AWS Config (config)

Additions

Actions

• DeleteConnector
  
  • Description:  Grants permission to delete a connector configuration
  • Access:  Write
  • Resources: 

    Name: Connector

    Required: Yes

• GetConnector
  
  • Description:  Grants permission to return the details of a specific connector configuration
  • Access:  Read
  • Resources: 

    Name: Connector

    Required: Yes

• ListConnectors
  
  • Description:  Grants permission to list all connectors in the AWS account and region
  • Access:  List
• PutConnector
  
  • Description:  Grants permission to create a connector configuration that contains provider identity information, as well as other optional provider-specific information required for third-party recording
  • Access:  Write
  • Resources: 

    Name: Connector

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

  • Dependents: 

    iam:CreateServiceLinkedRole

• PutThirdPartyServiceLinkedConfigurationRecorder
  
  • Description:  Grants permission to create or update a service-linked configuration recorder for a third-party provider linked to a specific AWS partner service
  • Access:  Write
  • Resources: 

    Name: Connector

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

    config:ConfigurationRecorderServicePrincipal

  • Dependents: 

    config:GetConnector

Resources

• Connector
  
  • Arn:  arn:${Partition}:config:${Region}:${Account}:connector/${Provider}/${ProviderId}/${ConnectorId}
  • Conditions: 

    aws:ResourceTag/${TagKey}