Actions, resources, and condition keys for Amazon IoT Analytics

Amazon IoT Analytics (service prefix: iotanalytics) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

Actions defined by Amazon IoT Analytics
Resource types defined by Amazon IoT Analytics
Condition keys for Amazon IoT Analytics

Actions defined by Amazon IoT Analytics

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in Amazon. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
BatchPutMessage	Puts a batch of messages into the specified channel	channel*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Write
CancelPipelineReprocessing	Cancels reprocessing for the specified pipeline	pipeline*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Write
CreateChannel	Creates a channel	channel*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Write
CreateDataset	Creates a dataset	dataset*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Write
CreateDatasetContent	Generates content from the specified dataset (by executing the dataset actions)	dataset*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Write
CreateDatastore	Creates a datastore	datastore*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Write
CreatePipeline	Creates a pipeline	pipeline*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Write
DeleteChannel	Deletes the specified channel	channel*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Write
DeleteDataset	Deletes the specified dataset	dataset*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Write
DeleteDatasetContent	Deletes the content of the specified dataset	dataset*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Write
DeleteDatastore	Deletes the specified datastore	datastore*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Write
DeletePipeline	Deletes the specified pipeline	pipeline*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Write
DescribeChannel	Describes the specified channel	channel*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Read
DescribeDataset	Describes the specified dataset	dataset*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Read
DescribeDatastore	Describes the specified datastore	datastore*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Read
DescribeLoggingOptions	Describes logging options for the the account			Read
DescribePipeline	Describes the specified pipeline	pipeline*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Read
GetDatasetContent	Gets the content of the specified dataset	dataset*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Read
ListChannels	Lists the channels for the account			List
ListDatasetContents	Lists information about dataset contents that have been created	dataset*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	List
ListDatasets	Lists the datasets for the account			List
ListDatastores	Lists the datastores for the account			List
ListPipelines	Lists the pipelines for the account			List
ListTagsForResource	Lists the tags (metadata) which you have assigned to the resource	channel	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Read
		dataset	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}
		datastore	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}
		pipeline	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}
PutLoggingOptions	Puts logging options for the the account			Write
RunPipelineActivity	Runs the specified pipeline activity			Read
SampleChannelData	Samples the specified channel's data	channel*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Read
StartPipelineReprocessing	Starts reprocessing for the specified pipeline	pipeline*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Write
TagResource	Adds to or modifies the tags of the given resource. Tags are metadata which can be used to manage a resource	channel	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Tagging, Write
		dataset	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}
		datastore	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}
		pipeline	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}
UntagResource	Removes the given tags (metadata) from the resource	channel	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Tagging, Write
		dataset	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}
		datastore	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}
		pipeline	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}
UpdateChannel	Updates the specified channel	channel*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Write
UpdateDataset	Updates the specified dataset	dataset*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Write
UpdateDatastore	Updates the specified datastore	datastore*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Write
UpdatePipeline	Updates the specified pipeline	pipeline*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Write

Resource types defined by Amazon IoT Analytics

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
channel	arn:${Partition}:iotanalytics:${Region}:${Account}:channel/${ChannelName}	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}
dataset	arn:${Partition}:iotanalytics:${Region}:${Account}:dataset/${DatasetName}	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}
datastore	arn:${Partition}:iotanalytics:${Region}:${Account}:datastore/${DatastoreName}	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}
pipeline	arn:${Partition}:iotanalytics:${Region}:${Account}:pipeline/${PipelineName}	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}

Condition keys for Amazon IoT Analytics

Amazon IoT Analytics defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys	Description	Type
aws:RequestTag/${TagKey}	Filters access based on the tags that are passed in the request	String
aws:TagKeys	Filters access based on the presence of tag keys in the request	ArrayOfString
iotanalytics:ResourceTag/${TagKey}	Filters access by the tag key-value pairs attached to the resource	String

Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Amazon IoT (iot)

Amazon IoT Events (iotevents)