AWS AppConfig (appconfig)

Additions

Actions

• CreateExtension
  
  • Description:  Grants permission to create an extension
  • Access:  Write
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• CreateExtensionAssociation
  
  • Description:  Grants permission to create an extension association
  • Access:  Write
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• DeleteExtension
  
  • Description:  Grants permission to delete an extension
  • Access:  Write
  • Resources: 

    Name: extension

    Required: Yes

• DeleteExtensionAssociation
  
  • Description:  Grants permission to delete an extension association
  • Access:  Write
  • Resources: 

    Name: extensionassociation

    Required: Yes

• GetExtension
  
  • Description:  Grants permission to view details about an extension
  • Access:  Read
  • Resources: 

    Name: extension

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• GetExtensionAssociation
  
  • Description:  Grants permission to view details about an extension association
  • Access:  Read
  • Resources: 

    Name: extensionassociation

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• ListExtensionAssociations
  
  • Description:  Grants permission to list the extension associations in your account
  • Access:  List
• ListExtensions
  
  • Description:  Grants permission to list the extensions in your account
  • Access:  List
• UpdateExtension
  
  • Description:  Grants permission to modify an extension
  • Access:  Write
  • Resources: 

    Name: extension

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• UpdateExtensionAssociation
  
  • Description:  Grants permission to modify an extension association
  • Access:  Write
  • Resources: 

    Name: extensionassociation

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

Resources

• extension
  
  • Arn:  arn:${Partition}:appconfig:${Region}:${Account}:extension/${ExtensionId}/${ExtensionVersionNumber}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• extensionassociation
  
  • Arn:  arn:${Partition}:appconfig:${Region}:${Account}:extensionassociation/${ExtensionAssociationId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

Updates

Actions

• TagResource
  
  Resources
  
  • ＋ extension
  • ＋ extensionassociation
• UntagResource
  
  Resources
  
  • ＋ extension
  • ＋ extensionassociation