Operations Actions Permission-only actions Resource types Condition keys

Actions, resources, and condition keys for Amazon Chime

Amazon Chime (service prefix: chime) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

API operations defined by Amazon Chime

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	SDK client	IAM action	Condition key	Possible value(s)	Access level
BatchCreateRoomMembership	chime	chime:BatchCreateRoomMembership			Write
BatchDeletePhoneNumber	chime	chime:BatchDeletePhoneNumber			Write
BatchUpdatePhoneNumber	chime	chime:BatchUpdatePhoneNumber			Write
CreateAccount	chime	chime:CreateAccount			Write
CreateBot	chime	chime:CreateBot			Write
CreateMeetingDialOut	chime	chime:CreateMeetingDialOut			Write
CreatePhoneNumberOrder	chime	chime:CreatePhoneNumberOrder			Write
CreateRoom	chime	chime:CreateRoom			Write
CreateRoomMembership	chime	chime:CreateRoomMembership			Write
DeleteAccount	chime	chime:DeleteAccount			Write
DeleteEventsConfiguration	chime	chime:DeleteEventsConfiguration			Write
DeletePhoneNumber	chime	chime:DeletePhoneNumber			Write
DeleteRoom	chime	chime:DeleteRoom			Write
DeleteRoomMembership	chime	chime:DeleteRoomMembership			Write
GetAccount	chime	chime:GetAccount			Read
GetAccountSettings	chime	chime:GetAccountSettings			Read
GetBot	chime	chime:GetBot			Read
GetEventsConfiguration	chime	chime:GetEventsConfiguration			Read
GetGlobalSettings	chime	chime:GetGlobalSettings			Read
GetPhoneNumber	chime	chime:GetPhoneNumber			Read
GetPhoneNumberOrder	chime	chime:GetPhoneNumberOrder			Read
GetPhoneNumberSettings	chime	chime:GetPhoneNumberSettings			Read
GetRetentionSettings	chime	chime:GetRetentionSettings			Read
GetRoom	chime	chime:GetRoom			Read
GetUser	chime	chime:GetUser			Read
GetUserSettings	chime	chime:GetUserSettings			Read
InviteUsers	chime	chime:InviteUsers			Write
ListAccounts	chime	chime:ListAccounts			List
ListBots	chime	chime:ListBots			List
ListPhoneNumberOrders	chime	chime:ListPhoneNumberOrders			List
ListPhoneNumbers	chime	chime:ListPhoneNumbers			List
ListRoomMemberships	chime	chime:ListRoomMemberships			List
ListRooms	chime	chime:ListRooms			List
ListSupportedPhoneNumberCountries	chime	chime:ListSupportedPhoneNumberCountries			List
ListUsers	chime	chime:ListUsers			List
LogoutUser	chime	chime:LogoutUser			Write
PutEventsConfiguration	chime	chime:PutEventsConfiguration			Write
PutRetentionSettings	chime	chime:PutRetentionSettings			Write
RedactConversationMessage	chime	chime:RedactConversationMessage			Write
RedactRoomMessage	chime	chime:RedactRoomMessage			Write
RegenerateSecurityToken	chime	chime:RegenerateSecurityToken			Write
RestorePhoneNumber	chime	chime:RestorePhoneNumber			Write
SearchAvailablePhoneNumbers	chime	chime:SearchAvailablePhoneNumbers			Read
UpdateBot	chime	chime:UpdateBot			Write
UpdateGlobalSettings	chime	chime:UpdateGlobalSettings			Write
UpdatePhoneNumber	chime	chime:UpdatePhoneNumber			Write
UpdatePhoneNumberSettings	chime	chime:UpdatePhoneNumberSettings			Write
UpdateRoom	chime	chime:UpdateRoom			Write
UpdateRoomMembership	chime	chime:UpdateRoomMembership			Write
CreateAppInstance	chime-sdk-identity	chime:CreateAppInstance			Write
CreateAppInstance	chime-sdk-identity	chime:TagResource			Tagging, Write
CreateAppInstanceAdmin	chime-sdk-identity	chime:CreateAppInstanceAdmin			Write
CreateAppInstanceBot	chime-sdk-identity	chime:CreateAppInstanceBot			Write
CreateAppInstanceBot	chime-sdk-identity	chime:TagResource			Tagging, Write
CreateAppInstanceUser	chime-sdk-identity	chime:CreateAppInstanceUser			Write
		chime:PutAppInstanceUserExpirationSettings			Write
		chime:TagResource			Tagging, Write
DeleteAppInstance	chime-sdk-identity	chime:DeleteAppInstance			Write
DeleteAppInstanceAdmin	chime-sdk-identity	chime:DeleteAppInstanceAdmin			Write
DeleteAppInstanceBot	chime-sdk-identity	chime:DeleteAppInstanceBot			Write
DeleteAppInstanceUser	chime-sdk-identity	chime:DeleteAppInstanceUser			Write
DeregisterAppInstanceUserEndpoint	chime-sdk-identity	chime:DeregisterAppInstanceUserEndpoint			Write
DescribeAppInstance	chime-sdk-identity	chime:DescribeAppInstance			Read
DescribeAppInstanceAdmin	chime-sdk-identity	chime:DescribeAppInstanceAdmin			Read
DescribeAppInstanceBot	chime-sdk-identity	chime:DescribeAppInstanceBot			Read
DescribeAppInstanceUser	chime-sdk-identity	chime:DescribeAppInstanceUser			Read
DescribeAppInstanceUserEndpoint	chime-sdk-identity	chime:DescribeAppInstanceUserEndpoint			Read
GetAppInstanceRetentionSettings	chime-sdk-identity	chime:GetAppInstanceRetentionSettings			Read
ListAppInstanceAdmins	chime-sdk-identity	chime:ListAppInstanceAdmins			List
ListAppInstanceBots	chime-sdk-identity	chime:ListAppInstanceBots			List
ListAppInstanceUserEndpoints	chime-sdk-identity	chime:ListAppInstanceUserEndpoints			List
ListAppInstanceUsers	chime-sdk-identity	chime:ListAppInstanceUsers			List
ListAppInstances	chime-sdk-identity	chime:ListAppInstances			List
ListTagsForResource	chime-sdk-identity	chime:ListTagsForResource			Read
PutAppInstanceRetentionSettings	chime-sdk-identity	chime:PutAppInstanceRetentionSettings			Write
PutAppInstanceUserExpirationSettings	chime-sdk-identity	chime:PutAppInstanceUserExpirationSettings			Write
RegisterAppInstanceUserEndpoint	chime-sdk-identity	chime:RegisterAppInstanceUserEndpoint			Write
TagResource	chime-sdk-identity	chime:TagResource			Tagging, Write
UntagResource	chime-sdk-identity	chime:UntagResource			Tagging, Write
UpdateAppInstance	chime-sdk-identity	chime:UpdateAppInstance			Write
UpdateAppInstanceBot	chime-sdk-identity	chime:UpdateAppInstanceBot			Write
UpdateAppInstanceUser	chime-sdk-identity	chime:UpdateAppInstanceUser			Write
UpdateAppInstanceUserEndpoint	chime-sdk-identity	chime:UpdateAppInstanceUserEndpoint			Write
CreateMediaCapturePipeline	chime-sdk-media-pipelines	chime:CreateMediaCapturePipeline			Write
		chime:TagResource			Tagging, Write
		iam:PassRole	iam:PassedToService	mediapipelines.chime.amazonaws.com	Write
CreateMediaConcatenationPipeline	chime-sdk-media-pipelines	chime:CreateMediaConcatenationPipeline			Write
CreateMediaConcatenationPipeline	chime-sdk-media-pipelines	chime:TagResource			Tagging, Write
CreateMediaInsightsPipeline	chime-sdk-media-pipelines	chime:CreateMediaInsightsPipeline			Write
CreateMediaInsightsPipelineConfiguration	chime-sdk-media-pipelines	chime:CreateMediaInsightsPipelineConfiguration			Write
		chime:TagResource			Tagging, Write
		iam:PassRole	iam:PassedToService	mediapipelines.chime.amazonaws.com	Write
CreateMediaLiveConnectorPipeline	chime-sdk-media-pipelines	chime:CreateMediaLiveConnectorPipeline			Write
CreateMediaLiveConnectorPipeline	chime-sdk-media-pipelines	chime:TagResource			Tagging, Write
CreateMediaPipelineKinesisVideoStreamPool	chime-sdk-media-pipelines	chime:CreateMediaPipelineKinesisVideoStreamPool			Write
CreateMediaPipelineKinesisVideoStreamPool	chime-sdk-media-pipelines	chime:TagResource			Tagging, Write
CreateMediaStreamPipeline	chime-sdk-media-pipelines	chime:CreateMediaStreamPipeline			Write
CreateMediaStreamPipeline	chime-sdk-media-pipelines	chime:TagResource			Tagging, Write
DeleteMediaCapturePipeline	chime-sdk-media-pipelines	chime:DeleteMediaCapturePipeline			Write
DeleteMediaInsightsPipelineConfiguration	chime-sdk-media-pipelines	chime:DeleteMediaInsightsPipelineConfiguration			Write
DeleteMediaPipeline	chime-sdk-media-pipelines	chime:DeleteMediaPipeline			Write
DeleteMediaPipelineKinesisVideoStreamPool	chime-sdk-media-pipelines	chime:DeleteMediaPipelineKinesisVideoStreamPool			Write
GetMediaCapturePipeline	chime-sdk-media-pipelines	chime:GetMediaCapturePipeline			Read
GetMediaInsightsPipelineConfiguration	chime-sdk-media-pipelines	chime:GetMediaInsightsPipelineConfiguration			Read
GetMediaPipeline	chime-sdk-media-pipelines	chime:GetMediaPipeline			Read
GetMediaPipelineKinesisVideoStreamPool	chime-sdk-media-pipelines	chime:GetMediaPipelineKinesisVideoStreamPool			Read
