Operations Actions Resource types Condition keys

Actions, resources, and condition keys for AWS IoT Wireless

AWS IoT Wireless (service prefix: iotwireless) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by AWS IoT Wireless
Actions defined by AWS IoT Wireless
Resource types defined by AWS IoT Wireless
Condition keys for AWS IoT Wireless

API operations defined by AWS IoT Wireless

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Condition key	Possible value(s)	Access level
AssociateAwsAccountWithPartnerAccount	iotwireless:AssociateAwsAccountWithPartnerAccount			Write
AssociateAwsAccountWithPartnerAccount	iotwireless:TagResource			Tagging, Write
AssociateMulticastGroupWithFuotaTask	iotwireless:AssociateMulticastGroupWithFuotaTask			Write
AssociateWirelessDeviceWithFuotaTask	iotwireless:AssociateWirelessDeviceWithFuotaTask			Write
AssociateWirelessDeviceWithMulticastGroup	iotwireless:AssociateWirelessDeviceWithMulticastGroup			Write
AssociateWirelessDeviceWithThing	iotwireless:AssociateWirelessDeviceWithThing			Write
AssociateWirelessGatewayWithCertificate	iotwireless:AssociateWirelessGatewayWithCertificate			Write
AssociateWirelessGatewayWithThing	iotwireless:AssociateWirelessGatewayWithThing			Write
CancelMulticastGroupSession	iotwireless:CancelMulticastGroupSession			Write
CreateDestination	iotwireless:CreateDestination			Write
	iotwireless:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	iotwireless.amazonaws.com	Write
CreateDeviceProfile	iotwireless:CreateDeviceProfile			Write
CreateDeviceProfile	iotwireless:TagResource			Tagging, Write
CreateFuotaTask	iotwireless:CreateFuotaTask			Write
	iotwireless:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	iotwireless.amazonaws.com	Write
CreateMulticastGroup	iotwireless:CreateMulticastGroup			Write
CreateMulticastGroup	iotwireless:TagResource			Tagging, Write
CreateNetworkAnalyzerConfiguration	iotwireless:CreateNetworkAnalyzerConfiguration			Write
CreateNetworkAnalyzerConfiguration	iotwireless:TagResource			Tagging, Write
CreateServiceProfile	iotwireless:CreateServiceProfile			Write
CreateServiceProfile	iotwireless:TagResource			Tagging, Write
CreateWirelessDevice	iotwireless:CreateWirelessDevice			Write
CreateWirelessDevice	iotwireless:TagResource			Tagging, Write
CreateWirelessGateway	iotwireless:CreateWirelessGateway			Write
CreateWirelessGateway	iotwireless:TagResource			Tagging, Write
CreateWirelessGatewayTask	iotwireless:CreateWirelessGatewayTask			Write
CreateWirelessGatewayTaskDefinition	iotwireless:CreateWirelessGatewayTaskDefinition			Write
	iotwireless:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	iotwireless.amazonaws.com	Write
DeleteDestination	iotwireless:DeleteDestination			Write
DeleteDeviceProfile	iotwireless:DeleteDeviceProfile			Write
DeleteFuotaTask	iotwireless:DeleteFuotaTask			Write
DeleteMulticastGroup	iotwireless:DeleteMulticastGroup			Write
DeleteNetworkAnalyzerConfiguration	iotwireless:DeleteNetworkAnalyzerConfiguration			Write
DeleteQueuedMessages	iotwireless:DeleteQueuedMessages			Write
DeleteServiceProfile	iotwireless:DeleteServiceProfile			Write
DeleteWirelessDevice	iotwireless:DeleteWirelessDevice			Write
DeleteWirelessDeviceImportTask	iotwireless:DeleteWirelessDeviceImportTask			Write
DeleteWirelessGateway	iotwireless:DeleteWirelessGateway			Write
DeleteWirelessGatewayTask	iotwireless:DeleteWirelessGatewayTask			Write
DeleteWirelessGatewayTaskDefinition	iotwireless:DeleteWirelessGatewayTaskDefinition			Write
DeregisterWirelessDevice	iotwireless:DeregisterWirelessDevice			Write
DisassociateAwsAccountFromPartnerAccount	iotwireless:DisassociateAwsAccountFromPartnerAccount			Write
DisassociateMulticastGroupFromFuotaTask	iotwireless:DisassociateMulticastGroupFromFuotaTask			Write
DisassociateWirelessDeviceFromFuotaTask	iotwireless:DisassociateWirelessDeviceFromFuotaTask			Write
DisassociateWirelessDeviceFromMulticastGroup	iotwireless:DisassociateWirelessDeviceFromMulticastGroup			Write
