2024-11-23
          
        9 new actions, 1 new resource, 3 new conditions | 3 updated actions
  
    
        
          
            Additions
          
              
                Actions
                
                    - 
                        CreateCommand
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to create a command that can be used to start new executions against a device
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
- 
                                Resources: 
                                
      
        Name: command
       
        Required: Yes
       
- 
                                Conditions: 
                                
    aws:RequestTag/${TagKey} aws:TagKeys 
 
- 
                        DeleteCommand
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to delete a command
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
- 
                                Resources: 
                                
      
        Name: command
       
        Required: Yes
       
 
- 
                        DeleteCommandExecution
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to delete a command execution
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
- 
                                Resources: 
                                
      
        Name: client
       
        Required: No
       
        Name: thing
       
        Required: No
       
 
- 
                        GetCommand
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to get the information about the command
                                
                              
- 
                                Access: 
                                
                                    Read
                                
                              
- 
                                Resources: 
                                
      
        Name: command
       
        Required: Yes
       
 
- 
                        GetCommandExecution
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to get the information of a command execution
                                
                              
- 
                                Access: 
                                
                                    Read
                                
                              
- 
                                Resources: 
                                
      
        Name: client
       
        Required: No
       
        Name: thing
       
        Required: No
       
 
- 
                        ListCommandExecutions
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to list commands executions in the account
                                
                              
- 
                                Access: 
                                
                                    List
                                
                              
- 
                                Resources: 
                                
      
        Name: client
       
        Required: No
       
        Name: command
       
        Required: No
       
        Name: thing
       
        Required: No
       
 
- 
                        ListCommands
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to list commands in the account
                                
                              
- 
                                Access: 
                                
                                    List
                                
                              
 
- 
                        StartCommandExecution
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to start a new command execution
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
- 
                                Resources: 
                                
      
        Name: command
       
        Required: Yes
       
        Name: client
       
        Required: No
       
        Name: thing
       
        Required: No
       
- 
                                Conditions: 
                                
    iot:CommandExecutionParameterString/${CommandParameterName} iot:CommandExecutionParameterBoolean/${CommandParameterName} iot:CommandExecutionParameterNumber/${CommandParameterName} 
 
- 
                        UpdateCommand
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to update a command
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
- 
                                Resources: 
                                
      
        Name: command
       
        Required: Yes
       
 
                Resources
                
                    - 
                        command
                        
 
                              - 
                                Arn: 
                                
                                    arn:${Partition}:iot:${Region}:${Account}:command/${CommandId}
                                
                              
- 
                                Conditions: 
                                
    aws:ResourceTag/${TagKey}