AWS DevOps Agent Service (aidevops)

Additions

Actions

• GetOperatorApp
  
  • Description:  Grants permission to get operator auth config for any enabled auth flow
  • Access:  Read
  • Resources: 

    Name: agentspace

    Required: Yes

• ListTagsForResource
  
  • Description:  Grants permission to list tags for a resource
  • Access:  Read
  • Resources: 

    Name: agentspace

    Required: No

    Name: service

    Required: No

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:ResourceTag/${TagKey}

    aws:TagKeys

• TagResource
  
  • Description:  Grants permission to tag a resource
  • Access:  Tagging
  • Resources: 

    Name: agentspace

    Required: No

    Name: service

    Required: No

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:ResourceTag/${TagKey}

    aws:TagKeys

• UntagResource
  
  • Description:  Grants permission to untag a resource
  • Access:  Tagging
  • Resources: 

    Name: agentspace

    Required: No

    Name: service

    Required: No

  • Conditions: 

    aws:ResourceTag/${TagKey}

    aws:TagKeys

• ValidateAwsAssociations
  
  • Description:  Grants permission to validate aws association
  • Access:  Write
  • Resources: 

    Name: agentspace

    Required: Yes

Updates

Actions

• ListExecutions
  
  Resources
  
  • ＋ {'name': 'agentspace', 'is_required': True}
  • ＋ {'name': 'associations', 'is_required': True}
  • － {'name': 'AgentSpaceResource', 'is_required': True}
  • － {'name': 'AssociationResource', 'is_required': True}
• ListWebhooks
  
  Resources
  
  • ＋ {'name': 'agentspace', 'is_required': True}
  • ＋ {'name': 'associations', 'is_required': True}
  • － {'name': 'AgentSpaceResource', 'is_required': True}
  • － {'name': 'AssociationResource', 'is_required': True}
• AssociateService
  
  Resources
  
  • ＋ {'name': 'agentspace', 'is_required': True}
  • ＋ {'name': 'associations', 'is_required': True}
  • － {'name': 'AgentSpaceResource', 'is_required': True}
  • － {'name': 'AssociationResource', 'is_required': True}
• GetAssociation
  
  Resources
  
  • ＋ {'name': 'service', 'is_required': True}
  • － {'name': 'ServiceResource', 'is_required': True}
  Conditions
  
  • ＋ aws:ResourceTag/${TagKey}
• DeregisterService
  
  Resources
  
  • ＋ {'name': 'agentspace', 'is_required': True}
  • ＋ {'name': 'associations', 'is_required': True}
  • － {'name': 'AgentSpaceResource', 'is_required': True}
  • － {'name': 'AssociationResource', 'is_required': True}
• DiscoverTopology
  
  Resources
  
  • ＋ {'name': 'agentspace', 'is_required': True}
  • － {'name': 'AgentSpaceResource', 'is_required': True}
  Conditions
  
  • ＋ aws:ResourceTag/${TagKey}
• DeleteKnowledgeItem
  
  Resources
  
  • ＋ {'name': 'agentspace', 'is_required': True}
  • － {'name': 'AgentSpaceResource', 'is_required': True}
• DescribeSupportLevel
  
  Resources
  
  • ＋ {'name': 'agentspace', 'is_required': True}
  • － {'name': 'AgentSpaceResource', 'is_required': True}
• CreateKnowledgeItem
  
  Resources
  
  • ＋ {'name': 'agentspace', 'is_required': True}
  • － {'name': 'AgentSpaceResource', 'is_required': True}
  Conditions
  
  • ＋ aws:ResourceTag/${TagKey}
• SendMessage
  
  Description
  
  • Old: Grants permission to list knowledge items
    New: Grants permission to send chat messages
  Access
  
  • List  ⟶  Write
  Resources
  

  • New_value: [{'name': 'agentspace', 'is_required': True}]

    Old_value: []

• CreateAgentSpace
  
  Resources
  
  • ＋ {'name': 'agentspace', 'is_required': True}
  • － {'name': 'AgentSpaceResource', 'is_required': True}
  Conditions
  
  • ＋ aws:RequestTag/${TagKey}
  • ＋ aws:ResourceTag/${TagKey}
  • ＋ aws:TagKeys
• EnableOperatorApp
  
  Resources
  
  • ＋ {'name': 'agentspace', 'is_required': True}
  • ＋ {'name': 'associations', 'is_required': True}
  • － {'name': 'AgentSpaceResource', 'is_required': True}
  • － {'name': 'AssociationResource', 'is_required': True}
• UpdateOperatorAppIdpConfig
  
  Description
  
  • Old: Grants permission to invoke an agent
    New: Grants permission to update the external Identity Provider configuration for the Operator App
  Resources
  

  • New_value: [{'name': 'agentspace', 'is_required': True}]

    Old_value: []

• ListGoals
  
  Resources
  
  • ＋ {'name': 'service', 'is_required': True}
  • － {'name': 'ServiceResource', 'is_required': True}
  Conditions
  
