Operations Actions Permission-only actions Resource types Condition keys

Actions, resources, and condition keys for Amazon Lex V2

Amazon Lex V2 (service prefix: lex) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by Amazon Lex V2
Actions defined by Amazon Lex V2
Permission-only actions for Amazon Lex V2
Resource types defined by Amazon Lex V2
Condition keys for Amazon Lex V2

API operations defined by Amazon Lex V2

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	SDK client	IAM action	Condition key	Possible value(s)	Access level
BatchCreateCustomVocabularyItem	lexv2-models	lex:BatchCreateCustomVocabularyItem			Write
BatchDeleteCustomVocabularyItem	lexv2-models	lex:BatchDeleteCustomVocabularyItem			Write
BatchUpdateCustomVocabularyItem	lexv2-models	lex:BatchUpdateCustomVocabularyItem			Write
BuildBotLocale	lexv2-models	lex:BuildBotLocale			Write
CreateBot	lexv2-models	lex:CreateBot			Write
		lex:DescribeBotAlias			Read
		lex:DescribeBotVersion			Read
		lex:TagResource			Tagging, Write
		iam:PassRole	iam:PassedToService	lexv2.amazonaws.com	Write
CreateBotAlias	lexv2-models	lex:CreateBotAlias			Write
CreateBotAlias	lexv2-models	lex:TagResource			Tagging, Write
CreateBotLocale	lexv2-models	lex:CreateBotLocale			Write
CreateBotReplica	lexv2-models	lex:CreateBotReplica			Write
CreateBotVersion	lexv2-models	lex:CreateBotVersion			Write
CreateExport	lexv2-models	lex:CreateExport			Write
CreateIntent	lexv2-models	lex:CreateIntent			Write
CreateResourcePolicy	lexv2-models	lex:CreateResourcePolicy			Write
CreateResourcePolicyStatement	lexv2-models	lex:CreateResourcePolicy			Write
CreateResourcePolicyStatement	lexv2-models	lex:UpdateResourcePolicy			Write
CreateSlot	lexv2-models	lex:CreateSlot			Write
CreateSlotType	lexv2-models	lex:CreateSlotType			Write
CreateTestSetDiscrepancyReport	lexv2-models	lex:CreateTestSetDiscrepancyReport			Write
CreateUploadUrl	lexv2-models	lex:CreateUploadUrl			Write
DeleteBot	lexv2-models	lex:DeleteBot			Write
		lex:DeleteBotAlias			Write
		lex:DeleteBotChannel			Write
		lex:DeleteBotLocale			Write
		lex:DeleteBotVersion			Write
		lex:DeleteCustomVocabulary			Write
		lex:DeleteIntent			Write
		lex:DeleteResourcePolicy			Write
		lex:DeleteSlot			Write
		lex:DeleteSlotType			Write
DeleteBotAlias	lexv2-models	lex:DeleteBotAlias			Write
DeleteBotAlias	lexv2-models	lex:DeleteResourcePolicy			Write
DeleteBotAnalyzerRecommendation	lexv2-models	lex:DeleteBotAnalyzerRecommendation			Write
DeleteBotLocale	lexv2-models	lex:DeleteBotLocale			Write
		lex:DeleteCustomVocabulary			Write
		lex:DeleteIntent			Write
		lex:DeleteSlot			Write
		lex:DeleteSlotType			Write
DeleteBotReplica	lexv2-models	lex:DeleteBotReplica			Write
DeleteBotVersion	lexv2-models	lex:DeleteBotVersion			Write
DeleteCustomVocabulary	lexv2-models	lex:DeleteCustomVocabulary			Write
DeleteExport	lexv2-models	lex:DeleteExport			Write
DeleteImport	lexv2-models	lex:DeleteImport			Write
DeleteIntent	lexv2-models	lex:DeleteIntent			Write
DeleteResourcePolicy	lexv2-models	lex:DeleteResourcePolicy			Write
DeleteResourcePolicyStatement	lexv2-models	lex:DeleteResourcePolicy			Write
DeleteResourcePolicyStatement	lexv2-models	lex:UpdateResourcePolicy			Write
DeleteSlot	lexv2-models	lex:DeleteSlot			Write
DeleteSlotType	lexv2-models	lex:DeleteSlotType			Write
