Operations Actions Resource types Condition keys

Actions, resources, and condition keys for Amazon Personalize

Amazon Personalize (service prefix: personalize) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by Amazon Personalize
Actions defined by Amazon Personalize
Resource types defined by Amazon Personalize
Condition keys for Amazon Personalize

API operations defined by Amazon Personalize

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	SDK client	IAM action	Condition key	Possible value(s)	Access level
CreateBatchInferenceJob	personalize	personalize:CreateBatchInferenceJob			Write
		personalize:TagResource			Tagging, Write
		iam:PassRole	iam:PassedToService	personalize.amazonaws.com	Write
CreateBatchSegmentJob	personalize	personalize:CreateBatchSegmentJob			Write
		personalize:TagResource			Tagging, Write
		iam:PassRole	iam:PassedToService	personalize.amazonaws.com	Write
CreateCampaign	personalize	personalize:CreateCampaign			Write
CreateCampaign	personalize	personalize:TagResource			Tagging, Write
CreateDataDeletionJob	personalize	personalize:CreateDataDeletionJob			Write
CreateDataDeletionJob	personalize	iam:PassRole	iam:PassedToService	personalize.amazonaws.com	Write
CreateDataset	personalize	personalize:CreateDataset			Write
CreateDataset	personalize	personalize:TagResource			Tagging, Write
CreateDatasetExportJob	personalize	personalize:CreateDatasetExportJob			Write
		personalize:TagResource			Tagging, Write
		iam:PassRole	iam:PassedToService	personalize.amazonaws.com	Write
CreateDatasetGroup	personalize	personalize:CreateDatasetGroup			Write
		personalize:TagResource			Tagging, Write
		iam:PassRole	iam:PassedToService	personalize.amazonaws.com	Write
CreateDatasetImportJob	personalize	personalize:CreateDatasetImportJob			Write
		personalize:TagResource			Tagging, Write
		iam:PassRole	iam:PassedToService	personalize.amazonaws.com	Write
CreateEventTracker	personalize	personalize:CreateEventTracker			Write
CreateEventTracker	personalize	personalize:TagResource			Tagging, Write
CreateFilter	personalize	personalize:CreateFilter			Write
CreateFilter	personalize	personalize:TagResource			Tagging, Write
CreateMetricAttribution	personalize	personalize:CreateMetricAttribution			Write
CreateMetricAttribution	personalize	iam:PassRole	iam:PassedToService	personalize.amazonaws.com	Write
CreateRecommender	personalize	personalize:CreateRecommender			Write
CreateRecommender	personalize	personalize:TagResource			Tagging, Write
CreateSchema	personalize	personalize:CreateSchema			Write
CreateSolution	personalize	personalize:CreateSolution			Write
CreateSolution	personalize	personalize:TagResource			Tagging, Write
CreateSolutionVersion	personalize	personalize:CreateSolutionVersion			Write
CreateSolutionVersion	personalize	personalize:TagResource			Tagging, Write
DeleteCampaign	personalize	personalize:DeleteCampaign			Write
DeleteDataset	personalize	personalize:DeleteDataset			Write
DeleteDatasetGroup	personalize	personalize:DeleteDatasetGroup			Write
DeleteEventTracker	personalize	personalize:DeleteEventTracker			Write
DeleteFilter	personalize	personalize:DeleteFilter			Write
DeleteMetricAttribution	personalize	personalize:DeleteMetricAttribution			Write
DeleteRecommender	personalize	personalize:DeleteRecommender			Write
DeleteSchema	personalize	personalize:DeleteSchema			Write
DeleteSolution	personalize	personalize:DeleteSolution			Write
DescribeAlgorithm	personalize	personalize:DescribeAlgorithm			Read
DescribeBatchInferenceJob	personalize	personalize:DescribeBatchInferenceJob			Read
DescribeBatchSegmentJob	personalize	personalize:DescribeBatchSegmentJob			Read
DescribeCampaign	personalize	personalize:DescribeCampaign			Read
