Amazon Route 53 Recovery Readiness (route53-recovery-readiness)

Additions

Actions

• CreateCell
  
  • Description:  Grants permission to Create a new Cell
  • Access:  Write
  • Resources: 

    Name: cell

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• CreateCrossAccountAuthorization
  
  • Description:  Grants permission to Create a new Cross Account Authorization
  • Access:  Write
• CreateReadinessCheck
  
  • Description:  Grants permission to Create a new Readiness Check
  • Access:  Write
  • Resources: 

    Name: readinesscheck

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• CreateRecoveryGroup
  
  • Description:  Grants permission to Create a Recovery Group
  • Access:  Write
  • Resources: 

    Name: recoverygroup

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• CreateResourceSet
  
  • Description:  Grants permission to Create a new Resource Set
  • Access:  Write
  • Resources: 

    Name: resourceset

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• DeleteCell
  
  • Description:  Grants permission to Delete an existing Cell
  • Access:  Write
  • Resources: 

    Name: cell

    Required: Yes

• DeleteCrossAccountAuthorization
  
  • Description:  Grants permission to Delete a Cross Account Authorization
  • Access:  Write
• DeleteReadinessCheck
  
  • Description:  Grants permission to Delete an existing Readiness Check
  • Access:  Write
  • Resources: 

    Name: readinesscheck

    Required: Yes

• DeleteRecoveryGroup
  
  • Description:  Grants permission to Delete an existing Recovery Group
  • Access:  Write
  • Resources: 

    Name: recoverygroup

    Required: Yes

• DeleteResourceSet
  
  • Description:  Grants permission to Delete an existing Readiness Check
  • Access:  Write
  • Resources: 

    Name: resourceset

    Required: Yes

• GetArchitectureRecommendations
  
  • Description:  Grants permission to Get Architecture Recommendations for a Recovery Group
  • Access:  Read
  • Resources: 

    Name: recoverygroup

    Required: Yes

• GetCell
  
  • Description:  Grants permission to Get an existing Cell
  • Access:  Read
  • Resources: 

    Name: cell

    Required: Yes

• GetCellReadinessSummary
  
  • Description:  Grants permission to Get Readiness Summary for Cell
  • Access:  Read
  • Resources: 

    Name: cell

    Required: Yes

• GetReadinessCheck
  
  • Description:  Grants permission to Get a Readiness Check
  • Access:  Read
  • Resources: 

    Name: readinesscheck

    Required: Yes

• GetReadinessCheckResourceStatus
  
  • Description:  Grants permission to Get the Readiness Summary for a Resource
  • Access:  Read
  • Resources: 

    Name: readinesscheck

    Required: Yes

• GetReadinessCheckStatus
  
  • Description:  Grants permission to Get the status of a Readiness Check
  • Access:  Read
  • Resources: 

    Name: readinesscheck

    Required: Yes

• GetRecoveryGroup
  
  • Description:  Grants permission to Get a Recovery Group
  • Access:  Read
  • Resources: 

    Name: recoverygroup

    Required: Yes

• GetRecoveryGroupReadinessStatus
  
  • Description:  Grants permission to Get the Readiness Status of a Recovery Group
  • Access:  Read
  • Resources: 

    Name: recoverygroup

    Required: Yes

• GetResourceSet
  
  • Description:  Grants permission to Get a Resource Set
  • Access:  Read
  • Resources: 

    Name: resourceset

    Required: Yes

• ListCells
  
  • Description:  Grants permission to List existing Cells
  • Access:  Read
• ListCrossAccountAuthorizations
  
  • Description:  Grants permission to List existing Cross Account Authorizations
  • Access:  Read
• ListReadinessChecks
  
  • Description:  Grants permission to List existing Readiness Checks
  • Access:  Read
• ListRecoveryGroups
  
  • Description:  Grants permission to List existing Recovery Groups
  • Access:  Read
• ListResourceSets
  
  • Description:  Grants permission to List existing Resource Sets
  • Access:  Read
• ListRules
  
  • Description:  Grants permission to List Readiness Rules
  • Access:  Read
• ListTagsForResources
  
  • Description:  Grants permission to List Tags for a Resource
  • Access:  Read
• TagResource
  
  • Description:  Grants permission to Add a Tag to a Resource
  • Access:  Tagging
  • Resources: 

    Name: cell

    Required: No

    Name: readinesscheck

    Required: No

    Name: recoverygroup

    Required: No

    Name: resourceset

    Required: No

  • Conditions: 

    aws:TagKeys

• UntagResource
  
  • Description:  Grants permission to Remove a Tag from a resource
  • Access:  Tagging
  • Resources: 

    Name: cell

    Required: No

    Name: readinesscheck

    Required: No

    Name: recoverygroup

    Required: No

    Name: resourceset

    Required: No

  • Conditions: 

    aws:TagKeys

• UpdateCell
  
  • Description:  Grants permission to Update an existing Cell
  • Access:  Write
  • Resources: 

    Name: cell

    Required: Yes

  • Conditions: 

    aws:TagKeys

• UpdateReadinessCheck
  
  • Description:  Grants permission to Update an existing Readiness Check
  • Access:  Write
  • Resources: 

    Name: readinesscheck

    Required: Yes

  • Conditions: 

    aws:TagKeys

• UpdateRecoveryGroup
  
  • Description:  Grants permission to Update an existing Recovery Group
  • Access:  Write
  • Resources: 

    Name: recoverygroup

    Required: Yes

  • Conditions: 

    aws:TagKeys

• UpdateResourceSet
  
  • Description:  Grants permission to Update an existing Resource Set
  • Access:  Write
  • Resources: 

    Name: resourceset

    Required: Yes

  • Conditions: 

    aws:TagKeys

Resources

• readinesscheck
  
  • Arn:  arn:${Partition}:route53-recovery-readiness::${Account}:readiness-check/${ResourceId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• resourceset
  
  • Arn:  arn:${Partition}:route53-recovery-readiness::${Account}:resource-set/${ResourceId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• cell
  
  • Arn:  arn:${Partition}:route53-recovery-readiness::${Account}:cell/${ResourceId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• recoverygroup
  
  • Arn:  arn:${Partition}:route53-recovery-readiness::${Account}:recovery-group/${ResourceId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

Conditions

• aws:RequestTag/${TagKey}
  
  • Description:  Filters access based on the tags that are passed in the request
  • Type:  String
• aws:ResourceTag/${TagKey}
  
  • Description:  Filters access based on the tags associated with the resource
  • Type:  String
• aws:TagKeys
  
  • Description:  Filters access based on the tag keys that are passed in the request
  • Type:  String