Amazon CloudWatch Evidently (evidently)

2021-12-04

26 new actions, 4 new resources, 3 new conditions

Additions

    Actions
  • CreateExperiment
    • Description:  Grants permission to create an experiment
    • Access:  Write
    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:TagKeys

  • CreateFeature
    • Description:  Grants permission to create a feature
    • Access:  Write
    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:TagKeys

  • CreateLaunch
    • Description:  Grants permission to create a launch
    • Access:  Write
    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:TagKeys

  • CreateProject
    • Description:  Grants permission to create a project
    • Access:  Write
    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:TagKeys

  • DeleteExperiment
    • Description:  Grants permission to delete an experiment
    • Access:  Write
    • Resources: 

      Name: Experiment

      Required: Yes

  • DeleteFeature
    • Description:  Grants permission to delete a feature
    • Access:  Write
    • Resources: 

      Name: Feature

      Required: Yes

  • DeleteLaunch
    • Description:  Grants permission to delete a launch
    • Access:  Write
    • Resources: 

      Name: Launch

      Required: Yes

  • DeleteProject
    • Description:  Grants permission to delete a project
    • Access:  Write
    • Resources: 

      Name: Project

      Required: Yes

  • GetExperiment
    • Description:  Grants permission to get experiment details
    • Access:  Read
    • Resources: 

      Name: Experiment

      Required: Yes

  • GetExperimentResults
    • Description:  Grants permission to get experiment result
    • Access:  Read
    • Resources: 

      Name: Experiment

      Required: Yes

  • GetFeature
    • Description:  Grants permission to get feature details
    • Access:  Read
    • Resources: 

      Name: Feature

      Required: Yes

  • GetLaunch
    • Description:  Grants permission to get launch details
    • Access:  Read
    • Resources: 

      Name: Launch

      Required: Yes

  • GetProject
    • Description:  Grants permission to get project details
    • Access:  Read
    • Resources: 

      Name: Project

      Required: Yes

  • ListExperiments
    • Description:  Grants permission to list experiments
    • Access:  Read
  • ListFeatures
    • Description:  Grants permission to list features
    • Access:  Read
  • ListLaunches
    • Description:  Grants permission to list launches
    • Access:  Read
  • ListProjects
    • Description:  Grants permission to list projects
    • Access:  Read
  • StartExperiment
    • Description:  Grants permission to start an experiment
    • Access:  Write
    • Resources: 

      Name: Experiment

      Required: Yes

  • StartLaunch
    • Description:  Grants permission to start a launch
    • Access:  Write
    • Resources: 

      Name: Launch

      Required: Yes

  • StopExperiment
    • Description:  Grants permission to stop an experiment
    • Access:  Write
    • Resources: 

      Name: Experiment

      Required: Yes

  • StopLaunch
    • Description:  Grants permission to stop a launch
    • Access:  Write
    • Resources: 

      Name: Launch

      Required: Yes

  • UpdateExperiment
    • Description:  Grants permission to update experiment
    • Access:  Write
    • Resources: 

      Name: Experiment

      Required: Yes

  • UpdateFeature
    • Description:  Grants permission to update feature
    • Access:  Write
    • Resources: 

      Name: Feature

      Required: Yes

  • UpdateLaunch
    • Description:  Grants permission to update a launch
    • Access:  Write
    • Resources: 

      Name: Launch

      Required: Yes

  • UpdateProject
    • Description:  Grants permission to update project
    • Access:  Write
    • Resources: 

      Name: Project

      Required: Yes

  • UpdateProjectDataDelivery
    • Description:  Grants permission to update project data delivery
    • Access:  Write
    • Resources: 

      Name: Project

      Required: Yes

    Resources
  • Project
    • Arn:  arn:${Partition}:evidently:${Region}:${OwnerAccountId}:project/${ProjectName}
    • Conditions: 

      aws:ResourceTag/${TagKey}

  • Feature
    • Arn:  arn:${Partition}:evidently:${Region}:${OwnerAccountId}:project/${ProjectName}/feature/${FeatureName}
    • Conditions: 

      aws:ResourceTag/${TagKey}

  • Experiment
    • Arn:  arn:${Partition}:evidently:${Region}:${OwnerAccountId}:project/${ProjectName}/experiment/${ExperimentName}
    • Conditions: 

      aws:ResourceTag/${TagKey}

  • Launch
    • Arn:  arn:${Partition}:evidently:${Region}:${OwnerAccountId}:project/${ProjectName}/launch/${LaunchName}
    • Conditions: 

      aws:ResourceTag/${TagKey}

    Conditions
  • aws:RequestTag/${TagKey}
    • Description:  Filters access by the tags that are passed the request on behalf of the IAM principal
    • Type:  String
  • aws:ResourceTag/${TagKey}
    • Description:  Filters access by the tags associated with the resource that make the request on behalf of the IAM principal
    • Type:  String
  • aws:TagKeys
    • Description:  Filters access by the tag keys that are passed in the request on behalf of the IAM principal
    • Type:  String