AWS HealthLake (healthlake)

2021-07-16

5 new actions, 3 new conditions | 2 updated actions, 1 updated resource

Additions

    Actions
  • ListFHIRExportJobs
    • Description:  Grants permission to get a list of export jobs for the specified datastore
    • Access:  List
    • Resources: 

      Name: datastore

      Required: Yes

  • ListFHIRImportJobs
    • Description:  Grants permission to get a list of import jobs for the specified datastore
    • Access:  List
    • Resources: 

      Name: datastore

      Required: Yes

  • ListTagsForResource
    • Description:  Grants permission to get a list of tags for the specified datastore
    • Access:  Read
    • Resources: 

      Name: datastore

      Required: No

  • TagResource
    • Description:  Grants permission to add tags to a datastore
    • Access:  Tagging
    • Resources: 

      Name: datastore

      Required: No

    • Conditions: 

      aws:TagKeys

      aws:RequestTag/${TagKey}

      aws:ResourceTag/${TagKey}
  • UntagResource
    • Description:  Grants permission to remove tags associated with a datastore
    • Access:  Tagging
    • Resources: 

      Name: datastore

      Required: No

    • Conditions: 

      aws:TagKeys
    Conditions
  • aws:RequestTag/${TagKey}
    • Description:  Filters access based on the presence of tag key-value pairs in the request
    • Type:  String
  • aws:ResourceTag/${TagKey}
    • Description:  Filters access based on tag key-value pairs attached to the resource
    • Type:  String
  • aws:TagKeys
    • Description:  Filters access based on the presence of tag keys in the request
    • Type:  String

Updates

    Actions
  • GetCapabilities
      Description
    • Old: Grants permission to lists all FHIR datastores that are in the user’s account, regardless of datastore status
      New: Grants permission to get the capabilities of a FHIR datastore
  • CreateFHIRDatastore
      Conditions
    • ＋ aws:RequestTag/${TagKey}
    • ＋ aws:TagKeys
    Resources
  • datastore
      Conditions
    • ＋ aws:ResourceTag/${TagKey}