AWS Transform custom (transform-custom)

Additions

Actions

• BatchCreateFindings
  
  • Description:  Grants permission to invoke BatchCreateFindings on AWS Transform custom
  • Access:  Write
• BatchUpdateFindings
  
  • Description:  Grants permission to invoke BatchUpdateFindings on AWS Transform custom
  • Access:  Write
• CreateAnalysis
  
  • Description:  Grants permission to invoke CreateAnalysis on AWS Transform custom
  • Access:  Write
  • Resources: 

    Name: analysis

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:ResourceTag/${TagKey}

    aws:TagKeys

• CreateRemediation
  
  • Description:  Grants permission to invoke CreateRemediation on AWS Transform custom
  • Access:  Write
  • Resources: 

    Name: remediation

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:ResourceTag/${TagKey}

    aws:TagKeys

• CreateRepository
  
  • Description:  Grants permission to invoke CreateRepository on AWS Transform custom
  • Access:  Write
  • Resources: 

    Name: repository

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:ResourceTag/${TagKey}

    aws:TagKeys

• CreateSource
  
  • Description:  Grants permission to invoke CreateSource on AWS Transform custom
  • Access:  Write
  • Resources: 

    Name: source

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:ResourceTag/${TagKey}

    aws:TagKeys

• DeleteAnalysis
  
  • Description:  Grants permission to invoke DeleteAnalysis on AWS Transform custom
  • Access:  Write
  • Resources: 

    Name: analysis

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• DeleteFinding
  
  • Description:  Grants permission to invoke DeleteFinding on AWS Transform custom
  • Access:  Write
  • Resources: 

    Name: finding

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• DeleteRemediation
  
  • Description:  Grants permission to invoke DeleteRemediation on AWS Transform custom
  • Access:  Write
  • Resources: 

    Name: remediation

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• DeleteRepository
  
  • Description:  Grants permission to invoke DeleteRepository on AWS Transform custom
  • Access:  Write
  • Resources: 

    Name: repository

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• DeleteSource
  
  • Description:  Grants permission to invoke DeleteSource on AWS Transform custom
  • Access:  Write
  • Resources: 

    Name: source

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• GetAnalysis
  
  • Description:  Grants permission to invoke GetAnalysis on AWS Transform custom
  • Access:  Read
  • Resources: 

    Name: analysis

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• GetFinding
  
  • Description:  Grants permission to invoke GetFinding on AWS Transform custom
  • Access:  Read
  • Resources: 

    Name: finding

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• GetFindingGroups
  
  • Description:  Grants permission to invoke GetFindingGroups on AWS Transform custom
  • Access:  Read
• GetRemediation
  
  • Description:  Grants permission to invoke GetRemediation on AWS Transform custom
  • Access:  Read
  • Resources: 

    Name: remediation

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• GetRepository
  
  • Description:  Grants permission to invoke GetRepository on AWS Transform custom
  • Access:  Read
  • Resources: 

    Name: repository

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• GetSource
  
  • Description:  Grants permission to invoke GetSource on AWS Transform custom
  • Access:  Read
  • Resources: 

    Name: source

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• ListAnalyses
  
  • Description:  Grants permission to invoke ListAnalyses on AWS Transform custom
  • Access:  List
• ListFindings
  
  • Description:  Grants permission to invoke ListFindings on AWS Transform custom
  • Access:  List
• ListRemediations
  
  • Description:  Grants permission to invoke ListRemediations on AWS Transform custom
  • Access:  List
• ListRepositories
  
  • Description:  Grants permission to invoke ListRepositories on AWS Transform custom
  • Access:  List
• ListSources
  
  • Description:  Grants permission to invoke ListSources on AWS Transform custom
  • Access:  List
• ListTransformationPackageShares
  
  • Description:  Grants permission to list active shares of a Transformation Package
  • Access:  Read
  • Resources: 

    Name: package

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• ShareTransformationPackage
  
  • Description:  Grants permission to share a Transformation Package with another AWS account or AWS Organization
  • Access:  Write
  • Resources: 

    Name: package

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• UnshareTransformationPackage
  
  • Description:  Grants permission to revoke an existing share of a Transformation Package
  • Access:  Write
  • Resources: 

    Name: package

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• UpdateAnalysis
  
  • Description:  Grants permission to invoke UpdateAnalysis on AWS Transform custom
  • Access:  Write
  • Resources: 

    Name: analysis

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• UpdateRemediation
  
  • Description:  Grants permission to invoke UpdateRemediation on AWS Transform custom
  • Access:  Write
  • Resources: 

    Name: remediation

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• UpdateRepository
  
  • Description:  Grants permission to invoke UpdateRepository on AWS Transform custom
  • Access:  Write
  • Resources: 

    Name: repository

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• UpdateSource
  
  • Description:  Grants permission to invoke UpdateSource on AWS Transform custom
  • Access:  Write
  • Resources: 

    Name: source

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

Resources

• analysis
  
  • Arn:  arn:${Partition}:transform-custom:${Region}:${Account}:analysis/${AnalysisId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• finding
  
  • Arn:  arn:${Partition}:transform-custom:${Region}:${Account}:finding/${FindingId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• remediation
  
  • Arn:  arn:${Partition}:transform-custom:${Region}:${Account}:remediation/${RemediationId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• repository
  
  • Arn:  arn:${Partition}:transform-custom:${Region}:${Account}:repository/${RepositoryId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• source
  
  • Arn:  arn:${Partition}:transform-custom:${Region}:${Account}:source/${Name}
  • Conditions: 

    aws:ResourceTag/${TagKey}