDbInstance</h3>
<ul>
<li>description: Updates an Amazon RDS instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatestack"><a aria-hidden="true" class="anchor-heading" href="#updatestack"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateStack</h3>
<ul>
<li>description: Updates a specified stack</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateuserprofile"><a aria-hidden="true" class="anchor-heading" href="#updateuserprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateUserProfile</h3>
<ul>
<li>description: Updates a specified user profile</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatevolume"><a aria-hidden="true" class="anchor-heading" href="#updatevolume"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateVolume</h3>
<ul>
<li>description: Updates an Amazon EBS volume's name or mount point</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-OpsWorks"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-RoboMaker.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>RoboMaker - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-RoboMaker.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-RoboMaker.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-RoboMaker.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="RoboMaker - undefined" />
  <meta name="twitter:title" content="RoboMaker - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">RoboMaker</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="RoboMaker">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="robomaker"><a aria-hidden="true" class="anchor-heading" href="#robomaker"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RoboMaker</h1>
<ul>
<li>prefix: robomaker</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="batchdeleteworlds"><a aria-hidden="true" class="anchor-heading" href="#batchdeleteworlds"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchDeleteWorlds</h3>
<ul>
<li>description: Delete one or more worlds in a batch operation</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchdescribesimulationjob"><a aria-hidden="true" class="anchor-heading" href="#batchdescribesimulationjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchDescribeSimulationJob</h3>
<ul>
<li>description: Describe multiple simulation jobs</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="canceldeploymentjob"><a aria-hidden="true" class="anchor-heading" href="#canceldeploymentjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CancelDeploymentJob</h3>
<ul>
<li>description: Cancel a deployment job</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "deploymentJob": {
        "resource_type": "deploymentJob",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="cancelsimulationjob"><a aria-hidden="true" class="anchor-heading" href="#cancelsimulationjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CancelSimulationJob</h3>
<ul>
<li>description: Cancel a simulation job</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "simulationJob": {
        "resource_type": "simulationJob",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="cancelsimulationjobbatch"><a aria-hidden="true" class="anchor-heading" href="#cancelsimulationjobbatch"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CancelSimulationJobBatch</h3>
<ul>
<li>description: Cancel a simulation job batch</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "simulationJobBatch": {
        "resource_type": "simulationJobBatch",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="cancelworldexportjob"><a aria-hidden="true" class="anchor-heading" href="#cancelworldexportjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CancelWorldExportJob</h3>
<ul>
<li>description: Cancel a world export job</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "worldExportJob": {
        "resource_type": "worldExportJob",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="cancelworldgenerationjob"><a aria-hidden="true" class="anchor-heading" href="#cancelworldgenerationjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CancelWorldGenerationJob</h3>
<ul>
<li>description: Cancel a world generation job</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "worldGenerationJob": {
        "resource_type": "worldGenerationJob",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdeploymentjob"><a aria-hidden="true" class="anchor-heading" href="#createdeploymentjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDeploymentJob</h3>
<ul>
<li>description: Create a deployment job</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys",
            "aws:RequestTag/${TagKey}"
        ],
        "dependent_actions": [
            "iam:CreateServiceLinkedRole"
        ]
    }
}
</code></pre>
<h3 id="createfleet"><a aria-hidden="true" class="anchor-heading" href="#createfleet"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateFleet</h3>
<ul>
<li>description: Create a deployment fleet that represents a logical group of robots running the same robot application</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys",
            "aws:RequestTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createrobot"><a aria-hidden="true" class="anchor-heading" href="#createrobot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateRobot</h3>
<ul>
<li>description: Create a robot that can be registered to a fleet</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys",
            "aws:RequestTag/${TagKey}"
        ],
        "dependent_actions": [
            "iam:CreateServiceLinkedRole"
        ]
    }
}
</code></pre>
<h3 id="createrobotapplication"><a aria-hidden="true" class="anchor-heading" href="#createrobotapplication"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateRobotApplication</h3>
<ul>
<li>description: Create a robot application</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys",
            "aws:RequestTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createrobotapplicationversion"><a aria-hidden="true" class="anchor-heading" href="#createrobotapplicationversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateRobotApplicationVersion</h3>
<ul>
<li>description: Create a snapshot of a robot application</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "robotApplication": {
        "resource_type": "robotApplication",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "s3:GetObject"
        ]
    }
}
</code></pre>
<h3 id="createsimulationapplication"><a aria-hidden="true" class="anchor-heading" href="#createsimulationapplication"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSimulationApplication</h3>
<ul>
<li>description: Create a simulation application</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys",
            "aws:RequestTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createsimulationapplicationversion"><a aria-hidden="true" class="anchor-heading" href="#createsimulationapplicationversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSimulationApplicationVersion</h3>
<ul>
<li>description: Create a snapshot of a simulation application</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "simulationApplication": {
        "resource_type": "simulationApplication",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "s3:GetObject"
        ]
    }
}
</code></pre>
<h3 id="createsimulationjob"><a aria-hidden="true" class="anchor-heading" href="#createsimulationjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSimulationJob</h3>
<ul>
<li>description: Create a simulation job</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys",
            "aws:RequestTag/${TagKey}"
        ],
        "dependent_actions": [
            "iam:CreateServiceLinkedRole"
        ]
    }
}
</code></pre>
<h3 id="createworldexportjob"><a aria-hidden="true" class="anchor-heading" href="#createworldexportjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateWorldExportJob</h3>
<ul>
<li>description: Create a world export job</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "world": {
        "resource_type": "world",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createworldgenerationjob"><a aria-hidden="true" class="anchor-heading" href="#createworldgenerationjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateWorldGenerationJob</h3>
<ul>
<li>description: Create a world generation job</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "worldTemplate": {
        "resource_type": "worldTemplate",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createworldtemplate"><a aria-hidden="true" class="anchor-heading" href="#createworldtemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateWorldTemplate</h3>
<ul>
<li>description: Create a world template</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletefleet"><a aria-hidden="true" class="anchor-heading" href="#deletefleet"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteFleet</h3>
<ul>
<li>description: Delete a deployment fleet</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "deploymentFleet": {
        "resource_type": "deploymentFleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleterobot"><a aria-hidden="true" class="anchor-heading" href="#deleterobot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteRobot</h3>
<ul>
<li>description: Delete a robot</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "robot": {
        "resource_type": "robot",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleterobotapplication"><a aria-hidden="true" class="anchor-heading" href="#deleterobotapplication"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteRobotApplication</h3>
<ul>
<li>description: Delete a robot application</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "robotApplication": {
        "resource_type": "robotApplication",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletesimulationapplication"><a aria-hidden="true" class="anchor-heading" href="#deletesimulationapplication"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteSimulationApplication</h3>
<ul>
<li>description: Delete a simulation application</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "simulationApplication": {
        "resource_type": "simulationApplication",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteworldtemplate"><a aria-hidden="true" class="anchor-heading" href="#deleteworldtemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteWorldTemplate</h3>
<ul>
<li>description: Delete a world template</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "worldTemplate": {
        "resource_type": "worldTemplate",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deregisterrobot"><a aria-hidden="true" class="anchor-heading" href="#deregisterrobot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeregisterRobot</h3>
<ul>
<li>description: Deregister a robot from a fleet</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "deploymentFleet": {
        "resource_type": "deploymentFleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "robot": {
        "resource_type": "robot",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedeploymentjob"><a aria-hidden="true" class="anchor-heading" href="#describedeploymentjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDeploymentJob</h3>
<ul>
<li>description: Describe a deployment job</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "deploymentJob": {
        "resource_type": "deploymentJob",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describefleet"><a aria-hidden="true" class="anchor-heading" href="#describefleet"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeFleet</h3>
<ul>
<li>description: Describe a deployment fleet</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "deploymentFleet": {
        "resource_type": "deploymentFleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describerobot"><a aria-hidden="true" class="anchor-heading" href="#describerobot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeRobot</h3>
<ul>
<li>description: Describe a robot</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "robot": {
        "resource_type": "robot",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describerobotapplication"><a aria-hidden="true" class="anchor-heading" href="#describerobotapplication"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeRobotApplication</h3>
<ul>
<li>description: Describe a robot application</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "robotApplication": {
        "resource_type": "robotApplication",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describesimulationapplication"><a aria-hidden="true" class="anchor-heading" href="#describesimulationapplication"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSimulationApplication</h3>
<ul>
<li>description: Describe a simulation application</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "simulationApplication": {
        "resource_type": "simulationApplication",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describesimulationjob"><a aria-hidden="true" class="anchor-heading" href="#describesimulationjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSimulationJob</h3>
<ul>
<li>description: Describe a simulation job</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "simulationJob": {
        "resource_type": "simulationJob",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describesimulationjobbatch"><a aria-hidden="true" class="anchor-heading" href="#describesimulationjobbatch"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSimulationJobBatch</h3>
<ul>
<li>description: Describe a simulation job batch</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "simulationJobBatch": {
        "resource_type": "simulationJobBatch",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeworld"><a aria-hidden="true" class="anchor-heading" href="#describeworld"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeWorld</h3>
<ul>
<li>description: Describe a world</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "world": {
        "resource_type": "world",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeworldexportjob"><a aria-hidden="true" class="anchor-heading" href="#describeworldexportjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeWorldExportJob</h3>
<ul>
<li>description: Describe a world export job</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "worldExportJob": {
        "resource_type": "worldExportJob",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeworldgenerationjob"><a aria-hidden="true" class="anchor-heading" href="#describeworldgenerationjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeWorldGenerationJob</h3>
<ul>
<li>description: Describe a world generation job</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "worldGenerationJob": {
        "resource_type": "worldGenerationJob",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeworldtemplate"><a aria-hidden="true" class="anchor-heading" href="#describeworldtemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeWorldTemplate</h3>
<ul>
<li>description: Describe a world template</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "worldTemplate": {
        "resource_type": "worldTemplate",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getworldtemplatebody"><a aria-hidden="true" class="anchor-heading" href="#getworldtemplatebody"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetWorldTemplateBody</h3>
<ul>
<li>description: Get the body of a world template</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "worldTemplate": {
        "resource_type": "worldTemplate",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdeploymentjobs"><a aria-hidden="true" class="anchor-heading" href="#listdeploymentjobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDeploymentJobs</h3>
<ul>
<li>description: List deployment jobs</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listfleets"><a aria-hidden="true" class="anchor-heading" href="#listfleets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListFleets</h3>
<ul>
<li>description: List fleets</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listrobotapplications"><a aria-hidden="true" class="anchor-heading" href="#listrobotapplications"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListRobotApplications</h3>
<ul>
<li>description: List robot applications</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listrobots"><a aria-hidden="true" class="anchor-heading" href="#listrobots"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListRobots</h3>
<ul>
<li>description: List robots</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listsimulationapplications"><a aria-hidden="true" class="anchor-heading" href="#listsimulationapplications"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListSimulationApplications</h3>
<ul>
<li>description: List simulation applications</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listsimulationjobbatches"><a aria-hidden="true" class="anchor-heading" href="#listsimulationjobbatches"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListSimulationJobBatches</h3>
<ul>
<li>description: List simulation job batches</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listsimulationjobs"><a aria-hidden="true" class="anchor-heading" href="#listsimulationjobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListSimulationJobs</h3>
<ul>
<li>description: List simulation jobs</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listsupportedavailabilityzones"><a aria-hidden="true" class="anchor-heading" href="#listsupportedavailabilityzones"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListSupportedAvailabilityZones</h3>
<ul>
<li>description: Lists supported availability zones</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: List tags for a RoboMaker resource.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "deploymentFleet": {
        "resource_type": "deploymentFleet",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "deploymentJob": {
        "resource_type": "deploymentJob",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "robot": {
        "resource_type": "robot",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "robotApplication": {
        "resource_type": "robotApplication",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "simulationApplication": {
        "resource_type": "simulationApplication",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "simulationJob": {
        "resource_type": "simulationJob",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "simulationJobBatch": {
        "resource_type": "simulationJobBatch",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "world": {
        "resource_type": "world",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "worldExportJob": {
        "resource_type": "worldExportJob",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "worldGenerationJob": {
        "resource_type": "worldGenerationJob",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "worldTemplate": {
        "resource_type": "worldTemplate",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listworldexportjobs"><a aria-hidden="true" class="anchor-heading" href="#listworldexportjobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListWorldExportJobs</h3>
<ul>
<li>description: List world export jobs</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listworldgenerationjobs"><a aria-hidden="true" class="anchor-heading" href="#listworldgenerationjobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListWorldGenerationJobs</h3>
<ul>
<li>description: List world generation jobs</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listworldtemplates"><a aria-hidden="true" class="anchor-heading" href="#listworldtemplates"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListWorldTemplates</h3>
<ul>
<li>description: List world templates</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listworlds"><a aria-hidden="true" class="anchor-heading" href="#listworlds"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListWorlds</h3>
<ul>
<li>description: List worlds</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registerrobot"><a aria-hidden="true" class="anchor-heading" href="#registerrobot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterRobot</h3>
<ul>
<li>description: Register a robot to a fleet</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "deploymentFleet": {
        "resource_type": "deploymentFleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "robot": {
        "resource_type": "robot",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="restartsimulationjob"><a aria-hidden="true" class="anchor-heading" href="#restartsimulationjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RestartSimulationJob</h3>
<ul>
<li>description: Restart a running simulation job</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "simulationJob": {
        "resource_type": "simulationJob",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startsimulationjobbatch"><a aria-hidden="true" class="anchor-heading" href="#startsimulationjobbatch"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartSimulationJobBatch</h3>
<ul>
<li>description: Create a simulation job batch</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys",
            "aws:RequestTag/${TagKey}"
        ],
        "dependent_actions": [
            "iam:CreateServiceLinkedRole"
        ]
    }
}
</code></pre>
<h3 id="syncdeploymentjob"><a aria-hidden="true" class="anchor-heading" href="#syncdeploymentjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SyncDeploymentJob</h3>
<ul>
<li>description: Ensures the most recently deployed robot application is deployed to all robots in the fleet</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "deploymentFleet": {
        "resource_type": "deploymentFleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:CreateServiceLinkedRole"
        ]
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Add tags to a RoboMaker resource</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "deploymentFleet": {
        "resource_type": "deploymentFleet",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "deploymentJob": {
        "resource_type": "deploymentJob",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "robot": {
        "resource_type": "robot",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "robotApplication": {
        "resource_type": "robotApplication",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "simulationApplication": {
        "resource_type": "simulationApplication",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "simulationJob": {
        "resource_type": "simulationJob",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "simulationJobBatch": {
        "resource_type": "simulationJobBatch",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "world": {
        "resource_type": "world",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "worldExportJob": {
        "resource_type": "worldExportJob",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "worldGenerationJob": {
        "resource_type": "worldGenerationJob",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "worldTemplate": {
        "resource_type": "worldTemplate",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys",
            "aws:RequestTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Remove tags from a RoboMaker resource</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "deploymentFleet": {
        "resource_type": "deploymentFleet",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "deploymentJob": {
        "resource_type": "deploymentJob",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "robot": {
        "resource_type": "robot",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "robotApplication": {
        "resource_type": "robotApplication",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "simulationApplication": {
        "resource_type": "simulationApplication",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "simulationJob": {
        "resource_type": "simulationJob",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "simulationJobBatch": {
        "resource_type": "simulationJobBatch",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "world": {
        "resource_type": "world",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "worldExportJob": {
        "resource_type": "worldExportJob",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "worldGenerationJob": {
        "resource_type": "worldGenerationJob",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "worldTemplate": {
        "resource_type": "worldTemplate",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updaterobotapplication"><a aria-hidden="true" class="anchor-heading" href="#updaterobotapplication"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateRobotApplication</h3>
<ul>
<li>description: Update a robot application</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "robotApplication": {
        "resource_type": "robotApplication",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updaterobotdeployment"><a aria-hidden="true" class="anchor-heading" href="#updaterobotdeployment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateRobotDeployment</h3>
<ul>
<li>description: Report the deployment status for an individual robot</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatesimulationapplication"><a aria-hidden="true" class="anchor-heading" href="#updatesimulationapplication"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateSimulationApplication</h3>
<ul>
<li>description: Update a simulation application</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "simulationApplication": {
        "resource_type": "simulationApplication",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateworldtemplate"><a aria-hidden="true" class="anchor-heading" href="#updateworldtemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateWorldTemplate</h3>
<ul>
<li>description: Update a world template</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "worldTemplate": {
        "resource_type": "worldTemplate",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-RoboMaker"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Simple Notification Service.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Simple Notification Service - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Simple Notification Service.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Simple Notification Service.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Simple Notification Service.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Simple Notification Service - undefined" />
  <meta name="twitter:title" content="Simple Notification Service - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Simple Notification Service</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Simple Notification Service">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="simple-notification-service"><a aria-hidden="true" class="anchor-heading" href="#simple-notification-service"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Simple Notification Service</h1>
<ul>
<li>prefix: sns</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="addpermission"><a aria-hidden="true" class="anchor-heading" href="#addpermission"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddPermission</h3>
<ul>
<li>description: Adds a statement to a topic's access control policy, granting access for the specified AWS accounts to the specified actions.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "topic": {
        "resource_type": "topic",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="checkifphonenumberisoptedout"><a aria-hidden="true" class="anchor-heading" href="#checkifphonenumberisoptedout"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CheckIfPhoneNumberIsOptedOut</h3>
<ul>
<li>description: Accepts a phone number and indicates whether the phone holder has opted out of receiving SMS messages from your account.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="confirmsubscription"><a aria-hidden="true" class="anchor-heading" href="#confirmsubscription"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ConfirmSubscription</h3>
<ul>
<li>description: Verifies an endpoint owner's intent to receive messages by validating the token sent to the endpoint by an earlier Subscribe action.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "topic": {
        "resource_type": "topic",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createplatformapplication"><a aria-hidden="true" class="anchor-heading" href="#createplatformapplication"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreatePlatformApplication</h3>
<ul>
<li>description: Creates a platform application object for one of the supported push notification services, such as APNS and GCM, to which devices and mobile apps may register.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createplatformendpoint"><a aria-hidden="true" class="anchor-heading" href="#createplatformendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreatePlatformEndpoint</h3>
<ul>
<li>description: Creates an endpoint for a device and mobile app on one of the supported push notification services, such as GCM and APNS.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtopic"><a aria-hidden="true" class="anchor-heading" href="#createtopic"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTopic</h3>
<ul>
<li>description: Creates a topic to which notifications can be published.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "topic": {
        "resource_type": "topic",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteendpoint"><a aria-hidden="true" class="anchor-heading" href="#deleteendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteEndpoint</h3>
<ul>
<li>description: Deletes the endpoint for a device and mobile app from Amazon SNS.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteplatformapplication"><a aria-hidden="true" class="anchor-heading" href="#deleteplatformapplication"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeletePlatformApplication</h3>
<ul>
<li>description: Deletes a platform application object for one of the supported push notification services, such as APNS and GCM.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetopic"><a aria-hidden="true" class="anchor-heading" href="#deletetopic"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTopic</h3>
<ul>
<li>description: Deletes a topic and all its subscriptions.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "topic": {
        "resource_type": "topic",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getendpointattributes"><a aria-hidden="true" class="anchor-heading" href="#getendpointattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetEndpointAttributes</h3>
<ul>
<li>description: Retrieves the endpoint attributes for a device on one of the supported push notification services, such as GCM and APNS.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getplatformapplicationattributes"><a aria-hidden="true" class="anchor-heading" href="#getplatformapplicationattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetPlatformApplicationAttributes</h3>
<ul>
<li>description: Retrieves the attributes of the platform application object for the supported push notification services, such as APNS and GCM.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsmsattributes"><a aria-hidden="true" class="anchor-heading" href="#getsmsattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSMSAttributes</h3>
<ul>
<li>description: Returns the settings for sending SMS messages from your account.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsubscriptionattributes"><a aria-hidden="true" class="anchor-heading" href="#getsubscriptionattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSubscriptionAttributes</h3>
<ul>
<li>description: Returns all of the properties of a subscription.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gettopicattributes"><a aria-hidden="true" class="anchor-heading" href="#gettopicattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetTopicAttributes</h3>
<ul>
<li>description: Returns all of the properties of a topic. Topic properties returned might differ based on the authorization of the user.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "topic": {
        "resource_type": "topic",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listendpointsbyplatformapplication"><a aria-hidden="true" class="anchor-heading" href="#listendpointsbyplatformapplication"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListEndpointsByPlatformApplication</h3>
<ul>
<li>description: Lists the endpoints and endpoint attributes for devices in a supported push notification service, such as GCM and APNS.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listphonenumbersoptedout"><a aria-hidden="true" class="anchor-heading" href="#listphonenumbersoptedout"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPhoneNumbersOptedOut</h3>
<ul>
<li>description: Returns a list of phone numbers that are opted out, meaning you cannot send SMS messages to them.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listplatformapplications"><a aria-hidden="true" class="anchor-heading" href="#listplatformapplications"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPlatformApplications</h3>
<ul>
<li>description: Lists the platform application objects for the supported push notification services, such as APNS and GCM.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listsubscriptions"><a aria-hidden="true" class="anchor-heading" href="#listsubscriptions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListSubscriptions</h3>
<ul>
<li>description: Returns a list of the requester's subscriptions.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listsubscriptionsbytopic"><a aria-hidden="true" class="anchor-heading" href="#listsubscriptionsbytopic"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListSubscriptionsByTopic</h3>
<ul>
<li>description: Returns a list of the subscriptions to a specific topic.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "topic": {
        "resource_type": "topic",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: List all tags added to the specified Amazon SNS topic.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "topic": {
        "resource_type": "topic",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtopics"><a aria-hidden="true" class="anchor-heading" href="#listtopics"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTopics</h3>
<ul>
<li>description: Returns a list of the requester's topics. Each call returns a limited list of topics, up to 100.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="optinphonenumber"><a aria-hidden="true" class="anchor-heading" href="#optinphonenumber"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>OptInPhoneNumber</h3>
<ul>
<li>description: Opts in a phone number that is currently opted out, which enables you to resume sending SMS messages to the number.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="publish"><a aria-hidden="true" class="anchor-heading" href="#publish"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Publish</h3>
<ul>
<li>description: Sends a message to all of a topic's subscribed endpoints.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "topic": {
        "resource_type": "topic",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="removepermission"><a aria-hidden="true" class="anchor-heading" href="#removepermission"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemovePermission</h3>
<ul>
<li>description: Removes a statement from a topic's access control policy.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "topic": {
        "resource_type": "topic",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setendpointattributes"><a aria-hidden="true" class="anchor-heading" href="#setendpointattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetEndpointAttributes</h3>
<ul>
<li>description: Sets the attributes for an endpoint for a device on one of the supported push notification services, such as GCM and APNS.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setplatformapplicationattributes"><a aria-hidden="true" class="anchor-heading" href="#setplatformapplicationattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetPlatformApplicationAttributes</h3>
<ul>
<li>description: Sets the attributes of the platform application object for the supported push notification services, such as APNS and GCM.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setsmsattributes"><a aria-hidden="true" class="anchor-heading" href="#setsmsattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetSMSAttributes</h3>
<ul>
<li>description: Set the default settings for sending SMS messages and receiving daily SMS usage reports.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setsubscriptionattributes"><a aria-hidden="true" class="anchor-heading" href="#setsubscriptionattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetSubscriptionAttributes</h3>
<ul>
<li>description: Allows a subscription owner to set an attribute of the topic to a new value.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="settopicattributes"><a aria-hidden="true" class="anchor-heading" href="#settopicattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetTopicAttributes</h3>
<ul>
<li>description: Allows a topic owner to set an attribute of the topic to a new value.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "topic": {
        "resource_type": "topic",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="subscribe"><a aria-hidden="true" class="anchor-heading" href="#subscribe"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Subscribe</h3>
<ul>
<li>description: Prepares to subscribe an endpoint by sending the endpoint a confirmation message.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "topic": {
        "resource_type": "topic",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "sns:Endpoint",
            "sns:Protocol"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Add tags to the specified Amazon SNS topic.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "topic": {
        "resource_type": "topic",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="unsubscribe"><a aria-hidden="true" class="anchor-heading" href="#unsubscribe"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Unsubscribe</h3>
<ul>
<li>description: Deletes a subscription. If the subscription requires authentication for deletion, only the owner of the subscription or the topic's owner can unsubscribe, and an AWS signature is required.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Remove tags from the specified Amazon SNS topic.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "topic": {
        "resource_type": "topic",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Simple Notification Service"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/elastic-container-service-for-kubernetes.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Elastic Container Service for Kubernetes - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/elastic-container-service-for-kubernetes.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/elastic-container-service-for-kubernetes.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/elastic-container-service-for-kubernetes.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Elastic Container Service for Kubernetes - undefined" />
  <meta name="twitter:title" content="Elastic Container Service for Kubernetes - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/1f759d8c-cca7-4fc4-9aa2-6dbf6e596abf.html">Services</a></li><li class="breadcrumb-nav-list-item">Elastic Container Service for Kubernetes</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/open-guides/og-aws" target="_blank"> og-aws  </li>
              
