Operations Actions Resource types Condition keys

Actions, resources, and condition keys for AWS Elemental MediaConnect

AWS Elemental MediaConnect (service prefix: mediaconnect) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by AWS Elemental MediaConnect
Actions defined by AWS Elemental MediaConnect
Resource types defined by AWS Elemental MediaConnect
Condition keys for AWS Elemental MediaConnect

API operations defined by AWS Elemental MediaConnect

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Condition key	Possible value(s)	Access level
AddBridgeOutputs	mediaconnect:AddBridgeOutputs			Write
AddBridgeSources	mediaconnect:AddBridgeSources			Write
AddFlowMediaStreams	mediaconnect:AddFlowMediaStreams			Write
AddFlowMediaStreams	mediaconnect:TagResource			Tagging, Write
AddFlowOutputs	mediaconnect:AddFlowOutputs			Write
	mediaconnect:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	mediaconnect.amazonaws.com	Write
AddFlowSources	mediaconnect:AddFlowSources			Write
	mediaconnect:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	mediaconnect.amazonaws.com	Write
AddFlowVpcInterfaces	mediaconnect:AddFlowVpcInterfaces			Write
	mediaconnect:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	mediaconnect.amazonaws.com	Write
BatchGetRouterInput	mediaconnect:GetRouterInput			Read
BatchGetRouterNetworkInterface	mediaconnect:GetRouterNetworkInterface			Read
BatchGetRouterOutput	mediaconnect:GetRouterOutput			Read
CreateBridge	mediaconnect:AddBridgeOutputs			Write
	mediaconnect:AddBridgeSources			Write
	mediaconnect:CreateBridge			Write
CreateFlow	mediaconnect:AddFlowMediaStreams			Write
	mediaconnect:AddFlowOutputs			Write
	mediaconnect:AddFlowSources			Write
	mediaconnect:AddFlowVpcInterfaces			Write
	mediaconnect:CreateFlow			Write
	mediaconnect:GrantFlowEntitlements			Write
	mediaconnect:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	mediaconnect.amazonaws.com	Write
CreateGateway	mediaconnect:CreateGateway			Write
CreateRouterInput	mediaconnect:AssociateRouterNetworkInterface			Write
	mediaconnect:CreateRouterInput			Write
	mediaconnect:TagResource			Tagging, Write
	mediaconnect:UpdateFlowOutput			Write
	iam:PassRole	iam:PassedToService	mediaconnect.amazonaws.com	Write
CreateRouterNetworkInterface	mediaconnect:CreateRouterNetworkInterface			Write
CreateRouterNetworkInterface	mediaconnect:TagResource			Tagging, Write
CreateRouterOutput	mediaconnect:AssociateRouterNetworkInterface			Write
	mediaconnect:CreateRouterOutput			Write
	mediaconnect:TagResource			Tagging, Write
	mediaconnect:UpdateFlowSource			Write
	iam:PassRole	iam:PassedToService	mediaconnect.amazonaws.com	Write
DeleteBridge	mediaconnect:DeleteBridge			Write
	mediaconnect:RemoveBridgeOutput			Write
	mediaconnect:RemoveBridgeSource			Write
DeleteFlow	mediaconnect:DeleteFlow			Write
	mediaconnect:RemoveFlowMediaStream			Write
	mediaconnect:RemoveFlowOutput			Write
	mediaconnect:RemoveFlowSource			Write
	mediaconnect:RemoveFlowVpcInterface			Write
	mediaconnect:RevokeFlowEntitlement			Write
DeleteGateway	mediaconnect:DeleteGateway			Write
DeleteRouterInput	mediaconnect:DeleteRouterInput			Write
DeleteRouterInput	mediaconnect:UpdateFlowOutput			Write
DeleteRouterNetworkInterface	mediaconnect:DeleteRouterNetworkInterface			Write
DeleteRouterOutput	mediaconnect:DeleteRouterOutput			Write
DeleteRouterOutput	mediaconnect:UpdateFlowSource			Write
DeregisterGatewayInstance	mediaconnect:DeregisterGatewayInstance			Write
DescribeBridge	mediaconnect:DescribeBridge			Read
DescribeFlow	mediaconnect:DescribeFlow			Read
DescribeFlowSourceMetadata	mediaconnect:DescribeFlowSourceMetadata			Read
DescribeFlowSourceThumbnail	mediaconnect:DescribeFlowSourceThumbnail			Read
