Operations Actions Permission-only actions Resource types Condition keys

Actions, resources, and condition keys for Amazon IoT SiteWise

Amazon IoT SiteWise (service prefix: iotsitewise) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by Amazon IoT SiteWise
Actions defined by Amazon IoT SiteWise
Permission-only actions for Amazon IoT SiteWise
Resource types defined by Amazon IoT SiteWise
Condition keys for Amazon IoT SiteWise

API operations defined by Amazon IoT SiteWise

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Condition key	Possible value(s)	Access level
AssociateAssets	iotsitewise:AssociateAssets			Write
AssociateTimeSeriesToAssetProperty	iotsitewise:AssociateTimeSeriesToAssetProperty			Write
BatchAssociateProjectAssets	iotsitewise:BatchAssociateProjectAssets			Write
BatchDisassociateProjectAssets	iotsitewise:BatchDisassociateProjectAssets			Write
BatchGetAssetPropertyAggregates	iotsitewise:BatchGetAssetPropertyAggregates			Read
BatchGetAssetPropertyValue	iotsitewise:BatchGetAssetPropertyValue			Read
BatchGetAssetPropertyValueHistory	iotsitewise:BatchGetAssetPropertyValueHistory			Read
BatchPutAssetPropertyValue	iotsitewise:BatchPutAssetPropertyValue			Write
CreateAccessPolicy	iotsitewise:CreateAccessPolicy			Write
CreateAsset	iotsitewise:CreateAsset			Write
CreateAsset	iotsitewise:TagResource			Tagging, Write
CreateAssetModel	iotsitewise:CreateAssetModel			Write
CreateAssetModel	iotsitewise:TagResource			Tagging, Write
CreateAssetModelCompositeModel	iotsitewise:CreateAssetModelCompositeModel			Write
CreateAssetModelCompositeModel	iam:PassRole	iam:PassedToService	iotsitewise.amazonaws.com	Write
CreateBulkImportJob	iotsitewise:CreateBulkImportJob			Write
CreateBulkImportJob	iam:PassRole	iam:PassedToService	iotsitewise.amazonaws.com	Write
CreateComputationModel	iotsitewise:CreateComputationModel			Write
CreateComputationModel	iotsitewise:TagResource			Tagging, Write
CreateDashboard	iotsitewise:CreateDashboard			Write
CreateDashboard	iotsitewise:TagResource			Tagging, Write
CreateDataset	iotsitewise:CreateDataset			Write
	iotsitewise:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	iotsitewise.amazonaws.com	Write
CreateGateway	iotsitewise:CreateGateway			Write
	iotsitewise:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	iotsitewise.amazonaws.com	Write
CreatePortal	iotsitewise:CreatePortal			Write
	iotsitewise:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	iotsitewise.amazonaws.com	Write
CreateProject	iotsitewise:CreateProject			Write
CreateProject	iotsitewise:TagResource			Tagging, Write
DeleteAccessPolicy	iotsitewise:DeleteAccessPolicy			Write
DeleteAsset	iotsitewise:DeleteAsset			Write
DeleteAssetModel	iotsitewise:DeleteAssetModel			Write
DeleteAssetModelCompositeModel	iotsitewise:DeleteAssetModelCompositeModel			Write
DeleteAssetModelInterfaceRelationship	iotsitewise:DeleteAssetModelInterfaceRelationship			Write
DeleteComputationModel	iotsitewise:DeleteComputationModel			Write
DeleteDashboard	iotsitewise:DeleteDashboard			Write
DeleteDataset	iotsitewise:DeleteDataset			Write
DeleteGateway	iotsitewise:DeleteGateway			Write
DeletePortal	iotsitewise:DeletePortal			Write
DeleteProject	iotsitewise:DeleteProject			Write
DeleteTimeSeries	iotsitewise:DeleteTimeSeries			Write
DescribeAccessPolicy	iotsitewise:DescribeAccessPolicy			Read
DescribeAction	iotsitewise:DescribeAction			Read
DescribeAsset	iotsitewise:DescribeAsset			Read
DescribeAssetCompositeModel	iotsitewise:DescribeAssetCompositeModel			Read
DescribeAssetModel	iotsitewise:DescribeAssetModel			Read
DescribeAssetModelCompositeModel	iotsitewise:DescribeAssetModelCompositeModel			Read
DescribeAssetModelInterfaceRelationship	iotsitewise:DescribeAssetModelInterfaceRelationship			Read
DescribeAssetProperty	iotsitewise:DescribeAssetProperty			Read
DescribeBulkImportJob	iotsitewise:DescribeBulkImportJob			Read
DescribeComputationModel	iotsitewise:DescribeComputationModel			Read
DescribeComputationModelExecutionSummary	iotsitewise:DescribeComputationModelExecutionSummary			Read
DescribeDashboard	iotsitewise:DescribeDashboard			Read