              <li> <a href="https://www.awsgeek.com/" target="_blank"> <NAME>  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Elastic Container Service for Kubernetes">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <p><img src="/assets/images/Amazon-EKS_en.jpg"></p>
<blockquote>
<p>Image from <a href="https://www.awsgeek.com/Amazon-EKS/">@awsgeek</a></p>
</blockquote>
<h1 id="elastic-container-service-for-kubernetes"><a aria-hidden="true" class="anchor-heading" href="#elastic-container-service-for-kubernetes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Elastic Container Service for Kubernetes</h1>
<h3 id="eks-basics"><a aria-hidden="true" class="anchor-heading" href="#eks-basics"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EKS Basics</h3>
<ul>
<li>📒 <a href="https://aws.amazon.com/eks/">Homepage</a> ∙ <a href="http://docs.aws.amazon.com/eks/latest/userguide/what-is-eks.html">User guide</a> ∙ <a href="https://aws.amazon.com/eks/faq/">FAQ</a> ∙ <a href="https://aws.amazon.com/eks/pricing/">Pricing</a></li>
<li>EKS (Elastic Kubernetes Service) is a new service (launched June 2018) that provides managed Kubernetes Masters in a Highly Available pair to deploy K8s Services and Pods on top of EC2 based Kubernetes nodes.</li>
<li>See the <a href="#containers-and-aws">Containers and AWS</a> section for more context on containers.</li>
<li>EKS is AWS's solution to hosting Kubernetes natively on AWS. It is not a replacement for ECS directly but is in response to the large market dominance of Kubernetes.</li>
<li>EKS does not launch EC2 nodes and would have to be configured and setup either manually or via Cloudformation (or other automation solution)</li>
<li>EKS management is done through a utility called kubectl, and with Kube configuration files. These files will need to be configured to speak with the K8s Master with a certificate and URL. The AWS CLI can autogenerate the configuration file that kubect requires for communicating with the cluster.<sup><a href="#user-content-eks-aws-cli-create-kubeconfig">1</a></sup></li>
<li>EKS authentication is integrated with IAM roles/permissions. The AWS CLI has an integrated sub-command for generating authentication tokens.<sup><a href="#user-content-eks-aws-cli-get-token">2</a></sup> This was formerly done via a custom plugin for kubectl called <a href="https://github.com/kubernetes-sigs/aws-iam-authenticator">aws-iam-authenticator</a> (formerly heptio-authenticator-aws).</li>
<li>EKS provides <a href="https://docs.aws.amazon.com/eks/latest/userguide/calico.html">Calico</a> from Tigera for securing workloads within a cluster using Kubernetes network policy.</li>
</ul>
<h3 id="eks-tips"><a aria-hidden="true" class="anchor-heading" href="#eks-tips"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EKS Tips</h3>
<ul>
<li>Multiple clusters can be supported by using different kubeconfig files.</li>
<li>AWS has a <a href="https://aws.amazon.com/quickstart/architecture/heptio-kubernetes/">Kubernetes Quickstart</a> developed in collaboration with Heptio.</li>
</ul>
<h3 id="eks-alternatives-and-lock-in"><a aria-hidden="true" class="anchor-heading" href="#eks-alternatives-and-lock-in"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EKS Alternatives and Lock-in</h3>
<ul>
<li><a href="#ecs">ECS</a>: Amazon's native Container Scheduled platform released in 2014.  If you don't utilise containers today and are looking to get started, ECS is an excellent product.</li>
<li><a href="https://kubernetes.io">Kubernetes</a>: Extensive container platform. Available as a hosted solution on <a href="https://cloud.google.com/container-engine/">Google Cloud</a>, <a href="https://aws.amazon.com/eks/">AWS</a>, <a href="https://www.digitalocean.com/products/kubernetes/">Digital Ocean</a> and <a href="https://azure.microsoft.com/en-us/services/kubernetes-service/">Azure</a>.</li>
<li><a href="https://www.nomadproject.io/">Nomad</a>: Orchestrator/Scheduler, tightly integrated in the HashiCorp stack (Consul, Vault, etc).</li>
</ul>
<h3 id="eks-gotchas-and-limitations"><a aria-hidden="true" class="anchor-heading" href="#eks-gotchas-and-limitations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EKS Gotchas and Limitations</h3>
<ul>
<li>Pods and Service configurations can rapidly consume IP addresses inside a VPC.  Proper care and maintenance should be applied to ensure IP exhaustion does not occur.</li>
<li>There is currently no integrated monitoring in CloudWatch for EKS pods or services, you will need to deploy a monitoring system that supports Kubernetes such as Prometheus.</li>
<li>Autoscaling based off CPU/Memory of a node is limited as you will not be aware of pending Services/Pods that cannot start. Using <a href="https://github.com/kubernetes/autoscaler/tree/master/cluster-autoscaler">cluster-autoscaler</a> can be useful for scaling based on Node resource usage and unschedulable Pods.</li>
<li><a href="https://prometheus.io/">Prometheus</a> is a very popular monitoring solution for K8s, metrics and alerts can be used to send events to Lambda, SQS or other solutions to take autoscaling actions.</li>
</ul>
<h3 id="footnotes"><a aria-hidden="true" class="anchor-heading" href="#footnotes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Footnotes</h3>
<p><a name="user-content-eks-aws-cli-create-kubeconfig"><strong>1</strong></a>: <a href="https://docs.aws.amazon.com/eks/latest/userguide/create-kubeconfig.html">https://docs.aws.amazon.com/eks/latest/userguide/create-kubeconfig.html</a><br>
<a name="user-content-eks-aws-cli-get-token"><strong>2</strong></a>: <a href="https://aws.amazon.com/about-aws/whats-new/2019/05/amazon-eks-simplifies-kubernetes-cluster-authentication/">https://aws.amazon.com/about-aws/whats-new/2019/05/amazon-eks-simplifies-kubernetes-cluster-authentication/</a><br></p><span id="navId" data="elastic-container-service-for-kubernetes"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-IoT Things Graph.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>IoT Things Graph - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-IoT Things Graph.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-IoT Things Graph.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-IoT Things Graph.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="IoT Things Graph - undefined" />
  <meta name="twitter:title" content="IoT Things Graph - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">IoT Things Graph</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="IoT Things Graph">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="iot-things-graph"><a aria-hidden="true" class="anchor-heading" href="#iot-things-graph"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>IoT Things Graph</h1>
<ul>
<li>prefix: iotthingsgraph</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="associateentitytothing"><a aria-hidden="true" class="anchor-heading" href="#associateentitytothing"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateEntityToThing</h3>
<ul>
<li>description: Associates a device with a concrete thing that is in the user's registry. A thing can be associated with only one device at a time. If you associate a thing with a new device id, its previous association will be removed.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": [
            "iot:DescribeThing",
            "iot:DescribeThingGroup"
        ]
    }
}
</code></pre>
<h3 id="createflowtemplate"><a aria-hidden="true" class="anchor-heading" href="#createflowtemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateFlowTemplate</h3>
<ul>
<li>description: Creates a workflow template. Workflows can be created only in the user's namespace. (The public namespace contains only entities.) The workflow can contain only entities in the specified namespace. The workflow is validated against the entities in the latest version of the user's namespace unless another namespace version is specified in the request.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createsysteminstance"><a aria-hidden="true" class="anchor-heading" href="#createsysteminstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSystemInstance</h3>
<ul>
<li>description: Creates an instance of a system with specified configurations and Things.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createsystemtemplate"><a aria-hidden="true" class="anchor-heading" href="#createsystemtemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSystemTemplate</h3>
<ul>
<li>description: Creates a system. The system is validated against the entities in the latest version of the user's namespace unless another namespace version is specified in the request.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteflowtemplate"><a aria-hidden="true" class="anchor-heading" href="#deleteflowtemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteFlowTemplate</h3>
<ul>
<li>description: Deletes a workflow. Any new system or system instance that contains this workflow will fail to update or deploy. Existing system instances that contain the workflow will continue to run (since they use a snapshot of the workflow taken at the time of deploying the system instance).</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Workflow": {
        "resource_type": "Workflow",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletenamespace"><a aria-hidden="true" class="anchor-heading" href="#deletenamespace"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteNamespace</h3>
<ul>
<li>description: Deletes the specified namespace. This action deletes all of the entities in the namespace. Delete the systems and flows in the namespace before performing this action.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletesysteminstance"><a aria-hidden="true" class="anchor-heading" href="#deletesysteminstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteSystemInstance</h3>
<ul>
<li>description: Deletes a system instance. Only instances that have never been deployed, or that have been undeployed from the target can be deleted. Users can create a new system instance that has the same ID as a deleted system instance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "SystemInstance": {
        "resource_type": "SystemInstance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletesystemtemplate"><a aria-hidden="true" class="anchor-heading" href="#deletesystemtemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteSystemTemplate</h3>
<ul>
<li>description: Deletes a system. New system instances can't contain the system after its deletion. Existing system instances that contain the system will continue to work because they use a snapshot of the system that is taken when it is deployed.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "System": {
        "resource_type": "System",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deploysysteminstance"><a aria-hidden="true" class="anchor-heading" href="#deploysysteminstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeploySystemInstance</h3>
<ul>
<li>description: Deploys the system instance to the target specified in CreateSystemInstance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "SystemInstance": {
        "resource_type": "SystemInstance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deprecateflowtemplate"><a aria-hidden="true" class="anchor-heading" href="#deprecateflowtemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeprecateFlowTemplate</h3>
<ul>
<li>description: Deprecates the specified workflow. This action marks the workflow for deletion. Deprecated flows can't be deployed, but existing system instances that use the flow will continue to run.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Workflow": {
        "resource_type": "Workflow",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deprecatesystemtemplate"><a aria-hidden="true" class="anchor-heading" href="#deprecatesystemtemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeprecateSystemTemplate</h3>
<ul>
<li>description: Deprecates the specified system.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "System": {
        "resource_type": "System",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describenamespace"><a aria-hidden="true" class="anchor-heading" href="#describenamespace"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeNamespace</h3>
<ul>
<li>description: Gets the latest version of the user's namespace and the public version that it is tracking.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="dissociateentityfromthing"><a aria-hidden="true" class="anchor-heading" href="#dissociateentityfromthing"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DissociateEntityFromThing</h3>
<ul>
<li>description: Dissociates a device entity from a concrete thing. The action takes only the type of the entity that you need to dissociate because only one entity of a particular type can be associated with a thing.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": [
            "iot:DescribeThing",
            "iot:DescribeThingGroup"
        ]
    }
}
</code></pre>
<h3 id="getentities"><a aria-hidden="true" class="anchor-heading" href="#getentities"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetEntities</h3>
<ul>
<li>description: Gets descriptions of the specified entities. Uses the latest version of the user's namespace by default.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getflowtemplate"><a aria-hidden="true" class="anchor-heading" href="#getflowtemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetFlowTemplate</h3>
<ul>
<li>description: Gets the latest version of the DefinitionDocument and FlowTemplateSummary for the specified workflow.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Workflow": {
        "resource_type": "Workflow",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getflowtemplaterevisions"><a aria-hidden="true" class="anchor-heading" href="#getflowtemplaterevisions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetFlowTemplateRevisions</h3>
<ul>
<li>description: Gets revisions of the specified workflow. Only the last 100 revisions are stored. If the workflow has been deprecated, this action will return revisions that occurred before the deprecation. This action won't work for workflows that have been deleted.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Workflow": {
        "resource_type": "Workflow",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getnamespacedeletionstatus"><a aria-hidden="true" class="anchor-heading" href="#getnamespacedeletionstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetNamespaceDeletionStatus</h3>
<ul>
<li>description: Gets the status of a namespace deletion task.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsysteminstance"><a aria-hidden="true" class="anchor-heading" href="#getsysteminstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSystemInstance</h3>
<ul>
<li>description: Gets a system instance.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "SystemInstance": {
        "resource_type": "SystemInstance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsystemtemplate"><a aria-hidden="true" class="anchor-heading" href="#getsystemtemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSystemTemplate</h3>
<ul>
<li>description: Gets a system.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "System": {
        "resource_type": "System",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsystemtemplaterevisions"><a aria-hidden="true" class="anchor-heading" href="#getsystemtemplaterevisions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSystemTemplateRevisions</h3>
<ul>
<li>description: Gets revisions made to the specified system template. Only the previous 100 revisions are stored. If the system has been deprecated, this action will return the revisions that occurred before its deprecation. This action won't work with systems that have been deleted.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "System": {
        "resource_type": "System",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getuploadstatus"><a aria-hidden="true" class="anchor-heading" href="#getuploadstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetUploadStatus</h3>
<ul>
<li>description: Gets the status of the specified upload.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listflowexecutionmessages"><a aria-hidden="true" class="anchor-heading" href="#listflowexecutionmessages"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListFlowExecutionMessages</h3>
<ul>
<li>description: Lists details of a single workflow execution</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Lists all tags for a given resource</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "SystemInstance": {
        "resource_type": "SystemInstance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="searchentities"><a aria-hidden="true" class="anchor-heading" href="#searchentities"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SearchEntities</h3>
<ul>
<li>description: Searches for entities of the specified type. You can search for entities in your namespace and the public namespace that you're tracking.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="searchflowexecutions"><a aria-hidden="true" class="anchor-heading" href="#searchflowexecutions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SearchFlowExecutions</h3>
<ul>
<li>description: Searches for workflow executions of a system instance</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "SystemInstance": {
        "resource_type": "SystemInstance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="searchflowtemplates"><a aria-hidden="true" class="anchor-heading" href="#searchflowtemplates"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SearchFlowTemplates</h3>
<ul>
<li>description: Searches for summary information about workflows.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="searchsysteminstances"><a aria-hidden="true" class="anchor-heading" href="#searchsysteminstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SearchSystemInstances</h3>
<ul>
<li>description: Searches for system instances in the user's account.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="searchsystemtemplates"><a aria-hidden="true" class="anchor-heading" href="#searchsystemtemplates"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SearchSystemTemplates</h3>
<ul>
<li>description: Searches for summary information about systems in the user's account. You can filter by the ID of a workflow to return only systems that use the specified workflow.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="searchthings"><a aria-hidden="true" class="anchor-heading" href="#searchthings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SearchThings</h3>
<ul>
<li>description: Searches for things associated with the specified entity. You can search by both device and device model.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Tag a specified resource</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "SystemInstance": {
        "resource_type": "SystemInstance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="undeploysysteminstance"><a aria-hidden="true" class="anchor-heading" href="#undeploysysteminstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UndeploySystemInstance</h3>
<ul>
<li>description: Removes the system instance and associated triggers from the target.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "SystemInstance": {
        "resource_type": "SystemInstance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Untag a specified resource</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "SystemInstance": {
        "resource_type": "SystemInstance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateflowtemplate"><a aria-hidden="true" class="anchor-heading" href="#updateflowtemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateFlowTemplate</h3>
<ul>
<li>description: Updates the specified workflow. All deployed systems and system instances that use the workflow will see the changes in the flow when it is redeployed. The workflow can contain only entities in the specified namespace.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "Workflow": {
        "resource_type": "Workflow",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatesystemtemplate"><a aria-hidden="true" class="anchor-heading" href="#updatesystemtemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateSystemTemplate</h3>
<ul>
<li>description: Updates the specified system. You don't need to run this action after updating a workflow. Any system instance that uses the system will see the changes in the system when it is redeployed.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "System": {
        "resource_type": "System",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="uploadentitydefinitions"><a aria-hidden="true" class="anchor-heading" href="#uploadentitydefinitions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UploadEntityDefinitions</h3>
<ul>
<li>description: Asynchronously uploads one or more entity definitions to the user's namespace.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-IoT Things Graph"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Personalize.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Personalize - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Personalize.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Personalize.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Personalize.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Personalize - undefined" />
  <meta name="twitter:title" content="Personalize - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Personalize</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Personalize">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="personalize"><a aria-hidden="true" class="anchor-heading" href="#personalize"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Personalize</h1>
<ul>
<li>prefix: personalize</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="createbatchinferencejob"><a aria-hidden="true" class="anchor-heading" href="#createbatchinferencejob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateBatchInferenceJob</h3>
<ul>
<li>description: Creates a batch inference job</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "batchInferenceJob": {
        "resource_type": "batchInferenceJob",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createcampaign"><a aria-hidden="true" class="anchor-heading" href="#createcampaign"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateCampaign</h3>
<ul>
<li>description: Creates a campaign</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "campaign": {
        "resource_type": "campaign",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdataset"><a aria-hidden="true" class="anchor-heading" href="#createdataset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDataset</h3>
<ul>
<li>description: Creates a dataset</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dataset": {
        "resource_type": "dataset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdatasetgroup"><a aria-hidden="true" class="anchor-heading" href="#createdatasetgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDatasetGroup</h3>
<ul>
<li>description: Creates a dataset group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "datasetGroup": {
        "resource_type": "datasetGroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdatasetimportjob"><a aria-hidden="true" class="anchor-heading" href="#createdatasetimportjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDatasetImportJob</h3>
<ul>
<li>description: Creates a dataset import job</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "datasetImportJob": {
        "resource_type": "datasetImportJob",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createeventtracker"><a aria-hidden="true" class="anchor-heading" href="#createeventtracker"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateEventTracker</h3>
<ul>
<li>description: Creates an event tracker</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "eventTracker": {
        "resource_type": "eventTracker",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createfilter"><a aria-hidden="true" class="anchor-heading" href="#createfilter"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateFilter</h3>
<ul>
<li>description: Creates a filter</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "filter": {
        "resource_type": "filter",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createschema"><a aria-hidden="true" class="anchor-heading" href="#createschema"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSchema</h3>
<ul>
<li>description: Creates a schema</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "schema": {
        "resource_type": "schema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createsolution"><a aria-hidden="true" class="anchor-heading" href="#createsolution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSolution</h3>
<ul>
<li>description: Creates a solution</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "solution": {
        "resource_type": "solution",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createsolutionversion"><a aria-hidden="true" class="anchor-heading" href="#createsolutionversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSolutionVersion</h3>
<ul>
<li>description: Creates a solution version</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "solution": {
        "resource_type": "solution",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletecampaign"><a aria-hidden="true" class="anchor-heading" href="#deletecampaign"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteCampaign</h3>
<ul>
<li>description: Deletes a campaign</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "campaign": {
        "resource_type": "campaign",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedataset"><a aria-hidden="true" class="anchor-heading" href="#deletedataset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDataset</h3>
<ul>
<li>description: Deletes a dataset</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dataset": {
        "resource_type": "dataset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedatasetgroup"><a aria-hidden="true" class="anchor-heading" href="#deletedatasetgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDatasetGroup</h3>
<ul>
<li>description: Deletes a dataset group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "datasetGroup": {
        "resource_type": "datasetGroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteeventtracker"><a aria-hidden="true" class="anchor-heading" href="#deleteeventtracker"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteEventTracker</h3>
<ul>
<li>description: Deletes an event tracker</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "eventTracker": {
        "resource_type": "eventTracker",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletefilter"><a aria-hidden="true" class="anchor-heading" href="#deletefilter"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteFilter</h3>
<ul>
<li>description: Deletes a filter</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "filter": {
        "resource_type": "filter",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteschema"><a aria-hidden="true" class="anchor-heading" href="#deleteschema"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteSchema</h3>
<ul>
<li>description: Deletes a schema</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "schema": {
        "resource_type": "schema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletesolution"><a aria-hidden="true" class="anchor-heading" href="#deletesolution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteSolution</h3>
<ul>
<li>description: Deletes a solution including all versions of the solution</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "solution": {
        "resource_type": "solution",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describealgorithm"><a aria-hidden="true" class="anchor-heading" href="#describealgorithm"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAlgorithm</h3>
<ul>
<li>description: Describes an algorithm</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "algorithm": {
        "resource_type": "algorithm",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describebatchinferencejob"><a aria-hidden="true" class="anchor-heading" href="#describebatchinferencejob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeBatchInferenceJob</h3>
<ul>
<li>description: Describes a batch inference job</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "batchInferenceJob": {
        "resource_type": "batchInferenceJob",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecampaign"><a aria-hidden="true" class="anchor-heading" href="#describecampaign"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeCampaign</h3>
<ul>
<li>description: Describes a campaign</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "campaign": {
        "resource_type": "campaign",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedataset"><a aria-hidden="true" class="anchor-heading" href="#describedataset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDataset</h3>
<ul>
<li>description: Describes a dataset</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dataset": {
        "resource_type": "dataset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedatasetgroup"><a aria-hidden="true" class="anchor-heading" href="#describedatasetgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDatasetGroup</h3>
<ul>
<li>description: Describes a dataset group</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "datasetGroup": {
        "resource_type": "datasetGroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedatasetimportjob"><a aria-hidden="true" class="anchor-heading" href="#describedatasetimportjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDatasetImportJob</h3>
<ul>
<li>description: Describes a dataset import job</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "datasetImportJob": {
        "resource_type": "datasetImportJob",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeeventtracker"><a aria-hidden="true" class="anchor-heading" href="#describeeventtracker"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeEventTracker</h3>
<ul>
<li>description: Describes an event tracker</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "eventTracker": {
        "resource_type": "eventTracker",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describefeaturetransformation"><a aria-hidden="true" class="anchor-heading" href="#describefeaturetransformation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeFeatureTransformation</h3>
<ul>
<li>description: Describes a feature transformation</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "featureTransformation": {
        "resource_type": "featureTransformation",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describefilter"><a aria-hidden="true" class="anchor-heading" href="#describefilter"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeFilter</h3>
<ul>
<li>description: Describes a filter</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "filter": {
        "resource_type": "filter",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describerecipe"><a aria-hidden="true" class="anchor-heading" href="#describerecipe"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeRecipe</h3>
<ul>
<li>description: Describes a recipe</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "recipe": {
        "resource_type": "recipe",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeschema"><a aria-hidden="true" class="anchor-heading" href="#describeschema"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSchema</h3>
<ul>
<li>description: Describes a schema</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "schema": {
        "resource_type": "schema",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describesolution"><a aria-hidden="true" class="anchor-heading" href="#describesolution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSolution</h3>
<ul>
<li>description: Describes a solution</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "solution": {
        "resource_type": "solution",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describesolutionversion"><a aria-hidden="true" class="anchor-heading" href="#describesolutionversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSolutionVersion</h3>
<ul>
<li>description: Describes a version of a solution</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "solution": {
        "resource_type": "solution",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getpersonalizedranking"><a aria-hidden="true" class="anchor-heading" href="#getpersonalizedranking"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetPersonalizedRanking</h3>
<ul>
<li>description: Gets a re-ranked list of recommendations</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "campaign": {
        "resource_type": "campaign",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getrecommendations"><a aria-hidden="true" class="anchor-heading" href="#getrecommendations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRecommendations</h3>
<ul>
<li>description: Gets a list of recommendations from a campaign</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "campaign": {
        "resource_type": "campaign",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsolutionmetrics"><a aria-hidden="true" class="anchor-heading" href="#getsolutionmetrics"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSolutionMetrics</h3>
<ul>
<li>description: Gets metrics for a solution version</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "solution": {
        "resource_type": "solution",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listbatchinferencejobs"><a aria-hidden="true" class="anchor-heading" href="#listbatchinferencejobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListBatchInferenceJobs</h3>
<ul>
<li>description: Lists batch inference jobs</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listcampaigns"><a aria-hidden="true" class="anchor-heading" href="#listcampaigns"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListCampaigns</h3>
<ul>
<li>description: Lists campaigns</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdatasetgroups"><a aria-hidden="true" class="anchor-heading" href="#listdatasetgroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDatasetGroups</h3>
<ul>
<li>description: Lists dataset groups</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdatasetimportjobs"><a aria-hidden="true" class="anchor-heading" href="#listdatasetimportjobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDatasetImportJobs</h3>
<ul>
<li>description: Lists dataset import jobs</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdatasets"><a aria-hidden="true" class="anchor-heading" href="#listdatasets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDatasets</h3>
<ul>
<li>description: Lists datasets</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listeventtrackers"><a aria-hidden="true" class="anchor-heading" href="#listeventtrackers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListEventTrackers</h3>
<ul>
<li>description: Lists event trackers</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listfilters"><a aria-hidden="true" class="anchor-heading" href="#listfilters"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListFilters</h3>
<ul>
<li>description: Lists filters</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listrecipes"><a aria-hidden="true" class="anchor-heading" href="#listrecipes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListRecipes</h3>
<ul>
<li>description: Lists recipes</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listschemas"><a aria-hidden="true" class="anchor-heading" href="#listschemas"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListSchemas</h3>
<ul>
<li>description: Lists schemas</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listsolutionversions"><a aria-hidden="true" class="anchor-heading" href="#listsolutionversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListSolutionVersions</h3>
<ul>
<li>description: Lists versions of a solution</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listsolutions"><a aria-hidden="true" class="anchor-heading" href="#listsolutions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListSolutions</h3>
<ul>
<li>description: Lists solutions</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putevents"><a aria-hidden="true" class="anchor-heading" href="#putevents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutEvents</h3>
<ul>
<li>description: Records real time event data</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "eventTracker": {
        "resource_type": "eventTracker",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatecampaign"><a aria-hidden="true" class="anchor-heading" href="#updatecampaign"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateCampaign</h3>
<ul>
<li>description: Updates a campaign</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "campaign": {
        "resource_type": "campaign",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Personalize"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-QuickSight.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>QuickSight - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-QuickSight.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-QuickSight.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-QuickSight.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="QuickSight - undefined" />
  <meta name="twitter:title" content="QuickSight - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">QuickSight</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="QuickSight">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="quicksight"><a aria-hidden="true" class="anchor-heading" href="#quicksight"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>QuickSight</h1>
<ul>
<li>prefix: quicksight</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="createaccountcustomization"><a aria-hidden="true" class="anchor-heading" href="#createaccountcustomization"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateAccountCustomization</h3>
<ul>
<li>description: Grants permission to create an account customization for QuickSight account or namespace</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createadmin"><a aria-hidden="true" class="anchor-heading" href="#createadmin"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateAdmin</h3>
<ul>
<li>description: CreateAdmin enables the user to provision Amazon QuickSight administrators, authors, and readers.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createcustompermissions"><a aria-hidden="true" class="anchor-heading" href="#createcustompermissions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateCustomPermissions</h3>
<ul>
<li>description: Grants permission to create a custom permissions resource for restricting user access</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdashboard"><a aria-hidden="true" class="anchor-heading" href="#createdashboard"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDashboard</h3>
<ul>
<li>description: Creates a dashboard from a template</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dashboard": {
        "resource_type": "dashboard",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="creategroup"><a aria-hidden="true" class="anchor-heading" href="#creategroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateGroup</h3>
<ul>
<li>description: Create a QuickSight group.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "group": {
        "resource_type": "group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="creategroupmembership"><a aria-hidden="true" class="anchor-heading" href="#creategroupmembership"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateGroupMembership</h3>
<ul>
<li>description: Add a QuickSight user to a QuickSight group.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "group": {
        "resource_type": "group",
        "required": true,
        "condition_keys": [
            "quicksight:UserName"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createiampolicyassignment"><a aria-hidden="true" class="anchor-heading" href="#createiampolicyassignment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateIAMPolicyAssignment</h3>
<ul>
<li>description: Creates an assignment with one specified IAM Policy ARN that will be assigned to specified groups or users of QuickSight.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "assignment": {
        "resource_type": "assignment",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createnamespace"><a aria-hidden="true" class="anchor-heading" href="#createnamespace"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateNamespace</h3>
<ul>
<li>description: Grants permission to create an QuickSight namespace</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "namespace": {
        "resource_type": "namespace",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createreader"><a aria-hidden="true" class="anchor-heading" href="#createreader"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateReader</h3>
<ul>
<li>description: CreateReader enables the user to provision Amazon QuickSight readers.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtemplate"><a aria-hidden="true" class="anchor-heading" href="#createtemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTemplate</h3>
<ul>
<li>description: Creates a template from an existing QuickSight analysis or template</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "template": {
        "resource_type": "template",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtemplatealias"><a aria-hidden="true" class="anchor-heading" href="#createtemplatealias"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTemplateAlias</h3>
<ul>
<li>description: Creates a template alias for a template</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "template": {
        "resource_type": "template",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtheme"><a aria-hidden="true" class="anchor-heading" href="#createtheme"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTheme</h3>
<ul>
<li>description: Creates a QuickSight theme</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "theme": {
        "resource_type": "theme",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createthemealias"><a aria-hidden="true" class="anchor-heading" href="#createthemealias"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateThemeAlias</h3>
<ul>
<li>description: Creates a theme alias for a theme</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "theme": {
        "resource_type": "theme",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createuser"><a aria-hidden="true" class="anchor-heading" href="#createuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateUser</h3>
<ul>
<li>description: CreateUser enables the user to provision Amazon QuickSight authors and readers.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteaccountcustomization"><a aria-hidden="true" class="anchor-heading" href="#deleteaccountcustomization"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAccountCustomization</h3>
<ul>
<li>description: Grants permission to delete an account customization for QuickSight account or namespace</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "customization": {
        "resource_type": "customization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedashboard"><a aria-hidden="true" class="anchor-heading" href="#deletedashboard"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDashboard</h3>
<ul>
<li>description: Deletes a dashboard</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dashboard": {
        "resource_type": "dashboard",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletegroup"><a aria-hidden="true" class="anchor-heading" href="#deletegroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteGroup</h3>
<ul>
<li>description: Remove a user group from QuickSight.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "group": {
        "resource_type": "group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletegroupmembership"><a aria-hidden="true" class="anchor-heading" href="#deletegroupmembership"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteGroupMembership</h3>
<ul>
<li>description: Remove a user from a group so that he/she is no longer a member of the group.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "group": {
        "resource_type": "group",
        "required": true,
        "condition_keys": [
            "quicksight:UserName"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteiampolicyassignment"><a aria-hidden="true" class="anchor-heading" href="#deleteiampolicyassignment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteIAMPolicyAssignment</h3>
<ul>
<li>description: Update an existing assignment.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "assignment": {
        "resource_type": "assignment",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletenamespace"><a aria-hidden="true" class="anchor-heading" href="#deletenamespace"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteNamespace</h3>
<ul>
<li>description: Grants permission to delete a QuickSight namespace</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "namespace": {
        "resource_type": "namespace",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetemplate"><a aria-hidden="true" class="anchor-heading" href="#deletetemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTemplate</h3>
<ul>
<li>description: Deletes a template</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "template": {
        "resource_type": "template",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetemplatealias"><a aria-hidden="true" class="anchor-heading" href="#deletetemplatealias"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTemplateAlias</h3>
<ul>
<li>description: Deletes the item that the specified template alias points to</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "template": {
        "resource_type": "template",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetheme"><a aria-hidden="true" class="anchor-heading" href="#deletetheme"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTheme</h3>
<ul>
<li>description: Deletes a theme</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "theme": {
        "resource_type": "theme",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletethemealias"><a aria-hidden="true" class="anchor-heading" href="#deletethemealias"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteThemeAlias</h3>
<ul>
<li>description: Deletes the item that the specified theme alias points to</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "theme": {
        "resource_type": "theme",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteuser"><a aria-hidden="true" class="anchor-heading" href="#deleteuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteUser</h3>
<ul>
<li>description: Delete the QuickSight user that is associated with the identity of the IAM user/role making the call. The IAM user is not deleted as a result of this call.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteuserbyprincipalid"><a aria-hidden="true" class="anchor-heading" href="#deleteuserbyprincipalid"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteUserByPrincipalId</h3>
<ul>
<li>description: Deletes a user identified by its principal ID.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeaccountcustomization"><a aria-hidden="true" class="anchor-heading" href="#describeaccountcustomization"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAccountCustomization</h3>
<ul>
<li>description: Grants permission to describe an account customization for QuickSight account or namespace</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "customization": {
        "resource_type": "customization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeaccountsettings"><a aria-hidden="true" class="anchor-heading" href="#describeaccountsettings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAccountSettings</h3>
<ul>
<li>description: Grants permission to describe the administrative account settings for QuickSight account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecustompermissions"><a aria-hidden="true" class="anchor-heading" href="#describecustompermissions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeCustomPermissions</h3>
<ul>
<li>description: Grants permission to describe a custom permissions resource in a QuickSight account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedashboard"><a aria-hidden="true" class="anchor-heading" href="#describedashboard"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDashboard</h3>
<ul>
<li>description: Provides a summary for a dashboard</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dashboard": {
        "resource_type": "dashboard",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedashboardpermissions"><a aria-hidden="true" class="anchor-heading" href="#describedashboardpermissions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDashboardPermissions</h3>
<ul>
<li>description: Describes read and write permissions for a dashboard</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dashboard": {
        "resource_type": "dashboard",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describegroup"><a aria-hidden="true" class="anchor-heading" href="#describegroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeGroup</h3>
<ul>
<li>description: Return a QuickSight group’s description and ARN.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "group": {
        "resource_type": "group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeiampolicyassignment"><a aria-hidden="true" class="anchor-heading" href="#describeiampolicyassignment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeIAMPolicyAssignment</h3>
<ul>
<li>description: Describe an existing assignment.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "assignment": {
        "resource_type": "assignment",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describenamespace"><a aria-hidden="true" class="anchor-heading" href="#describenamespace"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeNamespace</h3>
<ul>
<li>description: Grants permission to describe a QuickSight namespace</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "namespace": {
        "resource_type": "namespace",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetemplate"><a aria-hidden="true" class="anchor-heading" href="#describetemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTemplate</h3>
<ul>
<li>description: Describes a template's metadata</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "template": {
        "resource_type": "template",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetemplatealias"><a aria-hidden="true" class="anchor-heading" href="#describetemplatealias"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTemplateAlias</h3>
<ul>
<li>description: Describes the template alias for a template</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "template": {
        "resource_type": "template",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetemplatepermissions"><a aria-hidden="true" class="anchor-heading" href="#describetemplatepermissions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTemplatePermissions</h3>
<ul>
<li>description: Describes read and write permissions on a template</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "template": {
        "resource_type": "template",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetheme"><a aria-hidden="true" class="anchor-heading" href="#describetheme"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTheme</h3>
<ul>
<li>description: Describes a theme's metadata</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "theme": {
        "resource_type": "theme",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describethemealias"><a aria-hidden="true" class="anchor-heading" href="#describethemealias"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeThemeAlias</h3>
<ul>
<li>description: Describes the theme alias for a theme</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "theme": {
        "resource_type": "theme",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describethemepermissions"><a aria-hidden="true" class="anchor-heading" href="#describethemepermissions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeThemePermissions</h3>
<ul>
<li>description: Describes read and write permissions on a theme</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "theme": {
        "resource_type": "theme",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeuser"><a aria-hidden="true" class="anchor-heading" href="#describeuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeUser</h3>
<ul>
<li>description: Return information about a user, given the user name.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getauthcode"><a aria-hidden="true" class="anchor-heading" href="#getauthcode"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAuthCode</h3>
<ul>
<li>description: Return an auth code representing a QuickSight user.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdashboardembedurl"><a aria-hidden="true" class="anchor-heading" href="#getdashboardembedurl"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDashboardEmbedUrl</h3>
<ul>
<li>description: Return a QuickSight dashboard embedding URL.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dashboard": {
        "resource_type": "dashboard",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getgroupmapping"><a aria-hidden="true" class="anchor-heading" href="#getgroupmapping"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetGroupMapping</h3>
<ul>
<li>description: GetGroupMapping is used only in Amazon QuickSight Enterprise edition accounts. It enables the user to use Amazon QuickSight to identify and display the Microsoft Active Directory (Microsoft Active Directory) directory groups that are mapped to roles in Amazon QuickSight.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsessionembedurl"><a aria-hidden="true" class="anchor-heading" href="#getsessionembedurl"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSessionEmbedUrl</h3>
<ul>
<li>description: Grants permission to get a URL to embed QuickSight console experience.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listcustompermissions"><a aria-hidden="true" class="anchor-heading" href="#listcustompermissions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListCustomPermissions</h3>
<ul>
<li>description: Grants permission to list custom permissions resources in QuickSight account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdashboardversions"><a aria-hidden="true" class="anchor-heading" href="#listdashboardversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDashboardVersions</h3>
<ul>
<li>description: Lists all the versions of the dashboards in the QuickSight subscription</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dashboard": {
        "resource_type": "dashboard",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdashboards"><a aria-hidden="true" class="anchor-heading" href="#listdashboards"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDashboards</h3>
<ul>
<li>description: Lists dashboards in an AWS account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dashboard": {
        "resource_type": "dashboard",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listgroupmemberships"><a aria-hidden="true" class="anchor-heading" href="#listgroupmemberships"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListGroupMemberships</h3>
<ul>
<li>description: Return a list of member users in a group.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "group": {
        "resource_type": "group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listgroups"><a aria-hidden="true" class="anchor-heading" href="#listgroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListGroups</h3>
<ul>
<li>description: Get a list of all user groups in QuickSight.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "group": {
        "resource_type": "group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listiampolicyassignments"><a aria-hidden="true" class="anchor-heading" href="#listiampolicyassignments"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListIAMPolicyAssignments</h3>
<ul>
<li>description: List all assignments in the current Amazon QuickSight account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "assignment": {
        "resource_type": "assignment",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listiampolicyassignmentsforuser"><a aria-hidden="true" class="anchor-heading" href="#listiampolicyassignmentsforuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListIAMPolicyAssignmentsForUser</h3>
<ul>
<li>description: List all assignments assigned to a user and the groups it belongs</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "assignment": {
        "resource_type": "assignment",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listnamespaces"><a aria-hidden="true" class="anchor-heading" href="#listnamespaces"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListNamespaces</h3>
<ul>
<li>description: Grants permission to lists all namespaces in a QuickSight account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: List tags of a QuickSight resource.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "customization": {
        "resource_type": "customization",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dashboard": {
        "resource_type": "dashboard",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "template": {
        "resource_type": "template",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "theme": {
        "resource_type": "theme",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtemplatealiases"><a aria-hidden="true" class="anchor-heading" href="#listtemplatealiases"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTemplateAliases</h3>
<ul>
<li>description: Lists all the aliases of a template</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "template": {
        "resource_type": "template",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtemplateversions"><a aria-hidden="true" class="anchor-heading" href="#listtemplateversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTemplateVersions</h3>
<ul>
<li>description: Lists all the versions of the templates in the current Amazon QuickSight account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "template": {
        "resource_type": "template",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtemplates"><a aria-hidden="true" class="anchor-heading" href="#listtemplates"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTemplates</h3>
<ul>
<li>description: Lists all the templates in the current Amazon QuickSight account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "template": {
        "resource_type": "template",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listthemealiases"><a aria-hidden="true" class="anchor-heading" href="#listthemealiases"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListThemeAliases</h3>
<ul>
<li>description: Lists all the aliases of a theme</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "theme": {
        "resource_type": "theme",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listthemeversions"><a aria-hidden="true" class="anchor-heading" href="#listthemeversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListThemeVersions</h3>
<ul>
<li>description: Lists all the versions of a theme</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "theme": {
        "resource_type": "theme",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listthemes"><a aria-hidden="true" class="anchor-heading" href="#listthemes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListThemes</h3>
<ul>
<li>description: Lists all the themes in the current Amazon QuickSight account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "theme": {
        "resource_type": "theme",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listusergroups"><a aria-hidden="true" class="anchor-heading" href="#listusergroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListUserGroups</h3>
<ul>
<li>description: Return a list of groups that a given user is a member of.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listusers"><a aria-hidden="true" class="anchor-heading" href="#listusers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListUsers</h3>
<ul>
<li>description: Return a list of all of the QuickSight users belonging to this account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registeruser"><a aria-hidden="true" class="anchor-heading" href="#registeruser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterUser</h3>
<ul>
<li>description: Create a QuickSight user, whose identity is associated with the IAM identity/role specified in the request.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [
            "quicksight:IamArn",
            "quicksight:SessionName"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="searchdirectorygroups"><a aria-hidden="true" class="anchor-heading" href="#searchdirectorygroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SearchDirectoryGroups</h3>
<ul>
<li>description: SearchDirectoryGroups is used only in Amazon QuickSight Enterprise edition accounts. It enables the user to use Amazon QuickSight to display your Microsoft Active Directory directory groups so that you can choose which ones to map to roles in Amazon QuickSight.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setgroupmapping"><a aria-hidden="true" class="anchor-heading" href="#setgroupmapping"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetGroupMapping</h3>
<ul>
<li>description: SearchDirectoryGroups is used only in Amazon QuickSight Enterprise edition accounts. It enables the user to use Amazon QuickSight to display your Microsoft Active Directory directory groups so that you can choose which ones to map to roles in Amazon QuickSight.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="subscribe"><a aria-hidden="true" class="anchor-heading" href="#subscribe"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Subscribe</h3>
<ul>
<li>description: Subscribe enables the user to subscribe to Amazon QuickSight. Enabling this action also allows the user to upgrade the subscription to Enterprise edition.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Add tags to a QuickSight resource</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "customization": {
        "resource_type": "customization",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dashboard": {
        "resource_type": "dashboard",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "template": {
        "resource_type": "template",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "theme": {
        "resource_type": "theme",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys",
            "aws:RequestTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="unsubscribe"><a aria-hidden="true" class="anchor-heading" href="#unsubscribe"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Unsubscribe</h3>
<ul>
<li>description: Unsubscribe enables the user to unsubscribe from Amazon QuickSight, which permanently deletes all users and their resources from Amazon QuickSight.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Remove tags from a QuickSight resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "customization": {
        "resource_type": "customization",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "dashboard": {
        "resource_type": "dashboard",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "template": {
        "resource_type": "template",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "theme": {
        "resource_type": "theme",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateaccountcustomization"><a aria-hidden="true" class="anchor-heading" href="#updateaccountcustomization"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateAccountCustomization</h3>
<ul>
<li>description: Grants permission to update an account customization for QuickSight account or namespace</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "customization": {
        "resource_type": "customization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateaccountsettings"><a aria-hidden="true" class="anchor-heading" href="#updateaccountsettings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateAccountSettings</h3>
<ul>
<li>description: Grants permission to update the administrative account settings for QuickSight account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatecustompermissions"><a aria-hidden="true" class="anchor-heading" href="#updatecustompermissions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateCustomPermissions</h3>
<ul>
<li>description: Grants permission to update a custom permissions resource</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatedashboard"><a aria-hidden="true" class="anchor-heading" href="#updatedashboard"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateDashboard</h3>
<ul>
<li>description: Updates a dashboard in an AWS account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dashboard": {
        "resource_type": "dashboard",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatedashboardpermissions"><a aria-hidden="true" class="anchor-heading" href="#updatedashboardpermissions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateDashboardPermissions</h3>
<ul>
<li>description: Updates read and write permissions on a dashboard</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dashboard": {
        "resource_type": "dashboard",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatedashboardpublishedversion"><a aria-hidden="true" class="anchor-heading" href="#updatedashboardpublishedversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateDashboardPublishedVersion</h3>
<ul>
<li>description: Updates the published version of a dashboard</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "dashboard": {
        "resource_type": "dashboard",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updategroup"><a aria-hidden="true" class="anchor-heading" href="#updategroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateGroup</h3>
<ul>
<li>description: Change group description.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "group": {
        "resource_type": "group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateiampolicyassignment"><a aria-hidden="true" class="anchor-heading" href="#updateiampolicyassignment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateIAMPolicyAssignment</h3>
<ul>
<li>description: Update an existing assignment.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "assignment": {
        "resource_type": "assignment",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatetemplate"><a aria-hidden="true" class="anchor-heading" href="#updatetemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateTemplate</h3>
<ul>
<li>description: Updates a template from an existing Amazon QuickSight analysis or another template</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "template": {
        "resource_type": "template",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatetemplatealias"><a aria-hidden="true" class="anchor-heading" href="#updatetemplatealias"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateTemplateAlias</h3>
<ul>
<li>description: Updates the template alias of a template</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "template": {
        "resource_type": "template",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatetemplatepermissions"><a aria-hidden="true" class="anchor-heading" href="#updatetemplatepermissions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateTemplatePermissions</h3>
<ul>
<li>description: Updates the resource permissions for a template</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "template": {
        "resource_type": "template",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatetheme"><a aria-hidden="true" class="anchor-heading" href="#updatetheme"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateTheme</h3>
<ul>
<li>description: Updates a theme</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "theme": {
        "resource_type": "theme",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatethemealias"><a aria-hidden="true" class="anchor-heading" href="#updatethemealias"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateThemeAlias</h3>
<ul>
<li>description: Updates the theme alias of a theme</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "theme": {
        "resource_type": "theme",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatethemepermissions"><a aria-hidden="true" class="anchor-heading" href="#updatethemepermissions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateThemePermissions</h3>
<ul>
<li>description: Updates the resource permissions for a theme</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "theme": {
        "resource_type": "theme",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateuser"><a aria-hidden="true" class="anchor-heading" href="#updateuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateUser</h3>
<ul>
<li>description: Updates an Amazon QuickSight user.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-QuickSight"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-CloudHSM.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>CloudHSM - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-CloudHSM.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-CloudHSM.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-CloudHSM.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="CloudHSM - undefined" />
  <meta name="twitter:title" content="CloudHSM - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">CloudHSM</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="CloudHSM">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="cloudhsm"><a aria-hidden="true" class="anchor-heading" href="#cloudhsm"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CloudHSM</h1>
<ul>
<li>prefix: cloudhsm</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="addtagstoresource"><a aria-hidden="true" class="anchor-heading" href="#addtagstoresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddTagsToResource</h3>
<ul>
<li>description: Adds or overwrites one or more tags for the specified AWS CloudHSM resource</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="copybackuptoregion"><a aria-hidden="true" class="anchor-heading" href="#copybackuptoregion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CopyBackupToRegion</h3>
<ul>
<li>description: Creates a copy of a backup in the specified region</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "backup": {
        "resource_type": "backup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createcluster"><a aria-hidden="true" class="anchor-heading" href="#createcluster"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateCluster</h3>
<ul>
<li>description: Creates a new AWS CloudHSM cluster</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "backup": {
        "resource_type": "backup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createhapg"><a aria-hidden="true" class="anchor-heading" href="#createhapg"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateHapg</h3>
<ul>
<li>description: Creates a high-availability partition group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createhsm"><a aria-hidden="true" class="anchor-heading" href="#createhsm"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateHsm</h3>
<ul>
<li>description: Creates a new hardware security module (HSM) in the specified AWS CloudHSM cluster</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createlunaclient"><a aria-hidden="true" class="anchor-heading" href="#createlunaclient"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateLunaClient</h3>
<ul>
<li>description: Creates an HSM client</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletebackup"><a aria-hidden="true" class="anchor-heading" href="#deletebackup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteBackup</h3>
<ul>
<li>description: Deletes the specified CloudHSM backup</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "backup": {
        "resource_type": "backup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletecluster"><a aria-hidden="true" class="anchor-heading" href="#deletecluster"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteCluster</h3>
<ul>
<li>description: Deletes the specified AWS CloudHSM cluster</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletehapg"><a aria-hidden="true" class="anchor-heading" href="#deletehapg"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteHapg</h3>
<ul>
<li>description: Deletes a high-availability partition group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletehsm"><a aria-hidden="true" class="anchor-heading" href="#deletehsm"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteHsm</h3>
<ul>
<li>description: Deletes the specified HSM</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletelunaclient"><a aria-hidden="true" class="anchor-heading" href="#deletelunaclient"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteLunaClient</h3>
<ul>
<li>description: Deletes a client</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describebackups"><a aria-hidden="true" class="anchor-heading" href="#describebackups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeBackups</h3>
<ul>
<li>description: Gets information about backups of AWS CloudHSM clusters</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeclusters"><a aria-hidden="true" class="anchor-heading" href="#describeclusters"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeClusters</h3>
<ul>
<li>description: Gets information about AWS CloudHSM clusters</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describehapg"><a aria-hidden="true" class="anchor-heading" href="#describehapg"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeHapg</h3>
<ul>
<li>description: Retrieves information about a high-availability partition group</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describehsm"><a aria-hidden="true" class="anchor-heading" href="#describehsm"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeHsm</h3>
<ul>
<li>description: Retrieves information about an HSM. You can identify the HSM by its ARN or its serial number</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describelunaclient"><a aria-hidden="true" class="anchor-heading" href="#describelunaclient"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeLunaClient</h3>
<ul>
<li>description: Retrieves information about an HSM client</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getconfig"><a aria-hidden="true" class="anchor-heading" href="#getconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetConfig</h3>
<ul>
<li>description: Gets the configuration files necessary to connect to all high availability partition groups the client is associated with</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="initializecluster"><a aria-hidden="true" class="anchor-heading" href="#initializecluster"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>InitializeCluster</h3>
<ul>
<li>description: Claims an AWS CloudHSM cluster</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listavailablezones"><a aria-hidden="true" class="anchor-heading" href="#listavailablezones"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAvailableZones</h3>
<ul>
<li>description: Lists the Availability Zones that have available AWS CloudHSM capacity</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listhapgs"><a aria-hidden="true" class="anchor-heading" href="#listhapgs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListHapgs</h3>
<ul>
<li>description: Lists the high-availability partition groups for the account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listhsms"><a aria-hidden="true" class="anchor-heading" href="#listhsms"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListHsms</h3>
<ul>
<li>description: Retrieves the identifiers of all of the HSMs provisioned for the current customer</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listlunaclients"><a aria-hidden="true" class="anchor-heading" href="#listlunaclients"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListLunaClients</h3>
<ul>
<li>description: Lists all of the clients</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtags"><a aria-hidden="true" class="anchor-heading" href="#listtags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTags</h3>
<ul>
<li>description: Gets a list of tags for the specified AWS CloudHSM cluster</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "backup": {
        "resource_type": "backup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "cluster": {
        "resource_type": "cluster",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Returns a list of all tags for the specified AWS CloudHSM resource</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyhapg"><a aria-hidden="true" class="anchor-heading" href="#modifyhapg"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyHapg</h3>
<ul>
<li>description: Modifies an existing high-availability partition group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyhsm"><a aria-hidden="true" class="anchor-heading" href="#modifyhsm"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyHsm</h3>
<ul>
<li>description: Modifies an HSM</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifylunaclient"><a aria-hidden="true" class="anchor-heading" href="#modifylunaclient"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyLunaClient</h3>
<ul>
<li>description: Modifies the certificate used by the client</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="removetagsfromresource"><a aria-hidden="true" class="anchor-heading" href="#removetagsfromresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemoveTagsFromResource</h3>
<ul>
<li>description: Removes one or more tags from the specified AWS CloudHSM resource</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="restorebackup"><a aria-hidden="true" class="anchor-heading" href="#restorebackup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RestoreBackup</h3>
<ul>
<li>description: Restores the specified CloudHSM backup</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "backup": {
        "resource_type": "backup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Adds or overwrites one or more tags for the specified AWS CloudHSM cluster</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "backup": {
        "resource_type": "backup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "cluster": {
        "resource_type": "cluster",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Removes the specified tag or tags from the specified AWS CloudHSM cluster</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "backup": {
        "resource_type": "backup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "cluster": {
        "resource_type": "cluster",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-CloudHSM"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-IoT 1-Click.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>IoT 1-Click - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-IoT 1-Click.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-IoT 1-Click.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-IoT 1-Click.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="IoT 1-Click - undefined" />
  <meta name="twitter:title" content="IoT 1-Click - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">IoT 1-Click</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="IoT 1-Click">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="iot-1-click"><a aria-hidden="true" class="anchor-heading" href="#iot-1-click"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>IoT 1-Click</h1>
<ul>
<li>prefix: iot1click</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="associatedevicewithplacement"><a aria-hidden="true" class="anchor-heading" href="#associatedevicewithplacement"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateDeviceWithPlacement</h3>
<ul>
<li>description: Associate a device to a placement</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="claimdevicesbyclaimcode"><a aria-hidden="true" class="anchor-heading" href="#claimdevicesbyclaimcode"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ClaimDevicesByClaimCode</h3>
<ul>
<li>description: Claim a batch of devices with a claim code.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createplacement"><a aria-hidden="true" class="anchor-heading" href="#createplacement"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreatePlacement</h3>
<ul>
<li>description: Create a new placement in a project</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createproject"><a aria-hidden="true" class="anchor-heading" href="#createproject"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateProject</h3>
<ul>
<li>description: Create a new project</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteplacement"><a aria-hidden="true" class="anchor-heading" href="#deleteplacement"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeletePlacement</h3>
<ul>
<li>description: Delete a placement from a project</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteproject"><a aria-hidden="true" class="anchor-heading" href="#deleteproject"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteProject</h3>
<ul>
<li>description: Delete a project</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedevice"><a aria-hidden="true" class="anchor-heading" href="#describedevice"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDevice</h3>
<ul>
<li>description: Describe a device</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "device": {
        "resource_type": "device",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeplacement"><a aria-hidden="true" class="anchor-heading" href="#describeplacement"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribePlacement</h3>
<ul>
<li>description: Describe a placement</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeproject"><a aria-hidden="true" class="anchor-heading" href="#describeproject"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeProject</h3>
<ul>
