2023-03-25
          
        33 new actions, 4 new resources | 44 updated actions
  
    
        
          
            Additions
          
              
                Actions
                
                    - 
                        CreateAppInstanceBot
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to create a bot under an Amazon Chime AppInstance
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
- 
                                Conditions: 
                                
    aws:TagKeys aws:RequestTag/${TagKey} 
 
- 
                        CreateMediaInsightsPipeline
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to create a media insights pipeline
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
- 
                                Resources: 
                                
      
        Name: media-insights-pipeline-configuration
       
        Required: Yes
       
- 
                                Conditions: 
                                
    aws:TagKeys aws:RequestTag/${TagKey} 
- 
                                Dependents: 
                                
    chime:TagResource kinesisvideo:DescribeStream 
 
- 
                        CreateMediaInsightsPipelineConfiguration
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to create a media insights pipeline configuration
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
- 
                                Conditions: 
                                
    aws:TagKeys aws:RequestTag/${TagKey} 
- 
                                Dependents: 
                                
    chime:TagResource iam:PassRole kinesis:DescribeStream s3:ListBucket 
 
- 
                        CreateVoiceProfile
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to create a voice profile
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
 
- 
                        CreateVoiceProfileDomain
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to create a voice profile domain
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
- 
                                Conditions: 
                                
    aws:TagKeys aws:RequestTag/${TagKey} 
- 
                                Dependents: 
                                
    chime:TagResource kms:CreateGrant kms:DescribeKey 
 
- 
                        DeleteAppInstanceBot
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to delete an AppInstanceBot
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
- 
                                Resources: 
                                
      
        Name: app-instance-bot
       
        Required: Yes
       
 
- 
                        DeleteMediaInsightsPipelineConfiguration
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to delete a media insights pipeline configuration
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
- 
                                Resources: 
                                
      
        Name: media-insights-pipeline-configuration
       
        Required: Yes
       
- 
                                Dependents: 
                                
    chime:ListVoiceConnectors 
 
- 
                        DeleteMessagingStreamingConfigurations
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to delete the data streaming configurations of an AppInstance
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
- 
                                Resources: 
                                
      
        Name: app-instance
       
        Required: Yes
       
 
- 
                        DeleteVoiceProfile
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to delete a voice profile
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
- 
                                Resources: 
                                
      
        Name: voice-profile
       
        Required: Yes
       
 
- 
                        DeleteVoiceProfileDomain
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to delete a voice profile domain
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
- 
                                Resources: 
                                
      
        Name: voice-profile-domain
       
        Required: Yes
       
 
- 
                        DescribeAppInstanceBot
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to get the full details of an AppInstanceBot
                                
                              
- 
                                Access: 
                                
                                    Read
                                
                              
- 
                                Resources: 
                                
      
        Name: app-instance-bot
       
        Required: Yes
       
 
- 
                        GetMediaInsightsPipelineConfiguration
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to get a media insights pipeline configuration
                                
                              
- 
                                Access: 
                                
                                    Read
                                
                              
- 
                                Resources: 
                                
      
        Name: media-insights-pipeline-configuration
       
        Required: Yes
       
 
- 
                        GetMessagingStreamingConfigurations
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to get the data streaming configurations of an AppInstance
                                
                              
- 
                                Access: 
                                
                                    Read
                                
                              
- 
                                Resources: 
                                
      
        Name: app-instance
       
        Required: Yes
       
 
- 
                        GetSpeakerSearchTask
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to get a speaker search task
                                
                              
- 
                                Access: 
                                
                                    Read
                                
                              
 
- 
                        GetVoiceProfile
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to get a voice profile
                                
                              
- 
                                Access: 
                                
                                    Read
                                
                              
- 
                                Resources: 
                                
      
        Name: voice-profile
       
        Required: Yes
       
 
- 
                        GetVoiceProfileDomain
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to get a voice profile domain
                                
                              
- 
                                Access: 
                                
                                    Read
                                
                              
- 
                                Resources: 
                                
      
        Name: voice-profile-domain
       
        Required: Yes
       
 
- 
                        GetVoiceToneAnalysisTask
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to get a voice tone analysis task
                                
                              
- 
                                Access: 
                                
                                    Read
                                
                              
 
