Operations Actions Resource types Condition keys

Actions, resources, and condition keys for Amazon Transcribe

Amazon Transcribe (service prefix: transcribe) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by Amazon Transcribe
Actions defined by Amazon Transcribe
Resource types defined by Amazon Transcribe
Condition keys for Amazon Transcribe

API operations defined by Amazon Transcribe

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Condition key	Possible value(s)	Access level
CreateCallAnalyticsCategory	transcribe:CreateCallAnalyticsCategory			Write
CreateCallAnalyticsCategory	transcribe:TagResource			Tagging, Write
CreateLanguageModel	transcribe:CreateLanguageModel			Write
	transcribe:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	transcribe.amazonaws.com	Write
CreateMedicalVocabulary	transcribe:CreateMedicalVocabulary			Write
CreateMedicalVocabulary	transcribe:TagResource			Tagging, Write
CreateVocabulary	transcribe:CreateVocabulary			Write
	transcribe:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	transcribe.amazonaws.com	Write
CreateVocabularyFilter	transcribe:CreateVocabularyFilter			Write
	transcribe:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	transcribe.amazonaws.com	Write
DeleteCallAnalyticsCategory	transcribe:DeleteCallAnalyticsCategory			Write
DeleteCallAnalyticsJob	transcribe:DeleteCallAnalyticsJob			Write
DeleteLanguageModel	transcribe:DeleteLanguageModel			Write
DeleteMedicalScribeJob	transcribe:DeleteMedicalScribeJob			Write
DeleteMedicalTranscriptionJob	transcribe:DeleteMedicalTranscriptionJob			Write
DeleteMedicalVocabulary	transcribe:DeleteMedicalVocabulary			Write
DeleteTranscriptionJob	transcribe:DeleteTranscriptionJob			Write
DeleteVocabulary	transcribe:DeleteVocabulary			Write
DeleteVocabularyFilter	transcribe:DeleteVocabularyFilter			Write
DescribeLanguageModel	transcribe:DescribeLanguageModel			Read
GetCallAnalyticsCategory	transcribe:GetCallAnalyticsCategory			Read
GetCallAnalyticsJob	transcribe:GetCallAnalyticsJob			Read
GetMedicalScribeJob	transcribe:GetMedicalScribeJob			Read
GetMedicalTranscriptionJob	transcribe:GetMedicalTranscriptionJob			Read
GetMedicalVocabulary	transcribe:GetMedicalVocabulary			Read
GetTranscriptionJob	transcribe:GetTranscriptionJob			Read
GetVocabulary	transcribe:GetVocabulary			Read
GetVocabularyFilter	transcribe:GetVocabularyFilter			Read
ListCallAnalyticsCategories	transcribe:ListCallAnalyticsCategories			List
ListCallAnalyticsJobs	transcribe:ListCallAnalyticsJobs			List
ListLanguageModels	transcribe:ListLanguageModels			List
ListMedicalScribeJobs	transcribe:ListMedicalScribeJobs			List
ListMedicalTranscriptionJobs	transcribe:ListMedicalTranscriptionJobs			List
ListMedicalVocabularies	transcribe:ListMedicalVocabularies			List
ListTagsForResource	transcribe:ListTagsForResource			Read
ListTranscriptionJobs	transcribe:ListTranscriptionJobs			List
ListVocabularies	transcribe:ListVocabularies			List
ListVocabularyFilters	transcribe:ListVocabularyFilters			List
StartCallAnalyticsJob	transcribe:StartCallAnalyticsJob			Write
	transcribe:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	transcribe.amazonaws.com	Write
StartMedicalScribeJob	transcribe:StartMedicalScribeJob			Write
	transcribe:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	transcribe.amazonaws.com	Write
StartMedicalTranscriptionJob	transcribe:StartMedicalTranscriptionJob			Write
StartMedicalTranscriptionJob	transcribe:TagResource			Tagging, Write
StartTranscriptionJob	transcribe:StartTranscriptionJob			Write
	transcribe:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	transcribe.amazonaws.com	Write
TagResource	transcribe:TagResource			Tagging, Write
UntagResource	transcribe:UntagResource			Tagging, Write
UpdateCallAnalyticsCategory	transcribe:UpdateCallAnalyticsCategory			Write
UpdateMedicalVocabulary	transcribe:UpdateMedicalVocabulary			Write
UpdateVocabulary	transcribe:UpdateVocabulary			Write
UpdateVocabulary	iam:PassRole	iam:PassedToService	transcribe.amazonaws.com	Write
UpdateVocabularyFilter	transcribe:UpdateVocabularyFilter			Write
UpdateVocabularyFilter	iam:PassRole	iam:PassedToService	transcribe.amazonaws.com	Write