<li>description: Describe a project</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociatedevicefromplacement"><a aria-hidden="true" class="anchor-heading" href="#disassociatedevicefromplacement"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateDeviceFromPlacement</h3>
<ul>
<li>description: Disassociate a device from a placement</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="finalizedeviceclaim"><a aria-hidden="true" class="anchor-heading" href="#finalizedeviceclaim"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>FinalizeDeviceClaim</h3>
<ul>
<li>description: Finalize a device claim</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "device": {
        "resource_type": "device",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdevicemethods"><a aria-hidden="true" class="anchor-heading" href="#getdevicemethods"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDeviceMethods</h3>
<ul>
<li>description: Get available methods of a device</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "device": {
        "resource_type": "device",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdevicesinplacement"><a aria-hidden="true" class="anchor-heading" href="#getdevicesinplacement"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDevicesInPlacement</h3>
<ul>
<li>description: Get devices associated to a placement</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="initiatedeviceclaim"><a aria-hidden="true" class="anchor-heading" href="#initiatedeviceclaim"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>InitiateDeviceClaim</h3>
<ul>
<li>description: Initialize a device claim</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "device": {
        "resource_type": "device",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="invokedevicemethod"><a aria-hidden="true" class="anchor-heading" href="#invokedevicemethod"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>InvokeDeviceMethod</h3>
<ul>
<li>description: Invoke a device method</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "device": {
        "resource_type": "device",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdeviceevents"><a aria-hidden="true" class="anchor-heading" href="#listdeviceevents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDeviceEvents</h3>
<ul>
<li>description: List past events published by a device</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "device": {
        "resource_type": "device",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdevices"><a aria-hidden="true" class="anchor-heading" href="#listdevices"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDevices</h3>
<ul>
<li>description: List all devices</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listplacements"><a aria-hidden="true" class="anchor-heading" href="#listplacements"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPlacements</h3>
<ul>
<li>description: List placements in a project</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listprojects"><a aria-hidden="true" class="anchor-heading" href="#listprojects"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListProjects</h3>
<ul>
<li>description: List all projects</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Lists the tags (metadata) which you have assigned to the resource.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "device": {
        "resource_type": "device",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "project": {
        "resource_type": "project",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Adds to or modifies the tags of the given resource. Tags are metadata which can be used to manage a resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "device": {
        "resource_type": "device",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "project": {
        "resource_type": "project",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="unclaimdevice"><a aria-hidden="true" class="anchor-heading" href="#unclaimdevice"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UnclaimDevice</h3>
<ul>
<li>description: Unclaim a device</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "device": {
        "resource_type": "device",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Removes the given tags (metadata) from the resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "device": {
        "resource_type": "device",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "project": {
        "resource_type": "project",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatedevicestate"><a aria-hidden="true" class="anchor-heading" href="#updatedevicestate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateDeviceState</h3>
<ul>
<li>description: Update device state</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "device": {
        "resource_type": "device",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateplacement"><a aria-hidden="true" class="anchor-heading" href="#updateplacement"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdatePlacement</h3>
<ul>
<li>description: Update a placement</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateproject"><a aria-hidden="true" class="anchor-heading" href="#updateproject"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateProject</h3>
<ul>
<li>description: Update a project</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-IoT 1-Click"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/rds-aurora-mysql.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>RDS Aurora MySQL - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/rds-aurora-mysql.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/rds-aurora-mysql.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/rds-aurora-mysql.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="RDS Aurora MySQL - undefined" />
  <meta name="twitter:title" content="RDS Aurora MySQL - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/1f759d8c-cca7-4fc4-9aa2-6dbf6e596abf.html">Services</a></li><li class="breadcrumb-nav-list-item">RDS Aurora MySQL</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/open-guides/og-aws" target="_blank"> og-aws  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="RDS Aurora MySQL">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="rds-aurora-mysql"><a aria-hidden="true" class="anchor-heading" href="#rds-aurora-mysql"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RDS Aurora MySQL</h1>
<h3 id="rds-aurora-mysql-basics"><a aria-hidden="true" class="anchor-heading" href="#rds-aurora-mysql-basics"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RDS Aurora MySQL Basics</h3>
<ul>
<li>Amazon’s proprietary fork of MySQL intended to scale up for high concurrency workloads. Generally speaking, individual query performance under Aurora is not expected to improve significantly relative to MySQL or MariaDB, but Aurora is intended to maintain performance while executing many more queries concurrently than an equivalent MySQL or MariaDB server could handle.</li>
<li><a href="http://www.slideshare.net/AmazonWebServices/amazon-aurora-amazons-new-relational-database-engine">Notable new features</a> include:
<ul>
<li>Log-structured storage instead of B-trees to improve write performance.</li>
<li>Out-of-process buffer pool so that databases instances can be restarted without clearing the buffer pool.</li>
<li>The underlying physical storage is a specialized SSD array that automatically maintains 6 copies of your data across 3 AZs.</li>
<li>Aurora read replicas share the storage layer with the write master which significantly reduces replica lag, eliminates the need for the master to write and distribute the binary log for replication, and allows for zero-data-loss failovers from the master to a replica. The master and all the read replicas that share storage are known collectively as an <strong>Aurora cluster</strong>. Read replicas can span up to <a href="https://aws.amazon.com/about-aws/whats-new/2018/09/amazon-aurora-databases-support-up-to-five-cross-region-read-replicas/">5 regions</a>.</li>
</ul>
</li>
</ul>
<h3 id="rds-aurora-mysql-tips"><a aria-hidden="true" class="anchor-heading" href="#rds-aurora-mysql-tips"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RDS Aurora MySQL Tips</h3>
<ul>
<li>In order to take advantage of Aurora’s higher concurrency, applications should be configured with large database connection pools and should execute as many queries concurrently as possible. For example, Aurora servers have been tested to produce increasing performance on some OLTP workloads with <a href="http://www.slideshare.net/AmazonWebServices/amazon-aurora-amazons-new-relational-database-engine/31">up to 5,000 connections</a>.</li>
<li><a href="https://www.percona.com/blog/2016/05/26/aws-aurora-benchmarking-part-2/">Aurora scales well with multiple CPUs</a> and may require a large instance class for optimal performance.</li>
<li>The easiest migration path to Aurora is restoring a database snapshot from MySQL 5.6 or 5.7. The next easiest method is restoring a dump from a MySQL-compatible database such as MariaDB. For <a href="https://aws.amazon.com/blogs/aws/amazon-aurora-update-spatial-indexing-and-zero-downtime-patching/">low-downtime migrations</a> from other MySQL-compatible databases, you can set up an Aurora instance as a replica of your existing database. If none of those methods are options, Amazon offers a fee-based data migration service.</li>
<li>You can replicate <a href="http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Aurora.Overview.Replication.MySQLReplication.html">from an Aurora cluster to MySQL or to another Aurora cluster</a>. This requires binary logging to be enabled and is not as performant as native Aurora replication.</li>
<li>Because Aurora read replicas are the <a href="http://stackoverflow.com/a/32428651/129052">equivalent of a multi-AZ backup</a> and they can be configured as zero-data-loss failover targets, there are fewer scenarios in which the creation of a multi-AZ Aurora instance is required.</li>
</ul>
<h3 id="rds-aurora-mysql-gotchas-and-limitations"><a aria-hidden="true" class="anchor-heading" href="#rds-aurora-mysql-gotchas-and-limitations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RDS Aurora MySQL Gotchas and Limitations</h3>
<ul>
<li>🔸<a href="https://news.ycombinator.com/item?id=12415693">Aurora 1.x is based on MySQL 5.6.x</a> with some cherry-picking of later MySQL features. It is missing most 5.7 features as well as some online DDL features introduced in 5.6.17.</li>
<li>🔸<a href="https://aws.amazon.com/about-aws/whats-new/2018/02/amazon-aurora-is-compatible-with-mysql-5-7/">Aurora 2.x is based on MySQL 5.7.x</a></li>
<li>Aurora does not support GTID transactions in either the 5.6/Aurora 1.x or the 5.7/Aurora 2.x release lines.</li>
<li>Aurora maximum cluster size is 64 TB</li>
</ul><span id="navId" data="rds-aurora-mysql"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/vpcs-network-security-and-security-groups.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>VPCs, Network Security, and Security Groups - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/vpcs-network-security-and-security-groups.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/vpcs-network-security-and-security-groups.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/vpcs-network-security-and-security-groups.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="VPCs, Network Security, and Security Groups - undefined" />
  <meta name="twitter:title" content="VPCs, Network Security, and Security Groups - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/1f759d8c-cca7-4fc4-9aa2-6dbf6e596abf.html">Services</a></li><li class="breadcrumb-nav-list-item">VPCs, Network Security, and Security Groups</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>JKI" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/open-guides/og-aws" target="_blank"> og-aws  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="VPCs, Network Security, and Security Groups">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="vpcs-network-security-and-security-groups"><a aria-hidden="true" class="anchor-heading" href="#vpcs-network-security-and-security-groups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>VPCs, Network Security, and Security Groups</h1>
<h3 id="vpc-basics"><a aria-hidden="true" class="anchor-heading" href="#vpc-basics"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>VPC Basics</h3>
<ul>
<li>📒 <a href="https://aws.amazon.com/vpc/">Homepage</a> ∙ <a href="http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide">User guide</a> ∙ <a href="https://aws.amazon.com/vpc/faqs/">FAQ</a> ∙ <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-network-security.html">Security groups</a> ∙ <a href="https://aws.amazon.com/vpc/pricing/">Pricing</a></li>
<li><strong>VPC</strong> (Virtual Private Cloud) is the virtualized networking layer of your AWS systems.</li>
<li>Most AWS users should have a basic understanding of VPC concepts, but few need to get into all the details. VPC configurations can be trivial or extremely complex, depending on the extent of your network and security needs.</li>
<li>All modern AWS accounts (those created <a href="http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-vpc.html">after 2013-12-04</a>) are “EC2-VPC” accounts that support VPCs, and all instances will be in a default VPC. Older accounts may still be using “EC2-Classic” mode. Some features don’t work without VPCs, so you probably will want to <a href="http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/vpc-migrate.html">migrate</a>.</li>
</ul>
<h3 id="vpc-and-network-security-tips"><a aria-hidden="true" class="anchor-heading" href="#vpc-and-network-security-tips"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>VPC and Network Security Tips</h3>
<ul>
<li>
<p>❗<strong>Security groups</strong> are your first line of defense for your servers. Be extremely restrictive of what ports are open to all incoming connections. In general, if you use CLBs, ALBs or other load balancing, the only ports that need to be open to incoming traffic would be port 22 and whatever port your application uses. Security groups access policy is 'deny by default'.</p>
</li>
<li>
<p><strong>Port hygiene:</strong> A good habit is to pick unique ports within an unusual range for each different kind of production service. For example, your web frontend might use 3010, your backend services 3020 and 3021, and your Postgres instances the usual 5432. Then make sure you have fine-grained security groups for each set of servers. This makes you disciplined about listing out your services, but also is more error-proof. For example, should you accidentally have an extra Apache server running on the default port 80 on a backend server, it will not be exposed.</p>
</li>
<li>
<p><strong>Migrating from Classic</strong>: For migrating from older EC2-Classic deployments to modern EC2-VPC setup, <a href="http://blog.kiip.me/engineering/ec2-to-vpc-executing-a-zero-downtime-migration/">this article</a> may be of help.</p>
<ul>
<li>You can <a href="http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/elastic-ip-addresses-eip.html#using-eip-migration">migrate Elastic IPs between EC2-Classic and EC2-VPC</a>.</li>
</ul>
</li>
<li>
<p>For basic AWS use, one default VPC may be sufficient. But as you scale up, you should consider mapping out network topology more thoroughly. A good overview of best practices is <a href="http://blog.flux7.com/blogs/aws/vpc-best-configuration-practices">here</a>.</p>
</li>
<li>
<p>Consider controlling access to you private AWS resources through a <a href="http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/vpn-connections.html">VPN</a>.</p>
<ul>
<li>You get better visibility into and control of connection and connection attempts.</li>
<li>You expose a smaller surface area for attack compared to exposing separate (potentially authenticated) services over the public internet.
<ul>
<li>e.g. A bug in the YAML parser used by the Ruby on Rails admin site is much less serious when the admin site is only visible to the private network and accessed through VPN.</li>
</ul>
</li>
<li>Another common pattern (especially as deployments get larger, security or regulatory requirements get more stringent, or team sizes increase) is to provide a <a href="https://www.pandastrike.com/posts/20141113-bastion-hosts">bastion host</a> behind a VPN through which all SSH connections need to transit.</li>
<li>For a cheap VPN to access private AWS resources, consider using a point-to-site software VPN such as <a href="https://openvpn.net/">OpenVPN</a>. It can either be installed using the <a href="https://docs.openvpn.net/how-to-tutorialsguides/virtual-platforms/amazon-ec2-appliance-ami-quick-start-guide/">official AMI</a>, though you are limited to 2 concurrent users on the free license, or it can be installed using the openvpn package on linux. The linux package allows for unlimited concurrent users but the installation is less straightforward. This <a href="https://github.com/Nyr/openvpn-install">OpenVPN installer script</a> can help you install it and add client keys easily.</li>
</ul>
</li>
<li>
<p>🔹Consider using other security groups as sources for security group rules instead of using CIDRs — that way, all hosts in the source security group and only hosts in that security group are allowed access. This is a much more dynamic and secure way of managing security group rules.</p>
</li>
<li>
<p><strong>VPC Flow Logs</strong> allow you to monitor the network traffic to, from, and within your VPC. Logs are stored in CloudWatch Logs groups, and can be used for security monitoring (with third party tools), performance evaluation, and forensic investigation.</p>
<ul>
<li>See the <a href="http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/flow-logs.html">VPC Flow Logs User Guide</a> for basic information.</li>
<li>See the <a href="https://github.com/obsrvbl/flowlogs-reader">flowlogs-reader</a> CLI tool and Python library to retrieve and work with VPC Flow Logs.</li>
</ul>
</li>
<li>
<p><strong>IPv6</strong> <a href="https://aws.amazon.com/blogs/aws/new-ipv6-support-for-ec2-instances-in-virtual-private-clouds/">is available in VPC</a>. Along with this announcement came the introduction of the <a href="https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/egress-only-internet-gateway.html">Egress-Only Internet Gateway</a>. In cases where one would use NAT Gateways to enable egress-only traffic for their VPC in IPv4, one can use an Egress-Only Internet Gateway for the same purpose in IPv6.</p>
</li>
<li>
<p>Amazon provides an IPv6 CIDR block for your VPC at your request - at present you cannot implement your own IPv6 block if you happen to own one already.</p>
</li>
<li>
<p>New and existing VPCs can both use IPv6. Existing VPCs will need to be configured to have an IPv6 CIDR block associated with them, just as new VPCs do.</p>
</li>
</ul>
<h3 id="privatelink"><a aria-hidden="true" class="anchor-heading" href="#privatelink"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PrivateLink</h3>
<ul>
<li>📒<a href="https://aws.amazon.com/privatelink/">Homepage</a> ∙ <a href="https://docs.aws.amazon.com/vpc/latest/userguide/vpce-interface.html">User Guide</a> ∙  <a href="https://aws.amazon.com/privatelink/pricing/">Pricing</a></li>
<li>One of the uses for Private link is <a href="https://docs.aws.amazon.com/vpc/latest/userguide/vpce-interface.html">Interface VPC Endpoints</a> deploys an ENI into your VPC and subnets which allows you direct access to the AWS API's as if the were accessible locally in your VPC without having to go out to the internet.</li>
<li>Another use case would be to expose a service of your own to other accounts in AWS through a <a href="https://docs.aws.amazon.com/vpc/latest/userguide/endpoint-service.html">VPC Endpoint Service</a></li>
</ul>
<h3 id="vpc-and-network-security-gotchas-and-limitations"><a aria-hidden="true" class="anchor-heading" href="#vpc-and-network-security-gotchas-and-limitations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>VPC and Network Security Gotchas and Limitations</h3>
<ul>
<li>🔸VPCs are tied to one Region in one Account. Subnets are tied to one VPC and limited to one Availability Zone.</li>
<li>🔸Security groups are tied to one VPC. If you are utilizing infrastructure in multiple VPCs you should make sure your configuration/deployment tools take that into account.</li>
<li>🔸<a href="http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/vpc-endpoints.html">VPC Endpoints</a> are currently only available for S3 and DynamoDB. If you have a security requirement to lockdown outbound traffic from your VPC you may want to use <a href="https://aws.amazon.com/blogs/security/how-to-add-dns-filtering-to-your-nat-instance-with-squid/">DNS filtering</a> to control outbound traffic to other services.</li>
<li>❗Be careful when choosing your VPC IP CIDR block: If you are going to need to make use of <a href="http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/vpc-classiclink.html">ClassicLink</a>, make sure that your private IP range <a href="http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/vpc-classiclink.html#classiclink-limitations">doesn’t overlap</a> with that of EC2 Classic.</li>
<li>❗If you are going to peer VPCs, carefully consider the cost of <a href="https://aws.amazon.com/vpc/faqs/#Peering_Connections">data transfer between VPCs</a>, since for some workloads and integrations, this can be prohibitively expensive.</li>
<li>❗New RDS instances require a <a href="http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.html#USER_VPC.Subnets">subnet group</a> within your VPC. If you’re using the <a href="http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/default-vpc.html">default VPC</a> this isn’t a concern, it will contain a subnet for each availability zone in your region. However, if you’re creating your own VPC and plan on using RDS, make sure you have at least two subnets within the VPC to act as the subnet group.</li>
<li>❗If you delete the default VPC, you can <a href="http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/default-vpc.html#create-default-vpc">recreate it via the CLI or the console</a>.</li>
<li>❗Be careful with VPC VPN credentials! If lost or compromised, the VPN endpoint must be deleted and recreated. See the instructions for <a href="http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_VPN.html#CompromisedCredentials">Replacing Compromised Credentials</a>.</li>
<li>❗Security Groups and Route Tables apply entries separately for IPv4 and IPv6, so one must ensure they add entries for both protocols accordingly.</li>
<li>
<pre><code>💸Managed NAT gateways are a convenient alternative to
</code></pre>
manually managing <a href="https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPCNATInstance.html">NAT instances</a>, but they do come at a cost per gigabyte. Consider <a href="http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/vpc-nat-comparison.html">alternatives</a> if you're transferring many terabytes from private subnets to the internet. If you transfer terabytes/petabytes of data from EC2 instances in private subnets to S3, avoid the <a href="https://aws.amazon.com/vpc/pricing/">NAT gateway data processing charge</a> by setting up a Gateway Type VPC Endpoint and route the traffic to/from S3 through the VPC endpoints instead of going through the NAT gateways.</li>
</ul><span id="navId" data="vpcs-network-security-and-security-groups"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Device Farm.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Device Farm - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Device Farm.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Device Farm.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Device Farm.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Device Farm - undefined" />
  <meta name="twitter:title" content="Device Farm - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Device Farm</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Device Farm">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="device-farm"><a aria-hidden="true" class="anchor-heading" href="#device-farm"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Device Farm</h1>
<ul>
<li>prefix: devicefarm</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="createdevicepool"><a aria-hidden="true" class="anchor-heading" href="#createdevicepool"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDevicePool</h3>
<ul>
<li>description: Grants permission to create a device pool within a project</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createinstanceprofile"><a aria-hidden="true" class="anchor-heading" href="#createinstanceprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateInstanceProfile</h3>
<ul>
<li>description: Grants permission to create a device instance profile</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createnetworkprofile"><a aria-hidden="true" class="anchor-heading" href="#createnetworkprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateNetworkProfile</h3>
<ul>
<li>description: Grants permission to create a network profile within a project</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createproject"><a aria-hidden="true" class="anchor-heading" href="#createproject"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateProject</h3>
<ul>
<li>description: Grants permission to create a project for mobile testing</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createremoteaccesssession"><a aria-hidden="true" class="anchor-heading" href="#createremoteaccesssession"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateRemoteAccessSession</h3>
<ul>
<li>description: Grants permission to start a remote access session to a device instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "device": {
        "resource_type": "device",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "deviceinstance": {
        "resource_type": "deviceinstance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "upload": {
        "resource_type": "upload",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtestgridproject"><a aria-hidden="true" class="anchor-heading" href="#createtestgridproject"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTestGridProject</h3>
<ul>
<li>description: Grants permission to create a project for desktop testing</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtestgridurl"><a aria-hidden="true" class="anchor-heading" href="#createtestgridurl"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTestGridUrl</h3>
<ul>
<li>description: Grants permission to generate a new pre-signed url used to access our test grid service</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "testgrid-project": {
        "resource_type": "testgrid-project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createupload"><a aria-hidden="true" class="anchor-heading" href="#createupload"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateUpload</h3>
<ul>
<li>description: Grants permission to upload a new file or app within a project</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createvpceconfiguration"><a aria-hidden="true" class="anchor-heading" href="#createvpceconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateVPCEConfiguration</h3>
<ul>
<li>description: Grants permission to create an Amazon Virtual Private Cloud (VPC) endpoint configuration</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedevicepool"><a aria-hidden="true" class="anchor-heading" href="#deletedevicepool"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDevicePool</h3>
<ul>
<li>description: Grants permission to delete a user-generated device pool</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "devicepool": {
        "resource_type": "devicepool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteinstanceprofile"><a aria-hidden="true" class="anchor-heading" href="#deleteinstanceprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteInstanceProfile</h3>
<ul>
<li>description: Grants permission to delete a user-generated instance profile</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instanceprofile": {
        "resource_type": "instanceprofile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletenetworkprofile"><a aria-hidden="true" class="anchor-heading" href="#deletenetworkprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteNetworkProfile</h3>
<ul>
<li>description: Grants permission to delete a user-generated network profile</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "networkprofile": {
        "resource_type": "networkprofile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteproject"><a aria-hidden="true" class="anchor-heading" href="#deleteproject"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteProject</h3>
<ul>
<li>description: Grants permission to delete a mobile testing project</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteremoteaccesssession"><a aria-hidden="true" class="anchor-heading" href="#deleteremoteaccesssession"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteRemoteAccessSession</h3>
<ul>
<li>description: Grants permission to delete a completed remote access session and its results</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "session": {
        "resource_type": "session",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleterun"><a aria-hidden="true" class="anchor-heading" href="#deleterun"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteRun</h3>
<ul>
<li>description: Grants permission to delete a run</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "run": {
        "resource_type": "run",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetestgridproject"><a aria-hidden="true" class="anchor-heading" href="#deletetestgridproject"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTestGridProject</h3>
<ul>
<li>description: Grants permission to delete a desktop testing project</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "testgrid-project": {
        "resource_type": "testgrid-project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteupload"><a aria-hidden="true" class="anchor-heading" href="#deleteupload"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteUpload</h3>
<ul>
<li>description: Grants permission to delete a user-uploaded file</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "upload": {
        "resource_type": "upload",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletevpceconfiguration"><a aria-hidden="true" class="anchor-heading" href="#deletevpceconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteVPCEConfiguration</h3>
<ul>
<li>description: Grants permission to delete an Amazon Virtual Private Cloud (VPC) endpoint configuration</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vpceconfiguration": {
        "resource_type": "vpceconfiguration",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getaccountsettings"><a aria-hidden="true" class="anchor-heading" href="#getaccountsettings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAccountSettings</h3>
<ul>
<li>description: Grants permission to retrieve the number of unmetered iOS and/or unmetered Android devices purchased by the account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdevice"><a aria-hidden="true" class="anchor-heading" href="#getdevice"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDevice</h3>
<ul>
<li>description: Grants permission to retrieve the information of a unique device type</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "device": {
        "resource_type": "device",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdeviceinstance"><a aria-hidden="true" class="anchor-heading" href="#getdeviceinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDeviceInstance</h3>
<ul>
<li>description: Grants permission to retireve the information of a device instance</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "deviceinstance": {
        "resource_type": "deviceinstance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdevicepool"><a aria-hidden="true" class="anchor-heading" href="#getdevicepool"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDevicePool</h3>
<ul>
<li>description: Grants permission to retireve the information of a device pool</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "devicepool": {
        "resource_type": "devicepool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdevicepoolcompatibility"><a aria-hidden="true" class="anchor-heading" href="#getdevicepoolcompatibility"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDevicePoolCompatibility</h3>
<ul>
<li>description: Grants permission to retrieve information about the compatibility of a test and/or app with a device pool</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "devicepool": {
        "resource_type": "devicepool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "upload": {
        "resource_type": "upload",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getinstanceprofile"><a aria-hidden="true" class="anchor-heading" href="#getinstanceprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetInstanceProfile</h3>
<ul>
<li>description: Grants permission to retireve the information of an instance profile</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instanceprofile": {
        "resource_type": "instanceprofile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getjob"><a aria-hidden="true" class="anchor-heading" href="#getjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetJob</h3>
<ul>
<li>description: Grants permission to retireve the information of a job</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "job": {
        "resource_type": "job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getnetworkprofile"><a aria-hidden="true" class="anchor-heading" href="#getnetworkprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetNetworkProfile</h3>
<ul>
<li>description: Grants permission to retireve the information of a network profile</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "networkprofile": {
        "resource_type": "networkprofile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getofferingstatus"><a aria-hidden="true" class="anchor-heading" href="#getofferingstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetOfferingStatus</h3>
<ul>
<li>description: Grants permission to retrieve the current status and future status of all offerings purchased by an AWS account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getproject"><a aria-hidden="true" class="anchor-heading" href="#getproject"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetProject</h3>
<ul>
<li>description: Grants permission to retrieve information about a mobile testing project</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getremoteaccesssession"><a aria-hidden="true" class="anchor-heading" href="#getremoteaccesssession"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRemoteAccessSession</h3>
<ul>
<li>description: Grants permission to retireve the link to a currently running remote access session</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "session": {
        "resource_type": "session",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getrun"><a aria-hidden="true" class="anchor-heading" href="#getrun"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRun</h3>
<ul>
<li>description: Grants permission to retireve the information of a run</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "run": {
        "resource_type": "run",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsuite"><a aria-hidden="true" class="anchor-heading" href="#getsuite"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSuite</h3>
<ul>
<li>description: Grants permission to retireve the information of a testing suite</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "suite": {
        "resource_type": "suite",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gettest"><a aria-hidden="true" class="anchor-heading" href="#gettest"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetTest</h3>
<ul>
<li>description: Grants permission to retireve the information of a test case</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "test": {
        "resource_type": "test",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gettestgridproject"><a aria-hidden="true" class="anchor-heading" href="#gettestgridproject"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetTestGridProject</h3>
<ul>
<li>description: Grants permission to retrieve information about a desktop testing project</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "testgrid-project": {
        "resource_type": "testgrid-project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gettestgridsession"><a aria-hidden="true" class="anchor-heading" href="#gettestgridsession"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetTestGridSession</h3>
<ul>
<li>description: Grants permission to retireve the information of a test grid session</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "testgrid-project": {
        "resource_type": "testgrid-project",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "testgrid-session": {
        "resource_type": "testgrid-session",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getupload"><a aria-hidden="true" class="anchor-heading" href="#getupload"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetUpload</h3>
<ul>
<li>description: Grants permission to retireve the information of an uploaded file</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "upload": {
        "resource_type": "upload",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getvpceconfiguration"><a aria-hidden="true" class="anchor-heading" href="#getvpceconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetVPCEConfiguration</h3>
<ul>
<li>description: Grants permission to retireve the information of an Amazon Virtual Private Cloud (VPC) endpoint configuration</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vpceconfiguration": {
        "resource_type": "vpceconfiguration",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="installtoremoteaccesssession"><a aria-hidden="true" class="anchor-heading" href="#installtoremoteaccesssession"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>InstallToRemoteAccessSession</h3>
<ul>
<li>description: Grants permission to install an application to a device in a remote access session</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "session": {
        "resource_type": "session",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "upload": {
        "resource_type": "upload",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listartifacts"><a aria-hidden="true" class="anchor-heading" href="#listartifacts"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListArtifacts</h3>
<ul>
<li>description: Grants permission to list the artifacts in a project</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "job": {
        "resource_type": "job",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "run": {
        "resource_type": "run",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "suite": {
        "resource_type": "suite",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "test": {
        "resource_type": "test",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdeviceinstances"><a aria-hidden="true" class="anchor-heading" href="#listdeviceinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDeviceInstances</h3>
<ul>
<li>description: Grants permission to list the information of device instances</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdevicepools"><a aria-hidden="true" class="anchor-heading" href="#listdevicepools"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDevicePools</h3>
<ul>
<li>description: Grants permission to list the information of device pools</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdevices"><a aria-hidden="true" class="anchor-heading" href="#listdevices"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDevices</h3>
<ul>
<li>description: Grants permission to list the information of unique device types</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listinstanceprofiles"><a aria-hidden="true" class="anchor-heading" href="#listinstanceprofiles"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListInstanceProfiles</h3>
<ul>
<li>description: Grants permission to list the information of device instance profiles</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listjobs"><a aria-hidden="true" class="anchor-heading" href="#listjobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListJobs</h3>
<ul>
<li>description: Grants permission to list the information of jobs within a run</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "run": {
        "resource_type": "run",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listnetworkprofiles"><a aria-hidden="true" class="anchor-heading" href="#listnetworkprofiles"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListNetworkProfiles</h3>
<ul>
<li>description: Grants permission to list the information of network profiles within a project</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listofferingpromotions"><a aria-hidden="true" class="anchor-heading" href="#listofferingpromotions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListOfferingPromotions</h3>
<ul>
<li>description: Grants permission to list the offering promotions</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listofferingtransactions"><a aria-hidden="true" class="anchor-heading" href="#listofferingtransactions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListOfferingTransactions</h3>
<ul>
<li>description: Grants permission to list all of the historical purchases, renewals, and system renewal transactions for an AWS account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listofferings"><a aria-hidden="true" class="anchor-heading" href="#listofferings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListOfferings</h3>
<ul>
<li>description: Grants permission to list the products or offerings that the user can manage through the API</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listprojects"><a aria-hidden="true" class="anchor-heading" href="#listprojects"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListProjects</h3>
<ul>
<li>description: Grants permission to list the information of mobile testing projects for an AWS account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listremoteaccesssessions"><a aria-hidden="true" class="anchor-heading" href="#listremoteaccesssessions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListRemoteAccessSessions</h3>
<ul>
<li>description: Grants permission to list the information of currently running remote access sessions</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listruns"><a aria-hidden="true" class="anchor-heading" href="#listruns"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListRuns</h3>
<ul>
<li>description: Grants permission to list the information of runs within a project</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listsamples"><a aria-hidden="true" class="anchor-heading" href="#listsamples"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListSamples</h3>
<ul>
<li>description: Grants permission to list the information of samples within a project</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "job": {
        "resource_type": "job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listsuites"><a aria-hidden="true" class="anchor-heading" href="#listsuites"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListSuites</h3>
<ul>
<li>description: Grants permission to list the information of testing suites within a job</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "job": {
        "resource_type": "job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Grants permission to list the tags of a resource</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "device": {
        "resource_type": "device",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "deviceinstance": {
        "resource_type": "deviceinstance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "devicepool": {
        "resource_type": "devicepool",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "instanceprofile": {
        "resource_type": "instanceprofile",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "networkprofile": {
        "resource_type": "networkprofile",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "project": {
        "resource_type": "project",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "run": {
        "resource_type": "run",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "session": {
        "resource_type": "session",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "testgrid-project": {
        "resource_type": "testgrid-project",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "testgrid-session": {
        "resource_type": "testgrid-session",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "vpceconfiguration": {
        "resource_type": "vpceconfiguration",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtestgridprojects"><a aria-hidden="true" class="anchor-heading" href="#listtestgridprojects"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTestGridProjects</h3>
<ul>
<li>description: Grants permission to list the information of desktop testing projects for an AWS account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtestgridsessionactions"><a aria-hidden="true" class="anchor-heading" href="#listtestgridsessionactions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTestGridSessionActions</h3>
<ul>
<li>description: Grants permission to list the session actions performed during a test grid session</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "testgrid-session": {
        "resource_type": "testgrid-session",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtestgridsessionartifacts"><a aria-hidden="true" class="anchor-heading" href="#listtestgridsessionartifacts"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTestGridSessionArtifacts</h3>
<ul>
<li>description: Grants permission to list the artifacts generated by a test grid session</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "testgrid-session": {
        "resource_type": "testgrid-session",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtestgridsessions"><a aria-hidden="true" class="anchor-heading" href="#listtestgridsessions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTestGridSessions</h3>
<ul>
<li>description: Grants permission to list the sessions within a test grid project</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "testgrid-project": {
        "resource_type": "testgrid-project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtests"><a aria-hidden="true" class="anchor-heading" href="#listtests"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTests</h3>
<ul>
<li>description: Grants permission to list the information of tests within a testing suite</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "suite": {
        "resource_type": "suite",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listuniqueproblems"><a aria-hidden="true" class="anchor-heading" href="#listuniqueproblems"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListUniqueProblems</h3>
<ul>
<li>description: Grants permission to list the information of unique problems within a run</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "run": {
        "resource_type": "run",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listuploads"><a aria-hidden="true" class="anchor-heading" href="#listuploads"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListUploads</h3>
<ul>
<li>description: Grants permission to list the information of uploads within a project</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listvpceconfigurations"><a aria-hidden="true" class="anchor-heading" href="#listvpceconfigurations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListVPCEConfigurations</h3>
<ul>
<li>description: Grants permission to list the information of Amazon Virtual Private Cloud (VPC) endpoint configurations</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="purchaseoffering"><a aria-hidden="true" class="anchor-heading" href="#purchaseoffering"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PurchaseOffering</h3>
<ul>
<li>description: Grants permission to purchase offerings for an AWS account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="renewoffering"><a aria-hidden="true" class="anchor-heading" href="#renewoffering"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RenewOffering</h3>
<ul>
<li>description: Grants permission to set the quantity of devices to renew for an offering</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="schedulerun"><a aria-hidden="true" class="anchor-heading" href="#schedulerun"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ScheduleRun</h3>
<ul>
<li>description: Grants permission to schedule a run</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "devicepool": {
        "resource_type": "devicepool",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "upload": {
        "resource_type": "upload",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopjob"><a aria-hidden="true" class="anchor-heading" href="#stopjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopJob</h3>
<ul>
<li>description: Grants permission to terminate a running job</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "job": {
        "resource_type": "job",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopremoteaccesssession"><a aria-hidden="true" class="anchor-heading" href="#stopremoteaccesssession"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopRemoteAccessSession</h3>
<ul>
<li>description: Grants permission to terminate a running remote access session</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "session": {
        "resource_type": "session",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stoprun"><a aria-hidden="true" class="anchor-heading" href="#stoprun"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopRun</h3>
<ul>
<li>description: Grants permission to terminate a running test run</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "run": {
        "resource_type": "run",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Grants permission to add tags to a resource</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "device": {
        "resource_type": "device",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "deviceinstance": {
        "resource_type": "deviceinstance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "devicepool": {
        "resource_type": "devicepool",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "instanceprofile": {
        "resource_type": "instanceprofile",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "networkprofile": {
        "resource_type": "networkprofile",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "project": {
        "resource_type": "project",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "run": {
        "resource_type": "run",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "session": {
        "resource_type": "session",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "testgrid-project": {
        "resource_type": "testgrid-project",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "testgrid-session": {
        "resource_type": "testgrid-session",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "vpceconfiguration": {
        "resource_type": "vpceconfiguration",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Grants permission to remove tags from a resource</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "device": {
        "resource_type": "device",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "deviceinstance": {
        "resource_type": "deviceinstance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "devicepool": {
        "resource_type": "devicepool",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "instanceprofile": {
        "resource_type": "instanceprofile",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "networkprofile": {
        "resource_type": "networkprofile",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "project": {
        "resource_type": "project",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "run": {
        "resource_type": "run",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "session": {
        "resource_type": "session",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "testgrid-project": {
        "resource_type": "testgrid-project",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "testgrid-session": {
        "resource_type": "testgrid-session",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "vpceconfiguration": {
        "resource_type": "vpceconfiguration",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatedeviceinstance"><a aria-hidden="true" class="anchor-heading" href="#updatedeviceinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateDeviceInstance</h3>
<ul>
<li>description: Grants permission to modify an existing device instance</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "deviceinstance": {
        "resource_type": "deviceinstance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "instanceprofile": {
        "resource_type": "instanceprofile",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatedevicepool"><a aria-hidden="true" class="anchor-heading" href="#updatedevicepool"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateDevicePool</h3>
<ul>
<li>description: Grants permission to modify an existing device pool</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "devicepool": {
        "resource_type": "devicepool",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateinstanceprofile"><a aria-hidden="true" class="anchor-heading" href="#updateinstanceprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateInstanceProfile</h3>
<ul>
<li>description: Grants permission to modify an existing instance profile</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "instanceprofile": {
        "resource_type": "instanceprofile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatenetworkprofile"><a aria-hidden="true" class="anchor-heading" href="#updatenetworkprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateNetworkProfile</h3>
<ul>
<li>description: Grants permission to modify an existing network profile</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "networkprofile": {
        "resource_type": "networkprofile",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateproject"><a aria-hidden="true" class="anchor-heading" href="#updateproject"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateProject</h3>
<ul>
<li>description: Grants permission to modify an existing mobile testing project</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatetestgridproject"><a aria-hidden="true" class="anchor-heading" href="#updatetestgridproject"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateTestGridProject</h3>
<ul>
<li>description: Grants permission to modify an existing desktop testing project</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "testgrid-project": {
        "resource_type": "testgrid-project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateupload"><a aria-hidden="true" class="anchor-heading" href="#updateupload"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateUpload</h3>
<ul>
<li>description: Grants permission to modify an existing upload</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "upload": {
        "resource_type": "upload",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatevpceconfiguration"><a aria-hidden="true" class="anchor-heading" href="#updatevpceconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateVPCEConfiguration</h3>
<ul>
<li>description: Grants permission to modify an existing Amazon Virtual Private Cloud (VPC) endpoint configuration</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "vpceconfiguration": {
        "resource_type": "vpceconfiguration",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Device Farm"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Inspector.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Inspector - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Inspector.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Inspector.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Inspector.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Inspector - undefined" />
  <meta name="twitter:title" content="Inspector - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Inspector</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Inspector">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="inspector"><a aria-hidden="true" class="anchor-heading" href="#inspector"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Inspector</h1>
<ul>
<li>prefix: inspector</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="addattributestofindings"><a aria-hidden="true" class="anchor-heading" href="#addattributestofindings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddAttributesToFindings</h3>
<ul>
<li>description: Assigns attributes (key and value pairs) to the findings that are specified by the ARNs of the findings.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createassessmenttarget"><a aria-hidden="true" class="anchor-heading" href="#createassessmenttarget"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateAssessmentTarget</h3>
<ul>
<li>description: Creates a new assessment target using the ARN of the resource group that is generated by CreateResourceGroup.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createassessmenttemplate"><a aria-hidden="true" class="anchor-heading" href="#createassessmenttemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateAssessmentTemplate</h3>
<ul>
<li>description: Creates an assessment template for the assessment target that is specified by the ARN of the assessment target.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createresourcegroup"><a aria-hidden="true" class="anchor-heading" href="#createresourcegroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateResourceGroup</h3>
<ul>
<li>description: Creates a resource group using the specified set of tags (key and value pairs) that are used to select the EC2 instances to be included in an Amazon Inspector assessment target.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteassessmentrun"><a aria-hidden="true" class="anchor-heading" href="#deleteassessmentrun"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAssessmentRun</h3>
<ul>
<li>description: Deletes the assessment run that is specified by the ARN of the assessment run.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteassessmenttarget"><a aria-hidden="true" class="anchor-heading" href="#deleteassessmenttarget"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAssessmentTarget</h3>
<ul>
<li>description: Deletes the assessment target that is specified by the ARN of the assessment target.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteassessmenttemplate"><a aria-hidden="true" class="anchor-heading" href="#deleteassessmenttemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAssessmentTemplate</h3>
<ul>
<li>description: Deletes the assessment template that is specified by the ARN of the assessment template.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeassessmentruns"><a aria-hidden="true" class="anchor-heading" href="#describeassessmentruns"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAssessmentRuns</h3>
<ul>
<li>description: Describes the assessment runs that are specified by the ARNs of the assessment runs.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeassessmenttargets"><a aria-hidden="true" class="anchor-heading" href="#describeassessmenttargets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAssessmentTargets</h3>
<ul>
<li>description: Describes the assessment targets that are specified by the ARNs of the assessment targets.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeassessmenttemplates"><a aria-hidden="true" class="anchor-heading" href="#describeassessmenttemplates"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAssessmentTemplates</h3>
<ul>
<li>description: Describes the assessment templates that are specified by the ARNs of the assessment templates.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecrossaccountaccessrole"><a aria-hidden="true" class="anchor-heading" href="#describecrossaccountaccessrole"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeCrossAccountAccessRole</h3>
<ul>
<li>description: Describes the IAM role that enables Amazon Inspector to access your AWS account.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describefindings"><a aria-hidden="true" class="anchor-heading" href="#describefindings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeFindings</h3>
<ul>
<li>description: Describes the findings that are specified by the ARNs of the findings.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeresourcegroups"><a aria-hidden="true" class="anchor-heading" href="#describeresourcegroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeResourceGroups</h3>
<ul>
<li>description: Describes the resource groups that are specified by the ARNs of the resource groups.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describerulespackages"><a aria-hidden="true" class="anchor-heading" href="#describerulespackages"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeRulesPackages</h3>
<ul>
<li>description: Describes the rules packages that are specified by the ARNs of the rules packages.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gettelemetrymetadata"><a aria-hidden="true" class="anchor-heading" href="#gettelemetrymetadata"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetTelemetryMetadata</h3>
<ul>
<li>description: Information about the data that is collected for the specified assessment run.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listassessmentrunagents"><a aria-hidden="true" class="anchor-heading" href="#listassessmentrunagents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAssessmentRunAgents</h3>
<ul>
<li>description: Lists the agents of the assessment runs that are specified by the ARNs of the assessment runs.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listassessmentruns"><a aria-hidden="true" class="anchor-heading" href="#listassessmentruns"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAssessmentRuns</h3>
<ul>
<li>description: Lists the assessment runs that correspond to the assessment templates that are specified by the ARNs of the assessment templates.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listassessmenttargets"><a aria-hidden="true" class="anchor-heading" href="#listassessmenttargets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAssessmentTargets</h3>
<ul>
<li>description: Lists the ARNs of the assessment targets within this AWS account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listassessmenttemplates"><a aria-hidden="true" class="anchor-heading" href="#listassessmenttemplates"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAssessmentTemplates</h3>
<ul>
<li>description: Lists the assessment templates that correspond to the assessment targets that are specified by the ARNs of the assessment targets.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listeventsubscriptions"><a aria-hidden="true" class="anchor-heading" href="#listeventsubscriptions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListEventSubscriptions</h3>
<ul>
<li>description: Lists all the event subscriptions for the assessment template that is specified by the ARN of the assessment template.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listfindings"><a aria-hidden="true" class="anchor-heading" href="#listfindings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListFindings</h3>
<ul>
<li>description: Lists findings that are generated by the assessment runs that are specified by the ARNs of the assessment runs.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listrulespackages"><a aria-hidden="true" class="anchor-heading" href="#listrulespackages"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListRulesPackages</h3>
<ul>
<li>description: Lists all available Amazon Inspector rules packages.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Lists all tags associated with an assessment template.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="previewagents"><a aria-hidden="true" class="anchor-heading" href="#previewagents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PreviewAgents</h3>
<ul>
<li>description: Previews the agents installed on the EC2 instances that are part of the specified assessment target.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registercrossaccountaccessrole"><a aria-hidden="true" class="anchor-heading" href="#registercrossaccountaccessrole"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterCrossAccountAccessRole</h3>
<ul>
<li>description: Registers the IAM role that Amazon Inspector uses to list your EC2 instances at the start of the assessment run or when you call the PreviewAgents action.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="removeattributesfromfindings"><a aria-hidden="true" class="anchor-heading" href="#removeattributesfromfindings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemoveAttributesFromFindings</h3>
<ul>
<li>description: Removes entire attributes (key and value pairs) from the findings that are specified by the ARNs of the findings where an attribute with the specified key exists.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="settagsforresource"><a aria-hidden="true" class="anchor-heading" href="#settagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetTagsForResource</h3>
<ul>
<li>description: Sets tags (key and value pairs) to the assessment template that is specified by the ARN of the assessment template.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startassessmentrun"><a aria-hidden="true" class="anchor-heading" href="#startassessmentrun"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartAssessmentRun</h3>
<ul>
<li>description: Starts the assessment run specified by the ARN of the assessment template.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopassessmentrun"><a aria-hidden="true" class="anchor-heading" href="#stopassessmentrun"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopAssessmentRun</h3>
<ul>
<li>description: Stops the assessment run that is specified by the ARN of the assessment run.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="subscribetoevent"><a aria-hidden="true" class="anchor-heading" href="#subscribetoevent"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SubscribeToEvent</h3>
<ul>
<li>description: Enables the process of sending Amazon Simple Notification Service (SNS) notifications about a specified event to a specified SNS topic.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="unsubscribefromevent"><a aria-hidden="true" class="anchor-heading" href="#unsubscribefromevent"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UnsubscribeFromEvent</h3>
<ul>
<li>description: Disables the process of sending Amazon Simple Notification Service (SNS) notifications about a specified event to a specified SNS topic.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateassessmenttarget"><a aria-hidden="true" class="anchor-heading" href="#updateassessmenttarget"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateAssessmentTarget</h3>
<ul>
<li>description: Updates the assessment target that is specified by the ARN of the assessment target.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Inspector"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Transfer for SFTP.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Transfer for SFTP - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Transfer for SFTP.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Transfer for SFTP.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Transfer for SFTP.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Transfer for SFTP - undefined" />
  <meta name="twitter:title" content="Transfer for SFTP - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Transfer for SFTP</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Transfer for SFTP">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="transfer-for-sftp"><a aria-hidden="true" class="anchor-heading" href="#transfer-for-sftp"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Transfer for SFTP</h1>
<ul>
<li>prefix: transfer</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="createserver"><a aria-hidden="true" class="anchor-heading" href="#createserver"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateServer</h3>
<ul>
<li>description: Enables the caller to create a server.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys",
            "aws:RequestTag/${TagKey}"
        ],
        "dependent_actions": [
            "iam:PassRole"
        ]
    }
}
</code></pre>
<h3 id="createuser"><a aria-hidden="true" class="anchor-heading" href="#createuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateUser</h3>
<ul>
<li>description: Enables the caller to add a user associated with a server.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "server": {
        "resource_type": "server",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys",
            "aws:RequestTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteserver"><a aria-hidden="true" class="anchor-heading" href="#deleteserver"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteServer</h3>
<ul>
<li>description: Enables the caller to delete a server.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "server": {
        "resource_type": "server",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletesshpublickey"><a aria-hidden="true" class="anchor-heading" href="#deletesshpublickey"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteSshPublicKey</h3>
<ul>
<li>description: Enables the caller to delete an SSH public key from a user.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteuser"><a aria-hidden="true" class="anchor-heading" href="#deleteuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteUser</h3>
<ul>
<li>description: Enables the caller to delete a user associated with a server.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeserver"><a aria-hidden="true" class="anchor-heading" href="#describeserver"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeServer</h3>
<ul>
<li>description: Enables the caller to describe a server.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "server": {
        "resource_type": "server",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeuser"><a aria-hidden="true" class="anchor-heading" href="#describeuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeUser</h3>
<ul>
<li>description: Enables the caller to describe a user associated with a server.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="importsshpublickey"><a aria-hidden="true" class="anchor-heading" href="#importsshpublickey"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ImportSshPublicKey</h3>
<ul>
<li>description: Enables the caller to add an SSH public key to a user.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listservers"><a aria-hidden="true" class="anchor-heading" href="#listservers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListServers</h3>
<ul>
<li>description: Enables the caller to list servers</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Enables the caller to list tags for a server or a user.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "server": {
        "resource_type": "server",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "user": {
        "resource_type": "user",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listusers"><a aria-hidden="true" class="anchor-heading" href="#listusers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListUsers</h3>
<ul>
<li>description: Enables the caller to list users associated with a server.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "server": {
        "resource_type": "server",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startserver"><a aria-hidden="true" class="anchor-heading" href="#startserver"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartServer</h3>
<ul>
<li>description: Enables the caller to start a server.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "server": {
        "resource_type": "server",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopserver"><a aria-hidden="true" class="anchor-heading" href="#stopserver"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopServer</h3>
<ul>
<li>description: Enables the caller to stop a server.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "server": {
        "resource_type": "server",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Enables the caller to tag a server or a user.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "server": {
        "resource_type": "server",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "user": {
        "resource_type": "user",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys",
            "aws:RequestTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="testidentityprovider"><a aria-hidden="true" class="anchor-heading" href="#testidentityprovider"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TestIdentityProvider</h3>
<ul>
<li>description: Enables the caller to test a server's custom identity provider.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Enables the caller to untag a server or a user.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "server": {
        "resource_type": "server",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "user": {
        "resource_type": "user",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateserver"><a aria-hidden="true" class="anchor-heading" href="#updateserver"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateServer</h3>
<ul>
<li>description: Enables the caller to update the configuration of a server</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "server": {
        "resource_type": "server",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    }
}
</code></pre>
<h3 id="updateuser"><a aria-hidden="true" class="anchor-heading" href="#updateuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateUser</h3>
<ul>
<li>description: Enables the caller to update the configuration of a user</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "user": {
        "resource_type": "user",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    }
}
</code></pre><span id="navId" data="iam-Transfer for SFTP"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Greengrass.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Greengrass - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Greengrass.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Greengrass.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Greengrass.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Greengrass - undefined" />
  <meta name="twitter:title" content="Greengrass - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Greengrass</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Greengrass">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="greengrass"><a aria-hidden="true" class="anchor-heading" href="#greengrass"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Greengrass</h1>
<ul>
<li>prefix: greengrass</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="associateroletogroup"><a aria-hidden="true" class="anchor-heading" href="#associateroletogroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateRoleToGroup</h3>
<ul>
<li>description: Grants permission to associate a role with a group. The role's permissions must allow Greengrass core Lambda functions and connectors to perform actions in other AWS services.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "group": {
        "resource_type": "group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="associateserviceroletoaccount"><a aria-hidden="true" class="anchor-heading" href="#associateserviceroletoaccount"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateServiceRoleToAccount</h3>
<ul>
<li>description: Grants permission to associate a role with your account. AWS IoT Greengrass uses this role to access your Lambda functions and AWS IoT resources.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createconnectordefinition"><a aria-hidden="true" class="anchor-heading" href="#createconnectordefinition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateConnectorDefinition</h3>
<ul>
<li>description: Grants permission to create a connector definition.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createconnectordefinitionversion"><a aria-hidden="true" class="anchor-heading" href="#createconnectordefinitionversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateConnectorDefinitionVersion</h3>
<ul>
<li>description: Grants permission to create a version of an existing connector definition.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "connectorDefinition": {
        "resource_type": "connectorDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createcoredefinition"><a aria-hidden="true" class="anchor-heading" href="#createcoredefinition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateCoreDefinition</h3>
<ul>
<li>description: Grants permission to create a core definition.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createcoredefinitionversion"><a aria-hidden="true" class="anchor-heading" href="#createcoredefinitionversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateCoreDefinitionVersion</h3>
<ul>
<li>description: Grants permission to create a version of an existing core definition. Greengrass groups must each contain exactly one Greengrass core.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "coreDefinition": {
        "resource_type": "coreDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdeployment"><a aria-hidden="true" class="anchor-heading" href="#createdeployment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDeployment</h3>
<ul>
<li>description: Grants permission to create a deployment.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "group": {
        "resource_type": "group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdevicedefinition"><a aria-hidden="true" class="anchor-heading" href="#createdevicedefinition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDeviceDefinition</h3>
<ul>
<li>description: Grants permission to create a device definition.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdevicedefinitionversion"><a aria-hidden="true" class="anchor-heading" href="#createdevicedefinitionversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDeviceDefinitionVersion</h3>
<ul>
<li>description: Grants permission to create a version of an existing device definition.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "deviceDefinition": {
        "resource_type": "deviceDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createfunctiondefinition"><a aria-hidden="true" class="anchor-heading" href="#createfunctiondefinition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateFunctionDefinition</h3>
<ul>
<li>description: Grants permission to create a Lambda function definition to be used in a group that contains a list of Lambda functions and their configurations.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createfunctiondefinitionversion"><a aria-hidden="true" class="anchor-heading" href="#createfunctiondefinitionversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateFunctionDefinitionVersion</h3>
<ul>
<li>description: Grants permission to create a version of an existing Lambda function definition.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "functionDefinition": {
        "resource_type": "functionDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="creategroup"><a aria-hidden="true" class="anchor-heading" href="#creategroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateGroup</h3>
<ul>
<li>description: Grants permission to create a group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="creategroupcertificateauthority"><a aria-hidden="true" class="anchor-heading" href="#creategroupcertificateauthority"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateGroupCertificateAuthority</h3>
<ul>
<li>description: Grants permission to create a CA for the group, or rotate the existing CA.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "group": {
        "resource_type": "group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="creategroupversion"><a aria-hidden="true" class="anchor-heading" href="#creategroupversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateGroupVersion</h3>
<ul>
<li>description: Grants permission to create a version of a group that has already been defined.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "group": {
        "resource_type": "group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createloggerdefinition"><a aria-hidden="true" class="anchor-heading" href="#createloggerdefinition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateLoggerDefinition</h3>
<ul>
<li>description: Grants permission to create a logger definition.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createloggerdefinitionversion"><a aria-hidden="true" class="anchor-heading" href="#createloggerdefinitionversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateLoggerDefinitionVersion</h3>
<ul>
<li>description: Grants permission to create a version of an existing logger definition.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "loggerDefinition": {
        "resource_type": "loggerDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createresourcedefinition"><a aria-hidden="true" class="anchor-heading" href="#createresourcedefinition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateResourceDefinition</h3>
<ul>
<li>description: Grants permission to create a resource definition that contains a list of resources to be used in a group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createresourcedefinitionversion"><a aria-hidden="true" class="anchor-heading" href="#createresourcedefinitionversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateResourceDefinitionVersion</h3>
<ul>
<li>description: Grants permission to create a version of an existing resource definition.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "resourceDefinition": {
        "resource_type": "resourceDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createsoftwareupdatejob"><a aria-hidden="true" class="anchor-heading" href="#createsoftwareupdatejob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSoftwareUpdateJob</h3>
<ul>