- 
                        ListAppInstanceBots
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to list all AppInstanceBots created under a single app instance
                                
                              
- 
                                Access: 
                                
                                    List
                                
                              
- 
                                Resources: 
                                
      
        Name: app-instance-bot
       
        Required: Yes
       
 
- 
                        ListMediaInsightsPipelineConfigurations
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to list all media insights pipeline configurations
                                
                              
- 
                                Access: 
                                
                                    List
                                
                              
 
- 
                        ListVoiceProfileDomains
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to list voice profile domains
                                
                              
- 
                                Access: 
                                
                                    List
                                
                              
 
- 
                        ListVoiceProfiles
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to list voice profiles
                                
                              
- 
                                Access: 
                                
                                    List
                                
                              
- 
                                Resources: 
                                
      
        Name: voice-profile-domain
       
        Required: Yes
       
 
- 
                        PutAppInstanceUserExpirationSettings
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to put expiration settings for an AppInstanceUser
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
- 
                                Resources: 
                                
      
        Name: app-instance-user
       
        Required: Yes
       
 
- 
                        PutChannelExpirationSettings
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to put expiration settings for a channel
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
- 
                                Resources: 
                                
      
        Name: app-instance-user
       
        Required: Yes
       
        Name: channel
       
        Required: Yes
       
 
- 
                        PutMessagingStreamingConfigurations
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to put the data streaming configurations of an AppInstance
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
- 
                                Resources: 
                                
      
        Name: app-instance
       
        Required: Yes
       
 
- 
                        StartSpeakerSearchTask
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to start a speaker search task
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
 
- 
                        StartVoiceToneAnalysisTask
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to start a voice tone analysis task
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
 
- 
                        StopSpeakerSearchTask
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to stop a speaker search task
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
 
- 
                        StopVoiceToneAnalysisTask
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to stop a voice tone analysis task
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
 
- 
                        UpdateAppInstanceBot
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to update the details for an AppInstanceBot
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
- 
                                Resources: 
                                
      
        Name: app-instance-bot
       
        Required: Yes
       
 
- 
                        UpdateMediaInsightsPipelineConfiguration
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to update the status of a media insights pipeline configuration
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
- 
                                Resources: 
                                
      
        Name: media-insights-pipeline-configuration
       
        Required: Yes
       
- 
                                Dependents: 
                                
    chime:ListVoiceConnectors iam:PassRole kinesis:DescribeStream s3:ListBucket 
 
- 
                        UpdateMediaInsightsPipelineStatus
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to update the status of a media insights pipeline
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
- 
                                Resources: 
                                
      
        Name: media-pipeline
       
        Required: Yes
       
 
- 
                        UpdateVoiceProfile
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to update a voice profile
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
- 
                                Resources: 
                                
      
        Name: voice-profile
       
        Required: Yes
       
 
- 
                        UpdateVoiceProfileDomain
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to update a voice profile domain
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
- 
                                Resources: 
                                
      
        Name: voice-profile-domain
       
        Required: Yes
       
 
                Resources
                
                    - 
                        app-instance-bot
                        
 
                              - 
                                Arn: 
                                
                                    arn:${Partition}:chime:${Region}:${AccountId}:app-instance/${AppInstanceId}/bot/${AppInstanceBotId}
                                
                              
- 
                                Conditions: 
                                
    aws:ResourceTag/${TagKey} 
 
- 
                        media-insights-pipeline-configuration
                        
 
                              - 
                                Arn: 
                                
                                    arn:${Partition}:chime:${Region}:${AccountId}:media-insights-pipeline-configuration/${ConfigurationName}
                                
                              
- 
                                Conditions: 
                                
    aws:ResourceTag/${TagKey} 
 
- 
                        voice-profile-domain
                        
 
                              - 
                                Arn: 
                                
                                    arn:${Partition}:chime:${Region}:${AccountId}:voice-profile-domain/${VoiceProfileDomainId}
                                
                              
- 
                                Conditions: 
                                
    aws:ResourceTag/${TagKey} 
 
- 
                        voice-profile
                        
 
                              - 
                                Arn: 
                                
                                    arn:${Partition}:chime:${Region}:${AccountId}:voice-profile/${VoiceProfileId}