Amazon CloudFront (cloudfront)

2025-11-26

15 new actions, 2 new resources | 3 updated actions

Additions

    Actions
  • CreateConnectionFunction
    • Description:  Grants permission to create a connection function
    • Access:  Write
    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:TagKeys
  • CreateTrustStore
    • Description:  Grants permission to create a trust store
    • Access:  Write
    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:TagKeys
  • DeleteConnectionFunction
    • Description:  Grants permission to delete a connection function
    • Access:  Write
    • Resources: 

      Name: connection-function

      Required: Yes

  • DeleteTrustStore
    • Description:  Grants permission to delete a trust store
    • Access:  Write
    • Resources: 

      Name: trust-store

      Required: Yes

  • DescribeConnectionFunction
    • Description:  Grants permission to get a connection function summary
    • Access:  Read
    • Resources: 

      Name: connection-function

      Required: Yes

  • GetConnectionFunction
    • Description:  Grants permission to get a connection function's code
    • Access:  Read
    • Resources: 

      Name: connection-function

      Required: Yes

  • GetTrustStore
    • Description:  Grants permission to get information about a trust store
    • Access:  Read
    • Resources: 

      Name: trust-store

      Required: Yes

  • ListConnectionFunctions
    • Description:  Grants permission to list the connection functions in your AWS account
    • Access:  List
  • ListDistributionsByConnectionFunction
    • Description:  Grants permission to list summaries for distributions associated with the specified connection function
    • Access:  List
    • Resources: 

      Name: connection-function

      Required: Yes

  • ListDistributionsByTrustStore
    • Description:  Grants permission to list summaries for distributions associated with the specified trust store
    • Access:  List
    • Resources: 

      Name: trust-store

      Required: Yes

  • ListTrustStores
    • Description:  Grants permission to list the trust stores in your AWS account
    • Access:  List
  • PublishConnectionFunction
    • Description:  Grants permission to publish a connection function
    • Access:  Write
    • Resources: 

      Name: connection-function

      Required: Yes

  • TestConnectionFunction
    • Description:  Grants permission to test a connection function
    • Access:  Write
    • Resources: 

      Name: connection-function

      Required: Yes

  • UpdateConnectionFunction
    • Description:  Grants permission to update a connection function
    • Access:  Write
    • Resources: 

      Name: connection-function

      Required: Yes

  • UpdateTrustStore
    • Description:  Grants permission to update a trust store
    • Access:  Write
    • Resources: 

      Name: trust-store

      Required: Yes

    Resources
  • trust-store
    • Arn:  arn:${Partition}:cloudfront::${Account}:trust-store/${Id}
    • Conditions: 

      aws:ResourceTag/${TagKey}
  • connection-function
    • Arn:  arn:${Partition}:cloudfront::${Account}:connection-function/${Id}
    • Conditions: 

      aws:ResourceTag/${TagKey}

Updates