Operations Actions Permission-only actions Resource types Condition keys

Actions, resources, and condition keys for Amazon Managed Blockchain

Amazon Managed Blockchain (service prefix: managedblockchain) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by Amazon Managed Blockchain
Actions defined by Amazon Managed Blockchain
Permission-only actions for Amazon Managed Blockchain
Resource types defined by Amazon Managed Blockchain
Condition keys for Amazon Managed Blockchain

API operations defined by Amazon Managed Blockchain

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Access level
CreateAccessor	managedblockchain:CreateAccessor	Write
CreateAccessor	managedblockchain:TagResource	Tagging, Write
CreateMember	managedblockchain:CreateMember	Write
CreateMember	managedblockchain:TagResource	Tagging, Write
CreateNetwork	managedblockchain:CreateNetwork	Write
CreateNetwork	managedblockchain:TagResource	Tagging, Write
CreateNode	managedblockchain:CreateNode	Write
CreateNode	managedblockchain:TagResource	Tagging, Write
CreateProposal	managedblockchain:CreateProposal	Write
CreateProposal	managedblockchain:TagResource	Tagging, Write
DeleteAccessor	managedblockchain:DeleteAccessor	Write
DeleteMember	managedblockchain:DeleteMember	Write
DeleteNode	managedblockchain:DeleteNode	Write
GetAccessor	managedblockchain:GetAccessor	Read
GetMember	managedblockchain:GetMember	Read
GetNetwork	managedblockchain:GetNetwork	Read
GetNode	managedblockchain:GetNode	Read
GetProposal	managedblockchain:GetProposal	Read
ListAccessors	managedblockchain:ListAccessors	List
ListInvitations	managedblockchain:ListInvitations	List
ListMembers	managedblockchain:ListMembers	List
ListNetworks	managedblockchain:ListNetworks	List
ListNodes	managedblockchain:ListNodes	List
ListProposalVotes	managedblockchain:ListProposalVotes	Read
ListProposals	managedblockchain:ListProposals	List
ListTagsForResource	managedblockchain:ListTagsForResource	Read
RejectInvitation	managedblockchain:RejectInvitation	Write
TagResource	managedblockchain:TagResource	Tagging, Write
UntagResource	managedblockchain:UntagResource	Tagging, Write
UpdateMember	managedblockchain:UpdateMember	Write
UpdateNode	managedblockchain:UpdateNode	Write
VoteOnProposal	managedblockchain:VoteOnProposal	Write