Actions defined by Amazon Transcribe

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in Amazon. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
CreateCallAnalyticsCategory	Grants permission to create an analytics category. Amazon Transcribe applies the conditions specified by your analytics categories to your call analytics jobs		aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateLanguageModel	Grants permission to create a new custom language model		aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateMedicalVocabulary	Grants permission to create a new custom vocabulary that you can use to change the way Amazon Transcribe Medical handles transcription of an audio file		aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateVocabulary	Grants permission to create a new custom vocabulary that you can use to change the way Amazon Transcribe handles transcription of an audio file		aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateVocabularyFilter	Grants permission to create a new vocabulary filter that you can use to filter out words from the transcription of an audio file generated by Amazon Transcribe		aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
DeleteCallAnalyticsCategory	Grants permission to delete a call analytics category using its name from Amazon Transcribe	callanalyticscategory*	aws:ResourceTag/${TagKey}	Write
DeleteCallAnalyticsJob	Grants permission to delete a previously submitted call analytics job along with any other generated results such as the transcription, models, and so on	callanalyticsjob*	aws:ResourceTag/${TagKey}	Write
DeleteLanguageModel	Grants permission to delete a previously created custom language model	languagemodel*	aws:ResourceTag/${TagKey}	Write
DeleteMedicalScribeJob	Grants permission to delete a previously submitted Medical Scribe job	medicalscribejob*	aws:ResourceTag/${TagKey}	Write
DeleteMedicalTranscriptionJob	Grants permission to delete a previously submitted medical transcription job	medicaltranscriptionjob*	aws:ResourceTag/${TagKey}	Write
DeleteMedicalVocabulary	Grants permission to delete a medical vocabulary from Amazon Transcribe	medicalvocabulary*	aws:ResourceTag/${TagKey}	Write
DeleteTranscriptionJob	Grants permission to delete a previously submitted transcription job along with any other generated results such as the transcription, models, and so on	transcriptionjob*	aws:ResourceTag/${TagKey}	Write
DeleteVocabulary	Grants permission to delete a vocabulary from Amazon Transcribe	vocabulary*	aws:ResourceTag/${TagKey}	Write
DeleteVocabularyFilter	Grants permission to delete a vocabulary filter from Amazon Transcribe	vocabularyfilter*	aws:ResourceTag/${TagKey}	Write
DescribeLanguageModel	Grants permission to return information about a custom language model	languagemodel*	aws:ResourceTag/${TagKey}	Read
GetCallAnalyticsCategory	Grants permission to retrieve information about a call analytics category	callanalyticscategory*	aws:ResourceTag/${TagKey}	Read
GetCallAnalyticsJob	Grants permission to return information about a call analytics job	callanalyticsjob*	aws:ResourceTag/${TagKey}	Read
GetMedicalScribeJob	Grants permission to return information about a Medical Scribe job	medicalscribejob*	aws:ResourceTag/${TagKey}	Read
GetMedicalScribeStream	Grants permission to get information about the specified Amazon HealthScribe streaming session			Read
GetMedicalTranscriptionJob	Grants permission to return information about a medical transcription job	medicaltranscriptionjob*	aws:ResourceTag/${TagKey}	Read
GetMedicalVocabulary	Grants permission to get information about a medical vocabulary	medicalvocabulary*	aws:ResourceTag/${TagKey}	Read
GetTranscriptionJob	Grants permission to return information about a transcription job	transcriptionjob*	aws:ResourceTag/${TagKey}	Read
GetVocabulary	Grants permission to to get information about a vocabulary	vocabulary*	aws:ResourceTag/${TagKey}	Read
GetVocabularyFilter	Grants permission to get information about a vocabulary filter	vocabularyfilter*	aws:ResourceTag/${TagKey}	Read
ListCallAnalyticsCategories	Grants permission to list call analytics categories that has been created			List
ListCallAnalyticsJobs	Grants permission to list call analytics jobs with the specified status			List
ListLanguageModels	Grants permission to list custom language models			List
ListMedicalScribeJobs	Grants permission to list Medical Scribe jobs with the specified status			List
ListMedicalTranscriptionJobs	Grants permission to list medical transcription jobs with the specified status			List
ListMedicalVocabularies	Grants permission to return a list of medical vocabularies that match the specified criteria. If no criteria are specified, returns the entire list of vocabularies			List
ListTagsForResource	Grants permission to list tags for a resource			Read
ListTranscriptionJobs	Grants permission to list transcription jobs with the specified status			List
ListVocabularies	Grants permission to return a list of vocabularies that match the specified criteria. If no criteria are specified, returns the entire list of vocabularies			List
ListVocabularyFilters	Grants permission to return a list of vocabulary filters that match the specified criteria. If no criteria are specified, returns the at most 5 vocabulary filters			List
StartCallAnalyticsJob	Grants permission to start an asynchronous analytics job that not only transcribes the audio recording of a caller and agent, but also returns additional insights		aws:RequestTag/${TagKey} aws:TagKeys transcribe:OutputEncryptionKMSKeyId transcribe:OutputLocation	Write
StartCallAnalyticsStreamTranscription	Grants permission to start a protocol where audio is streamed to Transcribe Call Analytics and the transcription results are streamed to your application			Write
StartCallAnalyticsStreamTranscriptionWebSocket	Grants permission to start a WebSocket where audio is streamed to Transcribe Call Analytics and the transcription results are streamed to your application			Write
StartMedicalScribeJob	Grants permission to start an asynchronous job to transcribe patient-clinician conversations and generates clinical notes		aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys transcribe:OutputBucketName transcribe:OutputEncryptionKMSKeyId	Write
StartMedicalScribeStream	Grants permission to start a bidirectional HTTP2 stream where audio is streamed to Amazon HealthScribe and the transcription results are streamed to your application			Write
StartMedicalStreamTranscription	Grants permission to start a protocol where audio is streamed to Transcribe Medical and the transcription results are streamed to your application			Write
StartMedicalStreamTranscriptionWebSocket	Grants permission to start a WebSocket where audio is streamed to Transcribe Medical and the transcription results are streamed to your application			Write
StartMedicalTranscriptionJob	Grants permission to start an asynchronous job to transcribe medical speech to text		aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys transcribe:OutputBucketName transcribe:OutputEncryptionKMSKeyId transcribe:OutputKey	Write
StartStreamTranscription	Grants permission to start a bidirectional HTTP2 stream to transcribe speech to text in real time			Write
StartStreamTranscriptionWebSocket	Grants permission to start a websocket stream to transcribe speech to text in real time			Write
StartTranscriptionJob	Grants permission to start an asynchronous job to transcribe speech to text		aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys transcribe:OutputBucketName transcribe:OutputEncryptionKMSKeyId transcribe:OutputKey	Write
TagResource	Grants permission to tag a resource with given key value pairs		aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys transcribe:OutputBucketName transcribe:OutputEncryptionKMSKeyId transcribe:OutputKey	Tagging, Write
UntagResource	Grants permission to untag a resource with given key		aws:TagKeys	Tagging, Write
UpdateCallAnalyticsCategory	Grants permission to update the call analytics category with new values. The UpdateCallAnalyticsCategory operation overwrites all of the existing information with the values that you provide in the request	callanalyticscategory*	aws:ResourceTag/${TagKey}	Write
UpdateMedicalVocabulary	Grants permission to update an existing medical vocabulary with new values. The UpdateMedicalVocabulary operation overwrites all of the existing information with the values that you provide in the request	medicalvocabulary*	aws:ResourceTag/${TagKey}	Write
UpdateVocabulary	Grants permission to update an existing vocabulary with new values. The UpdateVocabulary operation overwrites all of the existing information with the values that you provide in the request	vocabulary*	aws:ResourceTag/${TagKey}	Write
UpdateVocabularyFilter	Grants permission to update an existing vocabulary filter with new values. The UpdateVocabularyFilter operation overwrites all of the existing information with the values that you provide in the request	vocabularyfilter*	aws:ResourceTag/${TagKey}	Write

