Operations Actions Resource types Condition keys

Actions, resources, and condition keys for AWS IoT Core Device Advisor

AWS IoT Core Device Advisor (service prefix: iotdeviceadvisor) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by AWS IoT Core Device Advisor
Actions defined by AWS IoT Core Device Advisor
Resource types defined by AWS IoT Core Device Advisor
Condition keys for AWS IoT Core Device Advisor

API operations defined by AWS IoT Core Device Advisor

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Condition key	Possible value(s)	Access level
CreateSuiteDefinition	iotdeviceadvisor:CreateSuiteDefinition			Write
	iotdeviceadvisor:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	iotdeviceadvisor.amazonaws.com	Write
DeleteSuiteDefinition	iotdeviceadvisor:DeleteSuiteDefinition			Write
GetEndpoint	iotdeviceadvisor:GetEndpoint			Read
GetEndpoint	iam:PassRole	iam:PassedToService	iotdeviceadvisor.amazonaws.com	Write
GetSuiteDefinition	iotdeviceadvisor:GetSuiteDefinition			Read
GetSuiteRun	iotdeviceadvisor:GetSuiteRun			Read
GetSuiteRunReport	iotdeviceadvisor:GetSuiteRunReport			Read
ListSuiteDefinitions	iotdeviceadvisor:ListSuiteDefinitions			List
ListSuiteRuns	iotdeviceadvisor:ListSuiteRuns			List
ListTagsForResource	iotdeviceadvisor:ListTagsForResource			Read
StartSuiteRun	iotdeviceadvisor:StartSuiteRun			Write
	iotdeviceadvisor:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	iotdeviceadvisor.amazonaws.com	Write
StopSuiteRun	iotdeviceadvisor:StopSuiteRun			Write
TagResource	iotdeviceadvisor:TagResource			Tagging, Write
UntagResource	iotdeviceadvisor:UntagResource			Tagging, Write
UpdateSuiteDefinition	iotdeviceadvisor:UpdateSuiteDefinition			Write
UpdateSuiteDefinition	iam:PassRole	iam:PassedToService	iotdeviceadvisor.amazonaws.com	Write

Actions defined by AWS IoT Core Device Advisor

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
CreateSuiteDefinition	Grants permission to create a suite definition		aws:RequestTag/${TagKey} aws:TagKeys	Write
DeleteSuiteDefinition	Grants permission to delete a suite definition	Suitedefinition*	aws:ResourceTag/${TagKey}	Write
GetEndpoint	Grants permission to get a Device Advisor endpoint			Read
GetSuiteDefinition	Grants permission to get a suite definition	Suitedefinition*	aws:ResourceTag/${TagKey}	Read
GetSuiteRun	Grants permission to get a suite run	Suiterun*	aws:ResourceTag/${TagKey}	Read
GetSuiteRunReport	Grants permission to get the qualification report for a suite run	Suiterun*	aws:ResourceTag/${TagKey}	Read
ListSuiteDefinitions	Grants permission to list suite definitions			List
ListSuiteRuns	Grants permission to list suite runs	Suitedefinition*	aws:ResourceTag/${TagKey}	List
ListTagsForResource	Grants permission to list the tags (metadata) assigned to a resource	Suitedefinition	aws:ResourceTag/${TagKey}	Read
ListTagsForResource		Suiterun	aws:ResourceTag/${TagKey}	Read
StartSuiteRun	Grants permission to start a suite run		aws:RequestTag/${TagKey} aws:TagKeys	Write
StopSuiteRun	Grants permission to stop a suite run	Suiterun*	aws:ResourceTag/${TagKey}	Write
TagResource	Grants permission to add to or modify the tags of the given resource. Tags are metadata which can be used to manage a resource	Suitedefinition	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
TagResource		Suiterun	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
UntagResource	Grants permission to remove the given tags (metadata) from a resource	Suitedefinition	aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
UntagResource		Suiterun	aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
UpdateSuiteDefinition	Grants permission to update a suite definition	Suitedefinition*	aws:ResourceTag/${TagKey}	Write

Resource types defined by AWS IoT Core Device Advisor

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
Suitedefinition	arn:${Partition}:iotdeviceadvisor:${Region}:${Account}:suitedefinition/${SuiteDefinitionId}	aws:ResourceTag/${TagKey}
Suiterun	arn:${Partition}:iotdeviceadvisor:${Region}:${Account}:suiterun/${SuiteDefinitionId}/${SuiteRunId}	aws:ResourceTag/${TagKey}

Condition keys for AWS IoT Core Device Advisor

AWS IoT Core Device Advisor defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys	Description	Type
aws:RequestTag/${TagKey}	Filters access by the tags that are passed in the request	String
aws:ResourceTag/${TagKey}	Filters access by the tags associated with the resource	String
aws:TagKeys	Filters access by the tag keys that are passed in the request	ArrayOfString

Warning Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Document Conventions

AWS IoT Analytics (iotanalytics)

AWS IoT Device Tester (iot-device-tester)