Operations Actions Resource types Condition keys

Actions, resources, and condition keys for AWS Telco Network Builder

AWS Telco Network Builder (service prefix: tnb) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by AWS Telco Network Builder
Actions defined by AWS Telco Network Builder
Resource types defined by AWS Telco Network Builder
Condition keys for AWS Telco Network Builder

API operations defined by AWS Telco Network Builder

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Access level
CancelSolNetworkOperation	tnb:CancelSolNetworkOperation	Write
CreateSolFunctionPackage	tnb:CreateSolFunctionPackage	Write
CreateSolFunctionPackage	tnb:TagResource	Tagging, Write
CreateSolNetworkInstance	tnb:CreateSolNetworkInstance	Write
CreateSolNetworkInstance	tnb:TagResource	Tagging, Write
CreateSolNetworkPackage	tnb:CreateSolNetworkPackage	Write
CreateSolNetworkPackage	tnb:TagResource	Tagging, Write
DeleteSolFunctionPackage	tnb:DeleteSolFunctionPackage	Write
DeleteSolNetworkInstance	tnb:DeleteSolNetworkInstance	Write
DeleteSolNetworkPackage	tnb:DeleteSolNetworkPackage	Write
GetSolFunctionInstance	tnb:GetSolFunctionInstance	Read
GetSolFunctionPackage	tnb:GetSolFunctionPackage	Read
GetSolFunctionPackageContent	tnb:GetSolFunctionPackageContent	Read
GetSolFunctionPackageDescriptor	tnb:GetSolFunctionPackageDescriptor	Read
GetSolNetworkInstance	tnb:GetSolNetworkInstance	Read
GetSolNetworkOperation	tnb:GetSolNetworkOperation	Read
GetSolNetworkPackage	tnb:GetSolNetworkPackage	Read
GetSolNetworkPackageContent	tnb:GetSolNetworkPackageContent	Read
GetSolNetworkPackageDescriptor	tnb:GetSolNetworkPackageDescriptor	Read
ListSolFunctionInstances	tnb:ListSolFunctionInstances	List
ListSolFunctionPackages	tnb:ListSolFunctionPackages	List
ListSolNetworkInstances	tnb:ListSolNetworkInstances	List
ListSolNetworkOperations	tnb:ListSolNetworkOperations	List
ListSolNetworkPackages	tnb:ListSolNetworkPackages	List
ListTagsForResource	tnb:ListTagsForResource	List
PutSolFunctionPackageContent	tnb:PutSolFunctionPackageContent	Write
PutSolNetworkPackageContent	tnb:PutSolNetworkPackageContent	Write
TagResource	tnb:TagResource	Tagging, Write
TerminateSolNetworkInstance	tnb:TagResource	Tagging, Write
TerminateSolNetworkInstance	tnb:TerminateSolNetworkInstance	Write
UntagResource	tnb:UntagResource	Tagging, Write
UpdateSolFunctionPackage	tnb:UpdateSolFunctionPackage	Write
UpdateSolNetworkInstance	tnb:TagResource	Tagging, Write
UpdateSolNetworkInstance	tnb:UpdateSolNetworkInstance	Write
UpdateSolNetworkPackage	tnb:UpdateSolNetworkPackage	Write
ValidateSolFunctionPackageContent	tnb:ValidateSolFunctionPackageContent	Write
ValidateSolNetworkPackageContent	tnb:ValidateSolNetworkPackageContent	Write