DescribeGateway	mediaconnect:DescribeGateway			Read
DescribeGatewayInstance	mediaconnect:DescribeGatewayInstance			Read
DescribeOffering	mediaconnect:DescribeOffering			Read
DescribeReservation	mediaconnect:DescribeReservation			Read
GetRouterInput	mediaconnect:GetRouterInput			Read
GetRouterInputSourceMetadata	mediaconnect:GetRouterInputSourceMetadata			Read
GetRouterInputThumbnail	mediaconnect:GetRouterInputThumbnail			Read
GetRouterNetworkInterface	mediaconnect:GetRouterNetworkInterface			Read
GetRouterOutput	mediaconnect:GetRouterOutput			Read
GrantFlowEntitlements	mediaconnect:GrantFlowEntitlements			Write
	mediaconnect:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	mediaconnect.amazonaws.com	Write
ListBridges	mediaconnect:ListBridges			List
ListEntitlements	mediaconnect:ListEntitlements			List
ListFlows	mediaconnect:ListFlows			List
ListGatewayInstances	mediaconnect:ListGatewayInstances			List
ListGateways	mediaconnect:ListGateways			List
ListOfferings	mediaconnect:ListOfferings			List
ListReservations	mediaconnect:ListReservations			List
ListRouterInputs	mediaconnect:ListRouterInputs			List
ListRouterNetworkInterfaces	mediaconnect:ListRouterNetworkInterfaces			List
ListRouterOutputs	mediaconnect:ListRouterOutputs			List
ListTagsForResource	mediaconnect:ListTagsForResource			Read
PurchaseOffering	mediaconnect:PurchaseOffering			Write
RemoveBridgeOutput	mediaconnect:RemoveBridgeOutput			Write
RemoveBridgeSource	mediaconnect:RemoveBridgeSource			Write
RemoveFlowMediaStream	mediaconnect:RemoveFlowMediaStream			Write
RemoveFlowOutput	mediaconnect:RemoveFlowOutput			Write
RemoveFlowSource	mediaconnect:RemoveFlowSource			Write
RemoveFlowVpcInterface	mediaconnect:RemoveFlowVpcInterface			Write
RestartRouterInput	mediaconnect:RestartRouterInput			Write
RestartRouterOutput	mediaconnect:RestartRouterOutput			Write
RevokeFlowEntitlement	mediaconnect:RevokeFlowEntitlement			Write
StartFlow	mediaconnect:StartFlow			Write
StartRouterInput	mediaconnect:StartRouterInput			Write
StartRouterOutput	mediaconnect:StartRouterOutput			Write
StopFlow	mediaconnect:StopFlow			Write
StopRouterInput	mediaconnect:StopRouterInput			Write
StopRouterOutput	mediaconnect:StopRouterOutput			Write
TagResource	mediaconnect:TagResource			Tagging, Write
TakeRouterInput	mediaconnect:TakeRouterInput			Write
UntagResource	mediaconnect:UntagResource			Tagging, Write
UpdateBridge	mediaconnect:UpdateBridge			Write
UpdateBridgeOutput	mediaconnect:UpdateBridgeOutput			Write
UpdateBridgeSource	mediaconnect:UpdateBridgeSource			Write
UpdateBridgeState	mediaconnect:UpdateBridgeState			Write
UpdateFlow	mediaconnect:UpdateFlow			Write
UpdateFlowEntitlement	mediaconnect:UpdateFlowEntitlement			Write
UpdateFlowEntitlement	iam:PassRole	iam:PassedToService	mediaconnect.amazonaws.com	Write
UpdateFlowMediaStream	mediaconnect:UpdateFlowMediaStream			Write
UpdateFlowOutput	mediaconnect:UpdateFlowOutput			Write
UpdateFlowOutput	iam:PassRole	iam:PassedToService	mediaconnect.amazonaws.com	Write
UpdateFlowSource	mediaconnect:UpdateFlowSource			Write
UpdateFlowSource	iam:PassRole	iam:PassedToService	mediaconnect.amazonaws.com	Write
UpdateGatewayInstance	mediaconnect:UpdateGatewayInstance			Write
UpdateRouterInput	mediaconnect:AssociateRouterNetworkInterface			Write
	mediaconnect:UpdateFlowOutput			Write
	mediaconnect:UpdateRouterInput			Write
	iam:PassRole	iam:PassedToService	mediaconnect.amazonaws.com	Write
UpdateRouterNetworkInterface	mediaconnect:UpdateRouterNetworkInterface			Write
UpdateRouterOutput	mediaconnect:AssociateRouterNetworkInterface			Write
	mediaconnect:UpdateFlowSource			Write
	mediaconnect:UpdateRouterOutput			Write
	iam:PassRole	iam:PassedToService	mediaconnect.amazonaws.com	Write