DeleteTestSet	lexv2-models	lex:DeleteTestSet			Write
DeleteUtterances	lexv2-models	lex:DeleteUtterances			Write
DescribeBot	lexv2-models	lex:DescribeBot			Read
		lex:DescribeBotAlias			Read
		lex:DescribeBotVersion			Read
DescribeBotAlias	lexv2-models	lex:DescribeBotAlias			Read
DescribeBotAnalyzerRecommendation	lexv2-models	lex:DescribeBotAnalyzerRecommendation			Read
DescribeBotLocale	lexv2-models	lex:DescribeBotLocale			Read
DescribeBotRecommendation	lexv2-models	lex:DescribeBotRecommendation			Read
DescribeBotReplica	lexv2-models	lex:DescribeBotReplica			Read
DescribeBotResourceGeneration	lexv2-models	lex:DescribeBotResourceGeneration			Read
DescribeBotVersion	lexv2-models	lex:DescribeBotAlias			Read
DescribeBotVersion	lexv2-models	lex:DescribeBotVersion			Read
DescribeCustomVocabularyMetadata	lexv2-models	lex:DescribeCustomVocabularyMetadata			Read
DescribeExport	lexv2-models	lex:DescribeBot			Read
		lex:DescribeBotLocale			Read
		lex:DescribeCustomVocabulary			Read
		lex:DescribeExport			Read
		lex:DescribeIntent			Read
		lex:DescribeSlot			Read
		lex:DescribeSlotType			Read
		lex:DescribeTestSet			Read
		lex:ListBotLocales			List
		lex:ListIntents			List
		lex:ListSlots			List
		lex:ListSlotTypes			List
DescribeImport	lexv2-models	lex:DescribeImport			Read
DescribeIntent	lexv2-models	lex:DescribeIntent			Read
DescribeResourcePolicy	lexv2-models	lex:DescribeResourcePolicy			Read
DescribeSlot	lexv2-models	lex:DescribeSlot			Read
DescribeSlotType	lexv2-models	lex:DescribeSlotType			Read
DescribeTestExecution	lexv2-models	lex:DescribeTestExecution			Read
DescribeTestSet	lexv2-models	lex:DescribeTestSet			Read
DescribeTestSetDiscrepancyReport	lexv2-models	lex:DescribeTestSetDiscrepancyReport			Read
DescribeTestSetGeneration	lexv2-models	lex:DescribeTestSetGeneration			Read
GenerateBotElement	lexv2-models	lex:GenerateBotElement			Read
GetTestExecutionArtifactsUrl	lexv2-models	lex:GetTestExecutionArtifactsUrl			Read
ListAggregatedUtterances	lexv2-models	lex:ListAggregatedUtterances			List
ListBotAliasReplicas	lexv2-models	lex:ListBotAliasReplicas			List
ListBotAliases	lexv2-models	lex:ListBotAliases			List
ListBotLocales	lexv2-models	lex:ListBotLocales			List
ListBotRecommendations	lexv2-models	lex:ListBotRecommendations			List
ListBotReplicas	lexv2-models	lex:ListBotReplicas			List
ListBotResourceGenerations	lexv2-models	lex:ListBotResourceGenerations			List
ListBotVersionReplicas	lexv2-models	lex:ListBotVersionReplicas			List
ListBotVersions	lexv2-models	lex:ListBotVersions			List
ListBots	lexv2-models	lex:ListBots			List
ListBuiltInIntents	lexv2-models	lex:ListBuiltInIntents			List
ListBuiltInSlotTypes	lexv2-models	lex:ListBuiltInSlotTypes			List
ListCustomVocabularyItems	lexv2-models	lex:ListCustomVocabularyItems			List
ListExports	lexv2-models	lex:ListExports			List
ListImports	lexv2-models	lex:ListImports			List
ListIntentMetrics	lexv2-models	lex:ListIntentMetrics			List
ListIntentPaths	lexv2-models	lex:ListIntentPaths			List
ListIntentStageMetrics	lexv2-models	lex:ListIntentStageMetrics			List
ListIntents	lexv2-models	lex:ListIntents			List
ListRecommendedIntents	lexv2-models	lex:ListRecommendedIntents			List
ListSessionAnalyticsData	lexv2-models	lex:ListSessionAnalyticsData			List
ListSessionMetrics	lexv2-models	lex:ListSessionMetrics			List
