AWS IoT RoboRunner (iotroborunner)

Additions

Actions

• CreateAction
  
  • Description:  Grants permission to create an action
  • Access:  Write
• CreateActionTemplate
  
  • Description:  Grants permission to create an action template
  • Access:  Write
• CreateActionTemplateDependency
  
  • Description:  Grants permission to create an action template dependency
  • Access:  Write
• CreateActivity
  
  • Description:  Grants permission to create an activity
  • Access:  Write
• CreateActivityDependency
  
  • Description:  Grants permission to create an activity dependency
  • Access:  Write
• CreateDestination
  
  • Description:  Grants permission to create a destination
  • Access:  Write
• CreateDestinationRelationship
  
  • Description:  Grants permission to create a destination relationship
  • Access:  Write
• CreateSite
  
  • Description:  Grants permission to create a site
  • Access:  Write
• CreateTask
  
  • Description:  Grants permission to create a task
  • Access:  Write
• CreateTaskDependency
  
  • Description:  Grants permission to create a task dependency
  • Access:  Write
• CreateWorker
  
  • Description:  Grants permission to create a worker
  • Access:  Write
• CreateWorkerFleet
  
  • Description:  Grants permission to create a worker fleet
  • Access:  Write
• DeleteAction
  
  • Description:  Grants permission to delete an action
  • Access:  Write
  • Resources: 

    Name: ActionResource

    Required: Yes

• DeleteActionTemplate
  
  • Description:  Grants permission to delete an action template
  • Access:  Write
  • Resources: 

    Name: ActionTemplateResource

    Required: Yes

• DeleteActionTemplateDependency
  
  • Description:  Grants permission to delete an action template dependency
  • Access:  Write
• DeleteActivity
  
  • Description:  Grants permission to delete an activity
  • Access:  Write
  • Resources: 

    Name: ActivityResource

    Required: Yes

• DeleteActivityDependency
  
  • Description:  Grants permission to delete an activity dependency
  • Access:  Write
• DeleteDestination
  
  • Description:  Grants permission to delete a destination
  • Access:  Write
  • Resources: 

    Name: DestinationResource

    Required: Yes

• DeleteDestinationRelationship
  
  • Description:  Grants permission to delete a destination relationship
  • Access:  Write
  • Resources: 

    Name: DestinationRelationshipResource

    Required: Yes

• DeleteSite
  
  • Description:  Grants permission to delete a site
  • Access:  Write
  • Resources: 

    Name: SiteResource

    Required: Yes

• DeleteTask
  
  • Description:  Grants permission to delete a task
  • Access:  Write
  • Resources: 

    Name: TaskResource

    Required: Yes

• DeleteTaskDependency
  
  • Description:  Grants permission to delete a task dependency
  • Access:  Write
• DeleteWorker
  
  • Description:  Grants permission to delete a worker
  • Access:  Write
  • Resources: 

    Name: WorkerResource

    Required: Yes

• DeleteWorkerFleet
  
  • Description:  Grants permission to delete a worker fleet
  • Access:  Write
  • Resources: 

    Name: WorkerFleetResource

    Required: Yes

• GetAction
  
  • Description:  Grants permission to get an action
  • Access:  Read
  • Resources: 

    Name: ActionResource

    Required: Yes

• GetActionTemplate
  
  • Description:  Grants permission to get an action template
  • Access:  Read
  • Resources: 

    Name: ActionTemplateResource

    Required: Yes

• GetActivity
  
  • Description:  Grants permission to get an activity
  • Access:  Read
  • Resources: 

    Name: ActivityResource

    Required: Yes

• GetDestination
  
  • Description:  Grants permission to get a destination
  • Access:  Read
  • Resources: 

    Name: DestinationResource

    Required: Yes

• GetDestinationRelationship
  
  • Description:  Grants permission to get a destination relationship
  • Access:  Read
  • Resources: 

    Name: DestinationRelationshipResource

    Required: Yes

• GetSite
  
  • Description:  Grants permission to get a site
  • Access:  Read
  • Resources: 

    Name: SiteResource

    Required: Yes

• GetTask
  
  • Description:  Grants permission to get a task
  • Access:  Read
  • Resources: 

    Name: TaskResource

    Required: Yes

• GetWorker
  
  • Description:  Grants permission to get a worker
  • Access:  Read
  • Resources: 

    Name: WorkerResource

    Required: Yes

• GetWorkerFleet
  
  • Description:  Grants permission to get a worker fleet
  • Access:  Read
  • Resources: 

    Name: WorkerFleetResource

    Required: Yes

• ListActionTemplates
  
  • Description:  Grants permission to list action templates
  • Access:  Read
• ListActions
  
  • Description:  Grants permission to list actions
  • Access:  Read
• ListActivities
  
  • Description:  Grants permission to list activities
  • Access:  Read
• ListDestinationRelationships
  
  • Description:  Grants permission to list destination relationships
  • Access:  Read
• ListDestinations
  
