AWS Entity Resolution (entityresolution)

Additions

Actions

• CreateMatchingWorkflow
  
  • Description:  Grants permission to create a matching workflow
  • Access:  Write
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• CreateSchemaMapping
  
  • Description:  Grants permission to create a schema mapping
  • Access:  Write
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• DeleteMatchingWorkflow
  
  • Description:  Grants permission to delete a matching workflow
  • Access:  Write
  • Resources: 

    Name: MatchingWorkflow

    Required: Yes

• DeleteSchemaMapping
  
  • Description:  Grants permission to delete a schema mapping
  • Access:  Write
  • Resources: 

    Name: SchemaMapping

    Required: Yes

• GetMatchId
  
  • Description:  Grants permission to get match Id
  • Access:  Read
  • Resources: 

    Name: MatchingWorkflow

    Required: Yes

• GetMatchingJob
  
  • Description:  Grants permission to get a matching job
  • Access:  Read
  • Resources: 

    Name: MatchingWorkflow

    Required: Yes

• GetMatchingWorkflow
  
  • Description:  Grants permission to get a matching workflow
  • Access:  Read
  • Resources: 

    Name: MatchingWorkflow

    Required: Yes

• GetSchemaMapping
  
  • Description:  Grants permission to get a schema mapping
  • Access:  Read
  • Resources: 

    Name: SchemaMapping

    Required: Yes

• ListMatchingJobs
  
  • Description:  Grants permission to list matching jobs
  • Access:  List
  • Resources: 

    Name: MatchingWorkflow

    Required: Yes

• ListMatchingWorkflows
  
  • Description:  Grants permission to list matching workflows
  • Access:  List
• ListSchemaMappings
  
  • Description:  Grants permission to list schema mappings
  • Access:  List
• ListTagsForResource
  
  • Description:  Grants permission to List tags for a resource
  • Access:  Read
• StartMatchingJob
  
  • Description:  Grants permission to start a matching job
  • Access:  Write
  • Resources: 

    Name: MatchingWorkflow

    Required: Yes

• TagResource
  
  • Description:  Grants permission to adds tags to a resource
  • Access:  Tagging
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• UntagResource
  
  • Description:  Grants permission to untag a resource
  • Access:  Tagging
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• UpdateMatchingWorkflow
  
  • Description:  Grants permission to update a matching workflow
  • Access:  Write
  • Resources: 

    Name: MatchingWorkflow

    Required: Yes

Resources

• MatchingWorkflow
  
  • Arn:  arn:${Partition}:entityresolution::${Account}:matchingworkflow/${WorkflowName}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• SchemaMapping
  
  • Arn:  arn:${Partition}:entityresolution::${Account}:schemamapping/${SchemaName}
  • Conditions: 

    aws:ResourceTag/${TagKey}

Conditions

• aws:RequestTag/${TagKey}
  
  • Description:  Filters access by a key that is present in the request the user makes to the entity resolution service
  • Type:  String
• aws:ResourceTag/${TagKey}
  
  • Description:  Filters access by a tag key and value pair
  • Type:  String
• aws:TagKeys
  
  • Description:  Filters access by the list of all the tag key names present in the request the user makes to the entity resolution service
  • Type:  ArrayOfString