View a markdown version of this page

Actions, resources, and condition keys for Amazon SimpleDB - Service Authorization Reference
OperationsActionsResource typesCondition keys
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Actions, resources, and condition keys for Amazon SimpleDB

Amazon SimpleDB (service prefix: sdb) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

API operations defined by Amazon SimpleDB

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation SDK client IAM action Condition key Possible value(s) Access level

GetExport

simpledbv2

sdb:GetExport

Read

ListExports

simpledbv2

sdb:ListExports

List

StartDomainExport

simpledbv2

sdb:StartDomainExport

Write

Actions defined by Amazon SimpleDB

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in Amazon. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions Description Resource types (*required) Condition keys Access level

BatchDeleteAttributes

Grants permission to perform multiple DeleteAttributes operations in a single call, which reduces round trips and latencies

domain*

Write

BatchPutAttributes

Grants permission to perform multiple PutAttribute operations in a single call, which reduces round trips and latencies

domain*

Write

CreateDomain

Grants permission to create a new domain

domain*

Write

DeleteAttributes

Grants permission to delete one or more attributes associated with the item

domain*

Write

DeleteDomain

Grants permission to delete a domain

domain*

Write

DomainMetadata

Grants permission to return information about the domain, including when the domain was created, the number of items and attributes, and the size of attribute names and values

domain*

Read

GetAttributes

Grants permission to return all of the attributes associated with the item

domain*

Read

GetExport

Grants permission to return information for an existing domain export arn

export*

Read

ListDomains

Grants permission to list all domains

List

ListExports

Grants permission to list all exports that were created. The results are paginated and can be filtered by domain name

domain

List

PutAttributes

Grants permission to create or replace attributes in an item

domain*

Write

Select

Grants permission to execute a query against the items in a domain

domain*

Read

StartDomainExport

Grants permission to initiates the export of a SimpleDB domain to an S3 bucket

domain*

Write

Resource types defined by Amazon SimpleDB

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types ARN Condition keys

domain

arn:${Partition}:sdb:${Region}:${Account}:domain/${DomainName}

export

arn:${Partition}:sdb:${Region}:${Account}:domain/${DomainName}/export/${ExportUUID}

Condition keys for Amazon SimpleDB

Amazon SimpleDB has no service-specific condition keys that can be used in the Condition element of policy statements.