DescribeDataset	iotsitewise:DescribeDataset			Read
DescribeDefaultEncryptionConfiguration	iotsitewise:DescribeDefaultEncryptionConfiguration			Read
DescribeExecution	iotsitewise:DescribeExecution			Read
DescribeGateway	iotsitewise:DescribeGateway			Read
DescribeGatewayCapabilityConfiguration	iotsitewise:DescribeGatewayCapabilityConfiguration			Read
DescribeLoggingOptions	iotsitewise:DescribeLoggingOptions			Read
DescribePortal	iotsitewise:DescribePortal			Read
DescribeProject	iotsitewise:DescribeProject			Read
DescribeStorageConfiguration	iotsitewise:DescribeStorageConfiguration			Read
DescribeTimeSeries	iotsitewise:DescribeTimeSeries			Read
DisassociateAssets	iotsitewise:DisassociateAssets			Write
DisassociateTimeSeriesFromAssetProperty	iotsitewise:DisassociateTimeSeriesFromAssetProperty			Write
ExecuteAction	iotsitewise:ExecuteAction			Write
ExecuteQuery	iotsitewise:ExecuteQuery			Read
GetAssetPropertyAggregates	iotsitewise:GetAssetPropertyAggregates			Read
GetAssetPropertyValue	iotsitewise:GetAssetPropertyValue			Read
GetAssetPropertyValueHistory	iotsitewise:GetAssetPropertyValueHistory			Read
GetInterpolatedAssetPropertyValues	iotsitewise:GetInterpolatedAssetPropertyValues			Read
InvokeAssistant	iotsitewise:InvokeAssistant			Read
ListAccessPolicies	iotsitewise:ListAccessPolicies			List
ListActions	iotsitewise:ListActions			List
ListAssetModelCompositeModels	iotsitewise:ListAssetModelCompositeModels			List
ListAssetModelProperties	iotsitewise:ListAssetModelProperties			List
ListAssetModels	iotsitewise:ListAssetModels			List
ListAssetProperties	iotsitewise:ListAssetProperties			List
ListAssetRelationships	iotsitewise:ListAssetRelationships			List
ListAssets	iotsitewise:ListAssets			List
ListAssociatedAssets	iotsitewise:ListAssociatedAssets			List
ListBulkImportJobs	iotsitewise:ListBulkImportJobs			List
ListCompositionRelationships	iotsitewise:ListCompositionRelationships			List
ListComputationModelDataBindingUsages	iotsitewise:ListComputationModelDataBindingUsages			List
ListComputationModelResolveToResources	iotsitewise:ListComputationModelResolveToResources			List
ListComputationModels	iotsitewise:ListComputationModels			List
ListDashboards	iotsitewise:ListDashboards			List
ListDatasets	iotsitewise:ListDatasets			List
ListExecutions	iotsitewise:ListExecutions			List
ListGateways	iotsitewise:ListGateways			List
ListInterfaceRelationships	iotsitewise:ListInterfaceRelationships			List
ListPortals	iotsitewise:ListPortals			List
ListProjectAssets	iotsitewise:ListProjectAssets			List
ListProjects	iotsitewise:ListProjects			List
ListTagsForResource	iotsitewise:ListTagsForResource			Read
ListTimeSeries	iotsitewise:ListTimeSeries			List
PutAssetModelInterfaceRelationship	iotsitewise:PutAssetModelInterfaceRelationship			Write
PutDefaultEncryptionConfiguration	iotsitewise:PutDefaultEncryptionConfiguration			Write
PutLoggingOptions	iotsitewise:PutLoggingOptions			Write
PutStorageConfiguration	iotsitewise:PutStorageConfiguration			Write
PutStorageConfiguration	iam:PassRole	iam:PassedToService	iotsitewise.amazonaws.com	Write
TagResource	iotsitewise:TagResource			Tagging, Write
UntagResource	iotsitewise:UntagResource			Tagging, Write
UpdateAccessPolicy	iotsitewise:UpdateAccessPolicy			Write
UpdateAsset	iotsitewise:UpdateAsset			Write
UpdateAssetModel	iotsitewise:UpdateAssetModel			Write
UpdateAssetModelCompositeModel	iotsitewise:UpdateAssetModelCompositeModel			Write
UpdateAssetModelCompositeModel	iam:PassRole	iam:PassedToService	iotsitewise.amazonaws.com	Write
UpdateAssetProperty	iotsitewise:UpdateAssetProperty			Write
UpdateComputationModel	iotsitewise:UpdateComputationModel			Write
UpdateDashboard	iotsitewise:UpdateDashboard			Write
UpdateDataset	iotsitewise:UpdateDataset			Write
UpdateDataset	iam:PassRole	iam:PassedToService	iotsitewise.amazonaws.com	Write
UpdateGateway	iotsitewise:UpdateGateway			Write
UpdateGatewayCapabilityConfiguration	iotsitewise:UpdateGatewayCapabilityConfiguration			Write
UpdatePortal	iotsitewise:UpdatePortal			Write
UpdatePortal	iam:PassRole	iam:PassedToService	iotsitewise.amazonaws.com	Write
UpdateProject	iotsitewise:UpdateProject			Write

