View a markdown version of this page

Actions, resources, and condition keys for AWS User Subscriptions - Service Authorization Reference

Actions, resources, and condition keys for AWS User Subscriptions

AWS User Subscriptions (service prefix: user-subscriptions) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Actions defined by AWS User Subscriptions

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions Description Resource types (*required) Condition keys Access level

CreateClaim

Grants permission to create a User subscription Claim

user-subscriptions:CreateForSelf

Write

CreateClaimAddOn

Grants permission to create a User subscription Claim add-on

Write

DeleteAutoTopUpRule

Grants permission to delete a User subscription auto-top-up rule

Write

DeleteClaim

Grants permission to delete a User subscription Claim

Write

GetAutoTopUpRule

Grants permission to get a User subscription auto-top-up rule

Read

GetEffectiveUsageLimit

Grants permission to get a User subscription effective usage limit

Read

GetUsageLimitHistory

Grants permission to get User subscription usage limit history

Read

ListApplicationClaims

Grants permission to list all User subscription Claims for Application

List

ListClaimAddOns

Grants permission to list all User subscription Claim add-ons

List

ListClaims

Grants permission to list all User subscription Claims

List

ListEntitlements

Grants permission to list all User subscription entitlements

List

ListUsageLimits

Grants permission to list all User subscription usage limits

List

ListUserSubscriptions

Grants permission to list all User subscriptions

List

SetAutoTopUpRule

Grants permission to set a User subscription auto-top-up rule

Write

SetOverageConfig

Grants permission to set a User subscription overage configuration

Write

SetUsageLimit

Grants permission to set a User subscription usage limit

Write

UpdateClaim

Grants permission to update a User subscription Claim

Write

Resource types defined by AWS User Subscriptions

AWS User Subscriptions does not support specifying a resource ARN in the Resource element of an IAM policy statement.

Condition keys for AWS User Subscriptions

AWS User Subscriptions defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys Description Type

user-subscriptions:CreateForSelf

Filters access by only allowing creation of User subscription Claims for the caller

Bool