DisassociateWirelessDeviceFromThing	iotwireless:DisassociateWirelessDeviceFromThing			Write
DisassociateWirelessGatewayFromCertificate	iotwireless:DisassociateWirelessGatewayFromCertificate			Write
DisassociateWirelessGatewayFromThing	iotwireless:DisassociateWirelessGatewayFromThing			Write
GetDestination	iotwireless:GetDestination			Read
GetDeviceProfile	iotwireless:GetDeviceProfile			Read
GetEventConfigurationByResourceTypes	iotwireless:GetEventConfigurationByResourceTypes			Read
GetFuotaTask	iotwireless:GetFuotaTask			Read
GetLogLevelsByResourceTypes	iotwireless:GetLogLevelsByResourceTypes			Read
GetMetricConfiguration	iotwireless:GetMetricConfiguration			Read
GetMetrics	iotwireless:GetMetrics			Read
GetMulticastGroup	iotwireless:GetMulticastGroup			Read
GetMulticastGroupSession	iotwireless:GetMulticastGroupSession			Read
GetNetworkAnalyzerConfiguration	iotwireless:GetNetworkAnalyzerConfiguration			Read
GetPartnerAccount	iotwireless:GetPartnerAccount			Read
GetPosition	iotwireless:GetPosition			Read
GetPositionConfiguration	iotwireless:GetPositionConfiguration			Read
GetPositionEstimate	iotwireless:GetPositionEstimate			Read
GetResourceEventConfiguration	iotwireless:GetResourceEventConfiguration			Read
GetResourceLogLevel	iotwireless:GetResourceLogLevel			Read
GetResourcePosition	iotwireless:GetResourcePosition			Read
GetServiceEndpoint	iotwireless:GetServiceEndpoint			Read
GetServiceProfile	iotwireless:GetServiceProfile			Read
GetWirelessDevice	iotwireless:GetWirelessDevice			Read
GetWirelessDeviceImportTask	iotwireless:GetWirelessDeviceImportTask			Read
GetWirelessDeviceStatistics	iotwireless:GetWirelessDeviceStatistics			Read
GetWirelessGateway	iotwireless:GetWirelessGateway			Read
GetWirelessGatewayCertificate	iotwireless:GetWirelessGatewayCertificate			Read
GetWirelessGatewayFirmwareInformation	iotwireless:GetWirelessGatewayFirmwareInformation			Read
GetWirelessGatewayStatistics	iotwireless:GetWirelessGatewayStatistics			Read
GetWirelessGatewayTask	iotwireless:GetWirelessGatewayTask			Read
GetWirelessGatewayTaskDefinition	iotwireless:GetWirelessGatewayTaskDefinition			Read
ListDestinations	iotwireless:ListDestinations			Read
ListDeviceProfiles	iotwireless:ListDeviceProfiles			Read
ListDevicesForWirelessDeviceImportTask	iotwireless:ListDevicesForWirelessDeviceImportTask			Read
ListEventConfigurations	iotwireless:ListEventConfigurations			Read
ListFuotaTasks	iotwireless:ListFuotaTasks			Read
ListMulticastGroups	iotwireless:ListMulticastGroups			Read
ListMulticastGroupsByFuotaTask	iotwireless:ListMulticastGroupsByFuotaTask			Read
ListNetworkAnalyzerConfigurations	iotwireless:ListNetworkAnalyzerConfigurations			Read
ListPartnerAccounts	iotwireless:ListPartnerAccounts			Read
ListPositionConfigurations	iotwireless:ListPositionConfigurations			Read
ListQueuedMessages	iotwireless:ListQueuedMessages			Read
ListServiceProfiles	iotwireless:ListServiceProfiles			Read
ListTagsForResource	iotwireless:ListTagsForResource			Read
ListWirelessDeviceImportTasks	iotwireless:ListWirelessDeviceImportTasks			Read
ListWirelessDevices	iotwireless:ListWirelessDevices			Read
ListWirelessGatewayTaskDefinitions	iotwireless:ListWirelessGatewayTaskDefinitions			Read
ListWirelessGateways	iotwireless:ListWirelessGateways			Read
PutPositionConfiguration	iotwireless:PutPositionConfiguration			Write
PutResourceLogLevel	iotwireless:PutResourceLogLevel			Write
ResetAllResourceLogLevels	iotwireless:ResetAllResourceLogLevels			Write
ResetResourceLogLevel	iotwireless:ResetResourceLogLevel			Write
SendDataToMulticastGroup	iotwireless:SendDataToMulticastGroup			Write
SendDataToWirelessDevice	iotwireless:SendDataToWirelessDevice			Write
StartBulkAssociateWirelessDeviceWithMulticastGroup	iotwireless:StartBulkAssociateWirelessDeviceWithMulticastGroup			Write
StartBulkDisassociateWirelessDeviceFromMulticastGroup	iotwireless:StartBulkDisassociateWirelessDeviceFromMulticastGroup			Write
StartFuotaTask	iotwireless:StartFuotaTask			Write
