Operations Actions Resource types Condition keys

Actions, resources, and condition keys for Amazon Lookout for Equipment

Amazon Lookout for Equipment (service prefix: lookoutequipment) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by Amazon Lookout for Equipment
Actions defined by Amazon Lookout for Equipment
Resource types defined by Amazon Lookout for Equipment
Condition keys for Amazon Lookout for Equipment

API operations defined by Amazon Lookout for Equipment

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Condition key	Possible value(s)	Access level
CreateDataset	lookoutequipment:CreateDataset			Write
CreateDataset	lookoutequipment:TagResource			Tagging, Write
CreateInferenceScheduler	lookoutequipment:CreateInferenceScheduler			Write
	lookoutequipment:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	lookoutequipment.amazonaws.com	Write
CreateLabel	lookoutequipment:CreateLabel			Write
CreateLabelGroup	lookoutequipment:CreateLabelGroup			Write
CreateLabelGroup	lookoutequipment:TagResource			Tagging, Write
CreateModel	lookoutequipment:CreateModel			Write
	lookoutequipment:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	lookoutequipment.amazonaws.com	Write
CreateRetrainingScheduler	lookoutequipment:CreateRetrainingScheduler			Write
DeleteDataset	lookoutequipment:DeleteDataset			Write
DeleteInferenceScheduler	lookoutequipment:DeleteInferenceScheduler			Write
DeleteLabel	lookoutequipment:DeleteLabel			Write
DeleteLabelGroup	lookoutequipment:DeleteLabelGroup			Write
DeleteModel	lookoutequipment:DeleteModel			Write
DeleteResourcePolicy	lookoutequipment:DeleteResourcePolicy			Write
DeleteRetrainingScheduler	lookoutequipment:DeleteRetrainingScheduler			Write
DescribeDataIngestionJob	lookoutequipment:DescribeDataIngestionJob			Read
DescribeDataset	lookoutequipment:DescribeDataset			Read
DescribeInferenceScheduler	lookoutequipment:DescribeInferenceScheduler			Read
DescribeLabel	lookoutequipment:Describelabel			Read
DescribeLabelGroup	lookoutequipment:DescribeLabelGroup			Read
DescribeModel	lookoutequipment:DescribeModel			Read
DescribeModelVersion	lookoutequipment:DescribeModelVersion			Read
DescribeResourcePolicy	lookoutequipment:DescribeResourcePolicy			Read
DescribeRetrainingScheduler	lookoutequipment:DescribeRetrainingScheduler			Read
ImportDataset	lookoutequipment:ImportDataset			Write
ImportDataset	lookoutequipment:TagResource			Tagging, Write
ImportModelVersion	lookoutequipment:ImportModelVersion			Write
ImportModelVersion	lookoutequipment:TagResource			Tagging, Write
ListDataIngestionJobs	lookoutequipment:ListDataIngestionJobs			List
ListDatasets	lookoutequipment:ListDatasets			List
ListInferenceEvents	lookoutequipment:ListInferenceEvents			Read
ListInferenceExecutions	lookoutequipment:ListInferenceExecutions			Read
ListInferenceSchedulers	lookoutequipment:ListInferenceSchedulers			List
ListLabelGroups	lookoutequipment:ListLabelGroups			List
ListLabels	lookoutequipment:ListLabels			List
ListModelVersions	lookoutequipment:ListModelVersions			List
ListModels	lookoutequipment:ListModels			List
ListRetrainingSchedulers	lookoutequipment:ListRetrainingSchedulers			List
ListSensorStatistics	lookoutequipment:ListSensorStatistics			List
ListTagsForResource	lookoutequipment:ListTagsForResource			Read
PutResourcePolicy	lookoutequipment:PutResourcePolicy			Write
StartDataIngestionJob	lookoutequipment:StartDataIngestionJob			Write
StartDataIngestionJob	iam:PassRole	iam:PassedToService	lookoutequipment.amazonaws.com	Write
StartInferenceScheduler	lookoutequipment:StartInferenceScheduler			Write
StartRetrainingScheduler	lookoutequipment:StartRetrainingScheduler			Write
StopInferenceScheduler	lookoutequipment:StopInferenceScheduler			Write
StopRetrainingScheduler	lookoutequipment:StopRetrainingScheduler			Write
TagResource	lookoutequipment:TagResource			Tagging, Write
UntagResource	lookoutequipment:UntagResource			Tagging, Write
UpdateActiveModelVersion	lookoutequipment:UpdateActiveModelVersion			Write
UpdateInferenceScheduler	lookoutequipment:UpdateInferenceScheduler			Write
UpdateInferenceScheduler	iam:PassRole	iam:PassedToService	lookoutequipment.amazonaws.com	Write
UpdateLabelGroup	lookoutequipment:UpdateLabelGroup			Write
UpdateModel	lookoutequipment:UpdateModel			Write
UpdateModel	iam:PassRole	iam:PassedToService	lookoutequipment.amazonaws.com	Write
UpdateRetrainingScheduler	lookoutequipment:UpdateRetrainingScheduler			Write