GetSpeakerSearchTask	chime-sdk-media-pipelines	chime:GetSpeakerSearchTask			Read
GetVoiceToneAnalysisTask	chime-sdk-media-pipelines	chime:GetVoiceToneAnalysisTask			Read
ListMediaCapturePipelines	chime-sdk-media-pipelines	chime:ListMediaCapturePipelines			List
ListMediaInsightsPipelineConfigurations	chime-sdk-media-pipelines	chime:ListMediaInsightsPipelineConfigurations			List
ListMediaPipelineKinesisVideoStreamPools	chime-sdk-media-pipelines	chime:ListMediaPipelineKinesisVideoStreamPools			List
ListMediaPipelines	chime-sdk-media-pipelines	chime:ListMediaPipelines			List
ListTagsForResource	chime-sdk-media-pipelines	chime:ListTagsForResource			Read
StartSpeakerSearchTask	chime-sdk-media-pipelines	chime:StartSpeakerSearchTask			Write
StartVoiceToneAnalysisTask	chime-sdk-media-pipelines	chime:StartVoiceToneAnalysisTask			Write
StopSpeakerSearchTask	chime-sdk-media-pipelines	chime:StopSpeakerSearchTask			Write
StopVoiceToneAnalysisTask	chime-sdk-media-pipelines	chime:StopVoiceToneAnalysisTask			Write
TagResource	chime-sdk-media-pipelines	chime:TagResource			Tagging, Write
UntagResource	chime-sdk-media-pipelines	chime:UntagResource			Tagging, Write
UpdateMediaInsightsPipelineConfiguration	chime-sdk-media-pipelines	chime:UpdateMediaInsightsPipelineConfiguration			Write
UpdateMediaInsightsPipelineConfiguration	chime-sdk-media-pipelines	iam:PassRole	iam:PassedToService	mediapipelines.chime.amazonaws.com	Write
UpdateMediaInsightsPipelineStatus	chime-sdk-media-pipelines	chime:UpdateMediaInsightsPipelineStatus			Write
UpdateMediaPipelineKinesisVideoStreamPool	chime-sdk-media-pipelines	chime:UpdateMediaPipelineKinesisVideoStreamPool			Write
BatchCreateAttendee	chime-sdk-meetings	chime:BatchCreateAttendee			Write
BatchUpdateAttendeeCapabilitiesExcept	chime-sdk-meetings	chime:BatchUpdateAttendeeCapabilitiesExcept			Write
CreateAttendee	chime-sdk-meetings	chime:CreateAttendee			Write
CreateAttendee	chime-sdk-meetings	chime:TagAttendee			Tagging, Write
CreateMeeting	chime-sdk-meetings	chime:CreateMeeting			Write
		chime:TagMeeting			Tagging, Write
		chime:TagResource			Tagging, Write
CreateMeetingWithAttendees	chime-sdk-meetings	chime:CreateMeetingWithAttendees			Write
CreateMeetingWithAttendees	chime-sdk-meetings	chime:TagResource			Tagging, Write
DeleteAttendee	chime-sdk-meetings	chime:DeleteAttendee			Write
DeleteMeeting	chime-sdk-meetings	chime:DeleteMeeting			Write
GetAttendee	chime-sdk-meetings	chime:GetAttendee			Read
GetMeeting	chime-sdk-meetings	chime:GetMeeting			Read
ListAttendees	chime-sdk-meetings	chime:ListAttendees			List
ListTagsForResource	chime-sdk-meetings	chime:ListTagsForResource			Read
StartMeetingTranscription	chime-sdk-meetings	chime:StartMeetingTranscription			Write
StopMeetingTranscription	chime-sdk-meetings	chime:StopMeetingTranscription			Write
TagResource	chime-sdk-meetings	chime:TagResource			Tagging, Write
UntagResource	chime-sdk-meetings	chime:UntagResource			Tagging, Write
UpdateAttendeeCapabilities	chime-sdk-meetings	chime:UpdateAttendeeCapabilities			Write
AssociateChannelFlow	chime-sdk-messaging	chime:AssociateChannelFlow			Write
BatchCreateChannelMembership	chime-sdk-messaging	chime:BatchCreateChannelMembership			Write
ChannelFlowCallback	chime-sdk-messaging	chime:ChannelFlowCallback			Write
CreateChannel	chime-sdk-messaging	chime:CreateChannel			Write
		chime:CreateChannelMembership			Write
		chime:CreateChannelModerator			Write
		chime:PutChannelExpirationSettings			Write
		chime:TagResource			Tagging, Write
CreateChannelBan	chime-sdk-messaging	chime:CreateChannelBan			Write
CreateChannelFlow	chime-sdk-messaging	chime:CreateChannelFlow			Write
CreateChannelFlow	chime-sdk-messaging	chime:TagResource			Tagging, Write
CreateChannelMembership	chime-sdk-messaging	chime:CreateChannelMembership			Write
CreateChannelModerator	chime-sdk-messaging	chime:CreateChannelModerator			Write
DeleteChannel	chime-sdk-messaging	chime:DeleteChannel			Write
DeleteChannelBan	chime-sdk-messaging	chime:DeleteChannelBan			Write
DeleteChannelFlow	chime-sdk-messaging	chime:DeleteChannelFlow			Write
DeleteChannelMembership	chime-sdk-messaging	chime:DeleteChannelMembership			Write
DeleteChannelMessage	chime-sdk-messaging	chime:DeleteChannelMessage			Write
DeleteChannelModerator	chime-sdk-messaging	chime:DeleteChannelModerator			Write
DeleteMessagingStreamingConfigurations	chime-sdk-messaging	chime:DeleteMessagingStreamingConfigurations			Write
DescribeChannel	chime-sdk-messaging	chime:DescribeChannel			Read
DescribeChannelBan	chime-sdk-messaging	chime:DescribeChannelBan			Read
DescribeChannelFlow	chime-sdk-messaging	chime:DescribeChannelFlow			Read
DescribeChannelMembership	chime-sdk-messaging	chime:DescribeChannelMembership			Read
DescribeChannelMembershipForAppInstanceUser	chime-sdk-messaging	chime:DescribeChannelMembershipForAppInstanceUser			Read
DescribeChannelModeratedByAppInstanceUser	chime-sdk-messaging	chime:DescribeChannelModeratedByAppInstanceUser			Read
DescribeChannelModerator	chime-sdk-messaging	chime:DescribeChannelModerator			Read
DisassociateChannelFlow	chime-sdk-messaging	chime:DisassociateChannelFlow			Write
GetChannelMembershipPreferences	chime-sdk-messaging	chime:GetChannelMembershipPreferences			Read
GetChannelMessage	chime-sdk-messaging	chime:GetChannelMessage			Read
GetChannelMessageStatus	chime-sdk-messaging	chime:GetChannelMessageStatus			Read
GetMessagingSessionEndpoint	chime-sdk-messaging	chime:GetMessagingSessionEndpoint			Read
GetMessagingStreamingConfigurations	chime-sdk-messaging	chime:GetMessagingStreamingConfigurations			Read
ListChannelBans	chime-sdk-messaging	chime:ListChannelBans			List
ListChannelFlows	chime-sdk-messaging	chime:ListChannelFlows			List
ListChannelMemberships	chime-sdk-messaging	chime:ListChannelMemberships			List
ListChannelMembershipsForAppInstanceUser	chime-sdk-messaging	chime:ListChannelMembershipsForAppInstanceUser			List
ListChannelMessages	chime-sdk-messaging	chime:ListChannelMessages			Read
ListChannelModerators	chime-sdk-messaging	chime:ListChannelModerators			List
ListChannels	chime-sdk-messaging	chime:ListChannels			List
ListChannelsAssociatedWithChannelFlow	chime-sdk-messaging	chime:ListChannelsAssociatedWithChannelFlow			List
ListChannelsModeratedByAppInstanceUser	chime-sdk-messaging	chime:ListChannelsModeratedByAppInstanceUser			List
ListSubChannels	chime-sdk-messaging	chime:ListSubChannels			List
ListTagsForResource	chime-sdk-messaging	chime:ListTagsForResource			Read
PutChannelExpirationSettings	chime-sdk-messaging	chime:PutChannelExpirationSettings			Write
PutChannelMembershipPreferences	chime-sdk-messaging	chime:PutChannelMembershipPreferences			Write
PutMessagingStreamingConfigurations	chime-sdk-messaging	chime:PutMessagingStreamingConfigurations			Write
RedactChannelMessage	chime-sdk-messaging	chime:RedactChannelMessage			Write
SearchChannels	chime-sdk-messaging	chime:SearchChannels			List
SendChannelMessage	chime-sdk-messaging	chime:SendChannelMessage			Write
TagResource	chime-sdk-messaging	chime:TagResource			Tagging, Write
UntagResource	chime-sdk-messaging	chime:UntagResource			Tagging, Write
UpdateChannel	chime-sdk-messaging	chime:UpdateChannel			Write
UpdateChannelFlow	chime-sdk-messaging	chime:UpdateChannelFlow			Write
UpdateChannelMessage	chime-sdk-messaging	chime:UpdateChannelMessage			Write
UpdateChannelReadMarker	chime-sdk-messaging	chime:UpdateChannelReadMarker			Write
AssociatePhoneNumbersWithVoiceConnector	chime-sdk-voice	chime:AssociatePhoneNumbersWithVoiceConnector			Write
AssociatePhoneNumbersWithVoiceConnectorGroup	chime-sdk-voice	chime:AssociatePhoneNumbersWithVoiceConnectorGroup			Write
BatchDeletePhoneNumber	chime-sdk-voice	chime:BatchDeletePhoneNumber			Write
BatchUpdatePhoneNumber	chime-sdk-voice	chime:BatchUpdatePhoneNumber			Write
CreatePhoneNumberOrder	chime-sdk-voice	chime:CreatePhoneNumberOrder			Write
CreateProxySession	chime-sdk-voice	chime:CreateProxySession			Write