ListSlotTypes	lexv2-models	lex:ListSlotTypes			List
ListSlots	lexv2-models	lex:ListSlots			List
ListTagsForResource	lexv2-models	lex:ListTagsForResource			Read
ListTestExecutionResultItems	lexv2-models	lex:ListTestExecutionResultItems			Read
ListTestExecutionResultItems	lexv2-models	lex:ListTestSetRecords			Read
ListTestExecutions	lexv2-models	lex:ListTestExecutions			List
ListTestSetRecords	lexv2-models	lex:ListTestSetRecords			Read
ListTestSets	lexv2-models	lex:ListTestSets			List
ListUtteranceAnalyticsData	lexv2-models	lex:ListAggregatedUtterances			List
ListUtteranceMetrics	lexv2-models	lex:ListAggregatedUtterances			List
SearchAssociatedTranscripts	lexv2-models	lex:SearchAssociatedTranscripts			List
StartBotAnalyzer	lexv2-models	lex:StartBotAnalyzer			Write
StartBotRecommendation	lexv2-models	lex:CreateIntent			Write
		lex:CreateSlot			Write
		lex:CreateSlotType			Write
		lex:DeleteIntent			Write
		lex:DeleteSlot			Write
		lex:DeleteSlotType			Write
		lex:StartBotRecommendation			Write
StartBotResourceGeneration	lexv2-models	lex:StartBotResourceGeneration			Write
StartImport	lexv2-models	lex:CreateBot			Write
		lex:CreateBotLocale			Write
		lex:CreateCustomVocabulary			Write
		lex:CreateIntent			Write
		lex:CreateSlot			Write
		lex:CreateSlotType			Write
		lex:CreateTestSet			Write
		lex:DeleteBotLocale			Write
		lex:DeleteCustomVocabulary			Write
		lex:DeleteIntent			Write
		lex:DeleteSlot			Write
		lex:DeleteSlotType			Write
		lex:StartImport			Write
		lex:TagResource			Tagging, Write
		lex:UpdateBot			Write
		lex:UpdateBotLocale			Write
		lex:UpdateCustomVocabulary			Write
		lex:UpdateIntent			Write
		lex:UpdateSlot			Write
		lex:UpdateSlotType			Write
		lex:UpdateTestSet			Write
		iam:PassRole	iam:PassedToService	lexv2.amazonaws.com	Write
StartTestExecution	lexv2-models	lex:StartTestExecution			Write
StartTestSetGeneration	lexv2-models	lex:StartTestSetGeneration			Write
		lex:TagResource			Tagging, Write
		iam:PassRole	iam:PassedToService	lexv2.amazonaws.com	Write
StopBotAnalyzer	lexv2-models	lex:StopBotAnalyzer			Write
StopBotRecommendation	lexv2-models	lex:StopBotRecommendation			Write
TagResource	lexv2-models	lex:TagResource			Tagging, Write
UntagResource	lexv2-models	lex:UntagResource			Tagging, Write
UpdateBot	lexv2-models	lex:DescribeBotAlias			Read
		lex:DescribeBotVersion			Read
		lex:UpdateBot			Write
		iam:PassRole	iam:PassedToService	lexv2.amazonaws.com	Write
UpdateBotAlias	lexv2-models	lex:UpdateBotAlias			Write
UpdateBotLocale	lexv2-models	lex:UpdateBotLocale			Write
UpdateBotRecommendation	lexv2-models	lex:UpdateBotRecommendation			Write
UpdateExport	lexv2-models	lex:UpdateExport			Write
UpdateIntent	lexv2-models	lex:UpdateIntent			Write
UpdateResourcePolicy	lexv2-models	lex:UpdateResourcePolicy			Write
UpdateSlot	lexv2-models	lex:UpdateSlot			Write
UpdateSlotType	lexv2-models	lex:UpdateSlotType			Write
UpdateTestSet	lexv2-models	lex:UpdateTestSet			Write
DeleteSession	lexv2-runtime	lex:DeleteSession			Write
GetSession	lexv2-runtime	lex:GetSession			Read
PutSession	lexv2-runtime	lex:PutSession			Write
RecognizeText	lexv2-runtime	lex:RecognizeText			Write
RecognizeUtterance	lexv2-runtime	lex:RecognizeUtterance			Write
StartConversation	lexv2-runtime	lex:StartConversation			Write

