Amazon Q (q)

Additions

Actions

• CreatePlugin
  
  • Description:  Grants permission to create and configure a third party plugin in Amazon Q
  • Access:  Write
  • Resources: 

    Name: plugin

    Required: Yes

  • Conditions: 

    aws:TagKeys

    aws:RequestTag/${TagKey}

• DeletePlugin
  
  • Description:  Grants permission to delete a configured plugin in Amazon Q
  • Access:  Write
  • Resources: 

    Name: plugin

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• GetPlugin
  
  • Description:  Grants permission to view information about a specific configured Amazon Q plugin
  • Access:  Read
  • Resources: 

    Name: plugin

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• ListPluginProviders
  
  • Description:  Grants permission to list available plugins in Amazon Q
  • Access:  List
• ListPlugins
  
  • Description:  Grants permission to list configured plugins in Amazon Q
  • Access:  List
  • Resources: 

    Name: plugin

    Required: Yes

• ListTagsForResource
  
  • Description:  Grants permission to list all tags associated with an Amazon Q resource
  • Access:  List
  • Resources: 

    Name: plugin

    Required: No

  • Conditions: 

    aws:ResourceTag/${TagKey}

• TagResource
  
  • Description:  Grants permission to associate tags with an Amazon Q resource
  • Access:  Tagging
  • Resources: 

    Name: plugin

    Required: No

  • Conditions: 

    aws:ResourceTag/${TagKey}

    aws:TagKeys

    aws:RequestTag/${TagKey}

• UntagResource
  
  • Description:  Grants permission to remove tags associated with an Amazon Q resource
  • Access:  Tagging
  • Resources: 

    Name: plugin

    Required: No

  • Conditions: 

    aws:ResourceTag/${TagKey}

    aws:TagKeys

• UsePlugin
  
  • Description:  Grants permission to use Amazon Q plugins
  • Access:  Write
  • Resources: 

    Name: plugin

    Required: Yes

Resources

• plugin
  
  • Arn:  arn:${Partition}:qdeveloper:${Region}:${Account}:plugin/${Identifier}
  • Conditions: 

    aws:ResourceTag/${TagKey}

Conditions

• aws:RequestTag/${TagKey}
  
  • Description:  Filters access by the tags that are passed in the request
  • Type:  String
• aws:ResourceTag/${TagKey}
  
  • Description:  Filters access by the tags associated with the Amazon Q resource
  • Type:  String
• aws:TagKeys
  
  • Description:  Filters access by the tag keys that are passed in the request
  • Type:  ArrayOfString