Actions defined by AWS Elemental MediaConnect

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
AddBridgeOutputs	Grants permission to add outputs to an existing bridge	Bridge*		Write
AddBridgeSources	Grants permission to add sources to an existing bridge	Bridge*		Write
AddFlowMediaStreams	Grants permission to add media streams to any flow	Flow*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
AddFlowMediaStreams	Grants permission to add media streams to any flow	MediaStream*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
AddFlowOutputs	Grants permission to add outputs to any flow	Flow*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
AddFlowOutputs	Grants permission to add outputs to any flow	Output*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
AddFlowSources	Grants permission to add sources to any flow	Flow*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
AddFlowSources	Grants permission to add sources to any flow	Source*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
AddFlowVpcInterfaces	Grants permission to add VPC interfaces to any flow	Flow*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
AddFlowVpcInterfaces	Grants permission to add VPC interfaces to any flow	VpcInterface*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
AssociateRouterNetworkInterface	Grants permission to associate a router network interface			Write
CreateBridge	Grants permission to create bridges	Bridge*		Write
CreateFlow	Grants permission to create flows	Flow*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateGateway	Grants permission to create gateways	Gateway*		Write
CreateRouterInput	Grants permission to create a new router input in AWS Elemental MediaConnect	RouterInput*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateRouterNetworkInterface	Grants permission to create a new router network interface in AWS Elemental MediaConnect	RouterNetworkInterface*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateRouterOutput	Grants permission to create a new router output in AWS Elemental MediaConnect	RouterOutput*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
DeleteBridge	Grants permission to delete bridges	Bridge*		Write
DeleteFlow	Grants permission to delete flows	Flow*	aws:ResourceTag/${TagKey}	Write
DeleteGateway	Grants permission to delete gateways	Gateway*		Write
DeleteRouterInput	Grants permission to delete a router input in AWS Elemental MediaConnect	RouterInput*	aws:ResourceTag/${TagKey}	Write
DeleteRouterNetworkInterface	Grants permission to delete a router network interface from AWS Elemental MediaConnect	RouterNetworkInterface*	aws:ResourceTag/${TagKey}	Write
DeleteRouterOutput	Grants permission to delete a router output from AWS Elemental MediaConnect	RouterOutput*	aws:ResourceTag/${TagKey}	Write
DeregisterGatewayInstance	Grants permission to deregister gateway instance	GatewayInstance*		Write
DescribeBridge	Grants permission to display the details of a bridge	Bridge*		Read
DescribeFlow	Grants permission to display the details of a flow including the flow ARN, name, and Availability Zone, as well as details about the source, outputs, and entitlements	Flow*	aws:ResourceTag/${TagKey}	Read
DescribeFlowSourceMetadata	Grants permission to view information about the flow's source transport stream and programs	Flow*	aws:ResourceTag/${TagKey}	Read
DescribeFlowSourceThumbnail	Grants permission to view flow's source thumbnail	Flow*	aws:ResourceTag/${TagKey}	Read
DescribeGateway	Grants permission to display the details of a gateway including the gateway ARN, name, and CIDR blocks, as well as details about the networks	Gateway*		Read
DescribeGatewayInstance	Grants permission to display the details of a gateway instance	GatewayInstance*		Read
DescribeOffering	Grants permission to display the details of an offering	Offering*		Read
DescribeReservation	Grants permission to display the details of a reservation	Reservation*		Read
DiscoverGatewayPollEndpoint	Grants permission to discover gateway poll endpoint	Gateway*		Read
