Operations Actions Resource types Condition keys

Actions, resources, and condition keys for Amazon GameLift Servers

Amazon GameLift Servers (service prefix: gamelift) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by Amazon GameLift Servers
Actions defined by Amazon GameLift Servers
Resource types defined by Amazon GameLift Servers
Condition keys for Amazon GameLift Servers

API operations defined by Amazon GameLift Servers

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Condition key	Possible value(s)	Access level
AcceptMatch	gamelift:AcceptMatch			Write
ClaimGameServer	gamelift:ClaimGameServer			Write
CreateAlias	gamelift:CreateAlias			Write
CreateAlias	gamelift:TagResource			Tagging, Write
CreateBuild	gamelift:CreateBuild			Write
	gamelift:CreateBuild			Write
	gamelift:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	gamelift.amazonaws.com	Write
CreateContainerFleet	gamelift:CreateContainerFleet			Write
	gamelift:CreateContainerFleet			Write
	gamelift:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	gamelift.amazonaws.com	Write
CreateContainerGroupDefinition	gamelift:CreateContainerGroupDefinition			Write
	gamelift:CreateContainerGroupDefinition			Write
	gamelift:TagResource			Tagging, Write
CreateFleet	gamelift:CreateFleet			Write
	gamelift:CreateFleet			Write
	gamelift:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	gamelift.amazonaws.com	Write
CreateFleetLocations	gamelift:CreateFleetLocations			Write
CreateGameServerGroup	gamelift:CreateGameServerGroup			Write
	gamelift:CreateGameServerGroup			Write
	gamelift:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	gamelift.amazonaws.com	Write
CreateGameSession	gamelift:CreateGameSession			Write
CreateGameSessionQueue	gamelift:CreateGameSessionQueue			Write
	gamelift:CreateGameSessionQueue			Write
	gamelift:TagResource			Tagging, Write
CreateLocation	gamelift:CreateLocation			Write
CreateLocation	gamelift:TagResource			Tagging, Write
CreateMatchmakingConfiguration	gamelift:CreateMatchmakingConfiguration			Write
	gamelift:CreateMatchmakingConfiguration			Write
	gamelift:TagResource			Tagging, Write
CreateMatchmakingRuleSet	gamelift:CreateMatchmakingRuleSet			Write
	gamelift:CreateMatchmakingRuleSet			Write
	gamelift:TagResource			Tagging, Write
CreatePlayerSession	gamelift:CreatePlayerSession			Write
CreatePlayerSessions	gamelift:CreatePlayerSessions			Write
CreateScript	gamelift:CreateScript			Write
	gamelift:CreateScript			Write
	gamelift:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	gamelift.amazonaws.com	Write
CreateVpcPeeringAuthorization	gamelift:CreateVpcPeeringAuthorization			Write
CreateVpcPeeringConnection	gamelift:CreateVpcPeeringConnection			Write
DeleteAlias	gamelift:DeleteAlias			Write
DeleteBuild	gamelift:DeleteBuild			Write
DeleteContainerFleet	gamelift:DeleteContainerFleet			Write
DeleteContainerGroupDefinition	gamelift:DeleteContainerGroupDefinition			Write
DeleteFleet	gamelift:DeleteFleet			Write
DeleteFleetLocations	gamelift:DeleteFleetLocations			Write
DeleteGameServerGroup	gamelift:DeleteGameServerGroup			Write
DeleteGameSessionQueue	gamelift:DeleteGameSessionQueue			Write
DeleteLocation	gamelift:DeleteLocation			Write
DeleteMatchmakingConfiguration	gamelift:DeleteMatchmakingConfiguration			Write
DeleteMatchmakingRuleSet	gamelift:DeleteMatchmakingRuleSet			Write
DeleteScalingPolicy	gamelift:DeleteScalingPolicy			Write
DeleteScript	gamelift:DeleteScript			Write
DeleteVpcPeeringAuthorization	gamelift:DeleteVpcPeeringAuthorization			Write
DeleteVpcPeeringConnection	gamelift:DeleteVpcPeeringConnection			Write
DeregisterCompute	gamelift:DeregisterCompute			Write
DeregisterGameServer	gamelift:DeregisterGameServer			Write