CreateSipMediaApplication	chime-sdk-voice	chime:CreateSipMediaApplication			Write
CreateSipMediaApplication	chime-sdk-voice	chime:TagResource			Tagging, Write
CreateSipMediaApplicationCall	chime-sdk-voice	chime:CreateSipMediaApplicationCall			Write
CreateSipRule	chime-sdk-voice	chime:CreateSipRule			Write
CreateVoiceConnector	chime-sdk-voice	chime:CreateConnectAnalyticsConnector			Write
		chime:CreateConnectCallTransferConnector			Write
		chime:CreateVoiceConnector			Write
		chime:TagResource			Tagging, Write
CreateVoiceConnectorGroup	chime-sdk-voice	chime:CreateVoiceConnectorGroup			Write
CreateVoiceProfile	chime-sdk-voice	chime:CreateVoiceProfile			Write
CreateVoiceProfileDomain	chime-sdk-voice	chime:CreateVoiceProfileDomain			Write
CreateVoiceProfileDomain	chime-sdk-voice	chime:TagResource			Tagging, Write
DeletePhoneNumber	chime-sdk-voice	chime:DeletePhoneNumber			Write
DeleteProxySession	chime-sdk-voice	chime:DeleteProxySession			Write
DeleteSipMediaApplication	chime-sdk-voice	chime:DeleteSipMediaApplication			Write
DeleteSipRule	chime-sdk-voice	chime:DeleteSipRule			Write
DeleteVoiceConnector	chime-sdk-voice	chime:DeleteVoiceConnector			Write
DeleteVoiceConnectorEmergencyCallingConfiguration	chime-sdk-voice	chime:DeleteVoiceConnectorEmergencyCallingConfiguration			Write
DeleteVoiceConnectorExternalSystemsConfiguration	chime-sdk-voice	chime:DeleteVoiceConnectorExternalSystemsConfiguration			Write
DeleteVoiceConnectorGroup	chime-sdk-voice	chime:DeleteVoiceConnectorGroup			Write
DeleteVoiceConnectorOrigination	chime-sdk-voice	chime:DeleteVoiceConnectorOrigination			Write
DeleteVoiceConnectorProxy	chime-sdk-voice	chime:DeleteVoiceConnectorProxy			Write
DeleteVoiceConnectorStreamingConfiguration	chime-sdk-voice	chime:DeleteVoiceConnectorStreamingConfiguration			Write
DeleteVoiceConnectorTermination	chime-sdk-voice	chime:DeleteVoiceConnectorTermination			Write
DeleteVoiceConnectorTerminationCredentials	chime-sdk-voice	chime:DeleteVoiceConnectorTerminationCredentials			Write
DeleteVoiceProfile	chime-sdk-voice	chime:DeleteVoiceProfile			Write
DeleteVoiceProfileDomain	chime-sdk-voice	chime:DeleteVoiceProfileDomain			Write
DisassociatePhoneNumbersFromVoiceConnector	chime-sdk-voice	chime:DisassociatePhoneNumbersFromVoiceConnector			Write
DisassociatePhoneNumbersFromVoiceConnectorGroup	chime-sdk-voice	chime:DisassociatePhoneNumbersFromVoiceConnectorGroup			Write
GetGlobalSettings	chime-sdk-voice	chime:GetGlobalSettings			Read
GetPhoneNumber	chime-sdk-voice	chime:GetPhoneNumber			Read
GetPhoneNumberOrder	chime-sdk-voice	chime:GetPhoneNumberOrder			Read
GetPhoneNumberSettings	chime-sdk-voice	chime:GetPhoneNumberSettings			Read
GetProxySession	chime-sdk-voice	chime:GetProxySession			Read
GetSipMediaApplication	chime-sdk-voice	chime:GetSipMediaApplication			Read
GetSipMediaApplicationAlexaSkillConfiguration	chime-sdk-voice	chime:GetSipMediaApplicationAlexaSkillConfiguration			Read
GetSipMediaApplicationLoggingConfiguration	chime-sdk-voice	chime:GetSipMediaApplicationLoggingConfiguration			Read
GetSipRule	chime-sdk-voice	chime:GetSipRule			Read
GetSpeakerSearchTask	chime-sdk-voice	chime:GetSpeakerSearchTask			Read
GetVoiceConnector	chime-sdk-voice	chime:GetVoiceConnector			Read
GetVoiceConnectorEmergencyCallingConfiguration	chime-sdk-voice	chime:GetVoiceConnectorEmergencyCallingConfiguration			Read
GetVoiceConnectorExternalSystemsConfiguration	chime-sdk-voice	chime:GetVoiceConnectorExternalSystemsConfiguration			Read
GetVoiceConnectorGroup	chime-sdk-voice	chime:GetVoiceConnectorGroup			Read
GetVoiceConnectorLoggingConfiguration	chime-sdk-voice	chime:GetVoiceConnectorLoggingConfiguration			Read
GetVoiceConnectorOrigination	chime-sdk-voice	chime:GetVoiceConnectorOrigination			Read
GetVoiceConnectorProxy	chime-sdk-voice	chime:GetVoiceConnectorProxy			Read
GetVoiceConnectorStreamingConfiguration	chime-sdk-voice	chime:GetVoiceConnectorStreamingConfiguration			Read
GetVoiceConnectorTermination	chime-sdk-voice	chime:GetVoiceConnectorTermination			Read
GetVoiceConnectorTerminationHealth	chime-sdk-voice	chime:GetVoiceConnectorTerminationHealth			Read
GetVoiceProfile	chime-sdk-voice	chime:GetVoiceProfile			Read
GetVoiceProfileDomain	chime-sdk-voice	chime:GetVoiceProfileDomain			Read
GetVoiceToneAnalysisTask	chime-sdk-voice	chime:GetVoiceToneAnalysisTask			Read
ListAvailableVoiceConnectorRegions	chime-sdk-voice	chime:ListAvailableVoiceConnectorRegions			List
ListPhoneNumberOrders	chime-sdk-voice	chime:ListPhoneNumberOrders			List
ListPhoneNumbers	chime-sdk-voice	chime:ListPhoneNumbers			List
ListProxySessions	chime-sdk-voice	chime:ListProxySessions			List
ListSipMediaApplications	chime-sdk-voice	chime:ListSipMediaApplications			List
ListSipRules	chime-sdk-voice	chime:ListSipRules			List
ListSupportedPhoneNumberCountries	chime-sdk-voice	chime:ListSupportedPhoneNumberCountries			List
ListTagsForResource	chime-sdk-voice	chime:ListTagsForResource			Read
ListVoiceConnectorGroups	chime-sdk-voice	chime:ListVoiceConnectorGroups			List
ListVoiceConnectorTerminationCredentials	chime-sdk-voice	chime:ListVoiceConnectorTerminationCredentials			List
ListVoiceConnectors	chime-sdk-voice	chime:ListVoiceConnectors			List
ListVoiceProfileDomains	chime-sdk-voice	chime:ListVoiceProfileDomains			List
ListVoiceProfiles	chime-sdk-voice	chime:ListVoiceProfiles			List
PutSipMediaApplicationAlexaSkillConfiguration	chime-sdk-voice	chime:PutSipMediaApplicationAlexaSkillConfiguration			Write
PutSipMediaApplicationLoggingConfiguration	chime-sdk-voice	chime:PutSipMediaApplicationLoggingConfiguration			Write
PutVoiceConnectorEmergencyCallingConfiguration	chime-sdk-voice	chime:PutVoiceConnectorEmergencyCallingConfiguration			Write
PutVoiceConnectorExternalSystemsConfiguration	chime-sdk-voice	chime:PutVoiceConnectorExternalSystemsConfiguration			Write
PutVoiceConnectorLoggingConfiguration	chime-sdk-voice	chime:PutVoiceConnectorLoggingConfiguration			Write
PutVoiceConnectorOrigination	chime-sdk-voice	chime:PutVoiceConnectorOrigination			Write
PutVoiceConnectorProxy	chime-sdk-voice	chime:PutVoiceConnectorProxy			Write
PutVoiceConnectorStreamingConfiguration	chime-sdk-voice	chime:PutVoiceConnectorStreamingConfiguration			Write
PutVoiceConnectorTermination	chime-sdk-voice	chime:PutVoiceConnectorTermination			Write
PutVoiceConnectorTerminationCredentials	chime-sdk-voice	chime:PutVoiceConnectorTerminationCredentials			Write
RestorePhoneNumber	chime-sdk-voice	chime:RestorePhoneNumber			Write
SearchAvailablePhoneNumbers	chime-sdk-voice	chime:SearchAvailablePhoneNumbers			Read
StartSpeakerSearchTask	chime-sdk-voice	chime:StartSpeakerSearchTask			Write
StartVoiceToneAnalysisTask	chime-sdk-voice	chime:StartVoiceToneAnalysisTask			Write
StopSpeakerSearchTask	chime-sdk-voice	chime:StopSpeakerSearchTask			Write
StopVoiceToneAnalysisTask	chime-sdk-voice	chime:StopVoiceToneAnalysisTask			Write
TagResource	chime-sdk-voice	chime:TagResource			Tagging, Write
UntagResource	chime-sdk-voice	chime:UntagResource			Tagging, Write
UpdateGlobalSettings	chime-sdk-voice	chime:UpdateGlobalSettings			Write
UpdatePhoneNumber	chime-sdk-voice	chime:UpdatePhoneNumber			Write
UpdatePhoneNumberSettings	chime-sdk-voice	chime:UpdatePhoneNumberSettings			Write
UpdateProxySession	chime-sdk-voice	chime:UpdateProxySession			Write
UpdateSipMediaApplication	chime-sdk-voice	chime:UpdateSipMediaApplication			Write
UpdateSipMediaApplicationCall	chime-sdk-voice	chime:UpdateSipMediaApplicationCall			Write
UpdateSipRule	chime-sdk-voice	chime:UpdateSipRule			Write
UpdateVoiceConnector	chime-sdk-voice	chime:UpdateVoiceConnector			Write
UpdateVoiceConnectorGroup	chime-sdk-voice	chime:UpdateVoiceConnectorGroup			Write
UpdateVoiceProfile	chime-sdk-voice	chime:UpdateVoiceProfile			Write
UpdateVoiceProfileDomain	chime-sdk-voice	chime:UpdateVoiceProfileDomain			Write
ValidateE911Address	chime-sdk-voice	chime:ValidateE911Address			Read