DescribeDataDeletionJob	personalize	personalize:DescribeDataDeletionJob			Read
DescribeDataset	personalize	personalize:DescribeDataset			Read
DescribeDatasetExportJob	personalize	personalize:DescribeDatasetExportJob			Read
DescribeDatasetGroup	personalize	personalize:DescribeDatasetGroup			Read
DescribeDatasetImportJob	personalize	personalize:DescribeDatasetImportJob			Read
DescribeEventTracker	personalize	personalize:DescribeEventTracker			Read
DescribeFeatureTransformation	personalize	personalize:DescribeFeatureTransformation			Read
DescribeFilter	personalize	personalize:DescribeFilter			Read
DescribeMetricAttribution	personalize	personalize:DescribeMetricAttribution			Read
DescribeRecipe	personalize	personalize:DescribeRecipe			Read
DescribeRecommender	personalize	personalize:DescribeRecommender			Read
DescribeSchema	personalize	personalize:DescribeSchema			Read
DescribeSolution	personalize	personalize:DescribeSolution			Read
DescribeSolutionVersion	personalize	personalize:DescribeSolutionVersion			Read
GetSolutionMetrics	personalize	personalize:GetSolutionMetrics			Read
ListBatchInferenceJobs	personalize	personalize:ListBatchInferenceJobs			List
ListBatchSegmentJobs	personalize	personalize:ListBatchSegmentJobs			List
ListCampaigns	personalize	personalize:ListCampaigns			List
ListDataDeletionJobs	personalize	personalize:ListDataDeletionJobs			List
ListDatasetExportJobs	personalize	personalize:ListDatasetExportJobs			List
ListDatasetGroups	personalize	personalize:ListDatasetGroups			List
ListDatasetImportJobs	personalize	personalize:ListDatasetImportJobs			List
ListDatasets	personalize	personalize:ListDatasets			List
ListEventTrackers	personalize	personalize:ListEventTrackers			List
ListFilters	personalize	personalize:ListFilters			List
ListMetricAttributionMetrics	personalize	personalize:ListMetricAttributionMetrics			List
ListMetricAttributions	personalize	personalize:ListMetricAttributions			List
ListRecipes	personalize	personalize:ListRecipes			List
ListRecommenders	personalize	personalize:ListRecommenders			List
ListSchemas	personalize	personalize:ListSchemas			List
ListSolutionVersions	personalize	personalize:ListSolutionVersions			List
ListSolutions	personalize	personalize:ListSolutions			List
ListTagsForResource	personalize	personalize:ListTagsForResource			List
StartRecommender	personalize	personalize:StartRecommender			Write
StopRecommender	personalize	personalize:StopRecommender			Write
StopSolutionVersionCreation	personalize	personalize:StopSolutionVersionCreation			Write
TagResource	personalize	personalize:TagResource			Tagging, Write
UntagResource	personalize	personalize:UntagResource			Tagging, Write
UpdateCampaign	personalize	personalize:UpdateCampaign			Write
UpdateDataset	personalize	personalize:UpdateDataset			Write
UpdateMetricAttribution	personalize	personalize:UpdateMetricAttribution			Write
UpdateMetricAttribution	personalize	iam:PassRole	iam:PassedToService	personalize.amazonaws.com	Write
UpdateRecommender	personalize	personalize:UpdateRecommender			Write
UpdateSolution	personalize	personalize:UpdateSolution			Write
PutActionInteractions	personalize-events	personalize:PutActionInteractions			Write
PutActions	personalize-events	personalize:PutActions			Write
PutEvents	personalize-events	personalize:PutEvents			Write
PutItems	personalize-events	personalize:PutItems			Write
PutUsers	personalize-events	personalize:PutUsers			Write
GetActionRecommendations	personalize-runtime	personalize:GetActionRecommendations			Read
GetPersonalizedRanking	personalize-runtime	personalize:GetPersonalizedRanking			Read
GetRecommendations	personalize-runtime	personalize:GetRecommendations			Read