DescribeAlias	gamelift:DescribeAlias			Read
DescribeBuild	gamelift:DescribeBuild			Read
DescribeCompute	gamelift:DescribeCompute			Read
DescribeContainerFleet	gamelift:DescribeContainerFleet			Read
DescribeContainerGroupDefinition	gamelift:DescribeContainerGroupDefinition			Read
DescribeContainerGroupPortMappings	gamelift:DescribeContainerGroupPortMappings			Read
DescribeEC2InstanceLimits	gamelift:DescribeEC2InstanceLimits			Read
DescribeFleetAttributes	gamelift:DescribeFleetAttributes			Read
DescribeFleetCapacity	gamelift:DescribeFleetCapacity			Read
DescribeFleetDeployment	gamelift:DescribeFleetDeployment			Read
DescribeFleetEvents	gamelift:DescribeFleetEvents			Read
DescribeFleetLocationAttributes	gamelift:DescribeFleetLocationAttributes			Read
DescribeFleetLocationCapacity	gamelift:DescribeFleetLocationCapacity			Read
DescribeFleetLocationUtilization	gamelift:DescribeFleetLocationUtilization			Read
DescribeFleetPortSettings	gamelift:DescribeFleetPortSettings			Read
DescribeFleetUtilization	gamelift:DescribeFleetUtilization			Read
DescribeGameServer	gamelift:DescribeGameServer			Read
DescribeGameServerGroup	gamelift:DescribeGameServerGroup			Read
DescribeGameServerInstances	gamelift:DescribeGameServerInstances			Read
DescribeGameSessionDetails	gamelift:DescribeGameSessionDetails			Read
DescribeGameSessionPlacement	gamelift:DescribeGameSessionPlacement			Read
DescribeGameSessionQueues	gamelift:DescribeGameSessionQueues			Read
DescribeGameSessions	gamelift:DescribeGameSessions			Read
DescribeInstances	gamelift:DescribeInstances			Read
DescribeMatchmaking	gamelift:DescribeMatchmaking			Read
DescribeMatchmakingConfigurations	gamelift:DescribeMatchmakingConfigurations			Read
DescribeMatchmakingRuleSets	gamelift:DescribeMatchmakingRuleSets			Read
DescribePlayerSessions	gamelift:DescribePlayerSessions			Read
DescribeRuntimeConfiguration	gamelift:DescribeRuntimeConfiguration			Read
DescribeScalingPolicies	gamelift:DescribeScalingPolicies			Read
DescribeScript	gamelift:DescribeScript			Read
DescribeVpcPeeringAuthorizations	gamelift:DescribeVpcPeeringAuthorizations			Read
DescribeVpcPeeringConnections	gamelift:DescribeVpcPeeringConnections			Read
GetComputeAccess	gamelift:GetComputeAccess			Read
GetComputeAuthToken	gamelift:GetComputeAuthToken			Read
GetGameSessionLogUrl	gamelift:GetGameSessionLogUrl			Read
GetInstanceAccess	gamelift:GetInstanceAccess			Read
GetPlayerConnectionDetails	gamelift:GetPlayerConnectionDetails			Read
ListAliases	gamelift:ListAliases			List
ListBuilds	gamelift:ListBuilds			List
ListCompute	gamelift:ListCompute			List
ListContainerFleets	gamelift:ListContainerFleets			List
ListContainerGroupDefinitionVersions	gamelift:ListContainerGroupDefinitionVersions			List
ListContainerGroupDefinitions	gamelift:ListContainerGroupDefinitions			List
ListFleetDeployments	gamelift:ListFleetDeployments			List
ListFleets	gamelift:ListFleets			List
ListGameServerGroups	gamelift:ListGameServerGroups			List
ListGameServers	gamelift:ListGameServers			List
ListLocations	gamelift:ListLocations			List
ListScripts	gamelift:ListScripts			List
ListTagsForResource	gamelift:ListTagsForResource			Read
PutScalingPolicy	gamelift:PutScalingPolicy			Write
RegisterCompute	gamelift:RegisterCompute			Write
RegisterGameServer	gamelift:RegisterGameServer			Write
RequestUploadCredentials	gamelift:RequestUploadCredentials			Read
ResolveAlias	gamelift:ResolveAlias			Read
ResumeGameServerGroup	gamelift:ResumeGameServerGroup			Write
SearchGameSessions	gamelift:SearchGameSessions			Read
StartFleetActions	gamelift:StartFleetActions			Write
StartGameSessionPlacement	gamelift:StartGameSessionPlacement			Write
StartMatchBackfill	gamelift:StartMatchBackfill			Write
