AWS Resource Explorer (resource-explorer-2)

Additions

Actions

• AssociateDefaultView
  
  • Description:  Grants permission to set the specified view as the default for this AWS Region in this AWS account
  • Access:  Write
  • Resources: 

    Name: view

    Required: Yes

• BatchGetView
  
  • Description:  Grants permission to retrieve details about views that you specify by a list of ARNs
  • Access:  Read
  • Dependents: 

    resource-explorer-2:GetView

• CreateIndex
  
  • Description:  Grants permission to turn on Resource Explorer in the AWS Region in which you called this operation by creating an index
  • Access:  Write
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• CreateView
  
  • Description:  Grants permission to create a view that users can query
  • Access:  Write
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• DeleteIndex
  
  • Description:  Grants permission to turn off Resource Explorer in the specified AWS Region by deleting the index
  • Access:  Write
  • Resources: 

    Name: index

    Required: Yes

• DeleteView
  
  • Description:  Grants permission to delete a view
  • Access:  Write
  • Resources: 

    Name: view

    Required: Yes

• DisassociateDefaultView
  
  • Description:  Grants permission to remove the default view for the AWS Region in which you call this operation
  • Access:  Write
• GetDefaultView
  
  • Description:  Grants permission to retrieve the Amazon resource name (ARN) of the view that is the default for the AWS Region in which you call this operation
  • Access:  Read
• GetIndex
  
  • Description:  Grants permission to retrieve information about the index in the AWS Region in which you call this operation
  • Access:  Read
• GetView
  
  • Description:  Grants permission to retrieve information about the specified view
  • Access:  Read
  • Resources: 

    Name: view

    Required: Yes

• ListIndexes
  
  • Description:  Grants permission to list the indexes in all AWS Regions
  • Access:  List
• ListSupportedResourceTypes
  
  • Description:  Grants permission to retrieve a list of all resource types currently supported by Resource Explorer
  • Access:  List
• ListTagsForResource
  
  • Description:  Grants permission to list the tags that are attached to the specified resource
  • Access:  Read
  • Resources: 

    Name: index

    Required: No

    Name: view

    Required: No

• ListViews
  
  • Description:  Grants permission to list the Amazon resource names (ARNs) of all of the views available in the AWS Region in which you call this operation
  • Access:  List
• Search
  
  • Description:  Grants permission to search for resources and display details about all resources that match the specified criteria
  • Access:  Read
  • Resources: 

    Name: view

    Required: Yes

• TagResource
  
  • Description:  Grants permission to add one or more tag key and value pairs to the specified resource
  • Access:  Tagging
  • Resources: 

    Name: index

    Required: No

    Name: view

    Required: No

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• UntagResource
  
  • Description:  Grants permission to remove one or more tag key and value pairs from the specified resource
  • Access:  Tagging
  • Resources: 

    Name: index

    Required: No

    Name: view

    Required: No

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• UpdateIndexType
  
  • Description:  Grants permission to change the type of the index from LOCAL to AGGREGATOR or back
  • Access:  Write
  • Resources: 

    Name: index

    Required: Yes

• UpdateView
  
  • Description:  Grants permission to modify some of the details of a view
  • Access:  Write
  • Resources: 

    Name: view

    Required: Yes

Resources

• view
  
  • Arn:  arn:${Partition}:resource-explorer-2:${Region}:${Account}:view/${ViewName}/${ViewUuid}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• index
  
  • Arn:  arn:${Partition}:resource-explorer-2:${Region}:${Account}:index/${IndexUuid}
  • Conditions: 

    aws:ResourceTag/${TagKey}

Conditions

• aws:RequestTag/${TagKey}
  
  • Description:  Filters access by the tag keys that are passed in the request
  • Type:  String
• aws:ResourceTag/${TagKey}
  
  • Description:  Filters access by the tag keyss attached to the resource
  • Type:  String
• aws:TagKeys
  
  • Description:  Filters access by the tag keys that are passed in the request
  • Type:  ArrayOfString