Actions defined by Amazon Personalize

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in Amazon. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
CreateBatchInferenceJob	Grants permission to create a batch inference job	batchInferenceJob*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateBatchInferenceJob	Grants permission to create a batch inference job	solution*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateBatchSegmentJob	Grants permission to create a batch segment job	batchSegmentJob*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateCampaign	Grants permission to create a campaign	campaign*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateCampaign	Grants permission to create a campaign	solution*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateDataDeletionJob	Grants permission to create a data deletion job	dataDeletionJob*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateDataDeletionJob	Grants permission to create a data deletion job	datasetGroup*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateDataInsightsJob	Grants permission to create a data insights job	dataInsightsJob*		Write
CreateDataset	Grants permission to create a dataset	dataset*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateDataset	Grants permission to create a dataset	datasetGroup*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateDatasetExportJob	Grants permission to create a dataset export job	dataset*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateDatasetExportJob	Grants permission to create a dataset export job	datasetExportJob*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateDatasetGroup	Grants permission to create a dataset group	datasetGroup*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateDatasetImportJob	Grants permission to create a dataset import job	dataset*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateDatasetImportJob	Grants permission to create a dataset import job	datasetImportJob*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateEventTracker	Grants permission to create an event tracker	datasetGroup*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateEventTracker	Grants permission to create an event tracker	eventTracker*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateFilter	Grants permission to create a filter	datasetGroup*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateFilter	Grants permission to create a filter	filter*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateMetricAttribution	Grants permission to create a metric attribution	datasetGroup*	aws:ResourceTag/${TagKey}	Write
CreateMetricAttribution	Grants permission to create a metric attribution	metricAttribution*		Write
CreateRecommender	Grants permission to create a recommender	datasetGroup*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateRecommender	Grants permission to create a recommender	recommender*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateSchema	Grants permission to create a schema	schema*		Write
CreateSolution	Grants permission to create a solution	datasetGroup*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateSolution	Grants permission to create a solution	solution*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateSolutionVersion	Grants permission to create a solution version	solution*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
DeleteCampaign	Grants permission to delete a campaign	campaign*	aws:ResourceTag/${TagKey}	Write
DeleteDataset	Grants permission to delete a dataset	dataset*	aws:ResourceTag/${TagKey}	Write
DeleteDatasetGroup	Grants permission to delete a dataset group	datasetGroup*	aws:ResourceTag/${TagKey}	Write
DeleteEventTracker	Grants permission to delete an event tracker	eventTracker*	aws:ResourceTag/${TagKey}	Write
DeleteFilter	Grants permission to delete a filter	filter*	aws:ResourceTag/${TagKey}	Write
DeleteMetricAttribution	Grants permission to delete a metric attribution	metricAttribution*		Write
DeleteRecommender	Grants permission to delete a recommender	recommender*	aws:ResourceTag/${TagKey}	Write
DeleteSchema	Grants permission to delete a schema	schema*		Write
DeleteSolution	Grants permission to delete a solution including all versions of the solution	solution*	aws:ResourceTag/${TagKey}	Write
DescribeAlgorithm	Grants permission to describe an algorithm	algorithm*		Read
DescribeBatchInferenceJob	Grants permission to describe a batch inference job	batchInferenceJob*	aws:ResourceTag/${TagKey}	Read
DescribeBatchSegmentJob	Grants permission to describe a batch segment job	batchSegmentJob*	aws:ResourceTag/${TagKey}	Read
DescribeCampaign	Grants permission to describe a campaign	campaign*	aws:ResourceTag/${TagKey}	Read
DescribeDataDeletionJob	Grants permission to describe a data deletion job	dataDeletionJob*	aws:ResourceTag/${TagKey}	Read
DescribeDataInsightsJob	Grants permission to describe a data insights job	dataInsightsJob*		Read
DescribeDataset	Grants permission to describe a dataset	dataset*	aws:ResourceTag/${TagKey}	Read
DescribeDatasetExportJob	Grants permission to describe a dataset export job	datasetExportJob*	aws:ResourceTag/${TagKey}	Read
DescribeDatasetGroup	Grants permission to describe a dataset group	datasetGroup*	aws:ResourceTag/${TagKey}	Read
DescribeDatasetImportJob	Grants permission to describe a dataset import job	datasetImportJob*	aws:ResourceTag/${TagKey}	Read
DescribeEventTracker	Grants permission to describe an event tracker	eventTracker*	aws:ResourceTag/${TagKey}	Read
DescribeFeatureTransformation	Grants permission to describe a feature transformation	featureTransformation*		Read
DescribeFilter	Grants permission to describe a filter	filter*	aws:ResourceTag/${TagKey}	Read