StartMulticastGroupSession	iotwireless:StartMulticastGroupSession			Write
StartSingleWirelessDeviceImportTask	iotwireless:StartSingleWirelessDeviceImportTask			Write
StartSingleWirelessDeviceImportTask	iotwireless:TagResource			Tagging, Write
StartWirelessDeviceImportTask	iotwireless:StartWirelessDeviceImportTask			Write
	iotwireless:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	iotwireless.amazonaws.com	Write
TagResource	iotwireless:TagResource			Tagging, Write
TestWirelessDevice	iotwireless:TestWirelessDevice			Write
UntagResource	iotwireless:UntagResource			Tagging, Write
UpdateDestination	iotwireless:UpdateDestination			Write
UpdateDestination	iam:PassRole	iam:PassedToService	iotwireless.amazonaws.com	Write
UpdateEventConfigurationByResourceTypes	iotwireless:UpdateEventConfigurationByResourceTypes			Write
UpdateFuotaTask	iotwireless:UpdateFuotaTask			Write
UpdateFuotaTask	iam:PassRole	iam:PassedToService	iotwireless.amazonaws.com	Write
UpdateLogLevelsByResourceTypes	iotwireless:UpdateLogLevelsByResourceTypes			Write
UpdateMetricConfiguration	iotwireless:UpdateMetricConfiguration			Write
UpdateMulticastGroup	iotwireless:UpdateMulticastGroup			Write
UpdateNetworkAnalyzerConfiguration	iotwireless:UpdateNetworkAnalyzerConfiguration			Write
UpdatePartnerAccount	iotwireless:UpdatePartnerAccount			Write
UpdatePosition	iotwireless:UpdatePosition			Write
UpdateResourceEventConfiguration	iotwireless:UpdateResourceEventConfiguration			Write
UpdateResourcePosition	iotwireless:UpdateResourcePosition			Write
UpdateWirelessDevice	iotwireless:UpdateWirelessDevice			Write
UpdateWirelessDeviceImportTask	iotwireless:UpdateWirelessDeviceImportTask			Write
UpdateWirelessGateway	iotwireless:UpdateWirelessGateway			Write

Actions defined by AWS IoT Wireless

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
AssociateAwsAccountWithPartnerAccount	Grants permission to link partner accounts with AWS account		aws:RequestTag/${TagKey} aws:TagKeys	Write
AssociateMulticastGroupWithFuotaTask	Grants permission to associate the MulticastGroup with FuotaTask	FuotaTask*	aws:ResourceTag/${TagKey}	Write
AssociateMulticastGroupWithFuotaTask		MulticastGroup*	aws:ResourceTag/${TagKey}	Write
AssociateWirelessDeviceWithFuotaTask	Grants permission to associate the wireless device with FuotaTask	FuotaTask*	aws:ResourceTag/${TagKey}	Write
AssociateWirelessDeviceWithFuotaTask		WirelessDevice*	aws:ResourceTag/${TagKey}	Write
AssociateWirelessDeviceWithMulticastGroup	Grants permission to associate the WirelessDevice with MulticastGroup	MulticastGroup*	aws:ResourceTag/${TagKey}	Write
AssociateWirelessDeviceWithMulticastGroup		WirelessDevice*	aws:ResourceTag/${TagKey}	Write
AssociateWirelessDeviceWithThing	Grants permission to associate the wireless device with AWS IoT thing for a given wirelessDeviceId	WirelessDevice*	aws:ResourceTag/${TagKey}	Write
AssociateWirelessDeviceWithThing		thing*		Write
AssociateWirelessGatewayWithCertificate	Grants permission to associate a WirelessGateway with the IoT Core Identity certificate	WirelessGateway*	aws:ResourceTag/${TagKey}	Write
AssociateWirelessGatewayWithCertificate		cert*		Write
AssociateWirelessGatewayWithThing	Grants permission to associate the wireless gateway with AWS IoT thing for a given wirelessGatewayId	WirelessGateway*	aws:ResourceTag/${TagKey}	Write
AssociateWirelessGatewayWithThing		thing*		Write
CancelMulticastGroupSession	Grants permission to cancel the MulticastGroup session	MulticastGroup*	aws:ResourceTag/${TagKey}	Write
CreateDestination	Grants permission to create a Destination resource		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateDeviceProfile	Grants permission to create a DeviceProfile resource		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateFuotaTask	Grants permission to create a FuotaTask resource		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateMulticastGroup	Grants permission to create a MulticastGroup resource		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateNetworkAnalyzerConfiguration	Grants permission to create a NetworkAnalyzerConfiguration resource	MulticastGroup*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
