Amazon AppStream 2.0 (appstream)

2021-11-23

10 new actions, 2 new resources | 3 updated actions

Additions

    Actions
  • AssociateApplicationFleet
    • Description:  Grants permission to associate the specified application with the fleet
    • Access:  Write
    • Resources: 

      Name: application

      Required: Yes

      Name: fleet

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}
  • CreateAppBlock
    • Description:  Grants permission to create an app block. App blocks store details about the virtual hard disk that contains the files for the application in an S3 bucket. It also stores the setup script with details about how to mount the virtual hard disk. App blocks are only supported for Elastic fleets
    • Access:  Write
    • Resources: 

      Name: app-block

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}

      aws:TagKeys
  • CreateApplication
    • Description:  Grants permission to create an application within customer account. Applications store the details about how to launch applications on streaming instances. This is only supported for Elastic fleets
    • Access:  Write
    • Resources: 

      Name: app-block

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}

      aws:TagKeys
  • DeleteAppBlock
    • Description:  Grants permission to delete the specified app block
    • Access:  Write
    • Resources: 

      Name: app-block

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}
  • DeleteApplication
    • Description:  Grants permission to delete the specified application
    • Access:  Write
    • Resources: 

      Name: application

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}
  • DescribeAppBlocks
    • Description:  Grants permission to retrieve a list that describes one or more specified app blocks, if the app block arns are provided. Otherwise, all app blocks in the account are described
    • Access:  Read
    • Resources: 

      Name: app-block

      Required: No

  • DescribeApplicationFleetAssociations
    • Description:  Grants permission to retrieve the associations that are associated with the specified application or fleet
    • Access:  Read
    • Resources: 

      Name: application

      Required: No

      Name: fleet

      Required: No

  • DescribeApplications
    • Description:  Grants permission to retrieve a list that describes one or more specified applications, if the application arns are provided. Otherwise, all applications in the account are described
    • Access:  Read
    • Resources: 

      Name: application

      Required: No

  • DisassociateApplicationFleet
    • Description:  Grants permission to disassociate the specified application from the specified fleet
    • Access:  Write
    • Resources: 

      Name: application

      Required: Yes

      Name: fleet

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}
  • UpdateApplication
    • Description:  Grants permission to update the specified fields for the specified application
    • Access:  Write
    • Resources: 

      Name: application

      Required: Yes

      Name: app-block

      Required: No

    • Conditions: 

      aws:ResourceTag/${TagKey}
    Resources
  • app-block
    • Arn:  arn:${Partition}:appstream:${Region}:${Account}:app-block/${AppBlockName}
    • Conditions: 

      aws:ResourceTag/${TagKey}
  • application
    • Arn:  arn:${Partition}:appstream:${Region}:${Account}:application/${ApplicationName}
    • Conditions: 

      aws:ResourceTag/${TagKey}

Updates