Operations Actions Resource types Condition keys

Actions, resources, and condition keys for AWS Chatbot

AWS Chatbot (service prefix: chatbot) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

API operations defined by AWS Chatbot

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Condition key	Possible value(s)	Access level
AssociateToConfiguration	chatbot:AssociateToConfiguration			Write
CreateChimeWebhookConfiguration	chatbot:CreateChimeWebhookConfiguration			Write
	chatbot:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	chatbot.amazonaws.com	Write
CreateCustomAction	chatbot:CreateCustomAction			Write
CreateCustomAction	chatbot:TagResource			Tagging, Write
CreateMicrosoftTeamsChannelConfiguration	chatbot:CreateMicrosoftTeamsChannelConfiguration			Write
	chatbot:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	chatbot.amazonaws.com	Write
CreateSlackChannelConfiguration	chatbot:CreateSlackChannelConfiguration			Write
	chatbot:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	chatbot.amazonaws.com	Write
DeleteChimeWebhookConfiguration	chatbot:DeleteChimeWebhookConfiguration			Write
DeleteCustomAction	chatbot:DeleteCustomAction			Write
DeleteMicrosoftTeamsChannelConfiguration	chatbot:DeleteMicrosoftTeamsChannelConfiguration			Write
DeleteMicrosoftTeamsConfiguredTeam	chatbot:DeleteMicrosoftTeamsConfiguredTeam			Write
DeleteMicrosoftTeamsUserIdentity	chatbot:DeleteMicrosoftTeamsUserIdentity			Write
DeleteSlackChannelConfiguration	chatbot:DeleteSlackChannelConfiguration			Write
DeleteSlackUserIdentity	chatbot:DeleteSlackUserIdentity			Write
DeleteSlackWorkspaceAuthorization	chatbot:DeleteSlackWorkspaceAuthorization			Write
DescribeChimeWebhookConfigurations	chatbot:DescribeChimeWebhookConfigurations			Read
DescribeSlackChannelConfigurations	chatbot:DescribeSlackChannelConfigurations			Read
DescribeSlackUserIdentities	chatbot:DescribeSlackUserIdentities			Read
DescribeSlackWorkspaces	chatbot:DescribeSlackWorkspaces			Read
DisassociateFromConfiguration	chatbot:DisassociateFromConfiguration			Write
GetAccountPreferences	chatbot:GetAccountPreferences			Read
GetCustomAction	chatbot:GetCustomAction			Read
GetMicrosoftTeamsChannelConfiguration	chatbot:GetMicrosoftTeamsChannelConfiguration			Read
ListAssociations	chatbot:ListAssociations			Read
ListCustomActions	chatbot:ListCustomActions			List
ListMicrosoftTeamsChannelConfigurations	chatbot:ListMicrosoftTeamsChannelConfigurations			Read
ListMicrosoftTeamsConfiguredTeams	chatbot:ListMicrosoftTeamsConfiguredTeams			Read
ListMicrosoftTeamsUserIdentities	chatbot:ListMicrosoftTeamsUserIdentities			Read
ListTagsForResource	chatbot:ListTagsForResource			Read
TagResource	chatbot:TagResource			Tagging, Write
UntagResource	chatbot:UntagResource			Tagging, Write
UpdateAccountPreferences	chatbot:UpdateAccountPreferences			Write
UpdateChimeWebhookConfiguration	chatbot:UpdateChimeWebhookConfiguration			Write
UpdateChimeWebhookConfiguration	iam:PassRole	iam:PassedToService	chatbot.amazonaws.com	Write
UpdateCustomAction	chatbot:UpdateCustomAction			Write
UpdateMicrosoftTeamsChannelConfiguration	chatbot:UpdateMicrosoftTeamsChannelConfiguration			Write
UpdateMicrosoftTeamsChannelConfiguration	iam:PassRole	iam:PassedToService	chatbot.amazonaws.com	Write
UpdateSlackChannelConfiguration	chatbot:UpdateSlackChannelConfiguration			Write
UpdateSlackChannelConfiguration	iam:PassRole	iam:PassedToService	chatbot.amazonaws.com	Write