		WirelessDevice*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		WirelessGateway*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
CreateServiceProfile	Grants permission to create a ServiceProfile resource		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateWirelessDevice	Grants permission to create a WirelessDevice resource with given Destination	Destination	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
		DeviceProfile	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		ServiceProfile	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
CreateWirelessGateway	Grants permission to create a WirelessGateway resource		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateWirelessGatewayTask	Grants permission to create a task for a given WirelessGateway	WirelessGateway*	aws:ResourceTag/${TagKey}	Write
CreateWirelessGatewayTaskDefinition	Grants permission to create a WirelessGateway task definition		aws:RequestTag/${TagKey} aws:TagKeys	Write
DeleteDestination	Grants permission to delete a Destination	Destination*	aws:ResourceTag/${TagKey}	Write
DeleteDeviceProfile	Grants permission to delete a DeviceProfile	DeviceProfile*	aws:ResourceTag/${TagKey}	Write
DeleteFuotaTask	Grants permission to delete the FuotaTask	FuotaTask*	aws:ResourceTag/${TagKey}	Write
DeleteMulticastGroup	Grants permission to delete the MulticastGroup	MulticastGroup*	aws:ResourceTag/${TagKey}	Write
DeleteNetworkAnalyzerConfiguration	Grants permission to delete the NetworkAnalyzerConfiguration	NetworkAnalyzerConfiguration*	aws:ResourceTag/${TagKey}	Write
DeleteQueuedMessages	Grants permission to delete QueuedMessages			Write
DeleteServiceProfile	Grants permission to delete a ServiceProfile	ServiceProfile*	aws:ResourceTag/${TagKey}	Write
DeleteWirelessDevice	Grants permission to delete a WirelessDevice	WirelessDevice*	aws:ResourceTag/${TagKey}	Write
DeleteWirelessDeviceImportTask	Grants permission to delete the wireless device import task	ImportTask*	aws:ResourceTag/${TagKey}	Write
DeleteWirelessGateway	Grants permission to delete a WirelessGateway	WirelessGateway*	aws:ResourceTag/${TagKey}	Write
DeleteWirelessGatewayTask	Grants permission to delete task for a given WirelessGateway	WirelessGateway*	aws:ResourceTag/${TagKey}	Write
DeleteWirelessGatewayTaskDefinition	Grants permission to delete a WirelessGateway task definition	WirelessGatewayTaskDefinition*	aws:ResourceTag/${TagKey}	Write
DeregisterWirelessDevice	Grants permission to deregister wireless device	WirelessDevice*	aws:ResourceTag/${TagKey}	Write
DisassociateAwsAccountFromPartnerAccount	Grants permission to disassociate an AWS account from a partner account	SidewalkAccount*	aws:ResourceTag/${TagKey}	Write
DisassociateMulticastGroupFromFuotaTask	Grants permission to disassociate the MulticastGroup from FuotaTask	FuotaTask*	aws:ResourceTag/${TagKey}	Write
DisassociateMulticastGroupFromFuotaTask		MulticastGroup*	aws:ResourceTag/${TagKey}	Write
DisassociateWirelessDeviceFromFuotaTask	Grants permission to disassociate the wireless device from FuotaTask	FuotaTask*	aws:ResourceTag/${TagKey}	Write
DisassociateWirelessDeviceFromFuotaTask		WirelessDevice*	aws:ResourceTag/${TagKey}	Write
DisassociateWirelessDeviceFromMulticastGroup	Grants permission to disassociate the wireless device from MulticastGroup	MulticastGroup*	aws:ResourceTag/${TagKey}	Write
DisassociateWirelessDeviceFromMulticastGroup		WirelessDevice*	aws:ResourceTag/${TagKey}	Write
DisassociateWirelessDeviceFromThing	Grants permission to disassociate a wireless device from a AWS IoT thing	WirelessDevice*	aws:ResourceTag/${TagKey}	Write
DisassociateWirelessDeviceFromThing		thing*		Write
