# Actions, resources, and condition keys for Amazon Web Services Support
<a name="list_support"></a>

Amazon Web Services Support (service prefix: `support`) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:
+ Learn how to [configure this service](https://docs.amazonaws.cn/awssupport/latest/user/getting-started.html).
+ View a list of the [API operations available for this service](https://docs.amazonaws.cn/awssupport/latest/APIReference/Welcome.html).
+ Learn how to secure this service and its resources by [using IAM](https://docs.amazonaws.cn/awssupport/latest/user/security.html) permission policies.
+ View the [programmatic service authorization reference](https://servicereference.us-east-1.amazonaws.com/v1/support/support.json) for this service.

**Topics**
+ [API operations defined by Amazon Web Services Support](#list_support-operations)
+ [Actions defined by Amazon Web Services Support](#list_support-actions-as-permissions)
+ [Resource types defined by Amazon Web Services Support](#list_support-resources-for-iam-policies)
+ [Condition keys for Amazon Web Services Support](#list_support-policy-keys)

## API operations defined by Amazon Web Services Support
<a name="list_support-operations"></a>

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the [Actions table](#list_support-actions-as-permissions).


****  


- **   AddAttachmentsToSet  **
  - **IAM action:**  [support:AddAttachmentsToSet](#list_support-action-AddAttachmentsToSet) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Write

- **   AddCommunicationToCase  **
  - **IAM action:**  [support:AddCommunicationToCase](#list_support-action-AddCommunicationToCase) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Write

- **   CreateCase  **
  - **IAM action:**  [support:CreateCase](#list_support-action-CreateCase) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Write

- **   DescribeAttachment  **
  - **IAM action:**  [support:DescribeAttachment](#list_support-action-DescribeAttachment) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Read

- **   DescribeCases  **
  - **IAM action:**  [support:DescribeCases](#list_support-action-DescribeCases) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Read

- **   DescribeCommunications  **
  - **IAM action:**  [support:DescribeCommunications](#list_support-action-DescribeCommunications) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Read

- **   DescribeCreateCaseOptions  **
  - **IAM action:**  [support:DescribeCreateCaseOptions](#list_support-action-DescribeCreateCaseOptions) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Read

- **   DescribeServices  **
  - **IAM action:**  [support:DescribeServices](#list_support-action-DescribeServices) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Read

- **   DescribeSeverityLevels  **
  - **IAM action:**  [support:DescribeSeverityLevels](#list_support-action-DescribeSeverityLevels) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Read

- **   DescribeSupportedLanguages  **
  - **IAM action:**  [support:DescribeSupportedLanguages](#list_support-action-DescribeSupportedLanguages) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Read

- **   DescribeTrustedAdvisorCheckRefreshStatuses  **
  - **IAM action:**  [support:DescribeTrustedAdvisorCheckRefreshStatuses](#list_support-action-DescribeTrustedAdvisorCheckRefreshStatuses) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Read

- **   RefreshTrustedAdvisorCheck  **
  - **IAM action:**  [support:RefreshTrustedAdvisorCheck](#list_support-action-RefreshTrustedAdvisorCheck) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Write

- **   ResolveCase  **
  - **IAM action:**  [support:ResolveCase](#list_support-action-ResolveCase) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Write



## Actions defined by Amazon Web Services Support
<a name="list_support-actions-as-permissions"></a>

You can specify the following actions in the `Action` element of an IAM policy statement. Use policies to grant permissions to perform an operation in Amazon. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.


