Operations Actions Resource types Condition keys

Actions, resources, and condition keys for AWS Elemental MediaPackage VOD

AWS Elemental MediaPackage VOD (service prefix: mediapackage-vod) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by AWS Elemental MediaPackage VOD
Actions defined by AWS Elemental MediaPackage VOD
Resource types defined by AWS Elemental MediaPackage VOD
Condition keys for AWS Elemental MediaPackage VOD

API operations defined by AWS Elemental MediaPackage VOD

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Condition key	Possible value(s)	Access level
ConfigureLogs	mediapackage-vod:ConfigureLogs			Write
CreateAsset	mediapackage-vod:CreateAsset			Write
	mediapackage-vod:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	mediapackage-vod.amazonaws.com	Write
CreatePackagingConfiguration	mediapackage-vod:CreatePackagingConfiguration			Write
	mediapackage-vod:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	mediapackage-vod.amazonaws.com	Write
CreatePackagingGroup	mediapackage-vod:CreatePackagingGroup			Write
	mediapackage-vod:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	mediapackage-vod.amazonaws.com	Write
DeleteAsset	mediapackage-vod:DeleteAsset			Write
DeletePackagingConfiguration	mediapackage-vod:DeletePackagingConfiguration			Write
DeletePackagingGroup	mediapackage-vod:DeletePackagingGroup			Write
DescribeAsset	mediapackage-vod:DescribeAsset			Read
DescribePackagingConfiguration	mediapackage-vod:DescribePackagingConfiguration			Read
DescribePackagingGroup	mediapackage-vod:DescribePackagingGroup			Read
ListAssets	mediapackage-vod:ListAssets			List
ListPackagingConfigurations	mediapackage-vod:ListPackagingConfigurations			List
ListPackagingGroups	mediapackage-vod:ListPackagingGroups			List
ListTagsForResource	mediapackage-vod:ListTagsForResource			Read
TagResource	mediapackage-vod:TagResource			Tagging, Write
UntagResource	mediapackage-vod:UntagResource			Tagging, Write
UpdatePackagingGroup	mediapackage-vod:UpdatePackagingGroup			Write
UpdatePackagingGroup	iam:PassRole	iam:PassedToService	mediapackage-vod.amazonaws.com	Write

Actions defined by AWS Elemental MediaPackage VOD

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
ConfigureLogs	Grants permission to configure egress access logs for a PackagingGroup	packaging-groups*	aws:ResourceTag/${TagKey}	Write
CreateAsset	Grants permission to create an asset in AWS Elemental MediaPackage		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreatePackagingConfiguration	Grants permission to create a packaging configuration in AWS Elemental MediaPackage		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreatePackagingGroup	Grants permission to create a packaging group in AWS Elemental MediaPackage		aws:RequestTag/${TagKey} aws:TagKeys	Write
DeleteAsset	Grants permission to delete an asset in AWS Elemental MediaPackage	assets*	aws:ResourceTag/${TagKey}	Write
DeletePackagingConfiguration	Grants permission to delete a packaging configuration in AWS Elemental MediaPackage	packaging-configurations*	aws:ResourceTag/${TagKey}	Write
DeletePackagingGroup	Grants permission to delete a packaging group in AWS Elemental MediaPackage	packaging-groups*	aws:ResourceTag/${TagKey}	Write
DescribeAsset	Grants permission to view the details of an asset in AWS Elemental MediaPackage	assets*	aws:ResourceTag/${TagKey}	Read
DescribePackagingConfiguration	Grants permission to view the details of a packaging configuration in AWS Elemental MediaPackage	packaging-configurations*	aws:ResourceTag/${TagKey}	Read
DescribePackagingGroup	Grants permission to view the details of a packaging group in AWS Elemental MediaPackage	packaging-groups*	aws:ResourceTag/${TagKey}	Read
ListAssets	Grants permission to view a list of assets in AWS Elemental MediaPackage			List
ListPackagingConfigurations	Grants permission to view a list of packaging configurations in AWS Elemental MediaPackage			List
ListPackagingGroups	Grants permission to view a list of packaging groups in AWS Elemental MediaPackage			List
ListTagsForResource	Grants permission to list the tags assigned to a PackagingGroup, PackagingConfiguration, or Asset	assets	aws:ResourceTag/${TagKey}	Read
		packaging-configurations	aws:ResourceTag/${TagKey}
		packaging-groups	aws:ResourceTag/${TagKey}
TagResource	Grants permission to assign tags to a PackagingGroup, PackagingConfiguration, or Asset	assets	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		packaging-configurations	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		packaging-groups	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
UntagResource	Grants permission to delete tags from a PackagingGroup, PackagingConfiguration, or Asset	assets	aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		packaging-configurations	aws:ResourceTag/${TagKey} aws:TagKeys
		packaging-groups	aws:ResourceTag/${TagKey} aws:TagKeys
UpdatePackagingGroup	Grants permission to update a packaging group in AWS Elemental MediaPackage	packaging-groups*	aws:ResourceTag/${TagKey}	Write

Resource types defined by AWS Elemental MediaPackage VOD

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
assets	arn:${Partition}:mediapackage-vod:${Region}:${Account}:assets/${AssetIdentifier}	aws:ResourceTag/${TagKey}
packaging-configurations	arn:${Partition}:mediapackage-vod:${Region}:${Account}:packaging-configurations/${PackagingConfigurationIdentifier}	aws:ResourceTag/${TagKey}
packaging-groups	arn:${Partition}:mediapackage-vod:${Region}:${Account}:packaging-groups/${PackagingGroupIdentifier}	aws:ResourceTag/${TagKey}

Condition keys for AWS Elemental MediaPackage VOD

AWS Elemental MediaPackage VOD defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys	Description	Type
aws:RequestTag/${TagKey}	Filters actions based on the presence of tag key-value pairs in the request	String
aws:ResourceTag/${TagKey}	Filters actions based on tag key-value pairs attached to the resource	String
aws:TagKeys	Filters actions based on the presence of tag keys in the request	ArrayOfString

Warning Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Document Conventions

AWS Elemental MediaPackage V2 (mediapackagev2)

AWS Elemental MediaStore (mediastore)