Amazon VPC Lattice (vpc-lattice)

Additions

Actions

• DeleteDomainVerification
  
  • Description:  Grants permission to delete a domain verification
  • Access:  Write
  • Resources: 

    Name: DomainVerification

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• GetDomainVerification
  
  • Description:  Grants permission to get information about a domain verification
  • Access:  Read
  • Resources: 

    Name: DomainVerification

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• ListDomainVerifications
  
  • Description:  Grants permission to list some or all domain verifications
  • Access:  List
• StartDomainVerification
  
  • Description:  Grants permission to start a domain verification
  • Access:  Write
  • Resources: 

    Name: DomainVerification

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

    vpc-lattice:DomainName

Resources

• DomainVerification
  
  • Arn:  arn:${Partition}:vpc-lattice:${Region}:${Account}:domainverification/${DomainVerificationId}
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:ResourceTag/${TagKey}

    aws:TagKeys

    vpc-lattice:DomainName

Conditions

• vpc-lattice:DomainName
  
  • Description:  Filters access by the domain name
  • Type:  String
• vpc-lattice:PrivateDnsPreference
  
  • Description:  Filters access by the private dns preference
  • Type:  String
• vpc-lattice:PrivateDnsSpecifiedDomains
  
  • Description:  Filters access by the private dns domains
  • Type:  ArrayOfString

Updates

Actions

• CreateServiceNetworkVpcAssociation
  
  Conditions
  
  • ＋ vpc-lattice:PrivateDnsPreference
  • ＋ vpc-lattice:PrivateDnsSpecifiedDomains
• CreateResourceConfiguration
  
  Resources
  
  • ＋ DomainVerification
• UpdateResourceConfiguration
  
  Resources
  
  • ＋ DomainVerification
• UpdateResourceGateway
  
  Resources
  
  • ＋ DomainVerification

Resources

• TargetGroup
  
  Conditions
  
  • ＋ vpc-lattice:PrivateDnsPreference
  • ＋ vpc-lattice:PrivateDnsSpecifiedDomains