<li>description: Grants permission to create an AWS IoT job that will trigger your Greengrass cores to update the software they are running.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createsubscriptiondefinition"><a aria-hidden="true" class="anchor-heading" href="#createsubscriptiondefinition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSubscriptionDefinition</h3>
<ul>
<li>description: Grants permission to create a subscription definition.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createsubscriptiondefinitionversion"><a aria-hidden="true" class="anchor-heading" href="#createsubscriptiondefinitionversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSubscriptionDefinitionVersion</h3>
<ul>
<li>description: Grants permission to create a version of an existing subscription definition.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "subscriptionDefinition": {
        "resource_type": "subscriptionDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteconnectordefinition"><a aria-hidden="true" class="anchor-heading" href="#deleteconnectordefinition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteConnectorDefinition</h3>
<ul>
<li>description: Grants permission to delete a connector definition.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "connectorDefinition": {
        "resource_type": "connectorDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletecoredefinition"><a aria-hidden="true" class="anchor-heading" href="#deletecoredefinition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteCoreDefinition</h3>
<ul>
<li>description: Grants permission to delete a core definition. Deleting a definition that is currently in use in a deployment affects future deployments.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "coreDefinition": {
        "resource_type": "coreDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedevicedefinition"><a aria-hidden="true" class="anchor-heading" href="#deletedevicedefinition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDeviceDefinition</h3>
<ul>
<li>description: Grants permission to delete a device definition. Deleting a definition that is currently in use in a deployment affects future deployments.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "deviceDefinition": {
        "resource_type": "deviceDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletefunctiondefinition"><a aria-hidden="true" class="anchor-heading" href="#deletefunctiondefinition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteFunctionDefinition</h3>
<ul>
<li>description: Grants permission to delete a Lambda function definition. Deleting a definition that is currently in use in a deployment affects future deployments.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "functionDefinition": {
        "resource_type": "functionDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletegroup"><a aria-hidden="true" class="anchor-heading" href="#deletegroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteGroup</h3>
<ul>
<li>description: Grants permission to delete a group that is not currently in use in a deployment.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "group": {
        "resource_type": "group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteloggerdefinition"><a aria-hidden="true" class="anchor-heading" href="#deleteloggerdefinition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteLoggerDefinition</h3>
<ul>
<li>description: Grants permission to delete a logger definition. Deleting a definition that is currently in use in a deployment affects future deployments.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "loggerDefinition": {
        "resource_type": "loggerDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteresourcedefinition"><a aria-hidden="true" class="anchor-heading" href="#deleteresourcedefinition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteResourceDefinition</h3>
<ul>
<li>description: Grants permission to delete a resource definition.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "resourceDefinition": {
        "resource_type": "resourceDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletesubscriptiondefinition"><a aria-hidden="true" class="anchor-heading" href="#deletesubscriptiondefinition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteSubscriptionDefinition</h3>
<ul>
<li>description: Grants permission to delete a subscription definition. Deleting a definition that is currently in use in a deployment affects future deployments.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "subscriptionDefinition": {
        "resource_type": "subscriptionDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociaterolefromgroup"><a aria-hidden="true" class="anchor-heading" href="#disassociaterolefromgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateRoleFromGroup</h3>
<ul>
<li>description: Grants permission to disassociate the role from a group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "group": {
        "resource_type": "group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociateservicerolefromaccount"><a aria-hidden="true" class="anchor-heading" href="#disassociateservicerolefromaccount"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateServiceRoleFromAccount</h3>
<ul>
<li>description: Grants permission to disassociate the service role from an account. Without a service role, deployments will not work.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="discover"><a aria-hidden="true" class="anchor-heading" href="#discover"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Discover</h3>
<ul>
<li>description: Grants permission to retrieve information required to connect to a Greengrass core.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "thing": {
        "resource_type": "thing",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getassociatedrole"><a aria-hidden="true" class="anchor-heading" href="#getassociatedrole"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAssociatedRole</h3>
<ul>
<li>description: Grants permission to retrieve the role associated with a group.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "group": {
        "resource_type": "group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbulkdeploymentstatus"><a aria-hidden="true" class="anchor-heading" href="#getbulkdeploymentstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBulkDeploymentStatus</h3>
<ul>
<li>description: Grants permission to return the status of a bulk deployment.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bulkDeployment": {
        "resource_type": "bulkDeployment",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getconnectivityinfo"><a aria-hidden="true" class="anchor-heading" href="#getconnectivityinfo"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetConnectivityInfo</h3>
<ul>
<li>description: Grants permission to retrieve the connectivity information for a core.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "connectivityInfo": {
        "resource_type": "connectivityInfo",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getconnectordefinition"><a aria-hidden="true" class="anchor-heading" href="#getconnectordefinition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetConnectorDefinition</h3>
<ul>
<li>description: Grants permission to retrieve information about a connector definition.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "connectorDefinition": {
        "resource_type": "connectorDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getconnectordefinitionversion"><a aria-hidden="true" class="anchor-heading" href="#getconnectordefinitionversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetConnectorDefinitionVersion</h3>
<ul>
<li>description: Grants permission to retrieve information about a connector definition version.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "connectorDefinition": {
        "resource_type": "connectorDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "connectorDefinitionVersion": {
        "resource_type": "connectorDefinitionVersion",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcoredefinition"><a aria-hidden="true" class="anchor-heading" href="#getcoredefinition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCoreDefinition</h3>
<ul>
<li>description: Grants permission to retrieve information about a core definition.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "coreDefinition": {
        "resource_type": "coreDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcoredefinitionversion"><a aria-hidden="true" class="anchor-heading" href="#getcoredefinitionversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCoreDefinitionVersion</h3>
<ul>
<li>description: Grants permission to retrieve information about a core definition version.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "coreDefinition": {
        "resource_type": "coreDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "coreDefinitionVersion": {
        "resource_type": "coreDefinitionVersion",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdeploymentstatus"><a aria-hidden="true" class="anchor-heading" href="#getdeploymentstatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDeploymentStatus</h3>
<ul>
<li>description: Grants permission to return the status of a deployment.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "deployment": {
        "resource_type": "deployment",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "group": {
        "resource_type": "group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdevicedefinition"><a aria-hidden="true" class="anchor-heading" href="#getdevicedefinition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDeviceDefinition</h3>
<ul>
<li>description: Grants permission to retrieve information about a device definition.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "deviceDefinition": {
        "resource_type": "deviceDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdevicedefinitionversion"><a aria-hidden="true" class="anchor-heading" href="#getdevicedefinitionversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDeviceDefinitionVersion</h3>
<ul>
<li>description: Grants permission to retrieve information about a device definition version.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "deviceDefinition": {
        "resource_type": "deviceDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "deviceDefinitionVersion": {
        "resource_type": "deviceDefinitionVersion",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getfunctiondefinition"><a aria-hidden="true" class="anchor-heading" href="#getfunctiondefinition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetFunctionDefinition</h3>
<ul>
<li>description: Grants permission to retrieve information about a Lambda function definition, such as its creation time and latest version.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "functionDefinition": {
        "resource_type": "functionDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getfunctiondefinitionversion"><a aria-hidden="true" class="anchor-heading" href="#getfunctiondefinitionversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetFunctionDefinitionVersion</h3>
<ul>
<li>description: Grants permission to retrieve information about a Lambda function definition version, such as which Lambda functions are included in the version and their configurations.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "functionDefinition": {
        "resource_type": "functionDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "functionDefinitionVersion": {
        "resource_type": "functionDefinitionVersion",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getgroup"><a aria-hidden="true" class="anchor-heading" href="#getgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetGroup</h3>
<ul>
<li>description: Grants permission to retrieve information about a group.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "group": {
        "resource_type": "group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getgroupcertificateauthority"><a aria-hidden="true" class="anchor-heading" href="#getgroupcertificateauthority"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetGroupCertificateAuthority</h3>
<ul>
<li>description: Grants permission to return the public key of the CA associated with a group.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "certificateAuthority": {
        "resource_type": "certificateAuthority",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "group": {
        "resource_type": "group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getgroupcertificateconfiguration"><a aria-hidden="true" class="anchor-heading" href="#getgroupcertificateconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetGroupCertificateConfiguration</h3>
<ul>
<li>description: Grants permission to retrieve the current configuration for the CA used by a group.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "group": {
        "resource_type": "group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getgroupversion"><a aria-hidden="true" class="anchor-heading" href="#getgroupversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetGroupVersion</h3>
<ul>
<li>description: Grants permission to retrieve information about a group version.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "group": {
        "resource_type": "group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "groupVersion": {
        "resource_type": "groupVersion",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getloggerdefinition"><a aria-hidden="true" class="anchor-heading" href="#getloggerdefinition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetLoggerDefinition</h3>
<ul>
<li>description: Grants permission to retrieve information about a logger definition.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "loggerDefinition": {
        "resource_type": "loggerDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getloggerdefinitionversion"><a aria-hidden="true" class="anchor-heading" href="#getloggerdefinitionversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetLoggerDefinitionVersion</h3>
<ul>
<li>description: Grants permission to retrieve information about a logger definition version.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "loggerDefinition": {
        "resource_type": "loggerDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "loggerDefinitionVersion": {
        "resource_type": "loggerDefinitionVersion",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getresourcedefinition"><a aria-hidden="true" class="anchor-heading" href="#getresourcedefinition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetResourceDefinition</h3>
<ul>
<li>description: Grants permission to retrieve information about a resource definition, such as its creation time and latest version.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "resourceDefinition": {
        "resource_type": "resourceDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getresourcedefinitionversion"><a aria-hidden="true" class="anchor-heading" href="#getresourcedefinitionversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetResourceDefinitionVersion</h3>
<ul>
<li>description: Grants permission to retrieve information about a resource definition version, such as which resources are included in the version.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "resourceDefinition": {
        "resource_type": "resourceDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "resourceDefinitionVersion": {
        "resource_type": "resourceDefinitionVersion",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getserviceroleforaccount"><a aria-hidden="true" class="anchor-heading" href="#getserviceroleforaccount"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetServiceRoleForAccount</h3>
<ul>
<li>description: Grants permission to retrieve the service role that is attached to an account.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsubscriptiondefinition"><a aria-hidden="true" class="anchor-heading" href="#getsubscriptiondefinition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSubscriptionDefinition</h3>
<ul>
<li>description: Grants permission to retrieve information about a subscription definition.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "subscriptionDefinition": {
        "resource_type": "subscriptionDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsubscriptiondefinitionversion"><a aria-hidden="true" class="anchor-heading" href="#getsubscriptiondefinitionversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSubscriptionDefinitionVersion</h3>
<ul>
<li>description: Grants permission to retrieve information about a subscription definition version.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "subscriptionDefinition": {
        "resource_type": "subscriptionDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "subscriptionDefinitionVersion": {
        "resource_type": "subscriptionDefinitionVersion",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listbulkdeploymentdetailedreports"><a aria-hidden="true" class="anchor-heading" href="#listbulkdeploymentdetailedreports"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListBulkDeploymentDetailedReports</h3>
<ul>
<li>description: Grants permission to retrieve a paginated list of the deployments that have been started in a bulk deployment operation and their current deployment status.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bulkDeployment": {
        "resource_type": "bulkDeployment",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listbulkdeployments"><a aria-hidden="true" class="anchor-heading" href="#listbulkdeployments"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListBulkDeployments</h3>
<ul>
<li>description: Grants permission to retrieve a list of bulk deployments.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listconnectordefinitionversions"><a aria-hidden="true" class="anchor-heading" href="#listconnectordefinitionversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListConnectorDefinitionVersions</h3>
<ul>
<li>description: Grants permission to list the versions of a connector definition.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "connectorDefinition": {
        "resource_type": "connectorDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listconnectordefinitions"><a aria-hidden="true" class="anchor-heading" href="#listconnectordefinitions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListConnectorDefinitions</h3>
<ul>
<li>description: Grants permission to retrieve a list of connector definitions.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listcoredefinitionversions"><a aria-hidden="true" class="anchor-heading" href="#listcoredefinitionversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListCoreDefinitionVersions</h3>
<ul>
<li>description: Grants permission to list the versions of a core definition.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "coreDefinition": {
        "resource_type": "coreDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listcoredefinitions"><a aria-hidden="true" class="anchor-heading" href="#listcoredefinitions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListCoreDefinitions</h3>
<ul>
<li>description: Grants permission to retrieve a list of core definitions.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdeployments"><a aria-hidden="true" class="anchor-heading" href="#listdeployments"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDeployments</h3>
<ul>
<li>description: Grants permission to retrieve a list of all deployments for a group.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "group": {
        "resource_type": "group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdevicedefinitionversions"><a aria-hidden="true" class="anchor-heading" href="#listdevicedefinitionversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDeviceDefinitionVersions</h3>
<ul>
<li>description: Grants permission to list the versions of a device definition.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "deviceDefinition": {
        "resource_type": "deviceDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdevicedefinitions"><a aria-hidden="true" class="anchor-heading" href="#listdevicedefinitions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDeviceDefinitions</h3>
<ul>
<li>description: Grants permission to retrieve a list of device definitions.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listfunctiondefinitionversions"><a aria-hidden="true" class="anchor-heading" href="#listfunctiondefinitionversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListFunctionDefinitionVersions</h3>
<ul>
<li>description: Grants permission to list the versions of a Lambda function definition.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "functionDefinition": {
        "resource_type": "functionDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listfunctiondefinitions"><a aria-hidden="true" class="anchor-heading" href="#listfunctiondefinitions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListFunctionDefinitions</h3>
<ul>
<li>description: Grants permission to retrieve a list of Lambda function definitions.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listgroupcertificateauthorities"><a aria-hidden="true" class="anchor-heading" href="#listgroupcertificateauthorities"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListGroupCertificateAuthorities</h3>
<ul>
<li>description: Grants permission to retrieve a list of current CAs for a group.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "group": {
        "resource_type": "group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listgroupversions"><a aria-hidden="true" class="anchor-heading" href="#listgroupversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListGroupVersions</h3>
<ul>
<li>description: Grants permission to list the versions of a group.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "group": {
        "resource_type": "group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listgroups"><a aria-hidden="true" class="anchor-heading" href="#listgroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListGroups</h3>
<ul>
<li>description: Grants permission to retrieve a list of groups.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listloggerdefinitionversions"><a aria-hidden="true" class="anchor-heading" href="#listloggerdefinitionversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListLoggerDefinitionVersions</h3>
<ul>
<li>description: Grants permission to list the versions of a logger definition.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "loggerDefinition": {
        "resource_type": "loggerDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listloggerdefinitions"><a aria-hidden="true" class="anchor-heading" href="#listloggerdefinitions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListLoggerDefinitions</h3>
<ul>
<li>description: Grants permission to retrieve a list of logger definitions.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listresourcedefinitionversions"><a aria-hidden="true" class="anchor-heading" href="#listresourcedefinitionversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListResourceDefinitionVersions</h3>
<ul>
<li>description: Grants permission to list the versions of a resource definition.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "resourceDefinition": {
        "resource_type": "resourceDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listresourcedefinitions"><a aria-hidden="true" class="anchor-heading" href="#listresourcedefinitions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListResourceDefinitions</h3>
<ul>
<li>description: Grants permission to retrieve a list of resource definitions.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listsubscriptiondefinitionversions"><a aria-hidden="true" class="anchor-heading" href="#listsubscriptiondefinitionversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListSubscriptionDefinitionVersions</h3>
<ul>
<li>description: Grants permission to list the versions of a subscription definition.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "subscriptionDefinition": {
        "resource_type": "subscriptionDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listsubscriptiondefinitions"><a aria-hidden="true" class="anchor-heading" href="#listsubscriptiondefinitions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListSubscriptionDefinitions</h3>
<ul>
<li>description: Grants permission to retrieve a list of subscription definitions.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Grants permission to list the tags for a resource.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bulkDeployment": {
        "resource_type": "bulkDeployment",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "connectorDefinition": {
        "resource_type": "connectorDefinition",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "coreDefinition": {
        "resource_type": "coreDefinition",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "deviceDefinition": {
        "resource_type": "deviceDefinition",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "functionDefinition": {
        "resource_type": "functionDefinition",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "group": {
        "resource_type": "group",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "loggerDefinition": {
        "resource_type": "loggerDefinition",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "resourceDefinition": {
        "resource_type": "resourceDefinition",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "subscriptionDefinition": {
        "resource_type": "subscriptionDefinition",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="resetdeployments"><a aria-hidden="true" class="anchor-heading" href="#resetdeployments"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ResetDeployments</h3>
<ul>
<li>description: Grants permission to reset a group's deployments.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "group": {
        "resource_type": "group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startbulkdeployment"><a aria-hidden="true" class="anchor-heading" href="#startbulkdeployment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartBulkDeployment</h3>
<ul>
<li>description: Grants permission to deploy multiple groups in one operation.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopbulkdeployment"><a aria-hidden="true" class="anchor-heading" href="#stopbulkdeployment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopBulkDeployment</h3>
<ul>
<li>description: Grants permission to stop the execution of a bulk deployment.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bulkDeployment": {
        "resource_type": "bulkDeployment",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Grants permission to add tags to a resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bulkDeployment": {
        "resource_type": "bulkDeployment",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "connectorDefinition": {
        "resource_type": "connectorDefinition",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "coreDefinition": {
        "resource_type": "coreDefinition",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "deviceDefinition": {
        "resource_type": "deviceDefinition",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "functionDefinition": {
        "resource_type": "functionDefinition",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "group": {
        "resource_type": "group",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "loggerDefinition": {
        "resource_type": "loggerDefinition",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "resourceDefinition": {
        "resource_type": "resourceDefinition",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "subscriptionDefinition": {
        "resource_type": "subscriptionDefinition",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Grants permission to remove tags from a resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "bulkDeployment": {
        "resource_type": "bulkDeployment",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "connectorDefinition": {
        "resource_type": "connectorDefinition",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "coreDefinition": {
        "resource_type": "coreDefinition",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "deviceDefinition": {
        "resource_type": "deviceDefinition",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "functionDefinition": {
        "resource_type": "functionDefinition",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "group": {
        "resource_type": "group",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "loggerDefinition": {
        "resource_type": "loggerDefinition",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "resourceDefinition": {
        "resource_type": "resourceDefinition",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "subscriptionDefinition": {
        "resource_type": "subscriptionDefinition",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateconnectivityinfo"><a aria-hidden="true" class="anchor-heading" href="#updateconnectivityinfo"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateConnectivityInfo</h3>
<ul>
<li>description: Grants permission to update the connectivity information for a Greengrass core. Any devices that belong to the group that has this core will receive this information in order to find the location of the core and connect to it.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "connectivityInfo": {
        "resource_type": "connectivityInfo",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateconnectordefinition"><a aria-hidden="true" class="anchor-heading" href="#updateconnectordefinition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateConnectorDefinition</h3>
<ul>
<li>description: Grants permission to update a connector definition.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "connectorDefinition": {
        "resource_type": "connectorDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatecoredefinition"><a aria-hidden="true" class="anchor-heading" href="#updatecoredefinition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateCoreDefinition</h3>
<ul>
<li>description: Grants permission to update a core definition.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "coreDefinition": {
        "resource_type": "coreDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatedevicedefinition"><a aria-hidden="true" class="anchor-heading" href="#updatedevicedefinition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateDeviceDefinition</h3>
<ul>
<li>description: Grants permission to update a device definition.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "deviceDefinition": {
        "resource_type": "deviceDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatefunctiondefinition"><a aria-hidden="true" class="anchor-heading" href="#updatefunctiondefinition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateFunctionDefinition</h3>
<ul>
<li>description: Grants permission to update a Lambda function definition.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "functionDefinition": {
        "resource_type": "functionDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updategroup"><a aria-hidden="true" class="anchor-heading" href="#updategroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateGroup</h3>
<ul>
<li>description: Grants permission to update a group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "group": {
        "resource_type": "group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updategroupcertificateconfiguration"><a aria-hidden="true" class="anchor-heading" href="#updategroupcertificateconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateGroupCertificateConfiguration</h3>
<ul>
<li>description: Grants permission to update the certificate expiry time for a group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "group": {
        "resource_type": "group",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateloggerdefinition"><a aria-hidden="true" class="anchor-heading" href="#updateloggerdefinition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateLoggerDefinition</h3>
<ul>
<li>description: Grants permission to update a logger definition.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "loggerDefinition": {
        "resource_type": "loggerDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateresourcedefinition"><a aria-hidden="true" class="anchor-heading" href="#updateresourcedefinition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateResourceDefinition</h3>
<ul>
<li>description: Grants permission to update a resource definition.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "resourceDefinition": {
        "resource_type": "resourceDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatesubscriptiondefinition"><a aria-hidden="true" class="anchor-heading" href="#updatesubscriptiondefinition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateSubscriptionDefinition</h3>
<ul>
<li>description: Grants permission to update a subscription definition.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "subscriptionDefinition": {
        "resource_type": "subscriptionDefinition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Greengrass"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Backup.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Backup - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Backup.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Backup.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Backup.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Backup - undefined" />
  <meta name="twitter:title" content="Backup - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Backup</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Backup">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="backup"><a aria-hidden="true" class="anchor-heading" href="#backup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Backup</h1>
<ul>
<li>prefix: backup</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="copyintobackupvault"><a aria-hidden="true" class="anchor-heading" href="#copyintobackupvault"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CopyIntoBackupVault</h3>
<ul>
<li>description: Copy into a backup vault</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createbackupplan"><a aria-hidden="true" class="anchor-heading" href="#createbackupplan"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateBackupPlan</h3>
<ul>
<li>description: Creates a new backup plan</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "backupPlan": {
        "resource_type": "backupPlan",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createbackupselection"><a aria-hidden="true" class="anchor-heading" href="#createbackupselection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateBackupSelection</h3>
<ul>
<li>description: Creates a new resource assignment in a backup plan.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "backupPlan": {
        "resource_type": "backupPlan",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    }
}
</code></pre>
<h3 id="createbackupvault"><a aria-hidden="true" class="anchor-heading" href="#createbackupvault"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateBackupVault</h3>
<ul>
<li>description: Creates a new backup vault.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "backupVault": {
        "resource_type": "backupVault",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletebackupplan"><a aria-hidden="true" class="anchor-heading" href="#deletebackupplan"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteBackupPlan</h3>
<ul>
<li>description: Deletes a backup plan.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "backupPlan": {
        "resource_type": "backupPlan",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletebackupselection"><a aria-hidden="true" class="anchor-heading" href="#deletebackupselection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteBackupSelection</h3>
<ul>
<li>description: Deletes a resource assignment from a backup plan.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "backupPlan": {
        "resource_type": "backupPlan",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletebackupvault"><a aria-hidden="true" class="anchor-heading" href="#deletebackupvault"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteBackupVault</h3>
<ul>
<li>description: Deletes a backup vault.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "backupVault": {
        "resource_type": "backupVault",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletebackupvaultaccesspolicy"><a aria-hidden="true" class="anchor-heading" href="#deletebackupvaultaccesspolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteBackupVaultAccessPolicy</h3>
<ul>
<li>description: Deletes backup vault access policy.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "backupVault": {
        "resource_type": "backupVault",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletebackupvaultnotifications"><a aria-hidden="true" class="anchor-heading" href="#deletebackupvaultnotifications"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteBackupVaultNotifications</h3>
<ul>
<li>description: Remove notifications from backup vault.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "backupVault": {
        "resource_type": "backupVault",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleterecoverypoint"><a aria-hidden="true" class="anchor-heading" href="#deleterecoverypoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteRecoveryPoint</h3>
<ul>
<li>description: Deletes a recovery point from a backup vault.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "recoveryPoint": {
        "resource_type": "recoveryPoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describebackupjob"><a aria-hidden="true" class="anchor-heading" href="#describebackupjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeBackupJob</h3>
<ul>
<li>description: Describes a backup job</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describebackupvault"><a aria-hidden="true" class="anchor-heading" href="#describebackupvault"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeBackupVault</h3>
<ul>
<li>description: Creates a new backup vault with the specified name.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "backupVault": {
        "resource_type": "backupVault",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecopyjob"><a aria-hidden="true" class="anchor-heading" href="#describecopyjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeCopyJob</h3>
<ul>
<li>description: Describes a copy job</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeprotectedresource"><a aria-hidden="true" class="anchor-heading" href="#describeprotectedresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeProtectedResource</h3>
<ul>
<li>description: Describes a protected resource.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describerecoverypoint"><a aria-hidden="true" class="anchor-heading" href="#describerecoverypoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeRecoveryPoint</h3>
<ul>
<li>description: Describes a recovery point.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "recoveryPoint": {
        "resource_type": "recoveryPoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeregionsettings"><a aria-hidden="true" class="anchor-heading" href="#describeregionsettings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeRegionSettings</h3>
<ul>
<li>description: Describes region settings</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describerestorejob"><a aria-hidden="true" class="anchor-heading" href="#describerestorejob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeRestoreJob</h3>
<ul>
<li>description: Describes a restore job.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="exportbackupplantemplate"><a aria-hidden="true" class="anchor-heading" href="#exportbackupplantemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ExportBackupPlanTemplate</h3>
<ul>
<li>description: Exports a backup plan as a JSON.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbackupplan"><a aria-hidden="true" class="anchor-heading" href="#getbackupplan"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBackupPlan</h3>
<ul>
<li>description: Gets a backup plan.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "backupPlan": {
        "resource_type": "backupPlan",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbackupplanfromjson"><a aria-hidden="true" class="anchor-heading" href="#getbackupplanfromjson"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBackupPlanFromJSON</h3>
<ul>
<li>description: Transforms a JSON to a backup plan.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbackupplanfromtemplate"><a aria-hidden="true" class="anchor-heading" href="#getbackupplanfromtemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBackupPlanFromTemplate</h3>
<ul>
<li>description: Transforms a template to a backup plan.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbackupselection"><a aria-hidden="true" class="anchor-heading" href="#getbackupselection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBackupSelection</h3>
<ul>
<li>description: Gets a backup plan resource assignment.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "backupPlan": {
        "resource_type": "backupPlan",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbackupvaultaccesspolicy"><a aria-hidden="true" class="anchor-heading" href="#getbackupvaultaccesspolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBackupVaultAccessPolicy</h3>
<ul>
<li>description: Gets backup vault access policy.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "backupVault": {
        "resource_type": "backupVault",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbackupvaultnotifications"><a aria-hidden="true" class="anchor-heading" href="#getbackupvaultnotifications"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBackupVaultNotifications</h3>
<ul>
<li>description: Gets backup vault notifications.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "backupVault": {
        "resource_type": "backupVault",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getrecoverypointrestoremetadata"><a aria-hidden="true" class="anchor-heading" href="#getrecoverypointrestoremetadata"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRecoveryPointRestoreMetadata</h3>
<ul>
<li>description: Gets recovery point restore metadata.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "recoveryPoint": {
        "resource_type": "recoveryPoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsupportedresourcetypes"><a aria-hidden="true" class="anchor-heading" href="#getsupportedresourcetypes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSupportedResourceTypes</h3>
<ul>
<li>description: Gets supported resource types.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listbackupjobs"><a aria-hidden="true" class="anchor-heading" href="#listbackupjobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListBackupJobs</h3>
<ul>
<li>description: Lists backup jobs.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listbackupplantemplates"><a aria-hidden="true" class="anchor-heading" href="#listbackupplantemplates"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListBackupPlanTemplates</h3>
<ul>
<li>description: Lists backup plan templates provided by AWS Backup.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listbackupplanversions"><a aria-hidden="true" class="anchor-heading" href="#listbackupplanversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListBackupPlanVersions</h3>
<ul>
<li>description: Lists backup plan versions.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "backupPlan": {
        "resource_type": "backupPlan",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listbackupplans"><a aria-hidden="true" class="anchor-heading" href="#listbackupplans"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListBackupPlans</h3>
<ul>
<li>description: Lists backup plans.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listbackupselections"><a aria-hidden="true" class="anchor-heading" href="#listbackupselections"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListBackupSelections</h3>
<ul>
<li>description: Lists resource assignments for a specific backup plan.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "backupPlan": {
        "resource_type": "backupPlan",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listbackupvaults"><a aria-hidden="true" class="anchor-heading" href="#listbackupvaults"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListBackupVaults</h3>
<ul>
<li>description: Lists backup vaults.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listcopyjobs"><a aria-hidden="true" class="anchor-heading" href="#listcopyjobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListCopyJobs</h3>
<ul>
<li>description: List copy jobs</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listprotectedresources"><a aria-hidden="true" class="anchor-heading" href="#listprotectedresources"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListProtectedResources</h3>
<ul>
<li>description: Lists protected resources by AWS Backup.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listrecoverypointsbybackupvault"><a aria-hidden="true" class="anchor-heading" href="#listrecoverypointsbybackupvault"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListRecoveryPointsByBackupVault</h3>
<ul>
<li>description: Lists recovery points inside a backup vault.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "backupVault": {
        "resource_type": "backupVault",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listrecoverypointsbyresource"><a aria-hidden="true" class="anchor-heading" href="#listrecoverypointsbyresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListRecoveryPointsByResource</h3>
<ul>
<li>description: Lists recovery points for a resource.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listrestorejobs"><a aria-hidden="true" class="anchor-heading" href="#listrestorejobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListRestoreJobs</h3>
<ul>
<li>description: Lists restore jobs.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtags"><a aria-hidden="true" class="anchor-heading" href="#listtags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTags</h3>
<ul>
<li>description: Lists tags for a resource.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "backupPlan": {
        "resource_type": "backupPlan",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "backupVault": {
        "resource_type": "backupVault",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "recoveryPoint": {
        "resource_type": "recoveryPoint",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putbackupvaultaccesspolicy"><a aria-hidden="true" class="anchor-heading" href="#putbackupvaultaccesspolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutBackupVaultAccessPolicy</h3>
<ul>
<li>description: Adds an access policy to the backup vault.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "backupVault": {
        "resource_type": "backupVault",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putbackupvaultnotifications"><a aria-hidden="true" class="anchor-heading" href="#putbackupvaultnotifications"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutBackupVaultNotifications</h3>
<ul>
<li>description: Adds an SNS topic to the backup vault.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "backupVault": {
        "resource_type": "backupVault",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startbackupjob"><a aria-hidden="true" class="anchor-heading" href="#startbackupjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartBackupJob</h3>
<ul>
<li>description: Starts a new backup job.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "backupVault": {
        "resource_type": "backupVault",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    }
}
</code></pre>
<h3 id="startcopyjob"><a aria-hidden="true" class="anchor-heading" href="#startcopyjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartCopyJob</h3>
<ul>
<li>description: Copy a backup from a source region to a destination region.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "recoveryPoint": {
        "resource_type": "recoveryPoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startrestorejob"><a aria-hidden="true" class="anchor-heading" href="#startrestorejob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartRestoreJob</h3>
<ul>
<li>description: Starts a new restore job.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "recoveryPoint": {
        "resource_type": "recoveryPoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    }
}
</code></pre>
<h3 id="stopbackupjob"><a aria-hidden="true" class="anchor-heading" href="#stopbackupjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopBackupJob</h3>
<ul>
<li>description: Stops a backup job.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Tags a resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "backupPlan": {
        "resource_type": "backupPlan",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "backupVault": {
        "resource_type": "backupVault",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "recoveryPoint": {
        "resource_type": "recoveryPoint",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Untags a resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "backupPlan": {
        "resource_type": "backupPlan",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "backupVault": {
        "resource_type": "backupVault",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "recoveryPoint": {
        "resource_type": "recoveryPoint",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatebackupplan"><a aria-hidden="true" class="anchor-heading" href="#updatebackupplan"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateBackupPlan</h3>
<ul>
<li>description: Updates a backup plan.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "backupPlan": {
        "resource_type": "backupPlan",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updaterecoverypointlifecycle"><a aria-hidden="true" class="anchor-heading" href="#updaterecoverypointlifecycle"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateRecoveryPointLifecycle</h3>
<ul>
<li>description: Updates the lifecycle of the recovery point.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "recoveryPoint": {
        "resource_type": "recoveryPoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateregionsettings"><a aria-hidden="true" class="anchor-heading" href="#updateregionsettings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateRegionSettings</h3>
<ul>
<li>description: Describes region settings</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Backup"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-WorkMail.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>WorkMail - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-WorkMail.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-WorkMail.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-WorkMail.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="WorkMail - undefined" />
  <meta name="twitter:title" content="WorkMail - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">WorkMail</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="WorkMail">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="workmail"><a aria-hidden="true" class="anchor-heading" href="#workmail"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>WorkMail</h1>
<ul>
<li>prefix: workmail</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="addmemberstogroup"><a aria-hidden="true" class="anchor-heading" href="#addmemberstogroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddMembersToGroup</h3>
<ul>
<li>description: Adds a list of members (users or groups) to a group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="associatedelegatetoresource"><a aria-hidden="true" class="anchor-heading" href="#associatedelegatetoresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateDelegateToResource</h3>
<ul>
<li>description: Adds a member (user or group) to the resource's set of delegates.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="associatemembertogroup"><a aria-hidden="true" class="anchor-heading" href="#associatemembertogroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateMemberToGroup</h3>
<ul>
<li>description: Adds a member (user or group) to the group's set.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createalias"><a aria-hidden="true" class="anchor-heading" href="#createalias"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateAlias</h3>
<ul>
<li>description: Adds an alias to the set of a given member (user or group) of WorkMail.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="creategroup"><a aria-hidden="true" class="anchor-heading" href="#creategroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateGroup</h3>
<ul>
<li>description: Creates a group that can be used in WorkMail by calling the RegisterToWorkMail operation.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createinboundmailflowrule"><a aria-hidden="true" class="anchor-heading" href="#createinboundmailflowrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateInboundMailFlowRule</h3>
<ul>
<li>description: Create an inbound email flow rule which will apply to all email sent to an organization</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createmaildomain"><a aria-hidden="true" class="anchor-heading" href="#createmaildomain"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateMailDomain</h3>
<ul>
<li>description: Creates a mail domain.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createmailuser"><a aria-hidden="true" class="anchor-heading" href="#createmailuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateMailUser</h3>
<ul>
<li>description: Creates a user in the directory and the WorkMail storage but does not enable the user for mail.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createorganization"><a aria-hidden="true" class="anchor-heading" href="#createorganization"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateOrganization</h3>
<ul>
<li>description: Creates an organization, either using an existing directory or creates a new directory on-the-fly. Also creates and enables the complementary mail domain. Optionally creates KMS key</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createoutboundmailflowrule"><a aria-hidden="true" class="anchor-heading" href="#createoutboundmailflowrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateOutboundMailFlowRule</h3>
<ul>
<li>description: Create an outbound email flow rule which will apply to all email sent from an organization</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createresource"><a aria-hidden="true" class="anchor-heading" href="#createresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateResource</h3>
<ul>
<li>description: Creates a new WorkMail resource.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createsmtpgateway"><a aria-hidden="true" class="anchor-heading" href="#createsmtpgateway"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSmtpGateway</h3>
<ul>
<li>description: Register an SMTP device against a WorkMail organization</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createuser"><a aria-hidden="true" class="anchor-heading" href="#createuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateUser</h3>
<ul>
<li>description: Creates a user who can be used in WorkMail by calling the RegisterToWorkMail operation.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteaccesscontrolrule"><a aria-hidden="true" class="anchor-heading" href="#deleteaccesscontrolrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAccessControlRule</h3>
<ul>
<li>description: Deletes an access control rule for the specified WorkMail organization.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletealias"><a aria-hidden="true" class="anchor-heading" href="#deletealias"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAlias</h3>
<ul>
<li>description: Remove one or more specified aliases from a set of aliases for a given user.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletegroup"><a aria-hidden="true" class="anchor-heading" href="#deletegroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteGroup</h3>
<ul>
<li>description: Deletes a group from WorkMail.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteinboundmailflowrule"><a aria-hidden="true" class="anchor-heading" href="#deleteinboundmailflowrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteInboundMailFlowRule</h3>
<ul>
<li>description: Remove an inbound email flow rule to no longer apply to emails sent to an organization</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletemaildomain"><a aria-hidden="true" class="anchor-heading" href="#deletemaildomain"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteMailDomain</h3>
<ul>
<li>description: Removes an unused mail domain from an organization</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletemailboxpermissions"><a aria-hidden="true" class="anchor-heading" href="#deletemailboxpermissions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteMailboxPermissions</h3>
<ul>
<li>description: Deletes permissions granted to a member (user or group).</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletemobiledevice"><a aria-hidden="true" class="anchor-heading" href="#deletemobiledevice"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteMobileDevice</h3>
<ul>
<li>description: Removes a mobile device from a user</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteorganization"><a aria-hidden="true" class="anchor-heading" href="#deleteorganization"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteOrganization</h3>
<ul>
<li>description: Removes an organization from an account, either removing the directory from directory services or leaving it available for re-use</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteoutboundmailflowrule"><a aria-hidden="true" class="anchor-heading" href="#deleteoutboundmailflowrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteOutboundMailFlowRule</h3>
<ul>
<li>description: Remove an outbound email flow rule to no longer apply to emails sent from an organization</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteresource"><a aria-hidden="true" class="anchor-heading" href="#deleteresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteResource</h3>
<ul>
<li>description: Deletes the specified resource.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteretentionpolicy"><a aria-hidden="true" class="anchor-heading" href="#deleteretentionpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteRetentionPolicy</h3>
<ul>
<li>description: Deletes the retention policy based on the supplied organization and policy identifiers.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletesmtpgateway"><a aria-hidden="true" class="anchor-heading" href="#deletesmtpgateway"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteSmtpGateway</h3>
<ul>
<li>description: Remove an SMTP device from an organization</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteuser"><a aria-hidden="true" class="anchor-heading" href="#deleteuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteUser</h3>
<ul>
<li>description: Deletes a user from WorkMail and all subsequent systems. The action cannot be undone.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deregisterfromworkmail"><a aria-hidden="true" class="anchor-heading" href="#deregisterfromworkmail"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeregisterFromWorkMail</h3>
<ul>
<li>description: Mark a user, group, or resource as no longer used in WorkMail.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedirectories"><a aria-hidden="true" class="anchor-heading" href="#describedirectories"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDirectories</h3>
<ul>
<li>description: Shows a list of directories available for use in creating an organization</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describegroup"><a aria-hidden="true" class="anchor-heading" href="#describegroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeGroup</h3>
<ul>
<li>description: Returns the data available for the group.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeinboundmailflowrule"><a aria-hidden="true" class="anchor-heading" href="#describeinboundmailflowrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeInboundMailFlowRule</h3>
<ul>
<li>description: Returns the details of an inbound mail flow rule configured for an organization</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describekmskeys"><a aria-hidden="true" class="anchor-heading" href="#describekmskeys"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeKmsKeys</h3>
<ul>
<li>description: Shows a list of KMS Keys available for use in creating an organization</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describemaildomains"><a aria-hidden="true" class="anchor-heading" href="#describemaildomains"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeMailDomains</h3>
<ul>
<li>description: Shows the details of all mail domains associated with the organization</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describemailgroups"><a aria-hidden="true" class="anchor-heading" href="#describemailgroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeMailGroups</h3>
<ul>
<li>description: Shows the details of all groups associated with the organization</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describemailusers"><a aria-hidden="true" class="anchor-heading" href="#describemailusers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeMailUsers</h3>
<ul>
<li>description: Shows the details of all users associated with the orgaization</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeorganization"><a aria-hidden="true" class="anchor-heading" href="#describeorganization"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeOrganization</h3>
<ul>
<li>description: Provides more information regarding a given organization based on its identifier.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeorganizations"><a aria-hidden="true" class="anchor-heading" href="#describeorganizations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeOrganizations</h3>
<ul>
<li>description: Shows a summary of all organizations associated with the account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeoutboundmailflowrule"><a aria-hidden="true" class="anchor-heading" href="#describeoutboundmailflowrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeOutboundMailFlowRule</h3>
<ul>
<li>description: Returns the details of an outbound mail flow rule configured for an organization</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeresource"><a aria-hidden="true" class="anchor-heading" href="#describeresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeResource</h3>
<ul>
<li>description: Returns the data available for the resource.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describesmtpgateway"><a aria-hidden="true" class="anchor-heading" href="#describesmtpgateway"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSmtpGateway</h3>
<ul>
<li>description: Returns the details of an SMTP device registered against an organization</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeuser"><a aria-hidden="true" class="anchor-heading" href="#describeuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeUser</h3>
<ul>
<li>description: Provides information regarding the user.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disablemailgroups"><a aria-hidden="true" class="anchor-heading" href="#disablemailgroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisableMailGroups</h3>
<ul>
<li>description: Disable a mail group when it is not being used and, to allow it to be deleted</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disablemailusers"><a aria-hidden="true" class="anchor-heading" href="#disablemailusers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisableMailUsers</h3>
<ul>
<li>description: Disable a user mailbox when it is no longer being used, and to allow it to be deleted</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociatedelegatefromresource"><a aria-hidden="true" class="anchor-heading" href="#disassociatedelegatefromresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateDelegateFromResource</h3>
<ul>
<li>description: Removes a member from the resource's set of delegates.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociatememberfromgroup"><a aria-hidden="true" class="anchor-heading" href="#disassociatememberfromgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateMemberFromGroup</h3>
<ul>
<li>description: Removes a member from a group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="enablemaildomain"><a aria-hidden="true" class="anchor-heading" href="#enablemaildomain"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EnableMailDomain</h3>
<ul>
<li>description: Enable a mail domain in the organization</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="enablemailgroups"><a aria-hidden="true" class="anchor-heading" href="#enablemailgroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EnableMailGroups</h3>
<ul>
<li>description: Enable a mail group after it has been created to allow it to receive mail</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="enablemailusers"><a aria-hidden="true" class="anchor-heading" href="#enablemailusers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EnableMailUsers</h3>
<ul>
<li>description: Enable a user's mailbox after it has been created to allow it to receive mail</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getaccesscontroleffect"><a aria-hidden="true" class="anchor-heading" href="#getaccesscontroleffect"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAccessControlEffect</h3>
<ul>
<li>description: Gets the effects of an organization's access control rules as they apply to a specified IPv4 address, access protocol action, or user ID.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdefaultretentionpolicy"><a aria-hidden="true" class="anchor-heading" href="#getdefaultretentionpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDefaultRetentionPolicy</h3>
<ul>
<li>description: Retrieves the retention policy associated at an organizational level.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getjournalingrules"><a aria-hidden="true" class="anchor-heading" href="#getjournalingrules"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetJournalingRules</h3>
<ul>
<li>description: Returns journaling and fallback email addresses configured for email journaling</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmaildomaindetails"><a aria-hidden="true" class="anchor-heading" href="#getmaildomaindetails"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetMailDomainDetails</h3>
<ul>
<li>description: Get the details of the mail domain</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmailgroupdetails"><a aria-hidden="true" class="anchor-heading" href="#getmailgroupdetails"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetMailGroupDetails</h3>
<ul>
<li>description: Get the details of the mail group</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmailuserdetails"><a aria-hidden="true" class="anchor-heading" href="#getmailuserdetails"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetMailUserDetails</h3>
<ul>
<li>description: Get the details of the user's mailbox and account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmailboxdetails"><a aria-hidden="true" class="anchor-heading" href="#getmailboxdetails"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetMailboxDetails</h3>
<ul>
<li>description: Returns the details of the user's mailbox.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmobiledevicedetails"><a aria-hidden="true" class="anchor-heading" href="#getmobiledevicedetails"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetMobileDeviceDetails</h3>
<ul>
<li>description: Get the details of the mobile device</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmobiledevicesforuser"><a aria-hidden="true" class="anchor-heading" href="#getmobiledevicesforuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetMobileDevicesForUser</h3>
<ul>
<li>description: Get a list of the mobile devices associated with the user</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmobilepolicydetails"><a aria-hidden="true" class="anchor-heading" href="#getmobilepolicydetails"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetMobilePolicyDetails</h3>
<ul>
<li>description: Get the details of the mobile device policy associated with the organization</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listaccesscontrolrules"><a aria-hidden="true" class="anchor-heading" href="#listaccesscontrolrules"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAccessControlRules</h3>
<ul>
<li>description: Lists the access control rules for the specified organization.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listaliases"><a aria-hidden="true" class="anchor-heading" href="#listaliases"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAliases</h3>
<ul>
<li>description: Creates a paginated call to list the aliases associated with a given entity.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listgroupmembers"><a aria-hidden="true" class="anchor-heading" href="#listgroupmembers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListGroupMembers</h3>
<ul>
<li>description: Returns an overview of the members of a group. Users and groups can be members of a group.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listgroups"><a aria-hidden="true" class="anchor-heading" href="#listgroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListGroups</h3>
<ul>
<li>description: Returns summaries of the organization's groups.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listinboundmailflowrules"><a aria-hidden="true" class="anchor-heading" href="#listinboundmailflowrules"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListInboundMailFlowRules</h3>
<ul>
<li>description: Returns a list of inbound mail flow rules configured for an organization</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listmailboxpermissions"><a aria-hidden="true" class="anchor-heading" href="#listmailboxpermissions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListMailboxPermissions</h3>
<ul>
<li>description: Lists the mailbox permissions associated with a user, group, or resource mailbox.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listmembersinmailgroup"><a aria-hidden="true" class="anchor-heading" href="#listmembersinmailgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListMembersInMailGroup</h3>
<ul>
<li>description: Get a list of all the members in a mail group</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listorganizations"><a aria-hidden="true" class="anchor-heading" href="#listorganizations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListOrganizations</h3>
<ul>
<li>description: Returns summaries of the customer's non-deleted organizations.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listoutboundmailflowrules"><a aria-hidden="true" class="anchor-heading" href="#listoutboundmailflowrules"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListOutboundMailFlowRules</h3>
<ul>
<li>description: Returns a list of outbound mail flow rules configured for an organization</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listresourcedelegates"><a aria-hidden="true" class="anchor-heading" href="#listresourcedelegates"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListResourceDelegates</h3>
<ul>
<li>description: Lists the delegates associated with a resource.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listresources"><a aria-hidden="true" class="anchor-heading" href="#listresources"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListResources</h3>
<ul>
<li>description: Returns summaries of the organization's resources.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listsmtpgateways"><a aria-hidden="true" class="anchor-heading" href="#listsmtpgateways"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListSmtpGateways</h3>
<ul>
<li>description: Returns a list of SMTP devices registered against the organization</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Grants permission to list the tags applied to an Amazon WorkMail organization resource.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listusers"><a aria-hidden="true" class="anchor-heading" href="#listusers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListUsers</h3>
<ul>
<li>description: Returns summaries of the organization's users.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putaccesscontrolrule"><a aria-hidden="true" class="anchor-heading" href="#putaccesscontrolrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutAccessControlRule</h3>
<ul>
<li>description: Adds a new access control rule for the specified organization. The rule allows or denies access to the organization for the specified IPv4 addresses, access protocol actions, and user IDs. Adding a new rule with the same name as an existing rule replaces the older rule.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putmailboxpermissions"><a aria-hidden="true" class="anchor-heading" href="#putmailboxpermissions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutMailboxPermissions</h3>
<ul>
<li>description: Sets permissions for a user, group, or resource. This replaces any pre-existing permissions.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putretentionpolicy"><a aria-hidden="true" class="anchor-heading" href="#putretentionpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutRetentionPolicy</h3>
<ul>
<li>description: Adds or updates the retention policy for the specified organization.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registertoworkmail"><a aria-hidden="true" class="anchor-heading" href="#registertoworkmail"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterToWorkMail</h3>
<ul>
<li>description: Registers an existing and disabled user, group, or resource for use by associating a mailbox and calendaring capabilities.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="removemembersfromgroup"><a aria-hidden="true" class="anchor-heading" href="#removemembersfromgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemoveMembersFromGroup</h3>
<ul>
<li>description: Remove members from a mail group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="resetpassword"><a aria-hidden="true" class="anchor-heading" href="#resetpassword"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ResetPassword</h3>
<ul>
<li>description: Allows the administrator to reset the password for a user.</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="resetuserpassword"><a aria-hidden="true" class="anchor-heading" href="#resetuserpassword"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ResetUserPassword</h3>
<ul>
<li>description: Reset the password for a user's account</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="searchmembers"><a aria-hidden="true" class="anchor-heading" href="#searchmembers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SearchMembers</h3>
<ul>
<li>description: Prefix search to find a specific user in a mail group</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setadmin"><a aria-hidden="true" class="anchor-heading" href="#setadmin"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetAdmin</h3>
<ul>
<li>description: Mark a user as being an administrator</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setdefaultmaildomain"><a aria-hidden="true" class="anchor-heading" href="#setdefaultmaildomain"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetDefaultMailDomain</h3>
<ul>
<li>description: Set the default mail domain for the organization</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setjournalingrules"><a aria-hidden="true" class="anchor-heading" href="#setjournalingrules"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetJournalingRules</h3>
<ul>
<li>description: Set journaling and fallback email addresses for email journaling</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setmailgroupdetails"><a aria-hidden="true" class="anchor-heading" href="#setmailgroupdetails"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetMailGroupDetails</h3>
<ul>
<li>description: Set the details of the mail group which has just been created</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setmailuserdetails"><a aria-hidden="true" class="anchor-heading" href="#setmailuserdetails"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetMailUserDetails</h3>
<ul>
<li>description: Set the details for the user account which has just been created</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setmobilepolicydetails"><a aria-hidden="true" class="anchor-heading" href="#setmobilepolicydetails"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetMobilePolicyDetails</h3>
<ul>
<li>description: Set the details of a mobile policy associated with the organization</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Grants permission to tag the specified Amazon WorkMail organization resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="testinboundmailflowrules"><a aria-hidden="true" class="anchor-heading" href="#testinboundmailflowrules"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TestInboundMailFlowRules</h3>
<ul>
<li>description: Test what inbound rules will apply to an email with a given sender and recipient</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="testoutboundmailflowrules"><a aria-hidden="true" class="anchor-heading" href="#testoutboundmailflowrules"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TestOutboundMailFlowRules</h3>
<ul>
<li>description: Test what outbound rules will apply to an email with a given sender and recipient</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Grants permission to untag the specified Amazon WorkMail organization resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateinboundmailflowrule"><a aria-hidden="true" class="anchor-heading" href="#updateinboundmailflowrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateInboundMailFlowRule</h3>
<ul>
<li>description: Update the details of an inbound email flow rule which will apply to all email sent to an organization</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatemailboxquota"><a aria-hidden="true" class="anchor-heading" href="#updatemailboxquota"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateMailboxQuota</h3>
<ul>
<li>description: Updates the maximum size (in MB) of the user's mailbox.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateoutboundmailflowrule"><a aria-hidden="true" class="anchor-heading" href="#updateoutboundmailflowrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateOutboundMailFlowRule</h3>
<ul>
<li>description: Update the details of an outbound email flow rule which will apply to all email sent from an organization</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateprimaryemailaddress"><a aria-hidden="true" class="anchor-heading" href="#updateprimaryemailaddress"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdatePrimaryEmailAddress</h3>
<ul>
<li>description: Updates the primary email for a user, group, or resource.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateresource"><a aria-hidden="true" class="anchor-heading" href="#updateresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateResource</h3>
<ul>
<li>description: Updates data for the resource. To retrieve the latest information, it must be preceded by a DescribeResource call.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatesmtpgateway"><a aria-hidden="true" class="anchor-heading" href="#updatesmtpgateway"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateSmtpGateway</h3>
<ul>
<li>description: Update the details of an existing SMTP device registered against an organization</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="wipemobiledevice"><a aria-hidden="true" class="anchor-heading" href="#wipemobiledevice"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>WipeMobileDevice</h3>
<ul>
<li>description: Remotely wipe the mobile device associated with a user's account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "organization": {
        "resource_type": "organization",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-WorkMail"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Elastic Container Service.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Elastic Container Service - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Elastic Container Service.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Elastic Container Service.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Elastic Container Service.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Elastic Container Service - undefined" />
  <meta name="twitter:title" content="Elastic Container Service - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Elastic Container Service</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Elastic Container Service">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="elastic-container-service"><a aria-hidden="true" class="anchor-heading" href="#elastic-container-service"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Elastic Container Service</h1>
<ul>
<li>prefix: ecs</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="createcapacityprovider"><a aria-hidden="true" class="anchor-heading" href="#createcapacityprovider"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateCapacityProvider</h3>
<ul>
<li>description: Creates a new capacity provider. Capacity providers are associated with an Amazon ECS cluster and are used in capacity provider strategies to facilitate cluster auto scaling.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createcluster"><a aria-hidden="true" class="anchor-heading" href="#createcluster"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateCluster</h3>
<ul>
<li>description: Creates a new Amazon ECS cluster.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "ecs:capacity-provider",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createservice"><a aria-hidden="true" class="anchor-heading" href="#createservice"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateService</h3>
<ul>
<li>description: Runs and maintains a desired number of tasks from a specified task definition.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "service": {