Actions defined by Amazon Lex V2

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
BatchCreateCustomVocabularyItem	Grants permission to create new items in an existing custom vocabulary	bot*	aws:ResourceTag/${TagKey}	Write
BatchDeleteCustomVocabularyItem	Grants permission to delete existing items in an existing custom vocabulary	bot*	aws:ResourceTag/${TagKey}	Write
BatchUpdateCustomVocabularyItem	Grants permission to update existing items in an existing custom vocabulary	bot*	aws:ResourceTag/${TagKey}	Write
BuildBotLocale	Grants permission to build an existing bot locale in a bot	bot*	aws:ResourceTag/${TagKey}	Write
CreateBot	Grants permission to create a new bot and a test bot alias pointing to the DRAFT bot version	bot*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateBot		bot alias*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateBotAlias	Grants permission to create a new bot alias in a bot	bot alias*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateBotLocale	Grants permission to create a new bot locale in an existing bot	bot*	aws:ResourceTag/${TagKey}	Write
CreateBotReplica	Grants permission to create bot replica for a bot	bot*	aws:ResourceTag/${TagKey}	Write
CreateBotVersion	Grants permission to create a new version of an existing bot	bot*	aws:ResourceTag/${TagKey}	Write
CreateExport	Grants permission to create an export for an existing resource	bot	aws:ResourceTag/${TagKey}	Write
CreateExport		test set	aws:ResourceTag/${TagKey}	Write
CreateIntent	Grants permission to create a new intent in an existing bot locale	bot*	aws:ResourceTag/${TagKey}	Write
CreateResourcePolicy	Grants permission to create a new resource policy for a Lex resource	bot	aws:ResourceTag/${TagKey}	Write
CreateResourcePolicy		bot alias	aws:ResourceTag/${TagKey}	Write
CreateResourcePolicyStatement	Grants permission to create a new resource policy statement for a Lex resource	bot	aws:ResourceTag/${TagKey}	Write
CreateResourcePolicyStatement		bot alias	aws:ResourceTag/${TagKey}	Write
CreateSlot	Grants permission to create a new slot in an intent	bot*	aws:ResourceTag/${TagKey}	Write
CreateSlotType	Grants permission to create a new slot type in an existing bot locale	bot*	aws:ResourceTag/${TagKey}	Write
CreateTestSetDiscrepancyReport	Grants permission to create a test set discrepancy report	test set*	aws:ResourceTag/${TagKey}	Write
CreateUploadUrl	Grants permission to create an upload url for import file			Write
DeleteBot	Grants permission to delete an existing bot	bot*	aws:ResourceTag/${TagKey}	Write
DeleteBot	Grants permission to delete an existing bot	bot alias*	aws:ResourceTag/${TagKey}	Write
DeleteBotAlias	Grants permission to delete an existing bot alias in a bot	bot alias*	aws:ResourceTag/${TagKey}	Write
DeleteBotAnalyzerRecommendation	Grants permission to delete a bot analyzer recommendation	bot*	aws:ResourceTag/${TagKey}	Write
DeleteBotLocale	Grants permission to delete an existing bot locale in a bot	bot*	aws:ResourceTag/${TagKey}	Write
DeleteBotReplica	Grants permission to delete an existing bot replica	bot*	aws:ResourceTag/${TagKey}	Write
DeleteBotVersion	Grants permission to delete an existing bot version	bot*	aws:ResourceTag/${TagKey}	Write
DeleteCustomVocabulary	Grants permission to delete an existing custom vocabulary in a bot locale	bot*	aws:ResourceTag/${TagKey}	Write
DeleteExport	Grants permission to delete an existing export	bot	aws:ResourceTag/${TagKey}	Write
DeleteExport	Grants permission to delete an existing export	test set	aws:ResourceTag/${TagKey}	Write
DeleteImport	Grants permission to delete an existing import	bot	aws:ResourceTag/${TagKey}	Write
DeleteImport	Grants permission to delete an existing import	test set	aws:ResourceTag/${TagKey}	Write
DeleteIntent	Grants permission to delete an existing intent in a bot locale	bot*	aws:ResourceTag/${TagKey}	Write
DeleteResourcePolicy	Grants permission to delete an existing resource policy for a Lex resource	bot	aws:ResourceTag/${TagKey}	Write
DeleteResourcePolicy		bot alias	aws:ResourceTag/${TagKey}	Write
DeleteResourcePolicyStatement	Grants permission to delete an existing resource policy statement for a Lex resource	bot	aws:ResourceTag/${TagKey}	Write
DeleteResourcePolicyStatement		bot alias	aws:ResourceTag/${TagKey}	Write
DeleteSession	Grants permission to delete session information for a bot alias and user ID	bot alias*	aws:ResourceTag/${TagKey}	Write
DeleteSlot	Grants permission to delete an existing slot in an intent	bot*	aws:ResourceTag/${TagKey}	Write
DeleteSlotType	Grants permission to delete an existing slot type in a bot locale	bot*	aws:ResourceTag/${TagKey}	Write
DeleteTestSet	Grants permission to delete an existing test set	test set*	aws:ResourceTag/${TagKey}	Write
DeleteUtterances	Grants permission to delete utterance data for a bot	bot*	aws:ResourceTag/${TagKey}	Write