StartMatchmaking	gamelift:StartMatchmaking			Write
StopFleetActions	gamelift:StopFleetActions			Write
StopGameSessionPlacement	gamelift:StopGameSessionPlacement			Write
StopMatchmaking	gamelift:StopMatchmaking			Write
SuspendGameServerGroup	gamelift:SuspendGameServerGroup			Write
TagResource	gamelift:TagResource			Tagging, Write
TagResource	gamelift:TagResource			Tagging, Write
TerminateGameSession	gamelift:TerminateGameSession			Write
UntagResource	gamelift:UntagResource			Tagging, Write
UntagResource	gamelift:UntagResource			Tagging, Write
UpdateAlias	gamelift:UpdateAlias			Write
UpdateBuild	gamelift:UpdateBuild			Write
UpdateContainerFleet	gamelift:UpdateContainerFleet			Write
UpdateContainerGroupDefinition	gamelift:UpdateContainerGroupDefinition			Write
UpdateFleetAttributes	gamelift:UpdateFleetAttributes			Write
UpdateFleetCapacity	gamelift:UpdateFleetCapacity			Write
UpdateFleetPortSettings	gamelift:UpdateFleetPortSettings			Write
UpdateGameServer	gamelift:UpdateGameServer			Write
UpdateGameServerGroup	gamelift:UpdateGameServerGroup			Write
UpdateGameServerGroup	iam:PassRole	iam:PassedToService	gamelift.amazonaws.com	Write
UpdateGameSession	gamelift:UpdateGameSession			Write
UpdateGameSessionQueue	gamelift:UpdateGameSessionQueue			Write
UpdateMatchmakingConfiguration	gamelift:UpdateMatchmakingConfiguration			Write
UpdateRuntimeConfiguration	gamelift:UpdateRuntimeConfiguration			Write
UpdateScript	gamelift:UpdateScript			Write
UpdateScript	iam:PassRole	iam:PassedToService	gamelift.amazonaws.com	Write
ValidateMatchmakingRuleSet	gamelift:ValidateMatchmakingRuleSet			Read

Actions defined by Amazon GameLift Servers

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in Amazon. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
AcceptMatch	Grants permission to register player acceptance or rejection of a proposed FlexMatch match			Write
ClaimGameServer	Grants permission to locate and reserve a game server to host a new game session	gameServerGroup*	aws:ResourceTag/${TagKey}	Write
CreateAlias	Grants permission to define a new alias for a fleet		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateBuild	Grants permission to create a new game build using files stored in an Amazon S3 bucket		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateContainerFleet	Grants permission to create a new container fleet of computing resources to run your game servers		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateContainerGroupDefinition	Grants permission to create a new container group definition using images stored in an Amazon ECR repository		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateFleet	Grants permission to create a new fleet of computing resources to run your game servers		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateFleetLocations	Grants permission to specify additional locations for a fleet	containerFleet	aws:ResourceTag/${TagKey}	Write
CreateFleetLocations		fleet	aws:ResourceTag/${TagKey}	Write
CreateGameServerGroup	Grants permission to create a new game server group, set up a corresponding Auto Scaling group, and launche instances to host game servers		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateGameSession	Grants permission to start a new game session on a specified fleet			Write
CreateGameSessionQueue	Grants permission to set up a new queue for processing game session placement requests		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateLocation	Grants permission to define a new location for a fleet		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateMatchmakingConfiguration	Grants permission to create a new FlexMatch matchmaker		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateMatchmakingRuleSet	Grants permission to create a new matchmaking rule set for FlexMatch		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreatePlayerSession	Grants permission to reserve an available game session slot for a player			Write