Resource types defined by Amazon Transcribe

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
callanalyticscategory	arn:${Partition}:transcribe:${Region}:${Account}:analytics-category/${CategoryName}	aws:ResourceTag/${TagKey}
callanalyticsjob	arn:${Partition}:transcribe:${Region}:${Account}:analytics/${JobName}	aws:ResourceTag/${TagKey}
languagemodel	arn:${Partition}:transcribe:${Region}:${Account}:language-model/${ModelName}	aws:ResourceTag/${TagKey}
medicalscribejob	arn:${Partition}:transcribe:${Region}:${Account}:medical-scribe-job/${JobName}	aws:ResourceTag/${TagKey}
medicaltranscriptionjob	arn:${Partition}:transcribe:${Region}:${Account}:medical-transcription-job/${JobName}	aws:ResourceTag/${TagKey}
medicalvocabulary	arn:${Partition}:transcribe:${Region}:${Account}:medical-vocabulary/${VocabularyName}	aws:ResourceTag/${TagKey}
transcriptionjob	arn:${Partition}:transcribe:${Region}:${Account}:transcription-job/${JobName}	aws:ResourceTag/${TagKey}
vocabulary	arn:${Partition}:transcribe:${Region}:${Account}:vocabulary/${VocabularyName}	aws:ResourceTag/${TagKey}
vocabularyfilter	arn:${Partition}:transcribe:${Region}:${Account}:vocabulary-filter/${VocabularyFilterName}	aws:ResourceTag/${TagKey}

Condition keys for Amazon Transcribe

Amazon Transcribe defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys	Description	Type
aws:RequestTag/${TagKey}	Filters access by requiring tag values present in a resource creation request	String
aws:ResourceTag/${TagKey}	Filters access by requiring tag value associated with the resource	String
aws:TagKeys	Filters access by requiring the presence of mandatory tags in the request	ArrayOfString
transcribe:OutputBucketName	Filters access based on the output bucket name included in the request	String
transcribe:OutputEncryptionKMSKeyId	Filters access based on the KMS key id included in the request, provided in the form of a KMS key ARN	String
transcribe:OutputKey	Filters access based on the output key included in the request	String
transcribe:OutputLocation	Filters access based on the output location included in the request	String

Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Amazon Timestream InfluxDB (timestream-influxdb)

Amazon Verified Permissions (verifiedpermissions)