Actions defined by Amazon Lookout for Equipment

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
CreateDataset	Grants permission to create a dataset	dataset*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateInferenceScheduler	Grants permission to create an inference scheduler for a trained model	inference-scheduler*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateInferenceScheduler		model*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateLabel	Grants permission to create a label	label-group*	aws:ResourceTag/${TagKey}	Write
CreateLabelGroup	Grants permission to create a label group	label-group*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateModel	Grants permission to create a model that is trained on a dataset	dataset*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
		label-group	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		model*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
CreateRetrainingScheduler	Grants permission to create a retraining scheduler for a trained model	model*	aws:ResourceTag/${TagKey}	Write
DeleteDataset	Grants permission to delete a dataset	dataset*	aws:ResourceTag/${TagKey}	Write
DeleteInferenceScheduler	Grants permission to delete an inference scheduler	inference-scheduler*	aws:ResourceTag/${TagKey}	Write
DeleteLabel	Grants permission to delete a label	label-group*	aws:ResourceTag/${TagKey}	Write
DeleteLabelGroup	Grants permission to delete a label group	label-group*	aws:ResourceTag/${TagKey}	Write
DeleteModel	Grants permission to delete a model	model*	aws:ResourceTag/${TagKey}	Write
DeleteResourcePolicy	Grants permission to delete a resource policy	dataset	aws:ResourceTag/${TagKey}	Write
		model	aws:ResourceTag/${TagKey}
		model-version	aws:ResourceTag/${TagKey}
DeleteRetrainingScheduler	Grants permission to delete a retraining scheduler of a trained model	model*	aws:ResourceTag/${TagKey}	Write
DescribeDataIngestionJob	Grants permission to describe a data ingestion job			Read
DescribeDataset	Grants permission to describe a dataset	dataset*	aws:ResourceTag/${TagKey}	Read
DescribeInferenceScheduler	Grants permission to describe an inference scheduler	inference-scheduler*	aws:ResourceTag/${TagKey}	Read
DescribeLabelGroup	Grants permission to describe a label group	label-group*	aws:ResourceTag/${TagKey}	Read
DescribeModel	Grants permission to describe a model	model*	aws:ResourceTag/${TagKey}	Read
DescribeModelVersion	Grants permission to describe a model version	model-version*	aws:ResourceTag/${TagKey}	Read
DescribeResourcePolicy	Grants permission to describe a resource policy	dataset	aws:ResourceTag/${TagKey}	Read
		model	aws:ResourceTag/${TagKey}
		model-version	aws:ResourceTag/${TagKey}
DescribeRetrainingScheduler	Grants permission to describe a retraining scheduler of a trained model	model*	aws:ResourceTag/${TagKey}	Read
Describelabel	Grants permission to describe a label	label-group*	aws:ResourceTag/${TagKey}	Read
ImportDataset	Grants permission to import a dataset	dataset*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
ImportModelVersion	Grants permission to import a model version	dataset*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys lookoutequipment:IsImportingData	Write
		label-group	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys lookoutequipment:IsImportingData
		model*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys lookoutequipment:IsImportingData
ListDataIngestionJobs	Grants permission to list the data ingestion jobs in your account or for a particular dataset	dataset*	aws:ResourceTag/${TagKey}	List
ListDatasets	Grants permission to list the datasets in your account			List
ListInferenceEvents	Grants permission to list the inference events for an inference scheduler	inference-scheduler*	aws:ResourceTag/${TagKey}	Read
ListInferenceExecutions	Grants permission to list the inference executions for an inference scheduler	inference-scheduler*	aws:ResourceTag/${TagKey}	Read
ListInferenceSchedulers	Grants permission to list the inference schedulers in your account			List
ListLabelGroups	Grants permission to list the label groups in your account	label-group*	aws:ResourceTag/${TagKey}	List
ListLabels	Grants permission to list the labels in your account	label-group*	aws:ResourceTag/${TagKey}	List
ListModelVersions	Grants permission to list the model versions in your account	model*	aws:ResourceTag/${TagKey}	List
ListModels	Grants permission to list the models in your account			List
ListRetrainingSchedulers	Grants permission to list the retraining schedulers in your account			List
ListSensorStatistics	Grants permission to list the sensor statistics for a particular dataset or an ingestion job	dataset*	aws:ResourceTag/${TagKey}	List
ListTagsForResource	Grants permission to list the tags for a resource	dataset	aws:ResourceTag/${TagKey}	Read
		inference-scheduler	aws:ResourceTag/${TagKey}
		label-group	aws:ResourceTag/${TagKey}
		model	aws:ResourceTag/${TagKey}
		model-version	aws:ResourceTag/${TagKey}
PutResourcePolicy	Grants permission to put a resource policy	dataset	aws:ResourceTag/${TagKey}	Write
		model	aws:ResourceTag/${TagKey}
		model-version	aws:ResourceTag/${TagKey}
StartDataIngestionJob	Grants permission to start a data ingestion job for a dataset	dataset*	aws:ResourceTag/${TagKey}	Write
StartInferenceScheduler	Grants permission to start an inference scheduler	inference-scheduler*	aws:ResourceTag/${TagKey}	Write
StartRetrainingScheduler	Grants permission to start a retraining scheduler of a trained model	model*	aws:ResourceTag/${TagKey}	Write
StopInferenceScheduler	Grants permission to stop an inference scheduler	inference-scheduler*	aws:ResourceTag/${TagKey}	Write
StopRetrainingScheduler	Grants permission to stop a retraining scheduler of a trained model	model*	aws:ResourceTag/${TagKey}	Write
TagResource	Grants permission to tag a resource	dataset	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		inference-scheduler	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		label-group	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		model	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		model-version	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
UntagResource	Grants permission to untag a resource	dataset	aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		inference-scheduler	aws:ResourceTag/${TagKey} aws:TagKeys
		label-group	aws:ResourceTag/${TagKey} aws:TagKeys
		model	aws:ResourceTag/${TagKey} aws:TagKeys
		model-version	aws:ResourceTag/${TagKey} aws:TagKeys
UpdateActiveModelVersion	Grants permission to set the active model version for a given machine learning model	model*	aws:ResourceTag/${TagKey}	Write
UpdateActiveModelVersion		model-version*	aws:ResourceTag/${TagKey}	Write
UpdateInferenceScheduler	Grants permission to update an inference scheduler	inference-scheduler*	aws:ResourceTag/${TagKey}	Write
UpdateLabelGroup	Grants permission to update a label group	label-group*	aws:ResourceTag/${TagKey}	Write
UpdateModel	Grants permission to update a trained model	model*	aws:ResourceTag/${TagKey}	Write
UpdateRetrainingScheduler	Grants permission to update a retraining scheduler of a trained model	model*	aws:ResourceTag/${TagKey}	Write