CreatePlayerSessions	Grants permission to reserve available game session slots for multiple players			Write
CreateScript	Grants permission to create a new Realtime Servers script		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateVpcPeeringAuthorization	Grants permission to allow GameLift to create or delete a peering connection between a GameLift fleet VPC and a VPC on another Amazon Web Services account			Write
CreateVpcPeeringConnection	Grants permission to establish a peering connection between your GameLift fleet VPC and a VPC on another account			Write
DeleteAlias	Grants permission to delete an alias	alias*	aws:ResourceTag/${TagKey}	Write
DeleteBuild	Grants permission to delete a game build	build*	aws:ResourceTag/${TagKey}	Write
DeleteContainerFleet	Grants permission to delete a container fleet	containerFleet*	aws:ResourceTag/${TagKey}	Write
DeleteContainerGroupDefinition	Grants permission to delete a container group definition	containerGroupDefinition*	aws:ResourceTag/${TagKey}	Write
DeleteFleet	Grants permission to delete an empty fleet	fleet*	aws:ResourceTag/${TagKey}	Write
DeleteFleetLocations	Grants permission to delete locations for a fleet	containerFleet	aws:ResourceTag/${TagKey}	Write
DeleteFleetLocations	Grants permission to delete locations for a fleet	fleet	aws:ResourceTag/${TagKey}	Write
DeleteGameServerGroup	Grants permission to permanently delete a game server group and terminate FleetIQ activity for the corresponding Auto Scaling group	gameServerGroup*	aws:ResourceTag/${TagKey}	Write
DeleteGameSessionQueue	Grants permission to delete an existing game session queue	gameSessionQueue*	aws:ResourceTag/${TagKey}	Write
DeleteLocation	Grants permission to delete a location	location*	aws:ResourceTag/${TagKey}	Write
DeleteMatchmakingConfiguration	Grants permission to delete an existing FlexMatch matchmaker	matchmakingConfiguration*	aws:ResourceTag/${TagKey}	Write
DeleteMatchmakingRuleSet	Grants permission to delete an existing FlexMatch matchmaking rule set	matchmakingRuleSet*	aws:ResourceTag/${TagKey}	Write
DeleteScalingPolicy	Grants permission to delete a set of auto-scaling rules	containerFleet	aws:ResourceTag/${TagKey}	Write
DeleteScalingPolicy	Grants permission to delete a set of auto-scaling rules	fleet	aws:ResourceTag/${TagKey}	Write
DeleteScript	Grants permission to delete a Realtime Servers script	script*	aws:ResourceTag/${TagKey}	Write
DeleteVpcPeeringAuthorization	Grants permission to cancel a VPC peering authorization			Write
DeleteVpcPeeringConnection	Grants permission to remove a peering connection between VPCs			Write
DeregisterCompute	Grants permission to deregister a compute against a fleet	fleet*	aws:ResourceTag/${TagKey}	Write
DeregisterGameServer	Grants permission to remove a game server from a game server group	gameServerGroup*	aws:ResourceTag/${TagKey}	Write
DescribeAlias	Grants permission to retrieve properties for an alias	alias*	aws:ResourceTag/${TagKey}	Read
DescribeBuild	Grants permission to retrieve properties for a game build	build*	aws:ResourceTag/${TagKey}	Read
DescribeCompute	Grants permission to retrieve information for a compute in a fleet	containerFleet	aws:ResourceTag/${TagKey}	Read
DescribeCompute		fleet	aws:ResourceTag/${TagKey}	Read
DescribeContainerFleet	Grants permission to retrieve the properties of an existing container fleet	containerFleet*	aws:ResourceTag/${TagKey}	Read