DescribeBot	Grants permission to retrieve an existing bot	bot*	aws:ResourceTag/${TagKey}	Read
DescribeBotAlias	Grants permission to retrieve an existing bot alias	bot alias*	aws:ResourceTag/${TagKey}	Read
DescribeBotAnalyzerRecommendation	Grants permission to describe a bot analyzer recommendation	bot*	aws:ResourceTag/${TagKey}	Read
DescribeBotLocale	Grants permission to retrieve an existing bot locale	bot*	aws:ResourceTag/${TagKey}	Read
DescribeBotRecommendation	Grants permission to retrieve metadata information about a bot recommendation	bot*	aws:ResourceTag/${TagKey}	Read
DescribeBotReplica	Grants permission to retrieve an existing bot replica	bot*	aws:ResourceTag/${TagKey}	Read
DescribeBotResourceGeneration	Grants permission to retrieve metadata information for a bot resource generation	bot*	aws:ResourceTag/${TagKey}	Read
DescribeBotVersion	Grants permission to retrieve an existing bot version	bot*	aws:ResourceTag/${TagKey}	Read
DescribeCustomVocabularyMetadata	Grants permission to retrieve metadata of an existing custom vocabulary	bot*	aws:ResourceTag/${TagKey}	Read
DescribeExport	Grants permission to retrieve an existing export	bot	aws:ResourceTag/${TagKey}	Read
DescribeExport	Grants permission to retrieve an existing export	test set	aws:ResourceTag/${TagKey}	Read
DescribeImport	Grants permission to retrieve an existing import	bot	aws:ResourceTag/${TagKey}	Read
DescribeImport	Grants permission to retrieve an existing import	test set	aws:ResourceTag/${TagKey}	Read
DescribeIntent	Grants permission to retrieve an existing intent	bot*	aws:ResourceTag/${TagKey}	Read
DescribeResourcePolicy	Grants permission to retrieve an existing resource policy for a Lex resource	bot	aws:ResourceTag/${TagKey}	Read
DescribeResourcePolicy		bot alias	aws:ResourceTag/${TagKey}	Read
DescribeSlot	Grants permission to retrieve an existing slot	bot*	aws:ResourceTag/${TagKey}	Read
DescribeSlotType	Grants permission to retrieve an existing slot type	bot*	aws:ResourceTag/${TagKey}	Read
DescribeTestExecution	Grants permission to retrieve test execution metadata	test set*	aws:ResourceTag/${TagKey}	Read
DescribeTestSet	Grants permission to retrieve an existing test set	test set*	aws:ResourceTag/${TagKey}	Read
DescribeTestSetDiscrepancyReport	Grants permission to retrieve test set discrepancy report metadata	test set*	aws:ResourceTag/${TagKey}	Read
DescribeTestSetGeneration	Grants permission to retrieve test set generation metadata	test set	aws:ResourceTag/${TagKey}	Read
GenerateBotElement	Grants permission to generate supported fields or elements for a bot	bot*	aws:ResourceTag/${TagKey}	Read
GetSession	Grants permission to retrieve session information for a bot alias and user ID	bot alias*	aws:ResourceTag/${TagKey}	Read
GetTestExecutionArtifactsUrl	Grants permission to retrieve artifacts URL for a test execution	test set*	aws:ResourceTag/${TagKey}	Read
ListAggregatedUtterances	Grants permission to list utterances and statistics for a bot	bot*	aws:ResourceTag/${TagKey}	List
ListBotAliasReplicas	Grants permission to list alias replicas in a bot replica	bot*	aws:ResourceTag/${TagKey}	List
ListBotAliases	Grants permission to list bot aliases in an bot	bot*	aws:ResourceTag/${TagKey}	List
ListBotAnalyzerRecommendations	Grants permission to list bot analyzer recommendations	bot*	aws:ResourceTag/${TagKey}	List
ListBotLocales	Grants permission to list bot locales in a bot	bot*	aws:ResourceTag/${TagKey}	List
ListBotRecommendations	Grants permission to get a list of bot recommendations that meet the specified criteria	bot*	aws:ResourceTag/${TagKey}	List
ListBotReplicas	Grants permission to list replicas of a bot	bot*	aws:ResourceTag/${TagKey}	List
ListBotResourceGenerations	Grants permission to list the resource generations for a bot	bot*	aws:ResourceTag/${TagKey}	List
ListBotVersionReplicas	Grants permission to list version replicas in a bot replica	bot*	aws:ResourceTag/${TagKey}	List
ListBotVersions	Grants permission to list existing bot versions	bot*	aws:ResourceTag/${TagKey}	List
ListBots	Grants permission to list existing bots			List
ListBuiltInIntents	Grants permission to list built-in intents			List
ListBuiltInSlotTypes	Grants permission to list built-in slot types			List
ListCustomVocabularyItems	Grants permission to list items of an existing custom vocabulary	bot*	aws:ResourceTag/${TagKey}	List
ListExports	Grants permission to list existing exports			List
ListImports	Grants permission to list existing imports			List
ListIntentMetrics	Grants permission to list intent analytics metrics for a bot	bot*	aws:ResourceTag/${TagKey}	List
ListIntentPaths	Grants permission to list intent path analytics for a bot	bot*	aws:ResourceTag/${TagKey}	List
