Amazon Managed Service for Prometheus
(aps)
IAM Changes
Services
2021-09-14
2021-09-14
3 new actions, 3 new conditions | 9 updated actions, 1 updated resource
Additions
Actions
ListTagsForResource
Description:
Grants permission to list tags on an AMP resource
Access:
Read
Resources:
Name: workspace
Required: Yes
Conditions:
aws:TagKeys
aws:RequestTag/${TagKey}
TagResource
Description:
Grants permission to tag an AMP resource
Access:
Tagging
Resources:
Name: workspace
Required: Yes
Conditions:
aws:TagKeys
aws:RequestTag/${TagKey}
UntagResource
Description:
Grants permission to untag an AMP resource
Access:
Tagging
Resources:
Name: workspace
Required: Yes
Conditions:
aws:TagKeys
aws:RequestTag/${TagKey}
Conditions
aws:RequestTag/${TagKey}
Description:
Filters access based on the tags that are passed in the request
Type:
String
aws:ResourceTag/${TagKey}
Description:
Filters access based on the tags associated with the resource
Type:
String
aws:TagKeys
Description:
Filters access based on the tag keys that are passed in the request
Type:
String
Updates
Actions
CreateWorkspace
Conditions
+ aws:RequestTag/${TagKey}
+ aws:TagKeys
DeleteWorkspace
Conditions
+ aws:ResourceTag/${TagKey}
DescribeWorkspace
Conditions
+ aws:ResourceTag/${TagKey}
GetLabels
Conditions
+ aws:ResourceTag/${TagKey}
GetMetricMetadata
Conditions
+ aws:ResourceTag/${TagKey}
GetSeries
Conditions
+ aws:ResourceTag/${TagKey}
QueryMetrics
Conditions
+ aws:ResourceTag/${TagKey}
RemoteWrite
Conditions
+ aws:ResourceTag/${TagKey}
UpdateWorkspaceAlias
Conditions
+ aws:ResourceTag/${TagKey}
Resources
workspace
Conditions
+ aws:RequestTag/${TagKey}
+ aws:ResourceTag/${TagKey}
+ aws:TagKeys