AWS AppFabric (appfabric)

Additions

Actions

• BatchGetUserAccessTasks
  
  • Description:  Grants permission to start user access tasks for multiple users
  • Access:  Write
  • Resources: 

    Name: appbundle

    Required: Yes

• ConnectAppAuthorization
  
  • Description:  Grants permission to connect application authorizations
  • Access:  Write
  • Resources: 

    Name: appauthorization

    Required: Yes

• CreateAppAuthorization
  
  • Description:  Grants permission to create application authorizations for application bundles
  • Access:  Write
  • Resources: 

    Name: appbundle

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• CreateAppBundle
  
  • Description:  Grants permission to create application bundles in your account
  • Access:  Write
  • Resources: 

    Name: appbundle

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• CreateIngestion
  
  • Description:  Grants permission to create ingestions for application bundles
  • Access:  Write
  • Resources: 

    Name: appbundle

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• CreateIngestionDestination
  
  • Description:  Grants permission to create ingestion destinations for application bundles
  • Access:  Write
  • Resources: 

    Name: appbundle

    Required: Yes

    Name: ingestion

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• DeleteAppAuthorization
  
  • Description:  Grants permission to delete application authorizations within an application bundle
  • Access:  Write
  • Resources: 

    Name: appauthorization

    Required: Yes

• DeleteAppBundle
  
  • Description:  Grants permission to delete application bundles in your account
  • Access:  Write
  • Resources: 

    Name: appbundle

    Required: Yes

• DeleteIngestion
  
  • Description:  Grants permission to delete ingestions within an application bundle
  • Access:  Write
  • Resources: 

    Name: ingestion

    Required: Yes

• DeleteIngestionDestination
  
  • Description:  Grants permission to delete destinations within an ingestion
  • Access:  Write
  • Resources: 

    Name: ingestiondestination

    Required: Yes

• GetAppAuthorization
  
  • Description:  Grants permission to view details about application authorizations
  • Access:  Read
  • Resources: 

    Name: appauthorization

    Required: Yes

    Name: appbundle

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• GetAppBundle
  
  • Description:  Grants permission to view details about application bundles
  • Access:  Read
  • Resources: 

    Name: appbundle

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• GetIngestion
  
  • Description:  Grants permission to view details about ingestions
  • Access:  Read
  • Resources: 

    Name: appbundle

    Required: Yes

    Name: ingestion

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• GetIngestionDestination
  
  • Description:  Grants permission to view details about ingestion destinations
  • Access:  Read
  • Resources: 

    Name: appbundle

    Required: Yes

    Name: ingestion

    Required: Yes

    Name: ingestiondestination

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• ListAppAuthorizations
  
  • Description:  Grants permission to retrieve a list of application authorizations within an application bundle
  • Access:  List
  • Resources: 

    Name: appbundle

    Required: Yes

• ListAppBundles
  
  • Description:  Grants permission to retrieve a list of application bundles in your account
  • Access:  List
• ListIngestionDestinations
  
  • Description:  Grants permission to retrieve a list of destinations within an ingestion
  • Access:  List
  • Resources: 

    Name: appbundle

    Required: Yes

    Name: ingestion

    Required: Yes

• ListIngestions
  
  • Description:  Grants permission to retrieve a list of ingestions within an application bundle
  • Access:  List
  • Resources: 

    Name: appbundle

    Required: Yes

• ListTagsForResource
  
  • Description:  Grants permission to list tags for AppFabric resouces
  • Access:  Read
  • Resources: 

    Name: appauthorization

    Required: No

    Name: appbundle

    Required: No

    Name: ingestion

    Required: No

    Name: ingestiondestination

    Required: No

• StartIngestion
  
  • Description:  Grants permission to start ingestions
  • Access:  Write
  • Resources: 

    Name: ingestion

    Required: Yes

• StartUserAccessTasks
  
  • Description:  Grants permission to start user access tasks
  • Access:  Write
  • Resources: 

    Name: appbundle

    Required: Yes

• StopIngestion
  
  • Description:  Grants permission to stop ingestions
  • Access:  Write
  • Resources: 

    Name: ingestion

    Required: Yes

• TagResource
  
  • Description:  Grants permission to tag AppFabric resources
  • Access:  Tagging
  • Resources: 

    Name: appauthorization

    Required: No

    Name: appbundle

    Required: No

    Name: ingestion

    Required: No

    Name: ingestiondestination

    Required: No

  • Conditions: 

    aws:TagKeys

    aws:RequestTag/${TagKey}

    aws:ResourceTag/${TagKey}

• UntagResource
  
  • Description:  Grants permission to untag AppFabric resources
  • Access:  Tagging
  • Resources: 

    Name: appauthorization

    Required: No

    Name: appbundle

    Required: No

    Name: ingestion

    Required: No

    Name: ingestiondestination

    Required: No

  • Conditions: 

    aws:TagKeys

• UpdateAppAuthorization
  
  • Description:  Grants permission to update application authorizations within application bundles
  • Access:  Write
  • Resources: 

    Name: appauthorization

    Required: Yes

    Name: appbundle

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• UpdateIngestionDestination
  
  • Description:  Grants permission to update destinations within ingestions
  • Access:  Write
  • Resources: 

    Name: appbundle

    Required: Yes

    Name: ingestion

    Required: Yes

    Name: ingestiondestination

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

Resources

• appbundle
  
  • Arn:  arn:${Partition}:appfabric:${Region}:${Account}:appbundle/${AppBundleIdentifier}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• appauthorization
  
  • Arn:  arn:${Partition}:appfabric:${Region}:${Account}:appbundle/${AppbundleId}/appauthorization/${AppAuthorizationIdentifier}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• ingestion
  
  • Arn:  arn:${Partition}:appfabric:${Region}:${Account}:appbundle/${AppbundleId}/ingestion/${AppAuthorizationIdentifier}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• ingestiondestination
  
  • Arn:  arn:${Partition}:appfabric:${Region}:${Account}:appbundle/${AppbundleId}/ingestion/${AppAuthorizationIdentifier}/ingestiondestination/${IngestionDestinationIdentifier}
  • Conditions: 

    aws:ResourceTag/${TagKey}

Conditions

• aws:RequestTag/${TagKey}
  
  • Description:  Filters access based on the tags that are passed in the request
  • Type:  String
• aws:ResourceTag/${TagKey}
  
  • Description:  Filters access based on the tags associated with the resource
  • Type:  String
• aws:TagKeys
  
  • Description:  Filters access based on the tag keys that are passed in the request
  • Type:  ArrayOfString