ListIntentStageMetrics	Grants permission to list intentStage analytics metrics for a bot	bot*	aws:ResourceTag/${TagKey}	List
ListIntents	Grants permission to list intents in a bot	bot*	aws:ResourceTag/${TagKey}	List
ListRecommendedIntents	Grants permission to get a list of recommended intents provided by the bot recommendation	bot*	aws:ResourceTag/${TagKey}	List
ListSessionAnalyticsData	Grants permission to list session analytics data for a bot	bot*	aws:ResourceTag/${TagKey}	List
ListSessionMetrics	Grants permission to list session analytics metrics for a bot	bot*	aws:ResourceTag/${TagKey}	List
ListSlotTypes	Grants permission to list slot types in a bot	bot*	aws:ResourceTag/${TagKey}	List
ListSlots	Grants permission to list slots in an intent	bot*	aws:ResourceTag/${TagKey}	List
ListTagsForResource	Grants permission to lists tags for a Lex resource	bot	aws:ResourceTag/${TagKey}	Read
		bot alias	aws:ResourceTag/${TagKey}
		test set	aws:ResourceTag/${TagKey}
ListTestExecutionResultItems	Grants permission to retrieve test results data for a test execution	test set*	aws:ResourceTag/${TagKey}	Read
ListTestExecutions	Grants permission to list test executions			List
ListTestSetRecords	Grants permission to retrieve records inside an existing test set	test set*	aws:ResourceTag/${TagKey}	Read
ListTestSets	Grants permission to list test sets			List
PutSession	Grants permission to create a new session or modify an existing session for a bot alias and user ID	bot alias*	aws:ResourceTag/${TagKey}	Write
RecognizeText	Grants permission to send user input (text-only) to an bot alias	bot alias*	aws:ResourceTag/${TagKey}	Write
RecognizeUtterance	Grants permission to send user input (text or speech) to an bot alias	bot alias*	aws:ResourceTag/${TagKey}	Write
SearchAssociatedTranscripts	Grants permission to search for associated transcripts that meet the specified criteria	bot*	aws:ResourceTag/${TagKey}	List
StartBotAnalyzer	Grants permission to start a bot analyzer for an existing bot locale	bot*	aws:ResourceTag/${TagKey}	Write
StartBotRecommendation	Grants permission to start a bot recommendation for an existing bot locale	bot*	aws:ResourceTag/${TagKey}	Write
StartBotResourceGeneration	Grants permission to start a resource generation for an existing bot locale	bot*	aws:ResourceTag/${TagKey}	Write
StartConversation	Grants permission to stream user input (speech/text/DTMF) to a bot alias	bot alias*	aws:ResourceTag/${TagKey}	Write
StartImport	Grants permission to start a new import with the uploaded import file	bot	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
		bot alias	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		test set	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
StartTestExecution	Grants permission to start a test execution using a test set	test set*	aws:ResourceTag/${TagKey}	Write
StartTestSetGeneration	Grants permission to generate a test set	test set	aws:ResourceTag/${TagKey}	Write
StopBotAnalyzer	Grants permission to stop a bot analyzer for an existing bot locale	bot*	aws:ResourceTag/${TagKey}	Write
StopBotRecommendation	Grants permission to stop a bot recommendation for an existing bot locale	bot*	aws:ResourceTag/${TagKey}	Write
TagResource	Grants permission to add or overwrite tags of a Lex resource	bot	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		bot alias	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		test set	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
UntagResource	Grants permission to remove tags from a Lex resource	bot	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		bot alias	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		test set	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
UpdateBot	Grants permission to update an existing bot	bot*	aws:ResourceTag/${TagKey}	Write
UpdateBotAlias	Grants permission to update an existing bot alias	bot alias*	aws:ResourceTag/${TagKey}	Write
UpdateBotLocale	Grants permission to update an existing bot locale	bot*	aws:ResourceTag/${TagKey}	Write
UpdateBotRecommendation	Grants permission to update an existing bot recommendation request	bot*	aws:ResourceTag/${TagKey}	Write
UpdateExport	Grants permission to update an existing export	bot*	aws:ResourceTag/${TagKey}	Write
UpdateIntent	Grants permission to update an existing intent	bot*	aws:ResourceTag/${TagKey}	Write
UpdateResourcePolicy	Grants permission to update an existing resource policy for a Lex resource	bot	aws:ResourceTag/${TagKey}	Write
UpdateResourcePolicy		bot alias	aws:ResourceTag/${TagKey}	Write
UpdateSlot	Grants permission to update an existing slot	bot*	aws:ResourceTag/${TagKey}	Write
UpdateSlotType	Grants permission to update an existing slot type	bot*	aws:ResourceTag/${TagKey}	Write
UpdateTestSet	Grants permission to update an existing test set	test set*	aws:ResourceTag/${TagKey}	Write