DisassociateWirelessGatewayFromCertificate	Grants permission to disassociate a WirelessGateway from a IoT Core Identity certificate	WirelessGateway*	aws:ResourceTag/${TagKey}	Write
DisassociateWirelessGatewayFromCertificate		cert*		Write
DisassociateWirelessGatewayFromThing	Grants permission to disassociate a WirelessGateway from a IoT Core thing	WirelessGateway*	aws:ResourceTag/${TagKey}	Write
DisassociateWirelessGatewayFromThing		thing*		Write
GetDestination	Grants permission to get the Destination	Destination*	aws:ResourceTag/${TagKey}	Read
GetDeviceProfile	Grants permission to get the DeviceProfile	DeviceProfile*	aws:ResourceTag/${TagKey}	Read
GetEventConfigurationByResourceTypes	Grants permission to get event configuration by resource types			Read
GetFuotaTask	Grants permission to get the FuotaTask	FuotaTask*	aws:ResourceTag/${TagKey}	Read
GetLogLevelsByResourceTypes	Grants permission to get log levels by resource types			Read
GetMetricConfiguration	Grants permission to get metric configuration			Read
GetMetrics	Grants permission to get metrics			Read
GetMulticastGroup	Grants permission to get the MulticastGroup	MulticastGroup*	aws:ResourceTag/${TagKey}	Read
GetMulticastGroupSession	Grants permission to get the MulticastGroup session	MulticastGroup*	aws:ResourceTag/${TagKey}	Read
GetNetworkAnalyzerConfiguration	Grants permission to get the NetworkAnalyzerConfiguration	NetworkAnalyzerConfiguration*	aws:ResourceTag/${TagKey}	Read
GetPartnerAccount	Grants permission to get the associated PartnerAccount	SidewalkAccount*	aws:ResourceTag/${TagKey}	Read
GetPosition	Grants permission to get position for a given resource	WirelessDevice	aws:ResourceTag/${TagKey}	Read
GetPosition	Grants permission to get position for a given resource	WirelessGateway	aws:ResourceTag/${TagKey}	Read
GetPositionConfiguration	Grants permission to get position configuration for a given resource	WirelessDevice	aws:ResourceTag/${TagKey}	Read
GetPositionConfiguration		WirelessGateway	aws:ResourceTag/${TagKey}	Read
GetPositionEstimate	Grants permission to get position estimate			Read
GetResourceEventConfiguration	Grants permission to get an event configuration for an identifier	SidewalkAccount	aws:ResourceTag/${TagKey}	Read
		WirelessDevice	aws:ResourceTag/${TagKey}
		WirelessGateway	aws:ResourceTag/${TagKey}
GetResourceLogLevel	Grants permission to get resource log level	WirelessDevice	aws:ResourceTag/${TagKey}	Read
GetResourceLogLevel	Grants permission to get resource log level	WirelessGateway	aws:ResourceTag/${TagKey}	Read
GetResourcePosition	Grants permission to get position for a given resource	WirelessDevice	aws:ResourceTag/${TagKey}	Read
GetResourcePosition	Grants permission to get position for a given resource	WirelessGateway	aws:ResourceTag/${TagKey}	Read
GetServiceEndpoint	Grants permission to retrieve the customer account specific endpoint for CUPS protocol connection or LoRaWAN Network Server (LNS) protocol connection, and optionally server trust certificate in PEM format			Read
GetServiceProfile	Grants permission to get the ServiceProfile	ServiceProfile*	aws:ResourceTag/${TagKey}	Read
GetWirelessDevice	Grants permission to get the WirelessDevice	WirelessDevice*	aws:ResourceTag/${TagKey}	Read
GetWirelessDeviceImportTask	Grants permission to get the wireless device import task	ImportTask*	aws:ResourceTag/${TagKey}	Read
GetWirelessDeviceStatistics	Grants permission to get statistics info for a given WirelessDevice	WirelessDevice*	aws:ResourceTag/${TagKey}	Read
GetWirelessGateway	Grants permission to get the WirelessGateway	WirelessGateway*	aws:ResourceTag/${TagKey}	Read
GetWirelessGatewayCertificate	Grants permission to get the IoT Core Identity certificate id associated with the WirelessGateway	WirelessGateway*	aws:ResourceTag/${TagKey}	Read
GetWirelessGatewayFirmwareInformation	Grants permission to get Current firmware version and other information for the WirelessGateway	WirelessGateway*	aws:ResourceTag/${TagKey}	Read
