Operations Actions Resource types Condition keys

Actions, resources, and condition keys for AWS rePost Private

AWS rePost Private (service prefix: repostspace) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by AWS rePost Private
Actions defined by AWS rePost Private
Resource types defined by AWS rePost Private
Condition keys for AWS rePost Private

API operations defined by AWS rePost Private

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Condition key	Possible value(s)	Access level
BatchAddChannelRoleToAccessors	repostspace:BatchAddChannelRoleToAccessors			Write
BatchAddRole	repostspace:BatchAddRole			Write
BatchRemoveChannelRoleFromAccessors	repostspace:BatchRemoveChannelRoleFromAccessors			Write
BatchRemoveRole	repostspace:BatchRemoveRole			Write
CreateChannel	repostspace:CreateChannel			Write
CreateSpace	repostspace:CreateSpace			Write
	repostspace:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	repostspace.amazonaws.com	Write
DeleteSpace	repostspace:DeleteSpace			Write
DeregisterAdmin	repostspace:DeregisterAdmin			Write
GetChannel	repostspace:GetChannel			Read
GetSpace	repostspace:GetSpace			Read
ListChannels	repostspace:ListChannels			Read
ListSpaces	repostspace:ListSpaces			Read
ListTagsForResource	repostspace:ListTagsForResource			Read
RegisterAdmin	repostspace:RegisterAdmin			Write
SendInvites	repostspace:SendInvites			Write
TagResource	repostspace:TagResource			Tagging, Write
UntagResource	repostspace:UntagResource			Tagging, Write
UpdateChannel	repostspace:UpdateChannel			Write
UpdateSpace	repostspace:UpdateSpace			Write
UpdateSpace	iam:PassRole	iam:PassedToService	repostspace.amazonaws.com	Write

Actions defined by AWS rePost Private

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
BatchAddChannelRoleToAccessors	Grants permission to add a role to users and groups in a private re:Post channel in your account	space*	aws:ResourceTag/${TagKey}	Write
BatchAddRole	Grants permission to add a role to users and groups in a private re:Post in your account	space*	aws:ResourceTag/${TagKey}	Write
BatchRemoveChannelRoleFromAccessors	Grants permission to remove a role from users and groups in a private re:Post channel in your account	space*	aws:ResourceTag/${TagKey}	Write
BatchRemoveRole	Grants permission to remove a role from users and groups in a private re:Post in your account	space*	aws:ResourceTag/${TagKey}	Write
CreateChannel	Grants permission to create a new channel in private re:Post in your account	space*	aws:ResourceTag/${TagKey}	Write
CreateSpace	Grants permission to create a new private re:Post in your account		aws:RequestTag/${TagKey} aws:TagKeys	Write
DeleteSpace	Grants permission to delete a private re:Post from your account	space*	aws:ResourceTag/${TagKey}	Write
DeregisterAdmin	Grants permission to remove an administrator to a private re:Post in your account	space*	aws:ResourceTag/${TagKey}	Write
GetChannel	Grants permission to get the description for a channel in private re:Post in your account	space*	aws:ResourceTag/${TagKey}	Read
GetSpace	Grants permission to get the description for a private re:Post in your account	space*	aws:ResourceTag/${TagKey}	Read
ListChannels	Grants permission to list all channels in a private re:Post in your account	space*	aws:ResourceTag/${TagKey}	Read
ListSpaces	Grants permission to list all private re:Posts in your account			Read
ListTagsForResource	Grants permission to list the tags associated with a resource	space*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Read
RegisterAdmin	Grants permission to add an administrator to a private re:Post in your account	space*	aws:ResourceTag/${TagKey}	Write
SendInvites	Grants permission to send invites to users of a private re:Post in your account	space*	aws:ResourceTag/${TagKey}	Write
TagResource	Grants permission to tag a resource	space*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
UntagResource	Grants permission to untag a resource	space*	aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
UpdateChannel	Grants permission to update a channel in private re:Post in your account	space*	aws:ResourceTag/${TagKey}	Write
UpdateSpace	Grants permission to update a private re:Post in your account	space*	aws:ResourceTag/${TagKey}	Write

Resource types defined by AWS rePost Private

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
space	arn:${Partition}:repostspace:${Region}:${Account}:space/${ResourceId}	aws:ResourceTag/${TagKey}

Condition keys for AWS rePost Private

AWS rePost Private defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys	Description	Type
aws:RequestTag/${TagKey}	Filters access by the presence of tag key-value pairs in the request	String
aws:ResourceTag/${TagKey}	Filters access by tag key-value pairs attached to the resource	String
aws:TagKeys	Filters access by the presence of tag keys in the request	ArrayOfString

Warning Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Document Conventions

AWS reInvent event pass amount charge to customer AWS account (eventsbilltoaws)

AWS Resilience Hub (resiliencehub)