****  

| Actions | Description | Resource types (\*required) | Condition keys | Access level | 
| --- | --- | --- | --- | --- | 
|   [AddAttachmentsToSet](https://docs.amazonaws.cn/awssupport/latest/APIReference/API_AddAttachmentsToSet.html)  | Grants permission to add one or more attachments to an Amazon Web Services Support case |  |   | Write | 
|   [AddCommunicationToCase](https://docs.amazonaws.cn/awssupport/latest/APIReference/API_AddCommunicationToCase.html)  | Grants permission to add a customer communication to an Amazon Web Services Support case |  |   | Write | 
|   [CreateCase](https://docs.amazonaws.cn/awssupport/latest/APIReference/API_CreateCase.html)  | Grants permission to creates a new Amazon Web Services Support case |  |   | Write | 
|   [DescribeAttachment](https://docs.amazonaws.cn/awssupport/latest/APIReference/API_DescribeAttachment.html)  | Grants permission to describe attachment detail |  |   | Read | 
|   [DescribeCaseAttributes](https://docs.amazonaws.cn/awssupport/latest/user/accessing-support.html)  | Grants permission to allow secondary services to read Amazon Web Services Support case attributes.This is an internally managed function |  |   | Read | 
|   [DescribeCaseOptions](https://docs.amazonaws.cn/awssupport/latest/APIReference/API_DescribeCaseOptions.html)  | Grants permission to describe the available options for a single Amazon Web Services Support case. This is an internally managed function |  |   | Read | 
|   [DescribeCases](https://docs.amazonaws.cn/awssupport/latest/APIReference/API_DescribeCases.html)  | Grants permission to list Amazon Web Services Support cases that matches the given inputs |  |   | Read | 
|   [DescribeCommunication](https://docs.amazonaws.cn/awssupport/latest/user/accessing-support.html)  | Grants permission to get a single communication and attachments for a single Amazon Web Services Support case |  |   | Read | 
|   [DescribeCommunications](https://docs.amazonaws.cn/awssupport/latest/APIReference/API_DescribeCommunications.html)  | Grants permission to list the communications and attachments for one or more Amazon Web Services Support cases |  |   | Read | 
|   [DescribeCreateCaseOptions](https://docs.amazonaws.cn/awssupport/latest/APIReference/API_DescribeCreateCaseOptions.html)  | Grants permission to describes the available options for creating a support case |  |   | Read | 
|   [DescribeIssueTypes](https://docs.amazonaws.cn/awssupport/latest/user/accessing-support.html)  | Grants permission to return issue types for Amazon Web Services Support cases |  |   | Read | 
|   [DescribeServices](https://docs.amazonaws.cn/awssupport/latest/APIReference/API_DescribeServices.html)  | Grants permission to list Amazon services and categories that applies to each service |  |   | Read | 
|   [DescribeSeverityLevels](https://docs.amazonaws.cn/awssupport/latest/APIReference/API_DescribeSeverityLevels.html)  | Grants permission to list severity levels that can be assigned to an Amazon Web Services Support case |  |   | Read | 
|   [DescribeSupportLevel](https://docs.amazonaws.cn/awssupport/latest/user/accessing-support.html)  | Grants permission to return the support level for an Amazon Account identifier |  |   | Read | 
|   [DescribeSupportedLanguages](https://docs.amazonaws.cn/awssupport/latest/APIReference/API_DescribeSupportedLanguages.html)  | Grants permission to describes the available support languages for a given category code, service code and issue type |  |   | Read | 
|   [DescribeTrustedAdvisorCheckRefreshStatuses](https://docs.amazonaws.cn/awssupport/latest/APIReference/API_DescribeTrustedAdvisorCheckRefreshStatuses.html)  | Grants permission to get the status of a Trusted Advisor refresh check based on a list of check identifiers |  |   | Read | 
|   [DescribeTrustedAdvisorCheckResult](https://docs.amazonaws.cn/awssupport/latest/APIReference/API_DescribeTrustedAdvisorCheckResult.html)  | Grants permission to get the results of the Trusted Advisor check that has the specified check identifier |  |   | Read | 
|   [DescribeTrustedAdvisorCheckSummaries](https://docs.amazonaws.cn/awssupport/latest/APIReference/API_DescribeTrustedAdvisorCheckSummaries.html)  | Grants permission to get the summaries of the results of the Trusted Advisor checks that have the specified check identifiers |  |   | Read | 
