Actions, resources, and condition keys for Amazon Mechanical Turk
Amazon Mechanical Turk (service prefix: mechanicalturk) provides the following
service-specific operations, resources, actions, and condition keys for use in IAM permission
policies.
References:
-
Learn how to configure this service.
-
View a list of the API operations available for this service.
-
Learn how to secure this service and its resources by using IAM permission policies.
-
View the programmatic service authorization reference
for this service.
Topics
API operations defined by Amazon Mechanical Turk
The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.
| Operation | IAM action | Condition key | Possible value(s) | Access level |
|---|---|---|---|---|
|
AcceptQualificationRequest |
Write |
|||
|
ApproveAssignment |
Write |
|||
|
AssociateQualificationWithWorker |
Write |
|||
|
CreateAdditionalAssignmentsForHIT |
Write |
|||
|
CreateHIT |
Write |
|||
|
CreateHITType |
Write |
|||
|
CreateHITWithHITType |
Write |
|||
|
CreateQualificationType |
Write |
|||
|
CreateWorkerBlock |
Write |
|||
|
DeleteHIT |
Write |
|||
|
DeleteQualificationType |
Write |
|||
|
DeleteWorkerBlock |
Write |
|||
|
DisassociateQualificationFromWorker |
Write |
|||
|
GetAccountBalance |
Read |
|||
|
GetAssignment |
Read |
|||
|
GetFileUploadURL |
Read |
|||
|
GetHIT |
Read |
|||
|
GetQualificationScore |
Read |
|||
|
GetQualificationType |
Read |
|||
|
ListAssignmentsForHIT |
List |
|||
|
ListBonusPayments |
List |
|||
|
ListHITs |
List |
|||
|
ListHITsForQualificationType |
List |
|||
|
ListQualificationRequests |
List |
|||
|
ListQualificationTypes |
List |
|||
|
ListReviewPolicyResultsForHIT |
List |
|||
|
ListReviewableHITs |
List |
|||
|
ListWorkerBlocks |
List |
|||
|
ListWorkersWithQualificationType |
List |
|||
|
NotifyWorkers |
Write |
|||
|
RejectAssignment |
Write |
|||
|
RejectQualificationRequest |
Write |
|||
|
SendBonus |
Write |
|||
|
SendTestEventNotification |
Write |
|||
|
UpdateExpirationForHIT |
Write |
|||
|
UpdateHITReviewStatus |
Write |
|||
|
UpdateHITTypeOfHIT |
Write |
|||
|
UpdateNotificationSettings |
Write |
|||
|
UpdateQualificationType |
Write |
Actions defined by Amazon Mechanical Turk
You can specify the following actions in the Action element of an IAM
policy statement. Use policies to grant permissions to perform an operation in AWS. When
you use an action in a policy, you usually allow or deny access to the API operation or CLI
command with the same name. However, in some cases, a single action controls access to more
than one operation. Alternatively, some operations require several different actions.
| Actions | Description | Resource types (*required) | Condition keys | Access level |
|---|---|---|---|---|
The AcceptQualificationRequest operation grants a Worker's request for a Qualification |
Write |
|||
The ApproveAssignment operation approves the results of a completed assignment |
Write |
|||
The AssociateQualificationWithWorker operation gives a Worker a Qualification |
Write |
|||
The CreateAdditionalAssignmentsForHIT operation increases the maximum number of assignments of an existing HIT |
Write |
|||
The CreateHIT operation creates a new HIT (Human Intelligence Task) |
Write |
|||
The CreateHITType operation creates a new HIT type |
Write |
|||
The CreateHITWithHITType operation creates a new Human Intelligence Task (HIT) using an existing HITTypeID generated by the CreateHITType operation |
Write |
|||
The CreateQualificationType operation creates a new Qualification type, which is represented by a QualificationType data structure |
Write |
|||
The CreateWorkerBlock operation allows you to prevent a Worker from working on your HITs |
Write |
|||
The DeleteHIT operation disposes of a HIT that is no longer needed |
Write |
|||
The DeleteQualificationType disposes a Qualification type and disposes any HIT types that are associated with the Qualification type |
Write |
|||
The DeleteWorkerBlock operation allows you to reinstate a blocked Worker to work on your HITs |
Write |
|||
The DisassociateQualificationFromWorker revokes a previously granted Qualification from a user |
Write |
|||
The GetAccountBalance operation retrieves the amount of money in your Amazon Mechanical Turk account |
Read |
|||
The GetAssignment retrieves an assignment with an AssignmentStatus value of Submitted, Approved, or Rejected, using the assignment's ID |
Read |
|||
The GetFileUploadURL operation generates and returns a temporary URL |
Read |
|||
The GetHIT operation retrieves the details of the specified HIT |
Read |
|||
The GetQualificationScore operation returns the value of a Worker's Qualification for a given Qualification type |
Read |
|||
The GetQualificationType operation retrieves information about a Qualification type using its ID |
Read |
|||
The ListAssignmentsForHIT operation retrieves completed assignments for a HIT |
List |
|||
The ListBonusPayments operation retrieves the amounts of bonuses you have paid to Workers for a given HIT or assignment |
List |
|||
The ListHITs operation returns all of a Requester's HITs |
List |
|||
The ListHITsForQualificationType operation returns the HITs that use the given QualififcationType for a QualificationRequirement |
List |
|||
The ListQualificationRequests operation retrieves requests for Qualifications of a particular Qualification type |
List |
|||
The ListQualificationTypes operation searches for Qualification types using the specified search query, and returns a list of Qualification types |
List |
|||
The ListReviewPolicyResultsForHIT operation retrieves the computed results and the actions taken in the course of executing your Review Policies during a CreateHIT operation |
List |
|||
The ListReviewableHITs operation returns all of a Requester's HITs that have not been approved or rejected |
List |
|||
The ListWorkersBlocks operation retrieves a list of Workers who are blocked from working on your HITs |
List |
|||
The ListWorkersWithQualificationType operation returns all of the Workers with a given Qualification type |
List |
|||
The NotifyWorkers operation sends an email to one or more Workers that you specify with the Worker ID |
Write |
|||
The RejectAssignment operation rejects the results of a completed assignment |
Write |
|||
The RejectQualificationRequest operation rejects a user's request for a Qualification |
Write |
|||
The SendBonus operation issues a payment of money from your account to a Worker |
Write |
|||
The SendTestEventNotification operation causes Amazon Mechanical Turk to send a notification message as if a HIT event occurred, according to the provided notification specification |
Write |
|||
The UpdateExpirationForHIT operation allows you extend the expiration time of a HIT beyond is current expiration or expire a HIT immediately |
Write |
|||
The UpdateHITReviewStatus operation toggles the status of a HIT |
Write |
|||
The UpdateHITTypeOfHIT operation allows you to change the HITType properties of a HIT |
Write |
|||
The UpdateNotificationSettings operation creates, updates, disables or re-enables notifications for a HIT type |
Write |
|||
The UpdateQualificationType operation modifies the attributes of an existing Qualification type, which is represented by a QualificationType data structure |
Write |
Resource types defined by Amazon Mechanical Turk
Amazon Mechanical Turk does not support specifying a resource ARN in the
Resource element of an IAM policy statement.
Condition keys for Amazon Mechanical Turk
Amazon Mechanical Turk has no service-specific condition keys that can be used in the
Condition element of policy statements.