  • ＋ aws:RequestTag/${TagKey}
  • ＋ aws:ResourceTag/${TagKey}
  • ＋ aws:TagKeys
• ListServices
  
  Resources
  
  • ＋ {'name': 'agentspace', 'is_required': True}
  • － {'name': 'AgentSpaceResource', 'is_required': True}
  Conditions
  
  • ＋ aws:ResourceTag/${TagKey}
• CreateOneTimeLoginSession
  
  Resources
  
  • ＋ {'name': 'service', 'is_required': True}
  • － {'name': 'ServiceResource', 'is_required': True}
  Conditions
  
  • ＋ aws:ResourceTag/${TagKey}
• GetOperatorAppTeams
  
  Resources
  
  • ＋ {'name': 'agentspace', 'is_required': True}
  • － {'name': 'AgentSpaceResource', 'is_required': True}
• CreateBacklogTask
  
  Resources
  
  • ＋ agentspace
• CreateChat
  
  Resources
  
  • ＋ agentspace
• DeleteAgentSpace
  
  Resources
  
  • ＋ agentspace
• DisableOperatorApp
  
  Resources
  
  • ＋ agentspace
• EndChatForCase
  
  Resources
  
  • ＋ agentspace
• GetAgentSpace
  
  Resources
  
  • ＋ agentspace
• GetBacklogTask
  
  Resources
  
  • ＋ agentspace
• GetRecommendation
  
  Resources
  
  • ＋ agentspace
• GetService
  
  Resources
  
  • ＋ agentspace
• HandleServiceRegistrationCallback
  
  Resources
  
  • ＋ agentspace
• InitiateChatForCase
  
  Resources
  
  • ＋ agentspace
• InitiateServiceRegistration
  
  Resources
  
  • ＋ agentspace
• ListAgentSpaces
  
  Resources
  
  • ＋ agentspace
• ListAssociations
  
  Resources
  
  • ＋ agentspace
• RegisterService
  
  Resources
  
  • ＋ agentspace
• SearchServiceAccessibleResource
  
  Resources
  
  • ＋ agentspace
• StreamMessage
  
  Resources
  
  • ＋ agentspace

Resources

• associations
  
  Conditions
  

  • New_value: []

    Old_value: ['aidevops:AssociationResourceAgentSpaceId', 'aidevops:AssociationResourceAssociationId']

• service
  
  Conditions
  
  • ['aidevops:ServiceResourceServiceId']  ⟶  ['aws:ResourceTag/${TagKey}']
• agentspace
  
  Conditions
  
  • ['aidevops:AgentSpaceResourceAgentSpaceId']  ⟶  ['aws:ResourceTag/${TagKey}']

Conditions

• aws:RequestTag/${TagKey}
  
  Description
  
  • Old: Filters access by unique identifier for an AgentSpace
    New: Filters access by the tags that are passed in the request
• aws:ResourceTag/${TagKey}
  
  Description
  
  • Old: Filters access by unique identifier for an AgentSpace
    New: Filters access by the tags associated with the resource
• aws:TagKeys
  
  Description
  
  • Old: Filters access by unique identifier for a service association within an AgentSpace
    New: Filters access by the tag keys that are passed in the request
  Type
  
  • String  ⟶  ArrayOfString

Deletions

Actions

• CreateKnowledgeItem
  
  • Description:  Grants permission to create a new knowledge item
  • Access:  Write
• CreateOneTimeLoginSession
  
  • Description:  Grants permission to generate secure one-time session for initiating off-console Application login
  • Access:  Write
  • Resources: 

    Name: AgentSpaceResource

    Required: Yes

• DeleteKnowledgeItem
  
  • Description:  Grants permission to delete a knowledge item
  • Access:  Write
• DiscoverTopology
  
  • Description:  Grants permission to discover topology information
  • Access:  Write
• GetKnowledgeItem
  
  • Description:  Grants permission to get a knowledge item
  • Access:  Read
• GetOperatorAppTeams
  
  • Description:  Grants permission to enable operator auth config for any enabled auth flow
  • Access:  Read
  • Resources: 

    Name: AgentSpaceResource

    Required: Yes

• HandleServiceRegistrationCallback
  
  • Description:  Grants permission to handle OAuth callback from external service
  • Access:  Read
• InitiateServiceRegistration
  
  • Description:  Grants permission to initiate OAuth flow
  • Access:  Read
• StreamMessage
  
  • Description:  Grants permission to invoke an agent
  • Access:  Write
• UpdateKnowledgeItem
  
  • Description:  Grants permission to update a knowledge item
  • Access:  Write
• UpdateOperatorAppTeams
  
  • Description:  Grants permission to update the list of teams that the Operator App is enabled for
  • Access:  Write
  • Resources: 

    Name: AgentSpaceResource

    Required: Yes

Conditions

• aidevops:ServiceResourceServiceId
  
  • Description:  Filters access by unique identifier for a registered service
  • Type:  String