Actions, resources, and condition keys for Amazon Launch Wizard
Amazon Launch Wizard (service prefix: launchwizard) provides the following
service-specific operations, resources, actions, and condition keys for use in IAM permission
policies.
References:
-
Learn how to configure this service.
-
View a list of the API operations available for this service.
-
Learn how to secure this service and its resources by using IAM permission policies.
-
View the programmatic service authorization reference
for this service.
Topics
API operations defined by Amazon Launch Wizard
The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.
| Operation | IAM action | Condition key | Possible value(s) | Access level |
|---|---|---|---|---|
|
CreateDeployment |
Write |
|||
Tagging, Write |
||||
|
DeleteDeployment |
Write |
|||
|
GetDeployment |
Read |
|||
|
GetDeploymentPatternVersion |
Read |
|||
|
GetWorkload |
Read |
|||
|
GetWorkloadDeploymentPattern |
Read |
|||
|
ListDeploymentEvents |
List |
|||
|
ListDeploymentPatternVersions |
List |
|||
|
ListDeployments |
List |
|||
|
ListTagsForResource |
Read |
|||
|
ListWorkloadDeploymentPatterns |
List |
|||
|
ListWorkloads |
List |
|||
|
TagResource |
Tagging, Write |
|||
|
UntagResource |
Tagging, Write |
|||
|
UpdateDeployment |
Write |
Actions defined by Amazon Launch Wizard
You can specify the following actions in the Action element of an IAM
policy statement. Use policies to grant permissions to perform an operation in Amazon. When
you use an action in a policy, you usually allow or deny access to the API operation or CLI
command with the same name. However, in some cases, a single action controls access to more
than one operation. Alternatively, some operations require several different actions.
| Actions | Description | Resource types (*required) | Condition keys | Access level |
|---|---|---|---|---|
Grants permission to create a deployment |
Write |
|||
Grants permission to delete a deployment |
Write |
|||
Grants permission to get a deployment |
Read |
|||
Grants permission to get a version of a deployment pattern |
Read |
|||
Grants permission to get a workload |
Read |
|||
Grants permission to get a deployment pattern |
Read |
|||
Grants permission to list the events that occured during a deployment |
List |
|||
Grants permission to list the versions of a deployment pattern |
List |
|||
Grants permission to list deployments |
List |
|||
Grants permission to list tags for a LaunchWizard resource |
Read |
|||
Grants permission to list the deployment patterns of a workload |
List |
|||
Grants permission to list workloads |
List |
|||
Grants permission to tag a LaunchWizard resource |
Tagging, Write |
|||
Grants permission to untag a LaunchWizard resource |
Tagging, Write |
|||
Grants permission to update a deployment |
Write |
Permission-only actions for Amazon Launch Wizard
The following actions are defined by Amazon Launch Wizard but are not directly invocable through any API operation. They can only be used in IAM policy statements to grant or deny permissions.
| Actions | Description | Resource types (*required) | Condition keys | Access level |
|---|---|---|---|---|
Grants permission to create an additional node |
Write |
|||
Grants permission to create an application settings set |
Write |
|||
Grants permission to delete an additional node |
Write |
|||
Grants permission to delete an application |
Write |
|||
Grants permission to delete a settings set |
Write |
|||
Grants permission to describe an additional node |
Read |
|||
Grants permission to describe provisioning applications |
Read |
|||
Grants permission to describe provisioning events |
Read |
|||
Grants permission to describe an application settings set |
Read |
|||
Grants permission to get infrastructure suggestion |
Read |
|||
Grants permission to get customer's ip address |
Read |
|||
Grants permission to get resource cost estimate |
Read |
|||
Grants permission to get recommendation for a resource |
Read |
|||
Grants permission to get a settings set |
Read |
|||
Grants permission to get a workload's asset |
Read |
|||
Grants permission to get workload assets |
Read |
|||
Grants permission to list additional nodes |
List |
|||
Grants permission to list the allowed resources |
List |
|||
Grants permission to list provisioning applications |
List |
|||
Grants permission to list the cost estimates of resources |
List |
|||
Grants permission to list settings sets |
List |
|||
Grants permission to list deployment options of a given workload |
List |
|||
Grants permission to create a settings set |
Write |
|||
Grants permission to start a provisioning |
Write |
|||
Grants permission to update an application settings set |
Write |
Resource types defined by Amazon Launch Wizard
The following resource types are defined by this service and can be used in the
Resource element of IAM permission policy statements.
| Resource types | ARN | Condition keys |
|---|---|---|
arn:${Partition}:launchwizard:${Region}:${Account}:deployment/${DeploymentId} |
Condition keys for Amazon Launch Wizard
Amazon Launch Wizard defines the following condition keys that can be used in the
Condition element of an IAM policy.
| Condition keys | Description | Type |
|---|---|---|
Filters access by the presence of tag key-value pairs in the request |
String |
|
Filters access by tag key-value pairs attached to the resource |
String |
|
Filters access by the presence of tag keys in the request |
ArrayOfString |