Change log of AWS IAM permissions

2022-03-31

4 new actions, 1 new resource | 1 updated condition, 1 updated action

Actions

DescribeTargetedSentimentDetectionJob
- Description: Grants permission to get the properties associated with a targeted sentiment detection job
- Access: Read
- Resources:
  Name: targeted-sentiment-detection-job
  
  Required: Yes
ListTargetedSentimentDetectionJobs
- Description: Grants permission to get a list of targeted sentiment detection jobs that you have submitted
- Access: Read
StartTargetedSentimentDetectionJob
- Description: Grants permission to start an asynchronous targeted sentiment detection job for a collection of documents
- Access: Write
- Resources:
  Name: targeted-sentiment-detection-job
  
  Required: Yes
- Conditions:
  aws:RequestTag/${TagKey}
  
  aws:TagKeys
  
  comprehend:VolumeKmsKey
  
  comprehend:OutputKmsKey
  
  comprehend:VpcSecurityGroupIds
  
  comprehend:VpcSubnets
StopTargetedSentimentDetectionJob
- Description: Grants permission to stop a targeted sentiment detection job
- Access: Write
- Resources:
  Name: targeted-sentiment-detection-job
  
  Required: Yes

Resources

targeted-sentiment-detection-job
- Arn: arn:${Partition}:comprehend:${Region}:${Account}:targeted-sentiment-detection-job/${JobId}
- Conditions:
  aws:ResourceTag/${TagKey}

Conditions

Actions

Amazon Comprehend (comprehend)