Amazon Lightsail (lightsail)

Additions

Actions

• CreateBucket
  
  • Description:  Grants permission to create an Amazon Lightsail bucket
  • Access:  Write
  • Resources: 

    Name: Bucket

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• CreateBucketAccessKey
  
  • Description:  Grants permission to create a new access key for the specified bucket
  • Access:  Write
  • Resources: 

    Name: Bucket

    Required: Yes

• DeleteBucket
  
  • Description:  Grants permission to delete an Amazon Lightsail bucket
  • Access:  Write
  • Resources: 

    Name: Bucket

    Required: Yes

• DeleteBucketAccessKey
  
  • Description:  Grants permission to delete an access key for the specified Amazon Lightsail bucket
  • Access:  Write
  • Resources: 

    Name: Bucket

    Required: Yes

• GetBucketAccessKeys
  
  • Description:  Grants permission to get the existing access key IDs for the specified Amazon Lightsail bucket
  • Access:  Read
• GetBucketBundles
  
  • Description:  Grants permission to get the bundles that can be applied to an Amazon Lightsail bucket
  • Access:  Read
• GetBucketMetricData
  
  • Description:  Grants permission to get the data points of a specific metric for an Amazon Lightsail bucket
  • Access:  Read
• GetBuckets
  
  • Description:  Grants permission to get information about one or more Amazon Lightsail buckets
  • Access:  Read
• SetResourceAccessForBucket
  
  • Description:  Grants permission to set the Amazon Lightsail resources that can access the specified Amazon Lightsail bucket
  • Access:  Write
  • Resources: 

    Name: Bucket

    Required: Yes

    Name: Instance

    Required: Yes

• UpdateBucket
  
  • Description:  Grants permission to update an existing Amazon Lightsail bucket
  • Access:  Write
  • Resources: 

    Name: Bucket

    Required: Yes

• UpdateBucketBundle
  
  • Description:  Grants permission to update the bundle, or storage plan, of an existing Amazon Lightsail bucket
  • Access:  Write
  • Resources: 

    Name: Bucket

    Required: Yes

Resources

• Bucket
  
  • Arn:  arn:${Partition}:lightsail:${Region}:${Account}:Bucket/${Id}
  • Conditions: 

    aws:ResourceTag/${TagKey}

Updates

Actions

• AllocateStaticIp
  
  Description
  
  • Old: Creates a static IP address that can be attached to an instance
    New: Grants permission to create a static IP address that can be attached to an instance
• AttachDisk
  
  Description
  
  • Old: Attaches a disk to an instance
    New: Grants permission to attach a disk to an instance
• AttachInstancesToLoadBalancer
  
  Description
  
  • Old: Attaches one or more instances to a load balancer
    New: Grants permission to attach one or more instances to a load balancer
• AttachLoadBalancerTlsCertificate
  
  Description
  
  • Old: Attaches a TLS certificate to a load balancer
    New: Grants permission to attach a TLS certificate to a load balancer
• AttachStaticIp
  
  Description
  
  • Old: Attaches a static IP address to an instance
    New: Grants permission to attach a static IP address to an instance
• CloseInstancePublicPorts
  
  Description
  
  • Old: Closes a public port of an instance
    New: Grants permission to close a public port of an instance
• CopySnapshot
  
  Description
  
  • Old: Copies a snapshot from one AWS Region to another in Amazon Lightsail
    New: Grants permission to copy a snapshot from one AWS Region to another in Amazon Lightsail
• CreateCloudFormationStack
  
  Description
  
  • Old: Creates a new Amazon EC2 instance from an exported Amazon Lightsail snapshot
    New: Grants permission to create a new Amazon EC2 instance from an exported Amazon Lightsail snapshot
• CreateDisk
  
  Description
  
  • Old: Creates a disk
    New: Grants permission to create a disk
• CreateDiskFromSnapshot
  
  Description
  
  • Old: Creates a disk from snapshot
    New: Grants permission to create a disk from snapshot
• CreateDiskSnapshot
  
  Description
  
  • Old: Creates a disk snapshot
    New: Grants permission to create a disk snapshot
• CreateDomain
  
