Amazon EventBridge Pipes (pipes)

Additions

Actions

• CreatePipe
  
  • Description:  Grants permission to create a pipe
  • Access:  Write
  • Resources: 

    Name: pipe

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:ResourceTag/${TagKey}

    aws:TagKeys

  • Dependents: 

    iam:PassRole

• DeletePipe
  
  • Description:  Grants permission to delete a pipe
  • Access:  Write
  • Resources: 

    Name: pipe

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• DescribePipe
  
  • Description:  Grants permission to describe a pipe
  • Access:  Read
  • Resources: 

    Name: pipe

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• ListPipes
  
  • Description:  Grants permission to list all pipes in your account
  • Access:  List
• ListTagsForResource
  
  • Description:  Grants permission to list the tags for a resource
  • Access:  Read
  • Resources: 

    Name: pipe

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• StartPipe
  
  • Description:  Grants permission to start a pipe
  • Access:  Write
  • Resources: 

    Name: pipe

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• StopPipe
  
  • Description:  Grants permission to stop a pipe
  • Access:  Write
  • Resources: 

    Name: pipe

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• TagResource
  
  • Description:  Grants permission to add tags to a resource
  • Access:  Tagging
  • Resources: 

    Name: pipe

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:ResourceTag/${TagKey}

    aws:TagKeys

• UntagResource
  
  • Description:  Grants permission to remove tags from a resource
  • Access:  Tagging
  • Resources: 

    Name: pipe

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

    aws:TagKeys

• UpdatePipe
  
  • Description:  Grants permission to update a pipe
  • Access:  Write
  • Resources: 

    Name: pipe

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

  • Dependents: 

    iam:PassRole

Resources

• pipe
  
  • Arn:  arn:${Partition}:pipes:${Region}:${Account}:pipe/${Name}
  • Conditions: 

    aws:ResourceTag/${TagKey}

Conditions

• aws:RequestTag/${TagKey}
  
  • Description:  Filters access by allowed set of values for each of the tags
  • Type:  String
• aws:ResourceTag/${TagKey}
  
  • Description:  Filters access by tag-value associated with the resource
  • Type:  String
• aws:TagKeys
  
  • Description:  Filters access by the presence of mandatory tags in the request
  • Type:  ArrayOfString