Actions defined by AWS Chatbot

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
AssociateToConfiguration	Grants permission to associate a resource with a configuration	ChatbotConfiguration*	aws:ResourceTag/${TagKey}	Write
AssociateToConfiguration		custom-action*	aws:ResourceTag/${TagKey}	Write
CreateChimeWebhookConfiguration	Grants permission to create an AWS Chatbot Chime Webhook Configuration		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateCustomAction	Grants permission to create a custom action		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateMicrosoftTeamsChannelConfiguration	Grants permission to create an AWS Chatbot Microsoft Teams Channel Configuration		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateSlackChannelConfiguration	Grants permission to create an AWS Chatbot Slack Channel Configuration		aws:RequestTag/${TagKey} aws:TagKeys	Write
DeleteChimeWebhookConfiguration	Grants permission to delete an AWS Chatbot Chime Webhook Configuration	ChatbotConfiguration*	aws:ResourceTag/${TagKey}	Write
DeleteCustomAction	Grants permission to delete a custom action	custom-action*	aws:ResourceTag/${TagKey}	Write
DeleteMicrosoftTeamsChannelConfiguration	Grants permission to delete an AWS Chatbot Microsoft Teams Channel Configuration	ChatbotConfiguration*	aws:ResourceTag/${TagKey}	Write
DeleteMicrosoftTeamsConfiguredTeam	Grants permission to delete the Microsoft Teams configured with AWS Chatbot in an AWS account			Write
DeleteMicrosoftTeamsUserIdentity	Grants permission to delete an AWS Chatbot Microsoft Teams User Identity			Write
DeleteSlackChannelConfiguration	Grants permission to delete an AWS Chatbot Slack Channel Configuration	ChatbotConfiguration*	aws:ResourceTag/${TagKey}	Write
DeleteSlackUserIdentity	Grants permission to delete an AWS Chatbot Slack User Identity			Write
DeleteSlackWorkspaceAuthorization	Grants permission to delete the Slack workspace authorization with AWS Chatbot, associated with an AWS account			Write
DescribeChimeWebhookConfigurations	Grants permission to list all AWS Chatbot Chime Webhook Configurations in an AWS Account			Read
DescribeSlackChannelConfigurations	Grants permission to list all AWS Chatbot Slack Channel Configurations in an AWS account			Read
DescribeSlackChannels	Grants permission to list all public Slack channels in the Slack workspace connected to the AWS Account onboarded with AWS Chatbot service			Read
DescribeSlackUserIdentities	Grants permission to describe AWS Chatbot Slack User Identities			Read
DescribeSlackWorkspaces	Grants permission to list all authorized Slack workspaces connected to the AWS Account onboarded with AWS Chatbot service			Read
DisassociateFromConfiguration	Grants permission to disassociate a resource from a configuration	ChatbotConfiguration*	aws:ResourceTag/${TagKey}	Write
DisassociateFromConfiguration		custom-action*	aws:ResourceTag/${TagKey}	Write
GetAccountPreferences	Grants permission to retrieve AWS Chatbot account preferences			Read
GetCustomAction	Grants permission to get a custom action	custom-action*	aws:ResourceTag/${TagKey}	Read
GetMicrosoftTeamsChannelConfiguration	Grants permission to get a single AWS Chatbot Microsoft Teams Channel Configurations in an AWS account		aws:ResourceTag/${TagKey}	Read
GetMicrosoftTeamsOauthParameters	Grants permission to generate OAuth parameters to request Microsoft Teams OAuth code to be used by the AWS Chatbot service			Read
GetSlackOauthParameters	Grants permission to generate OAuth parameters to request Slack OAuth code to be used by the AWS Chatbot service			Read
ListAssociations	Grants permission to list resources associated with a configuration	ChatbotConfiguration*	aws:ResourceTag/${TagKey}	Read
ListCustomActions	Grants permission to list custom actions			List
ListMicrosoftTeamsChannelConfigurations	Grants permission to list all AWS Chatbot Microsoft Teams Channel Configurations in an AWS account			Read
ListMicrosoftTeamsConfiguredTeams	Grants permission to list all Microsoft Teams connected to the AWS Account onboarded with AWS Chatbot service			Read
ListMicrosoftTeamsUserIdentities	Grants permission to describe AWS Chatbot Microsoft Teams User Identities			Read
ListTagsForResource	Grants permission to List all tags associated with the AWS Chatbot Channel Configuration			Read
RedeemMicrosoftTeamsOauthCode	Grants permission to redeem previously generated parameters with Microsoft APIs, to acquire OAuth tokens to be used by the AWS Chatbot service			Write
RedeemSlackOauthCode	Grants permission to redeem previously generated parameters with Slack API, to acquire OAuth tokens to be used by the AWS Chatbot service			Write
TagResource	Grants permission to create tags on AWS Chatbot Channel Configuration	ChatbotConfiguration	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
TagResource		custom-action	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
UntagResource	Grants permission to remove tags on AWS Chatbot Channel Configuration	ChatbotConfiguration	aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
UntagResource		custom-action	aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
UpdateAccountPreferences	Grants permission to update AWS Chatbot account preferences			Write
UpdateChimeWebhookConfiguration	Grants permission to update an AWS Chatbot Chime Webhook Configuration	ChatbotConfiguration*	aws:ResourceTag/${TagKey}	Write
UpdateCustomAction	Grants permission to update a custom action	custom-action*	aws:ResourceTag/${TagKey}	Write
UpdateMicrosoftTeamsChannelConfiguration	Grants permission to update an AWS Chatbot Microsoft Teams Channel Configuration	ChatbotConfiguration*	aws:ResourceTag/${TagKey}	Write
UpdateSlackChannelConfiguration	Grants permission to update an AWS Chatbot Slack Channel Configuration	ChatbotConfiguration*	aws:ResourceTag/${TagKey}	Write

Resource types defined by AWS Chatbot

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
ChatbotConfiguration	arn:${Partition}:chatbot::${Account}:chat-configuration/${ConfigurationType}/${ChatbotConfigurationName}	aws:ResourceTag/${TagKey}
custom-action	arn:${Partition}:chatbot::${Account}:custom-action/${ActionName}	aws:ResourceTag/${TagKey}

Condition keys for AWS Chatbot

AWS Chatbot defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys	Description	Type
aws:RequestTag/${TagKey}	Filters access by the tags that are passed in the request	String
aws:ResourceTag/${TagKey}	Filters access by the tags associated with the resource	String
aws:TagKeys	Filters access by the tag keys that are passed in the request	ArrayOfString

Warning Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Document Conventions

AWS Certificate Manager (acm)

AWS Clean Rooms (cleanrooms)