Operations Actions Resource types Condition keys

Actions, resources, and condition keys for AWS Wickr

AWS Wickr (service prefix: wickr) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

API operations defined by AWS Wickr

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Access level
BatchCreateUser	wickr:BatchCreateUser	Write
BatchDeleteUser	wickr:BatchDeleteUser	Write
BatchLookupUserUname	wickr:BatchLookupUserUname	Read
BatchReinviteUser	wickr:BatchReinviteUser	Write
BatchResetDevicesForUser	wickr:BatchResetDevicesForUser	Write
BatchToggleUserSuspendStatus	wickr:BatchToggleUserSuspendStatus	Write
CreateBot	wickr:CreateBot	Write
CreateDataRetentionBot	wickr:CreateDataRetentionBot	Write
CreateDataRetentionBotChallenge	wickr:CreateDataRetentionBotChallenge	Write
CreateNetwork	wickr:CreateNetwork	Write
CreateNetwork	wickr:TagResource	Tagging, Write
CreateSecurityGroup	wickr:CreateSecurityGroup	Write
DeleteBot	wickr:DeleteBot	Write
DeleteDataRetentionBot	wickr:DeleteDataRetentionBot	Write
DeleteNetwork	wickr:DeleteNetwork	Write
DeleteSecurityGroup	wickr:DeleteSecurityGroup	Write
GetBot	wickr:GetBot	Read
GetBotsCount	wickr:GetBotsCount	Read
GetDataRetentionBot	wickr:GetDataRetentionBot	Read
GetGuestUserHistoryCount	wickr:GetGuestUserHistoryCount	Read
GetNetwork	wickr:GetNetwork	Read
GetNetworkSettings	wickr:GetNetworkSettings	Read
GetOidcInfo	wickr:GetOidcInfo	Read
GetOpentdfConfig	wickr:GetOpentdfConfig	Read
GetSecurityGroup	wickr:GetSecurityGroup	Read
GetUser	wickr:GetUser	Read
GetUsersCount	wickr:GetUsersCount	Read
ListBlockedGuestUsers	wickr:ListBlockedGuestUsers	Read
ListBots	wickr:ListBots	Read
ListDevicesForUser	wickr:ListDevicesForUser	Read
ListGuestUsers	wickr:ListGuestUsers	Read
ListNetworks	wickr:ListNetworks	Read
ListSecurityGroupUsers	wickr:ListSecurityGroupUsers	Read
ListSecurityGroups	wickr:ListSecurityGroups	Read
ListUsers	wickr:ListUsers	Read
RegisterOidcConfig	wickr:RegisterOidcConfig	Write
RegisterOidcConfigTest	wickr:RegisterOidcConfigTest	Write
RegisterOpentdfConfig	wickr:RegisterOpentdfConfig	Write
UpdateBot	wickr:UpdateBot	Write
UpdateDataRetention	wickr:UpdateDataRetention	Write
UpdateGuestUser	wickr:UpdateGuestUser	Write
UpdateNetworkSettings	wickr:UpdateNetworkSettings	Write
UpdateSecurityGroup	wickr:UpdateSecurityGroup	Write
UpdateUser	wickr:UpdateUser	Write