Actions defined by Amazon IoT SiteWise

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in Amazon. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
AssociateAssets	Grants permission to associate a child asset with a parent asset through a hierarchy	asset*	aws:ResourceTag/${TagKey}	Write
AssociateTimeSeriesToAssetProperty	Grants permission to associate a time series with an asset property	asset*	aws:ResourceTag/${TagKey}	Write
AssociateTimeSeriesToAssetProperty		time-series*	aws:ResourceTag/${TagKey}	Write
BatchAssociateProjectAssets	Grants permission to associate assets to a project	project*	aws:ResourceTag/${TagKey}	Write
BatchDisassociateProjectAssets	Grants permission to disassociate assets from a project	project*	aws:ResourceTag/${TagKey}	Write
BatchGetAssetPropertyAggregates	Grants permission to retrieve computed aggregates for multiple asset properties	asset	aws:ResourceTag/${TagKey}	Read
BatchGetAssetPropertyAggregates		time-series	aws:ResourceTag/${TagKey}	Read
BatchGetAssetPropertyValue	Grants permission to retrieve the latest value for multiple asset properties	asset	aws:ResourceTag/${TagKey}	Read
BatchGetAssetPropertyValue		time-series	aws:ResourceTag/${TagKey}	Read
BatchGetAssetPropertyValueHistory	Grants permission to retrieve the value history for multiple asset properties	asset	aws:ResourceTag/${TagKey}	Read
BatchGetAssetPropertyValueHistory		time-series	aws:ResourceTag/${TagKey}	Read
BatchPutAssetPropertyValue	Grants permission to put property values for asset properties	asset	aws:ResourceTag/${TagKey}	Write
BatchPutAssetPropertyValue		time-series	aws:ResourceTag/${TagKey}	Write
CreateAccessPolicy	Grants permission to create an access policy for a portal or a project	portal	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateAccessPolicy		project	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateAsset	Grants permission to create an asset from an asset model	asset-model*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateAssetModel	Grants permission to create an asset model		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateAssetModelCompositeModel	Grants permission to create an asset model composite model inside an asset model	asset-model*	aws:ResourceTag/${TagKey}	Write
CreateBulkImportJob	Grants permission to create bulk import job			Write
CreateComputationModel	Grants permission to create a computation model	asset	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateComputationModel	Grants permission to create a computation model	asset-model	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateDashboard	Grants permission to create a dashboard in a project	project*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateDataset	Grants permission to create a dataset		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateGateway	Grants permission to create a gateway		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreatePortal	Grants permission to create a portal		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateProject	Grants permission to create a project in a portal	portal*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
DeleteAccessPolicy	Grants permission to delete an access policy	access-policy*	aws:ResourceTag/${TagKey}	Write
DeleteAsset	Grants permission to delete an asset	asset*	aws:ResourceTag/${TagKey}	Write
DeleteAssetModel	Grants permission to delete an asset model	asset-model*	aws:ResourceTag/${TagKey}	Write
DeleteAssetModelCompositeModel	Grants permission to delete an asset model composite model	asset-model*	aws:ResourceTag/${TagKey}	Write
DeleteAssetModelInterfaceRelationship	Grants permission to delete a relationship between asset model and interface	asset-model*	aws:ResourceTag/${TagKey}	Write