GetWirelessGatewayStatistics	Grants permission to get statistics info for a given WirelessGateway	WirelessGateway*	aws:ResourceTag/${TagKey}	Read
GetWirelessGatewayTask	Grants permission to get the task for a given WirelessGateway	WirelessGateway*	aws:ResourceTag/${TagKey}	Read
GetWirelessGatewayTaskDefinition	Grants permission to get the given WirelessGateway task definition	WirelessGatewayTaskDefinition*	aws:ResourceTag/${TagKey}	Read
ListDestinations	Grants permission to list information of available Destinations based on the AWS account			Read
ListDeviceProfiles	Grants permission to list information of available DeviceProfiles based on the AWS account			Read
ListDevicesForWirelessDeviceImportTask	Grants permission to list information of devices by wireless device import task based on the AWS account	ImportTask*	aws:ResourceTag/${TagKey}	Read
ListEventConfigurations	Grants permission to list information of available event configurations based on the AWS account			Read
ListFuotaTasks	Grants permission to list information of available FuotaTasks based on the AWS account			Read
ListMulticastGroups	Grants permission to list information of available MulticastGroups based on the AWS account			Read
ListMulticastGroupsByFuotaTask	Grants permission to list information of available MulticastGroups by FuotaTask based on the AWS account	FuotaTask*	aws:ResourceTag/${TagKey}	Read
ListNetworkAnalyzerConfigurations	Grants permission to list information of available NetworkAnalyzerConfigurations based on the AWS account			Read
ListPartnerAccounts	Grants permission to list the available partner accounts			Read
ListPositionConfigurations	Grants permission to list information of available position configurations based on the AWS account			Read
ListQueuedMessages	Grants permission to list the Queued Messages			Read
ListServiceProfiles	Grants permission to list information of available ServiceProfiles based on the AWS account			Read
ListTagsForResource	Grants permission to list all tags for a given resource	Destination	aws:ResourceTag/${TagKey}	Read
		DeviceProfile	aws:ResourceTag/${TagKey}
		FuotaTask	aws:ResourceTag/${TagKey}
		ImportTask	aws:ResourceTag/${TagKey}
		MulticastGroup	aws:ResourceTag/${TagKey}
		NetworkAnalyzerConfiguration	aws:ResourceTag/${TagKey}
		ServiceProfile	aws:ResourceTag/${TagKey}
		SidewalkAccount	aws:ResourceTag/${TagKey}
		WirelessDevice	aws:ResourceTag/${TagKey}
		WirelessGateway	aws:ResourceTag/${TagKey}
		WirelessGatewayTaskDefinition	aws:ResourceTag/${TagKey}
ListWirelessDeviceImportTasks	Grants permission to list wireless device import tasks information of based on the AWS account			Read
ListWirelessDevices	Grants permission to list information of available WirelessDevices based on the AWS account			Read
ListWirelessGatewayTaskDefinitions	Grants permission to list information of available WirelessGateway task definitions based on the AWS account			Read
ListWirelessGateways	Grants permission to list information of available WirelessGateways based on the AWS account			Read
PutPositionConfiguration	Grants permission to put position configuration for a given resource	WirelessDevice	aws:ResourceTag/${TagKey}	Write
PutPositionConfiguration		WirelessGateway	aws:ResourceTag/${TagKey}	Write
PutResourceLogLevel	Grants permission to put resource log level	WirelessDevice	aws:ResourceTag/${TagKey}	Write
PutResourceLogLevel	Grants permission to put resource log level	WirelessGateway	aws:ResourceTag/${TagKey}	Write
ResetAllResourceLogLevels	Grants permission to reset all resource log levels			Write
ResetResourceLogLevel	Grants permission to reset resource log level	WirelessDevice	aws:ResourceTag/${TagKey}	Write
ResetResourceLogLevel	Grants permission to reset resource log level	WirelessGateway	aws:ResourceTag/${TagKey}	Write
SendDataToMulticastGroup	Grants permission to send data to the MulticastGroup	MulticastGroup*	aws:ResourceTag/${TagKey}	Write