Permission-only actions for Amazon Lex V2

The following actions are defined by Amazon Lex V2 but are not directly invocable through any API operation. They can only be used in IAM policy statements to grant or deny permissions.

Actions	Description	Resource types (*required)	Condition keys	Access level
CreateBotChannel	Grants permission to create a bot channel in an existing bot	bot*	aws:ResourceTag/${TagKey}	Write
CreateCustomVocabulary	Grants permission to create a new custom vocabulary in an existing bot locale	bot*	aws:ResourceTag/${TagKey}	Write
CreateTestSet	Grants permission to import a new test-set			Write
DeleteBotChannel	Grants permission to delete an existing bot channel	bot*	aws:ResourceTag/${TagKey}	Write
DescribeBotChannel	Grants permission to retrieve an existing bot channel	bot*	aws:ResourceTag/${TagKey}	Read
DescribeCustomVocabulary	Grants permission to retrieve an existing custom vocabulary	bot*	aws:ResourceTag/${TagKey}	Read
ListBotChannels	Grants permission to list bot channels	bot*	aws:ResourceTag/${TagKey}	List
UpdateCustomVocabulary	Grants permission to update an existing custom vocabulary	bot*	aws:ResourceTag/${TagKey}	Write

Resource types defined by Amazon Lex V2

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
bot	arn:${Partition}:lex:${Region}:${Account}:bot/${BotId}, arn:${Partition}:lex:${Region}:${Account}:bot:${BotName}	aws:ResourceTag/${TagKey}
bot alias	arn:${Partition}:lex:${Region}:${Account}:bot-alias/${BotId}/${BotAliasId}, arn:${Partition}:lex:${Region}:${Account}:bot:${BotName}:${BotAlias}	aws:ResourceTag/${TagKey}
test set	arn:${Partition}:lex:${Region}:${Account}:test-set/${TestSetId}	aws:ResourceTag/${TagKey}

Condition keys for Amazon Lex V2

Amazon Lex V2 defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys	Description	Type
aws:RequestTag/${TagKey}	Filters access by the tags in the request	String
aws:ResourceTag/${TagKey}	Filters access by the tags attached to a Lex resource	String
aws:TagKeys	Filters access by the set of tag keys in the request	ArrayOfString

Warning Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Document Conventions

Amazon Lex (lex)

Amazon Lightsail (lightsail)