DeleteComputationModel	Grants permission to delete a computation model	computation-model*	aws:ResourceTag/${TagKey}	Write
DeleteDashboard	Grants permission to delete a dashboard	dashboard*	aws:ResourceTag/${TagKey}	Write
DeleteDataset	Grants permission to delete a dataset	dataset*	aws:ResourceTag/${TagKey}	Write
DeleteGateway	Grants permission to delete a gateway	gateway*	aws:ResourceTag/${TagKey}	Write
DeletePortal	Grants permission to delete a portal	portal*	aws:ResourceTag/${TagKey}	Write
DeleteProject	Grants permission to delete a project	project*	aws:ResourceTag/${TagKey}	Write
DeleteTimeSeries	Grants permission to delete a time series	asset	aws:ResourceTag/${TagKey}	Write
DeleteTimeSeries	Grants permission to delete a time series	time-series	aws:ResourceTag/${TagKey}	Write
DescribeAccessPolicy	Grants permission to describe an access policy	access-policy*	aws:ResourceTag/${TagKey}	Read
DescribeAction	Grants permission to describe actions	asset	aws:ResourceTag/${TagKey}	Read
DescribeAction	Grants permission to describe actions	computation-model	aws:ResourceTag/${TagKey}	Read
DescribeAsset	Grants permission to describe an asset	asset*	aws:ResourceTag/${TagKey}	Read
DescribeAssetCompositeModel	Grants permission to describe an asset composite model	asset*	aws:ResourceTag/${TagKey}	Read
DescribeAssetModel	Grants permission to describe an asset model	asset-model*	aws:ResourceTag/${TagKey}	Read
DescribeAssetModelCompositeModel	Grants permission to describe an asset model composite model	asset-model*	aws:ResourceTag/${TagKey}	Read
DescribeAssetModelInterfaceRelationship	Grants permission to describe a relationship between asset model and interface	asset-model*	aws:ResourceTag/${TagKey}	Read
DescribeAssetProperty	Grants permission to describe an asset property	asset*	aws:ResourceTag/${TagKey}	Read
DescribeBulkImportJob	Grants permission to describe bulk import job			Read
DescribeComputationModel	Grants permission to describe a computation model	computation-model*	aws:ResourceTag/${TagKey}	Read
DescribeComputationModelExecutionSummary	Grants permission to describe computation model execution summary	asset	aws:ResourceTag/${TagKey}	Read
DescribeComputationModelExecutionSummary		computation-model*	aws:ResourceTag/${TagKey}	Read
DescribeDashboard	Grants permission to describe a dashboard	dashboard*	aws:ResourceTag/${TagKey}	Read
DescribeDataset	Grants permission to describe dataset	dataset*	aws:ResourceTag/${TagKey}	Read
DescribeDefaultEncryptionConfiguration	Grants permission to describe the default encryption configuration for the Amazon Web Services account			Read
DescribeExecution	Grants permission to describe an execution			Read
DescribeGateway	Grants permission to describe a gateway	gateway*	aws:ResourceTag/${TagKey}	Read
DescribeGatewayCapabilityConfiguration	Grants permission to describe a capability configuration for a gateway	gateway*	aws:ResourceTag/${TagKey}	Read
DescribeLoggingOptions	Grants permission to describe logging options for the Amazon Web Services account			Read
DescribePortal	Grants permission to describe a portal	portal*	aws:ResourceTag/${TagKey}	Read
DescribeProject	Grants permission to describe a project	project*	aws:ResourceTag/${TagKey}	Read
DescribeStorageConfiguration	Grants permission to describe the storage configuration for the Amazon Web Services account			Read
DescribeTimeSeries	Grants permission to describe a time series	asset	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Read
DescribeTimeSeries	Grants permission to describe a time series	time-series	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Read
DisassociateAssets	Grants permission to disassociate a child asset from a parent asset by a hierarchy	asset*	aws:ResourceTag/${TagKey}	Write
DisassociateTimeSeriesFromAssetProperty	Grants permission to disassociate a time series from an asset property	asset*	aws:ResourceTag/${TagKey}	Write