DescribeContainerGroupDefinition	Grants permission to retrieve the properties of an existing container group definition	containerGroupDefinition*	aws:ResourceTag/${TagKey}	Read
DescribeContainerGroupPortMappings	Grants permission to retrieve container port mappings for a container fleet	containerFleet*	aws:ResourceTag/${TagKey}	Read
DescribeEC2InstanceLimits	Grants permission to retrieve the maximum allowed and current usage for EC2 instance types			Read
DescribeFleetAttributes	Grants permission to retrieve general properties, including status, for fleets			Read
DescribeFleetCapacity	Grants permission to retrieve the current capacity settings for managed fleets			Read
DescribeFleetDeployment	Grants permission to retrieve the properties of an existing fleet deployment	containerFleet*	aws:ResourceTag/${TagKey}	Read
DescribeFleetEvents	Grants permission to retrieve entries from a fleet's event log	containerFleet	aws:ResourceTag/${TagKey}	Read
DescribeFleetEvents		fleet	aws:ResourceTag/${TagKey}	Read
DescribeFleetLocationAttributes	Grants permission to retrieve general properties, including statuses, for a fleet's locations	containerFleet	aws:ResourceTag/${TagKey}	Read
DescribeFleetLocationAttributes		fleet	aws:ResourceTag/${TagKey}	Read
DescribeFleetLocationCapacity	Grants permission to retrieve the current capacity setting for a fleet's location	containerFleet	aws:ResourceTag/${TagKey}	Read
DescribeFleetLocationCapacity		fleet	aws:ResourceTag/${TagKey}	Read
DescribeFleetLocationUtilization	Grants permission to retrieve utilization statistics for fleet's location	fleet*	aws:ResourceTag/${TagKey}	Read
DescribeFleetPortSettings	Grants permission to retrieve the inbound connection permissions for a fleet	fleet*	aws:ResourceTag/${TagKey}	Read
DescribeFleetUtilization	Grants permission to retrieve utilization statistics for fleets			Read
DescribeGameServer	Grants permission to retrieve properties for a game server	gameServerGroup*	aws:ResourceTag/${TagKey}	Read
DescribeGameServerGroup	Grants permission to retrieve properties for a game server group	gameServerGroup*	aws:ResourceTag/${TagKey}	Read
DescribeGameServerInstances	Grants permission to retrieve the status of EC2 instances in a game server group	gameServerGroup*	aws:ResourceTag/${TagKey}	Read
DescribeGameSessionDetails	Grants permission to retrieve properties for game sessions in a fleet, including the protection policy			Read
DescribeGameSessionPlacement	Grants permission to retrieve details of a game session placement request			Read
DescribeGameSessionQueues	Grants permission to retrieve properties for game session queues			Read
DescribeGameSessions	Grants permission to retrieve properties for game sessions in a fleet			Read
DescribeInstances	Grants permission to retrieve information about instances in a managed fleet	containerFleet	aws:ResourceTag/${TagKey}	Read
DescribeInstances		fleet	aws:ResourceTag/${TagKey}	Read
DescribeMatchmaking	Grants permission to retrieve details of matchmaking tickets			Read
DescribeMatchmakingConfigurations	Grants permission to retrieve properties for FlexMatch matchmakers			Read
DescribeMatchmakingRuleSets	Grants permission to retrieve properties for FlexMatch matchmaking rule sets			Read
DescribePlayerSessions	Grants permission to retrieve properties for player sessions in a game session			Read
DescribeRuntimeConfiguration	Grants permission to retrieve the current runtime configuration for a fleet	fleet*	aws:ResourceTag/${TagKey}	Read
DescribeScalingPolicies	Grants permission to retrieve all scaling policies that are applied to a fleet	containerFleet	aws:ResourceTag/${TagKey}	Read
DescribeScalingPolicies		fleet	aws:ResourceTag/${TagKey}	Read