  Description
  
  • Old: Creates a domain resource for the specified domain name
    New: Grants permission to create a domain resource for the specified domain name
• CreateDomainEntry
  
  Description
  
  • Old: Creates one or more DNS record entries for a domain resource: Address (A), canonical name (CNAME), mail exchanger (MX), name server (NS), start of authority (SOA), service locator (SRV), or text (TXT)
    New: Grants permission to create one or more DNS record entries for a domain resource: Address (A), canonical name (CNAME), mail exchanger (MX), name server (NS), start of authority (SOA), service locator (SRV), or text (TXT)
• CreateInstanceSnapshot
  
  Description
  
  • Old: Creates an instance snapshot
    New: Grants permission to create an instance snapshot
• CreateInstances
  
  Description
  
  • Old: Creates one or more instances
    New: Grants permission to create one or more instances
• CreateInstancesFromSnapshot
  
  Description
  
  • Old: Creates one or more instances based on an instance snapshot
    New: Grants permission to create one or more instances based on an instance snapshot
• CreateKeyPair
  
  Description
  
  • Old: Creates a key pair used to authenticate and connect to an instance
    New: Grants permission to create a key pair used to authenticate and connect to an instance
• CreateLoadBalancer
  
  Description
  
  • Old: Creates a load balancer
    New: Grants permission to create a load balancer
• CreateLoadBalancerTlsCertificate
  
  Description
  
  • Old: Creates a load balancer TLS certificate
    New: Grants permission to create a load balancer TLS certificate
• CreateRelationalDatabase
  
  Description
  
  • Old: Creates a new relational database
    New: Grants permission to create a new relational database
• CreateRelationalDatabaseFromSnapshot
  
  Description
  
  • Old: Creates a new relational database from a snapshot
    New: Grants permission to create a new relational database from a snapshot
• CreateRelationalDatabaseSnapshot
  
  Description
  
  • Old: Creates a relational database snapshot
    New: Grants permission to create a relational database snapshot
• DeleteDisk
  
  Description
  
  • Old: Deletes a disk
    New: Grants permission to delete a disk
• DeleteDiskSnapshot
  
  Description
  
  • Old: Deletes a disk snapshot
    New: Grants permission to delete a disk snapshot
• DeleteDomain
  
  Description
  
  • Old: Deletes a domain resource and all of its DNS records
    New: Grants permission to delete a domain resource and all of its DNS records
• DeleteDomainEntry
  
  Description
  
  • Old: Deletes a DNS record entry for a domain resource
    New: Grants permission to delete a DNS record entry for a domain resource
• DeleteInstance
  
  Description
  
  • Old: Deletes an instance
    New: Grants permission to delete an instance
• DeleteInstanceSnapshot
  
  Description
  
  • Old: Deletes an instance snapshot
    New: Grants permission to delete an instance snapshot
• DeleteKeyPair
  
  Description
  
  • Old: Deletes a key pair used to authenticate and connect to an instance
    New: Grants permission to delete a key pair used to authenticate and connect to an instance
• DeleteKnownHostKeys
  
  Description
  
  • Old: Deletes the known host key or certificate used by the Amazon Lightsail browser-based SSH or RDP clients to authenticate an instance
    New: Grants permission to delete the known host key or certificate used by the Amazon Lightsail browser-based SSH or RDP clients to authenticate an instance
• DeleteLoadBalancer
  
  Description
  
  • Old: Deletes a load balancer
    New: Grants permission to delete a load balancer
• DeleteLoadBalancerTlsCertificate
  
  Description
  
  • Old: Deletes a load balancer TLS certificate
    New: Grants permission to delete a load balancer TLS certificate
• DeleteRelationalDatabase
  
  Description
  
  • Old: Deletes a relational database
    New: Grants permission to delete a relational database
• DeleteRelationalDatabaseSnapshot
  
  Description
  
  • Old: Deletes relational database snapshot
    New: Grants permission to delete a relational database snapshot
• DetachDisk
  