GetRouterInput	Grants permission to retrieve information about a specific router input in AWS Elemental MediaConnect	RouterInput*	aws:ResourceTag/${TagKey}	Read
GetRouterInputSourceMetadata	Grants permission to retrieve metadata about a router input source in AWS Elemental MediaConnect	RouterInput*	aws:ResourceTag/${TagKey}	Read
GetRouterInputThumbnail	Grants permission to retrieve the thumbnail for a router input in AWS Elemental MediaConnect	RouterInput*	aws:ResourceTag/${TagKey}	Read
GetRouterNetworkInterface	Grants permission to retrieve information about a specific router network interface in AWS Elemental MediaConnect	RouterNetworkInterface*	aws:ResourceTag/${TagKey}	Read
GetRouterOutput	Grants permission to retrieve information about a specific router output in AWS Elemental MediaConnect	RouterOutput*	aws:ResourceTag/${TagKey}	Read
GrantFlowEntitlements	Grants permission to grant entitlements on any flow	Entitlement*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
GrantFlowEntitlements	Grants permission to grant entitlements on any flow	Flow*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
ListBridges	Grants permission to display a list of bridges that are associated with this account and an optionally specified Arn			List
ListEntitlements	Grants permission to display a list of all entitlements that have been granted to the account			List
ListFlows	Grants permission to display a list of flows that are associated with this account			List
ListGatewayInstances	Grants permission to display a list of instances that are associated with this gateway			List
ListGateways	Grants permission to display a list of gateways that are associated with this account			List
ListOfferings	Grants permission to display a list of all offerings that are available to the account in the current AWS Region			List
ListReservations	Grants permission to display a list of all reservations that have been purchased by the account in the current AWS Region			List
ListRouterInputs	Grants permission to retrieve a list of router inputs in AWS Elemental MediaConnect			List
ListRouterNetworkInterfaces	Grants permission to retrieve a list of router network interfaces in AWS Elemental MediaConnect			List
ListRouterOutputs	Grants permission to retrieve a list of router outputs in AWS Elemental MediaConnect			List
ListTagsForResource	Grants permission to display a list of all tags associated with a resource			Read
PollGateway	Grants permission to poll gateway			Write
PurchaseOffering	Grants permission to purchase an offering	Reservation*		Write
RemoveBridgeOutput	Grants permission to remove an output of an existing bridge	Bridge*		Write
RemoveBridgeSource	Grants permission to remove a source of an existing bridge	Bridge*		Write
RemoveFlowMediaStream	Grants permission to remove media streams from any flow	Flow*	aws:ResourceTag/${TagKey}	Write
RemoveFlowMediaStream	Grants permission to remove media streams from any flow	MediaStream*	aws:ResourceTag/${TagKey}	Write
RemoveFlowOutput	Grants permission to remove outputs from any flow	Flow*	aws:ResourceTag/${TagKey}	Write
RemoveFlowOutput	Grants permission to remove outputs from any flow	Output*	aws:ResourceTag/${TagKey}	Write
RemoveFlowSource	Grants permission to remove sources from any flow	Flow*	aws:ResourceTag/${TagKey}	Write
RemoveFlowSource	Grants permission to remove sources from any flow	Source*	aws:ResourceTag/${TagKey}	Write
RemoveFlowVpcInterface	Grants permission to remove VPC interfaces from any flow	Flow*	aws:ResourceTag/${TagKey}	Write
RemoveFlowVpcInterface	Grants permission to remove VPC interfaces from any flow	VpcInterface*	aws:ResourceTag/${TagKey}	Write
RestartRouterInput	Grants permission to restart a router input in AWS Elemental MediaConnect	RouterInput*	aws:ResourceTag/${TagKey}	Write
RestartRouterOutput	Grants permission to restart a router output in AWS Elemental MediaConnect	RouterOutput*	aws:ResourceTag/${TagKey}	Write
RevokeFlowEntitlement	Grants permission to revoke entitlements on any flow	Entitlement*	aws:ResourceTag/${TagKey}	Write