SendDataToWirelessDevice	Grants permission to send the decrypted application data frame to the target device	WirelessDevice*	aws:ResourceTag/${TagKey}	Write
StartBulkAssociateWirelessDeviceWithMulticastGroup	Grants permission to associate the WirelessDevices with MulticastGroup	MulticastGroup*	aws:ResourceTag/${TagKey}	Write
StartBulkDisassociateWirelessDeviceFromMulticastGroup	Grants permission to bulk disassociate the WirelessDevices from MulticastGroup	MulticastGroup*	aws:ResourceTag/${TagKey}	Write
StartFuotaTask	Grants permission to start the FuotaTask	FuotaTask*	aws:ResourceTag/${TagKey}	Write
StartMulticastGroupSession	Grants permission to start the MulticastGroup session	MulticastGroup*	aws:ResourceTag/${TagKey}	Write
StartNetworkAnalyzerStream	Grants permission to start NetworkAnalyzer stream	NetworkAnalyzerConfiguration*	aws:ResourceTag/${TagKey}	Write
StartSingleWirelessDeviceImportTask	Grants permission to start the single wireless device import task	Destination	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
StartWirelessDeviceImportTask	Grants permission to start the wireless device import task	Destination	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
StartWirelessDeviceImportTask	Grants permission to start the wireless device import task	ImportTask*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
TagResource	Grants permission to tag a given resource	Destination	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		DeviceProfile	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		FuotaTask	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		ImportTask	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		MulticastGroup	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		NetworkAnalyzerConfiguration	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		ServiceProfile	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		SidewalkAccount	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		WirelessDevice	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		WirelessGateway	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		WirelessGatewayTaskDefinition	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
TestWirelessDevice	Grants permission to simulate a provisioned device to send an uplink data with payload of 'Hello'	WirelessDevice*	aws:ResourceTag/${TagKey}	Write
UntagResource	Grants permission to remove the given tags from the resource	Destination	aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		DeviceProfile	aws:ResourceTag/${TagKey} aws:TagKeys
		FuotaTask	aws:ResourceTag/${TagKey} aws:TagKeys
		ImportTask	aws:ResourceTag/${TagKey} aws:TagKeys
		MulticastGroup	aws:ResourceTag/${TagKey} aws:TagKeys
		NetworkAnalyzerConfiguration	aws:ResourceTag/${TagKey} aws:TagKeys
		ServiceProfile	aws:ResourceTag/${TagKey} aws:TagKeys
		SidewalkAccount	aws:ResourceTag/${TagKey} aws:TagKeys
		WirelessDevice	aws:ResourceTag/${TagKey} aws:TagKeys
		WirelessGateway	aws:ResourceTag/${TagKey} aws:TagKeys
		WirelessGatewayTaskDefinition	aws:ResourceTag/${TagKey} aws:TagKeys
UpdateDestination	Grants permission to update a Destination resource	Destination*	aws:ResourceTag/${TagKey}	Write
UpdateEventConfigurationByResourceTypes	Grants permission to update event configuration by resource types			Write
UpdateFuotaTask	Grants permission to update the FuotaTask	FuotaTask*	aws:ResourceTag/${TagKey}	Write
UpdateLogLevelsByResourceTypes	Grants permission to update log levels by resource types			Write
UpdateMetricConfiguration	Grants permission to update metric configuration			Write
UpdateMulticastGroup	Grants permission to update the MulticastGroup	MulticastGroup*	aws:ResourceTag/${TagKey}	Write
UpdateNetworkAnalyzerConfiguration	Grants permission to update the NetworkAnalyzerConfiguration	MulticastGroup*	aws:ResourceTag/${TagKey}	Write
		NetworkAnalyzerConfiguration*	aws:ResourceTag/${TagKey}
		WirelessDevice*	aws:ResourceTag/${TagKey}
		WirelessGateway*	aws:ResourceTag/${TagKey}
