View a markdown version of this page

Actions, resources, and condition keys for Amazon Connect Outbound Campaigns - Service Authorization Reference

Actions, resources, and condition keys for Amazon Connect Outbound Campaigns

Amazon Connect Outbound Campaigns (service prefix: connect-campaigns) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

API operations defined by Amazon Connect Outbound Campaigns

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation SDK client IAM action Condition key Possible value(s) Access level

CreateCampaign

connectcampaigns

connect-campaigns:CreateCampaign

Write

connect-campaigns:TagResource

Tagging, Write

DeleteCampaign

connectcampaigns

connect-campaigns:DeleteCampaign

Write

DeleteConnectInstanceConfig

connectcampaigns

connect-campaigns:DeleteConnectInstanceConfig

Write

DeleteInstanceOnboardingJob

connectcampaigns

connect-campaigns:DeleteInstanceOnboardingJob

Write

DescribeCampaign

connectcampaigns

connect-campaigns:DescribeCampaign

Read

GetCampaignState

connectcampaigns

connect-campaigns:GetCampaignState

Read

GetCampaignStateBatch

connectcampaigns

connect-campaigns:GetCampaignStateBatch

Read

GetConnectInstanceConfig

connectcampaigns

connect-campaigns:GetConnectInstanceConfig

Read

GetInstanceOnboardingJobStatus

connectcampaigns

connect-campaigns:GetInstanceOnboardingJobStatus

Read

ListCampaigns

connectcampaigns

connect-campaigns:ListCampaigns

List

ListTagsForResource

connectcampaigns

connect-campaigns:ListTagsForResource

Read

PauseCampaign

connectcampaigns

connect-campaigns:PauseCampaign

Write

PutDialRequestBatch

connectcampaigns

connect-campaigns:PutDialRequestBatch

Write

ResumeCampaign

connectcampaigns

connect-campaigns:ResumeCampaign

Write

StartCampaign

connectcampaigns

connect-campaigns:StartCampaign

Write

StartInstanceOnboardingJob

connectcampaigns

connect-campaigns:StartInstanceOnboardingJob

Write

StopCampaign

connectcampaigns

connect-campaigns:StopCampaign

Write

TagResource

connectcampaigns

connect-campaigns:TagResource

Tagging, Write

UntagResource

connectcampaigns

connect-campaigns:UntagResource

Tagging, Write

UpdateCampaignDialerConfig

connectcampaigns

connect-campaigns:UpdateCampaignDialerConfig

Write

UpdateCampaignName

connectcampaigns

connect-campaigns:UpdateCampaignName

Write

UpdateCampaignOutboundCallConfig

connectcampaigns

connect-campaigns:UpdateCampaignOutboundCallConfig

Write

CreateCampaign

connectcampaignsv2

connect-campaigns:CreateCampaign

Write

connect-campaigns:TagResource

Tagging, Write

DeleteCampaign

connectcampaignsv2

connect-campaigns:DeleteCampaign

Write

DeleteCampaignChannelSubtypeConfig

connectcampaignsv2

connect-campaigns:DeleteCampaignChannelSubtypeConfig

Write

DeleteCampaignCommunicationLimits

connectcampaignsv2

connect-campaigns:DeleteCampaignCommunicationLimits

Write

DeleteCampaignCommunicationTime

connectcampaignsv2

connect-campaigns:DeleteCampaignCommunicationTime

Write

DeleteCampaignEntryLimits

connectcampaignsv2

connect-campaigns:DeleteCampaignEntryLimits

Write

DeleteConnectInstanceConfig

connectcampaignsv2

connect-campaigns:DeleteConnectInstanceConfig

Write

DeleteConnectInstanceIntegration

connectcampaignsv2

connect-campaigns:DeleteConnectInstanceIntegration

Write

DeleteInstanceOnboardingJob

connectcampaignsv2

connect-campaigns:DeleteInstanceOnboardingJob

Write

DescribeCampaign

connectcampaignsv2

connect-campaigns:DescribeCampaign

Read

GetCampaignState

connectcampaignsv2

connect-campaigns:GetCampaignState

Read

GetCampaignStateBatch

connectcampaignsv2

connect-campaigns:GetCampaignStateBatch

Read

GetConnectInstanceConfig

connectcampaignsv2

connect-campaigns:GetConnectInstanceConfig

Read

GetInstanceCommunicationLimits

connectcampaignsv2

connect-campaigns:GetInstanceCommunicationLimits

Read

GetInstanceOnboardingJobStatus

connectcampaignsv2

connect-campaigns:GetInstanceOnboardingJobStatus

Read

