Amazon WorkLink (worklink)

2022-05-17

34 new actions, 1 new resource, 3 new conditions

Additions

    Actions
  • AssociateDomain
    • Description:  Grants permission to associate a domain with an Amazon WorkLink fleet
    • Access:  Write
    • Resources: 

      Name: fleet

      Required: Yes

  • AssociateWebsiteAuthorizationProvider
    • Description:  Grants permission to associate a website authorization provider with an Amazon WorkLink fleet
    • Access:  Write
    • Resources: 

      Name: fleet

      Required: Yes

  • AssociateWebsiteCertificateAuthority
    • Description:  Grants permission to associate a website certificate authority with an Amazon WorkLink fleet
    • Access:  Write
    • Resources: 

      Name: fleet

      Required: Yes

  • CreateFleet
    • Description:  Grants permission to create an Amazon WorkLink fleet
    • Access:  Write
    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:TagKeys

  • DeleteFleet
    • Description:  Grants permission to delete an Amazon WorkLink fleet
    • Access:  Write
    • Resources: 

      Name: fleet

      Required: Yes

    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:TagKeys

  • DescribeAuditStreamConfiguration
    • Description:  Grants permission to describe the audit stream configuration for an Amazon WorkLink fleet
    • Access:  Read
    • Resources: 

      Name: fleet

      Required: Yes

  • DescribeCompanyNetworkConfiguration
    • Description:  Grants permission to describe the company network configuration for an Amazon WorkLink fleet
    • Access:  Read
    • Resources: 

      Name: fleet

      Required: Yes

  • DescribeDevice
    • Description:  Grants permission to describe details of a device associated with an Amazon WorkLink fleet
    • Access:  Read
    • Resources: 

      Name: fleet

      Required: Yes

  • DescribeDevicePolicyConfiguration
    • Description:  Grants permission to describe the device policy configuration for an Amazon WorkLink fleet
    • Access:  Read
    • Resources: 

      Name: fleet

      Required: Yes

  • DescribeDomain
    • Description:  Grants permission to describe details about a domain associated with an Amazon WorkLink fleet
    • Access:  Read
    • Resources: 

      Name: fleet

      Required: Yes

  • DescribeFleetMetadata
    • Description:  Grants permission to describe metadata of an Amazon WorkLink fleet
    • Access:  Read
    • Resources: 

      Name: fleet

      Required: Yes

    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:TagKeys

  • DescribeIdentityProviderConfiguration
    • Description:  Grants permission to describe the identity provider configuration for an Amazon WorkLink fleet
    • Access:  Read
    • Resources: 

      Name: fleet

      Required: Yes

  • DescribeWebsiteCertificateAuthority
    • Description:  Grants permission to describe a website certificate authority associated with an Amazon WorkLink fleet
    • Access:  Read
    • Resources: 

      Name: fleet

      Required: Yes

  • DisassociateDomain
    • Description:  Grants permission to disassociate a domain from an Amazon WorkLink fleet
    • Access:  Write
    • Resources: 

      Name: fleet

      Required: Yes

  • DisassociateWebsiteAuthorizationProvider
    • Description:  Grants permission to disassociate a website authorization provider from an Amazon WorkLink fleet
    • Access:  Write
    • Resources: 

      Name: fleet

      Required: Yes

  • DisassociateWebsiteCertificateAuthority
    • Description:  Grants permission to disassociate a website certificate authority from an Amazon WorkLink fleet
    • Access:  Write
    • Resources: 

      Name: fleet

      Required: Yes

  • ListDevices
    • Description:  Grants permission to list the devices associated with an Amazon WorkLink fleet
    • Access:  List
    • Resources: 

      Name: fleet

      Required: Yes

  • ListDomains
    • Description:  Grants permission to list the associated domains for an Amazon WorkLink fleet
    • Access:  List
    • Resources: 

      Name: fleet

      Required: Yes

  • ListFleets
    • Description:  Grants permission to list the Amazon WorkLink fleets associated with the account
    • Access:  List
  • ListTagsForResource
    • Description:  Grants permission to list tags for a resource
    • Access:  Read
    • Resources: 

      Name: fleet

      Required: Yes

  • ListWebsiteAuthorizationProviders
    • Description:  Grants permission to list the website authorization providers for an Amazon WorkLink fleet
    • Access:  List
    • Resources: 

      Name: fleet

      Required: Yes

  • ListWebsiteCertificateAuthorities
    • Description:  Grants permission to list the website certificate authorities associated with an Amazon WorkLink fleet
    • Access:  List
    • Resources: 

      Name: fleet

      Required: Yes

  • RestoreDomainAccess
    • Description:  Grants permission to restore access to a domain associated with an Amazon WorkLink fleet
    • Access:  Write
    • Resources: 

      Name: fleet

      Required: Yes

  • RevokeDomainAccess
    • Description:  Grants permission to revoke access to a domain associated with an Amazon WorkLink fleet
    • Access:  Write
    • Resources: 

      Name: fleet

      Required: Yes

  • SearchEntity
    • Description:  Grants permission to list devices for an Amazon WorkLink fleet
    • Access:  List
    • Resources: 

      Name: fleet

      Required: Yes

  • SignOutUser
    • Description:  Grants permission to sign out a user from an Amazon WorkLink fleet
    • Access:  Write
    • Resources: 

      Name: fleet

      Required: Yes

  • TagResource
    • Description:  Grants permission to add one or more tags to a resource
    • Access:  Tagging
    • Resources: 

      Name: fleet

      Required: Yes

    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:TagKeys

  • UntagResource
    • Description:  Grants permission to remove one or more tags from a resource
    • Access:  Tagging
    • Resources: 

      Name: fleet

      Required: Yes

    • Conditions: 

      aws:TagKeys

  • UpdateAuditStreamConfiguration
    • Description:  Grants permission to update the audit stream configuration for an Amazon WorkLink fleet
    • Access:  Write
    • Resources: 

      Name: fleet

      Required: Yes

  • UpdateCompanyNetworkConfiguration
    • Description:  Grants permission to update the company network configuration for an Amazon WorkLink fleet
    • Access:  Write
    • Resources: 

      Name: fleet

      Required: Yes

  • UpdateDevicePolicyConfiguration
    • Description:  Grants permission to update the device policy configuration for an Amazon WorkLink fleet
    • Access:  Write
    • Resources: 

      Name: fleet

      Required: Yes

  • UpdateDomainMetadata
    • Description:  Grants permission to update the metadata for a domain associated with an Amazon WorkLink fleet
    • Access:  Write
    • Resources: 

      Name: fleet

      Required: Yes

  • UpdateFleetMetadata
    • Description:  Grants permission to update the metadata of an Amazon WorkLink fleet
    • Access:  Write
    • Resources: 

      Name: fleet

      Required: Yes

  • UpdateIdentityProviderConfiguration
    • Description:  Grants permission to update the identity provider configuration for an Amazon WorkLink fleet
    • Access:  Write
    • Resources: 

      Name: fleet

      Required: Yes

    Resources
  • fleet
    • Arn:  arn:${Partition}:worklink::${Account}:fleet/${FleetName}
    • Conditions: 

      aws:ResourceTag/${TagKey}

    Conditions
  • aws:RequestTag/${TagKey}
    • Description:  Filters actions based on the presence of tag key-value pairs in the request
    • Type:  String
  • aws:ResourceTag/${TagKey}
    • Description:  Filters actions based on tag key-value pairs attached to the resource
    • Type:  String
  • aws:TagKeys
    • Description:  Filters actions based on the presence of tag keys in the request
    • Type:  ArrayOfString