Actions defined by Amazon Chime

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
AcceptDelegate	Grants permission to accept the delegate invitation to share management of an Amazon Chime account with another AWS Account			Write
ActivateUsers	Grants permission to activate users in an Amazon Chime Enterprise account			Write
AddDomain	Grants permission to add a domain to your Amazon Chime account			Write
AddOrUpdateGroups	Grants permission to add new or update existing Active Directory or Okta user groups associated with your Amazon Chime Enterprise account			Write
AssociateChannelFlow	Grants permission to associate a flow with a channel	app-instance-bot*	aws:ResourceTag/${TagKey}	Write
		app-instance-user*	aws:ResourceTag/${TagKey}
		channel*	aws:ResourceTag/${TagKey}
		channel-flow*	aws:ResourceTag/${TagKey}
AssociatePhoneNumberWithUser	Grants permission to associate a phone number with an Amazon Chime user			Write
AssociatePhoneNumbersWithVoiceConnector	Grants permission to associate multiple phone numbers with an Amazon Chime Voice Connector	voice-connector*	aws:ResourceTag/${TagKey}	Write
AssociatePhoneNumbersWithVoiceConnectorGroup	Grants permission to associate multiple phone numbers with an Amazon Chime Voice Connector Group			Write
AssociateSigninDelegateGroupsWithAccount	Grants permission to associate the specified sign-in delegate groups with the specified Amazon Chime account			Write
AuthorizeDirectory	Grants permission to authorize an Active Directory for your Amazon Chime Enterprise account			Write
BatchCreateAttendee	Grants permission to create new attendees for an active Amazon Chime SDK meeting	meeting*	aws:ResourceTag/${TagKey}	Write
BatchCreateChannelMembership	Grants permission to add multiple users and bots to a channel	app-instance-bot*	aws:ResourceTag/${TagKey}	Write
		app-instance-user*	aws:ResourceTag/${TagKey}
		channel*	aws:ResourceTag/${TagKey}
BatchCreateRoomMembership	Grants permission to batch add room members			Write
BatchDeletePhoneNumber	Grants permission to move up to 50 phone numbers to the deletion queue			Write
BatchSuspendUser	Grants permission to suspend up to 50 users from a Team or EnterpriseLWA Amazon Chime account			Write
BatchUnsuspendUser	Grants permission to remove the suspension from up to 50 previously suspended users for the specified Amazon Chime EnterpriseLWA account			Write
BatchUpdateAttendeeCapabilitiesExcept	Grants permission to update AttendeeCapabilities except the capabilities listed in an ExcludedAttendeeIds table	meeting*	aws:ResourceTag/${TagKey}	Write
BatchUpdatePhoneNumber	Grants permission to update phone number details within the UpdatePhoneNumberRequestItem object for up to 50 phone numbers			Write
BatchUpdateUser	Grants permission to update user details within the UpdateUserRequestItem object for up to 20 users for the specified Amazon Chime account			Write
ChannelFlowCallback	Grants permission to callback for a message on a channel	channel*	aws:ResourceTag/${TagKey}	Write
Connect	Grants permission to establish a web socket connection for app instance user to the messaging session endpoint	app-instance-user*	aws:ResourceTag/${TagKey}	Write
ConnectDirectory	Grants permission to connect an Active Directory to your Amazon Chime Enterprise account			Write
CreateAccount	Grants permission to create an Amazon Chime account under the administrator's AWS account			Write
CreateApiKey	Grants permission to create a new SCIM access key for your Amazon Chime account and Okta configuration			Write
CreateAppInstance	Grants permission to create an app instance in the AWS account (tag-based access controls are only supported on identity-chime.<region>.amazonaws.com endpoints)		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateAppInstanceAdmin	Grants permission to promote a user or bot to an AppInstanceAdmin	app-instance*	aws:ResourceTag/${TagKey}	Write
		app-instance-bot*	aws:ResourceTag/${TagKey}
		app-instance-user*	aws:ResourceTag/${TagKey}
CreateAppInstanceBot	Grants permission to create a bot within an AppInstance (tag-based access controls are only supported on identity-chime.<region>.amazonaws.com endpoints)		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateAppInstanceUser	Grants permission to create a user within an AppInstance (tag-based access controls are only supported on identity-chime.<region>.amazonaws.com endpoints)		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateAttendee	Grants permission to create a new attendee for an active Amazon Chime SDK meeting	meeting*	aws:ResourceTag/${TagKey}	Write
CreateBot	Grants permission to create a bot for an Amazon Chime Enterprise account			Write
CreateCDRBucket	Grants permission to create a new Call Detail Record S3 bucket			Write
CreateChannel	Grants permission to create a channel for an app instance in the AWS account (tag-based access controls are only supported on messaging-chime.<region>.amazonaws.com endpoints)	app-instance-bot*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateChannel		app-instance-user*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateChannelBan	Grants permission to ban a user or bot from a channel	app-instance-bot*	aws:ResourceTag/${TagKey}	Write
		app-instance-user*	aws:ResourceTag/${TagKey}
		channel*	aws:ResourceTag/${TagKey}
CreateChannelFlow	Grants permission to create a channel flow for an app instance in the AWS account (tag-based access controls are only supported on messaging-chime.<region>.amazonaws.com endpoints)	app-instance*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateChannelMembership	Grants permission to add a user or bot to a channel	app-instance-bot*	aws:ResourceTag/${TagKey}	Write
		app-instance-user*	aws:ResourceTag/${TagKey}
		channel*	aws:ResourceTag/${TagKey}
CreateChannelModerator	Grants permission to create a channel moderator	app-instance-bot*	aws:ResourceTag/${TagKey}	Write
		app-instance-user*	aws:ResourceTag/${TagKey}
		channel*	aws:ResourceTag/${TagKey}
CreateMediaCapturePipeline	Grants permission to create a media capture pipeline (tag-based access controls are only supported on media-pipelines-chime.<region>.amazonaws.com endpoints)		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateMediaConcatenationPipeline	Grants permission to create a media concatenation pipeline (tag-based access controls are only supported on media-pipelines-chime.<region>.amazonaws.com endpoints)		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateMediaInsightsPipeline	Grants permission to create a media insights pipeline (tag-based access controls are only supported on media-pipelines-chime.<region>.amazonaws.com endpoints)	media-insights-pipeline-configuration*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateMediaInsightsPipelineConfiguration	Grants permission to create a media insights pipeline configuration (tag-based access controls are only supported on media-pipelines-chime.<region>.amazonaws.com endpoints)		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateMediaLiveConnectorPipeline	Grants permission to create a media live connector pipeline (tag-based access controls are only supported on media-pipelines-chime.<region>.amazonaws.com endpoints)		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateMediaPipelineKinesisVideoStreamPool	Grants permission to create kinesis video stream pool (tag-based access controls are only supported on media-pipelines-chime.<region>.amazonaws.com endpoints)		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateMediaStreamPipeline	Grants permission to create a media stream pipeline (tag-based access controls are only supported on media-pipelines-chime.<region>.amazonaws.com endpoints)	media-pipeline-kinesis-video-stream-pool*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateMeeting	Grants permission to create a new meeting in the specified media Region, with no initial attendees (tag-based access controls are only supported on meetings-chime.<region>.amazonaws.com endpoints)		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateMeetingDialOut	Grants permission to call a phone number to join the specified Amazon Chime SDK meeting	meeting*	aws:ResourceTag/${TagKey}	Write
CreateMeetingWithAttendees	Grants permission to create a new meeting in the specified media Region, with a set of attendees (tag-based access controls are only supported on meetings-chime.<region>.amazonaws.com endpoints)		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreatePhoneNumberOrder	Grants permission to create a phone number order with the Carriers			Write
CreateProxySession	Grants permission to create a proxy session for the specified Amazon Chime Voice Connector	voice-connector*	aws:ResourceTag/${TagKey}	Write
CreateRoom	Grants permission to create a room			Write
CreateRoomMembership	Grants permission to add a room member			Write
CreateSipMediaApplication	Grants permission to create an Amazon Chime SIP media application in the AWS account (tag-based access controls are only supported on voice-chime.<region>.amazonaws.com endpoints)		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateSipMediaApplicationCall	Grants permission to create outbound call for Amazon Chime SIP media application under the administrator's AWS account	sip-media-application*	aws:ResourceTag/${TagKey}	Write
CreateSipRule	Grants permission to create an Amazon Chime SIP rule under the administrator's AWS account	sip-media-application	aws:ResourceTag/${TagKey}	Write
CreateUser	Grants permission to create a user under the specified Amazon Chime account			Write
CreateVoiceConnector	Grants permission to create a Voice Connector in the AWS account (tag-based access controls are only supported on voice-chime.<region>.amazonaws.com endpoints)		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateVoiceConnectorGroup	Grants permission to create a Amazon Chime Voice Connector Group under the administrator's AWS account	voice-connector	aws:ResourceTag/${TagKey}	Write
CreateVoiceProfile	Grants permission to create a voice profile			Write
CreateVoiceProfileDomain	Grants permission to create a voice profile domain (tag-based access controls are only supported on voice-chime.<region>.amazonaws.com endpoints)		aws:RequestTag/${TagKey} aws:TagKeys	Write
DeleteAccount	Grants permission to delete the specified Amazon Chime account			Write
DeleteAccountOpenIdConfig	Grants permission to delete the OpenIdConfig attributes from your Amazon Chime account			Write
DeleteApiKey	Grants permission to delete the specified SCIM access key associated with your Amazon Chime account and Okta configuration			Write
DeleteAppInstance	Grants permission to delete an AppInstance	app-instance*	aws:ResourceTag/${TagKey}	Write
DeleteAppInstanceAdmin	Grants permission to demote an AppInstanceAdmin to a user or bot	app-instance*	aws:ResourceTag/${TagKey}	Write
		app-instance-bot*	aws:ResourceTag/${TagKey}
		app-instance-user*	aws:ResourceTag/${TagKey}
DeleteAppInstanceBot	Grants permission to delete an AppInstanceBot	app-instance-bot*	aws:ResourceTag/${TagKey}	Write
DeleteAppInstanceStreamingConfigurations	Grants permission to disable data streaming for the app instance	app-instance*	aws:ResourceTag/${TagKey}	Write
DeleteAppInstanceUser	Grants permission to delete an AppInstanceUser	app-instance-user*	aws:ResourceTag/${TagKey}	Write
DeleteAttendee	Grants permission to delete the specified attendee from an Amazon Chime SDK meeting	meeting*	aws:ResourceTag/${TagKey}	Write
DeleteCDRBucket	Grants permission to delete a Call Detail Record S3 bucket from your Amazon Chime account			Write
DeleteChannel	Grants permission to delete a channel	app-instance-bot*	aws:ResourceTag/${TagKey}	Write
		app-instance-user*	aws:ResourceTag/${TagKey}
		channel*	aws:ResourceTag/${TagKey}
DeleteChannelBan	Grants permission to remove a user or bot from a channel's ban list	app-instance-bot*	aws:ResourceTag/${TagKey}	Write
		app-instance-user*	aws:ResourceTag/${TagKey}
		channel*	aws:ResourceTag/${TagKey}
DeleteChannelFlow	Grants permission to delete a channel flow	channel*	aws:ResourceTag/${TagKey}	Write
DeleteChannelMembership	Grants permission to remove a member from a channel	app-instance-bot*	aws:ResourceTag/${TagKey}	Write
		app-instance-user*	aws:ResourceTag/${TagKey}
		channel*	aws:ResourceTag/${TagKey}
DeleteChannelMessage	Grants permission to delete a channel message	app-instance-bot*	aws:ResourceTag/${TagKey}	Write
		app-instance-user*	aws:ResourceTag/${TagKey}
		channel*	aws:ResourceTag/${TagKey}
DeleteChannelModerator	Grants permission to delete a channel moderator	app-instance-bot*	aws:ResourceTag/${TagKey}	Write