UpdatePartnerAccount	Grants permission to update a partner account	SidewalkAccount*	aws:ResourceTag/${TagKey}	Write
UpdatePosition	Grants permission to update position for a given resource	WirelessDevice	aws:ResourceTag/${TagKey}	Write
UpdatePosition	Grants permission to update position for a given resource	WirelessGateway	aws:ResourceTag/${TagKey}	Write
UpdateResourceEventConfiguration	Grants permission to update an event configuration for an identifier	SidewalkAccount	aws:ResourceTag/${TagKey}	Write
		WirelessDevice	aws:ResourceTag/${TagKey}
		WirelessGateway	aws:ResourceTag/${TagKey}
UpdateResourcePosition	Grants permission to update position for a given resource	WirelessDevice	aws:ResourceTag/${TagKey}	Write
UpdateResourcePosition	Grants permission to update position for a given resource	WirelessGateway	aws:ResourceTag/${TagKey}	Write
UpdateWirelessDevice	Grants permission to update a WirelessDevice resource	Destination	aws:ResourceTag/${TagKey}	Write
		DeviceProfile	aws:ResourceTag/${TagKey}
		ServiceProfile	aws:ResourceTag/${TagKey}
		WirelessDevice*	aws:ResourceTag/${TagKey}
UpdateWirelessDeviceImportTask	Grants permission to update a wireless device import task	ImportTask*	aws:ResourceTag/${TagKey}	Write
UpdateWirelessGateway	Grants permission to update a WirelessGateway resource	WirelessGateway*	aws:ResourceTag/${TagKey}	Write

Resource types defined by AWS IoT Wireless

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
Destination	arn:${Partition}:iotwireless:${Region}:${Account}:Destination/${DestinationName}	aws:ResourceTag/${TagKey}
DeviceProfile	arn:${Partition}:iotwireless:${Region}:${Account}:DeviceProfile/${DeviceProfileId}	aws:ResourceTag/${TagKey}
FuotaTask	arn:${Partition}:iotwireless:${Region}:${Account}:FuotaTask/${FuotaTaskId}	aws:ResourceTag/${TagKey}
ImportTask	arn:${Partition}:iotwireless:${Region}:${Account}:ImportTask/${ImportTaskId}	aws:ResourceTag/${TagKey}
MulticastGroup	arn:${Partition}:iotwireless:${Region}:${Account}:MulticastGroup/${MulticastGroupId}	aws:ResourceTag/${TagKey}
NetworkAnalyzerConfiguration	arn:${Partition}:iotwireless:${Region}:${Account}:NetworkAnalyzerConfiguration/${NetworkAnalyzerConfigurationName}	aws:ResourceTag/${TagKey}
ServiceProfile	arn:${Partition}:iotwireless:${Region}:${Account}:ServiceProfile/${ServiceProfileId}	aws:ResourceTag/${TagKey}
SidewalkAccount	arn:${Partition}:iotwireless:${Region}:${Account}:SidewalkAccount/${SidewalkAccountId}	aws:ResourceTag/${TagKey}
WirelessDevice	arn:${Partition}:iotwireless:${Region}:${Account}:WirelessDevice/${WirelessDeviceId}	aws:ResourceTag/${TagKey}
WirelessGateway	arn:${Partition}:iotwireless:${Region}:${Account}:WirelessGateway/${WirelessGatewayId}	aws:ResourceTag/${TagKey}
WirelessGatewayTaskDefinition	arn:${Partition}:iotwireless:${Region}:${Account}:WirelessGatewayTaskDefinition/${WirelessGatewayTaskDefinitionId}	aws:ResourceTag/${TagKey}
cert	arn:${Partition}:iot:${Region}:${Account}:cert/${Certificate}
thing	arn:${Partition}:iot:${Region}:${Account}:thing/${ThingName}

Condition keys for AWS IoT Wireless

AWS IoT Wireless defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys	Description	Type
aws:RequestTag/${TagKey}	Filters access by a tag key that is present in the request that the user makes to IoT Wireless	String
aws:ResourceTag/${TagKey}	Filters access by tag key component of a tag attached to an IoT Wireless resource	String
aws:TagKeys	Filters access by the list of all the tag key names associated with the resource in the request	ArrayOfString
iotwireless:DestinationName	Filters access by destination name associated with the IoT Wireless resource	String
iotwireless:DeviceProfileId	Filters access by device profile id associated with the IoT Wireless resource	String
iotwireless:ServiceProfileId	Filters access by service profile id associated with the IoT Wireless resource	String

Warning Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Document Conventions

AWS IoT TwinMaker (iottwinmaker)

AWS IQ (iq)