Actions defined by Amazon Managed Blockchain

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
CreateAccessor	Grants permission to create an Amazon Managed Blockchain accessor		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateMember	Grants permission to create a member of an Amazon Managed Blockchain network	network*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateNetwork	Grants permission to create an Amazon Managed Blockchain network		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateNode	Grants permission to create a node within a member of an Amazon Managed Blockchain network	member	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateNode		network	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateProposal	Grants permission to create a proposal that other blockchain network members can vote on to add or remove a member in an Amazon Managed Blockchain network	network*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
DeleteAccessor	Grants permission to delete an Amazon Managed Blockchain accessor	accessor*	aws:ResourceTag/${TagKey}	Write
DeleteMember	Grants permission to delete a member and all associated resources from an Amazon Managed Blockchain network	member*	aws:ResourceTag/${TagKey}	Write
DeleteNode	Grants permission to delete a node from a member of an Amazon Managed Blockchain network	node*	aws:ResourceTag/${TagKey}	Write
GetAccessor	Grants permission to return detailed information about an Amazon Managed Blockchain accessor	accessor*	aws:ResourceTag/${TagKey}	Read
GetMember	Grants permission to return detailed information about a member of an Amazon Managed Blockchain network	member*	aws:ResourceTag/${TagKey}	Read
GetNetwork	Grants permission to return detailed information about an Amazon Managed Blockchain network	network*	aws:ResourceTag/${TagKey}	Read
GetNode	Grants permission to return detailed information about a node within a member of an Amazon Managed Blockchain network	node*	aws:ResourceTag/${TagKey}	Read
GetProposal	Grants permission to return detailed information about a proposal of an Amazon Managed Blockchain network	proposal*	aws:ResourceTag/${TagKey}	Read
InvokeRpcBitcoinMainnet	Grants permission to invoke the Bitcoin Mainnet RPCs			Read
InvokeRpcBitcoinTestnet	Grants permission to invoke the Bitcoin Testnet RPCs			Read
InvokeRpcPolygonMainnet	Grants permission to invoke the Polygon Mainnet RPCs			Read
InvokeRpcPolygonMumbaiTestnet	Grants permission to invoke the Polygon Mumbai Testnet RPCs			Read
ListAccessors	Grants permission to list the Amazon Managed Blockchain accessors owned by the current AWS account			List
ListInvitations	Grants permission to list the invitations extended to the active AWS account from any Managed Blockchain network			List
ListMembers	Grants permission to list the members of an Amazon Managed Blockchain network and the properties of their memberships	network*	aws:ResourceTag/${TagKey}	List
ListNetworks	Grants permission to list the Amazon Managed Blockchain networks in which the current AWS account participates			List
ListNodes	Grants permission to list the nodes within a member of an Amazon Managed Blockchain network	member	aws:ResourceTag/${TagKey}	List
ListNodes		network	aws:ResourceTag/${TagKey}	List
ListProposalVotes	Grants permission to list all votes for a proposal, including the value of the vote and the unique identifier of the member that cast the vote for the given Amazon Managed Blockchain network	proposal*	aws:ResourceTag/${TagKey}	Read
ListProposals	Grants permission to list proposals for the given Amazon Managed Blockchain network	network*	aws:ResourceTag/${TagKey}	List
ListTagsForResource	Grants permission to view tags associated with an Amazon Managed Blockchain resource	accessor	aws:ResourceTag/${TagKey}	Read
		invitation	aws:ResourceTag/${TagKey}
		member	aws:ResourceTag/${TagKey}
		network	aws:ResourceTag/${TagKey}
		node	aws:ResourceTag/${TagKey}
		proposal	aws:ResourceTag/${TagKey}
RejectInvitation	Grants permission to reject the invitation to join the blockchain network	invitation*	aws:ResourceTag/${TagKey}	Write
TagResource	Grants permission to add tags to an Amazon Managed Blockchain resource	accessor	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		invitation	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		member	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		network	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		node	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		proposal	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
UntagResource	Grants permission to remove tags from an Amazon Managed Blockchain resource	accessor	aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		invitation	aws:ResourceTag/${TagKey} aws:TagKeys
		member	aws:ResourceTag/${TagKey} aws:TagKeys
		network	aws:ResourceTag/${TagKey} aws:TagKeys
		node	aws:ResourceTag/${TagKey} aws:TagKeys
		proposal	aws:ResourceTag/${TagKey} aws:TagKeys
UpdateMember	Grants permission to update a member of an Amazon Managed Blockchain network	member*	aws:ResourceTag/${TagKey}	Write
UpdateNode	Grants permission to update a node from a member of an Amazon Managed Blockchain network	node*	aws:ResourceTag/${TagKey}	Write
VoteOnProposal	Grants permission to cast a vote for a proposal on behalf of the blockchain network member specified	proposal*	aws:ResourceTag/${TagKey}	Write

Permission-only actions for Amazon Managed Blockchain

The following actions are defined by Amazon Managed Blockchain but are not directly invocable through any API operation. They can only be used in IAM policy statements to grant or deny permissions.

Actions	Description	Access level
GET	Grants permission to send HTTP GET requests to an Ethereum node	Permissions management, Write
Invoke	Grants permission to create WebSocket connections to an Ethereum node	Permissions management, Write
POST	Grants permission to send HTTP POST requests to an Ethereum node	Permissions management, Write

Resource types defined by Amazon Managed Blockchain

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
accessor	arn:${Partition}:managedblockchain:${Region}:${Account}:accessors/${AccessorId}	aws:ResourceTag/${TagKey}
invitation	arn:${Partition}:managedblockchain:${Region}:${Account}:invitations/${InvitationId}	aws:ResourceTag/${TagKey}
member	arn:${Partition}:managedblockchain:${Region}:${Account}:members/${MemberId}	aws:ResourceTag/${TagKey}
network	arn:${Partition}:managedblockchain:${Region}::networks/${NetworkId}	aws:ResourceTag/${TagKey}
node	arn:${Partition}:managedblockchain:${Region}:${Account}:nodes/${NodeId}	aws:ResourceTag/${TagKey}
proposal	arn:${Partition}:managedblockchain:${Region}::proposals/${ProposalId}	aws:ResourceTag/${TagKey}

Condition keys for Amazon Managed Blockchain

Amazon Managed Blockchain defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys	Description	Type
aws:RequestTag/${TagKey}	Filters actions based on the tags that are passed in the request	String
aws:ResourceTag/${TagKey}	Filters actions based on the tags associated with an Amazon Managed Blockchain resource	String
aws:TagKeys	Filters actions based on the tag keys that are passed in the request	ArrayOfString

Warning Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Document Conventions

Amazon Macie (macie2)

Amazon Managed Blockchain Query (managedblockchain-query)