Amazon FinSpace (finspace)

Additions

Actions

• ConnectKxCluster
  
  • Description:  Grants permission to connect to a kdb cluster
  • Access:  Write
  • Resources: 

    Name: kxCluster

    Required: Yes

• CreateKxChangeset
  
  • Description:  Grants permission to create a changeset for a kdb database
  • Access:  Write
  • Resources: 

    Name: kxDatabase

    Required: Yes

• CreateKxCluster
  
  • Description:  Grants permission to create a cluster in a managed kdb environment
  • Access:  Write
  • Resources: 

    Name: kxCluster

    Required: Yes

  • Conditions: 

    aws:TagKeys

    aws:RequestTag/${TagKey}

  • Dependents: 

    ec2:DescribeSubnets

    finspace:MountKxDatabase

• CreateKxDatabase
  
  • Description:  Grants permission to create a kdb database in a managed kdb environment
  • Access:  Write
  • Resources: 

    Name: kxDatabase

    Required: Yes

  • Conditions: 

    aws:TagKeys

    aws:RequestTag/${TagKey}

• CreateKxEnvironment
  
  • Description:  Grants permission to create a managed kdb environment
  • Access:  Write
  • Conditions: 

    aws:TagKeys

    aws:RequestTag/${TagKey}

• CreateKxUser
  
  • Description:  Grants permission to create a user in a managed kdb environment
  • Access:  Write
  • Resources: 

    Name: kxEnvironment

    Required: Yes

  • Conditions: 

    aws:TagKeys

    aws:RequestTag/${TagKey}

• DeleteKxCluster
  
  • Description:  Grants permission to delete a kdb cluster
  • Access:  Write
  • Resources: 

    Name: kxCluster

    Required: Yes

• DeleteKxDatabase
  
  • Description:  Grants permission to delete a kdb database
  • Access:  Write
  • Resources: 

    Name: kxDatabase

    Required: Yes

• DeleteKxEnvironment
  
  • Description:  Grants permission to delete a managed kdb environment
  • Access:  Write
  • Resources: 

    Name: kxEnvironment

    Required: Yes

• DeleteKxUser
  
  • Description:  Grants permission to delete a kdb user
  • Access:  Write
  • Resources: 

    Name: kxUser

    Required: Yes

• GetKxChangeset
  
  • Description:  Grants permission to describe a changeset for a kdb database
  • Access:  Read
  • Resources: 

    Name: kxDatabase

    Required: Yes

• GetKxCluster
  
  • Description:  Grants permission to describe a cluster in a managed kdb environment
  • Access:  Read
  • Resources: 

    Name: kxCluster

    Required: Yes

• GetKxConnectionString
  
  • Description:  Grants permission to retrieve a connection string for kdb clusters
  • Access:  Read
  • Resources: 

    Name: kxCluster

    Required: Yes

  • Dependents: 

    finspace:ConnectKxCluster

• GetKxDatabase
  
  • Description:  Grants permission to describe a kdb database
  • Access:  Read
  • Resources: 

    Name: kxDatabase

    Required: Yes

• GetKxEnvironment
  
  • Description:  Grants permission to describe a managed kdb environment
  • Access:  Read
  • Resources: 

    Name: kxEnvironment

    Required: Yes

• GetKxUser
  
  • Description:  Grants permission to describe a kdb user
  • Access:  Read
  • Resources: 

    Name: kxUser

    Required: Yes

• ListKxChangesets
  
  • Description:  Grants permission to list changesets for a kdb database
  • Access:  List
  • Resources: 

    Name: kxDatabase

    Required: Yes

• ListKxClusterNodes
  
  • Description:  Grants permission to list cluster nodes in a managed kdb environment
  • Access:  List
  • Resources: 

    Name: kxCluster

    Required: Yes

• ListKxClusters
  
  • Description:  Grants permission to list clusters in a managed kdb environment
  • Access:  List
  • Resources: 

    Name: kxEnvironment

    Required: Yes

• ListKxDatabases
  
  • Description:  Grants permission to list kdb databases in a managed kdb environment
  • Access:  List
  • Resources: 

    Name: kxEnvironment

    Required: Yes

• ListKxEnvironments
  
  • Description:  Grants permission to list managed kdb environments
  • Access:  List
• ListKxUsers
  
  • Description:  Grants permission to list users in a managed kdb environment
  • Access:  List
  • Resources: 

    Name: kxEnvironment

    Required: Yes

• MountKxDatabase
  
  • Description:  Grants permission to mount a database to a kdb cluster
  • Access:  Write
  • Resources: 

    Name: kxDatabase

    Required: Yes

• UpdateKxClusterDatabases
  
  • Description:  Grants permission to update databases for a cluster in a managed kdb environment
  • Access:  Write
  • Resources: 

    Name: kxCluster

    Required: Yes

• UpdateKxDatabase
  
  • Description:  Grants permission to update a kdb database
  • Access:  Write
  • Resources: 

    Name: kxDatabase

    Required: Yes

• UpdateKxEnvironment
  
  • Description:  Grants permission to update a managed kdb environment
  • Access:  Write
  • Resources: 

    Name: kxEnvironment

    Required: Yes

• UpdateKxEnvironmentNetwork
  
  • Description:  Grants permission to update the network for a managed kdb environment
  • Access:  Write
  • Resources: 

    Name: kxEnvironment

    Required: Yes

• UpdateKxUser
  
  • Description:  Grants permission to update a kdb user
  • Access:  Write
  • Resources: 

    Name: kxUser

    Required: Yes

Resources

• kxEnvironment
  
  • Arn:  arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/${EnvironmentId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• kxUser
  
  • Arn:  arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/${EnvironmentId}/kxUser/${UserName}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• kxCluster
  
  • Arn:  arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/${EnvironmentId}/kxCluster/${KxCluster}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• kxDatabase
  
  • Arn:  arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/${EnvironmentId}/kxDatabase/${KxDatabase}
  • Conditions: 

    aws:ResourceTag/${TagKey}

Updates

Actions

• ListTagsForResource
  
  Access
  
  • Read  ⟶  List
  Resources
  
  • ＋ kxCluster
  • ＋ kxDatabase
  • ＋ kxEnvironment
  • ＋ kxUser
• TagResource
  
  Resources
  

  • New_value: No

    Old_value: Yes

  • ＋ kxCluster
  • ＋ kxDatabase
  • ＋ kxEnvironment
  • ＋ kxUser
  Conditions
  
  • ＋ aws:TagKeys
  • ＋ aws:RequestTag/${TagKey}
• UntagResource
  
  Resources
  

  • New_value: No

    Old_value: Yes

  • ＋ kxCluster
  • ＋ kxDatabase
  • ＋ kxEnvironment
  • ＋ kxUser
  Conditions
  
  • ＋ aws:TagKeys