        "resource_type": "service",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "ecs:cluster",
            "ecs:capacity-provider",
            "ecs:task-definition",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtaskset"><a aria-hidden="true" class="anchor-heading" href="#createtaskset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTaskSet</h3>
<ul>
<li>description: Creates a new Amazon ECS task set.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "ecs:cluster",
            "ecs:service",
            "ecs:task-definition"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteaccountsetting"><a aria-hidden="true" class="anchor-heading" href="#deleteaccountsetting"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAccountSetting</h3>
<ul>
<li>description: Modifies the ARN and resource ID format of a resource for a specified IAM user, IAM role, or the root user for an account. You can specify whether the new ARN and resource ID format are disabled for new resources that are created.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteattributes"><a aria-hidden="true" class="anchor-heading" href="#deleteattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAttributes</h3>
<ul>
<li>description: Deletes one or more custom attributes from an Amazon ECS resource.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "container-instance": {
        "resource_type": "container-instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "ecs:cluster"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletecapacityprovider"><a aria-hidden="true" class="anchor-heading" href="#deletecapacityprovider"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteCapacityProvider</h3>
<ul>
<li>description: Deletes the specified capacity provider.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "capacity-provider": {
        "resource_type": "capacity-provider",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletecluster"><a aria-hidden="true" class="anchor-heading" href="#deletecluster"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteCluster</h3>
<ul>
<li>description: Deletes the specified cluster.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteservice"><a aria-hidden="true" class="anchor-heading" href="#deleteservice"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteService</h3>
<ul>
<li>description: Deletes a specified service within a cluster.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "service": {
        "resource_type": "service",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "ecs:cluster"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetaskset"><a aria-hidden="true" class="anchor-heading" href="#deletetaskset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTaskSet</h3>
<ul>
<li>description: Deletes the specified task set.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "task-set": {
        "resource_type": "task-set",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "ecs:cluster",
            "ecs:service"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deregistercontainerinstance"><a aria-hidden="true" class="anchor-heading" href="#deregistercontainerinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeregisterContainerInstance</h3>
<ul>
<li>description: Deregisters an Amazon ECS container instance from the specified cluster.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deregistertaskdefinition"><a aria-hidden="true" class="anchor-heading" href="#deregistertaskdefinition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeregisterTaskDefinition</h3>
<ul>
<li>description: Deregisters the specified task definition by family and revision.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecapacityproviders"><a aria-hidden="true" class="anchor-heading" href="#describecapacityproviders"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeCapacityProviders</h3>
<ul>
<li>description: Describes one or more Amazon ECS capacity providers.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "capacity-provider": {
        "resource_type": "capacity-provider",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeclusters"><a aria-hidden="true" class="anchor-heading" href="#describeclusters"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeClusters</h3>
<ul>
<li>description: Describes one or more of your clusters.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecontainerinstances"><a aria-hidden="true" class="anchor-heading" href="#describecontainerinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeContainerInstances</h3>
<ul>
<li>description: Describes Amazon ECS container instances.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "container-instance": {
        "resource_type": "container-instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "ecs:cluster"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeservices"><a aria-hidden="true" class="anchor-heading" href="#describeservices"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeServices</h3>
<ul>
<li>description: Describes the specified services running in your cluster.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "service": {
        "resource_type": "service",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "ecs:cluster"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetaskdefinition"><a aria-hidden="true" class="anchor-heading" href="#describetaskdefinition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTaskDefinition</h3>
<ul>
<li>description: Describes a task definition. You can specify a family and revision to find information about a specific task definition, or you can simply specify the family to find the latest ACTIVE revision in that family.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetasksets"><a aria-hidden="true" class="anchor-heading" href="#describetasksets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTaskSets</h3>
<ul>
<li>description: Describes Amazon ECS task sets.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "task-set": {
        "resource_type": "task-set",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "ecs:cluster",
            "ecs:service"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetasks"><a aria-hidden="true" class="anchor-heading" href="#describetasks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTasks</h3>
<ul>
<li>description: Describes a specified task or tasks.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "task": {
        "resource_type": "task",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "ecs:cluster"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="discoverpollendpoint"><a aria-hidden="true" class="anchor-heading" href="#discoverpollendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DiscoverPollEndpoint</h3>
<ul>
<li>description: Returns an endpoint for the Amazon ECS agent to poll for updates.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listaccountsettings"><a aria-hidden="true" class="anchor-heading" href="#listaccountsettings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAccountSettings</h3>
<ul>
<li>description: Lists the account settings for an Amazon ECS resource for a specified principal.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listattributes"><a aria-hidden="true" class="anchor-heading" href="#listattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAttributes</h3>
<ul>
<li>description: Lists the attributes for Amazon ECS resources within a specified target type and cluster.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listclusters"><a aria-hidden="true" class="anchor-heading" href="#listclusters"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListClusters</h3>
<ul>
<li>description: Returns a list of existing clusters.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listcontainerinstances"><a aria-hidden="true" class="anchor-heading" href="#listcontainerinstances"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListContainerInstances</h3>
<ul>
<li>description: Returns a list of container instances in a specified cluster.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listservices"><a aria-hidden="true" class="anchor-heading" href="#listservices"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListServices</h3>
<ul>
<li>description: Lists the services that are running in a specified cluster.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "ecs:cluster"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: List tags for the specified resource.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "container-instance": {
        "resource_type": "container-instance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "task": {
        "resource_type": "task",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "task-definition": {
        "resource_type": "task-definition",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtaskdefinitionfamilies"><a aria-hidden="true" class="anchor-heading" href="#listtaskdefinitionfamilies"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTaskDefinitionFamilies</h3>
<ul>
<li>description: Returns a list of task definition families that are registered to your account (which may include task definition families that no longer have any ACTIVE task definitions).</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtaskdefinitions"><a aria-hidden="true" class="anchor-heading" href="#listtaskdefinitions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTaskDefinitions</h3>
<ul>
<li>description: Returns a list of task definitions that are registered to your account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtasks"><a aria-hidden="true" class="anchor-heading" href="#listtasks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTasks</h3>
<ul>
<li>description: Returns a list of tasks for a specified cluster.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "container-instance": {
        "resource_type": "container-instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "ecs:cluster"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="poll"><a aria-hidden="true" class="anchor-heading" href="#poll"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Poll</h3>
<ul>
<li>description: Grants permission to an agent to connect with the Amazon ECS service to report status and get commands.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "container-instance": {
        "resource_type": "container-instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "ecs:cluster"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putaccountsetting"><a aria-hidden="true" class="anchor-heading" href="#putaccountsetting"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutAccountSetting</h3>
<ul>
<li>description: Modifies the ARN and resource ID format of a resource for a specified IAM user, IAM role, or the root user for an account. You can specify whether the new ARN and resource ID format are enabled for new resources that are created. Enabling this setting is required to use new Amazon ECS features such as resource tagging.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putaccountsettingdefault"><a aria-hidden="true" class="anchor-heading" href="#putaccountsettingdefault"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutAccountSettingDefault</h3>
<ul>
<li>description: Modifies the ARN and resource ID format of a resource type for all IAM users on an account for which no individual account setting has been set. Enabling this setting is required to use new Amazon ECS features such as resource tagging.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putattributes"><a aria-hidden="true" class="anchor-heading" href="#putattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutAttributes</h3>
<ul>
<li>description: Create or update an attribute on an Amazon ECS resource.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "container-instance": {
        "resource_type": "container-instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "ecs:cluster"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putclustercapacityproviders"><a aria-hidden="true" class="anchor-heading" href="#putclustercapacityproviders"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutClusterCapacityProviders</h3>
<ul>
<li>description: Modifies the available capacity providers and the default capacity provider strategy for a cluster.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "capacity-provider": {
        "resource_type": "capacity-provider",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "ecs:capacity-provider"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registercontainerinstance"><a aria-hidden="true" class="anchor-heading" href="#registercontainerinstance"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterContainerInstance</h3>
<ul>
<li>description: Registers an EC2 instance into the specified cluster.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registertaskdefinition"><a aria-hidden="true" class="anchor-heading" href="#registertaskdefinition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterTaskDefinition</h3>
<ul>
<li>description: Registers a new task definition from the supplied family and containerDefinitions.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="runtask"><a aria-hidden="true" class="anchor-heading" href="#runtask"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RunTask</h3>
<ul>
<li>description: Start a task using random placement and the default Amazon ECS scheduler.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "task-definition": {
        "resource_type": "task-definition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "ecs:cluster",
            "ecs:capacity-provider",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="starttask"><a aria-hidden="true" class="anchor-heading" href="#starttask"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartTask</h3>
<ul>
<li>description: Starts a new task from the specified task definition on the specified container instance or instances.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "task-definition": {
        "resource_type": "task-definition",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "ecs:cluster",
            "ecs:container-instances",
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="starttelemetrysession"><a aria-hidden="true" class="anchor-heading" href="#starttelemetrysession"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartTelemetrySession</h3>
<ul>
<li>description: Grants permission to start a telemetry session.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "container-instance": {
        "resource_type": "container-instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "ecs:cluster"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stoptask"><a aria-hidden="true" class="anchor-heading" href="#stoptask"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopTask</h3>
<ul>
<li>description: Stops a running task.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "task": {
        "resource_type": "task",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "ecs:cluster"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="submitattachmentstatechanges"><a aria-hidden="true" class="anchor-heading" href="#submitattachmentstatechanges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SubmitAttachmentStateChanges</h3>
<ul>
<li>description: Sent to acknowledge that attachments changed states.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="submitcontainerstatechange"><a aria-hidden="true" class="anchor-heading" href="#submitcontainerstatechange"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SubmitContainerStateChange</h3>
<ul>
<li>description: Sent to acknowledge that a container changed states.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="submittaskstatechange"><a aria-hidden="true" class="anchor-heading" href="#submittaskstatechange"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SubmitTaskStateChange</h3>
<ul>
<li>description: Sent to acknowledge that a task changed states.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Tags the specified resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "container-instance": {
        "resource_type": "container-instance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "service": {
        "resource_type": "service",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "task": {
        "resource_type": "task",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "task-definition": {
        "resource_type": "task-definition",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys",
            "aws:RequestTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Untags the specified resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "container-instance": {
        "resource_type": "container-instance",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "service": {
        "resource_type": "service",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "task": {
        "resource_type": "task",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "task-definition": {
        "resource_type": "task-definition",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateclustersettings"><a aria-hidden="true" class="anchor-heading" href="#updateclustersettings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateClusterSettings</h3>
<ul>
<li>description: Modifies the settings to use for a cluster.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "cluster": {
        "resource_type": "cluster",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatecontaineragent"><a aria-hidden="true" class="anchor-heading" href="#updatecontaineragent"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateContainerAgent</h3>
<ul>
<li>description: Updates the Amazon ECS container agent on a specified container instance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "container-instance": {
        "resource_type": "container-instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "ecs:cluster"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatecontainerinstancesstate"><a aria-hidden="true" class="anchor-heading" href="#updatecontainerinstancesstate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateContainerInstancesState</h3>
<ul>
<li>description: Enables the user to modify the status of an Amazon ECS container instance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "container-instance": {
        "resource_type": "container-instance",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "ecs:cluster"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateservice"><a aria-hidden="true" class="anchor-heading" href="#updateservice"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateService</h3>
<ul>
<li>description: Modifies the parameters of a service.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "service": {
        "resource_type": "service",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "ecs:cluster",
            "ecs:capacity-provider",
            "ecs:task-definition"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateserviceprimarytaskset"><a aria-hidden="true" class="anchor-heading" href="#updateserviceprimarytaskset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateServicePrimaryTaskSet</h3>
<ul>
<li>description: Modifies the primary task set used in a service.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "service": {
        "resource_type": "service",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "ecs:cluster"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatetaskset"><a aria-hidden="true" class="anchor-heading" href="#updatetaskset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateTaskSet</h3>
<ul>
<li>description: Updates the specified task set.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "task-set": {
        "resource_type": "task-set",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "ecs:cluster",
            "ecs:service"
        ],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Elastic Container Service"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Elastic Load Balancing V2.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Elastic Load Balancing V2 - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Elastic Load Balancing V2.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Elastic Load Balancing V2.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Elastic Load Balancing V2.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Elastic Load Balancing V2 - undefined" />
  <meta name="twitter:title" content="Elastic Load Balancing V2 - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Elastic Load Balancing V2</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Elastic Load Balancing V2">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="elastic-load-balancing-v2"><a aria-hidden="true" class="anchor-heading" href="#elastic-load-balancing-v2"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Elastic Load Balancing V2</h1>
<ul>
<li>prefix: elasticloadbalancing</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="addlistenercertificates"><a aria-hidden="true" class="anchor-heading" href="#addlistenercertificates"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddListenerCertificates</h3>
<ul>
<li>description: Adds the specified certificates to the specified secure listener</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "listener/app": {
        "resource_type": "listener/app",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "listener/net": {
        "resource_type": "listener/net",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="addtags"><a aria-hidden="true" class="anchor-heading" href="#addtags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddTags</h3>
<ul>
<li>description: Adds the specified tags to the specified load balancer. Each load balancer can have a maximum of 10 tags</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "listener-rule/app": {
        "resource_type": "listener-rule/app",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "listener-rule/net": {
        "resource_type": "listener-rule/net",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "listener/app": {
        "resource_type": "listener/app",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "listener/net": {
        "resource_type": "listener/net",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "loadbalancer/app/": {
        "resource_type": "loadbalancer/app/",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "loadbalancer/net/": {
        "resource_type": "loadbalancer/net/",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "targetgroup": {
        "resource_type": "targetgroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createlistener"><a aria-hidden="true" class="anchor-heading" href="#createlistener"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateListener</h3>
<ul>
<li>description: Creates a listener for the specified Application Load Balancer</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "loadbalancer/app/": {
        "resource_type": "loadbalancer/app/",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "loadbalancer/net/": {
        "resource_type": "loadbalancer/net/",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createloadbalancer"><a aria-hidden="true" class="anchor-heading" href="#createloadbalancer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateLoadBalancer</h3>
<ul>
<li>description: Creates a load balancer</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "loadbalancer/app/": {
        "resource_type": "loadbalancer/app/",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "loadbalancer/net/": {
        "resource_type": "loadbalancer/net/",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createrule"><a aria-hidden="true" class="anchor-heading" href="#createrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateRule</h3>
<ul>
<li>description: Creates a rule for the specified listener</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "listener/app": {
        "resource_type": "listener/app",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "listener/net": {
        "resource_type": "listener/net",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtargetgroup"><a aria-hidden="true" class="anchor-heading" href="#createtargetgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTargetGroup</h3>
<ul>
<li>description: Creates a target group.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "targetgroup": {
        "resource_type": "targetgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletelistener"><a aria-hidden="true" class="anchor-heading" href="#deletelistener"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteListener</h3>
<ul>
<li>description: Deletes the specified listener</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "listener/app": {
        "resource_type": "listener/app",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "listener/net": {
        "resource_type": "listener/net",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteloadbalancer"><a aria-hidden="true" class="anchor-heading" href="#deleteloadbalancer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteLoadBalancer</h3>
<ul>
<li>description: Deletes the specified load balancer</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "loadbalancer/app/": {
        "resource_type": "loadbalancer/app/",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "loadbalancer/net/": {
        "resource_type": "loadbalancer/net/",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleterule"><a aria-hidden="true" class="anchor-heading" href="#deleterule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteRule</h3>
<ul>
<li>description: Deletes the specified rule</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "listener-rule/app": {
        "resource_type": "listener-rule/app",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "listener-rule/net": {
        "resource_type": "listener-rule/net",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetargetgroup"><a aria-hidden="true" class="anchor-heading" href="#deletetargetgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTargetGroup</h3>
<ul>
<li>description: Deletes the specified target group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "targetgroup": {
        "resource_type": "targetgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deregistertargets"><a aria-hidden="true" class="anchor-heading" href="#deregistertargets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeregisterTargets</h3>
<ul>
<li>description: Deregisters the specified targets from the specified target group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "targetgroup": {
        "resource_type": "targetgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeaccountlimits"><a aria-hidden="true" class="anchor-heading" href="#describeaccountlimits"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAccountLimits</h3>
<ul>
<li>description: Describes the Elastic Load Balancing resource limits for the AWS account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describelistenercertificates"><a aria-hidden="true" class="anchor-heading" href="#describelistenercertificates"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeListenerCertificates</h3>
<ul>
<li>description: Describes the certificates for the specified secure listener</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describelisteners"><a aria-hidden="true" class="anchor-heading" href="#describelisteners"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeListeners</h3>
<ul>
<li>description: Describes the specified listeners or the listeners for the specified Application Load Balancer</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeloadbalancerattributes"><a aria-hidden="true" class="anchor-heading" href="#describeloadbalancerattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeLoadBalancerAttributes</h3>
<ul>
<li>description: Describes the attributes for the specified load balancer</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeloadbalancers"><a aria-hidden="true" class="anchor-heading" href="#describeloadbalancers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeLoadBalancers</h3>
<ul>
<li>description: Describes the specified the load balancers. If no load balancers are specified, the call describes all of your load balancers</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describerules"><a aria-hidden="true" class="anchor-heading" href="#describerules"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeRules</h3>
<ul>
<li>description: Describes the specified rules or the rules for the specified listener</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describesslpolicies"><a aria-hidden="true" class="anchor-heading" href="#describesslpolicies"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSSLPolicies</h3>
<ul>
<li>description: Describes the specified policies or all policies used for SSL negotiation</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetags"><a aria-hidden="true" class="anchor-heading" href="#describetags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTags</h3>
<ul>
<li>description: Describes the tags associated with the specified resource</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "listener-rule/app": {
        "resource_type": "listener-rule/app",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "listener-rule/net": {
        "resource_type": "listener-rule/net",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "listener/app": {
        "resource_type": "listener/app",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "listener/net": {
        "resource_type": "listener/net",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "loadbalancer/app/": {
        "resource_type": "loadbalancer/app/",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "loadbalancer/net/": {
        "resource_type": "loadbalancer/net/",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "targetgroup": {
        "resource_type": "targetgroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetargetgroupattributes"><a aria-hidden="true" class="anchor-heading" href="#describetargetgroupattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTargetGroupAttributes</h3>
<ul>
<li>description: Describes the attributes for the specified target group</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetargetgroups"><a aria-hidden="true" class="anchor-heading" href="#describetargetgroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTargetGroups</h3>
<ul>
<li>description: Describes the specified target groups or all of your target groups</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetargethealth"><a aria-hidden="true" class="anchor-heading" href="#describetargethealth"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTargetHealth</h3>
<ul>
<li>description: Describes the health of the specified targets or all of your targets</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifylistener"><a aria-hidden="true" class="anchor-heading" href="#modifylistener"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyListener</h3>
<ul>
<li>description: Modifies the specified properties of the specified listener</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "listener/app": {
        "resource_type": "listener/app",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "listener/net": {
        "resource_type": "listener/net",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyloadbalancerattributes"><a aria-hidden="true" class="anchor-heading" href="#modifyloadbalancerattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyLoadBalancerAttributes</h3>
<ul>
<li>description: Modifies the attributes of the specified load balancer</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "loadbalancer/app/": {
        "resource_type": "loadbalancer/app/",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "loadbalancer/net/": {
        "resource_type": "loadbalancer/net/",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifyrule"><a aria-hidden="true" class="anchor-heading" href="#modifyrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyRule</h3>
<ul>
<li>description: Modifies the specified rule</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "listener-rule/app": {
        "resource_type": "listener-rule/app",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "listener-rule/net": {
        "resource_type": "listener-rule/net",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifytargetgroup"><a aria-hidden="true" class="anchor-heading" href="#modifytargetgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyTargetGroup</h3>
<ul>
<li>description: Modifies the health checks used when evaluating the health state of the targets in the specified target group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "targetgroup": {
        "resource_type": "targetgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="modifytargetgroupattributes"><a aria-hidden="true" class="anchor-heading" href="#modifytargetgroupattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ModifyTargetGroupAttributes</h3>
<ul>
<li>description: Modifies the specified attributes of the specified target group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "targetgroup": {
        "resource_type": "targetgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="registertargets"><a aria-hidden="true" class="anchor-heading" href="#registertargets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegisterTargets</h3>
<ul>
<li>description: Registers the specified targets with the specified target group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "targetgroup": {
        "resource_type": "targetgroup",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="removelistenercertificates"><a aria-hidden="true" class="anchor-heading" href="#removelistenercertificates"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemoveListenerCertificates</h3>
<ul>
<li>description: Removes the specified certificates of the specified secure listener</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "listener/app": {
        "resource_type": "listener/app",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "listener/net": {
        "resource_type": "listener/net",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="removetags"><a aria-hidden="true" class="anchor-heading" href="#removetags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemoveTags</h3>
<ul>
<li>description: Removes one or more tags from the specified load balancer</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "listener-rule/app": {
        "resource_type": "listener-rule/app",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "listener-rule/net": {
        "resource_type": "listener-rule/net",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "listener/app": {
        "resource_type": "listener/app",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "listener/net": {
        "resource_type": "listener/net",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "loadbalancer/app/": {
        "resource_type": "loadbalancer/app/",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "loadbalancer/net/": {
        "resource_type": "loadbalancer/net/",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "targetgroup": {
        "resource_type": "targetgroup",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setipaddresstype"><a aria-hidden="true" class="anchor-heading" href="#setipaddresstype"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetIpAddressType</h3>
<ul>
<li>description: Not found</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "loadbalancer/app/": {
        "resource_type": "loadbalancer/app/",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "loadbalancer/net/": {
        "resource_type": "loadbalancer/net/",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setrulepriorities"><a aria-hidden="true" class="anchor-heading" href="#setrulepriorities"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetRulePriorities</h3>
<ul>
<li>description: Sets the priorities of the specified rules</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "listener-rule/app": {
        "resource_type": "listener-rule/app",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "listener-rule/net": {
        "resource_type": "listener-rule/net",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setsecuritygroups"><a aria-hidden="true" class="anchor-heading" href="#setsecuritygroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetSecurityGroups</h3>
<ul>
<li>description: Associates the specified security groups with the specified load balancer</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "loadbalancer/app/": {
        "resource_type": "loadbalancer/app/",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "loadbalancer/net/": {
        "resource_type": "loadbalancer/net/",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setsubnets"><a aria-hidden="true" class="anchor-heading" href="#setsubnets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetSubnets</h3>
<ul>
<li>description: Enables the Availability Zone for the specified subnets for the specified load balancer</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "loadbalancer/app/": {
        "resource_type": "loadbalancer/app/",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "loadbalancer/net/": {
        "resource_type": "loadbalancer/net/",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setwebacl"><a aria-hidden="true" class="anchor-heading" href="#setwebacl"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetWebAcl</h3>
<ul>
<li>description: Gives WebAcl permission to WAF</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Elastic Load Balancing V2"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Pinpoint.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Pinpoint - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Pinpoint.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Pinpoint.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Pinpoint.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Pinpoint - undefined" />
  <meta name="twitter:title" content="Pinpoint - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Pinpoint</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Pinpoint">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="pinpoint"><a aria-hidden="true" class="anchor-heading" href="#pinpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Pinpoint</h1>
<ul>
<li>prefix: mobiletargeting</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="createapp"><a aria-hidden="true" class="anchor-heading" href="#createapp"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateApp</h3>
<ul>
<li>description: Create an app.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createcampaign"><a aria-hidden="true" class="anchor-heading" href="#createcampaign"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateCampaign</h3>
<ul>
<li>description: Create a campaign for an app.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createemailtemplate"><a aria-hidden="true" class="anchor-heading" href="#createemailtemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateEmailTemplate</h3>
<ul>
<li>description: Create an email template.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createexportjob"><a aria-hidden="true" class="anchor-heading" href="#createexportjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateExportJob</h3>
<ul>
<li>description: Create an export job that exports endpoint definitions to Amazon S3.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createimportjob"><a aria-hidden="true" class="anchor-heading" href="#createimportjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateImportJob</h3>
<ul>
<li>description: Import endpoint definitions from to create a segment.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createjourney"><a aria-hidden="true" class="anchor-heading" href="#createjourney"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateJourney</h3>
<ul>
<li>description: Create a Journey for an app.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createpushtemplate"><a aria-hidden="true" class="anchor-heading" href="#createpushtemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreatePushTemplate</h3>
<ul>
<li>description: Create a push notification template.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createrecommenderconfiguration"><a aria-hidden="true" class="anchor-heading" href="#createrecommenderconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateRecommenderConfiguration</h3>
<ul>
<li>description: Create an Amazon Pinpoint configuration for a recommender model.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createsegment"><a aria-hidden="true" class="anchor-heading" href="#createsegment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSegment</h3>
<ul>
<li>description: Create a segment that is based on endpoint data reported to Pinpoint by your app. To allow a user to create a segment by importing endpoint data from outside of Pinpoint, allow the mobiletargeting:CreateImportJob action.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createsmstemplate"><a aria-hidden="true" class="anchor-heading" href="#createsmstemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSmsTemplate</h3>
<ul>
<li>description: Create an sms message template.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createvoicetemplate"><a aria-hidden="true" class="anchor-heading" href="#createvoicetemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateVoiceTemplate</h3>
<ul>
<li>description: Create a voice message template.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteadmchannel"><a aria-hidden="true" class="anchor-heading" href="#deleteadmchannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAdmChannel</h3>
<ul>
<li>description: Delete the ADM channel for an app.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteapnschannel"><a aria-hidden="true" class="anchor-heading" href="#deleteapnschannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteApnsChannel</h3>
<ul>
<li>description: Delete the APNs channel for an app.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteapnssandboxchannel"><a aria-hidden="true" class="anchor-heading" href="#deleteapnssandboxchannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteApnsSandboxChannel</h3>
<ul>
<li>description: Delete the APNs sandbox channel for an app.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteapnsvoipchannel"><a aria-hidden="true" class="anchor-heading" href="#deleteapnsvoipchannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteApnsVoipChannel</h3>
<ul>
<li>description: Delete the APNs VoIP channel for an app.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteapnsvoipsandboxchannel"><a aria-hidden="true" class="anchor-heading" href="#deleteapnsvoipsandboxchannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteApnsVoipSandboxChannel</h3>
<ul>
<li>description: Delete the APNs VoIP sandbox channel for an app.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteapp"><a aria-hidden="true" class="anchor-heading" href="#deleteapp"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteApp</h3>
<ul>
<li>description: Delete a specific campaign.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletebaiduchannel"><a aria-hidden="true" class="anchor-heading" href="#deletebaiduchannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteBaiduChannel</h3>
<ul>
<li>description: Delete the Baidu channel for an app.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletecampaign"><a aria-hidden="true" class="anchor-heading" href="#deletecampaign"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteCampaign</h3>
<ul>
<li>description: Delete a specific campaign.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "campaigns": {
        "resource_type": "campaigns",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteemailchannel"><a aria-hidden="true" class="anchor-heading" href="#deleteemailchannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteEmailChannel</h3>
<ul>
<li>description: Delete the email channel for an app.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteemailtemplate"><a aria-hidden="true" class="anchor-heading" href="#deleteemailtemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteEmailTemplate</h3>
<ul>
<li>description: Delete an email template or an email template version.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "templates": {
        "resource_type": "templates",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteendpoint"><a aria-hidden="true" class="anchor-heading" href="#deleteendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteEndpoint</h3>
<ul>
<li>description: Delete an endpoint.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteeventstream"><a aria-hidden="true" class="anchor-heading" href="#deleteeventstream"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteEventStream</h3>
<ul>
<li>description: Delete the event stream for an app.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletegcmchannel"><a aria-hidden="true" class="anchor-heading" href="#deletegcmchannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteGcmChannel</h3>
<ul>
<li>description: Delete the GCM channel for an app.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletejourney"><a aria-hidden="true" class="anchor-heading" href="#deletejourney"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteJourney</h3>
<ul>
<li>description: Delete a specific journey.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "journeys": {
        "resource_type": "journeys",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletepushtemplate"><a aria-hidden="true" class="anchor-heading" href="#deletepushtemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeletePushTemplate</h3>
<ul>
<li>description: Delete a push notification template or a push notification template version.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "templates": {
        "resource_type": "templates",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleterecommenderconfiguration"><a aria-hidden="true" class="anchor-heading" href="#deleterecommenderconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteRecommenderConfiguration</h3>
<ul>
<li>description: Delete an Amazon Pinpoint configuration for a recommender model.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "recommenders": {
        "resource_type": "recommenders",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletesegment"><a aria-hidden="true" class="anchor-heading" href="#deletesegment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteSegment</h3>
<ul>
<li>description: Delete a specific segment.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "segments": {
        "resource_type": "segments",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletesmschannel"><a aria-hidden="true" class="anchor-heading" href="#deletesmschannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteSmsChannel</h3>
<ul>
<li>description: Delete the SMS channel for an app.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletesmstemplate"><a aria-hidden="true" class="anchor-heading" href="#deletesmstemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteSmsTemplate</h3>
<ul>
<li>description: Delete an sms message template or an sms message template version.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "templates": {
        "resource_type": "templates",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteuserendpoints"><a aria-hidden="true" class="anchor-heading" href="#deleteuserendpoints"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteUserEndpoints</h3>
<ul>
<li>description: Delete all of the endpoints that are associated with a user ID.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletevoicechannel"><a aria-hidden="true" class="anchor-heading" href="#deletevoicechannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteVoiceChannel</h3>
<ul>
<li>description: Delete the Voice channel for an app.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletevoicetemplate"><a aria-hidden="true" class="anchor-heading" href="#deletevoicetemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteVoiceTemplate</h3>
<ul>
<li>description: Delete a voice message template or a voice message template version.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "templates": {
        "resource_type": "templates",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getadmchannel"><a aria-hidden="true" class="anchor-heading" href="#getadmchannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAdmChannel</h3>
<ul>
<li>description: Retrieve information about the Amazon Device Messaging (ADM) channel for an app.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getapnschannel"><a aria-hidden="true" class="anchor-heading" href="#getapnschannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetApnsChannel</h3>
<ul>
<li>description: Retrieve information about the APNs channel for an app.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getapnssandboxchannel"><a aria-hidden="true" class="anchor-heading" href="#getapnssandboxchannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetApnsSandboxChannel</h3>
<ul>
<li>description: Retrieve information about the APNs sandbox channel for an app.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getapnsvoipchannel"><a aria-hidden="true" class="anchor-heading" href="#getapnsvoipchannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetApnsVoipChannel</h3>
<ul>
<li>description: Retrieve information about the APNs VoIP channel for an app.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getapnsvoipsandboxchannel"><a aria-hidden="true" class="anchor-heading" href="#getapnsvoipsandboxchannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetApnsVoipSandboxChannel</h3>
<ul>
<li>description: Retrieve information about the APNs VoIP sandbox channel for an app.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getapp"><a aria-hidden="true" class="anchor-heading" href="#getapp"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetApp</h3>
<ul>
<li>description: Retrieve information about a specific app in your Amazon Pinpoint account.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getapplicationsettings"><a aria-hidden="true" class="anchor-heading" href="#getapplicationsettings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetApplicationSettings</h3>
<ul>
<li>description: Retrieve the default settings for an app.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getapps"><a aria-hidden="true" class="anchor-heading" href="#getapps"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetApps</h3>
<ul>
<li>description: Retrieve a list of apps in your Amazon Pinpoint account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbaiduchannel"><a aria-hidden="true" class="anchor-heading" href="#getbaiduchannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBaiduChannel</h3>
<ul>
<li>description: Retrieve information about the Baidu channel for an app.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcampaign"><a aria-hidden="true" class="anchor-heading" href="#getcampaign"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCampaign</h3>
<ul>
<li>description: Retrieve information about a specific campaign.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "campaigns": {
        "resource_type": "campaigns",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcampaignactivities"><a aria-hidden="true" class="anchor-heading" href="#getcampaignactivities"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCampaignActivities</h3>
<ul>
<li>description: Retrieve information about the activities performed by a campaign.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "campaigns": {
        "resource_type": "campaigns",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcampaignversion"><a aria-hidden="true" class="anchor-heading" href="#getcampaignversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCampaignVersion</h3>
<ul>
<li>description: Retrieve information about a specific campaign version.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "campaigns": {
        "resource_type": "campaigns",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcampaignversions"><a aria-hidden="true" class="anchor-heading" href="#getcampaignversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCampaignVersions</h3>
<ul>
<li>description: Retrieve information about the current and prior versions of a campaign.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "campaigns": {
        "resource_type": "campaigns",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcampaigns"><a aria-hidden="true" class="anchor-heading" href="#getcampaigns"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCampaigns</h3>
<ul>
<li>description: Retrieve information about all campaigns for an app.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getchannels"><a aria-hidden="true" class="anchor-heading" href="#getchannels"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetChannels</h3>
<ul>
<li>description: Get all channels information for your app.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getemailchannel"><a aria-hidden="true" class="anchor-heading" href="#getemailchannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetEmailChannel</h3>
<ul>
<li>description: Obtain information about the email channel in an app.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getemailtemplate"><a aria-hidden="true" class="anchor-heading" href="#getemailtemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetEmailTemplate</h3>
<ul>
<li>description: Retrieve information about a specific or the active version of an email template.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "templates": {
        "resource_type": "templates",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getendpoint"><a aria-hidden="true" class="anchor-heading" href="#getendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetEndpoint</h3>
<ul>
<li>description: Retrieve information about a specific endpoint.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="geteventstream"><a aria-hidden="true" class="anchor-heading" href="#geteventstream"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetEventStream</h3>
<ul>
<li>description: Retrieve information about the event stream for an app.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getexportjob"><a aria-hidden="true" class="anchor-heading" href="#getexportjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetExportJob</h3>
<ul>
<li>description: Obtain information about a specific export job.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getexportjobs"><a aria-hidden="true" class="anchor-heading" href="#getexportjobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetExportJobs</h3>
<ul>
<li>description: Retrieve a list of all of the export jobs for an app.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getgcmchannel"><a aria-hidden="true" class="anchor-heading" href="#getgcmchannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetGcmChannel</h3>
<ul>
<li>description: Retrieve information about the GCM channel for an app.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getimportjob"><a aria-hidden="true" class="anchor-heading" href="#getimportjob"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetImportJob</h3>
<ul>
<li>description: Retrieve information about a specific import job.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getimportjobs"><a aria-hidden="true" class="anchor-heading" href="#getimportjobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetImportJobs</h3>
<ul>
<li>description: Retrieve information about all import jobs for an app.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getjourney"><a aria-hidden="true" class="anchor-heading" href="#getjourney"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetJourney</h3>
<ul>
<li>description: Retrieve information about a specific journey.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "journeys": {
        "resource_type": "journeys",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getpushtemplate"><a aria-hidden="true" class="anchor-heading" href="#getpushtemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetPushTemplate</h3>
<ul>
<li>description: Retrieve information about a specific or the active version of an push notification template.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "templates": {
        "resource_type": "templates",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getrecommenderconfiguration"><a aria-hidden="true" class="anchor-heading" href="#getrecommenderconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRecommenderConfiguration</h3>
<ul>
<li>description: Retrieve information about an Amazon Pinpoint configuration for a recommender model.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "recommenders": {
        "resource_type": "recommenders",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getrecommenderconfigurations"><a aria-hidden="true" class="anchor-heading" href="#getrecommenderconfigurations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRecommenderConfigurations</h3>
<ul>
<li>description: Retrieve information about all the recommender model configurations that are associated with an Amazon Pinpoint account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsegment"><a aria-hidden="true" class="anchor-heading" href="#getsegment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSegment</h3>
<ul>
<li>description: Retrieve information about a specific segment.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "segments": {
        "resource_type": "segments",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsegmentexportjobs"><a aria-hidden="true" class="anchor-heading" href="#getsegmentexportjobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSegmentExportJobs</h3>
<ul>
<li>description: Retrieve information about jobs that export endpoint definitions from segments to Amazon S3.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "segments": {
        "resource_type": "segments",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsegmentimportjobs"><a aria-hidden="true" class="anchor-heading" href="#getsegmentimportjobs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSegmentImportJobs</h3>
<ul>
<li>description: Retrieve information about jobs that create segments by importing endpoint definitions from .</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "segments": {
        "resource_type": "segments",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsegmentversion"><a aria-hidden="true" class="anchor-heading" href="#getsegmentversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSegmentVersion</h3>
<ul>
<li>description: Retrieve information about a specific segment version.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "segments": {
        "resource_type": "segments",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsegmentversions"><a aria-hidden="true" class="anchor-heading" href="#getsegmentversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSegmentVersions</h3>
<ul>
<li>description: Retrieve information about the current and prior versions of a segment.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "segments": {
        "resource_type": "segments",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsegments"><a aria-hidden="true" class="anchor-heading" href="#getsegments"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSegments</h3>
<ul>
<li>description: Retrieve information about the segments for an app.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsmschannel"><a aria-hidden="true" class="anchor-heading" href="#getsmschannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSmsChannel</h3>
<ul>
<li>description: Obtain information about the SMS channel in an app.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsmstemplate"><a aria-hidden="true" class="anchor-heading" href="#getsmstemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSmsTemplate</h3>
<ul>
<li>description: Retrieve information about a specific or the active version of an sms message template.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "templates": {
        "resource_type": "templates",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getuserendpoints"><a aria-hidden="true" class="anchor-heading" href="#getuserendpoints"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetUserEndpoints</h3>
<ul>
<li>description: Retrieve information about the endpoints that are associated with a user ID.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getvoicechannel"><a aria-hidden="true" class="anchor-heading" href="#getvoicechannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetVoiceChannel</h3>
<ul>
<li>description: Obtain information about the Voice channel in an app.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getvoicetemplate"><a aria-hidden="true" class="anchor-heading" href="#getvoicetemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetVoiceTemplate</h3>
<ul>
<li>description: Retrieve information about a specific or the active version of a voice message template.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "templates": {
        "resource_type": "templates",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listjourneys"><a aria-hidden="true" class="anchor-heading" href="#listjourneys"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListJourneys</h3>
<ul>
<li>description: Retrieve information about all journeys for an app.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: List tags for a resource.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "campaigns": {
        "resource_type": "campaigns",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "segments": {
        "resource_type": "segments",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtemplateversions"><a aria-hidden="true" class="anchor-heading" href="#listtemplateversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTemplateVersions</h3>
<ul>
<li>description: Retrieve all versions about a specific template.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "templates": {
        "resource_type": "templates",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtemplates"><a aria-hidden="true" class="anchor-heading" href="#listtemplates"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTemplates</h3>
<ul>
<li>description: Retrieve metadata about the queried templates.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "templates": {
        "resource_type": "templates",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="phonenumbervalidate"><a aria-hidden="true" class="anchor-heading" href="#phonenumbervalidate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PhoneNumberValidate</h3>
<ul>
<li>description: Obtain metadata for a phone number, such as the number type (mobile, landline, or VoIP), location, and provider.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="puteventstream"><a aria-hidden="true" class="anchor-heading" href="#puteventstream"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutEventStream</h3>
<ul>
<li>description: Create or update an event stream for an app.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putevents"><a aria-hidden="true" class="anchor-heading" href="#putevents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutEvents</h3>
<ul>
<li>description: Create or update events for an app.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="removeattributes"><a aria-hidden="true" class="anchor-heading" href="#removeattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RemoveAttributes</h3>
<ul>
<li>description: Used to remove the attributes for an app.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="sendmessages"><a aria-hidden="true" class="anchor-heading" href="#sendmessages"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SendMessages</h3>
<ul>
<li>description: Send an SMS message or push notification to specific endpoints.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="sendusersmessages"><a aria-hidden="true" class="anchor-heading" href="#sendusersmessages"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SendUsersMessages</h3>
<ul>
<li>description: Send an SMS message or push notification to all endpoints that are associated with a specific user ID.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Adds tags to a resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "campaigns": {
        "resource_type": "campaigns",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "segments": {
        "resource_type": "segments",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Removes tags from a resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "campaigns": {
        "resource_type": "campaigns",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "segments": {
        "resource_type": "segments",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateadmchannel"><a aria-hidden="true" class="anchor-heading" href="#updateadmchannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateAdmChannel</h3>
<ul>
<li>description: Update the Amazon Device Messaging (ADM) channel for an app.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateapnschannel"><a aria-hidden="true" class="anchor-heading" href="#updateapnschannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateApnsChannel</h3>
<ul>
<li>description: Update the Apple Push Notification service (APNs) channel for an app.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateapnssandboxchannel"><a aria-hidden="true" class="anchor-heading" href="#updateapnssandboxchannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateApnsSandboxChannel</h3>
<ul>
<li>description: Update the Apple Push Notification service (APNs) sandbox channel for an app.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateapnsvoipchannel"><a aria-hidden="true" class="anchor-heading" href="#updateapnsvoipchannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateApnsVoipChannel</h3>
<ul>
<li>description: Update the Apple Push Notification service (APNs) VoIP channel for an app.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateapnsvoipsandboxchannel"><a aria-hidden="true" class="anchor-heading" href="#updateapnsvoipsandboxchannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateApnsVoipSandboxChannel</h3>
<ul>
<li>description: Update the Apple Push Notification service (APNs) VoIP sandbox channel for an app.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateapplicationsettings"><a aria-hidden="true" class="anchor-heading" href="#updateapplicationsettings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateApplicationSettings</h3>
<ul>
<li>description: Update the default settings for an app.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatebaiduchannel"><a aria-hidden="true" class="anchor-heading" href="#updatebaiduchannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateBaiduChannel</h3>
<ul>
<li>description: Update the Baidu channel for an app.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatecampaign"><a aria-hidden="true" class="anchor-heading" href="#updatecampaign"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateCampaign</h3>
<ul>
<li>description: Update a specific campaign.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "campaigns": {
        "resource_type": "campaigns",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateemailchannel"><a aria-hidden="true" class="anchor-heading" href="#updateemailchannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateEmailChannel</h3>
<ul>
<li>description: Update the email channel for an app.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateemailtemplate"><a aria-hidden="true" class="anchor-heading" href="#updateemailtemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateEmailTemplate</h3>
<ul>
<li>description: Update a specific email template under the same version or generate a new version.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "templates": {
        "resource_type": "templates",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateendpoint"><a aria-hidden="true" class="anchor-heading" href="#updateendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateEndpoint</h3>
<ul>
<li>description: Create an endpoint or update the information for an endpoint.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateendpointsbatch"><a aria-hidden="true" class="anchor-heading" href="#updateendpointsbatch"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateEndpointsBatch</h3>
<ul>
<li>description: Create or update endpoints as a batch operation.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updategcmchannel"><a aria-hidden="true" class="anchor-heading" href="#updategcmchannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateGcmChannel</h3>
<ul>
<li>description: Update the Firebase Cloud Messaging (FCM) or Google Cloud Messaging (GCM) API key that allows to send push notifications to your Android app.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatejourney"><a aria-hidden="true" class="anchor-heading" href="#updatejourney"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateJourney</h3>
<ul>
<li>description: Update a specific journey.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "journeys": {
        "resource_type": "journeys",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatejourneystate"><a aria-hidden="true" class="anchor-heading" href="#updatejourneystate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateJourneyState</h3>
<ul>
<li>description: Update a specific journey state.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "journeys": {
        "resource_type": "journeys",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatepushtemplate"><a aria-hidden="true" class="anchor-heading" href="#updatepushtemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdatePushTemplate</h3>
<ul>
<li>description: Update a specific push notification template under the same version or generate a new version.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "templates": {
        "resource_type": "templates",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updaterecommenderconfiguration"><a aria-hidden="true" class="anchor-heading" href="#updaterecommenderconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateRecommenderConfiguration</h3>
<ul>
<li>description: Update an Amazon Pinpoint configuration for a recommender model.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "recommenders": {
        "resource_type": "recommenders",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatesegment"><a aria-hidden="true" class="anchor-heading" href="#updatesegment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateSegment</h3>
<ul>
<li>description: Update a specific segment.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "segments": {
        "resource_type": "segments",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatesmschannel"><a aria-hidden="true" class="anchor-heading" href="#updatesmschannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateSmsChannel</h3>
<ul>
<li>description: Update the SMS channel for an app.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatesmstemplate"><a aria-hidden="true" class="anchor-heading" href="#updatesmstemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateSmsTemplate</h3>
<ul>
<li>description: Update a specific sms message template under the same version or generate a new version.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "templates": {
        "resource_type": "templates",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatetemplateactiveversion"><a aria-hidden="true" class="anchor-heading" href="#updatetemplateactiveversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateTemplateActiveVersion</h3>
<ul>
<li>description: Upate the active version parameter of a specific template.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "templates": {
        "resource_type": "templates",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatevoicechannel"><a aria-hidden="true" class="anchor-heading" href="#updatevoicechannel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateVoiceChannel</h3>
<ul>
<li>description: Update the Voice channel for an app.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "apps": {
        "resource_type": "apps",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatevoicetemplate"><a aria-hidden="true" class="anchor-heading" href="#updatevoicetemplate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateVoiceTemplate</h3>
<ul>
<li>description: Update a specific voice message template under the same version or generate a new version.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "templates": {
        "resource_type": "templates",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Pinpoint"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Private Marketplace.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Private Marketplace - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Private Marketplace.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Private Marketplace.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Private Marketplace.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Private Marketplace - undefined" />
  <meta name="twitter:title" content="Private Marketplace - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Private Marketplace</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Private Marketplace">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="private-marketplace"><a aria-hidden="true" class="anchor-heading" href="#private-marketplace"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Private Marketplace</h1>
<ul>
<li>prefix: aws-marketplace</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="associateproductswithprivatemarketplace"><a aria-hidden="true" class="anchor-heading" href="#associateproductswithprivatemarketplace"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateProductsWithPrivateMarketplace</h3>
<ul>
<li>description: Adds new approved products to the Private Marketplace. Also allows to approve a request for a product to be associated with the Private Marketplace. This action can be performed by any account in an AWS Organization, provided the user has permissions to do so, and the Organization's Service Control Policies allow it.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createprivatemarketplace"><a aria-hidden="true" class="anchor-heading" href="#createprivatemarketplace"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreatePrivateMarketplace</h3>
<ul>
<li>description: Creates a Private Marketplace for the individual account, or for the entire AWS Organization if one exists. This action can only be performed by the master account if using an AWS Organization.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createprivatemarketplaceprofile"><a aria-hidden="true" class="anchor-heading" href="#createprivatemarketplaceprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreatePrivateMarketplaceProfile</h3>
<ul>
<li>description: Creates a Private Marketplace Profile that customizes the white label experience on the AWS Marketplace website for the individual account, or for the entire AWS Organization if one exists. This action can only be performed by the master account if using an AWS Organization.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createprivatemarketplacerequests"><a aria-hidden="true" class="anchor-heading" href="#createprivatemarketplacerequests"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreatePrivateMarketplaceRequests</h3>
<ul>
<li>description: Creates a new request for a product or products to be associated with the Private Marketplace. This action can be performed by any account in an in an AWS Organization, provided the user has permissions to do so, and the Organization's Service Control Policies allow it.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeprivatemarketplaceproducts"><a aria-hidden="true" class="anchor-heading" href="#describeprivatemarketplaceproducts"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribePrivateMarketplaceProducts</h3>
<ul>
<li>description: Describes the status of requested products in the Private Marketplace for administrative purposes. This action can be performed by any account in an AWS Organization, provided the user has permissions to do so, and the Organization's Service Control Policies allow it.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeprivatemarketplaceprofile"><a aria-hidden="true" class="anchor-heading" href="#describeprivatemarketplaceprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribePrivateMarketplaceProfile</h3>
<ul>
<li>description: Describes details about the Private Marketplace Profile for administrative purposes. This action can be performed by any account in an AWS Organization, provided the user has permissions to do so, and the Organization's Service Control Policies allow it.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeprivatemarketplacerequests"><a aria-hidden="true" class="anchor-heading" href="#describeprivatemarketplacerequests"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribePrivateMarketplaceRequests</h3>
<ul>
<li>description: Describes requests and associated products in the Private Marketplace. This action can be performed by any account in an AWS Organization, provided the user has permissions to do so, and the Organization's Service Control Policies allow it.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeprivatemarketplacesettings"><a aria-hidden="true" class="anchor-heading" href="#describeprivatemarketplacesettings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribePrivateMarketplaceSettings</h3>
<ul>
<li>description: Describes the Private Marketplace settings. This includes setting for enabling requests from end users and preferences for notifications. This action can be performed by any account in an AWS Organization, provided the user has permissions to do so, and the Organization's Service Control Policies allow it.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeprivatemarketplacestatus"><a aria-hidden="true" class="anchor-heading" href="#describeprivatemarketplacestatus"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribePrivateMarketplaceStatus</h3>
<ul>
<li>description: Describes the status of the Private Marketplace for administrative purposes. This action can be performed by any account in an AWS Organization, provided the user has permissions to do so, and the Organization's Service Control Policies allow it.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociateproductsfromprivatemarketplace"><a aria-hidden="true" class="anchor-heading" href="#disassociateproductsfromprivatemarketplace"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateProductsFromPrivateMarketplace</h3>
<ul>
<li>description: Removes approved products from the Private Marketplace. Also allows to decline a request for a product to be associated with the Private Marketplace. This action can be performed by any account in an AWS Organization, provided the user has permissions to do so, and the Organization's Service Control Policies allow it.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listprivatemarketplaceproducts"><a aria-hidden="true" class="anchor-heading" href="#listprivatemarketplaceproducts"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPrivateMarketplaceProducts</h3>
<ul>
<li>description: Queryable list for the products and status of products in the Private Marketplace for administrative purposes. This action can be performed by any account in an AWS Organization, provided the user has permissions to do so, and the Organization's Service Control Policies allow it.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listprivatemarketplacerequests"><a aria-hidden="true" class="anchor-heading" href="#listprivatemarketplacerequests"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPrivateMarketplaceRequests</h3>
<ul>
<li>description: Queryable list for requests and associated products in the Private Marketplace. This action can be performed by any account in an AWS Organization, provided the user has permissions to do so, and the Organization's Service Control Policies allow it.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startprivatemarketplace"><a aria-hidden="true" class="anchor-heading" href="#startprivatemarketplace"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartPrivateMarketplace</h3>
<ul>
<li>description: Starts the Private Marketplace, enabling the customized AWS Marketplace experience, and enabling restrictions on the procurement of products based on what is available in the Private Marketplace. This action can be performed by any account in an AWS Organization, provided the user has permissions to do so, and the Organization's Service Control Policies allow it.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopprivatemarketplace"><a aria-hidden="true" class="anchor-heading" href="#stopprivatemarketplace"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopPrivateMarketplace</h3>
<ul>
<li>description: Stops the Private Marketplace, disabling the customized AWS Marketplace experience and removing the Private Marketplace procurement restrictions on products. This action can be performed by any account in an AWS Organization, provided the user has permissions to do so, and the Organization's Service Control Policies allow it.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateprivatemarketplaceprofile"><a aria-hidden="true" class="anchor-heading" href="#updateprivatemarketplaceprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdatePrivateMarketplaceProfile</h3>
<ul>
<li>description: Updates the Private Marketplace Profile that customizes the white label experience on the AWS Marketplace website for the individual account, or for the entire AWS Organization if one exists. This action can be performed by any account in an AWS Organization, provided the user has permissions to do so, and the Organization's Service Control Policies allow it.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateprivatemarketplacesettings"><a aria-hidden="true" class="anchor-heading" href="#updateprivatemarketplacesettings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdatePrivateMarketplaceSettings</h3>
<ul>
<li>description: Updates the Private Marketplace settings. This includes setting for enabling requests from end users and preferences for notifications. This action can be performed by any account in an AWS Organization, provided the user has permissions to do so, and the Organization's Service Control Policies allow it.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Private Marketplace"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Support.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Support - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Support.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Support.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Support.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Support - undefined" />