DescribeScript	Grants permission to retrieve properties for a Realtime Servers script	script*	aws:ResourceTag/${TagKey}	Read
DescribeVpcPeeringAuthorizations	Grants permission to retrieve valid VPC peering authorizations			Read
DescribeVpcPeeringConnections	Grants permission to retrieve details on active or pending VPC peering connections			Read
GetComputeAccess	Grants permission to retrieve credentials to remotely access a compute in a managed fleet	containerFleet	aws:ResourceTag/${TagKey}	Read
GetComputeAccess		fleet	aws:ResourceTag/${TagKey}	Read
GetComputeAuthToken	Grants permission to retrieve an authentication token that allows processes on a compute to send requests to the Amazon GameLift service	containerFleet	aws:ResourceTag/${TagKey}	Read
GetComputeAuthToken		fleet	aws:ResourceTag/${TagKey}	Read
GetGameSessionLogUrl	Grants permission to retrieve the location of stored logs for a game session			Read
GetInstanceAccess	Grants permission to request remote access to a specified fleet instance	fleet*	aws:ResourceTag/${TagKey}	Read
GetPlayerConnectionDetails	Grants permission to retrieve player connection endpoints and player gateway tokens for a game session			Read
ListAliases	Grants permission to retrieve all aliases that are defined in the current Region			List
ListBuilds	Grants permission to retrieve all game build in the current Region			List
ListCompute	Grants permission to retrieve all compute resources in the current Region	containerFleet	aws:ResourceTag/${TagKey}	List
ListCompute		fleet	aws:ResourceTag/${TagKey}	List
ListContainerFleets	Grants permission to retrieve the properties of all existing container fleets in the current Region			List
ListContainerGroupDefinitionVersions	Grants permission to retrieve the properties of all versions of an existing container group definition	containerGroupDefinition*	aws:ResourceTag/${TagKey}	List
ListContainerGroupDefinitions	Grants permission to retrieve the properties of all existing container group definitions in the current Region			List
ListFleetDeployments	Grants permission to retrieve the properties of all existing fleet deployments in the current Region			List
ListFleets	Grants permission to retrieve a list of fleet IDs for all fleets in the current Region			List
ListGameServerGroups	Grants permission to retrieve all game server groups that are defined in the current Region			List
ListGameServers	Grants permission to retrieve all game servers that are currently running in a game server group	gameServerGroup*	aws:ResourceTag/${TagKey}	List
ListLocations	Grants permission to retrieve all locations in this account			List
ListScripts	Grants permission to retrieve properties for all Realtime Servers scripts in the current region			List
ListTagsForResource	Grants permission to retrieve tags for GameLift resources	alias	aws:ResourceTag/${TagKey}	Read
		build	aws:ResourceTag/${TagKey}
		containerFleet	aws:ResourceTag/${TagKey}
		containerGroupDefinition	aws:ResourceTag/${TagKey}
		fleet	aws:ResourceTag/${TagKey}
		gameServerGroup	aws:ResourceTag/${TagKey}
		gameSessionQueue	aws:ResourceTag/${TagKey}
		location	aws:ResourceTag/${TagKey}
		matchmakingConfiguration	aws:ResourceTag/${TagKey}
		matchmakingRuleSet	aws:ResourceTag/${TagKey}
		script	aws:ResourceTag/${TagKey}
PutScalingPolicy	Grants permission to create or update a fleet auto-scaling policy	containerFleet	aws:ResourceTag/${TagKey}	Write
PutScalingPolicy		fleet	aws:ResourceTag/${TagKey}	Write
RegisterCompute	Grants permission to register a compute against a fleet	fleet*	aws:ResourceTag/${TagKey}	Write
RegisterGameServer	Grants permission to notify GameLift FleetIQ when a new game server is ready to host gameplay	gameServerGroup*	aws:ResourceTag/${TagKey}	Write
