Amazon ARC Region switch (arc-region-switch)

Additions

Actions

• ApprovePlanExecutionStep
  
  • Description:  Grants permission to approve a plan execution step
  • Access:  Write
  • Resources: 

    Name: plan

    Required: Yes

• CancelPlanExecution
  
  • Description:  Grants permission to cancel a plan execution
  • Access:  Write
  • Resources: 

    Name: plan

    Required: Yes

• CreatePlan
  
  • Description:  Grants permission to create a plan
  • Access:  Write
  • Resources: 

    Name: plan

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• DeletePlan
  
  • Description:  Grants permission to delete a plan
  • Access:  Write
  • Resources: 

    Name: plan

    Required: Yes

• DeleteResourcePolicy
  
  • Description:  Grants permission to delete the RAM access control policy for a plan
  • Access:  Permissions management
• GetPlan
  
  • Description:  Grants permission to get information about plans in all AWS Regions using a control plane
  • Access:  Read
  • Resources: 

    Name: plan

    Required: Yes

• GetPlanEvaluationStatus
  
  • Description:  Grants permission to get a plan's evaluation status
  • Access:  Read
  • Resources: 

    Name: plan

    Required: Yes

• GetPlanExecution
  
  • Description:  Grants permission to get plan execution details and setup information
  • Access:  Read
  • Resources: 

    Name: plan

    Required: Yes

• GetPlanInRegion
  
  • Description:  Grants permission to get information about a plan in a specific AWS Region using the Region switch Regional data plane
  • Access:  Read
  • Resources: 

    Name: plan

    Required: Yes

• GetResourcePolicy
  
  • Description:  Grants permission to get the resource policy of a plan
  • Access:  Permissions management
  • Resources: 

    Name: plan

    Required: Yes

• ListPlanExecutionEvents
  
  • Description:  Grants permission to list plan execution events
  • Access:  List
  • Resources: 

    Name: plan

    Required: Yes

• ListPlanExecutions
  
  • Description:  Grants permission to list plan executions
  • Access:  List
  • Resources: 

    Name: plan

    Required: Yes

• ListPlans
  
  • Description:  Grants permission to list plans in all AWS Regions using a control plane
  • Access:  List
• ListPlansInRegion
  
  • Description:  Grants permission to list plans in a specific AWS Region using the Region switch Regional data plane
  • Access:  List
• ListRoute53HealthChecks
  
  • Description:  Grants permission to list Route 53 health checks
  • Access:  List
  • Resources: 

    Name: plan

    Required: Yes

• ListTagsForResource
  
  • Description:  Grants permission to list tags for a resource
  • Access:  Read
  • Resources: 

    Name: plan

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• PutResourcePolicy
  
  • Description:  Grants permission to define the RAM access control policy for a plan
  • Access:  Permissions management
• StartPlanExecution
  
  • Description:  Grants permission to start a plan execution
  • Access:  Write
  • Resources: 

    Name: plan

    Required: Yes

• TagResource
  
  • Description:  Grants permission to tag a resource
  • Access:  Tagging
  • Resources: 

    Name: plan

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:ResourceTag/${TagKey}

    aws:TagKeys

• UntagResource
  
  • Description:  Grants permission to remove tags from a resource
  • Access:  Tagging
  • Resources: 

    Name: plan

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

    aws:TagKeys

• UpdatePlan
  
  • Description:  Grants permission to update a plan
  • Access:  Write
  • Resources: 

    Name: plan

    Required: Yes

• UpdatePlanExecution
  
  • Description:  Grants permission to update a plan execution
  • Access:  Write
  • Resources: 

    Name: plan

    Required: Yes

• UpdatePlanExecutionStep
  
  • Description:  Grants permission to update a plan execution step
  • Access:  Write
  • Resources: 

    Name: plan

    Required: Yes

Resources

• plan
  
  • Arn:  arn:${Partition}:arc-region-switch:${Region}:${Account}:plan/${ResourceId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

Conditions

• aws:RequestTag/${TagKey}
  
  • Description:  Filters access by tag key-value pairs attached to the resource
  • Type:  String
• aws:ResourceTag/${TagKey}
  
  • Description:  Filters access by a tag's key and value in a request
  • Type:  String
• aws:TagKeys
  
  • Description:  Filters access by the presence of tag keys in the request
  • Type:  ArrayOfString