  <meta name="twitter:title" content="Support - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Support</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Support">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="support"><a aria-hidden="true" class="anchor-heading" href="#support"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Support</h1>
<ul>
<li>prefix: support</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="addattachmentstoset"><a aria-hidden="true" class="anchor-heading" href="#addattachmentstoset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddAttachmentsToSet</h3>
<ul>
<li>description: Adds one or more attachments to an AWS Support case.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="addcommunicationtocase"><a aria-hidden="true" class="anchor-heading" href="#addcommunicationtocase"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddCommunicationToCase</h3>
<ul>
<li>description: Adds a customer communication to an AWS Support case.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createcase"><a aria-hidden="true" class="anchor-heading" href="#createcase"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateCase</h3>
<ul>
<li>description: Creates a new AWS Support case.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeattachment"><a aria-hidden="true" class="anchor-heading" href="#describeattachment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAttachment</h3>
<ul>
<li>description: Returns the description for an attachment.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecaseattributes"><a aria-hidden="true" class="anchor-heading" href="#describecaseattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeCaseAttributes</h3>
<ul>
<li>description: This is an internally managed function which allows secondary services to read AWS Support case attributes.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecases"><a aria-hidden="true" class="anchor-heading" href="#describecases"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeCases</h3>
<ul>
<li>description: Returns a list of AWS Support cases that matches the given inputs.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecommunications"><a aria-hidden="true" class="anchor-heading" href="#describecommunications"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeCommunications</h3>
<ul>
<li>description: Returns the communications and attachments for one or more AWS Support cases.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeissuetypes"><a aria-hidden="true" class="anchor-heading" href="#describeissuetypes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeIssueTypes</h3>
<ul>
<li>description: Returns issue types for AWS Support cases.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeservices"><a aria-hidden="true" class="anchor-heading" href="#describeservices"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeServices</h3>
<ul>
<li>description: Returns the current list of AWS services and categories that applies to each service.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeseveritylevels"><a aria-hidden="true" class="anchor-heading" href="#describeseveritylevels"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSeverityLevels</h3>
<ul>
<li>description: Returns the list of severity levels that can be assigned to an AWS Support case.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describesupportlevel"><a aria-hidden="true" class="anchor-heading" href="#describesupportlevel"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSupportLevel</h3>
<ul>
<li>description: Returns the support level for an AWS Account identifier.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetrustedadvisorcheckrefreshstatuses"><a aria-hidden="true" class="anchor-heading" href="#describetrustedadvisorcheckrefreshstatuses"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTrustedAdvisorCheckRefreshStatuses</h3>
<ul>
<li>description: Returns the status of a Trusted Advisor refresh check based on a list of check identifiers.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetrustedadvisorcheckresult"><a aria-hidden="true" class="anchor-heading" href="#describetrustedadvisorcheckresult"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTrustedAdvisorCheckResult</h3>
<ul>
<li>description: Returns the results of the Trusted Advisor check that has the specified check identifier.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetrustedadvisorchecksummaries"><a aria-hidden="true" class="anchor-heading" href="#describetrustedadvisorchecksummaries"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTrustedAdvisorCheckSummaries</h3>
<ul>
<li>description: Returns the summaries of the results of the Trusted Advisor checks that have the specified check identifiers.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetrustedadvisorchecks"><a aria-hidden="true" class="anchor-heading" href="#describetrustedadvisorchecks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTrustedAdvisorChecks</h3>
<ul>
<li>description: Returns a list of all available Trusted Advisor checks, including name, identifier, category and description.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="initiatecallforcase"><a aria-hidden="true" class="anchor-heading" href="#initiatecallforcase"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>InitiateCallForCase</h3>
<ul>
<li>description: This is an internally managed function to initiate a call on AWS Support Center.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="initiatechatforcase"><a aria-hidden="true" class="anchor-heading" href="#initiatechatforcase"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>InitiateChatForCase</h3>
<ul>
<li>description: This is an internally managed function to initiate a chat on AWS Support Center.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putcaseattributes"><a aria-hidden="true" class="anchor-heading" href="#putcaseattributes"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutCaseAttributes</h3>
<ul>
<li>description: This is an internally managed function which allows secondary services to attach attributes to AWS Support cases.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="ratecasecommunication"><a aria-hidden="true" class="anchor-heading" href="#ratecasecommunication"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RateCaseCommunication</h3>
<ul>
<li>description: Rate an AWS Support case communication.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="refreshtrustedadvisorcheck"><a aria-hidden="true" class="anchor-heading" href="#refreshtrustedadvisorcheck"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RefreshTrustedAdvisorCheck</h3>
<ul>
<li>description: Requests a refresh of the Trusted Advisor check that has the specified check identifier.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="resolvecase"><a aria-hidden="true" class="anchor-heading" href="#resolvecase"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ResolveCase</h3>
<ul>
<li>description: Resolves an AWS Support case.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="searchforcases"><a aria-hidden="true" class="anchor-heading" href="#searchforcases"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SearchForCases</h3>
<ul>
<li>description: Returns a list of AWS Support cases that matches the given inputs.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Support"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Application Discovery.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Application Discovery - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Application Discovery.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Application Discovery.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Application Discovery.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Application Discovery - undefined" />
  <meta name="twitter:title" content="Application Discovery - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Application Discovery</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Application Discovery">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="application-discovery"><a aria-hidden="true" class="anchor-heading" href="#application-discovery"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Application Discovery</h1>
<ul>
<li>prefix: discovery</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="associateconfigurationitemstoapplication"><a aria-hidden="true" class="anchor-heading" href="#associateconfigurationitemstoapplication"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateConfigurationItemsToApplication</h3>
<ul>
<li>description: Associates one or more configuration items with an application.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchdeleteimportdata"><a aria-hidden="true" class="anchor-heading" href="#batchdeleteimportdata"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchDeleteImportData</h3>
<ul>
<li>description: Deletes one or more Migration Hub import tasks, each identified by their import ID. Each import task has a number of records, which can identify servers or applications.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createapplication"><a aria-hidden="true" class="anchor-heading" href="#createapplication"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateApplication</h3>
<ul>
<li>description: Creates an application with the given name and description.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createtags"><a aria-hidden="true" class="anchor-heading" href="#createtags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateTags</h3>
<ul>
<li>description: Creates one or more tags for configuration items. Tags are metadata that help you categorize IT assets. This API accepts a list of multiple configuration items.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteapplications"><a aria-hidden="true" class="anchor-heading" href="#deleteapplications"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteApplications</h3>
<ul>
<li>description: Deletes a list of applications and their associations with configuration items.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletetags"><a aria-hidden="true" class="anchor-heading" href="#deletetags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteTags</h3>
<ul>
<li>description: Deletes the association between configuration items and one or more tags. This API accepts a list of multiple configuration items.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeagents"><a aria-hidden="true" class="anchor-heading" href="#describeagents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeAgents</h3>
<ul>
<li>description: Lists agents or the Connector by ID or lists all agents/Connectors associated with your user account if you did not specify an ID.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeconfigurations"><a aria-hidden="true" class="anchor-heading" href="#describeconfigurations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeConfigurations</h3>
<ul>
<li>description: Retrieves attributes for a list of configuration item IDs. All of the supplied IDs must be for the same asset type (server, application, process, or connection). Output fields are specific to the asset type selected. For example, the output for a server configuration item includes a list of attributes about the server, such as host name, operating system, and number of network cards.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecontinuousexports"><a aria-hidden="true" class="anchor-heading" href="#describecontinuousexports"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeContinuousExports</h3>
<ul>
<li>description: Lists exports as specified by ID. All continuous exports associated with your user account can be listed if you call DescribeContinuousExports as is without passing any parameters.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeexportconfigurations"><a aria-hidden="true" class="anchor-heading" href="#describeexportconfigurations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeExportConfigurations</h3>
<ul>
<li>description: Retrieves the status of a given export process. You can retrieve status from a maximum of 100 processes.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeexporttasks"><a aria-hidden="true" class="anchor-heading" href="#describeexporttasks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeExportTasks</h3>
<ul>
<li>description: Retrieve status of one or more export tasks. You can retrieve the status of up to 100 export tasks.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeimporttasks"><a aria-hidden="true" class="anchor-heading" href="#describeimporttasks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeImportTasks</h3>
<ul>
<li>description: Returns an array of import tasks for your account, including status information, times, IDs, the Amazon S3 Object URL for the import file, and more.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describetags"><a aria-hidden="true" class="anchor-heading" href="#describetags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeTags</h3>
<ul>
<li>description: Retrieves a list of configuration items that are tagged with a specific tag. Or retrieves a list of all tags assigned to a specific configuration item.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociateconfigurationitemsfromapplication"><a aria-hidden="true" class="anchor-heading" href="#disassociateconfigurationitemsfromapplication"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateConfigurationItemsFromApplication</h3>
<ul>
<li>description: Disassociates one or more configuration items from an application.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="exportconfigurations"><a aria-hidden="true" class="anchor-heading" href="#exportconfigurations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ExportConfigurations</h3>
<ul>
<li>description: Exports all discovered configuration data to an Amazon S3 bucket or an application that enables you to view and evaluate the data. Data includes tags and tag associations, processes, connections, servers, and system performance.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdiscoverysummary"><a aria-hidden="true" class="anchor-heading" href="#getdiscoverysummary"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDiscoverySummary</h3>
<ul>
<li>description: Retrieves a short summary of discovered assets.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listconfigurations"><a aria-hidden="true" class="anchor-heading" href="#listconfigurations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListConfigurations</h3>
<ul>
<li>description: Retrieves a list of configuration items according to criteria you specify in a filter. The filter criteria identify relationship requirements.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listserverneighbors"><a aria-hidden="true" class="anchor-heading" href="#listserverneighbors"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListServerNeighbors</h3>
<ul>
<li>description: Retrieves a list of servers which are one network hop away from a specified server.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startcontinuousexport"><a aria-hidden="true" class="anchor-heading" href="#startcontinuousexport"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartContinuousExport</h3>
<ul>
<li>description: Start the continuous flow of agent's discovered data into Amazon Athena.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startdatacollectionbyagentids"><a aria-hidden="true" class="anchor-heading" href="#startdatacollectionbyagentids"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartDataCollectionByAgentIds</h3>
<ul>
<li>description: Instructs the specified agents or Connectors to start collecting data.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startexporttask"><a aria-hidden="true" class="anchor-heading" href="#startexporttask"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartExportTask</h3>
<ul>
<li>description: Export the configuration data about discovered configuration items and relationships to an S3 bucket in a specified format.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startimporttask"><a aria-hidden="true" class="anchor-heading" href="#startimporttask"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartImportTask</h3>
<ul>
<li>description: Starts an import task. The Migration Hub import feature allows you to import details of your on-premises environment directly into AWS without having to use the Application Discovery Service (ADS) tools such as the Discovery Connector or Discovery Agent. This gives you the option to perform migration assessment and planning directly from your imported data including the ability to group your devices as applications and track their migration status.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopcontinuousexport"><a aria-hidden="true" class="anchor-heading" href="#stopcontinuousexport"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopContinuousExport</h3>
<ul>
<li>description: Stop the continuous flow of agent's discovered data into Amazon Athena.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopdatacollectionbyagentids"><a aria-hidden="true" class="anchor-heading" href="#stopdatacollectionbyagentids"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopDataCollectionByAgentIds</h3>
<ul>
<li>description: Instructs the specified agents or Connectors to stop collecting data.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateapplication"><a aria-hidden="true" class="anchor-heading" href="#updateapplication"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateApplication</h3>
<ul>
<li>description: Updates metadata about an application.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Application Discovery"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-AppStream 2.0.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>AppStream 2.0 - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-AppStream 2.0.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-AppStream 2.0.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-AppStream 2.0.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="AppStream 2.0 - undefined" />
  <meta name="twitter:title" content="AppStream 2.0 - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">AppStream 2.0</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="AppStream 2.0">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="appstream-20"><a aria-hidden="true" class="anchor-heading" href="#appstream-20"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AppStream 2.0</h1>
<ul>
<li>prefix: appstream</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="associatefleet"><a aria-hidden="true" class="anchor-heading" href="#associatefleet"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateFleet</h3>
<ul>
<li>description: Grants permission to associate the specified fleet with the specified stack</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "stack": {
        "resource_type": "stack",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchassociateuserstack"><a aria-hidden="true" class="anchor-heading" href="#batchassociateuserstack"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchAssociateUserStack</h3>
<ul>
<li>description: Grants permission to associate the specified users with the specified stacks. Users in a user pool cannot be assigned to stacks with fleets that are joined to an Active Directory domain</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchdisassociateuserstack"><a aria-hidden="true" class="anchor-heading" href="#batchdisassociateuserstack"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchDisassociateUserStack</h3>
<ul>
<li>description: Grants permission to disassociate the specified users from the specified stacks</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="copyimage"><a aria-hidden="true" class="anchor-heading" href="#copyimage"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CopyImage</h3>
<ul>
<li>description: Grants permission to copy the specified image within the same Region or to a new Region within the same AWS account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "image": {
        "resource_type": "image",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdirectoryconfig"><a aria-hidden="true" class="anchor-heading" href="#createdirectoryconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDirectoryConfig</h3>
<ul>
<li>description: Grants permission to create a Directory Config object in AppStream 2.0. This object includes the configuration information required to join fleets and image builders to Microsoft Active Directory domains</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createfleet"><a aria-hidden="true" class="anchor-heading" href="#createfleet"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateFleet</h3>
<ul>
<li>description: Grants permission to create a fleet. A fleet is a group of streaming instances from which applications are launched and streamed to users</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "image": {
        "resource_type": "image",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createimagebuilder"><a aria-hidden="true" class="anchor-heading" href="#createimagebuilder"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateImageBuilder</h3>
<ul>
<li>description: Grants permission to create an image builder. An image builder is a virtual machine that is used to create an image</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "image": {
        "resource_type": "image",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "image-builder": {
        "resource_type": "image-builder",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createimagebuilderstreamingurl"><a aria-hidden="true" class="anchor-heading" href="#createimagebuilderstreamingurl"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateImageBuilderStreamingURL</h3>
<ul>
<li>description: Grants permission to create a URL to start an image builder streaming session</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "image-builder": {
        "resource_type": "image-builder",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createstack"><a aria-hidden="true" class="anchor-heading" href="#createstack"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateStack</h3>
<ul>
<li>description: Grants permission to create a stack to start streaming applications to users. A stack consists of an associated fleet, user access policies, and storage configurations</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createstreamingurl"><a aria-hidden="true" class="anchor-heading" href="#createstreamingurl"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateStreamingURL</h3>
<ul>
<li>description: Grants permission to create a temporary URL to start an AppStream 2.0 streaming session for the specified user. A streaming URL enables application streaming to be tested without user setup</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "stack": {
        "resource_type": "stack",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createusagereportsubscription"><a aria-hidden="true" class="anchor-heading" href="#createusagereportsubscription"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateUsageReportSubscription</h3>
<ul>
<li>description: Grants permission to create a usage report subscription. Usage reports are generated daily</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createuser"><a aria-hidden="true" class="anchor-heading" href="#createuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateUser</h3>
<ul>
<li>description: Grants permission to create a new user in the user pool</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedirectoryconfig"><a aria-hidden="true" class="anchor-heading" href="#deletedirectoryconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDirectoryConfig</h3>
<ul>
<li>description: Grants permission to delete the specified Directory Config object from AppStream 2.0. This object includes the configuration information required to join fleets and image builders to Microsoft Active Directory domains</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletefleet"><a aria-hidden="true" class="anchor-heading" href="#deletefleet"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteFleet</h3>
<ul>
<li>description: Grants permission to delete the specified fleet</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteimage"><a aria-hidden="true" class="anchor-heading" href="#deleteimage"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteImage</h3>
<ul>
<li>description: Grants permission to delete the specified image. An image cannot be deleted when it is in use</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "image": {
        "resource_type": "image",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteimagebuilder"><a aria-hidden="true" class="anchor-heading" href="#deleteimagebuilder"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteImageBuilder</h3>
<ul>
<li>description: Grants permission to delete the specified image builder and release capacity</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "image-builder": {
        "resource_type": "image-builder",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteimagepermissions"><a aria-hidden="true" class="anchor-heading" href="#deleteimagepermissions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteImagePermissions</h3>
<ul>
<li>description: Grants permission to delete permissions for the specified private image</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "image": {
        "resource_type": "image",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletestack"><a aria-hidden="true" class="anchor-heading" href="#deletestack"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteStack</h3>
<ul>
<li>description: Grants permission to delete the specified stack. After the stack is deleted, the application streaming environment provided by the stack is no longer available to users. Also, any reservations made for application streaming sessions for the stack are released</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteusagereportsubscription"><a aria-hidden="true" class="anchor-heading" href="#deleteusagereportsubscription"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteUsageReportSubscription</h3>
<ul>
<li>description: Grants permission to disable usage report generation</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteuser"><a aria-hidden="true" class="anchor-heading" href="#deleteuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteUser</h3>
<ul>
<li>description: Grants permission to delete a user from the user pool</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describedirectoryconfigs"><a aria-hidden="true" class="anchor-heading" href="#describedirectoryconfigs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeDirectoryConfigs</h3>
<ul>
<li>description: Grants permission to retrieve a list that describes one or more specified Directory Config objects for AppStream 2.0, if the names for these objects are provided. Otherwise, all Directory Config objects in the account are described. This object includes the configuration information required to join fleets and image builders to Microsoft Active Directory domains</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describefleets"><a aria-hidden="true" class="anchor-heading" href="#describefleets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeFleets</h3>
<ul>
<li>description: Grants permission to retrieve a list that describes one or more specified fleets, if the fleet names are provided. Otherwise, all fleets in the account are described</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeimagebuilders"><a aria-hidden="true" class="anchor-heading" href="#describeimagebuilders"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeImageBuilders</h3>
<ul>
<li>description: Grants permission to retrieve a list that describes one or more specified image builders, if the image builder names are provided. Otherwise, all image builders in the account are described</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "image-builder": {
        "resource_type": "image-builder",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeimagepermissions"><a aria-hidden="true" class="anchor-heading" href="#describeimagepermissions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeImagePermissions</h3>
<ul>
<li>description: Grants permission to retrieve a list that describes the permissions for shared AWS account IDs on a private image that you own</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "image": {
        "resource_type": "image",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeimages"><a aria-hidden="true" class="anchor-heading" href="#describeimages"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeImages</h3>
<ul>
<li>description: Grants permission to retrieve a list that describes one or more specified images, if the image names or image ARNs are provided. Otherwise, all images in the account are described</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "image": {
        "resource_type": "image",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describesessions"><a aria-hidden="true" class="anchor-heading" href="#describesessions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeSessions</h3>
<ul>
<li>description: Grants permission to retrieve a list that describes the streaming sessions for the specified stack and fleet. If a user ID is provided for the stack and fleet, only the streaming sessions for that user are described</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "stack": {
        "resource_type": "stack",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describestacks"><a aria-hidden="true" class="anchor-heading" href="#describestacks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeStacks</h3>
<ul>
<li>description: Grants permission to retrieve a list that describes one or more specified stacks, if the stack names are provided. Otherwise, all stacks in the account are described</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeusagereportsubscriptions"><a aria-hidden="true" class="anchor-heading" href="#describeusagereportsubscriptions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeUsageReportSubscriptions</h3>
<ul>
<li>description: Grants permission to retrieve a list that describes one or more usage report subscriptions</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeuserstackassociations"><a aria-hidden="true" class="anchor-heading" href="#describeuserstackassociations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeUserStackAssociations</h3>
<ul>
<li>description: Grants permission to retrieve a list that describes the UserStackAssociation objects</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeusers"><a aria-hidden="true" class="anchor-heading" href="#describeusers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeUsers</h3>
<ul>
<li>description: Grants permission to retrieve a list that describes users in the user pool</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disableuser"><a aria-hidden="true" class="anchor-heading" href="#disableuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisableUser</h3>
<ul>
<li>description: Grants permission to disable the specified user in the user pool. This action does not delete the user</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociatefleet"><a aria-hidden="true" class="anchor-heading" href="#disassociatefleet"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateFleet</h3>
<ul>
<li>description: Grants permission to disassociate the specified fleet from the specified stack</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "stack": {
        "resource_type": "stack",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="enableuser"><a aria-hidden="true" class="anchor-heading" href="#enableuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EnableUser</h3>
<ul>
<li>description: Grants permission to enable a user in the user pool</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="expiresession"><a aria-hidden="true" class="anchor-heading" href="#expiresession"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ExpireSession</h3>
<ul>
<li>description: Grants permission to immediately stop the specified streaming session</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getimagebuilders"><a aria-hidden="true" class="anchor-heading" href="#getimagebuilders"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetImageBuilders</h3>
<ul>
<li>description: Grants permission to retrieve a list that describes one or more specified image builders, if the image builder names are provided. Otherwise, all image builders in the account are described</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getparametersforthemeassetupload"><a aria-hidden="true" class="anchor-heading" href="#getparametersforthemeassetupload"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetParametersForThemeAssetUpload</h3>
<ul>
<li>description: Grants permission to upload theme assets</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listassociatedfleets"><a aria-hidden="true" class="anchor-heading" href="#listassociatedfleets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAssociatedFleets</h3>
<ul>
<li>description: Grants permission to retrieve the name of the fleet that is associated with the specified stack</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listassociatedstacks"><a aria-hidden="true" class="anchor-heading" href="#listassociatedstacks"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAssociatedStacks</h3>
<ul>
<li>description: Grants permission to retrieve the name of the stack with which the specified fleet is associated</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Grants permission to retrieve a list of all tags for the specified AppStream 2.0 resource. The following resources can be tagged: Image builders, images, fleets, and stacks</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startfleet"><a aria-hidden="true" class="anchor-heading" href="#startfleet"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartFleet</h3>
<ul>
<li>description: Grants permission to start the specified fleet</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startimagebuilder"><a aria-hidden="true" class="anchor-heading" href="#startimagebuilder"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartImageBuilder</h3>
<ul>
<li>description: Grants permission to start the specified image builder</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "image-builder": {
        "resource_type": "image-builder",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopfleet"><a aria-hidden="true" class="anchor-heading" href="#stopfleet"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopFleet</h3>
<ul>
<li>description: Grants permission to stop the specified fleet</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopimagebuilder"><a aria-hidden="true" class="anchor-heading" href="#stopimagebuilder"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopImageBuilder</h3>
<ul>
<li>description: Grants permission to stop the specified image builder</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "image-builder": {
        "resource_type": "image-builder",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stream"><a aria-hidden="true" class="anchor-heading" href="#stream"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Stream</h3>
<ul>
<li>description: Grants permission to federated users to sign in by using their existing credentials and stream applications from the specified stack</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "appstream:userId"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Grants permission to add or overwrite one or more tags for the specified AppStream 2.0 resource. The following resources can be tagged: Image builders, images, fleets, and stacks</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "image": {
        "resource_type": "image",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "image-builder": {
        "resource_type": "image-builder",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Grants permission to disassociate one or more tags from the specified AppStream 2.0 resource</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "image": {
        "resource_type": "image",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "image-builder": {
        "resource_type": "image-builder",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "stack": {
        "resource_type": "stack",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatedirectoryconfig"><a aria-hidden="true" class="anchor-heading" href="#updatedirectoryconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateDirectoryConfig</h3>
<ul>
<li>description: Grants permission to update the specified Directory Config object in AppStream 2.0. This object includes the configuration information required to join fleets and image builders to Microsoft Active Directory domains</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatefleet"><a aria-hidden="true" class="anchor-heading" href="#updatefleet"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateFleet</h3>
<ul>
<li>description: Grants permission to update the specified fleet. All attributes except the fleet name can be updated when the fleet is in the STOPPED state</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "fleet": {
        "resource_type": "fleet",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "image": {
        "resource_type": "image",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateimagepermissions"><a aria-hidden="true" class="anchor-heading" href="#updateimagepermissions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateImagePermissions</h3>
<ul>
<li>description: Grants permission to add or update permissions for the specified private image</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "image": {
        "resource_type": "image",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatestack"><a aria-hidden="true" class="anchor-heading" href="#updatestack"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateStack</h3>
<ul>
<li>description: Grants permission to update the specified fields for the specified stack</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "stack": {
        "resource_type": "stack",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-AppStream 2.0"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Chime.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Chime - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Chime.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Chime.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Chime.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Chime - undefined" />
  <meta name="twitter:title" content="Chime - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Chime</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Chime">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="chime"><a aria-hidden="true" class="anchor-heading" href="#chime"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Chime</h1>
<ul>
<li>prefix: chime</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="acceptdelegate"><a aria-hidden="true" class="anchor-heading" href="#acceptdelegate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AcceptDelegate</h3>
<ul>
<li>description: Grants permission to accept the delegate invitation to share management of an Amazon Chime account with another AWS Account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="activateusers"><a aria-hidden="true" class="anchor-heading" href="#activateusers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ActivateUsers</h3>
<ul>
<li>description: Grants permission to activate users in an Amazon Chime Enterprise account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="adddomain"><a aria-hidden="true" class="anchor-heading" href="#adddomain"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddDomain</h3>
<ul>
<li>description: Grants permission to add a domain to your Amazon Chime account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="addorupdategroups"><a aria-hidden="true" class="anchor-heading" href="#addorupdategroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AddOrUpdateGroups</h3>
<ul>
<li>description: Grants permission to add new or update existing Active Directory or Okta user groups associated with your Amazon Chime Enterprise account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="associatephonenumberwithuser"><a aria-hidden="true" class="anchor-heading" href="#associatephonenumberwithuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociatePhoneNumberWithUser</h3>
<ul>
<li>description: Grants permission to associate a phone number with an Amazon Chime user</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="associatephonenumberswithvoiceconnector"><a aria-hidden="true" class="anchor-heading" href="#associatephonenumberswithvoiceconnector"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociatePhoneNumbersWithVoiceConnector</h3>
<ul>
<li>description: Grants permission to associate multiple phone numbers with an Amazon Chime Voice Connector</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="associatephonenumberswithvoiceconnectorgroup"><a aria-hidden="true" class="anchor-heading" href="#associatephonenumberswithvoiceconnectorgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociatePhoneNumbersWithVoiceConnectorGroup</h3>
<ul>
<li>description: Grants permission to associate multiple phone numbers with an Amazon Chime Voice Connector Group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="associatesignindelegategroupswithaccount"><a aria-hidden="true" class="anchor-heading" href="#associatesignindelegategroupswithaccount"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateSigninDelegateGroupsWithAccount</h3>
<ul>
<li>description: Grants permission to associate the specified sign-in delegate groups with the specified Amazon Chime account.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="authorizedirectory"><a aria-hidden="true" class="anchor-heading" href="#authorizedirectory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AuthorizeDirectory</h3>
<ul>
<li>description: Grants permission to authorize an Active Directory for your Amazon Chime Enterprise account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchcreateattendee"><a aria-hidden="true" class="anchor-heading" href="#batchcreateattendee"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchCreateAttendee</h3>
<ul>
<li>description: Grants permission to create new attendees for an active Amazon Chime SDK meeting</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "meeting": {
        "resource_type": "meeting",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchcreateroommembership"><a aria-hidden="true" class="anchor-heading" href="#batchcreateroommembership"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchCreateRoomMembership</h3>
<ul>
<li>description: Grants permission to batch add room members</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchdeletephonenumber"><a aria-hidden="true" class="anchor-heading" href="#batchdeletephonenumber"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchDeletePhoneNumber</h3>
<ul>
<li>description: Grants permission to move up to 50 phone numbers to the deletion queue</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchsuspenduser"><a aria-hidden="true" class="anchor-heading" href="#batchsuspenduser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchSuspendUser</h3>
<ul>
<li>description: Grants permission to suspend up to 50 users from a Team or EnterpriseLWA Amazon Chime account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchunsuspenduser"><a aria-hidden="true" class="anchor-heading" href="#batchunsuspenduser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchUnsuspendUser</h3>
<ul>
<li>description: Grants permission to remove the suspension from up to 50 previously suspended users for the specified Amazon Chime EnterpriseLWA account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchupdatephonenumber"><a aria-hidden="true" class="anchor-heading" href="#batchupdatephonenumber"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchUpdatePhoneNumber</h3>
<ul>
<li>description: Grants permission to update phone number details within the UpdatePhoneNumberRequestItem object for up to 50 phone numbers</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchupdateuser"><a aria-hidden="true" class="anchor-heading" href="#batchupdateuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchUpdateUser</h3>
<ul>
<li>description: Grants permission to update user details within the UpdateUserRequestItem object for up to 20 users for the specified Amazon Chime account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="connectdirectory"><a aria-hidden="true" class="anchor-heading" href="#connectdirectory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ConnectDirectory</h3>
<ul>
<li>description: Grants permission to connect an Active Directory to your Amazon Chime Enterprise account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": [
            "ds:ConnectDirectory"
        ]
    }
}
</code></pre>
<h3 id="createaccount"><a aria-hidden="true" class="anchor-heading" href="#createaccount"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateAccount</h3>
<ul>
<li>description: Grants permission to create an Amazon Chime account under the administrator's AWS account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createapikey"><a aria-hidden="true" class="anchor-heading" href="#createapikey"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateApiKey</h3>
<ul>
<li>description: Grants permission to create a new SCIM access key for your Amazon Chime account and Okta configuration</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createattendee"><a aria-hidden="true" class="anchor-heading" href="#createattendee"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateAttendee</h3>
<ul>
<li>description: Grants permission to create a new attendee for an active Amazon Chime SDK meeting</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "meeting": {
        "resource_type": "meeting",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createbot"><a aria-hidden="true" class="anchor-heading" href="#createbot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateBot</h3>
<ul>
<li>description: Grants permission to create a bot for an Amazon Chime Enterprise account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createbotmembership"><a aria-hidden="true" class="anchor-heading" href="#createbotmembership"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateBotMembership</h3>
<ul>
<li>description: Grants permission to add a bot to a chat room in your Amazon Chime Enterprise account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createcdrbucket"><a aria-hidden="true" class="anchor-heading" href="#createcdrbucket"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateCDRBucket</h3>
<ul>
<li>description: Grants permission to create a new Call Detail Record S3 bucket</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": [
            "s3:CreateBucket",
            "s3:ListAllMyBuckets"
        ]
    }
}
</code></pre>
<h3 id="createmeeting"><a aria-hidden="true" class="anchor-heading" href="#createmeeting"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateMeeting</h3>
<ul>
<li>description: Grants permission to create a new Amazon Chime SDK meeting in the specified media Region, with no initial attendees</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createmeetingwithattendees"><a aria-hidden="true" class="anchor-heading" href="#createmeetingwithattendees"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateMeetingWithAttendees</h3>
<ul>
<li>description: Grants permission to create a new Amazon Chime SDK meeting in the specified media Region, with a set of attendees</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createphonenumberorder"><a aria-hidden="true" class="anchor-heading" href="#createphonenumberorder"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreatePhoneNumberOrder</h3>
<ul>
<li>description: Grants permission to create a phone number order with the Carriers</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createproxysession"><a aria-hidden="true" class="anchor-heading" href="#createproxysession"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateProxySession</h3>
<ul>
<li>description: Grants permission to create a proxy session for the specified Amazon Chime Voice Connector</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createroom"><a aria-hidden="true" class="anchor-heading" href="#createroom"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateRoom</h3>
<ul>
<li>description: Grants permission to create a room</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createroommembership"><a aria-hidden="true" class="anchor-heading" href="#createroommembership"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateRoomMembership</h3>
<ul>
<li>description: Grants permission to add a room member</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createuser"><a aria-hidden="true" class="anchor-heading" href="#createuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateUser</h3>
<ul>
<li>description: Grants permission to create a user under the specified Amazon Chime account.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createvoiceconnector"><a aria-hidden="true" class="anchor-heading" href="#createvoiceconnector"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateVoiceConnector</h3>
<ul>
<li>description: Grants permission to create a Amazon Chime Voice Connector under the administrator's AWS account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createvoiceconnectorgroup"><a aria-hidden="true" class="anchor-heading" href="#createvoiceconnectorgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateVoiceConnectorGroup</h3>
<ul>
<li>description: Grants permission to create a Amazon Chime Voice Connector Group under the administrator's AWS account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteaccount"><a aria-hidden="true" class="anchor-heading" href="#deleteaccount"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAccount</h3>
<ul>
<li>description: Grants permission to delete the specified Amazon Chime account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteaccountopenidconfig"><a aria-hidden="true" class="anchor-heading" href="#deleteaccountopenidconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAccountOpenIdConfig</h3>
<ul>
<li>description: Grants permission to delete the OpenIdConfig attributes from your Amazon Chime account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteapikey"><a aria-hidden="true" class="anchor-heading" href="#deleteapikey"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteApiKey</h3>
<ul>
<li>description: Grants permission to delete the specified SCIM access key associated with your Amazon Chime account and Okta configuration</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteattendee"><a aria-hidden="true" class="anchor-heading" href="#deleteattendee"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteAttendee</h3>
<ul>
<li>description: Grants permission to delete the specified attendee from an Amazon Chime SDK meeting</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "meeting": {
        "resource_type": "meeting",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletecdrbucket"><a aria-hidden="true" class="anchor-heading" href="#deletecdrbucket"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteCDRBucket</h3>
<ul>
<li>description: Grants permission to delete a Call Detail Record S3 bucket from your Amazon Chime account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": [
            "s3:DeleteBucket"
        ]
    }
}
</code></pre>
<h3 id="deletedelegate"><a aria-hidden="true" class="anchor-heading" href="#deletedelegate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDelegate</h3>
<ul>
<li>description: Grants permission to delete delegated AWS account management from your Amazon Chime account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedomain"><a aria-hidden="true" class="anchor-heading" href="#deletedomain"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDomain</h3>
<ul>
<li>description: Grants permission to delete a domain from your Amazon Chime account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteeventsconfiguration"><a aria-hidden="true" class="anchor-heading" href="#deleteeventsconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteEventsConfiguration</h3>
<ul>
<li>description: Grants permission to delete an events configuration for a bot to receive outgoing events</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletegroups"><a aria-hidden="true" class="anchor-heading" href="#deletegroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteGroups</h3>
<ul>
<li>description: Grants permission to delete Active Directory or Okta user groups from your Amazon Chime Enterprise account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletemeeting"><a aria-hidden="true" class="anchor-heading" href="#deletemeeting"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteMeeting</h3>
<ul>
<li>description: Grants permission to delete the specified Amazon Chime SDK meeting</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "meeting": {
        "resource_type": "meeting",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletephonenumber"><a aria-hidden="true" class="anchor-heading" href="#deletephonenumber"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeletePhoneNumber</h3>
<ul>
<li>description: Grants permission to move a phone number to the deletion queue</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteproxysession"><a aria-hidden="true" class="anchor-heading" href="#deleteproxysession"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteProxySession</h3>
<ul>
<li>description: Grants permission to delete a proxy session for the specified Amazon Chime Voice Connector</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteroom"><a aria-hidden="true" class="anchor-heading" href="#deleteroom"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteRoom</h3>
<ul>
<li>description: Grants permission to delete a room</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteroommembership"><a aria-hidden="true" class="anchor-heading" href="#deleteroommembership"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteRoomMembership</h3>
<ul>
<li>description: Grants permission to remove a room member</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletevoiceconnector"><a aria-hidden="true" class="anchor-heading" href="#deletevoiceconnector"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteVoiceConnector</h3>
<ul>
<li>description: Grants permission to delete the specified Amazon Chime Voice Connector</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletevoiceconnectoremergencycallingconfiguration"><a aria-hidden="true" class="anchor-heading" href="#deletevoiceconnectoremergencycallingconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteVoiceConnectorEmergencyCallingConfiguration</h3>
<ul>
<li>description: Grants permission to delete emergency calling configuration for the specified Amazon Chime Voice Connector</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletevoiceconnectorgroup"><a aria-hidden="true" class="anchor-heading" href="#deletevoiceconnectorgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteVoiceConnectorGroup</h3>
<ul>
<li>description: Grants permission to delete the specified Amazon Chime Voice Connector Group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletevoiceconnectororigination"><a aria-hidden="true" class="anchor-heading" href="#deletevoiceconnectororigination"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteVoiceConnectorOrigination</h3>
<ul>
<li>description: Grants permission to delete the origination settings for the specified Amazon Chime Voice Connector</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletevoiceconnectorproxy"><a aria-hidden="true" class="anchor-heading" href="#deletevoiceconnectorproxy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteVoiceConnectorProxy</h3>
<ul>
<li>description: Grants permission to delete proxy configuration for the specified Amazon Chime Voice Connector</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletevoiceconnectorstreamingconfiguration"><a aria-hidden="true" class="anchor-heading" href="#deletevoiceconnectorstreamingconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteVoiceConnectorStreamingConfiguration</h3>
<ul>
<li>description: Grants permission to delete streaming configuration for the specified Amazon Chime Voice Connector</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletevoiceconnectortermination"><a aria-hidden="true" class="anchor-heading" href="#deletevoiceconnectortermination"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteVoiceConnectorTermination</h3>
<ul>
<li>description: Grants permission to delete the termination settings for the specified Amazon Chime Voice Connector</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletevoiceconnectorterminationcredentials"><a aria-hidden="true" class="anchor-heading" href="#deletevoiceconnectorterminationcredentials"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteVoiceConnectorTerminationCredentials</h3>
<ul>
<li>description: Grants permission to delete SIP termination credentials for the specified Amazon Chime Voice Connector</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociatephonenumberfromuser"><a aria-hidden="true" class="anchor-heading" href="#disassociatephonenumberfromuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociatePhoneNumberFromUser</h3>
<ul>
<li>description: Grants permission to disassociate the primary provisioned number from the specified Amazon Chime user</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociatephonenumbersfromvoiceconnector"><a aria-hidden="true" class="anchor-heading" href="#disassociatephonenumbersfromvoiceconnector"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociatePhoneNumbersFromVoiceConnector</h3>
<ul>
<li>description: Grants permission to disassociate multiple phone numbers from the specified Amazon Chime Voice Connector</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociatephonenumbersfromvoiceconnectorgroup"><a aria-hidden="true" class="anchor-heading" href="#disassociatephonenumbersfromvoiceconnectorgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociatePhoneNumbersFromVoiceConnectorGroup</h3>
<ul>
<li>description: Grants permission to disassociate multiple phone numbers from the specified Amazon Chime Voice Connector Group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociatesignindelegategroupsfromaccount"><a aria-hidden="true" class="anchor-heading" href="#disassociatesignindelegategroupsfromaccount"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateSigninDelegateGroupsFromAccount</h3>
<ul>
<li>description: Grants permission to disassociate the specified sign-in delegate groups from the specified Amazon Chime account.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disconnectdirectory"><a aria-hidden="true" class="anchor-heading" href="#disconnectdirectory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisconnectDirectory</h3>
<ul>
<li>description: Grants permission to disconnect the Active Directory from your Amazon Chime Enterprise account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getaccount"><a aria-hidden="true" class="anchor-heading" href="#getaccount"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAccount</h3>
<ul>
<li>description: Grants permission to get details for the specified Amazon Chime account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getaccountresource"><a aria-hidden="true" class="anchor-heading" href="#getaccountresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAccountResource</h3>
<ul>
<li>description: Grants permission to get details for the account resource associated with your Amazon Chime account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getaccountsettings"><a aria-hidden="true" class="anchor-heading" href="#getaccountsettings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAccountSettings</h3>
<ul>
<li>description: Grants permission to get account settings for the specified Amazon Chime account ID</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getaccountwithopenidconfig"><a aria-hidden="true" class="anchor-heading" href="#getaccountwithopenidconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAccountWithOpenIdConfig</h3>
<ul>
<li>description: Grants permission to get the account details and OpenIdConfig attributes for your Amazon Chime account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getattendee"><a aria-hidden="true" class="anchor-heading" href="#getattendee"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAttendee</h3>
<ul>
<li>description: Grants permission to get attendee details for a specified meeting ID and attendee ID</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "meeting": {
        "resource_type": "meeting",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getbot"><a aria-hidden="true" class="anchor-heading" href="#getbot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetBot</h3>
<ul>
<li>description: Grants permission to retrieve details for the specified bot</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcdrbucket"><a aria-hidden="true" class="anchor-heading" href="#getcdrbucket"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCDRBucket</h3>
<ul>
<li>description: Grants permission to get details of a Call Detail Record S3 bucket associated with your Amazon Chime account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": [
            "s3:GetBucketAcl",
            "s3:GetBucketLocation",
            "s3:GetBucketLogging",
            "s3:GetBucketVersioning",
            "s3:GetBucketWebsite"
        ]
    }
}
</code></pre>
<h3 id="getdomain"><a aria-hidden="true" class="anchor-heading" href="#getdomain"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDomain</h3>
<ul>
<li>description: Grants permission to get domain details for a domain associated with your Amazon Chime account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="geteventsconfiguration"><a aria-hidden="true" class="anchor-heading" href="#geteventsconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetEventsConfiguration</h3>
<ul>
<li>description: Grants permission to retrieve details for an events configuration for a bot to receive outgoing events</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getglobalsettings"><a aria-hidden="true" class="anchor-heading" href="#getglobalsettings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetGlobalSettings</h3>
<ul>
<li>description: Grants permission to get global settings related to Amazon Chime for the AWS account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmeeting"><a aria-hidden="true" class="anchor-heading" href="#getmeeting"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetMeeting</h3>
<ul>
<li>description: Grants permission to get the meeting record for a specified meeting ID</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "meeting": {
        "resource_type": "meeting",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmeetingdetail"><a aria-hidden="true" class="anchor-heading" href="#getmeetingdetail"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetMeetingDetail</h3>
<ul>
<li>description: Grants permission to get attendee, connection, and other details for a meeting</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getphonenumber"><a aria-hidden="true" class="anchor-heading" href="#getphonenumber"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetPhoneNumber</h3>
<ul>
<li>description: Grants permission to get details for the specified phone number</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getphonenumberorder"><a aria-hidden="true" class="anchor-heading" href="#getphonenumberorder"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetPhoneNumberOrder</h3>
<ul>
<li>description: Grants permission to get details for the specified phone number order</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getphonenumbersettings"><a aria-hidden="true" class="anchor-heading" href="#getphonenumbersettings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetPhoneNumberSettings</h3>
<ul>
<li>description: Grants permission to get phone number settings related to Amazon Chime for the AWS account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getproxysession"><a aria-hidden="true" class="anchor-heading" href="#getproxysession"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetProxySession</h3>
<ul>
<li>description: Grants permission to get details of the specified proxy session for the specified Amazon Chime Voice Connector</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getretentionsettings"><a aria-hidden="true" class="anchor-heading" href="#getretentionsettings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRetentionSettings</h3>
<ul>
<li>description: Gets the retention settings for the specified Amazon Chime account.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getroom"><a aria-hidden="true" class="anchor-heading" href="#getroom"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRoom</h3>
<ul>
<li>description: Grants permission to retrieve a room</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gettelephonylimits"><a aria-hidden="true" class="anchor-heading" href="#gettelephonylimits"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetTelephonyLimits</h3>
<ul>
<li>description: Grants permission to get telephony limits for the AWS account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getuser"><a aria-hidden="true" class="anchor-heading" href="#getuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetUser</h3>
<ul>
<li>description: Grants permission to get details for the specified user ID</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getuseractivityreportdata"><a aria-hidden="true" class="anchor-heading" href="#getuseractivityreportdata"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetUserActivityReportData</h3>
<ul>
<li>description: Grants permission to get a summary of user activity on the user details page</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getuserbyemail"><a aria-hidden="true" class="anchor-heading" href="#getuserbyemail"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetUserByEmail</h3>
<ul>
<li>description: Grants permission to get user details for an Amazon Chime user based on the email address in an Amazon Chime Enterprise or Team account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getusersettings"><a aria-hidden="true" class="anchor-heading" href="#getusersettings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetUserSettings</h3>
<ul>
<li>description: Grants permission to get user settings related to the specified Amazon Chime user</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getvoiceconnector"><a aria-hidden="true" class="anchor-heading" href="#getvoiceconnector"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetVoiceConnector</h3>
<ul>
<li>description: Grants permission to get details for the specified Amazon Chime Voice Connector</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getvoiceconnectoremergencycallingconfiguration"><a aria-hidden="true" class="anchor-heading" href="#getvoiceconnectoremergencycallingconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetVoiceConnectorEmergencyCallingConfiguration</h3>
<ul>
<li>description: Grants permission to get details of the emergency calling configuration for the specified Amazon Chime Voice Connector</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getvoiceconnectorgroup"><a aria-hidden="true" class="anchor-heading" href="#getvoiceconnectorgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetVoiceConnectorGroup</h3>
<ul>
<li>description: Grants permission to get details for the specified Amazon Chime Voice Connector Group</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getvoiceconnectorloggingconfiguration"><a aria-hidden="true" class="anchor-heading" href="#getvoiceconnectorloggingconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetVoiceConnectorLoggingConfiguration</h3>
<ul>
<li>description: Grants permission to get details of the logging configuration for the specified Amazon Chime Voice Connector</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getvoiceconnectororigination"><a aria-hidden="true" class="anchor-heading" href="#getvoiceconnectororigination"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetVoiceConnectorOrigination</h3>
<ul>
<li>description: Grants permission to get details of the origination settings for the specified Amazon Chime Voice Connector</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getvoiceconnectorproxy"><a aria-hidden="true" class="anchor-heading" href="#getvoiceconnectorproxy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetVoiceConnectorProxy</h3>
<ul>
<li>description: Grants permission to get details of the proxy configuration for the specified Amazon Chime Voice Connector</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getvoiceconnectorstreamingconfiguration"><a aria-hidden="true" class="anchor-heading" href="#getvoiceconnectorstreamingconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetVoiceConnectorStreamingConfiguration</h3>
<ul>
<li>description: Grants permission to get details of the streaming configuration for the specified Amazon Chime Voice Connector</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getvoiceconnectortermination"><a aria-hidden="true" class="anchor-heading" href="#getvoiceconnectortermination"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetVoiceConnectorTermination</h3>
<ul>
<li>description: Grants permission to get details of the termination settings for the specified Amazon Chime Voice Connector</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getvoiceconnectorterminationhealth"><a aria-hidden="true" class="anchor-heading" href="#getvoiceconnectorterminationhealth"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetVoiceConnectorTerminationHealth</h3>
<ul>
<li>description: Grants permission to get details of the termination health for the specified Amazon Chime Voice Connector</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="invitedelegate"><a aria-hidden="true" class="anchor-heading" href="#invitedelegate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>InviteDelegate</h3>
<ul>
<li>description: Grants permission to send an invitation to accept a request for AWS account delegation for an Amazon Chime account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="inviteusers"><a aria-hidden="true" class="anchor-heading" href="#inviteusers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>InviteUsers</h3>
<ul>
<li>description: Grants permission to invite as many as 50 users to the specified Amazon Chime account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="inviteusersfromprovider"><a aria-hidden="true" class="anchor-heading" href="#inviteusersfromprovider"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>InviteUsersFromProvider</h3>
<ul>
<li>description: Grants permission to invite users from a third party provider to your Amazon Chime account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listaccountusagereportdata"><a aria-hidden="true" class="anchor-heading" href="#listaccountusagereportdata"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAccountUsageReportData</h3>
<ul>
<li>description: Grants permission to list Amazon Chime account usage reporting data</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listaccounts"><a aria-hidden="true" class="anchor-heading" href="#listaccounts"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAccounts</h3>
<ul>
<li>description: Grants permission to list the Amazon Chime accounts under the administrator's AWS account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listapikeys"><a aria-hidden="true" class="anchor-heading" href="#listapikeys"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListApiKeys</h3>
<ul>
<li>description: Grants permission to list the SCIM access keys defined for your Amazon Chime account and Okta configuration</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listattendeetags"><a aria-hidden="true" class="anchor-heading" href="#listattendeetags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAttendeeTags</h3>
<ul>
<li>description: Grants permission to list the tags applied to an Amazon Chime SDK attendee resource</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "meeting": {
        "resource_type": "meeting",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listattendees"><a aria-hidden="true" class="anchor-heading" href="#listattendees"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListAttendees</h3>
<ul>
<li>description: Grants permission to list up to 100 attendees for a specified Amazon Chime SDK meeting</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "meeting": {
        "resource_type": "meeting",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listbots"><a aria-hidden="true" class="anchor-heading" href="#listbots"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListBots</h3>
<ul>
<li>description: Grants permission to list the bots associated with the administrator's Amazon Chime Enterprise account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listcdrbucket"><a aria-hidden="true" class="anchor-heading" href="#listcdrbucket"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListCDRBucket</h3>
<ul>
<li>description: Grants permission to list Call Detail Record S3 buckets</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": [
            "s3:ListAllMyBuckets",
            "s3:ListBucket"
        ]
    }
}
</code></pre>
<h3 id="listcallingregions"><a aria-hidden="true" class="anchor-heading" href="#listcallingregions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListCallingRegions</h3>
<ul>
<li>description: Grants permission to list the calling regions available for the administrator's AWS account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdelegates"><a aria-hidden="true" class="anchor-heading" href="#listdelegates"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDelegates</h3>
<ul>
<li>description: Grants permission to list account delegate information associated with your Amazon Chime account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdirectories"><a aria-hidden="true" class="anchor-heading" href="#listdirectories"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDirectories</h3>
<ul>
<li>description: Grants permission to list active Active Directories hosted in the Directory Service of your AWS account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdomains"><a aria-hidden="true" class="anchor-heading" href="#listdomains"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDomains</h3>
<ul>
<li>description: Grants permission to list domains associated with your Amazon Chime account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listgroups"><a aria-hidden="true" class="anchor-heading" href="#listgroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListGroups</h3>
<ul>
<li>description: Grants permission to list Active Directory or Okta user groups associated with your Amazon Chime Enterprise account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listmeetingevents"><a aria-hidden="true" class="anchor-heading" href="#listmeetingevents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListMeetingEvents</h3>
<ul>
<li>description: Grants permission to list all events that occurred for a specified meeting</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listmeetingtags"><a aria-hidden="true" class="anchor-heading" href="#listmeetingtags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListMeetingTags</h3>
<ul>
<li>description: Grants permission to list the tags applied to an Amazon Chime SDK meeting resource.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "meeting": {
        "resource_type": "meeting",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listmeetings"><a aria-hidden="true" class="anchor-heading" href="#listmeetings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListMeetings</h3>
<ul>
<li>description: Grants permission to list up to 100 active Amazon Chime SDK meetings</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listmeetingsreportdata"><a aria-hidden="true" class="anchor-heading" href="#listmeetingsreportdata"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListMeetingsReportData</h3>
<ul>
<li>description: Grants permission to list meetings ended during the specified date range</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listphonenumberorders"><a aria-hidden="true" class="anchor-heading" href="#listphonenumberorders"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPhoneNumberOrders</h3>
<ul>
<li>description: Grants permission to list the phone number orders under the administrator's AWS account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listphonenumbers"><a aria-hidden="true" class="anchor-heading" href="#listphonenumbers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPhoneNumbers</h3>
<ul>
<li>description: Grants permission to list the phone numbers under the administrator's AWS account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listproxysessions"><a aria-hidden="true" class="anchor-heading" href="#listproxysessions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListProxySessions</h3>
<ul>
<li>description: Grants permission to list proxy sessions for the specified Amazon Chime Voice Connector</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listroommemberships"><a aria-hidden="true" class="anchor-heading" href="#listroommemberships"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListRoomMemberships</h3>
<ul>
<li>description: Grants permission to list all room members</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listrooms"><a aria-hidden="true" class="anchor-heading" href="#listrooms"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListRooms</h3>
<ul>
<li>description: Grants permission to list rooms</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Grants permission to list the tags applied to an Amazon Chime SDK meeting resource.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "meeting": {
        "resource_type": "meeting",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listusers"><a aria-hidden="true" class="anchor-heading" href="#listusers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListUsers</h3>
<ul>
<li>description: Grants permission to list the users that belong to the specified Amazon Chime account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listvoiceconnectorgroups"><a aria-hidden="true" class="anchor-heading" href="#listvoiceconnectorgroups"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListVoiceConnectorGroups</h3>
<ul>
<li>description: Grants permission to list the Amazon Chime Voice Connector Groups under the administrator's AWS account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listvoiceconnectorterminationcredentials"><a aria-hidden="true" class="anchor-heading" href="#listvoiceconnectorterminationcredentials"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListVoiceConnectorTerminationCredentials</h3>
<ul>
<li>description: Grants permission to list the SIP termination credentials for the specified Amazon Chime Voice Connector</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listvoiceconnectors"><a aria-hidden="true" class="anchor-heading" href="#listvoiceconnectors"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListVoiceConnectors</h3>
<ul>
<li>description: Grants permission to list the Amazon Chime Voice Connectors under the administrator's AWS account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="logoutuser"><a aria-hidden="true" class="anchor-heading" href="#logoutuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>LogoutUser</h3>
<ul>
<li>description: Grants permission to log out the specified user from all of the devices they are currently logged into</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="puteventsconfiguration"><a aria-hidden="true" class="anchor-heading" href="#puteventsconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutEventsConfiguration</h3>
<ul>
<li>description: Grants permission to update details for an events configuration for a bot to receive outgoing events</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putretentionsettings"><a aria-hidden="true" class="anchor-heading" href="#putretentionsettings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutRetentionSettings</h3>
<ul>
<li>description: Puts retention settings for the specified Amazon Chime account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putvoiceconnectoremergencycallingconfiguration"><a aria-hidden="true" class="anchor-heading" href="#putvoiceconnectoremergencycallingconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutVoiceConnectorEmergencyCallingConfiguration</h3>
<ul>
<li>description: Grants permission to add emergency calling configuration for the specified Amazon Chime Voice Connector</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putvoiceconnectorloggingconfiguration"><a aria-hidden="true" class="anchor-heading" href="#putvoiceconnectorloggingconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutVoiceConnectorLoggingConfiguration</h3>
<ul>
<li>description: Grants permission to add logging configuration for the specified Amazon Chime Voice Connector</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": [
            "logs:CreateLogDelivery",
            "logs:CreateLogGroup",
            "logs:DeleteLogDelivery",
            "logs:DescribeLogGroups",
            "logs:GetLogDelivery",
            "logs:ListLogDeliveries"
        ]
    }
}
</code></pre>
<h3 id="putvoiceconnectororigination"><a aria-hidden="true" class="anchor-heading" href="#putvoiceconnectororigination"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutVoiceConnectorOrigination</h3>
<ul>
<li>description: Grants permission to update the origination settings for the specified Amazon Chime Voice Connector</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putvoiceconnectorproxy"><a aria-hidden="true" class="anchor-heading" href="#putvoiceconnectorproxy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutVoiceConnectorProxy</h3>
<ul>