  • Description:  Grants permission to list destinations
  • Access:  Read
• ListSites
  
  • Description:  Grants permission to list sites
  • Access:  Read
• ListTasks
  
  • Description:  Grants permission to list tasks
  • Access:  Read
• ListWorkerFleets
  
  • Description:  Grants permission to list worker fleets
  • Access:  Read
• ListWorkers
  
  • Description:  Grants permission to list workers
  • Access:  Read
• UpdateActionState
  
  • Description:  Grants permission to update an action's state
  • Access:  Write
  • Resources: 

    Name: ActionResource

    Required: Yes

• UpdateActivity
  
  • Description:  Grants permission to update an activity
  • Access:  Write
  • Resources: 

    Name: ActivityResource

    Required: Yes

• UpdateDestination
  
  • Description:  Grants permission to update a destination
  • Access:  Write
  • Resources: 

    Name: DestinationResource

    Required: Yes

• UpdateSite
  
  • Description:  Grants permission to update a site
  • Access:  Write
  • Resources: 

    Name: SiteResource

    Required: Yes

• UpdateTask
  
  • Description:  Grants permission to update a task
  • Access:  Write
  • Resources: 

    Name: TaskResource

    Required: Yes

• UpdateWorker
  
  • Description:  Grants permission to update a worker
  • Access:  Write
  • Resources: 

    Name: WorkerResource

    Required: Yes

• UpdateWorkerFleet
  
  • Description:  Grants permission to update a worker fleet
  • Access:  Write
  • Resources: 

    Name: WorkerFleetResource

    Required: Yes

Resources

• ActionResource
  
  • Arn:  arn:${Partition}:iotroborunner:${Region}:${Account}:action/${ActionId}
  • Conditions: 

    iotroborunner:ActionResourceId

• ActionTemplateResource
  
  • Arn:  arn:${Partition}:iotroborunner:${Region}:${Account}:action-template/${ActionTemplateId}
  • Conditions: 

    iotroborunner:ActionTemplateResourceId

• ActivityResource
  
  • Arn:  arn:${Partition}:iotroborunner:${Region}:${Account}:activity/${ActivityId}
  • Conditions: 

    iotroborunner:ActivityResourceId

• DestinationRelationshipResource
  
  • Arn:  arn:${Partition}:iotroborunner:${Region}:${Account}:destination-relationship/${DestinationRelationshipId}
  • Conditions: 

    iotroborunner:DestinationRelationshipResourceId

• DestinationResource
  
  • Arn:  arn:${Partition}:iotroborunner:${Region}:${Account}:destination/${DestinationId}
  • Conditions: 

    iotroborunner:DestinationResourceId

• SiteResource
  
  • Arn:  arn:${Partition}:iotroborunner:${Region}:${Account}:site/${SiteId}
  • Conditions: 

    iotroborunner:SiteResourceId

• TaggingResource
  
  • Arn:  arn:${Partition}:iotroborunner:${Region}:${Account}:tag/${TagKey}
  • Conditions: 

    iotroborunner:TaggingResourceTagKey

• TaskResource
  
  • Arn:  arn:${Partition}:iotroborunner:${Region}:${Account}:task/${TaskId}
  • Conditions: 

    iotroborunner:TaskResourceId

• WorkerFleetResource
  
  • Arn:  arn:${Partition}:iotroborunner:${Region}:${Account}:worker-fleet/${WorkerFleetId}
  • Conditions: 

    iotroborunner:WorkerFleetResourceId

• WorkerResource
  
  • Arn:  arn:${Partition}:iotroborunner:${Region}:${Account}:worker/${WorkerId}
  • Conditions: 

    iotroborunner:WorkerResourceId

Conditions

• iotroborunner:ActionResourceId
  
  • Description:  Filters access by the action's identifier
  • Type:  String
• iotroborunner:ActionTemplateResourceId
  
  • Description:  Filters access by the action template's identifier
  • Type:  String
• iotroborunner:ActivityResourceId
  
  • Description:  Filters access by the activity's identifier
  • Type:  String
• iotroborunner:DestinationRelationshipResourceId
  
  • Description:  Filters access by the destination relationship's identifier
  • Type:  String
• iotroborunner:DestinationResourceId
  
  • Description:  Filters access by the destination's identifier
  • Type:  String
• iotroborunner:SiteResourceId
  
  • Description:  Filters access by the site's identifier
  • Type:  String
• iotroborunner:TaggingResourceTagKey
  
  • Description:  Filters access by the metadata tag name
  • Type:  String
• iotroborunner:TaskResourceId
  
  • Description:  Filters access by the task's identifer
  • Type:  String
• iotroborunner:WorkerFleetResourceId
  
  • Description:  Filters access by the worker fleet's identifier
  • Type:  String
• iotroborunner:WorkerResourceId
  
  • Description:  Filters access by the workers identifier
  • Type:  String