AWS Billing and Cost Management And Cost Management Data Exports (bcm-data-exports)

Additions

Actions

• CreateExport
  
  • Description:  Grants permission to create an export
  • Access:  Write
  • Resources: 

    Name: table

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• DeleteExport
  
  • Description:  Grants permission to delete an export
  • Access:  Write
  • Resources: 

    Name: export

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• GetExecution
  
  • Description:  Grants permission to get the execution of an export
  • Access:  Read
  • Resources: 

    Name: export

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• GetExport
  
  • Description:  Grants permission to get an export
  • Access:  Read
  • Resources: 

    Name: export

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• GetTable
  
  • Description:  Grants permission to get the details of a table
  • Access:  Read
  • Resources: 

    Name: table

    Required: Yes

• ListExecutions
  
  • Description:  Grants permission to list all executions of an export
  • Access:  List
  • Resources: 

    Name: export

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• ListExports
  
  • Description:  Grants permission to list all exports
  • Access:  List
• ListTables
  
  • Description:  Grants permission to list all available tables
  • Access:  List
• ListTagsForResource
  
  • Description:  Grants permission to list tags for a resource
  • Access:  Read
  • Resources: 

    Name: export

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• TagResource
  
  • Description:  Grants permission to tag a resource
  • Access:  Tagging
  • Resources: 

    Name: export

    Required: Yes

  • Conditions: 

    aws:TagKeys

    aws:RequestTag/${TagKey}

    aws:ResourceTag/${TagKey}

• UntagResource
  
  • Description:  Grants permission to untag a resource
  • Access:  Tagging
  • Resources: 

    Name: export

    Required: Yes

  • Conditions: 

    aws:TagKeys

    aws:ResourceTag/${TagKey}

• UpdateExport
  
  • Description:  Grants permission to update an export
  • Access:  Write
  • Resources: 

    Name: export

    Required: Yes

    Name: table

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

Resources

• export
  
  • Arn:  arn:${Partition}:bcm-data-exports:${Region}:${Account}:export/${Identifier}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• table
  
  • Arn:  arn:${Partition}:bcm-data-exports:${Region}:${Account}:table/${Identifier}

Conditions

• aws:RequestTag/${TagKey}
  
  • Description:  Filters access by the tags that are passed in the request
  • Type:  String
• aws:ResourceTag/${TagKey}
  
  • Description:  Filters access by the tags associated with the resource
  • Type:  String
• aws:TagKeys
  
  • Description:  Filters access by the tag keys that are passed in the request
  • Type:  ArrayOfString