RequestUploadCredentials	Grants permission to retrieve fresh upload credentials to use when uploading a new game build	build*	aws:ResourceTag/${TagKey}	Read
ResolveAlias	Grants permission to retrieve the fleet ID associated with an alias	alias*	aws:ResourceTag/${TagKey}	Read
ResumeGameServerGroup	Grants permission to reinstate suspended FleetIQ activity for a game server group	gameServerGroup*	aws:ResourceTag/${TagKey}	Write
SearchGameSessions	Grants permission to retrieve game sessions that match a set of search criteria			Read
StartFleetActions	Grants permission to resume auto-scaling activity on a fleet after it was suspended with StopFleetActions()	containerFleet	aws:ResourceTag/${TagKey}	Write
StartFleetActions		fleet	aws:ResourceTag/${TagKey}	Write
StartGameSessionPlacement	Grants permission to send a game session placement request to a game session queue	gameSessionQueue*	aws:ResourceTag/${TagKey}	Write
StartMatchBackfill	Grants permission to request FlexMatch matchmaking to fill available player slots in an existing game session			Write
StartMatchmaking	Grants permission to request FlexMatch matchmaking for one or a group of players and initiate game session placement			Write
StopFleetActions	Grants permission to suspend auto-scaling activity on a fleet	containerFleet	aws:ResourceTag/${TagKey}	Write
StopFleetActions		fleet	aws:ResourceTag/${TagKey}	Write
StopGameSessionPlacement	Grants permission to cancel a game session placement request that is in progress			Write
StopMatchmaking	Grants permission to cancel a matchmaking or match backfill request that is in progress			Write
SuspendGameServerGroup	Grants permission to temporarily stop FleetIQ activity for a game server group	gameServerGroup*	aws:ResourceTag/${TagKey}	Write
TagResource	Grants permission to tag GameLift resources	alias	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		build	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		containerFleet	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		containerGroupDefinition	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		fleet	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		gameServerGroup	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		gameSessionQueue	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		location	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		matchmakingConfiguration	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		matchmakingRuleSet	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		script	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
TerminateGameSession	Grants permission to shut down an existing game session			Write
UntagResource	Grants permission to untag GameLift resources	alias	aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		build	aws:ResourceTag/${TagKey} aws:TagKeys
		containerFleet	aws:ResourceTag/${TagKey} aws:TagKeys
		containerGroupDefinition	aws:ResourceTag/${TagKey} aws:TagKeys
		fleet	aws:ResourceTag/${TagKey} aws:TagKeys
		gameServerGroup	aws:ResourceTag/${TagKey} aws:TagKeys
		gameSessionQueue	aws:ResourceTag/${TagKey} aws:TagKeys
		location	aws:ResourceTag/${TagKey} aws:TagKeys
		matchmakingConfiguration	aws:ResourceTag/${TagKey} aws:TagKeys
		matchmakingRuleSet	aws:ResourceTag/${TagKey} aws:TagKeys
		script	aws:ResourceTag/${TagKey} aws:TagKeys
UpdateAlias	Grants permission to update the properties of an existing alias	alias*	aws:ResourceTag/${TagKey}	Write
UpdateBuild	Grants permission to update an existing build's metadata	build*	aws:ResourceTag/${TagKey}	Write
UpdateContainerFleet	Grants permission to update an existing container fleet	containerFleet*	aws:ResourceTag/${TagKey}	Write