		app-instance-user*	aws:ResourceTag/${TagKey}
		channel*	aws:ResourceTag/${TagKey}
DeleteDelegate	Grants permission to delete delegated AWS account management from your Amazon Chime account			Write
DeleteDomain	Grants permission to delete a domain from your Amazon Chime account			Write
DeleteEventsConfiguration	Grants permission to delete an events configuration for a bot to receive outgoing events			Write
DeleteGroups	Grants permission to delete Active Directory or Okta user groups from your Amazon Chime Enterprise account			Write
DeleteMediaCapturePipeline	Grants permission to delete a media capture pipeline	media-pipeline*	aws:ResourceTag/${TagKey}	Write
DeleteMediaInsightsPipelineConfiguration	Grants permission to delete a media insights pipeline configuration	media-insights-pipeline-configuration*	aws:ResourceTag/${TagKey}	Write
DeleteMediaPipeline	Grants permission to delete a media pipeline	media-pipeline*	aws:ResourceTag/${TagKey}	Write
DeleteMediaPipelineKinesisVideoStreamPool	Grants permission to delete kinesis video stream pool	media-pipeline-kinesis-video-stream-pool*	aws:ResourceTag/${TagKey}	Write
DeleteMeeting	Grants permission to delete the specified Amazon Chime SDK meeting	meeting*	aws:ResourceTag/${TagKey}	Write
DeleteMessagingStreamingConfigurations	Grants permission to delete the data streaming configurations of an AppInstance	app-instance*	aws:ResourceTag/${TagKey}	Write
DeletePhoneNumber	Grants permission to move a phone number to the deletion queue			Write
DeleteProxySession	Grants permission to delete a proxy session for the specified Amazon Chime Voice Connector	voice-connector*	aws:ResourceTag/${TagKey}	Write
DeleteRoom	Grants permission to delete a room			Write
DeleteRoomMembership	Grants permission to remove a room member			Write
DeleteSipMediaApplication	Grants permission to delete Amazon Chime SIP media application under the administrator's AWS account	sip-media-application*	aws:ResourceTag/${TagKey}	Write
DeleteSipRule	Grants permission to delete Amazon Chime SIP rule under the administrator's AWS account			Write
DeleteVoiceConnector	Grants permission to delete the specified Amazon Chime Voice Connector	voice-connector*	aws:ResourceTag/${TagKey}	Write
DeleteVoiceConnectorEmergencyCallingConfiguration	Grants permission to delete emergency calling configuration for the specified Amazon Chime Voice Connector	voice-connector*	aws:ResourceTag/${TagKey}	Write
DeleteVoiceConnectorExternalSystemsConfiguration	Grants permission to delete the configuration of the external system that is connected with the specified Amazon Chime Voice Connector	voice-connector*	aws:ResourceTag/${TagKey}	Write
DeleteVoiceConnectorGroup	Grants permission to delete the specified Amazon Chime Voice Connector Group			Write
DeleteVoiceConnectorOrigination	Grants permission to delete the origination settings for the specified Amazon Chime Voice Connector	voice-connector*	aws:ResourceTag/${TagKey}	Write
DeleteVoiceConnectorProxy	Grants permission to delete proxy configuration for the specified Amazon Chime Voice Connector	voice-connector*	aws:ResourceTag/${TagKey}	Write
DeleteVoiceConnectorStreamingConfiguration	Grants permission to delete streaming configuration for the specified Amazon Chime Voice Connector	voice-connector*	aws:ResourceTag/${TagKey}	Write
DeleteVoiceConnectorTermination	Grants permission to delete the termination settings for the specified Amazon Chime Voice Connector	voice-connector*	aws:ResourceTag/${TagKey}	Write
DeleteVoiceConnectorTerminationCredentials	Grants permission to delete SIP termination credentials for the specified Amazon Chime Voice Connector	voice-connector*	aws:ResourceTag/${TagKey}	Write
DeleteVoiceProfile	Grants permission to delete a voice profile	voice-profile*		Write
DeleteVoiceProfileDomain	Grants permission to delete a voice profile domain	voice-profile-domain*	aws:ResourceTag/${TagKey}	Write
DeregisterAppInstanceUserEndpoint	Grants permission to deregister an endpoint for an app instance user	app-instance-user*	aws:ResourceTag/${TagKey}	Write
DescribeAppInstance	Grants permission to get the full details of an AppInstance	app-instance*	aws:ResourceTag/${TagKey}	Read
DescribeAppInstanceAdmin	Grants permission to get the full details of an AppInstanceAdmin	app-instance*	aws:ResourceTag/${TagKey}	Read
		app-instance-bot*	aws:ResourceTag/${TagKey}
		app-instance-user*	aws:ResourceTag/${TagKey}
DescribeAppInstanceBot	Grants permission to get the full details of an AppInstanceBot	app-instance-bot*	aws:ResourceTag/${TagKey}	Read
DescribeAppInstanceUser	Grants permission to get the full details of an AppInstanceUser	app-instance-user*	aws:ResourceTag/${TagKey}	Read
DescribeAppInstanceUserEndpoint	Grants permission to describe an endpoint registered for an app instance user	app-instance-user*	aws:ResourceTag/${TagKey}	Read
DescribeChannel	Grants permission to get the full details of a channel	app-instance-bot*	aws:ResourceTag/${TagKey}	Read
		app-instance-user*	aws:ResourceTag/${TagKey}
		channel*	aws:ResourceTag/${TagKey}
DescribeChannelBan	Grants permission to get the full details of a channel ban	app-instance-bot*	aws:ResourceTag/${TagKey}	Read
		app-instance-user*	aws:ResourceTag/${TagKey}
		channel*	aws:ResourceTag/${TagKey}
DescribeChannelFlow	Grants permission to get the full details of a channel flow	channel-flow*	aws:ResourceTag/${TagKey}	Read
DescribeChannelMembership	Grants permission to get the full details of a channel membership	app-instance-bot*	aws:ResourceTag/${TagKey}	Read
		app-instance-user*	aws:ResourceTag/${TagKey}
		channel*	aws:ResourceTag/${TagKey}
DescribeChannelMembershipForAppInstanceUser	Grants permission to get the details of a channel based on the membership of the specified user or bot	app-instance-bot*	aws:ResourceTag/${TagKey}	Read
		app-instance-user*	aws:ResourceTag/${TagKey}
		channel*	aws:ResourceTag/${TagKey}
DescribeChannelModeratedByAppInstanceUser	Grants permission to get the full details of a channel moderated by the specified user or bot	app-instance-bot*	aws:ResourceTag/${TagKey}	Read
		app-instance-user*	aws:ResourceTag/${TagKey}
		channel*	aws:ResourceTag/${TagKey}
DescribeChannelModerator	Grants permission to get the full details of a single ChannelModerator	app-instance-bot*	aws:ResourceTag/${TagKey}	Read
		app-instance-user*	aws:ResourceTag/${TagKey}
		channel*	aws:ResourceTag/${TagKey}
DisassociateChannelFlow	Grants permission to disassociate a flow from a channel	app-instance-bot*	aws:ResourceTag/${TagKey}	Write
		app-instance-user*	aws:ResourceTag/${TagKey}
		channel*	aws:ResourceTag/${TagKey}
		channel-flow*	aws:ResourceTag/${TagKey}
DisassociatePhoneNumberFromUser	Grants permission to disassociate the primary provisioned number from the specified Amazon Chime user			Write
DisassociatePhoneNumbersFromVoiceConnector	Grants permission to disassociate multiple phone numbers from the specified Amazon Chime Voice Connector	voice-connector*	aws:ResourceTag/${TagKey}	Write
DisassociatePhoneNumbersFromVoiceConnectorGroup	Grants permission to disassociate multiple phone numbers from the specified Amazon Chime Voice Connector Group			Write
DisassociateSigninDelegateGroupsFromAccount	Grants permission to disassociate the specified sign-in delegate groups from the specified Amazon Chime account			Write
DisconnectDirectory	Grants permission to disconnect the Active Directory from your Amazon Chime Enterprise account			Write
GetAccount	Grants permission to get details for the specified Amazon Chime account			Read
GetAccountResource	Grants permission to get details for the account resource associated with your Amazon Chime account			Read
GetAccountSettings	Grants permission to get account settings for the specified Amazon Chime account ID			Read
GetAccountWithOpenIdConfig	Grants permission to get the account details and OpenIdConfig attributes for your Amazon Chime account			Read
GetAppInstanceRetentionSettings	Grants permission to get retention settings for an app instance	app-instance*	aws:ResourceTag/${TagKey}	Read
GetAppInstanceStreamingConfigurations	Grants permission to get the streaming configurations for an app instance	app-instance*	aws:ResourceTag/${TagKey}	Read
GetAttendee	Grants permission to get attendee details for a specified meeting ID and attendee ID	meeting*	aws:ResourceTag/${TagKey}	Read
GetBot	Grants permission to retrieve details for the specified bot			Read
GetCDRBucket	Grants permission to get details of a Call Detail Record S3 bucket associated with your Amazon Chime account			Read
GetChannelMembershipPreferences	Grants permission to get the preferences for a channel membership	app-instance-bot*	aws:ResourceTag/${TagKey}	Read
		app-instance-user*	aws:ResourceTag/${TagKey}
		channel*	aws:ResourceTag/${TagKey}
GetChannelMessage	Grants permission to get the full details of a channel message	app-instance-bot*	aws:ResourceTag/${TagKey}	Read
		app-instance-user*	aws:ResourceTag/${TagKey}
		channel*	aws:ResourceTag/${TagKey}
GetChannelMessageStatus	Grants permission to get the status of a channel message	app-instance-bot*	aws:ResourceTag/${TagKey}	Read
		app-instance-user*	aws:ResourceTag/${TagKey}
		channel*	aws:ResourceTag/${TagKey}
GetDomain	Grants permission to get domain details for a domain associated with your Amazon Chime account			Read
GetEventsConfiguration	Grants permission to retrieve details for an events configuration for a bot to receive outgoing events			Read
GetGlobalSettings	Grants permission to get global settings related to Amazon Chime for the AWS account			Read
GetMediaCapturePipeline	Grants permission to get an existing media capture pipeline	media-pipeline*	aws:ResourceTag/${TagKey}	Read
GetMediaInsightsPipelineConfiguration	Grants permission to get a media insights pipeline configuration	media-insights-pipeline-configuration*	aws:ResourceTag/${TagKey}	Read
GetMediaPipeline	Grants permission to get an existing media pipeline	media-pipeline*	aws:ResourceTag/${TagKey}	Read
GetMediaPipelineKinesisVideoStreamPool	Grants permission to get an existing media pipeline	media-pipeline-kinesis-video-stream-pool*	aws:ResourceTag/${TagKey}	Read
GetMeeting	Grants permission to get the meeting record for a specified meeting ID	meeting*	aws:ResourceTag/${TagKey}	Read
GetMeetingDetail	Grants permission to get attendee, connection, and other details for a meeting			Read
GetMessagingSessionEndpoint	Grants permission to get the endpoint for the messaging session			Read
GetMessagingStreamingConfigurations	Grants permission to get the data streaming configurations of an AppInstance	app-instance*	aws:ResourceTag/${TagKey}	Read
GetPhoneNumber	Grants permission to get details for the specified phone number			Read
GetPhoneNumberOrder	Grants permission to get details for the specified phone number order			Read
GetPhoneNumberSettings	Grants permission to get phone number settings related to Amazon Chime for the AWS account			Read
GetProxySession	Grants permission to get details of the specified proxy session for the specified Amazon Chime Voice Connector	voice-connector*	aws:ResourceTag/${TagKey}	Read
GetRetentionSettings	Grants permission to retrieve the retention settings for the specified Amazon Chime account			Read
GetRoom	Grants permission to retrieve a room			Read
GetSipMediaApplication	Grants permission to get details of Amazon Chime SIP media application under the administrator's AWS account	sip-media-application*	aws:ResourceTag/${TagKey}	Read
GetSipMediaApplicationAlexaSkillConfiguration	Grants permission to get Alexa Skill configuration settings for Amazon Chime SIP media application under the administrator's AWS account	sip-media-application*	aws:ResourceTag/${TagKey}	Read
GetSipMediaApplicationLoggingConfiguration	Grants permission to get logging configuration settings for Amazon Chime SIP media application under the administrator's AWS account	sip-media-application*	aws:ResourceTag/${TagKey}	Read
GetSipRule	Grants permission to get details of Amazon Chime SIP rule under the administrator's AWS account			Read
GetSpeakerSearchTask	Grants permission to get a speaker search task on the specified Amazon Chime resource	media-pipeline	aws:ResourceTag/${TagKey}	Read
GetSpeakerSearchTask		voice-connector	aws:ResourceTag/${TagKey}	Read
GetTelephonyLimits	Grants permission to get telephony limits for the AWS account			Read
GetUser	Grants permission to get details for the specified user ID			Read
GetUserActivityReportData	Grants permission to get a summary of user activity on the user details page			Read
