Amazon Serverless Application Repository API Permissions: Actions and Resources Reference - Amazon Serverless Application Repository
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Amazon Serverless Application Repository API Permissions: Actions and Resources Reference

When you set up access control and write permissions policies that you can attach to an IAM identity (identity-based policies), you can use the following table as a reference. The table includes each Amazon Serverless Application Repository API operation, the corresponding actions that you can grant permissions to perform the action, and the Amazon resource that you can grant the permissions. You specify the actions in the policy's Action field, and you specify the resource value in the policy's Resource field.

To specify an action, use the serverlessrepo: prefix followed by the API operation name (for example, serverlessrepo:ListApplications).

Operation URI Method Amazon Resources (ARNs)

Operation: ListApplications

Required Permissions: serverlessrepo:ListApplications

/applications

 GET *

Operation: CreateApplication

Required Permissions: serverlessrepo:CreateApplication

/applications

 POST *

Operation: GetApplication

Required Permissions: serverlessrepo:GetApplication

/applications/application-id

 GET

arn:aws:serverlessrepo:region:account-id:applications/application-name

Operation: DeleteApplication

Required Permissions: serverlessrepo:DeleteApplication

/applications/application-id

 DELETE

arn:aws:serverlessrepo:region:account-id:applications/application-name

Operation: UpdateApplication

Required Permissions: serverlessrepo:UpdateApplication

/applications/application-id

 PATCH

arn:aws:serverlessrepo:region:account-id:applications/application-name

Operation: CreateCloudFormationChangeSet

Required Permissions: serverlessrepo:CreateCloudFormationChangeSet

/applications/application-id/changesets

 POST

arn:aws:serverlessrepo:region:account-id:applications/application-name

Operation: GetApplicationPolicy

Required Permissions: serverlessrepo:GetApplicationPolicy

/applications/application-id/policy

 GET

arn:aws:serverlessrepo:region:account-id:applications/application-name

Operation: PutApplicationPolicy

Required Permissions: serverlessrepo:PutApplicationPolicy

/applications/application-id/policy

 PUT

arn:aws:serverlessrepo:region:account-id:applications/application-name

Operation: ListApplicationVersions

Required Permissions: serverlessrepo:ListApplicationVersions

/applications/application-id/versions

 GET

arn:aws:serverlessrepo:region:account-id:applications/application-name

Operation: CreateApplicationVersion

Required Permissions: serverlessrepo:CreateApplicationVersion

/applications/application-id/versions/semantic-version

 PUT

arn:aws:serverlessrepo:region:account-id:applications/application-name

Operation: ListApplicationDependencies

Required Permissions: serverlessrepo:ListApplicationDependencies

/applications/application-id/dependencies

 GET

arn:aws:serverlessrepo:region:account-id:applications/application-name

Operation: SearchApplications

Required Permissions: serverlessrepo:SearchApplications

 n/a n/a *