RevokeFlowEntitlement	Grants permission to revoke entitlements on any flow	Flow*	aws:ResourceTag/${TagKey}	Write
StartFlow	Grants permission to start flows	Flow*	aws:ResourceTag/${TagKey}	Write
StartRouterInput	Grants permission to start a router input in AWS Elemental MediaConnect	RouterInput*	aws:ResourceTag/${TagKey}	Write
StartRouterOutput	Grants permission to start a router output in AWS Elemental MediaConnect	RouterOutput*	aws:ResourceTag/${TagKey}	Write
StopFlow	Grants permission to stop flows	Flow*	aws:ResourceTag/${TagKey}	Write
StopRouterInput	Grants permission to stop a router input in AWS Elemental MediaConnect	RouterInput*	aws:ResourceTag/${TagKey}	Write
StopRouterOutput	Grants permission to stops a router output in AWS Elemental MediaConnect	RouterOutput*	aws:ResourceTag/${TagKey}	Write
SubmitGatewayStateChange	Grants permission to submit gateway state change			Write
TagResource	Grants permission to associate tags with resources	Entitlement	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		Flow	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		MediaStream	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		Output	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		RouterInput	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		RouterNetworkInterface	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		RouterOutput	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		Source	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		VpcInterface	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
TakeRouterInput	Grants permission to associate a router input with a router output in AWS Elemental MediaConnect	RouterOutput*	aws:ResourceTag/${TagKey}	Write
UntagResource	Grants permission to remove tags from resources	Entitlement	aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		Flow	aws:ResourceTag/${TagKey} aws:TagKeys
		MediaStream	aws:ResourceTag/${TagKey} aws:TagKeys
		Output	aws:ResourceTag/${TagKey} aws:TagKeys
		RouterInput	aws:ResourceTag/${TagKey} aws:TagKeys
		RouterNetworkInterface	aws:ResourceTag/${TagKey} aws:TagKeys
		RouterOutput	aws:ResourceTag/${TagKey} aws:TagKeys
		Source	aws:ResourceTag/${TagKey} aws:TagKeys
		VpcInterface	aws:ResourceTag/${TagKey} aws:TagKeys
UpdateBridge	Grants permission to update bridges	Bridge*		Write
UpdateBridgeOutput	Grants permission to update an output of an existing bridge	Bridge*		Write
UpdateBridgeSource	Grants permission to update a source of an existing bridge	Bridge*		Write
UpdateBridgeState	Grants permission to update the state of an existing bridge	Bridge*		Write
UpdateFlow	Grants permission to update flows	Flow*	aws:ResourceTag/${TagKey}	Write
UpdateFlowEntitlement	Grants permission to update entitlements on any flow	Flow*	aws:ResourceTag/${TagKey}	Write
UpdateFlowMediaStream	Grants permission to update media streams on any flow	Flow*	aws:ResourceTag/${TagKey}	Write
UpdateFlowMediaStream	Grants permission to update media streams on any flow	MediaStream*	aws:ResourceTag/${TagKey}	Write
UpdateFlowOutput	Grants permission to update outputs on any flow	Flow*	aws:ResourceTag/${TagKey}	Write
UpdateFlowOutput	Grants permission to update outputs on any flow	Output*	aws:ResourceTag/${TagKey}	Write
UpdateFlowSource	Grants permission to update the source of any flow	Flow*	aws:ResourceTag/${TagKey}	Write
UpdateFlowSource	Grants permission to update the source of any flow	Source*	aws:ResourceTag/${TagKey}	Write
UpdateGatewayInstance	Grants permission to update the configuration of an existing Gateway Instance	GatewayInstance*		Write
UpdateRouterInput	Grants permission to update the configuration of a router input in AWS Elemental MediaConnect	RouterInput*	aws:ResourceTag/${TagKey}	Write
UpdateRouterNetworkInterface	Grants permission to updated the configuration of a router network interface in AWS Elemental MediaConnect	RouterNetworkInterface*	aws:ResourceTag/${TagKey}	Write
UpdateRouterOutput	Grants permission to update the configuration of a router output in AWS Elemental MediaConnect	RouterOutput*	aws:ResourceTag/${TagKey}	Write

