View a markdown version of this page

Actions, resources, and condition keys for AWS Mainframe Modernization Application Testing - Service Authorization Reference

Actions, resources, and condition keys for AWS Mainframe Modernization Application Testing

AWS Mainframe Modernization Application Testing (service prefix: apptest) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Actions defined by AWS Mainframe Modernization Application Testing

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions Description Resource types (*required) Condition keys Access level

CreateTestCase

Grants permission to create a test case

aws:RequestTag/${TagKey}

aws:TagKeys

Write

CreateTestConfiguration

Grants permission to create a test configuration

aws:RequestTag/${TagKey}

aws:TagKeys

Write

CreateTestSuite

Grants permission to create a test suite

aws:RequestTag/${TagKey}

aws:TagKeys

Write

DeleteTestCase

Grants permission to delete a test case

TestCase*

aws:ResourceTag/${TagKey}

Write

DeleteTestConfiguration

Grants permission to delete a test configuration

TestConfiguration*

aws:ResourceTag/${TagKey}

Write

DeleteTestRun

Grants permission to delete a test run

TestRun*

aws:ResourceTag/${TagKey}

Write

DeleteTestSuite

Grants permission to delete a test suite

TestSuite*

aws:ResourceTag/${TagKey}

Write

GetTestCase

Grants permission to get a test case

TestCase*

aws:ResourceTag/${TagKey}

Read

GetTestConfiguration

Grants permission to get a test configuration

TestConfiguration*

aws:ResourceTag/${TagKey}

Read

GetTestRunStep

Grants permission to get test run step

TestRun*

aws:ResourceTag/${TagKey}

Read

GetTestSuite

Grants permission to get a test suite

TestSuite*

aws:ResourceTag/${TagKey}

Read

ListTagsForResource

Grants permission to list tags for a resource

Read

ListTestCases

Grants permission to list test cases

List

ListTestConfigurations

Grants permission to list test configurations

List

ListTestRunSteps

Grants permission to list steps for a test run

TestRun*

aws:ResourceTag/${TagKey}

Read

ListTestRunTestCases

Grants permission to list test cases for a test run

TestRun*

aws:ResourceTag/${TagKey}

Read

ListTestRuns

Grants permission to list test runs

List

ListTestSuites

Grants permission to list test suites

List

StartTestRun

Grants permission to start a test run

aws:RequestTag/${TagKey}

aws:TagKeys

Write

TagResource

Grants permission to tag a resource

TestCase

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Tagging, Write

TestConfiguration

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

TestRun

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

TestSuite

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

UntagResource

Grants permission to untag a resource

TestCase

aws:ResourceTag/${TagKey}

aws:TagKeys

Tagging, Write

TestConfiguration

aws:ResourceTag/${TagKey}

aws:TagKeys

TestRun

aws:ResourceTag/${TagKey}

aws:TagKeys

TestSuite

aws:ResourceTag/${TagKey}

aws:TagKeys

UpdateTestCase

Grants permission to update a test case

TestCase*

aws:ResourceTag/${TagKey}

Write

UpdateTestConfiguration

Grants permission to update a test configuration

TestConfiguration*

aws:ResourceTag/${TagKey}

Write

UpdateTestSuite

Grants permission to update a test suite

TestSuite*

aws:ResourceTag/${TagKey}

Write

Resource types defined by AWS Mainframe Modernization Application Testing

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types ARN Condition keys

TestCase

arn:${Partition}:apptest:${Region}:${Account}:testcase/${TestCaseId}

aws:ResourceTag/${TagKey}

TestConfiguration

arn:${Partition}:apptest:${Region}:${Account}:testconfiguration/${TestConfigurationId}

aws:ResourceTag/${TagKey}

TestRun

arn:${Partition}:apptest:${Region}:${Account}:testrun/${TestRunId}

aws:ResourceTag/${TagKey}

TestSuite

arn:${Partition}:apptest:${Region}:${Account}:testsuite/${TestSuiteId}

aws:ResourceTag/${TagKey}

Condition keys for AWS Mainframe Modernization Application Testing

AWS Mainframe Modernization Application Testing defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys Description Type

aws:RequestTag/${TagKey}

Filters access by a tag key and value pair that is allowed in the request

String

aws:ResourceTag/${TagKey}

Filters access by a tag key and value pair of a resource

String

aws:TagKeys

Filters access by a list of tag keys that are allowed in the request

ArrayOfString