DescribeMetricAttribution	Grants permission to describe a metric attribution	metricAttribution*		Read
DescribeRecipe	Grants permission to describe a recipe	recipe*		Read
DescribeRecommender	Grants permission to describe a recommender	recommender*	aws:ResourceTag/${TagKey}	Read
DescribeSchema	Grants permission to describe a schema	schema*		Read
DescribeSolution	Grants permission to describe a solution	solution*	aws:ResourceTag/${TagKey}	Read
DescribeSolutionVersion	Grants permission to describe a version of a solution	solution*	aws:ResourceTag/${TagKey}	Read
GetActionRecommendations	Grants permission to get a list of recommended actions	campaign*	aws:ResourceTag/${TagKey}	Read
GetDataInsights	Grants permission to get data insights from a data insights job	dataInsightsJob*		Read
GetPersonalizedRanking	Grants permission to get a re-ranked list of recommendations	campaign*	aws:ResourceTag/${TagKey}	Read
GetRecommendations	Grants permission to get a list of recommendations from a campaign	campaign*	aws:ResourceTag/${TagKey}	Read
GetSolutionMetrics	Grants permission to get metrics for a solution version	solution*	aws:ResourceTag/${TagKey}	Read
ListBatchInferenceJobs	Grants permission to list batch inference jobs			List
ListBatchSegmentJobs	Grants permission to list batch segment jobs			List
ListCampaigns	Grants permission to list campaigns			List
ListDataDeletionJobs	Grants permission to list data deletion jobs			List
ListDataInsightsJobs	Grants permission to list data insights jobs			List
ListDatasetExportJobs	Grants permission to list dataset export jobs			List
ListDatasetGroups	Grants permission to list dataset groups			List
ListDatasetImportJobs	Grants permission to list dataset import jobs			List
ListDatasets	Grants permission to list datasets			List
ListEventTrackers	Grants permission to list event trackers			List
ListFilters	Grants permission to list filters			List
ListMetricAttributionMetrics	Grants permission to list metric attribution metrics			List
ListMetricAttributions	Grants permission to list metric attributions			List
ListRecipes	Grants permission to list recipes			List
ListRecommenders	Grants permission to list recommenders			List
ListSchemas	Grants permission to list schemas			List
ListSolutionVersions	Grants permission to list versions of a solution			List
ListSolutions	Grants permission to list solutions			List
ListTagsForResource	Grants permission to list tags for a resource	batchInferenceJob	aws:ResourceTag/${TagKey}	List
		batchSegmentJob	aws:ResourceTag/${TagKey}
		campaign	aws:ResourceTag/${TagKey}
		dataDeletionJob	aws:ResourceTag/${TagKey}
		dataset	aws:ResourceTag/${TagKey}
		datasetExportJob	aws:ResourceTag/${TagKey}
		datasetGroup	aws:ResourceTag/${TagKey}
		datasetImportJob	aws:ResourceTag/${TagKey}
		eventTracker	aws:ResourceTag/${TagKey}
		filter	aws:ResourceTag/${TagKey}
		recommender	aws:ResourceTag/${TagKey}
		solution	aws:ResourceTag/${TagKey}
PutActionInteractions	Grants permission to put real time action interaction data			Write
PutActions	Grants permission to ingest Actions data	dataset*	aws:ResourceTag/${TagKey}	Write
PutEvents	Grants permission to put real time event data			Write
PutItems	Grants permission to ingest Items data	dataset*	aws:ResourceTag/${TagKey}	Write
PutUsers	Grants permission to ingest Users data	dataset*	aws:ResourceTag/${TagKey}	Write
StartRecommender	Grants permission to start a recommender	recommender*	aws:ResourceTag/${TagKey}	Write
StopRecommender	Grants permission to stop a recommender	recommender*	aws:ResourceTag/${TagKey}	Write
StopSolutionVersionCreation	Grants permission to stop a solution version creation	solution*	aws:ResourceTag/${TagKey}	Write
TagResource	Grants permission to tag a resource	batchInferenceJob	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		batchSegmentJob	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		campaign	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		dataDeletionJob	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		dataset	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		datasetExportJob	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		datasetGroup	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		datasetImportJob	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		eventTracker	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		filter	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		recommender	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		solution	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
UntagResource	Grants permission to untag a resource	batchInferenceJob	aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		batchSegmentJob	aws:ResourceTag/${TagKey} aws:TagKeys
		campaign	aws:ResourceTag/${TagKey} aws:TagKeys
		dataDeletionJob	aws:ResourceTag/${TagKey} aws:TagKeys
		dataset	aws:ResourceTag/${TagKey} aws:TagKeys
		datasetExportJob	aws:ResourceTag/${TagKey} aws:TagKeys
		datasetGroup	aws:ResourceTag/${TagKey} aws:TagKeys
		datasetImportJob	aws:ResourceTag/${TagKey} aws:TagKeys
		eventTracker	aws:ResourceTag/${TagKey} aws:TagKeys
		filter	aws:ResourceTag/${TagKey} aws:TagKeys
		recommender	aws:ResourceTag/${TagKey} aws:TagKeys
		solution	aws:ResourceTag/${TagKey} aws:TagKeys
UpdateCampaign	Grants permission to update a campaign	campaign*	aws:ResourceTag/${TagKey}	Write
UpdateDataset	Grants permission to update a dataset	dataset*	aws:ResourceTag/${TagKey}	Write
UpdateMetricAttribution	Grants permission to update a metric attribution	metricAttribution*		Write
UpdateRecommender	Grants permission to update a recommender	recommender*	aws:ResourceTag/${TagKey}	Write
UpdateSolution	Grants permission to update a solution	solution*	aws:ResourceTag/${TagKey}	Write