<li>description: Grants permission to add proxy configuration for the specified Amazon Chime Voice Connector</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putvoiceconnectorstreamingconfiguration"><a aria-hidden="true" class="anchor-heading" href="#putvoiceconnectorstreamingconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutVoiceConnectorStreamingConfiguration</h3>
<ul>
<li>description: Grants permission to add streaming configuration for the specified Amazon Chime Voice Connector</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putvoiceconnectortermination"><a aria-hidden="true" class="anchor-heading" href="#putvoiceconnectortermination"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutVoiceConnectorTermination</h3>
<ul>
<li>description: Grants permission to update the termination settings for the specified Amazon Chime Voice Connector</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putvoiceconnectorterminationcredentials"><a aria-hidden="true" class="anchor-heading" href="#putvoiceconnectorterminationcredentials"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutVoiceConnectorTerminationCredentials</h3>
<ul>
<li>description: Grants permission to add SIP termination credentials for the specified Amazon Chime Voice Connector</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="redactconversationmessage"><a aria-hidden="true" class="anchor-heading" href="#redactconversationmessage"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RedactConversationMessage</h3>
<ul>
<li>description: Redacts the specified Chime conversation Message</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="redactroommessage"><a aria-hidden="true" class="anchor-heading" href="#redactroommessage"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RedactRoomMessage</h3>
<ul>
<li>description: Redacts the specified Chime room Message</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="regeneratesecuritytoken"><a aria-hidden="true" class="anchor-heading" href="#regeneratesecuritytoken"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RegenerateSecurityToken</h3>
<ul>
<li>description: Grants permission to regenerate the security token for the specified bot</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="renameaccount"><a aria-hidden="true" class="anchor-heading" href="#renameaccount"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RenameAccount</h3>
<ul>
<li>description: Grants permission to modify the account name for your Amazon Chime Enterprise or Team account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="renewdelegate"><a aria-hidden="true" class="anchor-heading" href="#renewdelegate"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RenewDelegate</h3>
<ul>
<li>description: Grants permission to renew the delegation request associated with an Amazon Chime account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="resetaccountresource"><a aria-hidden="true" class="anchor-heading" href="#resetaccountresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ResetAccountResource</h3>
<ul>
<li>description: Grants permission to reset the account resource in your Amazon Chime account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="resetpersonalpin"><a aria-hidden="true" class="anchor-heading" href="#resetpersonalpin"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ResetPersonalPIN</h3>
<ul>
<li>description: Grants permission to reset the personal meeting PIN for the specified user on an Amazon Chime account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="restorephonenumber"><a aria-hidden="true" class="anchor-heading" href="#restorephonenumber"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RestorePhoneNumber</h3>
<ul>
<li>description: Grants permission to restore the specified phone number from the deltion queue back to the phone number inventory</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="retrievedataexports"><a aria-hidden="true" class="anchor-heading" href="#retrievedataexports"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RetrieveDataExports</h3>
<ul>
<li>description: Grants permission to download the file containing links to all user attachments returned as part of the "Request attachments" action</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="searchavailablephonenumbers"><a aria-hidden="true" class="anchor-heading" href="#searchavailablephonenumbers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SearchAvailablePhoneNumbers</h3>
<ul>
<li>description: Grants permission to search phone numbers that can be ordered from the carrier</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startdataexport"><a aria-hidden="true" class="anchor-heading" href="#startdataexport"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartDataExport</h3>
<ul>
<li>description: Grants permission to submit the "Request attachments" request</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="submitsupportrequest"><a aria-hidden="true" class="anchor-heading" href="#submitsupportrequest"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SubmitSupportRequest</h3>
<ul>
<li>description: Grants permission to submit a customer service support request</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="suspendusers"><a aria-hidden="true" class="anchor-heading" href="#suspendusers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SuspendUsers</h3>
<ul>
<li>description: Grants permission to suspend users from an Amazon Chime Enterprise account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagattendee"><a aria-hidden="true" class="anchor-heading" href="#tagattendee"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagAttendee</h3>
<ul>
<li>description: Grants permission to apply the specified tags to the specified Amazon Chime SDK attendee</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "meeting": {
        "resource_type": "meeting",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagmeeting"><a aria-hidden="true" class="anchor-heading" href="#tagmeeting"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagMeeting</h3>
<ul>
<li>description: Grants permission to apply the specified tags to the specified Amazon Chime SDK meeting.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "meeting": {
        "resource_type": "meeting",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys",
            "aws:RequestTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Grants permission to apply the specified tags to the specified Amazon Chime SDK meeting resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "meeting": {
        "resource_type": "meeting",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys",
            "aws:RequestTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="unauthorizedirectory"><a aria-hidden="true" class="anchor-heading" href="#unauthorizedirectory"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UnauthorizeDirectory</h3>
<ul>
<li>description: Grants permission to unauthorize an Active Directory from your Amazon Chime Enterprise account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagattendee"><a aria-hidden="true" class="anchor-heading" href="#untagattendee"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagAttendee</h3>
<ul>
<li>description: Grants permission to untag the specified tags from the specified Amazon Chime SDK attendee.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "meeting": {
        "resource_type": "meeting",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagmeeting"><a aria-hidden="true" class="anchor-heading" href="#untagmeeting"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagMeeting</h3>
<ul>
<li>description: Grants permission to untag the specified tags from the specified Amazon Chime SDK meeting.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "meeting": {
        "resource_type": "meeting",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Grants permission to untag the specified tags from the specified Amazon Chime SDK meeting resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "meeting": {
        "resource_type": "meeting",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateaccount"><a aria-hidden="true" class="anchor-heading" href="#updateaccount"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateAccount</h3>
<ul>
<li>description: Grants permission to update account details for the specified Amazon Chime account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateaccountopenidconfig"><a aria-hidden="true" class="anchor-heading" href="#updateaccountopenidconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateAccountOpenIdConfig</h3>
<ul>
<li>description: Grants permission to update the OpenIdConfig attributes for your Amazon Chime account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateaccountresource"><a aria-hidden="true" class="anchor-heading" href="#updateaccountresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateAccountResource</h3>
<ul>
<li>description: Grants permission to update the account resource in your Amazon Chime account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateaccountsettings"><a aria-hidden="true" class="anchor-heading" href="#updateaccountsettings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateAccountSettings</h3>
<ul>
<li>description: Grants permission to update the settings for the specified Amazon Chime account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatebot"><a aria-hidden="true" class="anchor-heading" href="#updatebot"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateBot</h3>
<ul>
<li>description: Grants permission to update the status of the specified bot</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatecdrsettings"><a aria-hidden="true" class="anchor-heading" href="#updatecdrsettings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateCDRSettings</h3>
<ul>
<li>description: Grants permission to update your Call Detail Record S3 bucket</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": [
            "s3:CreateBucket",
            "s3:DeleteBucket",
            "s3:ListAllMyBuckets"
        ]
    }
}
</code></pre>
<h3 id="updateglobalsettings"><a aria-hidden="true" class="anchor-heading" href="#updateglobalsettings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateGlobalSettings</h3>
<ul>
<li>description: Grants permission to update the global settings related to Amazon Chime for the AWS account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatephonenumber"><a aria-hidden="true" class="anchor-heading" href="#updatephonenumber"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdatePhoneNumber</h3>
<ul>
<li>description: Grants permission to update phone number details for the specified phone number</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatephonenumbersettings"><a aria-hidden="true" class="anchor-heading" href="#updatephonenumbersettings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdatePhoneNumberSettings</h3>
<ul>
<li>description: Grants permission to update phone number settings related to Amazon Chime for the AWS account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateproxysession"><a aria-hidden="true" class="anchor-heading" href="#updateproxysession"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateProxySession</h3>
<ul>
<li>description: Grants permission to update a proxy session for the specified Amazon Chime Voice Connector</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateroom"><a aria-hidden="true" class="anchor-heading" href="#updateroom"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateRoom</h3>
<ul>
<li>description: Grants permission to update a room</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateroommembership"><a aria-hidden="true" class="anchor-heading" href="#updateroommembership"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateRoomMembership</h3>
<ul>
<li>description: Grants permission to update room membership role</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatesupportedlicenses"><a aria-hidden="true" class="anchor-heading" href="#updatesupportedlicenses"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateSupportedLicenses</h3>
<ul>
<li>description: Grants permission to update the supported license tiers available for users in your Amazon Chime account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateuser"><a aria-hidden="true" class="anchor-heading" href="#updateuser"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateUser</h3>
<ul>
<li>description: Grants permission to update user details for a specified user ID</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateuserlicenses"><a aria-hidden="true" class="anchor-heading" href="#updateuserlicenses"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateUserLicenses</h3>
<ul>
<li>description: Grants permission to update the licenses for your Amazon Chime users</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateusersettings"><a aria-hidden="true" class="anchor-heading" href="#updateusersettings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateUserSettings</h3>
<ul>
<li>description: Grants permission to update user settings related to the specified Amazon Chime user</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatevoiceconnector"><a aria-hidden="true" class="anchor-heading" href="#updatevoiceconnector"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateVoiceConnector</h3>
<ul>
<li>description: Grants permission to update Amazon Chime Voice Connector details for the specified Amazon Chime Voice Connector</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatevoiceconnectorgroup"><a aria-hidden="true" class="anchor-heading" href="#updatevoiceconnectorgroup"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateVoiceConnectorGroup</h3>
<ul>
<li>description: Grants permission to update Amazon Chime Voice Connector Group details for the specified Amazon Chime Voice Connector Group</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="validateaccountresource"><a aria-hidden="true" class="anchor-heading" href="#validateaccountresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ValidateAccountResource</h3>
<ul>
<li>description: Grants permission to validate the account resource in your Amazon Chime account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Chime"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-GuardDuty.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>GuardDuty - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-GuardDuty.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-GuardDuty.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-GuardDuty.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="GuardDuty - undefined" />
  <meta name="twitter:title" content="GuardDuty - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">GuardDuty</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="GuardDuty">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="guardduty"><a aria-hidden="true" class="anchor-heading" href="#guardduty"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GuardDuty</h1>
<ul>
<li>prefix: guardduty</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="acceptinvitation"><a aria-hidden="true" class="anchor-heading" href="#acceptinvitation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AcceptInvitation</h3>
<ul>
<li>description: Grants permission to accept invitations to become a GuardDuty member account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="archivefindings"><a aria-hidden="true" class="anchor-heading" href="#archivefindings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ArchiveFindings</h3>
<ul>
<li>description: Grants permission to archive GuardDuty findings</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdetector"><a aria-hidden="true" class="anchor-heading" href="#createdetector"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDetector</h3>
<ul>
<li>description: Grants permission to create a detector</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createfilter"><a aria-hidden="true" class="anchor-heading" href="#createfilter"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateFilter</h3>
<ul>
<li>description: Grants permission to create GuardDuty filters. A filters defines finding attributes and conditions used to filter findings</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createipset"><a aria-hidden="true" class="anchor-heading" href="#createipset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateIPSet</h3>
<ul>
<li>description: Grants permission to create an IPSet</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createmembers"><a aria-hidden="true" class="anchor-heading" href="#createmembers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateMembers</h3>
<ul>
<li>description: Grants permission to create GuardDuty member accounts, where the account used to create a member becomes the GuardDuty administrator account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createpublishingdestination"><a aria-hidden="true" class="anchor-heading" href="#createpublishingdestination"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreatePublishingDestination</h3>
<ul>
<li>description: Grants permission to create a publishing destination</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "s3:GetObject",
            "s3:ListBucket"
        ]
    }
}
</code></pre>
<h3 id="createsamplefindings"><a aria-hidden="true" class="anchor-heading" href="#createsamplefindings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateSampleFindings</h3>
<ul>
<li>description: Grants permission to create sample findings</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createthreatintelset"><a aria-hidden="true" class="anchor-heading" href="#createthreatintelset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateThreatIntelSet</h3>
<ul>
<li>description: Grants permission to create GuardDuty ThreatIntelSets, where a ThreatIntelSet consists of known malicious IP addresses used by GuardDuty to generate findings</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="declineinvitations"><a aria-hidden="true" class="anchor-heading" href="#declineinvitations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeclineInvitations</h3>
<ul>
<li>description: Grants permission to decline invitations to become a GuardDuty member account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedetector"><a aria-hidden="true" class="anchor-heading" href="#deletedetector"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDetector</h3>
<ul>
<li>description: Grants permission to delete GuardDuty detectors</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletefilter"><a aria-hidden="true" class="anchor-heading" href="#deletefilter"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteFilter</h3>
<ul>
<li>description: Grants permission to delete GuardDuty filters</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "filter": {
        "resource_type": "filter",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteipset"><a aria-hidden="true" class="anchor-heading" href="#deleteipset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteIPSet</h3>
<ul>
<li>description: Grants permission to delete GuardDuty IPSets</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "ipset": {
        "resource_type": "ipset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteinvitations"><a aria-hidden="true" class="anchor-heading" href="#deleteinvitations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteInvitations</h3>
<ul>
<li>description: Grants permission to delete invitations to become a GuardDuty member account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletemembers"><a aria-hidden="true" class="anchor-heading" href="#deletemembers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteMembers</h3>
<ul>
<li>description: Grants permission to delete GuardDuty member accounts</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletepublishingdestination"><a aria-hidden="true" class="anchor-heading" href="#deletepublishingdestination"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeletePublishingDestination</h3>
<ul>
<li>description: Grants permission to delete a publishing destination</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "publishingDestination": {
        "resource_type": "publishingDestination",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletethreatintelset"><a aria-hidden="true" class="anchor-heading" href="#deletethreatintelset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteThreatIntelSet</h3>
<ul>
<li>description: Grants permission to delete GuardDuty ThreatIntelSets</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "threatintelset": {
        "resource_type": "threatintelset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeorganizationconfiguration"><a aria-hidden="true" class="anchor-heading" href="#describeorganizationconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeOrganizationConfiguration</h3>
<ul>
<li>description: Grants permission to retrieve details about the delegated administrator associated with a GuardDuty detector</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describepublishingdestination"><a aria-hidden="true" class="anchor-heading" href="#describepublishingdestination"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribePublishingDestination</h3>
<ul>
<li>description: Grants permission to retrieve details about a publishing destination</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "publishingDestination": {
        "resource_type": "publishingDestination",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disableorganizationadminaccount"><a aria-hidden="true" class="anchor-heading" href="#disableorganizationadminaccount"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisableOrganizationAdminAccount</h3>
<ul>
<li>description: Grants permission to disable the organization delegated administrator for GuardDuty</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociatefrommasteraccount"><a aria-hidden="true" class="anchor-heading" href="#disassociatefrommasteraccount"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateFromMasterAccount</h3>
<ul>
<li>description: Grants permission to disassociate a GuardDuty member account from its GuardDuty master account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociatemembers"><a aria-hidden="true" class="anchor-heading" href="#disassociatemembers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateMembers</h3>
<ul>
<li>description: Grants permission to disassociate GuardDuty member accounts from their master GuardDuty account</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="enableorganizationadminaccount"><a aria-hidden="true" class="anchor-heading" href="#enableorganizationadminaccount"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>EnableOrganizationAdminAccount</h3>
<ul>
<li>description: Grants permission to enable an organization delegated administrator for GuardDuty</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdetector"><a aria-hidden="true" class="anchor-heading" href="#getdetector"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDetector</h3>
<ul>
<li>description: Grants permission to retrieve GuardDuty detectors</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getfilter"><a aria-hidden="true" class="anchor-heading" href="#getfilter"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetFilter</h3>
<ul>
<li>description: Grants permission to retrieve GuardDuty filters</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "filter": {
        "resource_type": "filter",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getfindings"><a aria-hidden="true" class="anchor-heading" href="#getfindings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetFindings</h3>
<ul>
<li>description: Grants permission to retrieve GuardDuty findings</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getfindingsstatistics"><a aria-hidden="true" class="anchor-heading" href="#getfindingsstatistics"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetFindingsStatistics</h3>
<ul>
<li>description: Grants permission to retrieve a list of GuardDuty finding statistics</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getipset"><a aria-hidden="true" class="anchor-heading" href="#getipset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetIPSet</h3>
<ul>
<li>description: Grants permsission to retrieve GuardDuty IPSets</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "ipset": {
        "resource_type": "ipset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getinvitationscount"><a aria-hidden="true" class="anchor-heading" href="#getinvitationscount"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetInvitationsCount</h3>
<ul>
<li>description: Grants permission to retrieve the count of all GuardDuty invitations sent to a specified account, which does not include the accepted invitation</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmasteraccount"><a aria-hidden="true" class="anchor-heading" href="#getmasteraccount"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetMasterAccount</h3>
<ul>
<li>description: Grants permission to retrieve details of the GuardDuty master account associated with a member account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getmembers"><a aria-hidden="true" class="anchor-heading" href="#getmembers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetMembers</h3>
<ul>
<li>description: Grants permission to retrieve the member accounts associated with a master account</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getthreatintelset"><a aria-hidden="true" class="anchor-heading" href="#getthreatintelset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetThreatIntelSet</h3>
<ul>
<li>description: Grants permission to retrieve GuardDuty ThreatIntelSets</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "threatintelset": {
        "resource_type": "threatintelset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="invitemembers"><a aria-hidden="true" class="anchor-heading" href="#invitemembers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>InviteMembers</h3>
<ul>
<li>description: Grants permission to invite other AWS accounts to enable GuardDuty and become GuardDuty member accounts</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdetectors"><a aria-hidden="true" class="anchor-heading" href="#listdetectors"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDetectors</h3>
<ul>
<li>description: Grants permission to retrieve a list of GuardDuty detectors</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listfilters"><a aria-hidden="true" class="anchor-heading" href="#listfilters"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListFilters</h3>
<ul>
<li>description: Grants permission to retrieve a list of GuardDuty filters</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listfindings"><a aria-hidden="true" class="anchor-heading" href="#listfindings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListFindings</h3>
<ul>
<li>description: Grants permission to retrieve a list of GuardDuty findings</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listipsets"><a aria-hidden="true" class="anchor-heading" href="#listipsets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListIPSets</h3>
<ul>
<li>description: Grants permission to retrieve a list of GuardDuty IPSets</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listinvitations"><a aria-hidden="true" class="anchor-heading" href="#listinvitations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListInvitations</h3>
<ul>
<li>description: Grants permission to retrieve a lists of all of the GuardDuty membership invitations that were sent to an AWS account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listmembers"><a aria-hidden="true" class="anchor-heading" href="#listmembers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListMembers</h3>
<ul>
<li>description: Grants permission to retrierve a lsit of GuardDuty member accounts associated with a master account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listorganizationadminaccounts"><a aria-hidden="true" class="anchor-heading" href="#listorganizationadminaccounts"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListOrganizationAdminAccounts</h3>
<ul>
<li>description: Grants permission to list details about the organization delegated administrator for GuardDuty</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listpublishingdestinations"><a aria-hidden="true" class="anchor-heading" href="#listpublishingdestinations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPublishingDestinations</h3>
<ul>
<li>description: Grants permission to retrieve a list of publishing destinations</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Grants permission to retrieve a list of tags associated with a GuardDuty resource</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "filter": {
        "resource_type": "filter",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "ipset": {
        "resource_type": "ipset",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "threatintelset": {
        "resource_type": "threatintelset",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listthreatintelsets"><a aria-hidden="true" class="anchor-heading" href="#listthreatintelsets"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListThreatIntelSets</h3>
<ul>
<li>description: Grants permission to retrieve a list of GuardDuty ThreatIntelSets</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startmonitoringmembers"><a aria-hidden="true" class="anchor-heading" href="#startmonitoringmembers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartMonitoringMembers</h3>
<ul>
<li>description: Grants permission to a GuardDuty administrator account to monitor findings from GuardDuty member accounts</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopmonitoringmembers"><a aria-hidden="true" class="anchor-heading" href="#stopmonitoringmembers"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopMonitoringMembers</h3>
<ul>
<li>description: Grants permission to disable monitoring findings from member accounts</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Grants permission to add tags to a GuardDuty resource</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "filter": {
        "resource_type": "filter",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "ipset": {
        "resource_type": "ipset",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "threatintelset": {
        "resource_type": "threatintelset",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="unarchivefindings"><a aria-hidden="true" class="anchor-heading" href="#unarchivefindings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UnarchiveFindings</h3>
<ul>
<li>description: Grants permission to unarchive GuardDuty findings</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Grants permission to remove tags from a GuardDuty resource</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "filter": {
        "resource_type": "filter",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "ipset": {
        "resource_type": "ipset",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "threatintelset": {
        "resource_type": "threatintelset",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatedetector"><a aria-hidden="true" class="anchor-heading" href="#updatedetector"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateDetector</h3>
<ul>
<li>description: Grants permission to update GuardDuty detectors</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatefilter"><a aria-hidden="true" class="anchor-heading" href="#updatefilter"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateFilter</h3>
<ul>
<li>description: Grants permission to updates GuardDuty filters</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "filter": {
        "resource_type": "filter",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatefindingsfeedback"><a aria-hidden="true" class="anchor-heading" href="#updatefindingsfeedback"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateFindingsFeedback</h3>
<ul>
<li>description: Grants permission to update findings feedback to mark GuardDuty findings as useful or not useful</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateipset"><a aria-hidden="true" class="anchor-heading" href="#updateipset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateIPSet</h3>
<ul>
<li>description: Grants permission to update GuardDuty IPSets</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "ipset": {
        "resource_type": "ipset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateorganizationconfiguration"><a aria-hidden="true" class="anchor-heading" href="#updateorganizationconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateOrganizationConfiguration</h3>
<ul>
<li>description: Grants permission to update the delegated administrator configuration associated with a GuardDuty detector</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatepublishingdestination"><a aria-hidden="true" class="anchor-heading" href="#updatepublishingdestination"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdatePublishingDestination</h3>
<ul>
<li>description: Grants permission to update a publishing destination</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "s3:GetObject",
            "s3:ListBucket"
        ]
    },
    "publishingDestination": {
        "resource_type": "publishingDestination",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatethreatintelset"><a aria-hidden="true" class="anchor-heading" href="#updatethreatintelset"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateThreatIntelSet</h3>
<ul>
<li>description: Grants permission to updates the GuardDuty ThreatIntelSets</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "detector": {
        "resource_type": "detector",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "threatintelset": {
        "resource_type": "threatintelset",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-GuardDuty"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Route 53 Resolver.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Route 53 Resolver - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Route 53 Resolver.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Route 53 Resolver.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Route 53 Resolver.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Route 53 Resolver - undefined" />
  <meta name="twitter:title" content="Route 53 Resolver - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Route 53 Resolver</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Route 53 Resolver">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="route-53-resolver"><a aria-hidden="true" class="anchor-heading" href="#route-53-resolver"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Route 53 Resolver</h1>
<ul>
<li>prefix: route53resolver</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="associateresolverendpointipaddress"><a aria-hidden="true" class="anchor-heading" href="#associateresolverendpointipaddress"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateResolverEndpointIpAddress</h3>
<ul>
<li>description: Grants permission to associate a specified IP address with a Resolver endpoint. This is an IP address that DNS queries pass through on the way to your network (outbound) or your VPCs (inbound)</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "resolver-endpoint": {
        "resource_type": "resolver-endpoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="associateresolverquerylogconfig"><a aria-hidden="true" class="anchor-heading" href="#associateresolverquerylogconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateResolverQueryLogConfig</h3>
<ul>
<li>description: Grants permission to associate an Amazon VPC with a specified query logging configuration</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "resolver-query-log-config": {
        "resource_type": "resolver-query-log-config",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="associateresolverrule"><a aria-hidden="true" class="anchor-heading" href="#associateresolverrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>AssociateResolverRule</h3>
<ul>
<li>description: Grants permission to associate a specified Resolver rule with a specified VPC</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "resolver-rule": {
        "resource_type": "resolver-rule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createresolverendpoint"><a aria-hidden="true" class="anchor-heading" href="#createresolverendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateResolverEndpoint</h3>
<ul>
<li>description: Grants permission to create a Resolver endpoint. There are two types of Resolver endpoints, inbound and outbound</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "resolver-endpoint": {
        "resource_type": "resolver-endpoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createresolverquerylogconfig"><a aria-hidden="true" class="anchor-heading" href="#createresolverquerylogconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateResolverQueryLogConfig</h3>
<ul>
<li>description: Grants permission to create a Resolver query logging configuration, which defines where you want Resolver to save DNS query logs that originate in your VPCs</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "resolver-query-log-config": {
        "resource_type": "resolver-query-log-config",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createresolverrule"><a aria-hidden="true" class="anchor-heading" href="#createresolverrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateResolverRule</h3>
<ul>
<li>description: For DNS queries that originate in your VPC, grants permission to define how to route the queries out of the VPC</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "resolver-rule": {
        "resource_type": "resolver-rule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteresolverendpoint"><a aria-hidden="true" class="anchor-heading" href="#deleteresolverendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteResolverEndpoint</h3>
<ul>
<li>description: Grants permission to delete a Resolver endpoint. The effect of deleting a Resolver endpoint depends on whether it's an inbound or an outbound endpoint</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "resolver-endpoint": {
        "resource_type": "resolver-endpoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteresolverquerylogconfig"><a aria-hidden="true" class="anchor-heading" href="#deleteresolverquerylogconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteResolverQueryLogConfig</h3>
<ul>
<li>description: Grants permission to delete a Resolver query logging configuration</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "resolver-query-log-config": {
        "resource_type": "resolver-query-log-config",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteresolverrule"><a aria-hidden="true" class="anchor-heading" href="#deleteresolverrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteResolverRule</h3>
<ul>
<li>description: Grants permission to delete a Resolver rule</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "resolver-rule": {
        "resource_type": "resolver-rule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociateresolverendpointipaddress"><a aria-hidden="true" class="anchor-heading" href="#disassociateresolverendpointipaddress"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateResolverEndpointIpAddress</h3>
<ul>
<li>description: Grants permission to remove a specified IP address from a Resolver endpoint. This is an IP address that DNS queries pass through on the way to your network (outbound) or your VPCs (inbound)</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "resolver-endpoint": {
        "resource_type": "resolver-endpoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociateresolverquerylogconfig"><a aria-hidden="true" class="anchor-heading" href="#disassociateresolverquerylogconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateResolverQueryLogConfig</h3>
<ul>
<li>description: Grants permission to remove the association between a specified Resolver query logging configuration and a specified VPC</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "resolver-query-log-config": {
        "resource_type": "resolver-query-log-config",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="disassociateresolverrule"><a aria-hidden="true" class="anchor-heading" href="#disassociateresolverrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DisassociateResolverRule</h3>
<ul>
<li>description: Grants permission to remove the association between a specified Resolver rule and a specified VPC</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "resolver-rule": {
        "resource_type": "resolver-rule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getresolverendpoint"><a aria-hidden="true" class="anchor-heading" href="#getresolverendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetResolverEndpoint</h3>
<ul>
<li>description: Grants permission to get information about a specified Resolver endpoint, such as whether it's an inbound or an outbound endpoint, and the IP addresses in your VPC that DNS queries are forwarded to on the way into or out of your VPC</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "resolver-endpoint": {
        "resource_type": "resolver-endpoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getresolverquerylogconfig"><a aria-hidden="true" class="anchor-heading" href="#getresolverquerylogconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetResolverQueryLogConfig</h3>
<ul>
<li>description: Grants permission to get information about a specified Resolver query logging configuration, such as the number of VPCs that the configuration is logging queries for and the location that logs are sent to</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "resolver-query-log-config": {
        "resource_type": "resolver-query-log-config",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getresolverquerylogconfigassociation"><a aria-hidden="true" class="anchor-heading" href="#getresolverquerylogconfigassociation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetResolverQueryLogConfigAssociation</h3>
<ul>
<li>description: Grants permission to get information about a specified association between a Resolver query logging configuration and an Amazon VPC. When you associate a VPC with a query logging configuration, Resolver logs DNS queries that originate in that VPC</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "resolver-query-log-config": {
        "resource_type": "resolver-query-log-config",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getresolverquerylogconfigpolicy"><a aria-hidden="true" class="anchor-heading" href="#getresolverquerylogconfigpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetResolverQueryLogConfigPolicy</h3>
<ul>
<li>description: Grants permission to get information about a specified Resolver query logging policy, which specifies the Resolver query logging operations and resources that you want to allow another AWS account to use</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "resolver-query-log-config": {
        "resource_type": "resolver-query-log-config",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getresolverrule"><a aria-hidden="true" class="anchor-heading" href="#getresolverrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetResolverRule</h3>
<ul>
<li>description: Grants permission to get information about a specified Resolver rule, such as the domain name that the rule forwards DNS queries for and the IP address that queries are forwarded to.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "resolver-rule": {
        "resource_type": "resolver-rule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getresolverruleassociation"><a aria-hidden="true" class="anchor-heading" href="#getresolverruleassociation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetResolverRuleAssociation</h3>
<ul>
<li>description: Grants permission to get information about an association between a specified Resolver rule and a VPC</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "resolver-rule": {
        "resource_type": "resolver-rule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getresolverrulepolicy"><a aria-hidden="true" class="anchor-heading" href="#getresolverrulepolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetResolverRulePolicy</h3>
<ul>
<li>description: Grants permission to get information about a Resolver rule policy, which specifies the Resolver operations and resources that you want to allow another AWS account to use</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "resolver-rule": {
        "resource_type": "resolver-rule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listresolverendpointipaddresses"><a aria-hidden="true" class="anchor-heading" href="#listresolverendpointipaddresses"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListResolverEndpointIpAddresses</h3>
<ul>
<li>description: For a specified Resolver endpoint, grants permission to list the IP addresses that DNS queries pass through on the way to your network (outbound) or your VPCs (inbound)</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "resolver-endpoint": {
        "resource_type": "resolver-endpoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listresolverendpoints"><a aria-hidden="true" class="anchor-heading" href="#listresolverendpoints"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListResolverEndpoints</h3>
<ul>
<li>description: Grants permission to list all the Resolver endpoints that were created using the current AWS account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listresolverquerylogconfigassociations"><a aria-hidden="true" class="anchor-heading" href="#listresolverquerylogconfigassociations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListResolverQueryLogConfigAssociations</h3>
<ul>
<li>description: Grants permission to list information about associations between Amazon VPCs and query logging configurations</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "resolver-query-log-config": {
        "resource_type": "resolver-query-log-config",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listresolverquerylogconfigs"><a aria-hidden="true" class="anchor-heading" href="#listresolverquerylogconfigs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListResolverQueryLogConfigs</h3>
<ul>
<li>description: Grants permission to list information about the specified query logging configurations, which define where you want Resolver to save DNS query logs and specify the VPCs that you want to log queries for</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "resolver-query-log-config": {
        "resource_type": "resolver-query-log-config",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listresolverruleassociations"><a aria-hidden="true" class="anchor-heading" href="#listresolverruleassociations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListResolverRuleAssociations</h3>
<ul>
<li>description: Grants permission to list the associations that were created between Resolver rules and VPCs using the current AWS account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listresolverrules"><a aria-hidden="true" class="anchor-heading" href="#listresolverrules"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListResolverRules</h3>
<ul>
<li>description: Grants permission to list the Resolver rules that were created using the current AWS account</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Grants permission to list the tags that you associated with the specified resource</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "resolver-endpoint": {
        "resource_type": "resolver-endpoint",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "resolver-rule": {
        "resource_type": "resolver-rule",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putresolverquerylogconfigpolicy"><a aria-hidden="true" class="anchor-heading" href="#putresolverquerylogconfigpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutResolverQueryLogConfigPolicy</h3>
<ul>
<li>description: Grants permission to specify an AWS account that you want to share a query logging configuration with, the query logging configuration that you want to share, and the operations that you want the account to be able to perform on the configuration</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "resolver-query-log-config": {
        "resource_type": "resolver-query-log-config",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putresolverrulepolicy"><a aria-hidden="true" class="anchor-heading" href="#putresolverrulepolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutResolverRulePolicy</h3>
<ul>
<li>description: Grants permission to specify an AWS account that you want to share rules with, the Resolver rules that you want to share, and the operations that you want the account to be able to perform on those rules</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "resolver-rule": {
        "resource_type": "resolver-rule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Grants permission to add one or more tags to a specified resource</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "resolver-endpoint": {
        "resource_type": "resolver-endpoint",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "resolver-rule": {
        "resource_type": "resolver-rule",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Grants permission to remove one or more tags from a specified resource</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "resolver-endpoint": {
        "resource_type": "resolver-endpoint",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "resolver-rule": {
        "resource_type": "resolver-rule",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateresolverendpoint"><a aria-hidden="true" class="anchor-heading" href="#updateresolverendpoint"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateResolverEndpoint</h3>
<ul>
<li>description: Grants permission to update selected settings for an inbound or an outbound Resolver endpoint</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "resolver-endpoint": {
        "resource_type": "resolver-endpoint",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateresolverrule"><a aria-hidden="true" class="anchor-heading" href="#updateresolverrule"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateResolverRule</h3>
<ul>
<li>description: Grants permission to update settings for a specified Resolver rule</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "resolver-rule": {
        "resource_type": "resolver-rule",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Route 53 Resolver"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-CloudFront.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>CloudFront - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-CloudFront.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-CloudFront.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-CloudFront.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="CloudFront - undefined" />
  <meta name="twitter:title" content="CloudFront - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">CloudFront</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="CloudFront">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="cloudfront"><a aria-hidden="true" class="anchor-heading" href="#cloudfront"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CloudFront</h1>
<ul>
<li>prefix: cloudfront</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="createcachepolicy"><a aria-hidden="true" class="anchor-heading" href="#createcachepolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateCachePolicy</h3>
<ul>
<li>description: This action adds a new cache policy to CloudFront.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createcloudfrontoriginaccessidentity"><a aria-hidden="true" class="anchor-heading" href="#createcloudfrontoriginaccessidentity"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateCloudFrontOriginAccessIdentity</h3>
<ul>
<li>description: This action creates a new CloudFront origin access identity.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "origin-access-identity": {
        "resource_type": "origin-access-identity",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdistribution"><a aria-hidden="true" class="anchor-heading" href="#createdistribution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDistribution</h3>
<ul>
<li>description: This action creates a new web distribution.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "distribution": {
        "resource_type": "distribution",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createdistributionwithtags"><a aria-hidden="true" class="anchor-heading" href="#createdistributionwithtags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateDistributionWithTags</h3>
<ul>
<li>description: This action creates a new web distribution with tags.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "distribution": {
        "resource_type": "distribution",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createfieldlevelencryptionconfig"><a aria-hidden="true" class="anchor-heading" href="#createfieldlevelencryptionconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateFieldLevelEncryptionConfig</h3>
<ul>
<li>description: This action creates a new field-level encryption configuration.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createfieldlevelencryptionprofile"><a aria-hidden="true" class="anchor-heading" href="#createfieldlevelencryptionprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateFieldLevelEncryptionProfile</h3>
<ul>
<li>description: This action creates a field-level encryption profile.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createinvalidation"><a aria-hidden="true" class="anchor-heading" href="#createinvalidation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateInvalidation</h3>
<ul>
<li>description: This action creates a new invalidation batch request.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "distribution": {
        "resource_type": "distribution",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createoriginrequestpolicy"><a aria-hidden="true" class="anchor-heading" href="#createoriginrequestpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateOriginRequestPolicy</h3>
<ul>
<li>description: This action adds a new origin request policy to CloudFront.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createpublickey"><a aria-hidden="true" class="anchor-heading" href="#createpublickey"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreatePublicKey</h3>
<ul>
<li>description: This action adds a new public key to CloudFront.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createstreamingdistribution"><a aria-hidden="true" class="anchor-heading" href="#createstreamingdistribution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateStreamingDistribution</h3>
<ul>
<li>description: This action creates a new RTMP distribution.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "streaming-distribution": {
        "resource_type": "streaming-distribution",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createstreamingdistributionwithtags"><a aria-hidden="true" class="anchor-heading" href="#createstreamingdistributionwithtags"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateStreamingDistributionWithTags</h3>
<ul>
<li>description: This action creates a new RTMP distribution with tags.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "streaming-distribution": {
        "resource_type": "streaming-distribution",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletecachepolicy"><a aria-hidden="true" class="anchor-heading" href="#deletecachepolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteCachePolicy</h3>
<ul>
<li>description: This action deletes a cache policy.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletecloudfrontoriginaccessidentity"><a aria-hidden="true" class="anchor-heading" href="#deletecloudfrontoriginaccessidentity"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteCloudFrontOriginAccessIdentity</h3>
<ul>
<li>description: This action deletes a CloudFront origin access identity.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "origin-access-identity": {
        "resource_type": "origin-access-identity",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletedistribution"><a aria-hidden="true" class="anchor-heading" href="#deletedistribution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteDistribution</h3>
<ul>
<li>description: This action deletes a web distribution.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "distribution": {
        "resource_type": "distribution",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletefieldlevelencryptionconfig"><a aria-hidden="true" class="anchor-heading" href="#deletefieldlevelencryptionconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteFieldLevelEncryptionConfig</h3>
<ul>
<li>description: This action deletes a field-level encryption configuration.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletefieldlevelencryptionprofile"><a aria-hidden="true" class="anchor-heading" href="#deletefieldlevelencryptionprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteFieldLevelEncryptionProfile</h3>
<ul>
<li>description: This action deletes a field-level encryption profile.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteoriginrequestpolicy"><a aria-hidden="true" class="anchor-heading" href="#deleteoriginrequestpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteOriginRequestPolicy</h3>
<ul>
<li>description: This action deletes an origin request policy.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletepublickey"><a aria-hidden="true" class="anchor-heading" href="#deletepublickey"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeletePublicKey</h3>
<ul>
<li>description: This action deletes a public key from CloudFront.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletestreamingdistribution"><a aria-hidden="true" class="anchor-heading" href="#deletestreamingdistribution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteStreamingDistribution</h3>
<ul>
<li>description: This action deletes an RTMP distribution.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "streaming-distribution": {
        "resource_type": "streaming-distribution",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcachepolicy"><a aria-hidden="true" class="anchor-heading" href="#getcachepolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCachePolicy</h3>
<ul>
<li>description: Get the cache policy</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcachepolicyconfig"><a aria-hidden="true" class="anchor-heading" href="#getcachepolicyconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCachePolicyConfig</h3>
<ul>
<li>description: Get the cache policy configuration</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcloudfrontoriginaccessidentity"><a aria-hidden="true" class="anchor-heading" href="#getcloudfrontoriginaccessidentity"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCloudFrontOriginAccessIdentity</h3>
<ul>
<li>description: Get the information about a CloudFront origin access identity.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "origin-access-identity": {
        "resource_type": "origin-access-identity",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcloudfrontoriginaccessidentityconfig"><a aria-hidden="true" class="anchor-heading" href="#getcloudfrontoriginaccessidentityconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCloudFrontOriginAccessIdentityConfig</h3>
<ul>
<li>description: Get the configuration information about a Cloudfront origin access identity.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "origin-access-identity": {
        "resource_type": "origin-access-identity",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdistribution"><a aria-hidden="true" class="anchor-heading" href="#getdistribution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDistribution</h3>
<ul>
<li>description: Get the information about a web distribution.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "distribution": {
        "resource_type": "distribution",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdistributionconfig"><a aria-hidden="true" class="anchor-heading" href="#getdistributionconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDistributionConfig</h3>
<ul>
<li>description: Get the configuration information about a distribution.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "distribution": {
        "resource_type": "distribution",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getfieldlevelencryption"><a aria-hidden="true" class="anchor-heading" href="#getfieldlevelencryption"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetFieldLevelEncryption</h3>
<ul>
<li>description: Get the field-level encryption configuration information.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getfieldlevelencryptionconfig"><a aria-hidden="true" class="anchor-heading" href="#getfieldlevelencryptionconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetFieldLevelEncryptionConfig</h3>
<ul>
<li>description: Get the field-level encryption configuration information.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getfieldlevelencryptionprofile"><a aria-hidden="true" class="anchor-heading" href="#getfieldlevelencryptionprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetFieldLevelEncryptionProfile</h3>
<ul>
<li>description: Get the field-level encryption configuration information.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getfieldlevelencryptionprofileconfig"><a aria-hidden="true" class="anchor-heading" href="#getfieldlevelencryptionprofileconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetFieldLevelEncryptionProfileConfig</h3>
<ul>
<li>description: Get the field-level encryption profile configuration information.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getinvalidation"><a aria-hidden="true" class="anchor-heading" href="#getinvalidation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetInvalidation</h3>
<ul>
<li>description: Get the information about an invalidation.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "distribution": {
        "resource_type": "distribution",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getoriginrequestpolicy"><a aria-hidden="true" class="anchor-heading" href="#getoriginrequestpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetOriginRequestPolicy</h3>
<ul>
<li>description: Get the origin request policy</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getoriginrequestpolicyconfig"><a aria-hidden="true" class="anchor-heading" href="#getoriginrequestpolicyconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetOriginRequestPolicyConfig</h3>
<ul>
<li>description: Get the origin request policy configuration</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getpublickey"><a aria-hidden="true" class="anchor-heading" href="#getpublickey"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetPublicKey</h3>
<ul>
<li>description: Get the public key information.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getpublickeyconfig"><a aria-hidden="true" class="anchor-heading" href="#getpublickeyconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetPublicKeyConfig</h3>
<ul>
<li>description: Get the public key configuration information.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getstreamingdistribution"><a aria-hidden="true" class="anchor-heading" href="#getstreamingdistribution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetStreamingDistribution</h3>
<ul>
<li>description: Get the information about an RTMP distribution.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "streaming-distribution": {
        "resource_type": "streaming-distribution",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getstreamingdistributionconfig"><a aria-hidden="true" class="anchor-heading" href="#getstreamingdistributionconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetStreamingDistributionConfig</h3>
<ul>
<li>description: Get the configuration information about a streaming distribution.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "streaming-distribution": {
        "resource_type": "streaming-distribution",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listcachepolicies"><a aria-hidden="true" class="anchor-heading" href="#listcachepolicies"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListCachePolicies</h3>
<ul>
<li>description: List all cache policies that have been created in CloudFront for this account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listcloudfrontoriginaccessidentities"><a aria-hidden="true" class="anchor-heading" href="#listcloudfrontoriginaccessidentities"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListCloudFrontOriginAccessIdentities</h3>
<ul>
<li>description: List your CloudFront origin access identities.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdistributions"><a aria-hidden="true" class="anchor-heading" href="#listdistributions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDistributions</h3>
<ul>
<li>description: List the distributions associated with your AWS account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdistributionsbycachepolicyid"><a aria-hidden="true" class="anchor-heading" href="#listdistributionsbycachepolicyid"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDistributionsByCachePolicyId</h3>
<ul>
<li>description: List distribution IDs for distributions that have a cache behavior that's associated with the specified cache policy.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdistributionsbyoriginrequestpolicyid"><a aria-hidden="true" class="anchor-heading" href="#listdistributionsbyoriginrequestpolicyid"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDistributionsByOriginRequestPolicyId</h3>
<ul>
<li>description: List distribution IDs for distributions that have a cache behavior that's associated with the specified origin request policy.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listdistributionsbywebaclid"><a aria-hidden="true" class="anchor-heading" href="#listdistributionsbywebaclid"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListDistributionsByWebACLId</h3>
<ul>
<li>description: List the distributions associated with your AWS account with given AWS WAF web ACL.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listfieldlevelencryptionconfigs"><a aria-hidden="true" class="anchor-heading" href="#listfieldlevelencryptionconfigs"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListFieldLevelEncryptionConfigs</h3>
<ul>
<li>description: List all field-level encryption configurations that have been created in CloudFront for this account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listfieldlevelencryptionprofiles"><a aria-hidden="true" class="anchor-heading" href="#listfieldlevelencryptionprofiles"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListFieldLevelEncryptionProfiles</h3>
<ul>
<li>description: List all field-level encryption profiles that have been created in CloudFront for this account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listinvalidations"><a aria-hidden="true" class="anchor-heading" href="#listinvalidations"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListInvalidations</h3>
<ul>
<li>description: List your invalidation batches.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "distribution": {
        "resource_type": "distribution",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listoriginrequestpolicies"><a aria-hidden="true" class="anchor-heading" href="#listoriginrequestpolicies"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListOriginRequestPolicies</h3>
<ul>
<li>description: List all origin request policies that have been created in CloudFront for this account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listpublickeys"><a aria-hidden="true" class="anchor-heading" href="#listpublickeys"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListPublicKeys</h3>
<ul>
<li>description: List all public keys that have been added to CloudFront for this account.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="liststreamingdistributions"><a aria-hidden="true" class="anchor-heading" href="#liststreamingdistributions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListStreamingDistributions</h3>
<ul>
<li>description: List your RTMP distributions.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: List tags for a CloudFront resource.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "distribution": {
        "resource_type": "distribution",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "streaming-distribution": {
        "resource_type": "streaming-distribution",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Add tags to a CloudFront resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "distribution": {
        "resource_type": "distribution",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "streaming-distribution": {
        "resource_type": "streaming-distribution",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Remove tags from a CloudFront resource.</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "distribution": {
        "resource_type": "distribution",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "streaming-distribution": {
        "resource_type": "streaming-distribution",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatecachepolicy"><a aria-hidden="true" class="anchor-heading" href="#updatecachepolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateCachePolicy</h3>
<ul>
<li>description: This action updates a cache policy.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatecloudfrontoriginaccessidentity"><a aria-hidden="true" class="anchor-heading" href="#updatecloudfrontoriginaccessidentity"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateCloudFrontOriginAccessIdentity</h3>
<ul>
<li>description: This action sets the configuration for a CloudFront origin access identity.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "origin-access-identity": {
        "resource_type": "origin-access-identity",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatedistribution"><a aria-hidden="true" class="anchor-heading" href="#updatedistribution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateDistribution</h3>
<ul>
<li>description: This action updates the configuration for a web distribution.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "distribution": {
        "resource_type": "distribution",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatefieldlevelencryptionconfig"><a aria-hidden="true" class="anchor-heading" href="#updatefieldlevelencryptionconfig"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateFieldLevelEncryptionConfig</h3>
<ul>
<li>description: This action updates a field-level encryption configuration.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatefieldlevelencryptionprofile"><a aria-hidden="true" class="anchor-heading" href="#updatefieldlevelencryptionprofile"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateFieldLevelEncryptionProfile</h3>
<ul>
<li>description: This action updates a field-level encryption profile.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updateoriginrequestpolicy"><a aria-hidden="true" class="anchor-heading" href="#updateoriginrequestpolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateOriginRequestPolicy</h3>
<ul>
<li>description: This action updates an origin request policy.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatepublickey"><a aria-hidden="true" class="anchor-heading" href="#updatepublickey"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdatePublicKey</h3>
<ul>
<li>description: This action updates public key information.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="updatestreamingdistribution"><a aria-hidden="true" class="anchor-heading" href="#updatestreamingdistribution"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UpdateStreamingDistribution</h3>
<ul>
<li>description: This action updates the configuration for an RTMP distribution.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "streaming-distribution": {
        "resource_type": "streaming-distribution",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-CloudFront"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Elastic Container Registry.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Elastic Container Registry - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Elastic Container Registry.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Elastic Container Registry.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Elastic Container Registry.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Elastic Container Registry - undefined" />
  <meta name="twitter:title" content="Elastic Container Registry - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Elastic Container Registry</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Elastic Container Registry">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="elastic-container-registry"><a aria-hidden="true" class="anchor-heading" href="#elastic-container-registry"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Elastic Container Registry</h1>
<ul>
<li>prefix: ecr</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="batchchecklayeravailability"><a aria-hidden="true" class="anchor-heading" href="#batchchecklayeravailability"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchCheckLayerAvailability</h3>
<ul>
<li>description: Grants permission to check the availability of multiple image layers in a specified registry and repository</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchdeleteimage"><a aria-hidden="true" class="anchor-heading" href="#batchdeleteimage"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchDeleteImage</h3>
<ul>
<li>description: Grants permission to delete a list of specified images within a specified repository</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="batchgetimage"><a aria-hidden="true" class="anchor-heading" href="#batchgetimage"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>BatchGetImage</h3>
<ul>
<li>description: Grants permission to get detailed information for specified images within a specified repository</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="completelayerupload"><a aria-hidden="true" class="anchor-heading" href="#completelayerupload"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CompleteLayerUpload</h3>
<ul>
<li>description: Grants permission to inform Amazon ECR that the image layer upload for a specified registry, repository name, and upload ID, has completed</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createrepository"><a aria-hidden="true" class="anchor-heading" href="#createrepository"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateRepository</h3>
<ul>
<li>description: Grants permission to create an image repository</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletelifecyclepolicy"><a aria-hidden="true" class="anchor-heading" href="#deletelifecyclepolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteLifecyclePolicy</h3>
<ul>
<li>description: Grants permission to delete the specified lifecycle policy</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleterepository"><a aria-hidden="true" class="anchor-heading" href="#deleterepository"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteRepository</h3>
<ul>
<li>description: Grants permission to delete an existing image repository</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleterepositorypolicy"><a aria-hidden="true" class="anchor-heading" href="#deleterepositorypolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteRepositoryPolicy</h3>
<ul>
<li>description: Grants permission to delete the repository policy from a specified repository</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeimagescanfindings"><a aria-hidden="true" class="anchor-heading" href="#describeimagescanfindings"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeImageScanFindings</h3>
<ul>
<li>description: Grants permission to describe the image scan findings for the specified image</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeimages"><a aria-hidden="true" class="anchor-heading" href="#describeimages"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeImages</h3>
<ul>
<li>description: Grants permission to get metadata about the images in a repository, including image size, image tags, and creation date</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describerepositories"><a aria-hidden="true" class="anchor-heading" href="#describerepositories"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeRepositories</h3>
<ul>
<li>description: Grants permission to describe image repositories in a registry</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getauthorizationtoken"><a aria-hidden="true" class="anchor-heading" href="#getauthorizationtoken"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetAuthorizationToken</h3>
<ul>
<li>description: Grants permission to retrieve a token that is valid for a specified registry for 12 hours</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getdownloadurlforlayer"><a aria-hidden="true" class="anchor-heading" href="#getdownloadurlforlayer"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetDownloadUrlForLayer</h3>
<ul>
<li>description: Grants permission to retrieve the download URL corresponding to an image layer</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getlifecyclepolicy"><a aria-hidden="true" class="anchor-heading" href="#getlifecyclepolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetLifecyclePolicy</h3>
<ul>
<li>description: Grants permission to retrieve the specified lifecycle policy</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getlifecyclepolicypreview"><a aria-hidden="true" class="anchor-heading" href="#getlifecyclepolicypreview"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetLifecyclePolicyPreview</h3>
<ul>
<li>description: Grants permission to retrieve the results of the specified lifecycle policy preview request</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getrepositorypolicy"><a aria-hidden="true" class="anchor-heading" href="#getrepositorypolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetRepositoryPolicy</h3>
<ul>
<li>description: Grants permission to retrieve the repository policy for a specified repository</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="initiatelayerupload"><a aria-hidden="true" class="anchor-heading" href="#initiatelayerupload"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>InitiateLayerUpload</h3>
<ul>
<li>description: Grants permission to notify Amazon ECR that you intend to upload an image layer</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listimages"><a aria-hidden="true" class="anchor-heading" href="#listimages"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListImages</h3>
<ul>
<li>description: Grants permission to list all the image IDs for a given repository</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listtagsforresource"><a aria-hidden="true" class="anchor-heading" href="#listtagsforresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListTagsForResource</h3>
<ul>
<li>description: Grants permission to list the tags for an Amazon ECR resource</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putimage"><a aria-hidden="true" class="anchor-heading" href="#putimage"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutImage</h3>
<ul>
<li>description: Grants permission to create or update the image manifest associated with an image</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putimagescanningconfiguration"><a aria-hidden="true" class="anchor-heading" href="#putimagescanningconfiguration"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutImageScanningConfiguration</h3>
<ul>
<li>description: Grants permission to update the image scanning configuration for a repository</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putimagetagmutability"><a aria-hidden="true" class="anchor-heading" href="#putimagetagmutability"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutImageTagMutability</h3>
<ul>
<li>description: Grants permission to update the image tag mutability settings for a repository</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="putlifecyclepolicy"><a aria-hidden="true" class="anchor-heading" href="#putlifecyclepolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>PutLifecyclePolicy</h3>
<ul>
<li>description: Grants permission to create or update a lifecycle policy</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="setrepositorypolicy"><a aria-hidden="true" class="anchor-heading" href="#setrepositorypolicy"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SetRepositoryPolicy</h3>
<ul>
<li>description: Grants permission to apply a repository policy on a specified repository to control access permissions</li>
<li>access level: Permissions management</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startimagescan"><a aria-hidden="true" class="anchor-heading" href="#startimagescan"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartImageScan</h3>
<ul>
<li>description: Grants permission to start an image scan</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startlifecyclepolicypreview"><a aria-hidden="true" class="anchor-heading" href="#startlifecyclepolicypreview"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartLifecyclePolicyPreview</h3>
<ul>
<li>description: Grants permission to start a preview of the specified lifecycle policy</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="tagresource"><a aria-hidden="true" class="anchor-heading" href="#tagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>TagResource</h3>
<ul>
<li>description: Grants permission to tag an Amazon ECR resource</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="untagresource"><a aria-hidden="true" class="anchor-heading" href="#untagresource"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UntagResource</h3>
<ul>
<li>description: Grants permission to untag an Amazon ECR resource</li>
<li>access level: Tagging</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="uploadlayerpart"><a aria-hidden="true" class="anchor-heading" href="#uploadlayerpart"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>UploadLayerPart</h3>
<ul>
<li>description: Grants permission to upload an image layer part to Amazon ECR</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "repository": {
        "resource_type": "repository",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Elastic Container Registry"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>


