Operations Actions Resource types Condition keys

Actions, resources, and condition keys for AWS Elemental MediaPackage

AWS Elemental MediaPackage (service prefix: mediapackage) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by AWS Elemental MediaPackage
Actions defined by AWS Elemental MediaPackage
Resource types defined by AWS Elemental MediaPackage
Condition keys for AWS Elemental MediaPackage

API operations defined by AWS Elemental MediaPackage

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Condition key	Possible value(s)	Access level
ConfigureLogs	mediapackage:UpdateChannel			Write
CreateChannel	mediapackage:CreateChannel			Write
CreateChannel	mediapackage:TagResource			Tagging, Write
CreateHarvestJob	mediapackage:CreateHarvestJob			Write
CreateHarvestJob	iam:PassRole	iam:PassedToService	mediapackage.amazonaws.com	Write
CreateOriginEndpoint	mediapackage:CreateOriginEndpoint			Write
	mediapackage:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	mediapackage.amazonaws.com	Write
DeleteChannel	mediapackage:DeleteChannel			Write
DeleteOriginEndpoint	mediapackage:DeleteOriginEndpoint			Write
DescribeChannel	mediapackage:DescribeChannel			Read
DescribeHarvestJob	mediapackage:DescribeHarvestJob			Read
DescribeOriginEndpoint	mediapackage:DescribeOriginEndpoint			Read
ListChannels	mediapackage:ListChannels			Read
ListHarvestJobs	mediapackage:ListHarvestJobs			Read
ListOriginEndpoints	mediapackage:ListOriginEndpoints			Read
ListTagsForResource	mediapackage:ListTagsForResource			Read
RotateChannelCredentials	mediapackage:RotateChannelCredentials			Write
RotateIngestEndpointCredentials	mediapackage:RotateIngestEndpointCredentials			Write
TagResource	mediapackage:TagResource			Tagging, Write
UntagResource	mediapackage:UntagResource			Tagging, Write
UpdateChannel	mediapackage:UpdateChannel			Write
UpdateOriginEndpoint	mediapackage:UpdateOriginEndpoint			Write
UpdateOriginEndpoint	iam:PassRole	iam:PassedToService	mediapackage.amazonaws.com	Write

Actions defined by AWS Elemental MediaPackage

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
ConfigureLogs	Grants permission to configure access logs for a Channel	channels*	aws:ResourceTag/${TagKey}	Write
CreateChannel	Grants permission to create a channel in AWS Elemental MediaPackage		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateHarvestJob	Grants permission to create a harvest job in AWS Elemental MediaPackage		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateOriginEndpoint	Grants permission to create an endpoint in AWS Elemental MediaPackage		aws:RequestTag/${TagKey} aws:TagKeys	Write
DeleteChannel	Grants permission to delete a channel in AWS Elemental MediaPackage	channels*	aws:ResourceTag/${TagKey}	Write
DeleteOriginEndpoint	Grants permission to delete an endpoint in AWS Elemental MediaPackage	origin_endpoints*	aws:ResourceTag/${TagKey}	Write
DescribeChannel	Grants permission to view the details of a channel in AWS Elemental MediaPackage	channels*	aws:ResourceTag/${TagKey}	Read
DescribeHarvestJob	Grants permission to view the details of a harvest job in AWS Elemental MediaPackage	harvest_jobs*	aws:ResourceTag/${TagKey}	Read
DescribeOriginEndpoint	Grants permission to view the details of an endpoint in AWS Elemental MediaPackage	origin_endpoints*	aws:ResourceTag/${TagKey}	Read
ListChannels	Grants permission to view a list of channels in AWS Elemental MediaPackage			Read
ListHarvestJobs	Grants permission to view a list of harvest jobs in AWS Elemental MediaPackage			Read
ListOriginEndpoints	Grants permission to view a list of endpoints in AWS Elemental MediaPackage			Read
ListTagsForResource	Grants permission to list the tags assigned to a Channel or OriginEndpoint	channels	aws:ResourceTag/${TagKey}	Read
		harvest_jobs	aws:ResourceTag/${TagKey}
		origin_endpoints	aws:ResourceTag/${TagKey}
RotateChannelCredentials	Grants permission to rotate credentials for the first IngestEndpoint of a Channel in AWS Elemental MediaPackage	channels*	aws:ResourceTag/${TagKey}	Write
RotateIngestEndpointCredentials	Grants permission to rotate IngestEndpoint credentials for a Channel in AWS Elemental MediaPackage	channels*	aws:ResourceTag/${TagKey}	Write
TagResource	Grants permission to tag a MediaPackage resource	channels	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		harvest_jobs	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		origin_endpoints	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
UntagResource	Grants permission to delete tags to a Channel or OriginEndpoint	channels	aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		harvest_jobs	aws:ResourceTag/${TagKey} aws:TagKeys
		origin_endpoints	aws:ResourceTag/${TagKey} aws:TagKeys
UpdateChannel	Grants permission to make changes to a channel in AWS Elemental MediaPackage	channels*	aws:ResourceTag/${TagKey}	Write
UpdateOriginEndpoint	Grants permission to make changes to an endpoint in AWS Elemental MediaPackage	origin_endpoints*	aws:ResourceTag/${TagKey}	Write

Resource types defined by AWS Elemental MediaPackage

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
channels	arn:${Partition}:mediapackage:${Region}:${Account}:channels/${ChannelIdentifier}	aws:ResourceTag/${TagKey}
harvest_jobs	arn:${Partition}:mediapackage:${Region}:${Account}:harvest_jobs/${HarvestJobIdentifier}	aws:ResourceTag/${TagKey}
origin_endpoints	arn:${Partition}:mediapackage:${Region}:${Account}:origin_endpoints/${OriginEndpointIdentifier}	aws:ResourceTag/${TagKey}

Condition keys for AWS Elemental MediaPackage

AWS Elemental MediaPackage defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys	Description	Type
aws:RequestTag/${TagKey}	Filters access by the tag for a MediaPackage request	String
aws:ResourceTag/${TagKey}	Filters access by the tag for a MediaPackage resource	String
aws:TagKeys	Filters access by the tag keys for a MediaPackage resource or request	ArrayOfString

Warning Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Document Conventions

AWS Elemental MediaLive (medialive)

AWS Elemental MediaPackage V2 (mediapackagev2)