GetUserByEmail	Grants permission to get user details for an Amazon Chime user based on the email address in an Amazon Chime Enterprise or Team account			Read
GetUserSettings	Grants permission to get user settings related to the specified Amazon Chime user			Read
GetVoiceConnector	Grants permission to get details for the specified Amazon Chime Voice Connector	voice-connector*	aws:ResourceTag/${TagKey}	Read
GetVoiceConnectorEmergencyCallingConfiguration	Grants permission to get details of the emergency calling configuration for the specified Amazon Chime Voice Connector	voice-connector*	aws:ResourceTag/${TagKey}	Read
GetVoiceConnectorExternalSystemsConfiguration	Grants permission to get the configuration of the external system that is connected with the specified Amazon Chime Voice Connector	voice-connector*	aws:ResourceTag/${TagKey}	Read
GetVoiceConnectorGroup	Grants permission to get details for the specified Amazon Chime Voice Connector Group			Read
GetVoiceConnectorLoggingConfiguration	Grants permission to get details of the logging configuration for the specified Amazon Chime Voice Connector	voice-connector*	aws:ResourceTag/${TagKey}	Read
GetVoiceConnectorOrigination	Grants permission to get details of the origination settings for the specified Amazon Chime Voice Connector	voice-connector*	aws:ResourceTag/${TagKey}	Read
GetVoiceConnectorProxy	Grants permission to get details of the proxy configuration for the specified Amazon Chime Voice Connector	voice-connector*	aws:ResourceTag/${TagKey}	Read
GetVoiceConnectorStreamingConfiguration	Grants permission to get details of the streaming configuration for the specified Amazon Chime Voice Connector	voice-connector*	aws:ResourceTag/${TagKey}	Read
GetVoiceConnectorTermination	Grants permission to get details of the termination settings for the specified Amazon Chime Voice Connector	voice-connector*	aws:ResourceTag/${TagKey}	Read
GetVoiceConnectorTerminationHealth	Grants permission to get details of the termination health for the specified Amazon Chime Voice Connector	voice-connector*	aws:ResourceTag/${TagKey}	Read
GetVoiceProfile	Grants permission to get a voice profile	voice-profile*		Read
GetVoiceProfileDomain	Grants permission to get a voice profile domain	voice-profile-domain*	aws:ResourceTag/${TagKey}	Read
GetVoiceToneAnalysisTask	Grants permission to get a voice tone analysis task on the specified Amazon Chime resource	media-pipeline	aws:ResourceTag/${TagKey}	Read
GetVoiceToneAnalysisTask		voice-connector	aws:ResourceTag/${TagKey}	Read
InviteDelegate	Grants permission to send an invitation to accept a request for AWS account delegation for an Amazon Chime account			Write
InviteUsers	Grants permission to invite as many as 50 users to the specified Amazon Chime account			Write
InviteUsersFromProvider	Grants permission to invite users from a third party provider to your Amazon Chime account			Write
ListAccountUsageReportData	Grants permission to list Amazon Chime account usage reporting data			List
ListAccounts	Grants permission to list the Amazon Chime accounts under the administrator's AWS account			List
ListApiKeys	Grants permission to list the SCIM access keys defined for your Amazon Chime account and Okta configuration			List
ListAppInstanceAdmins	Grants permission to list administrators in the app instance	app-instance*	aws:ResourceTag/${TagKey}	List
		app-instance-bot*	aws:ResourceTag/${TagKey}
		app-instance-user*	aws:ResourceTag/${TagKey}
ListAppInstanceBots	Grants permission to list all AppInstanceBots created under a single app instance	app-instance-bot*	aws:ResourceTag/${TagKey}	List
ListAppInstanceUserEndpoints	Grants permission to list the endpoints registered for an app instance user	app-instance-user*	aws:ResourceTag/${TagKey}	List
ListAppInstanceUsers	Grants permission to list all AppInstanceUsers created under a single app instance	app-instance-user*	aws:ResourceTag/${TagKey}	List
ListAppInstances	Grants permission to list all Amazon Chime app instances created under a single AWS account	app-instance*	aws:ResourceTag/${TagKey}	List
ListAttendeeTags	Grants permission to list the tags applied to an Amazon Chime SDK attendee resource	meeting*	aws:ResourceTag/${TagKey}	List
ListAttendees	Grants permission to list up to 100 attendees for a specified Amazon Chime SDK meeting	meeting*	aws:ResourceTag/${TagKey}	List
ListAvailableVoiceConnectorRegions	Grants permission to list the available AWS Regions in which you can create an Amazon Chime SDK Voice Connector			List
ListBots	Grants permission to list the bots associated with the administrator's Amazon Chime Enterprise account			List
ListCDRBucket	Grants permission to list Call Detail Record S3 buckets			List
ListCallingRegions	Grants permission to list the calling regions available for the administrator's AWS account			List
ListChannelBans	Grants permission to list all the users and bots banned from a particular channel	app-instance-bot*	aws:ResourceTag/${TagKey}	List
		app-instance-user*	aws:ResourceTag/${TagKey}
		channel*	aws:ResourceTag/${TagKey}
ListChannelFlows	Grants permission to list all the Channel Flows created under a single Chime AppInstance	channel-flow*	aws:ResourceTag/${TagKey}	List
ListChannelMemberships	Grants permission to list all channel memberships in a channel	app-instance-bot*	aws:ResourceTag/${TagKey}	List
		app-instance-user*	aws:ResourceTag/${TagKey}
		channel*	aws:ResourceTag/${TagKey}
ListChannelMembershipsForAppInstanceUser	Grants permission to list all channels that a particular user or bot is a part of	app-instance-bot*	aws:ResourceTag/${TagKey}	List
ListChannelMembershipsForAppInstanceUser		app-instance-user*	aws:ResourceTag/${TagKey}	List
ListChannelMessages	Grants permission to list all the messages in a channel	app-instance-bot*	aws:ResourceTag/${TagKey}	Read
		app-instance-user*	aws:ResourceTag/${TagKey}
		channel*	aws:ResourceTag/${TagKey}
ListChannelModerators	Grants permission to list all the moderators for a channel	app-instance-bot*	aws:ResourceTag/${TagKey}	List
		app-instance-user*	aws:ResourceTag/${TagKey}
		channel*	aws:ResourceTag/${TagKey}
ListChannels	Grants permission to list all the Channels created under a single Chime AppInstance	app-instance-bot*	aws:ResourceTag/${TagKey}	List
ListChannels		app-instance-user*	aws:ResourceTag/${TagKey}	List
ListChannelsAssociatedWithChannelFlow	Grants permission to list all the Channels associated with a single Chime Channel Flow	channel-flow*	aws:ResourceTag/${TagKey}	List
ListChannelsModeratedByAppInstanceUser	Grants permission to list all channels moderated by a user or bot	app-instance-bot*	aws:ResourceTag/${TagKey}	List
ListChannelsModeratedByAppInstanceUser		app-instance-user*	aws:ResourceTag/${TagKey}	List
ListDelegates	Grants permission to list account delegate information associated with your Amazon Chime account			List
ListDirectories	Grants permission to list active Active Directories hosted in the Directory Service of your AWS account			List
ListDomains	Grants permission to list domains associated with your Amazon Chime account			List
ListGroups	Grants permission to list Active Directory or Okta user groups associated with your Amazon Chime Enterprise account			List
ListMediaCapturePipelines	Grants permission to list media capture pipelines			List
ListMediaInsightsPipelineConfigurations	Grants permission to list all media insights pipeline configurations			List
ListMediaPipelineKinesisVideoStreamPools	Grants permission to list media pipelines			List
ListMediaPipelines	Grants permission to list media pipelines			List
ListMeetingEvents	Grants permission to list all events that occurred for a specified meeting			List
ListMeetingTags	Grants permission to list the tags applied to an Amazon Chime SDK meeting resource	meeting*	aws:ResourceTag/${TagKey}	List
ListMeetings	Grants permission to list up to 100 active Amazon Chime SDK meetings			List
ListMeetingsReportData	Grants permission to list meetings ended during the specified date range			List
ListPhoneNumberOrders	Grants permission to list the phone number orders under the administrator's AWS account			List
ListPhoneNumbers	Grants permission to list the phone numbers under the administrator's AWS account			List
ListProxySessions	Grants permission to list proxy sessions for the specified Amazon Chime Voice Connector	voice-connector*	aws:ResourceTag/${TagKey}	List
ListRoomMemberships	Grants permission to list all room members			List
ListRooms	Grants permission to list rooms			List
ListSipMediaApplications	Grants permission to list all Amazon Chime SIP media applications under the administrator's AWS account			List
ListSipRules	Grants permission to list all Amazon Chime SIP rules under the administrator's AWS account	sip-media-application	aws:ResourceTag/${TagKey}	List
ListSubChannels	Grants permission to list all the SubChannels under a single Channel	app-instance-bot*	aws:ResourceTag/${TagKey}	List
		app-instance-user*	aws:ResourceTag/${TagKey}
		channel*	aws:ResourceTag/${TagKey}
ListSupportedPhoneNumberCountries	Grants permission to list the phone number countries supported by the AWS account			List
ListTagsForResource	Grants permission to list the tags applied to an Amazon Chime resource	app-instance	aws:ResourceTag/${TagKey}	Read
		app-instance-bot	aws:ResourceTag/${TagKey}
		app-instance-user	aws:ResourceTag/${TagKey}
		channel	aws:ResourceTag/${TagKey}
		channel-flow	aws:ResourceTag/${TagKey}
		media-insights-pipeline-configuration	aws:ResourceTag/${TagKey}
		media-pipeline	aws:ResourceTag/${TagKey}
		media-pipeline-kinesis-video-stream-pool	aws:ResourceTag/${TagKey}
		meeting	aws:ResourceTag/${TagKey}
		sip-media-application	aws:ResourceTag/${TagKey}
		voice-connector	aws:ResourceTag/${TagKey}
		voice-profile-domain	aws:ResourceTag/${TagKey}
ListUsers	Grants permission to list the users that belong to the specified Amazon Chime account			List
ListVoiceConnectorGroups	Grants permission to list the Amazon Chime Voice Connector Groups under the administrator's AWS account			List
ListVoiceConnectorTerminationCredentials	Grants permission to list the SIP termination credentials for the specified Amazon Chime Voice Connector	voice-connector*	aws:ResourceTag/${TagKey}	List
ListVoiceConnectors	Grants permission to list the Amazon Chime Voice Connectors under the administrator's AWS account			List
ListVoiceProfileDomains	Grants permission to list voice profile domains			List
ListVoiceProfiles	Grants permission to list voice profiles	voice-profile-domain*	aws:ResourceTag/${TagKey}	List
LogoutUser	Grants permission to log out the specified user from all of the devices they are currently logged into			Write
PutAppInstanceRetentionSettings	Grants permission to enable data retention for the app instance	app-instance*	aws:ResourceTag/${TagKey}	Write
PutAppInstanceStreamingConfigurations	Grants permission to configure data streaming for the app instance	app-instance*	aws:ResourceTag/${TagKey}	Write
PutAppInstanceUserExpirationSettings	Grants permission to put expiration settings for an AppInstanceUser	app-instance-user*	aws:ResourceTag/${TagKey}	Write
PutChannelExpirationSettings	Grants permission to put expiration settings for a channel	app-instance-user*	aws:ResourceTag/${TagKey}	Write
PutChannelExpirationSettings	Grants permission to put expiration settings for a channel	channel*	aws:ResourceTag/${TagKey}	Write
PutChannelMembershipPreferences	Grants permission to put the preferences for a channel membership	app-instance-bot*	aws:ResourceTag/${TagKey}	Write
		app-instance-user*	aws:ResourceTag/${TagKey}
		channel*	aws:ResourceTag/${TagKey}
PutEventsConfiguration	Grants permission to update details for an events configuration for a bot to receive outgoing events			Write
PutMessagingStreamingConfigurations	Grants permission to put the data streaming configurations of an AppInstance	app-instance*	aws:ResourceTag/${TagKey}	Write
PutRetentionSettings	Grants permission to create or update retention settings for the specified Amazon Chime account			Write
PutSipMediaApplicationAlexaSkillConfiguration	Grants permission to update Alexa Skill configuration settings for Amazon Chime SIP media application under the administrator's AWS account	sip-media-application*	aws:ResourceTag/${TagKey}	Write
PutSipMediaApplicationLoggingConfiguration	Grants permission to update logging configuration settings for Amazon Chime SIP media application under the administrator's AWS account	sip-media-application*	aws:ResourceTag/${TagKey}	Write
PutVoiceConnectorEmergencyCallingConfiguration	Grants permission to add emergency calling configuration for the specified Amazon Chime Voice Connector	voice-connector*	aws:ResourceTag/${TagKey}	Write