ListCampaigns

connectcampaignsv2

connect-campaigns:ListCampaigns

List

ListConnectInstanceIntegrations

connectcampaignsv2

connect-campaigns:ListConnectInstanceIntegrations

List

ListTagsForResource

connectcampaignsv2

connect-campaigns:ListTagsForResource

Read

PauseCampaign

connectcampaignsv2

connect-campaigns:PauseCampaign

Write

PutConnectInstanceIntegration

connectcampaignsv2

connect-campaigns:PutConnectInstanceIntegration

Write

PutInstanceCommunicationLimits

connectcampaignsv2

connect-campaigns:PutInstanceCommunicationLimits

Write

PutOutboundRequestBatch

connectcampaignsv2

connect-campaigns:PutOutboundRequestBatch

Write

PutProfileOutboundRequestBatch

connectcampaignsv2

connect-campaigns:PutProfileOutboundRequestBatch

Write

ResumeCampaign

connectcampaignsv2

connect-campaigns:ResumeCampaign

Write

StartCampaign

connectcampaignsv2

connect-campaigns:StartCampaign

Write

StartInstanceOnboardingJob

connectcampaignsv2

connect-campaigns:StartInstanceOnboardingJob

Write

StopCampaign

connectcampaignsv2

connect-campaigns:StopCampaign

Write

TagResource

connectcampaignsv2

connect-campaigns:TagResource

Tagging, Write

UntagResource

connectcampaignsv2

connect-campaigns:UntagResource

Tagging, Write

UpdateCampaignChannelSubtypeConfig

connectcampaignsv2

connect-campaigns:UpdateCampaignChannelSubtypeConfig

Write

UpdateCampaignCommunicationLimits

connectcampaignsv2

connect-campaigns:UpdateCampaignCommunicationLimits

Write

UpdateCampaignCommunicationTime

connectcampaignsv2

connect-campaigns:UpdateCampaignCommunicationTime

Write

UpdateCampaignEntryLimits

connectcampaignsv2

connect-campaigns:UpdateCampaignEntryLimits

Write

UpdateCampaignFlowAssociation

connectcampaignsv2

connect-campaigns:UpdateCampaignFlowAssociation

Write

UpdateCampaignName

connectcampaignsv2

connect-campaigns:UpdateCampaignName

Write

UpdateCampaignSchedule

connectcampaignsv2

connect-campaigns:UpdateCampaignSchedule

Write

UpdateCampaignSource

connectcampaignsv2

connect-campaigns:UpdateCampaignSource

Write

Actions defined by Amazon Connect Outbound Campaigns

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions Description Resource types (*required) Condition keys Access level

CreateCampaign

Grants permission to create a campaign

campaign*

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Write

DeleteCampaign

Grants permission to delete a campaign

campaign*

aws:ResourceTag/${TagKey}

Write

DeleteCampaignChannelSubtypeConfig

Grants permission to delete the channel subtype configuration of a campaign

campaign*

aws:ResourceTag/${TagKey}

Write

DeleteCampaignCommunicationLimits

Grants permission to delete the communication limits configuration of a campaign

campaign*

aws:ResourceTag/${TagKey}

Write

DeleteCampaignCommunicationTime

Grants permission to delete the communication time configuration of a campaign

campaign*

aws:ResourceTag/${TagKey}

Write

DeleteCampaignEntryLimits

Grants permission to delete the entry limits configuration of a campaign

campaign*

aws:ResourceTag/${TagKey}

Write

DeleteConnectInstanceConfig

Grants permission to remove configuration information for an Amazon Connect instance

Write

DeleteConnectInstanceIntegration

Grants permission to remove integration information for an Amazon Connect instance

Write

DeleteInstanceOnboardingJob

Grants permission to remove onboarding job for an Amazon Connect instance

Write

DescribeCampaign

Grants permission to describe a specific campaign

campaign*

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

Read

GetCampaignState

Grants permission to get state of a campaign

campaign*

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

Read

GetCampaignStateBatch

Grants permission to get state of campaigns

campaign*

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

Read

GetConnectInstanceConfig

Grants permission to get configuration information for an Amazon Connect instance