Resource types defined by AWS Elemental MediaConnect

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
Bridge	arn:${Partition}:mediaconnect:${Region}:${Account}:bridge:${BridgeId}:${BridgeName}
Entitlement	arn:${Partition}:mediaconnect:${Region}:${Account}:entitlement:${FlowId}:${EntitlementName}	aws:ResourceTag/${TagKey}
Flow	arn:${Partition}:mediaconnect:${Region}:${Account}:flow:${FlowId}:${FlowName}	aws:ResourceTag/${TagKey}
Gateway	arn:${Partition}:mediaconnect:${Region}:${Account}:gateway:${GatewayId}:${GatewayName}
GatewayInstance	arn:${Partition}:mediaconnect:${Region}:${Account}:gateway:${GatewayId}:${GatewayName}:instance:${InstanceId}
MediaStream	arn:${Partition}:mediaconnect:${Region}:${Account}:flow:${FlowId}:${FlowName}/mediaStream/${MediaStreamName}	aws:ResourceTag/${TagKey}
Offering	arn:${Partition}:mediaconnect:${Region}:offering:${OfferingId}
Output	arn:${Partition}:mediaconnect:${Region}:${Account}:output:${OutputId}:${OutputName}	aws:ResourceTag/${TagKey}
Reservation	arn:${Partition}:mediaconnect:${Region}:${Account}:reservation:${ReservationId}:${ReservationName}
RouterInput	arn:${Partition}:mediaconnect:${Region}:${Account}:routerInput:${RouterInputId}	aws:ResourceTag/${TagKey}
RouterNetworkInterface	arn:${Partition}:mediaconnect:${Region}:${Account}:routerNetworkInterface:${RouterNetworkInterfaceId}	aws:ResourceTag/${TagKey}
RouterOutput	arn:${Partition}:mediaconnect:${Region}:${Account}:routerOutput:${RouterOutputId}	aws:ResourceTag/${TagKey}
Source	arn:${Partition}:mediaconnect:${Region}:${Account}:source:${SourceId}:${SourceName}	aws:ResourceTag/${TagKey}
VpcInterface	arn:${Partition}:mediaconnect:${Region}:${Account}:flow:${FlowId}:${FlowName}/vpcInterface/${VpcInterfaceName}	aws:ResourceTag/${TagKey}

Condition keys for AWS Elemental MediaConnect

AWS Elemental MediaConnect defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys	Description	Type
aws:RequestTag/${TagKey}	Filters access by tags that are passed in the request	String
aws:ResourceTag/${TagKey}	Filters access by tags associated with the resource	String
aws:TagKeys	Filters access by tag keys that are passed in the request	ArrayOfString

Warning Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Document Conventions

AWS Elemental Inference (elemental-inference)

AWS Elemental MediaConvert (mediaconvert)