  Description
  
  • Old: Detaches a disk from an instance
    New: Grants permission to detach a disk from an instance
• DetachInstancesFromLoadBalancer
  
  Description
  
  • Old: Detaches one or more instances from a load balancer
    New: Grants permission to detach one or more instances from a load balancer
• DetachStaticIp
  
  Description
  
  • Old: Detaches a static IP from an instance to which it is attached
    New: Grants permission to detach a static IP from an instance to which it is attached
• DownloadDefaultKeyPair
  
  Description
  
  • Old: Downloads the default key pair used to authenticate and connect to instances in a specific AWS Region
    New: Grants permission to download the default key pair used to authenticate and connect to instances in a specific AWS Region
• ExportSnapshot
  
  Description
  
  • Old: Exports an Amazon Lightsail snapshot to Amazon EC2
    New: Grants permission to export an Amazon Lightsail snapshot to Amazon EC2
• GetActiveNames
  
  Description
  
  • Old: Returns the names of all active (not deleted) resources
    New: Grants permission to get the names of all active (not deleted) resources
• GetBlueprints
  
  Description
  
  • Old: Returns a list of instance images, or blueprints. You can use a blueprint to create a new instance already running a specific operating system, as well as a pre-installed application or development stack. The software that runs on your instance depends on the blueprint you define when creating the instance
    New: Grants permission to get a list of instance images, or blueprints. You can use a blueprint to create a new instance already running a specific operating system, as well as a pre-installed application or development stack. The software that runs on your instance depends on the blueprint you define when creating the instance
• GetBundles
  
  Description
  
  • Old: Returns a list of instance bundles. You can use a bundle to create a new instance with a set of performance specifications, such as CPU count, disk size, RAM size, and network transfer allowance. The cost of your instance depends on the bundle you define when creating the instance
    New: Grants permission to get a list of instance bundles. You can use a bundle to create a new instance with a set of performance specifications, such as CPU count, disk size, RAM size, and network transfer allowance. The cost of your instance depends on the bundle you define when creating the instance
• GetCloudFormationStackRecords
  
  Description
  
  • Old: Returns information about all CloudFormation stacks used to create Amazon EC2 resources from exported Amazon Lightsail snapshots
    New: Grants permission to get information about all CloudFormation stacks used to create Amazon EC2 resources from exported Amazon Lightsail snapshots
• GetDisk
  
  Description
  
  • Old: Returns information about a disk
    New: Grants permission to get information about a disk
• GetDiskSnapshot
  
  Description
  
  • Old: Returns information about a disk snapshot
    New: Grants permission to get information about a disk snapshot
• GetDiskSnapshots
  
  Description
  
  • Old: Returns information about all disk snapshots
    New: Grants permission to get information about all disk snapshots
• GetDisks
  
  Description
  
  • Old: Returns information about all disks
    New: Grants permission to get information about all disks
• GetDomain
  
  Description
  
  • Old: Returns DNS records for a domain resource
    New: Grants permission to get DNS records for a domain resource
• GetDomains
  
  Description
  
  • Old: Returns DNS records for all domain resources
    New: Grants permission to get DNS records for all domain resources
• GetExportSnapshotRecords
  
  Description
  
  • Old: Returns information about all records to export Amazon Lightsail snapshots to Amazon EC2
    New: Grants permission to get information about all records of exported Amazon Lightsail snapshots to Amazon EC2
• GetInstance
  
  Description
  
  • Old: Returns information about an instance
    New: Grants permission to get information about an instance
• GetInstanceAccessDetails
  
  Description
  
  • Old: Returns temporary keys you can use to authenticate and connect to an instance
    New: Grants permission to get temporary keys you can use to authenticate and connect to an instance
• GetInstanceMetricData
  
  Description
  
  • Old: Returns the data points for the specified metric of an instance
    New: Grants permission to get the data points for the specified metric of an instance
• GetInstancePortStates
  
  Description
  
  • Old: Returns the port states of an instance
    New: Grants permission to get the port states of an instance
• GetInstanceSnapshot
  
  Description
  
  • Old: Returns information about an instance snapshot
    New: Grants permission to get information about an instance snapshot
• GetInstanceSnapshots
  