Read

GetInstanceCommunicationLimits

Grants permission to get the communication limits configuration of an Amazon Connect instance

Read

GetInstanceOnboardingJobStatus

Grants permission to get onboarding job status for an Amazon Connect instance

Read

ListCampaigns

Grants permission to provide summary of all campaigns

aws:RequestTag/${TagKey}

List

ListConnectInstanceIntegrations

Grants permission to provide summary of all integrations with an Amazon Connect instance

List

ListTagsForResource

Grants permission to list tags for a resource

campaign

aws:ResourceTag/${TagKey}

Read

PauseCampaign

Grants permission to pause a campaign

campaign*

aws:ResourceTag/${TagKey}

Write

PutConnectInstanceIntegration

Grants permission to put an integration configuration with an Amazon Connect instance

Write

PutDialRequestBatch

Grants permission to create dial requests for the specified campaign

campaign*

aws:ResourceTag/${TagKey}

Write

PutInstanceCommunicationLimits

Grants permission to put the communication limits configuration of an Amazon Connect instance

Write

PutOutboundRequestBatch

Grants permission to create dial requests for the specified campaign

campaign*

aws:ResourceTag/${TagKey}

Write

PutProfileOutboundRequestBatch

Grants permission to create profile outbound requests for the specified campaign

campaign*

aws:ResourceTag/${TagKey}

Write

ResumeCampaign

Grants permission to resume a campaign

campaign*

aws:ResourceTag/${TagKey}

Write

StartCampaign

Grants permission to start a campaign

campaign*

aws:ResourceTag/${TagKey}

Write

StartInstanceOnboardingJob

Grants permission to start onboarding job for an Amazon Connect instance

Write

StopCampaign

Grants permission to stop a campaign

campaign*

aws:ResourceTag/${TagKey}

Write

TagResource

Grants permission to tag a resource

campaign*

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Tagging, Write

UntagResource

Grants permission to untag a resource

campaign*

aws:ResourceTag/${TagKey}

aws:TagKeys

Tagging, Write

UpdateCampaignChannelSubtypeConfig

Grants permission to update the channel subtype configuration of a campaign

campaign*

aws:ResourceTag/${TagKey}

Write

UpdateCampaignCommunicationLimits

Grants permission to update the communication limits configuration of a campaign

campaign*

aws:ResourceTag/${TagKey}

Write

UpdateCampaignCommunicationTime

Grants permission to update the communication time configuration of a campaign

campaign*

aws:ResourceTag/${TagKey}

Write

UpdateCampaignDialerConfig

Grants permission to update the dialer configuration of a campaign

campaign*

aws:ResourceTag/${TagKey}

Write

UpdateCampaignEntryLimits

Grants permission to update the entry limits configuration of a campaign

campaign*

aws:ResourceTag/${TagKey}

Write

UpdateCampaignFlowAssociation

Grants permission to update the flow association of a campaign

campaign*

aws:ResourceTag/${TagKey}

Write

UpdateCampaignName

Grants permission to update the name of a campaign

campaign*

aws:ResourceTag/${TagKey}

Write

UpdateCampaignOutboundCallConfig

Grants permission to update the outbound call configuration of a campaign

campaign*

aws:ResourceTag/${TagKey}

Write

UpdateCampaignSchedule

Grants permission to update the schedule of a campaign

campaign*

aws:ResourceTag/${TagKey}

Write

UpdateCampaignSource

Grants permission to update the source of a campaign

campaign*

aws:ResourceTag/${TagKey}

Write

Resource types defined by Amazon Connect Outbound Campaigns

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types ARN Condition keys

campaign

arn:${Partition}:connect-campaigns:${Region}:${Account}:campaign/${CampaignId}

aws:ResourceTag/${TagKey}

Condition keys for Amazon Connect Outbound Campaigns

Amazon Connect Outbound Campaigns defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys Description Type

aws:RequestTag/${TagKey}

Filters access by actions based on the presence of tag key-value pairs in the request

String

aws:ResourceTag/${TagKey}

Filters access by actions based on tag key-value pairs attached to the resource

String

aws:TagKeys

Filters access by actions based on the presence of tag keys in the request

ArrayOfString