Amazon CloudWatch Evidently (evidently)

Additions

Actions

• CreateExperiment
  
  • Description:  Grants permission to create an experiment
  • Access:  Write
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• CreateFeature
  
  • Description:  Grants permission to create a feature
  • Access:  Write
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• CreateLaunch
  
  • Description:  Grants permission to create a launch
  • Access:  Write
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• CreateProject
  
  • Description:  Grants permission to create a project
  • Access:  Write
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• DeleteExperiment
  
  • Description:  Grants permission to delete an experiment
  • Access:  Write
  • Resources: 

    Name: Experiment

    Required: Yes

• DeleteFeature
  
  • Description:  Grants permission to delete a feature
  • Access:  Write
  • Resources: 

    Name: Feature

    Required: Yes

• DeleteLaunch
  
  • Description:  Grants permission to delete a launch
  • Access:  Write
  • Resources: 

    Name: Launch

    Required: Yes

• DeleteProject
  
  • Description:  Grants permission to delete a project
  • Access:  Write
  • Resources: 

    Name: Project

    Required: Yes

• GetExperiment
  
  • Description:  Grants permission to get experiment details
  • Access:  Read
  • Resources: 

    Name: Experiment

    Required: Yes

• GetExperimentResults
  
  • Description:  Grants permission to get experiment result
  • Access:  Read
  • Resources: 

    Name: Experiment

    Required: Yes

• GetFeature
  
  • Description:  Grants permission to get feature details
  • Access:  Read
  • Resources: 

    Name: Feature

    Required: Yes

• GetLaunch
  
  • Description:  Grants permission to get launch details
  • Access:  Read
  • Resources: 

    Name: Launch

    Required: Yes

• GetProject
  
  • Description:  Grants permission to get project details
  • Access:  Read
  • Resources: 

    Name: Project

    Required: Yes

• ListExperiments
  
  • Description:  Grants permission to list experiments
  • Access:  Read
• ListFeatures
  
  • Description:  Grants permission to list features
  • Access:  Read
• ListLaunches
  
  • Description:  Grants permission to list launches
  • Access:  Read
• ListProjects
  
  • Description:  Grants permission to list projects
  • Access:  Read
• StartExperiment
  
  • Description:  Grants permission to start an experiment
  • Access:  Write
  • Resources: 

    Name: Experiment

    Required: Yes

• StartLaunch
  
  • Description:  Grants permission to start a launch
  • Access:  Write
  • Resources: 

    Name: Launch

    Required: Yes

• StopExperiment
  
  • Description:  Grants permission to stop an experiment
  • Access:  Write
  • Resources: 

    Name: Experiment

    Required: Yes

• StopLaunch
  
  • Description:  Grants permission to stop a launch
  • Access:  Write
  • Resources: 

    Name: Launch

    Required: Yes

• UpdateExperiment
  
  • Description:  Grants permission to update experiment
  • Access:  Write
  • Resources: 

    Name: Experiment

    Required: Yes

• UpdateFeature
  
  • Description:  Grants permission to update feature
  • Access:  Write
  • Resources: 

    Name: Feature

    Required: Yes

• UpdateLaunch
  
  • Description:  Grants permission to update a launch
  • Access:  Write
  • Resources: 

    Name: Launch

    Required: Yes

• UpdateProject
  
  • Description:  Grants permission to update project
  • Access:  Write
  • Resources: 

    Name: Project

    Required: Yes

• UpdateProjectDataDelivery
  
  • Description:  Grants permission to update project data delivery
  • Access:  Write
  • Resources: 

    Name: Project

    Required: Yes

Resources

• Project
  
  • Arn:  arn:${Partition}:evidently:${Region}:${OwnerAccountId}:project/${ProjectName}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• Feature
  
  • Arn:  arn:${Partition}:evidently:${Region}:${OwnerAccountId}:project/${ProjectName}/feature/${FeatureName}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• Experiment
  
  • Arn:  arn:${Partition}:evidently:${Region}:${OwnerAccountId}:project/${ProjectName}/experiment/${ExperimentName}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• Launch
  
  • Arn:  arn:${Partition}:evidently:${Region}:${OwnerAccountId}:project/${ProjectName}/launch/${LaunchName}
  • Conditions: 

    aws:ResourceTag/${TagKey}

Conditions

• aws:RequestTag/${TagKey}
  
  • Description:  Filters access by the tags that are passed the request on behalf of the IAM principal
  • Type:  String
• aws:ResourceTag/${TagKey}
  
  • Description:  Filters access by the tags associated with the resource that make the request on behalf of the IAM principal
  • Type:  String
• aws:TagKeys
  
  • Description:  Filters access by the tag keys that are passed in the request on behalf of the IAM principal
  • Type:  String