DisassociateTimeSeriesFromAssetProperty		time-series*	aws:ResourceTag/${TagKey}	Write
ExecuteAction	Grants permission to execute actions	asset	aws:ResourceTag/${TagKey}	Write
ExecuteAction	Grants permission to execute actions	computation-model	aws:ResourceTag/${TagKey}	Write
ExecuteQuery	Grants permission to execute query			Read
GetAssetPropertyAggregates	Grants permission to retrieve computed aggregates for an asset property	asset	aws:ResourceTag/${TagKey}	Read
GetAssetPropertyAggregates		time-series	aws:ResourceTag/${TagKey}	Read
GetAssetPropertyValue	Grants permission to retrieve the latest value for an asset property	asset	aws:ResourceTag/${TagKey}	Read
GetAssetPropertyValue		time-series	aws:ResourceTag/${TagKey}	Read
GetAssetPropertyValueHistory	Grants permission to retrieve the value history for an asset property	asset	aws:ResourceTag/${TagKey}	Read
GetAssetPropertyValueHistory		time-series	aws:ResourceTag/${TagKey}	Read
GetInterpolatedAssetPropertyValues	Grants permission to retrieve interpolated values for an asset property	asset	aws:ResourceTag/${TagKey}	Read
GetInterpolatedAssetPropertyValues		time-series	aws:ResourceTag/${TagKey}	Read
InvokeAssistant	Grants permission to invoke an assistant			Read
ListAccessPolicies	Grants permission to list all access policies for an identity or a resource	portal	aws:ResourceTag/${TagKey}	List
ListAccessPolicies		project	aws:ResourceTag/${TagKey}	List
ListActions	Grants permission to list all actions	asset	aws:ResourceTag/${TagKey}	List
ListActions	Grants permission to list all actions	computation-model	aws:ResourceTag/${TagKey}	List
ListAssetModelCompositeModels	Grants permission to list all asset model composite models	asset-model*	aws:ResourceTag/${TagKey}	List
ListAssetModelProperties	Grants permission to list asset model properties	asset-model*	aws:ResourceTag/${TagKey}	List
ListAssetModels	Grants permission to list all asset models			List
ListAssetProperties	Grants permission to list asset properties	asset*	aws:ResourceTag/${TagKey}	List
ListAssetRelationships	Grants permission to list the asset relationship graph for an asset	asset*	aws:ResourceTag/${TagKey}	List
ListAssets	Grants permission to list all assets	asset-model	aws:ResourceTag/${TagKey}	List
ListAssociatedAssets	Grants permission to list all assets associated with an asset through a hierarchy	asset*	aws:ResourceTag/${TagKey}	List
ListBulkImportJobs	Grants permission to list bulk import jobs			List
ListCompositionRelationships	Grants permission to list all asset model composition relationships	asset-model*	aws:ResourceTag/${TagKey}	List
ListComputationModelDataBindingUsages	Grants permission to list computation model data binding usages	asset	aws:ResourceTag/${TagKey}	List
ListComputationModelDataBindingUsages		asset-model	aws:ResourceTag/${TagKey}	List
ListComputationModelResolveToResources	Grants permission to list computation model resolve to resources	computation-model*	aws:ResourceTag/${TagKey}	List
ListComputationModels	Grants permission to list all computation models			List
ListDashboards	Grants permission to list all dashboards in a project	project*	aws:ResourceTag/${TagKey}	List
ListDatasets	Grants permission to list all datasets			List
ListExecutions	Grants permission to list executions	asset	aws:ResourceTag/${TagKey}	List
ListExecutions	Grants permission to list executions	computation-model	aws:ResourceTag/${TagKey}	List
ListGateways	Grants permission to list all gateways			List
ListInterfaceRelationships	Grants permission to list all asset models that are enforced by an interface	asset-model*	aws:ResourceTag/${TagKey}	List
ListPortals	Grants permission to list all portals			List
ListProjectAssets	Grants permission to list all assets associated with a project	project*	aws:ResourceTag/${TagKey}	List