Resource types defined by Amazon Personalize

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
algorithm	arn:${Partition}:personalize:::algorithm/${ResourceId}
batchInferenceJob	arn:${Partition}:personalize:${Region}:${Account}:batch-inference-job/${ResourceId}	aws:ResourceTag/${TagKey}
batchSegmentJob	arn:${Partition}:personalize:${Region}:${Account}:batch-segment-job/${ResourceId}	aws:ResourceTag/${TagKey}
campaign	arn:${Partition}:personalize:${Region}:${Account}:campaign/${ResourceId}	aws:ResourceTag/${TagKey}
dataDeletionJob	arn:${Partition}:personalize:${Region}:${Account}:data-deletion-job/${ResourceId}	aws:ResourceTag/${TagKey}
dataInsightsJob	arn:${Partition}:personalize:${Region}:${Account}:data-insights-job/${ResourceId}
dataset	arn:${Partition}:personalize:${Region}:${Account}:dataset/${ResourceId}	aws:ResourceTag/${TagKey}
datasetExportJob	arn:${Partition}:personalize:${Region}:${Account}:dataset-export-job/${ResourceId}	aws:ResourceTag/${TagKey}
datasetGroup	arn:${Partition}:personalize:${Region}:${Account}:dataset-group/${ResourceId}	aws:ResourceTag/${TagKey}
datasetImportJob	arn:${Partition}:personalize:${Region}:${Account}:dataset-import-job/${ResourceId}	aws:ResourceTag/${TagKey}
eventTracker	arn:${Partition}:personalize:${Region}:${Account}:event-tracker/${ResourceId}	aws:ResourceTag/${TagKey}
featureTransformation	arn:${Partition}:personalize:::feature-transformation/${ResourceId}
filter	arn:${Partition}:personalize:${Region}:${Account}:filter/${ResourceId}	aws:ResourceTag/${TagKey}
metricAttribution	arn:${Partition}:personalize:${Region}:${Account}:metric-attribution/${ResourceId}
recipe	arn:${Partition}:personalize:::recipe/${ResourceId}
recommender	arn:${Partition}:personalize:${Region}:${Account}:recommender/${ResourceId}	aws:ResourceTag/${TagKey}
schema	arn:${Partition}:personalize:${Region}:${Account}:schema/${ResourceId}
solution	arn:${Partition}:personalize:${Region}:${Account}:solution/${ResourceId}	aws:ResourceTag/${TagKey}

Condition keys for Amazon Personalize

Amazon Personalize defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys	Description	Type
aws:RequestTag/${TagKey}	Filters access by the tags that are passed in the request	String
aws:ResourceTag/${TagKey}	Filters access by the tags associated with the resource	String
aws:TagKeys	Filters access by the tag keys that are passed in the request	ArrayOfString

Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Amazon OpenSearch Service (es)

Amazon Polly (polly)