Amazon Virtual Private Cloud Endpoint Policies for Amazon SWF - Amazon Simple Workflow Service
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Amazon Virtual Private Cloud Endpoint Policies for Amazon SWF

You can create an Amazon VPC endpoint policy for Amazon SWF in which you specify the following:

  • The principal that can perform actions.

  • The actions that can be performed.

  • The resources on which the actions can be performed.

The following example shows an Amazon VPC endpoint policy that allows all Amazon SWF operations on a single domain for a specific IAM role.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "swf:*",
      "Resource": "arn:aws-cn:swf:*:123456789012:/domain/myDomain",
      "Principal": {
        "AWS": "arn:aws-cn:iam::123456789012:role/MyRole"
      }
    }
  ]
}