Actions defined by AWS Wickr

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
BatchCreateUser	Grants permission to batch create users in a Wickr network	network*	aws:ResourceTag/${TagKey}	Write
BatchDeleteUser	Grants permission to batch delete users from a Wickr network	network*	aws:ResourceTag/${TagKey}	Write
BatchLookupUserUname	Grants permission to batch lookup user unames in a Wickr network	network*	aws:ResourceTag/${TagKey}	Read
BatchReinviteUser	Grants permission to batch reinvite users in a Wickr network	network*	aws:ResourceTag/${TagKey}	Write
BatchResetDevicesForUser	Grants permission to batch reset devices for a user in a Wickr network	network*	aws:ResourceTag/${TagKey}	Write
BatchToggleUserSuspendStatus	Grants permission to batch toggle user suspend status in a Wickr network	network*	aws:ResourceTag/${TagKey}	Write
CreateAdminSession	Grants permission to create and manage Wickr networks	network*	aws:ResourceTag/${TagKey}	Write
CreateBot	Grants permission to create a bot in a Wickr network	network*	aws:ResourceTag/${TagKey}	Write
CreateDataRetentionBot	Grants permission to create a data retention bot in a Wickr network	network*	aws:ResourceTag/${TagKey}	Write
CreateDataRetentionBotChallenge	Grants permission to create a data retention bot challenge in a Wickr network	network*	aws:ResourceTag/${TagKey}	Write
CreateNetwork	Grants permission to create a new Wickr network	network*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateSecurityGroup	Grants permission to create a security group in a Wickr network	network*	aws:ResourceTag/${TagKey}	Write
DeleteBot	Grants permission to delete a bot from a Wickr network	network*	aws:ResourceTag/${TagKey}	Write
DeleteDataRetentionBot	Grants permission to delete a data retention bot from a Wickr network	network*	aws:ResourceTag/${TagKey}	Write
DeleteNetwork	Grants permission to delete Wickr networks	network*	aws:ResourceTag/${TagKey}	Write
DeleteSecurityGroup	Grants permission to delete a security group from a Wickr network	network*	aws:ResourceTag/${TagKey}	Write
GetBot	Grants permission to get bot information in a Wickr network	network*	aws:ResourceTag/${TagKey}	Read
GetBotsCount	Grants permission to get bot count for a Wickr network	network*	aws:ResourceTag/${TagKey}	Read
GetDataRetentionBot	Grants permission to get data retention bot information in a Wickr network	network*	aws:ResourceTag/${TagKey}	Read
GetGuestUserHistoryCount	Grants permission to get guest user history count for a Wickr network	network*	aws:ResourceTag/${TagKey}	Read
GetNetwork	Grants permission to get details of a Wickr network	network*	aws:ResourceTag/${TagKey}	Read
GetNetworkSettings	Grants permission to get network settings for a Wickr network	network*	aws:ResourceTag/${TagKey}	Read
GetOidcInfo	Grants permission to get OIDC information for a Wickr network	network*	aws:ResourceTag/${TagKey}	Read
GetOpentdfConfig	Grants permission to retrieve the OpenTDF integration configuration for a Wickr network	network*	aws:ResourceTag/${TagKey}	Read
GetSecurityGroup	Grants permission to get security group information in a Wickr network	network*	aws:ResourceTag/${TagKey}	Read
GetUser	Grants permission to get information about a user in a Wickr network	network*	aws:ResourceTag/${TagKey}	Read
GetUsersCount	Grants permission to get user count for a Wickr network	network*	aws:ResourceTag/${TagKey}	Read
ListBlockedGuestUsers	Grants permission to list blocked guest users in a Wickr network	network*	aws:ResourceTag/${TagKey}	Read
ListBots	Grants permission to list bots in a Wickr network	network*	aws:ResourceTag/${TagKey}	Read
ListDevicesForUser	Grants permission to list devices for a user in a Wickr network	network*	aws:ResourceTag/${TagKey}	Read
ListGuestUsers	Grants permission to list guest users in a Wickr network	network*	aws:ResourceTag/${TagKey}	Read
ListNetworks	Grants permission to list Wickr networks			Read
ListSecurityGroupUsers	Grants permission to list users in a security group in a Wickr network	network*	aws:ResourceTag/${TagKey}	Read
ListSecurityGroups	Grants permission to list security groups in a Wickr network	network*	aws:ResourceTag/${TagKey}	Read
ListTagsForResource	Grants permission to list the tags applied to a Wickr resource	network*	aws:ResourceTag/${TagKey}	Read
ListUsers	Grants permission to list users in a Wickr network	network*	aws:ResourceTag/${TagKey}	Read
RegisterOidcConfig	Grants permission to register OIDC configuration for a Wickr network	network*	aws:ResourceTag/${TagKey}	Write
RegisterOidcConfigTest	Grants permission to test OIDC configuration for a Wickr network	network*	aws:ResourceTag/${TagKey}	Write
RegisterOpentdfConfig	Grants permission to register and save OpenTDF integration configuration for a Wickr network	network*	aws:ResourceTag/${TagKey}	Write
TagResource	Grants permission to add tags to a specified Wickr resource	network*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
UntagResource	Grants permission to untag the specified tags from the specified Wickr resource	network*	aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
UpdateBot	Grants permission to update a bot in a Wickr network	network*	aws:ResourceTag/${TagKey}	Write
UpdateDataRetention	Grants permission to update data retention settings in a Wickr network	network*	aws:ResourceTag/${TagKey}	Write
UpdateGuestUser	Grants permission to update guest user status in a Wickr network	network*	aws:ResourceTag/${TagKey}	Write
UpdateNetworkDetails	Grants permission to update Wickr network details	network*	aws:ResourceTag/${TagKey}	Write
UpdateNetworkSettings	Grants permission to update network settings for a Wickr network	network*	aws:ResourceTag/${TagKey}	Write
UpdateSecurityGroup	Grants permission to update a security group in a Wickr network	network*	aws:ResourceTag/${TagKey}	Write
UpdateUser	Grants permission to update user information in a Wickr network	network*	aws:ResourceTag/${TagKey}	Write

Resource types defined by AWS Wickr

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
network	arn:${Partition}:wickr:${Region}:${Account}:network/${NetworkId}	aws:ResourceTag/${TagKey}

Condition keys for AWS Wickr

AWS Wickr defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys	Description	Type
aws:RequestTag/${TagKey}	Filters access by a tag's key and value in a request	String
aws:ResourceTag/${TagKey}	Filters access by the tag key-value pairs attached to the resource	String
aws:TagKeys	Filters access by the tag keys in a request	ArrayOfString

Warning Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Document Conventions

AWS Well-Architected Tool (wellarchitected)

AWS WorkSpaces Managed Instances (workspaces-instances)