<|start_filename|>docs/notes/iam-Rekognition.html<|end_filename|>
<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
  
  <title>Rekognition - undefined</title>
  

  <link
    rel="shortcut icon"
    href="https://aws.dendron.so/favicon.ico"
    type="image/x-icon"
  />
  <link
    rel="stylesheet"
    href="https://aws.dendron.so/assets/css/just-the-docs-default.css"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/just-the-docs.js"
  ></script>
  <link
    rel="stylesheet"
    href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism.min.css"
  />
  <link
    rel="stylesheet"
    href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css"
    integrity="<KEY>"
    crossorigin="anonymous"
  />
  <script
    type="text/javascript"
    src="https://aws.dendron.so/assets/js/vendor/lunr.min.js"
  ></script>
  
  <meta name="viewport" content="width=device-width, initial-scale=1" />
   
  
<meta name="description" content="Personal knowledge space">
<meta name="author" content="">

<link rel="canonical" href="https://aws.dendron.so/notes/iam-Rekognition.html">

<meta property="og:type" content="article">
<meta property="og:url" content="https://aws.dendron.so/notes/iam-Rekognition.html">
<meta property="og:description" content="Personal knowledge space">
<meta property="og:image" content="https://aws.dendron.soundefined">

<meta name="twitter:card" content="summary">

<meta name="twitter:url" content="https://aws.dendron.so/notes/iam-Rekognition.html">
<meta name="twitter:description" content="Personal knowledge space">
<meta name="twitter:image" content="https://aws.dendron.soundefined">


  <meta property="og:title" content="Rekognition - undefined" />
  <meta name="twitter:title" content="Rekognition - undefined" />
  
</head>


<body>
    <svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
      <symbol id="svg-link" viewBox="0 0 24 24">
        <title>Link</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
          <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
        </svg>
      </symbol>
      <symbol id="svg-search" viewBox="0 0 24 24">
        <title>Search</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
          <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
        </svg>
      </symbol>
      <symbol id="svg-menu" viewBox="0 0 24 24">
        <title>Menu</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
          <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
        </svg>
      </symbol>
      <symbol id="svg-arrow-right" viewBox="0 0 24 24">
        <title>Expand</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
          <polyline points="9 18 15 12 9 6"></polyline>
        </svg>
      </symbol>
      <symbol id="svg-doc" viewBox="0 0 24 24">
        <title>Document</title>
        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
          <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
        </svg>
      </symbol>
    </svg>

    <div class="side-bar">
      <div class="site-header">
        <a href="https://aws.dendron.so" class="site-title lh-tight">
  

 </a>
        <a href="#" id="menu-button" class="site-button">
          <svg viewBox="0 0 24 24" class="icon"><use xlink:href="#svg-menu"></use></svg>
        </a>
      </div>

      <nav role="navigation" aria-label="Main" id="site-nav" class="site-nav">
      </nav>
      <footer class="site-footer">
        🌱 with 💕 using <a href="https://www.dendron.so/"> Dendron 🌲 </a>
      </footer>
    </div>
    <div class="main" id="top">
        <div id="main-header" class="main-header">
          
            <div class="search">
              <div class="search-input-wrap">
                <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search " aria-label="Search " autocomplete="off">
                <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
              </div>
              <div id="search-results" class="search-results"></div>
            </div>
          
          
    </div>
    <div id="main-content-wrap" class="main-content-wrap">
      
        
          <nav aria-label="Breadcrumb" class="breadcrumb-nav">
            <ol class="breadcrumb-nav-list"><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so">Home</a></li><li class="breadcrumb-nav-list-item"><a href="https://aws.dendron.so/notes/7ac589e9-18e6-402b-a01e-ca7c802d0ce1.html">IAM</a></li><li class="breadcrumb-nav-list-item">Rekognition</li></ol>
          </nav>
        
      
      <div id="main-content" class="main-content" role="main">

        
        

        <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css" integrity="<KEY>" crossorigin="anonymous">
        <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="<KEY>" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js" integrity="<KEY>" crossorigin="anonymous"></script>

        
        <div class="alert alert-primary" role="alert">
          This page was generated from content adapted from the following <a href="#" data-html="true" data-toggle="popover" title="Attributions">sources</a>
          </a>
        </div>

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({content: `
              <ul>
              
              <li> <a href="https://github.com/salesforce/policy_sentry" target="_blank"> Policy Sentry  </li>
              
              </ul>
            `})
          })
        </script>
        

        <script>
          $(function () {
            $('[data-toggle="popover"]').popover({html: true})
          })
        </script>

        

<div id="main" role="main">

  <article class="page" itemscope itemtype="https://schema.org/CreativeWork">
    <meta itemprop="headline" content="Rekognition">
    
    <meta itemprop="datePublished" content="1969-12-31T16:00:00+00:00">
    <meta itemprop="dateModified" content="1969-12-31T16:00:00+00:00">

    <div class="page__inner-wrap">

      

      <section class="page__content" itemprop="text">

        

        <h1 id="rekognition"><a aria-hidden="true" class="anchor-heading" href="#rekognition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Rekognition</h1>
<ul>
<li>prefix: rekognition</li>
</ul>
<h2 id="table-of-contents"><a aria-hidden="true" class="anchor-heading" href="#table-of-contents"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Table of Contents</h2>
<h2 id="privileges"><a aria-hidden="true" class="anchor-heading" href="#privileges"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>Privileges</h2>
<h3 id="comparefaces"><a aria-hidden="true" class="anchor-heading" href="#comparefaces"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CompareFaces</h3>
<ul>
<li>description: Compares a face in source input image with each face detected in the target input image.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createcollection"><a aria-hidden="true" class="anchor-heading" href="#createcollection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateCollection</h3>
<ul>
<li>description: Creates a collection in an AWS region. You can then add faces to the collection using the IndexFaces API.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "collection": {
        "resource_type": "collection",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createproject"><a aria-hidden="true" class="anchor-heading" href="#createproject"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateProject</h3>
<ul>
<li>description: Creates a new Amazon Rekognition Custom Labels project.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createprojectversion"><a aria-hidden="true" class="anchor-heading" href="#createprojectversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateProjectVersion</h3>
<ul>
<li>description: Creates a new version of a model and begins training.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "projectversion": {
        "resource_type": "projectversion",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="createstreamprocessor"><a aria-hidden="true" class="anchor-heading" href="#createstreamprocessor"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>CreateStreamProcessor</h3>
<ul>
<li>description: Creates an Amazon Rekognition stream processor that you can use to detect and recognize faces in a streaming video.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "collection": {
        "resource_type": "collection",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "streamprocessor": {
        "resource_type": "streamprocessor",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletecollection"><a aria-hidden="true" class="anchor-heading" href="#deletecollection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteCollection</h3>
<ul>
<li>description: Deletes the specified collection. Note that this operation removes all faces in the collection.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "collection": {
        "resource_type": "collection",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletefaces"><a aria-hidden="true" class="anchor-heading" href="#deletefaces"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteFaces</h3>
<ul>
<li>description: Deletes faces from a collection.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "collection": {
        "resource_type": "collection",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteproject"><a aria-hidden="true" class="anchor-heading" href="#deleteproject"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteProject</h3>
<ul>
<li>description: Deletes a project.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deleteprojectversion"><a aria-hidden="true" class="anchor-heading" href="#deleteprojectversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteProjectVersion</h3>
<ul>
<li>description: Deletes a model.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "projectversion": {
        "resource_type": "projectversion",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="deletestreamprocessor"><a aria-hidden="true" class="anchor-heading" href="#deletestreamprocessor"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DeleteStreamProcessor</h3>
<ul>
<li>description: Deletes the stream processor identified by Name.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "streamprocessor": {
        "resource_type": "streamprocessor",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describecollection"><a aria-hidden="true" class="anchor-heading" href="#describecollection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeCollection</h3>
<ul>
<li>description: Describes the specified collection.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "collection": {
        "resource_type": "collection",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeprojectversions"><a aria-hidden="true" class="anchor-heading" href="#describeprojectversions"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeProjectVersions</h3>
<ul>
<li>description: Lists and describes the model versions in an Amazon Rekognition Custom Labels project.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "project": {
        "resource_type": "project",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describeprojects"><a aria-hidden="true" class="anchor-heading" href="#describeprojects"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeProjects</h3>
<ul>
<li>description: Lists and gets information about your Amazon Rekognition Custom Labels projects.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="describestreamprocessor"><a aria-hidden="true" class="anchor-heading" href="#describestreamprocessor"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DescribeStreamProcessor</h3>
<ul>
<li>description: Provides information about a stream processor created by CreateStreamProcessor.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "streamprocessor": {
        "resource_type": "streamprocessor",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="detectcustomlabels"><a aria-hidden="true" class="anchor-heading" href="#detectcustomlabels"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DetectCustomLabels</h3>
<ul>
<li>description: Detects custom labels in a supplied image by using an Amazon Rekognition Custom Labels model version.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "projectversion": {
        "resource_type": "projectversion",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="detectfaces"><a aria-hidden="true" class="anchor-heading" href="#detectfaces"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DetectFaces</h3>
<ul>
<li>description: Detects human faces within an image (JPEG or PNG) provided as input.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="detectlabels"><a aria-hidden="true" class="anchor-heading" href="#detectlabels"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DetectLabels</h3>
<ul>
<li>description: Detects instances of real-world labels within an image (JPEG or PNG) provided as input.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="detectmoderationlabels"><a aria-hidden="true" class="anchor-heading" href="#detectmoderationlabels"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DetectModerationLabels</h3>
<ul>
<li>description: Detects moderation labels within input image.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="detectprotectiveequipment"><a aria-hidden="true" class="anchor-heading" href="#detectprotectiveequipment"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DetectProtectiveEquipment</h3>
<ul>
<li>description: Detects Protective Equipment in the input image.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="detecttext"><a aria-hidden="true" class="anchor-heading" href="#detecttext"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>DetectText</h3>
<ul>
<li>description: Detects text in the input image and converts it into machine-readable text.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcelebrityinfo"><a aria-hidden="true" class="anchor-heading" href="#getcelebrityinfo"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCelebrityInfo</h3>
<ul>
<li>description: Gets the name and additional information about a celebrity based on his or her Rekognition ID.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcelebrityrecognition"><a aria-hidden="true" class="anchor-heading" href="#getcelebrityrecognition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetCelebrityRecognition</h3>
<ul>
<li>description: Gets the celebrity recognition results for a Rekognition Video analysis started by StartCelebrityRecognition.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getcontentmoderation"><a aria-hidden="true" class="anchor-heading" href="#getcontentmoderation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetContentModeration</h3>
<ul>
<li>description: Gets the content moderation analysis results for a Rekognition Video analysis started by StartContentModeration.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getfacedetection"><a aria-hidden="true" class="anchor-heading" href="#getfacedetection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetFaceDetection</h3>
<ul>
<li>description: Gets face detection results for a Rekognition Video analysis started by StartFaceDetection.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getfacesearch"><a aria-hidden="true" class="anchor-heading" href="#getfacesearch"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetFaceSearch</h3>
<ul>
<li>description: Gets the face search results for Rekognition Video face search started by StartFaceSearch.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getlabeldetection"><a aria-hidden="true" class="anchor-heading" href="#getlabeldetection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetLabelDetection</h3>
<ul>
<li>description: Gets the label detection results of a Rekognition Video analysis started by StartLabelDetection.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getpersontracking"><a aria-hidden="true" class="anchor-heading" href="#getpersontracking"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetPersonTracking</h3>
<ul>
<li>description: Gets information about people detected within a video.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="getsegmentdetection"><a aria-hidden="true" class="anchor-heading" href="#getsegmentdetection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetSegmentDetection</h3>
<ul>
<li>description: Gets segment detection results for a Rekognition Video analysis started by StartSegmentDetection.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="gettextdetection"><a aria-hidden="true" class="anchor-heading" href="#gettextdetection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>GetTextDetection</h3>
<ul>
<li>description: Gets text detection results for a Rekognition Video analysis started by StartTextDetection.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="indexfaces"><a aria-hidden="true" class="anchor-heading" href="#indexfaces"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>IndexFaces</h3>
<ul>
<li>description: Detects faces in the input image and adds them to the specified collection.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "collection": {
        "resource_type": "collection",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listcollections"><a aria-hidden="true" class="anchor-heading" href="#listcollections"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListCollections</h3>
<ul>
<li>description: Returns a list of collection IDs in your account.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "collection": {
        "resource_type": "collection",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="listfaces"><a aria-hidden="true" class="anchor-heading" href="#listfaces"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListFaces</h3>
<ul>
<li>description: Returns metadata for faces in the specified collection.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "collection": {
        "resource_type": "collection",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="liststreamprocessors"><a aria-hidden="true" class="anchor-heading" href="#liststreamprocessors"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>ListStreamProcessors</h3>
<ul>
<li>description: Gets a list of stream processors that you have created with CreateStreamProcessor.</li>
<li>access level: List</li>
<li>resource types</li>
</ul>
<pre><code>{
    "streamprocessor": {
        "resource_type": "streamprocessor",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="recognizecelebrities"><a aria-hidden="true" class="anchor-heading" href="#recognizecelebrities"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>RecognizeCelebrities</h3>
<ul>
<li>description: Returns an array of celebrities recognized in the input image.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="searchfaces"><a aria-hidden="true" class="anchor-heading" href="#searchfaces"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SearchFaces</h3>
<ul>
<li>description: For a given input face ID, searches the specified collection for matching faces.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "collection": {
        "resource_type": "collection",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="searchfacesbyimage"><a aria-hidden="true" class="anchor-heading" href="#searchfacesbyimage"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>SearchFacesByImage</h3>
<ul>
<li>description: For a given input image, first detects the largest face in the image, and then searches the specified collection for matching faces.</li>
<li>access level: Read</li>
<li>resource types</li>
</ul>
<pre><code>{
    "collection": {
        "resource_type": "collection",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startcelebrityrecognition"><a aria-hidden="true" class="anchor-heading" href="#startcelebrityrecognition"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartCelebrityRecognition</h3>
<ul>
<li>description: Starts asynchronous recognition of celebrities in a video.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startcontentmoderation"><a aria-hidden="true" class="anchor-heading" href="#startcontentmoderation"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartContentModeration</h3>
<ul>
<li>description: Starts asynchronous detection of explicit or suggestive adult content in a video.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startfacedetection"><a aria-hidden="true" class="anchor-heading" href="#startfacedetection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartFaceDetection</h3>
<ul>
<li>description: Starts asynchronous detection of faces in a video.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startfacesearch"><a aria-hidden="true" class="anchor-heading" href="#startfacesearch"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartFaceSearch</h3>
<ul>
<li>description: Starts the asynchronous search for faces in a collection that match the faces of persons detected in a video.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "collection": {
        "resource_type": "collection",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startlabeldetection"><a aria-hidden="true" class="anchor-heading" href="#startlabeldetection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartLabelDetection</h3>
<ul>
<li>description: Starts asynchronous detection of labels in a video.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startpersontracking"><a aria-hidden="true" class="anchor-heading" href="#startpersontracking"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartPersonTracking</h3>
<ul>
<li>description: Starts the asynchronous tracking of persons in a video.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startprojectversion"><a aria-hidden="true" class="anchor-heading" href="#startprojectversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartProjectVersion</h3>
<ul>
<li>description: Starts the deployment of a model version.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "projectversion": {
        "resource_type": "projectversion",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startsegmentdetection"><a aria-hidden="true" class="anchor-heading" href="#startsegmentdetection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartSegmentDetection</h3>
<ul>
<li>description: Starts asynchronous detection of segments in a video.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="startstreamprocessor"><a aria-hidden="true" class="anchor-heading" href="#startstreamprocessor"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartStreamProcessor</h3>
<ul>
<li>description: Starts processing a stream processor.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "streamprocessor": {
        "resource_type": "streamprocessor",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="starttextdetection"><a aria-hidden="true" class="anchor-heading" href="#starttextdetection"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StartTextDetection</h3>
<ul>
<li>description: Starts asynchronous detection of text in a video.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopprojectversion"><a aria-hidden="true" class="anchor-heading" href="#stopprojectversion"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopProjectVersion</h3>
<ul>
<li>description: Stops a deployed model version.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "projectversion": {
        "resource_type": "projectversion",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre>
<h3 id="stopstreamprocessor"><a aria-hidden="true" class="anchor-heading" href="#stopstreamprocessor"><svg aria-hidden="true" viewBox="0 0 16 16"><use xlink:href="#svg-link"></use></svg></a>StopStreamProcessor</h3>
<ul>
<li>description: Stops a running stream processor that was created by CreateStreamProcessor.</li>
<li>access level: Write</li>
<li>resource types</li>
</ul>
<pre><code>{
    "streamprocessor": {
        "resource_type": "streamprocessor",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}
</code></pre><span id="navId" data="iam-Rekognition"></span>

                
      </section>

      
    </div>

    
  </article>

  
  
</div>


        
          <hr>
          <footer>
            
            

            
                
              </div>
          </footer>
        
    </div>
</div>


  

  <div class="search-overlay"></div>

</div>
</body>
</html>
