Actions Permission-only actions Resource types Condition keys

Actions, resources, and condition keys for AWS Panorama

AWS Panorama (service prefix: panorama) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Actions defined by AWS Panorama

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
CreateApplicationInstance	Grants permission to create an AWS Panorama Application Instance		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateJobForDevices	Grants permission to create a job for an AWS Panorama Appliance			Write
CreateNodeFromTemplateJob	Grants permission to create an AWS Panorama Node			Write
CreatePackage	Grants permission to create an AWS Panorama Package		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreatePackageImportJob	Grants permission to create an AWS Panorama Package			Write
DeleteDevice	Grants permission to deregister an AWS Panorama Appliance	device*	aws:ResourceTag/${TagKey}	Write
DeletePackage	Grants permission to delete an AWS Panorama Package	package*	aws:ResourceTag/${TagKey}	Write
DeregisterPackageVersion	Grants permission to deregister an AWS Panorama package version	package*	aws:ResourceTag/${TagKey}	Write
DescribeApplicationInstance	Grants permission to view details about an AWS Panorama application instance	applicationInstance*	aws:ResourceTag/${TagKey}	Read
DescribeApplicationInstanceDetails	Grants permission to view details about an AWS Panorama application instance	applicationInstance*	aws:ResourceTag/${TagKey}	Read
DescribeDevice	Grants permission to view details about an AWS Panorama Appliance	device*	aws:ResourceTag/${TagKey}	Read
DescribeDeviceJob	Grants permission to view job details for an AWS Panorama Appliance			Read
DescribeNode	Grants permission to view details about an AWS Panorama application node			Read
DescribeNodeFromTemplateJob	Grants permission to view details about AWS Panorama application node			Read
DescribePackage	Grants permission to view details about an AWS Panorama package	package*	aws:ResourceTag/${TagKey}	Read
DescribePackageImportJob	Grants permission to view details about an AWS Panorama package			Read
DescribePackageVersion	Grants permission to view details about an AWS Panorama package version	package*	aws:ResourceTag/${TagKey}	Read
ListApplicationInstanceDependencies	Grants permission to retrieve a list of application instance dependencies in AWS Panorama	applicationInstance*	aws:ResourceTag/${TagKey}	List
ListApplicationInstanceNodeInstances	Grants permission to retrieve a list of node instances of application instances in AWS Panorama	applicationInstance*	aws:ResourceTag/${TagKey}	List
ListApplicationInstances	Grants permission to retrieve a list of application instances in AWS Panorama	device	aws:ResourceTag/${TagKey}	List
ListDevices	Grants permission to retrieve a list of appliances in AWS Panorama			List
ListDevicesJobs	Grants permission to retrieve a list of jobs for an AWS Panorama Appliance	device	aws:ResourceTag/${TagKey}	List
ListNodeFromTemplateJobs	Grants permission to retrieve a list of Nodes for an AWS Panorama Appliance			List
ListNodes	Grants permission to retrieve a list of nodes in AWS Panorama			List
ListPackageImportJobs	Grants permission to retrieve a list of packages in AWS Panorama			List
ListPackages	Grants permission to retrieve a list of packages in AWS Panorama			List
ListTagsForResource	Grants permission to retrieve a list of tags for a resource in AWS Panorama	applicationInstance	aws:ResourceTag/${TagKey}	Read
		device	aws:ResourceTag/${TagKey}
		package	aws:ResourceTag/${TagKey}
ProvisionDevice	Grants permission to register an AWS Panorama Appliance		aws:RequestTag/${TagKey} aws:TagKeys	Write
RegisterPackageVersion	Grants permission to register an AWS Panorama package version	package*	aws:ResourceTag/${TagKey}	Write
RemoveApplicationInstance	Grants permission to remove an AWS Panorama application instance	applicationInstance*	aws:ResourceTag/${TagKey}	Write
SignalApplicationInstanceNodeInstances	Grants permission to signal camera nodes in an application instance to pause or resume	applicationInstance*	aws:ResourceTag/${TagKey}	Write
TagResource	Grants permission to add tags to a resource in AWS Panorama	applicationInstance	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		device	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		package	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
UntagResource	Grants permission to remove tags from a resource in AWS Panorama	applicationInstance	aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		device	aws:ResourceTag/${TagKey} aws:TagKeys
		package	aws:ResourceTag/${TagKey} aws:TagKeys
UpdateDeviceMetadata	Grants permission to modify basic settings for an AWS Panorama Appliance	device*	aws:ResourceTag/${TagKey}	Write

Permission-only actions for AWS Panorama

The following actions are defined by AWS Panorama but are not directly invocable through any API operation. They can only be used in IAM policy statements to grant or deny permissions.

Actions	Description	Resource types (*required)	Condition keys	Access level
DescribeSoftware	Grants permission to view details about a software version for the AWS Panorama Appliance			Read
GetWebSocketURL	Grants permission to generate a WebSocket endpoint for communication with AWS Panorama			Read

Resource types defined by AWS Panorama

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
applicationInstance	arn:${Partition}:panorama:${Region}:${Account}:applicationInstance/${ApplicationInstanceId}	aws:ResourceTag/${TagKey}
device	arn:${Partition}:panorama:${Region}:${Account}:device/${DeviceId}	aws:ResourceTag/${TagKey}
package	arn:${Partition}:panorama:${Region}:${Account}:package/${PackageId}	aws:ResourceTag/${TagKey}

Condition keys for AWS Panorama

AWS Panorama defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys	Description	Type
aws:RequestTag/${TagKey}	Filters access by the tags that are passed in the request	String
aws:ResourceTag/${TagKey}	Filters access by the tags associated with the resource	String
aws:TagKeys	Filters access by the tag keys that are passed in the request	ArrayOfString

Warning Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Document Conventions

AWS Outposts (outposts)

AWS Parallel Computing Service (pcs)