  Description
  
  • Old: Returns information about all instance snapshots
    New: Grants permission to get information about all instance snapshots
• GetInstanceState
  
  Description
  
  • Old: Returns the state of an instance
    New: Grants permission to get the state of an instance
• GetInstances
  
  Description
  
  • Old: Returns information about all instances
    New: Grants permission to get information about all instances
• GetKeyPair
  
  Description
  
  • Old: Returns information about a key pair
    New: Grants permission to get information about a key pair
• GetKeyPairs
  
  Description
  
  • Old: Returns information about all key pairs
    New: Grants permission to get information about all key pairs
• GetLoadBalancer
  
  Description
  
  • Old: Returns information about a load balancer
    New: Grants permision to get information about a load balancer
• GetLoadBalancerMetricData
  
  Description
  
  • Old: Returns the data points for the specified metric of a load balancer
    New: Grants permission to get the data points for the specified metric of a load balancer
• GetLoadBalancerTlsCertificates
  
  Description
  
  • Old: Returns information about a load balancer TLS certificate
    New: Grants permission to get information about a load balancer's TLS certificates
• GetLoadBalancers
  
  Description
  
  • Old: Returns information about load balancers
    New: Grants permission to get information about load balancers
• GetOperation
  
  Description
  
  • Old: Returns information about an operation. Operations include events such as when you create an instance, allocate a static IP, attach a static IP, and so on
    New: Grants permission to get information about an operation. Operations include events such as when you create an instance, allocate a static IP, attach a static IP, and so on
• GetOperations
  
  Description
  
  • Old: Returns information about all operations. Operations include events such as when you create an instance, allocate a static IP, attach a static IP, and so on
    New: Grants permission to get information about all operations. Operations include events such as when you create an instance, allocate a static IP, attach a static IP, and so on
• GetOperationsForResource
  
  Description
  
  • Old: Returns operations for a resource
    New: Grants permission to get operations for a resource
• GetRegions
  
  Description
  
  • Old: Returns a list of all valid AWS Regions for Amazon Lightsail
    New: Grants permission to get a list of all valid AWS Regions for Amazon Lightsail
• GetRelationalDatabase
  
  Description
  
  • Old: Returns information about a relational database
    New: Grants permission to get information about a relational database
• GetRelationalDatabaseBlueprints
  
  Description
  
  • Old: Returns a list of relational database images, or blueprints. You can use a blueprint to create a new database running a specific database engine. The database engine that runs on your database depends on the blueprint you define when creating the relational database
    New: Grants permission to get a list of relational database images, or blueprints. You can use a blueprint to create a new database running a specific database engine. The database engine that runs on your database depends on the blueprint you define when creating the relational database
• GetRelationalDatabaseBundles
  
  Description
  
  • Old: Returns a list of relational database bundles. You can use a bundle to create a new database with a set of performance specifications, such as CPU count, disk size, RAM size, network transfer allowance, and standard of high availability. The cost of your database depends on the bundle you define when creating the relational database
    New: Grants permission to get a list of relational database bundles. You can use a bundle to create a new database with a set of performance specifications, such as CPU count, disk size, RAM size, network transfer allowance, and standard of high availability. The cost of your database depends on the bundle you define when creating the relational database
• GetRelationalDatabaseEvents
  
  Description
  
  • Old: Returns events for a relational database
    New: Grants permission to get events for a relational database
• GetRelationalDatabaseLogEvents
  
  Description
  
  • Old: Returns events for the specified log stream of a relational database
    New: Grants permission to get events for the specified log stream of a relational database
• GetRelationalDatabaseLogStreams
  
  Description
  
  • Old: Returns the log streams available for a relational database
    New: Grants permission to get the log streams available for a relational database
• GetRelationalDatabaseMasterUserPassword
  
  Description
  
  • Old: Returns the master user password of a relational database
    New: Grants permission to get the master user password of a relational database
• GetRelationalDatabaseMetricData
  
  Description
  
  • Old: Returns the data points for the specified metric of a relational database
    New: Grants permission to get the data points for the specified metric of a relational database
• GetRelationalDatabaseParameters
  