UpdateContainerGroupDefinition	Grants permission to update the properties of an existing container group definition	containerGroupDefinition*	aws:ResourceTag/${TagKey}	Write
UpdateFleetAttributes	Grants permission to update the general properties of an existing fleet	fleet*	aws:ResourceTag/${TagKey}	Write
UpdateFleetCapacity	Grants permission to adjust a managed fleet's capacity settings	containerFleet	aws:ResourceTag/${TagKey}	Write
UpdateFleetCapacity		fleet	aws:ResourceTag/${TagKey}	Write
UpdateFleetPortSettings	Grants permission to adjust a fleet's port settings	fleet*	aws:ResourceTag/${TagKey}	Write
UpdateGameServer	Grants permission to change game server properties, health status, or utilization status	gameServerGroup*	aws:ResourceTag/${TagKey}	Write
UpdateGameServerGroup	Grants permission to update properties for game server group, including allowed instance types	gameServerGroup*	aws:ResourceTag/${TagKey}	Write
UpdateGameSession	Grants permission to update the properties of an existing game session			Write
UpdateGameSessionQueue	Grants permission to update properties of an existing game session queue	gameSessionQueue*	aws:ResourceTag/${TagKey}	Write
UpdateMatchmakingConfiguration	Grants permission to update properties of an existing FlexMatch matchmaking configuration	matchmakingConfiguration*	aws:ResourceTag/${TagKey}	Write
UpdateRuntimeConfiguration	Grants permission to update how server processes are configured on instances in an existing fleet	fleet*	aws:ResourceTag/${TagKey}	Write
UpdateScript	Grants permission to update the metadata and content of an existing Realtime Servers script	script*	aws:ResourceTag/${TagKey}	Write
ValidateMatchmakingRuleSet	Grants permission to validate the syntax of a FlexMatch matchmaking rule set			Read

Resource types defined by Amazon GameLift Servers

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
alias	arn:${Partition}:gamelift:${Region}::alias/${AliasId}	aws:ResourceTag/${TagKey}
build	arn:${Partition}:gamelift:${Region}:${Account}:build/${BuildId}	aws:ResourceTag/${TagKey}
containerFleet	arn:${Partition}:gamelift:${Region}:${Account}:containerfleet/${FleetId}	aws:ResourceTag/${TagKey}
containerGroupDefinition	arn:${Partition}:gamelift:${Region}:${Account}:containergroupdefinition/${Name}	aws:ResourceTag/${TagKey}
fleet	arn:${Partition}:gamelift:${Region}:${Account}:fleet/${FleetId}	aws:ResourceTag/${TagKey}
gameServerGroup	arn:${Partition}:gamelift:${Region}:${Account}:gameservergroup/${GameServerGroupName}	aws:ResourceTag/${TagKey}
gameSessionQueue	arn:${Partition}:gamelift:${Region}:${Account}:gamesessionqueue/${GameSessionQueueName}	aws:ResourceTag/${TagKey}
location	arn:${Partition}:gamelift:${Region}:${Account}:location/${LocationId}	aws:ResourceTag/${TagKey}
matchmakingConfiguration	arn:${Partition}:gamelift:${Region}:${Account}:matchmakingconfiguration/${MatchmakingConfigurationName}	aws:ResourceTag/${TagKey}
matchmakingRuleSet	arn:${Partition}:gamelift:${Region}:${Account}:matchmakingruleset/${MatchmakingRuleSetName}	aws:ResourceTag/${TagKey}
script	arn:${Partition}:gamelift:${Region}:${Account}:script/${ScriptId}	aws:ResourceTag/${TagKey}

Condition keys for Amazon GameLift Servers

Amazon GameLift Servers defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys	Description	Type
aws:RequestTag/${TagKey}	Filters access by the tags that are passed in the request	String
aws:ResourceTag/${TagKey}	Filters access by the tags associated with the resource	String
aws:TagKeys	Filters access by the tag keys that are passed in the request	ArrayOfString

Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Amazon FSx (fsx)

Amazon GuardDuty (guardduty)