ListProjects	Grants permission to list all projects in a portal	portal*	aws:ResourceTag/${TagKey}	List
ListTagsForResource	Grants permission to list all tags for a resource	access-policy	aws:ResourceTag/${TagKey}	Read
		asset	aws:ResourceTag/${TagKey}
		asset-model	aws:ResourceTag/${TagKey}
		computation-model	aws:ResourceTag/${TagKey}
		dashboard	aws:ResourceTag/${TagKey}
		dataset	aws:ResourceTag/${TagKey}
		gateway	aws:ResourceTag/${TagKey}
		portal	aws:ResourceTag/${TagKey}
		project	aws:ResourceTag/${TagKey}
		time-series	aws:ResourceTag/${TagKey}
ListTimeSeries	Grants permission to list time series	asset	aws:ResourceTag/${TagKey}	List
PutAssetModelInterfaceRelationship	Grants permission to create a relationship between asset model and interface	asset-model*	aws:ResourceTag/${TagKey}	Write
PutDefaultEncryptionConfiguration	Grants permission to set the default encryption configuration for the Amazon Web Services account			Write
PutLoggingOptions	Grants permission to set logging options for the Amazon Web Services account			Write
PutStorageConfiguration	Grants permission to configure storage settings for the Amazon Web Services account			Write
TagResource	Grants permission to tag a resource	access-policy	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		asset	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		asset-model	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		computation-model	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		dashboard	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		dataset	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		gateway	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		portal	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		project	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		time-series	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
UntagResource	Grants permission to untag a resource	access-policy	aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		asset	aws:ResourceTag/${TagKey} aws:TagKeys
		asset-model	aws:ResourceTag/${TagKey} aws:TagKeys
		computation-model	aws:ResourceTag/${TagKey} aws:TagKeys
		dashboard	aws:ResourceTag/${TagKey} aws:TagKeys
		dataset	aws:ResourceTag/${TagKey} aws:TagKeys
		gateway	aws:ResourceTag/${TagKey} aws:TagKeys
		portal	aws:ResourceTag/${TagKey} aws:TagKeys
		project	aws:ResourceTag/${TagKey} aws:TagKeys
		time-series	aws:ResourceTag/${TagKey} aws:TagKeys
UpdateAccessPolicy	Grants permission to update an access policy	access-policy*	aws:ResourceTag/${TagKey}	Write
UpdateAsset	Grants permission to update an asset	asset*	aws:ResourceTag/${TagKey}	Write
UpdateAssetModel	Grants permission to update an asset model	asset-model*	aws:ResourceTag/${TagKey}	Write
UpdateAssetModelCompositeModel	Grants permission to update asset model composite model	asset-model*	aws:ResourceTag/${TagKey}	Write
UpdateAssetProperty	Grants permission to update an asset property	asset*	aws:ResourceTag/${TagKey}	Write
UpdateComputationModel	Grants permission to update a computation model	asset	aws:ResourceTag/${TagKey}	Write
		asset-model	aws:ResourceTag/${TagKey}
		computation-model*	aws:ResourceTag/${TagKey}
UpdateDashboard	Grants permission to update a dashboard	dashboard*	aws:ResourceTag/${TagKey}	Write
UpdateDataset	Grants permission to update a dataset	dataset*	aws:ResourceTag/${TagKey}	Write
UpdateGateway	Grants permission to update a gateway	gateway*	aws:ResourceTag/${TagKey}	Write
UpdateGatewayCapabilityConfiguration	Grants permission to update a capability configuration for a gateway	gateway*	aws:ResourceTag/${TagKey}	Write
UpdatePortal	Grants permission to update a portal	portal*	aws:ResourceTag/${TagKey}	Write
UpdateProject	Grants permission to update a project	project*	aws:ResourceTag/${TagKey}	Write

