Operations Actions Resource types Condition keys

Actions, resources, and condition keys for AWS B2B Data Interchange

AWS B2B Data Interchange (service prefix: b2bi) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by AWS B2B Data Interchange
Actions defined by AWS B2B Data Interchange
Resource types defined by AWS B2B Data Interchange
Condition keys for AWS B2B Data Interchange

API operations defined by AWS B2B Data Interchange

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Access level
CreateCapability	b2bi:CreateCapability	Write
CreateCapability	b2bi:TagResource	Tagging, Write
CreatePartnership	b2bi:CreatePartnership	Write
CreatePartnership	b2bi:TagResource	Tagging, Write
CreateProfile	b2bi:CreateProfile	Write
CreateProfile	b2bi:TagResource	Tagging, Write
CreateStarterMappingTemplate	b2bi:CreateStarterMappingTemplate	Write
CreateTransformer	b2bi:CreateTransformer	Write
CreateTransformer	b2bi:TagResource	Tagging, Write
DeleteCapability	b2bi:DeleteCapability	Write
DeletePartnership	b2bi:DeletePartnership	Write
DeleteProfile	b2bi:DeleteProfile	Write
DeleteTransformer	b2bi:DeleteTransformer	Write
GenerateMapping	b2bi:GenerateMapping	Write
GetCapability	b2bi:GetCapability	Read
GetPartnership	b2bi:GetPartnership	Read
GetProfile	b2bi:GetProfile	Read
GetTransformer	b2bi:GetTransformer	Read
GetTransformerJob	b2bi:GetTransformerJob	Read
ListCapabilities	b2bi:ListCapabilities	List
ListPartnerships	b2bi:ListPartnerships	List
ListProfiles	b2bi:ListProfiles	List
ListTagsForResource	b2bi:ListTagsForResource	Read
ListTransformers	b2bi:ListTransformers	List
StartTransformerJob	b2bi:StartTransformerJob	Write
TagResource	b2bi:TagResource	Tagging, Write
TestConversion	b2bi:TestConversion	Write
TestMapping	b2bi:TestMapping	Write
TestParsing	b2bi:TestParsing	Write
UntagResource	b2bi:UntagResource	Tagging, Write
UpdateCapability	b2bi:UpdateCapability	Write
UpdatePartnership	b2bi:UpdatePartnership	Write
UpdateProfile	b2bi:UpdateProfile	Write
UpdateTransformer	b2bi:UpdateTransformer	Write

Actions defined by AWS B2B Data Interchange

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
CreateCapability	Grants permission to create a capability	transformer	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreatePartnership	Grants permission to create a partnership	capability*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreatePartnership	Grants permission to create a partnership	profile*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateProfile	Grants permission to create a profile		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateStarterMappingTemplate	Grants permission to generate a starter JSONATA/XSLT template	transformer*	aws:ResourceTag/${TagKey}	Write
CreateTransformer	Grants permission to create a transformer		aws:RequestTag/${TagKey} aws:TagKeys	Write
DeleteCapability	Grants permission to delete a capability	capability*	aws:ResourceTag/${TagKey}	Write
DeletePartnership	Grants permission to delete an partnership	partnership*	aws:ResourceTag/${TagKey}	Write
DeleteProfile	Grants permission to delete a profile	profile*	aws:ResourceTag/${TagKey}	Write
DeleteTransformer	Grants permission to delete a transformer	transformer*	aws:ResourceTag/${TagKey}	Write
GenerateMapping	Grants permission to generate a starter JSONATA/XSLT mapping template from Amazon Bedrock	transformer*	aws:ResourceTag/${TagKey}	Write
GetCapability	Grants permission to get a capability	capability*	aws:ResourceTag/${TagKey}	Read
GetPartnership	Grants permission to get a partnership	partnership*	aws:ResourceTag/${TagKey}	Read
GetProfile	Grants permission to get a profile	profile*	aws:ResourceTag/${TagKey}	Read
GetTransformer	Grants permission to get a transformer	transformer*	aws:ResourceTag/${TagKey}	Read
GetTransformerJob	Grants permission to get a transformer job	transformer*	aws:ResourceTag/${TagKey}	Read
ListCapabilities	Grants permission to list all capabilities			List
ListPartnerships	Grants permission to list all partnerships			List
ListProfiles	Grants permission to list all profiles			List
ListTagsForResource	Grants permission to list tags for a B2Bi resource	capability	aws:ResourceTag/${TagKey}	Read
		partnership	aws:ResourceTag/${TagKey}
		profile	aws:ResourceTag/${TagKey}
		transformer	aws:ResourceTag/${TagKey}
ListTransformers	Grants permission to list all transformers			List
StartTransformerJob	Grants permission to transformer a document	transformer*	aws:ResourceTag/${TagKey}	Write
TagResource	Grants permission to tag a B2Bi resource	capability	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		partnership	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		profile	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		transformer	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
TestConversion	Grants permission to convert a JSON/XML to an edi document	transformer*	aws:ResourceTag/${TagKey}	Write
TestMapping	Grants permission to map a sample file	transformer*	aws:ResourceTag/${TagKey}	Write
TestParsing	Grants permission to parse an edi document	transformer*	aws:ResourceTag/${TagKey}	Write
UntagResource	Grants permission to untag a B2Bi resource	capability	aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		partnership	aws:ResourceTag/${TagKey} aws:TagKeys
		profile	aws:ResourceTag/${TagKey} aws:TagKeys
		transformer	aws:ResourceTag/${TagKey} aws:TagKeys
UpdateCapability	Grants permission to update a capability	capability*	aws:ResourceTag/${TagKey}	Write
UpdateCapability	Grants permission to update a capability	transformer	aws:ResourceTag/${TagKey}	Write
UpdatePartnership	Grants permission to update a partnership	capability	aws:ResourceTag/${TagKey}	Write
UpdatePartnership	Grants permission to update a partnership	partnership*	aws:ResourceTag/${TagKey}	Write
UpdateProfile	Grants permission to update a profile	profile*	aws:ResourceTag/${TagKey}	Write
UpdateTransformer	Grants permission to update a transformer	transformer*	aws:ResourceTag/${TagKey}	Write

Resource types defined by AWS B2B Data Interchange

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
capability	arn:${Partition}:b2bi:${Region}:${Account}:capability/${ResourceId}	aws:ResourceTag/${TagKey}
partnership	arn:${Partition}:b2bi:${Region}:${Account}:partnership/${ResourceId}	aws:ResourceTag/${TagKey}
profile	arn:${Partition}:b2bi:${Region}:${Account}:profile/${ResourceId}	aws:ResourceTag/${TagKey}
transformer	arn:${Partition}:b2bi:${Region}:${Account}:transformer/${ResourceId}	aws:ResourceTag/${TagKey}

Condition keys for AWS B2B Data Interchange

AWS B2B Data Interchange defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys	Description	Type
aws:RequestTag/${TagKey}	Filters access by the tags that are passed in the request	String
aws:ResourceTag/${TagKey}	Filters access by the tags associated with the resource	String
aws:TagKeys	Filters access by the tag keys that are passed in the request	ArrayOfString

Warning Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Document Conventions

AWS Auto Scaling (autoscaling-plans)

AWS Backup (backup)