AWS Database Migration Service (dms)

2024-02-09

18 new actions, 4 new resources, 4 new conditions | 16 updated actions

Additions

    Actions
  • CreateTest
    • Description:  Grants permission to create a test using the provided settings
    • Access:  Write
    • Resources: 

      Name: Test

      Required: Yes
  • CreateTestEnvironments
    • Description:  Grants permission to create a test environment using the provided settings
    • Access:  Write
    • Resources: 

      Name: TestEnvironment

      Required: Yes
  • CreateTestPlan
    • Description:  Grants permission to create a test plan using the provided settings
    • Access:  Write
    • Resources: 

      Name: TestPlan

      Required: Yes
  • CreateTestRun
    • Description:  Grants permission to create a test run using the provided settings
    • Access:  Write
    • Resources: 

      Name: TestRun

      Required: Yes
  • DeleteTest
    • Description:  Grants permission to delete the specified test
    • Access:  Write
    • Resources: 

      Name: TestPlan

      Required: Yes
  • DeleteTestPlan
    • Description:  Grants permission to delete the specified test plan
    • Access:  Write
    • Resources: 

      Name: TestPlan

      Required: Yes
  • DescribeTestEnvironments
    • Description:  Grants permission to list a test environment for a migration project
    • Access:  Read
    • Resources: 

      Name: TestEnvironment

      Required: Yes
  • DescribeTestGenerationStatus
    • Description:  Grants permission to list statuses of test generations for a migration project
    • Access:  Read
    • Resources: 

      Name: TestPlan

      Required: Yes
  • DescribeTestPlans
    • Description:  Grants permission to list all the test plans for a migration project
    • Access:  Read
    • Resources: 

      Name: TestPlan

      Required: Yes
  • DescribeTestRunResultsSummaries
    • Description:  Grants permission to view the summary of a specific test run
    • Access:  Read
    • Resources: 

      Name: TestRun

      Required: Yes
  • DescribeTestRuns
    • Description:  Grants permission to list all the test runs for a migration project
    • Access:  Read
    • Resources: 

      Name: TestRun

      Required: Yes
  • DescribeTests
    • Description:  Grants permission to list all the tests for a test plan
    • Access:  Read
    • Resources: 

      Name: Test

      Required: Yes
  • ModifyTest
    • Description:  Grants permission to modify the specified test
    • Access:  Write
    • Resources: 

      Name: Test

      Required: Yes
  • ModifyTestPlan
    • Description:  Grants permission to modify the specified test plan
    • Access:  Write
    • Resources: 

      Name: TestPlan

      Required: Yes
  • StartGenerateTests
    • Description:  Grants permission to start test generation for the specified test plan
    • Access:  Write
    • Resources: 

      Name: TestPlan

      Required: Yes
  • StopGenerateTests
    • Description:  Grants permission to stop test generation for the specified test plan
    • Access:  Write
    • Resources: 

      Name: TestPlan

      Required: Yes
  • StopTestRun
    • Description:  Grants permission to stop a test run
    • Access:  Write
    • Resources: 

      Name: TestRun

      Required: Yes
  • ViewTestRunResults
    • Description:  Grants permission to view the details of a specific test in a test run
    • Access:  Read
    • Resources: 

      Name: TestRun

      Required: Yes
    Resources
  • TestPlan
    • Arn:  arn:${Partition}:dms:${Region}:${Account}:test-plan:*
    • Conditions: 

      aws:ResourceTag/${TagKey}

      dms:test-plan-tag/${TagKey}
  • Test
    • Arn:  arn:${Partition}:dms:${Region}:${Account}:test:*
    • Conditions: 

      aws:ResourceTag/${TagKey}

      dms:test-tag/${TagKey}
  • TestRun
    • Arn:  arn:${Partition}:dms:${Region}:${Account}:test-run:*
    • Conditions: 

      aws:ResourceTag/${TagKey}

      dms:test-run-tag/${TagKey}
  • TestEnvironment
    • Arn:  arn:${Partition}:dms:${Region}:${Account}:test-environment:*
    • Conditions: 

      aws:ResourceTag/${TagKey}

      dms:test-environment-tag/${TagKey}
    Conditions
  • dms:test-environment-tag/${TagKey}
    • Description:  Filters access by the presence of tag key-value pairs in the request for TestEnvironment
    • Type:  String
  • dms:test-plan-tag/${TagKey}
    • Description:  Filters access by the presence of tag key-value pairs in the request for TestPlan
    • Type:  String
  • dms:test-run-tag/${TagKey}
    • Description:  Filters access by the presence of tag key-value pairs in the request for TestRun
    • Type:  String
  • dms:test-tag/${TagKey}
    • Description:  Filters access by the presence of tag key-value pairs in the request for Test
    • Type:  String

Updates