PutVoiceConnectorExternalSystemsConfiguration	Grants permission to update the configuration of the external system that is connected with the specified Amazon Chime Voice Connector	voice-connector*	aws:ResourceTag/${TagKey}	Write
PutVoiceConnectorLoggingConfiguration	Grants permission to add logging configuration for the specified Amazon Chime Voice Connector	voice-connector*	aws:ResourceTag/${TagKey}	Write
PutVoiceConnectorOrigination	Grants permission to update the origination settings for the specified Amazon Chime Voice Connector	voice-connector*	aws:ResourceTag/${TagKey}	Write
PutVoiceConnectorProxy	Grants permission to add proxy configuration for the specified Amazon Chime Voice Connector	voice-connector*	aws:ResourceTag/${TagKey}	Write
PutVoiceConnectorStreamingConfiguration	Grants permission to add streaming configuration for the specified Amazon Chime Voice Connector	media-insights-pipeline-configuration	aws:ResourceTag/${TagKey}	Write
PutVoiceConnectorStreamingConfiguration		voice-connector*	aws:ResourceTag/${TagKey}	Write
PutVoiceConnectorTermination	Grants permission to update the termination settings for the specified Amazon Chime Voice Connector	voice-connector*	aws:ResourceTag/${TagKey}	Write
PutVoiceConnectorTerminationCredentials	Grants permission to add SIP termination credentials for the specified Amazon Chime Voice Connector	voice-connector*	aws:ResourceTag/${TagKey}	Write
RedactChannelMessage	Grants permission to redact message content	app-instance-bot*	aws:ResourceTag/${TagKey}	Write
		app-instance-user*	aws:ResourceTag/${TagKey}
		channel*	aws:ResourceTag/${TagKey}
RedactConversationMessage	Grants permission to redact the specified Chime conversation Message			Write
RedactRoomMessage	Grants permission to redacts the specified Chime room Message			Write
RegenerateSecurityToken	Grants permission to regenerate the security token for the specified bot			Write
RegisterAppInstanceUserEndpoint	Grants permission to register an endpoint for an app instance user	app-instance-user*	aws:ResourceTag/${TagKey}	Write
RenameAccount	Grants permission to modify the account name for your Amazon Chime Enterprise or Team account			Write
RenewDelegate	Grants permission to renew the delegation request associated with an Amazon Chime account			Write
ResetAccountResource	Grants permission to reset the account resource in your Amazon Chime account			Write
ResetPersonalPIN	Grants permission to reset the personal meeting PIN for the specified user on an Amazon Chime account			Write
RestorePhoneNumber	Grants permission to restore the specified phone number from the deltion queue back to the phone number inventory			Write
RetrieveDataExports	Grants permission to download the file containing links to all user attachments returned as part of the "Request attachments" action			Read
SearchAvailablePhoneNumbers	Grants permission to search phone numbers that can be ordered from the carrier			Read
SearchChannels	Grants permission to search channels that an AppInstanceUser belongs to, or search channels across the AppInstance for an AppInstaceAdmin	app-instance-bot*	aws:ResourceTag/${TagKey}	List
SearchChannels		app-instance-user*	aws:ResourceTag/${TagKey}	List
SendChannelMessage	Grants permission to send a message to a particular channel that the member is a part of	app-instance-bot*	aws:ResourceTag/${TagKey}	Write
		app-instance-user*	aws:ResourceTag/${TagKey}
		channel*	aws:ResourceTag/${TagKey}
StartDataExport	Grants permission to submit the "Request attachments" request			Write
StartMeetingTranscription	Grants permission to start transcription for a meeting			Write
StartSpeakerSearchTask	Grants permission to start a speaker search task on the specified Amazon Chime resource	media-pipeline	aws:ResourceTag/${TagKey}	Write
StartSpeakerSearchTask		voice-connector	aws:ResourceTag/${TagKey}	Write
StartVoiceToneAnalysisTask	Grants permission to start a voice tone analysis task on the specified Amazon Chime resource	media-pipeline	aws:ResourceTag/${TagKey}	Write
StartVoiceToneAnalysisTask		voice-connector	aws:ResourceTag/${TagKey}	Write
StopMeetingTranscription	Grants permission to stop transcription for a meeting			Write
StopSpeakerSearchTask	Grants permission to stop a speaker search task on the specified Amazon Chime resource	media-pipeline	aws:ResourceTag/${TagKey}	Write
StopSpeakerSearchTask		voice-connector	aws:ResourceTag/${TagKey}	Write
StopVoiceToneAnalysisTask	Grants permission to stop a voice tone analysis task on the specified Amazon Chime resource	media-pipeline	aws:ResourceTag/${TagKey}	Write
StopVoiceToneAnalysisTask		voice-connector	aws:ResourceTag/${TagKey}	Write
SubmitSupportRequest	Grants permission to submit a customer service support request			Write
SuspendUsers	Grants permission to suspend users from an Amazon Chime Enterprise account			Write
TagAttendee	Grants permission to apply the specified tags to the specified Amazon Chime SDK attendee	meeting*	aws:ResourceTag/${TagKey}	Tagging, Write
TagMeeting	Grants permission to apply the specified tags to the specified Amazon Chime SDK meeting	meeting*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
TagResource	Grants permission to apply the specified tags to the specified resource (tag-based access controls are only supported on *-chime.<region>.amazonaws.com endpoints)	app-instance	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		app-instance-bot	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		app-instance-user	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		channel	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		channel-flow	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		media-insights-pipeline-configuration	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		media-pipeline	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		media-pipeline-kinesis-video-stream-pool	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		meeting	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		sip-media-application	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		voice-connector	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		voice-profile-domain	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
UnauthorizeDirectory	Grants permission to unauthorize an Active Directory from your Amazon Chime Enterprise account			Write
UntagAttendee	Grants permission to untag the specified tags from the specified Amazon Chime SDK attendee	meeting*	aws:ResourceTag/${TagKey}	Tagging, Write
UntagMeeting	Grants permission to untag the specified tags from the specified Amazon Chime SDK meeting	meeting*	aws:ResourceTag/${TagKey}	Tagging, Write
UntagResource	Grants permission to untag the specified tags from the specified resource (tag-based access controls are only supported on *-chime.<region>.amazonaws.com endpoints)	app-instance	aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		app-instance-bot	aws:ResourceTag/${TagKey} aws:TagKeys
		app-instance-user	aws:ResourceTag/${TagKey} aws:TagKeys
		channel	aws:ResourceTag/${TagKey} aws:TagKeys
		channel-flow	aws:ResourceTag/${TagKey} aws:TagKeys
		media-insights-pipeline-configuration	aws:ResourceTag/${TagKey} aws:TagKeys
		media-pipeline	aws:ResourceTag/${TagKey} aws:TagKeys
		media-pipeline-kinesis-video-stream-pool	aws:ResourceTag/${TagKey} aws:TagKeys
		meeting	aws:ResourceTag/${TagKey} aws:TagKeys
		sip-media-application	aws:ResourceTag/${TagKey} aws:TagKeys
		voice-connector	aws:ResourceTag/${TagKey} aws:TagKeys
		voice-profile-domain	aws:ResourceTag/${TagKey} aws:TagKeys
UpdateAccount	Grants permission to update account details for the specified Amazon Chime account			Write
UpdateAccountOpenIdConfig	Grants permission to update the OpenIdConfig attributes for your Amazon Chime account			Write
UpdateAccountResource	Grants permission to update the account resource in your Amazon Chime account			Write
UpdateAccountSettings	Grants permission to update the settings for the specified Amazon Chime account			Write
UpdateAppInstance	Grants permission to update AppInstance metadata	app-instance*	aws:ResourceTag/${TagKey}	Write
UpdateAppInstanceBot	Grants permission to update the details for an AppInstanceBot	app-instance-bot*	aws:ResourceTag/${TagKey}	Write
UpdateAppInstanceUser	Grants permission to update the details for an AppInstanceUser	app-instance-user*	aws:ResourceTag/${TagKey}	Write
UpdateAppInstanceUserEndpoint	Grants permission to update an endpoint registered for an app instance user	app-instance-user*	aws:ResourceTag/${TagKey}	Write
UpdateAttendeeCapabilities	Grants permission to the capabilties that you want to update	meeting*	aws:ResourceTag/${TagKey}	Write
UpdateBot	Grants permission to update the status of the specified bot			Write
UpdateCDRSettings	Grants permission to update your Call Detail Record S3 bucket			Write
UpdateChannel	Grants permission to update a channel's attributes	app-instance-bot*	aws:ResourceTag/${TagKey}	Write
		app-instance-user*	aws:ResourceTag/${TagKey}
		channel*	aws:ResourceTag/${TagKey}
UpdateChannelFlow	Grants permission to update a channel flow	channel-flow*	aws:ResourceTag/${TagKey}	Write
UpdateChannelMessage	Grants permission to update the content of a message	app-instance-bot*	aws:ResourceTag/${TagKey}	Write
		app-instance-user*	aws:ResourceTag/${TagKey}
		channel*	aws:ResourceTag/${TagKey}
UpdateChannelReadMarker	Grants permission to set the timestamp to the point when a user last read messages in a channel	app-instance-bot*	aws:ResourceTag/${TagKey}	Write
		app-instance-user*	aws:ResourceTag/${TagKey}
		channel*	aws:ResourceTag/${TagKey}
UpdateGlobalSettings	Grants permission to update the global settings related to Amazon Chime for the AWS account			Write
UpdateMediaInsightsPipelineConfiguration	Grants permission to update the status of a media insights pipeline configuration	media-insights-pipeline-configuration*	aws:ResourceTag/${TagKey}	Write
UpdateMediaInsightsPipelineStatus	Grants permission to update the status of a media insights pipeline	media-pipeline*	aws:ResourceTag/${TagKey}	Write
UpdateMediaPipelineKinesisVideoStreamPool	Grants permission to update kinesis video stream pool	media-pipeline-kinesis-video-stream-pool*	aws:ResourceTag/${TagKey}	Write
UpdatePhoneNumber	Grants permission to update phone number details for the specified phone number			Write
UpdatePhoneNumberSettings	Grants permission to update phone number settings related to Amazon Chime for the AWS account			Write
UpdateProxySession	Grants permission to update a proxy session for the specified Amazon Chime Voice Connector	voice-connector*	aws:ResourceTag/${TagKey}	Write
UpdateRoom	Grants permission to update a room			Write
UpdateRoomMembership	Grants permission to update room membership role			Write
UpdateSipMediaApplication	Grants permission to update properties of Amazon Chime SIP media application under the administrator's AWS account	sip-media-application*	aws:ResourceTag/${TagKey}	Write
UpdateSipMediaApplicationCall	Grants permission to update an Amazon Chime SIP media application call under the administrator's AWS account	sip-media-application*	aws:ResourceTag/${TagKey}	Write
UpdateSipRule	Grants permission to update properties of Amazon Chime SIP rule under the administrator's AWS account	sip-media-application	aws:ResourceTag/${TagKey}	Write
UpdateSupportedLicenses	Grants permission to update the supported license tiers available for users in your Amazon Chime account			Write
UpdateUser	Grants permission to update user details for a specified user ID			Write
UpdateUserLicenses	Grants permission to update the licenses for your Amazon Chime users			Write
UpdateUserSettings	Grants permission to update user settings related to the specified Amazon Chime user			Write
UpdateVoiceConnector	Grants permission to update Amazon Chime Voice Connector details for the specified Amazon Chime Voice Connector	voice-connector*	aws:ResourceTag/${TagKey}	Write
UpdateVoiceConnectorGroup	Grants permission to update Amazon Chime Voice Connector Group details for the specified Amazon Chime Voice Connector Group	voice-connector	aws:ResourceTag/${TagKey}	Write
UpdateVoiceProfile	Grants permission to update a voice profile	voice-profile*		Write
UpdateVoiceProfileDomain	Grants permission to update a voice profile domain	voice-profile-domain*	aws:ResourceTag/${TagKey}	Write
ValidateAccountResource	Grants permission to validate the account resource in your Amazon Chime account			Read
ValidateE911Address	Grants permission to validate an address to be used for 911 calls made with Amazon Chime Voice Connectors			Read