Actions defined by AWS Telco Network Builder

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
CancelSolNetworkOperation	Grants permission to cancel a network operation	network-operation*	aws:ResourceTag/${TagKey}	Write
CreateSolFunctionPackage	Grants permission to create a function package	function-package*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateSolNetworkInstance	Grants permission to create a network instance	network-instance*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateSolNetworkInstance	Grants permission to create a network instance	network-package*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateSolNetworkPackage	Grants permission to create a network package	network-package*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
DeleteSolFunctionPackage	Grants permission to delete a function package	function-package*	aws:ResourceTag/${TagKey}	Write
DeleteSolNetworkInstance	Grants permission to delete a network instance	network-instance*	aws:ResourceTag/${TagKey}	Write
DeleteSolNetworkPackage	Grants permission to delete a network package	network-package*	aws:ResourceTag/${TagKey}	Write
GetSolFunctionInstance	Grants permission to get a function instance	function-instance*	aws:ResourceTag/${TagKey}	Read
GetSolFunctionPackage	Grants permission to get a function package	function-package*	aws:ResourceTag/${TagKey}	Read
GetSolFunctionPackageContent	Grants permission to get a function package contents	function-package*	aws:ResourceTag/${TagKey}	Read
GetSolFunctionPackageDescriptor	Grants permission to get a function package descriptor	function-package*	aws:ResourceTag/${TagKey}	Read
GetSolNetworkInstance	Grants permission to get a network instance	network-instance*	aws:ResourceTag/${TagKey}	Read
GetSolNetworkOperation	Grants permission to get a network operation	network-operation*	aws:ResourceTag/${TagKey}	Read
GetSolNetworkPackage	Grants permission to get a network package	network-package*	aws:ResourceTag/${TagKey}	Read
GetSolNetworkPackageContent	Grants permission to get a network package contents	network-package*	aws:ResourceTag/${TagKey}	Read
GetSolNetworkPackageDescriptor	Grants permission to get a network package descriptor	network-package*	aws:ResourceTag/${TagKey}	Read
InstantiateSolNetworkInstance	Grants permission to instantiate a network instance	network-instance*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
ListSolFunctionInstances	Grants permission to list function instances	function-instance*	aws:ResourceTag/${TagKey}	List
ListSolFunctionPackages	Grants permission to list function packages	function-package*	aws:ResourceTag/${TagKey}	List
ListSolNetworkInstances	Grants permission to list network instances	network-instance*	aws:ResourceTag/${TagKey}	List
ListSolNetworkOperations	Grants permission to list network operations	network-operation*	aws:ResourceTag/${TagKey}	List
ListSolNetworkPackages	Grants permission to list network packages	network-package*	aws:ResourceTag/${TagKey}	List
ListTagsForResource	Grants permission to return a list of tags for a resource			List
PutSolFunctionPackageContent	Grants permission to upload function package content	function-package*	aws:ResourceTag/${TagKey}	Write
PutSolNetworkPackageContent	Grants permission to upload network package content	network-package*	aws:ResourceTag/${TagKey}	Write
TagResource	Grants permission to add tags to the specified resource	function-instance	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		function-package	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		network-instance	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		network-operation	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		network-package	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
TerminateSolNetworkInstance	Grants permission to terminate a network instance	network-instance*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
UntagResource	Grants permission to remove tags from the specified resource	function-instance	aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		function-package	aws:ResourceTag/${TagKey} aws:TagKeys
		network-instance	aws:ResourceTag/${TagKey} aws:TagKeys
		network-operation	aws:ResourceTag/${TagKey} aws:TagKeys
		network-package	aws:ResourceTag/${TagKey} aws:TagKeys
UpdateSolFunctionPackage	Grants permission to update a function package	function-package*	aws:ResourceTag/${TagKey}	Write
UpdateSolNetworkInstance	Grants permission to update a network instance	function-instance*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
UpdateSolNetworkInstance	Grants permission to update a network instance	network-instance*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
UpdateSolNetworkPackage	Grants permission to update a network package	network-package*	aws:ResourceTag/${TagKey}	Write
ValidateSolFunctionPackageContent	Grants permission to validate function package content	function-package*	aws:ResourceTag/${TagKey}	Write
ValidateSolNetworkPackageContent	Grants permission to validate network package content	network-package*	aws:ResourceTag/${TagKey}	Write

Resource types defined by AWS Telco Network Builder

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
function-instance	arn:${Partition}:tnb:${Region}:${Account}:function-instance/${FunctionInstanceId}	aws:ResourceTag/${TagKey}
function-package	arn:${Partition}:tnb:${Region}:${Account}:function-package/${FunctionPackageId}	aws:ResourceTag/${TagKey}
network-instance	arn:${Partition}:tnb:${Region}:${Account}:network-instance/${NetworkInstanceId}	aws:ResourceTag/${TagKey}
network-operation	arn:${Partition}:tnb:${Region}:${Account}:network-operation/${NetworkOperationId}	aws:ResourceTag/${TagKey}
network-package	arn:${Partition}:tnb:${Region}:${Account}:network-package/${NetworkPackageId}	aws:ResourceTag/${TagKey}

Condition keys for AWS Telco Network Builder

AWS Telco Network Builder defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys	Description	Type
aws:RequestTag/${TagKey}	Filters access by checking the presence of tag key-value pairs in the request	String
aws:ResourceTag/${TagKey}	Filters access by checking tag key-value pairs attached to the resource	String
aws:TagKeys	Filters access by presence of tag keys in the request	ArrayOfString

Warning Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Document Conventions

AWS Tax Settings (tax)

AWS Tiros (tiros)