  Description
  
  • Old: Returns the parameters of a relational database
    New: Grants permission to get the parameters of a relational database
• GetRelationalDatabaseSnapshot
  
  Description
  
  • Old: Returns information about a relational database snapshot
    New: Grants permission to get information about a relational database snapshot
• GetRelationalDatabaseSnapshots
  
  Description
  
  • Old: Returns information about all relational database snapshots
    New: Grants permission to get information about all relational database snapshots
• GetRelationalDatabases
  
  Description
  
  • Old: Return information about all relational databases
    New: Grants permission to get information about all relational databases
• GetStaticIp
  
  Description
  
  • Old: Returns information about a static IP
    New: Grants permission to get information about a static IP
• GetStaticIps
  
  Description
  
  • Old: Returns information about all static IPs
    New: Grants permission to get information about all static IPs
• ImportKeyPair
  
  Description
  
  • Old: Imports a public key from a key pair
    New: Grants permission to import a public key from a key pair
• IsVpcPeered
  
  Description
  
  • Old: Returns a boolean value indicating whether the Amazon Lightsail virtual private cloud (VPC) is peered
    New: Grants permission to get a boolean value indicating whether the Amazon Lightsail virtual private cloud (VPC) is peered
• OpenInstancePublicPorts
  
  Description
  
  • Old: Adds, or opens a public port of an instance
    New: Grants permission to add, or open a public port of an instance
• PeerVpc
  
  Description
  
  • Old: Tries to peer the Amazon Lightsail virtual private cloud (VPC) with the default VPC
    New: Grants permission to try to peer the Amazon Lightsail virtual private cloud (VPC) with the default VPC
• PutInstancePublicPorts
  
  Description
  
  • Old: Sets the specified open ports for an instance, and closes all ports for every protocol not included in the request
    New: Grants permission to set the specified open ports for an instance, and closes all ports for every protocol not included in the request
• RebootInstance
  
  Description
  
  • Old: Reboots an instance that is in a running state
    New: Grants permission to reboot an instance that is in a running state
• RebootRelationalDatabase
  
  Description
  
  • Old: Reboots a relational database that is in a running state
    New: Grants permission to reboot a relational database that is in a running state
• ReleaseStaticIp
  
  Description
  
  • Old: Deletes a static IP
    New: Grants permission to delete a static IP
• StartInstance
  
  Description
  
  • Old: Starts an instance that is in a stopped state
    New: Grants permission to start an instance that is in a stopped state
• StartRelationalDatabase
  
  Description
  
  • Old: Starts a relational database that is in a stopped state
    New: Grants permission to start a relational database that is in a stopped state
• StopInstance
  
  Description
  
  • Old: Stops an instance that is in a running state
    New: Grants permission to stop an instance that is in a running state
• StopRelationalDatabase
  
  Description
  
  • Old: Stops a relational database that is in a running state
    New: Grants permission to stop a relational database that is in a running state
• TagResource
  
  Description
  
  • Old: Tags a resource
    New: Grants permission to tag a resource
• UnpeerVpc
  
  Description
  
  • Old: Attempts to unpeer the Amazon Lightsail virtual private cloud (VPC) from the default VPC
    New: Grants permission to try to unpeer the Amazon Lightsail virtual private cloud (VPC) from the default VPC
• UntagResource
  
  Description
  
  • Old: Untags a resource
    New: Grants permission to untag a resource
• UpdateDomainEntry
  
  Description
  
  • Old: Updates a domain recordset after it is created
    New: Grants permission to update a domain recordset after it is created
• UpdateLoadBalancerAttribute
  
  Description
  
  • Old: Updates a load balancer attribute, such as the health check path and session stickiness
    New: Grants permission to update a load balancer attribute, such as the health check path and session stickiness
• UpdateRelationalDatabase
  
  Description
  
  • Old: Updates a relational database
    New: Grants permission to update a relational database
• UpdateRelationalDatabaseParameters
  
  Description
  
  • Old: Updates the parameters of a relational database
    New: Grants permission to update the parameters of a relational database