|   [DescribeTrustedAdvisorChecks](https://docs.amazonaws.cn/awssupport/latest/APIReference/API_DescribeTrustedAdvisorChecks.html)  | Grants permission to get a list of all available Trusted Advisor checks, including name, identifier, category and description |  |   | Read | 
|   [GetInteraction](https://docs.amazonaws.cn/awssupport/latest/APIReference/API_GetInteraction.html)  | Grants permission to retrieve personalized troubleshooting assistance for account and technical issues for a specific interaction |  |   | Read | 
|   [InitiateCallForCase](https://docs.amazonaws.cn/awssupport/latest/user/accessing-support.html)  | Grants permission to initiate a call on Amazon Web Services Support Center. This is an internally managed function |  |   | Write | 
|   [InitiateChatForCase](https://docs.amazonaws.cn/awssupport/latest/user/accessing-support.html)  | Grants permission to initiate a chat on Amazon Web Services Support Center.This is an internally managed function |  |   | Write | 
|   [InitiateLiveContactForCase](https://docs.amazonaws.cn/awssupport/latest/user/accessing-support.html)  | Grants permission to initiate a live contact on Amazon Web Services Support Center. This is an internally managed function |  |   | Write | 
|   [ListInteractionEntries](https://docs.amazonaws.cn/awssupport/latest/user/accessing-support.html)  | Grants permission to retrieve a list of entries within a specific interaction, including messages, status updates, or other relevant data points |  |   | Read | 
|   [ListInteractions](https://docs.amazonaws.cn/awssupport/latest/user/accessing-support.html)  | Grants permission to retrieve a list of interactions, potentially with filters or pagination |  |   | Read | 
|   [PutCaseAttributes](https://docs.amazonaws.cn/awssupport/latest/user/accessing-support.html)  | Grants permission to allow secondary services to attach attributes to Amazon Web Services Support cases. This is an internally managed function |  |   | Write | 
|   [RateCaseCommunication](https://docs.amazonaws.cn/awssupport/latest/user/accessing-support.html)  | Grants permission to rate an Amazon Web Services Support case communication |  |   | Write | 
|   [RefreshTrustedAdvisorCheck](https://docs.amazonaws.cn/awssupport/latest/APIReference/API_RefreshTrustedAdvisorCheck.html)  | Grants permission to requests a refresh of the Trusted Advisor check that has the specified check identifier |  |   | Write | 
|   [ResolveCase](https://docs.amazonaws.cn/awssupport/latest/APIReference/API_ResolveCase.html)  | Grants permission to resolve an Amazon Web Services Support case |  |   | Write | 
|   [ResolveInteraction](https://docs.amazonaws.cn/awssupport/latest/user/accessing-support.html)  | Grants permission to mark a specific interaction as resolved by its unique identifier, indicating that the issue has been addressed and no further action is needed |  |   | Write | 
|   [SearchForCases](https://docs.amazonaws.cn/awssupport/latest/user/accessing-support.html)  | Grants permission to return a list of Amazon Web Services Support cases that matches the given inputs |  |   | Read | 
|   [StartInteraction](https://docs.amazonaws.cn/awssupport/latest/APIReference/API_StartInteraction.html)  | Grants permission to start a specific interaction to receive personalized troubleshooting assistance for account and technical issues |  |   | Write | 
|   [UpdateCaseSeverity](https://docs.amazonaws.cn/awssupport/latest/APIReference/API_UpdateCaseSeverity.html)  | Grants permission to update the severity for a single Amazon Web Services Support case. This is an internally managed function |  |   | Write | 
|   [UpdateInteraction](https://docs.amazonaws.cn/awssupport/latest/APIReference/API_UpdateInteraction.html)  | Grants permission to update a specific interaction to receive personalized troubleshooting assistance for account and technical issues |  |   | Write | 

## Resource types defined by Amazon Web Services Support
<a name="list_support-resources-for-iam-policies"></a>

Amazon Web Services Support does not support specifying a resource ARN in the `Resource` element of an IAM policy statement.

## Condition keys for Amazon Web Services Support
<a name="list_support-policy-keys"></a>

Amazon Web Services Support has no service-specific condition keys that can be used in the `Condition` element of policy statements.