Claude Platform on AWS (aws-external-anthropic)

Additions

Actions

• ArchiveWorkspace
  
  • Description:  Grants permission to archive a workspace
  • Access:  Write
  • Resources: 

    Name: workspace

    Required: Yes

• AssumeConsole
  
  • Description:  Grants permission to assume console access on Claude Platform
  • Access:  Write
  • Conditions: 

    aws-external-anthropic:Capability

• CallWithBearerToken
  
  • Description:  Grants permission to make API calls using bearer token authentication
  • Access:  List
  • Conditions: 

    aws-external-anthropic:BearerTokenType

• CancelBatchInference
  
  • Description:  Grants permission to cancel an in-progress batch inference request
  • Access:  Write
  • Resources: 

    Name: workspace

    Required: Yes

• CountTokens
  
  • Description:  Grants permission to count tokens for a message request
  • Access:  Write
  • Resources: 

    Name: workspace

    Required: Yes

• CreateBatchInference
  
  • Description:  Grants permission to create a batch inference request
  • Access:  Write
  • Resources: 

    Name: workspace

    Required: Yes

• CreateFile
  
  • Description:  Grants permission to upload a file to a workspace
  • Access:  Write
  • Resources: 

    Name: workspace

    Required: Yes

• CreateInference
  
  • Description:  Grants permission to create a chat completion inference request
  • Access:  Write
  • Resources: 

    Name: workspace

    Required: Yes

• CreateSkill
  
  • Description:  Grants permission to create a skill in a workspace
  • Access:  Write
  • Resources: 

    Name: workspace

    Required: Yes

• CreateUserProfile
  
  • Description:  Grants permission to create a user profile in a workspace
  • Access:  Write
  • Resources: 

    Name: workspace

    Required: Yes

• CreateWorkspace
  
  • Description:  Grants permission to create a workspace in an organization
  • Access:  Write
• DeleteBatchInference
  
  • Description:  Grants permission to delete a batch inference request
  • Access:  Write
  • Resources: 

    Name: workspace

    Required: Yes

• DeleteFile
  
  • Description:  Grants permission to delete a file from a workspace
  • Access:  Write
  • Resources: 

    Name: workspace

    Required: Yes

• DeleteSkill
  
  • Description:  Grants permission to delete a skill from a workspace
  • Access:  Write
  • Resources: 

    Name: workspace

    Required: Yes

• GetAccountStatus
  
  • Description:  Grants permission to retrieve the status of account setup and AWS Marketplace registration
  • Access:  Read
• GetBatchInference
  
  • Description:  Grants permission to retrieve details of a batch inference request
  • Access:  Read
  • Resources: 

    Name: workspace

    Required: Yes

• GetFile
  
  • Description:  Grants permission to retrieve a file or its content from a workspace
  • Access:  Read
  • Resources: 

    Name: workspace

    Required: Yes

• GetModel
  
  • Description:  Grants permission to retrieve information about a specific model
  • Access:  Read
  • Resources: 

    Name: workspace

    Required: Yes

• GetSkill
  
  • Description:  Grants permission to retrieve details of a skill or its versions
  • Access:  Read
  • Resources: 

    Name: workspace

    Required: Yes

• GetUserProfile
  
  • Description:  Grants permission to retrieve details of a user profile
  • Access:  Read
  • Resources: 

    Name: workspace

    Required: Yes

• GetWorkspace
  
  • Description:  Grants permission to retrieve details of a workspace
  • Access:  Read
  • Resources: 

    Name: workspace

    Required: Yes

• ListBatchInferences
  
  • Description:  Grants permission to list batch inference requests in a workspace
  • Access:  List
  • Resources: 

    Name: workspace

    Required: Yes

• ListFiles
  
  • Description:  Grants permission to list files in a workspace
  • Access:  List
  • Resources: 

    Name: workspace

    Required: Yes

• ListModels
  
  • Description:  Grants permission to list available models in a workspace
  • Access:  List
  • Resources: 

    Name: workspace

    Required: Yes

• ListSkills
  
  • Description:  Grants permission to list skills in a workspace
  • Access:  List
  • Resources: 

    Name: workspace

    Required: Yes

• ListUserProfiles
  
  • Description:  Grants permission to list user profiles in a workspace
  • Access:  List
  • Resources: 

    Name: workspace

    Required: Yes

• ListWorkspaces
  
  • Description:  Grants permission to list workspaces in an organization
  • Access:  List
• UpdateSkill
  
  • Description:  Grants permission to create or delete a skill version
  • Access:  Write
  • Resources: 

    Name: workspace

    Required: Yes

• UpdateUserProfile
  
  • Description:  Grants permission to update a user profile in a workspace
  • Access:  Write
  • Resources: 

    Name: workspace

    Required: Yes

• UpdateWorkspace
  
  • Description:  Grants permission to update a workspace
  • Access:  Write
  • Resources: 

    Name: workspace

    Required: Yes

Resources

• workspace
  
  • Arn:  arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/${ResourceId}

Conditions

• aws-external-anthropic:BearerTokenType
  
  • Description:  Filters access by the Short-term or Long-term bearer tokens
  • Type:  String
• aws-external-anthropic:Capability
  
  • Description:  Filters access by the Claude Platform role used for the console session
  • Type:  String