Permission-only actions for Amazon IoT SiteWise

The following actions are defined by Amazon IoT SiteWise but are not directly invocable through any API operation. They can only be used in IAM policy statements to grant or deny permissions.

Actions	Description	Resource types (*required)	Condition keys	Access level
EnableSiteWiseIntegration	Grants permission to allow IoT SiteWise integrate with other services			Write
UpdateAssetModelPropertyRouting	Grants permission to update an AssetModel property routing	asset-model*	aws:ResourceTag/${TagKey}	Write

Resource types defined by Amazon IoT SiteWise

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
access-policy	arn:${Partition}:iotsitewise:${Region}:${Account}:access-policy/${AccessPolicyId}	aws:ResourceTag/${TagKey}
asset	arn:${Partition}:iotsitewise:${Region}:${Account}:asset/${AssetId}	aws:ResourceTag/${TagKey}
asset-model	arn:${Partition}:iotsitewise:${Region}:${Account}:asset-model/${AssetModelId}	aws:ResourceTag/${TagKey}
computation-model	arn:${Partition}:iotsitewise:${Region}:${Account}:computation-model/${ComputationModelId}	aws:ResourceTag/${TagKey}
dashboard	arn:${Partition}:iotsitewise:${Region}:${Account}:dashboard/${DashboardId}	aws:ResourceTag/${TagKey}
dataset	arn:${Partition}:iotsitewise:${Region}:${Account}:dataset/${DatasetId}	aws:ResourceTag/${TagKey}
gateway	arn:${Partition}:iotsitewise:${Region}:${Account}:gateway/${GatewayId}	aws:ResourceTag/${TagKey}
portal	arn:${Partition}:iotsitewise:${Region}:${Account}:portal/${PortalId}	aws:ResourceTag/${TagKey}
project	arn:${Partition}:iotsitewise:${Region}:${Account}:project/${ProjectId}	aws:ResourceTag/${TagKey}
time-series	arn:${Partition}:iotsitewise:${Region}:${Account}:time-series/${TimeSeriesId}	aws:ResourceTag/${TagKey}

Condition keys for Amazon IoT SiteWise

Amazon IoT SiteWise defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys	Description	Type
aws:RequestTag/${TagKey}	Filters access by the tag key-value pairs in the request	String
aws:ResourceTag/${TagKey}	Filters access by the tags attached to the resource	String
aws:TagKeys	Filters access by the tag keys in the request	ArrayOfString
iotsitewise:assetHierarchyPath	Filters access by an asset hierarchy path, which is the string of asset IDs in the asset's hierarchy, each separated by a forward slash	String
iotsitewise:childAssetId	Filters access by the ID of a child asset being associated whith a parent asset	String
iotsitewise:group	Filters access by the ID of an Amazon Single Sign-On group	String
iotsitewise:iam	Filters access by the ID of an Amazon IAM identity	String
iotsitewise:isAssociatedWithAssetProperty	Filters access by data streams associated with or not associated with asset properties	String
iotsitewise:portal	Filters access by the ID of a portal	String
iotsitewise:project	Filters access by the ID of a project	String
iotsitewise:propertyAlias	Filters access by the property alias	String
iotsitewise:propertyId	Filters access by the ID of an asset property	String
iotsitewise:user	Filters access by the ID of an Amazon Single Sign-On user	String

Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Amazon IoT Jobs DataPlane (iotjobsdata)

Amazon IoT TwinMaker (iottwinmaker)