Permission-only actions for Amazon Chime

The following actions are defined by Amazon Chime but are not directly invocable through any API operation. They can only be used in IAM policy statements to grant or deny permissions.

Actions	Description	Condition keys	Access level
AssociateVoiceConnectorConnect	Grants permission to associate the specified Amazon Connect instance with an Amazon Chime Voice Connector		Write
CreateConnectAnalyticsConnector	Grants permission to create an Amazon Connect Analytics Connector in the AWS account (tag-based access controls are only supported on voice-chime.<region>.amazonaws.com endpoints)	aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateConnectCallTransferConnector	Grants permission to create an Amazon Connect Call Transfer Connector in the AWS account (tag-based access controls are only supported on voice-chime.<region>.amazonaws.com endpoints)	aws:RequestTag/${TagKey} aws:TagKeys	Write
DisassociateVoiceConnectorConnect	Grants permission to disassociate the Amazon Connect instance from the specified Amazon Chime Voice Connector		Write

Resource types defined by Amazon Chime

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
app-instance	arn:${Partition}:chime:${Region}:${AccountId}:app-instance/${AppInstanceId}	aws:ResourceTag/${TagKey}
app-instance-bot	arn:${Partition}:chime:${Region}:${AccountId}:app-instance/${AppInstanceId}/bot/${AppInstanceBotId}	aws:ResourceTag/${TagKey}
app-instance-user	arn:${Partition}:chime:${Region}:${AccountId}:app-instance/${AppInstanceId}/user/${AppInstanceUserId}	aws:ResourceTag/${TagKey}
channel	arn:${Partition}:chime:${Region}:${AccountId}:app-instance/${AppInstanceId}/channel/${ChannelId}	aws:ResourceTag/${TagKey}
channel-flow	arn:${Partition}:chime:${Region}:${AccountId}:app-instance/${AppInstanceId}/channel-flow/${ChannelFlowId}	aws:ResourceTag/${TagKey}
media-insights-pipeline-configuration	arn:${Partition}:chime:${Region}:${AccountId}:media-insights-pipeline-configuration/${ConfigurationName}	aws:ResourceTag/${TagKey}
media-pipeline	arn:${Partition}:chime:${Region}:${AccountId}:media-pipeline/${MediaPipelineId}	aws:ResourceTag/${TagKey}
media-pipeline-kinesis-video-stream-pool	arn:${Partition}:chime:${Region}:${AccountId}:media-pipeline-kinesis-video-stream-pool/${PoolName}	aws:ResourceTag/${TagKey}
meeting	arn:${Partition}:chime:${Region}:${AccountId}:meeting/${MeetingId}	aws:ResourceTag/${TagKey}
sip-media-application	arn:${Partition}:chime:${Region}:${AccountId}:sma/${SipMediaApplicationId}	aws:ResourceTag/${TagKey}
voice-connector	arn:${Partition}:chime:${Region}:${AccountId}:vc/${VoiceConnectorId}	aws:ResourceTag/${TagKey}
voice-profile	arn:${Partition}:chime:${Region}:${AccountId}:voice-profile/${VoiceProfileId}
voice-profile-domain	arn:${Partition}:chime:${Region}:${AccountId}:voice-profile-domain/${VoiceProfileDomainId}	aws:ResourceTag/${TagKey}

Condition keys for Amazon Chime

Amazon Chime defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys	Description	Type
aws:RequestTag/${TagKey}	Filters access by a tag's key and value in a request	String
aws:ResourceTag/${TagKey}	Filters access by the tag key-value pairs attached to the resource	String
aws:TagKeys	Filters access by the tag keys in a request	ArrayOfString

Warning Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Document Conventions

Amazon Braket (braket)

Amazon Cloud Directory (clouddirectory)