Resource types defined by Amazon Lookout for Equipment

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
dataset	arn:${Partition}:lookoutequipment:${Region}:${Account}:dataset/${DatasetName}/${DatasetId}	aws:ResourceTag/${TagKey}
inference-scheduler	arn:${Partition}:lookoutequipment:${Region}:${Account}:inference-scheduler/${InferenceSchedulerName}/${InferenceSchedulerId}	aws:ResourceTag/${TagKey}
label-group	arn:${Partition}:lookoutequipment:${Region}:${Account}:label-group/${LabelGroupName}/${LabelGroupId}	aws:ResourceTag/${TagKey}
model	arn:${Partition}:lookoutequipment:${Region}:${Account}:model/${ModelName}/${ModelId}	aws:ResourceTag/${TagKey}
model-version	arn:${Partition}:lookoutequipment:${Region}:${Account}:model/${ModelName}/${ModelId}/model-version/${ModelVersionNumber}	aws:ResourceTag/${TagKey}

Condition keys for Amazon Lookout for Equipment

Amazon Lookout for Equipment defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys	Description	Type
aws:RequestTag/${TagKey}	Filters access by the presence of tag key-value pairs in the request	String
aws:ResourceTag/${TagKey}	Filters access by tag key-value pairs attached to the resource	String
aws:TagKeys	Filters access by the presence of tag keys in the request	ArrayOfString
lookoutequipment:IsImportingData	Filters access by the import strategy of underlying data	Bool

Warning Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Document Conventions

Amazon Location Service Routes (geo-routes)

Amazon Lookout for Metrics (lookoutmetrics)