Actions Permission-only actions Resource types Condition keys

Actions, resources, and condition keys for Amazon Nimble Studio

Amazon Nimble Studio (service prefix: nimble) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

Actions defined by Amazon Nimble Studio
Permission-only actions for Amazon Nimble Studio
Resource types defined by Amazon Nimble Studio
Condition keys for Amazon Nimble Studio

Actions defined by Amazon Nimble Studio

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
AcceptEulas	Grants permission to accept EULAs	eula*		Write
CreateLaunchProfile	Grants permission to create a launch profile	studio*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId	Write
CreateStreamingImage	Grants permission to create a streaming image	studio*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId	Write
CreateStreamingSession	Grants permission to create a streaming session	launch-profile*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId	Write
CreateStreamingSessionStream	Grants permission to create a StreamingSessionStream	streaming-session*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:createdBy nimble:ownedBy nimble:requesterPrincipalId	Write
CreateStudio	Grants permission to create a studio	studio*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId	Write
CreateStudioComponent	Grants permission to create a studio component. A studio component designates a network resource to which a launch profile will provide access	studio*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId	Write
DeleteLaunchProfile	Grants permission to delete a launch profile	launch-profile*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId	Write
DeleteLaunchProfileMember	Grants permission to delete a launch profile member	launch-profile*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId	Write
DeleteStreamingImage	Grants permission to delete a streaming image	streaming-image*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId	Write
DeleteStreamingSession	Grants permission to delete a streaming session	streaming-session*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:createdBy nimble:ownedBy nimble:requesterPrincipalId	Write
DeleteStudio	Grants permission to delete a studio	studio*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId	Write
DeleteStudioComponent	Grants permission to delete a studio component	studio-component*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId	Write
DeleteStudioMember	Grants permission to delete a studio member	studio*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId	Write
GetEula	Grants permission to get a EULA	eula*		Read
GetLaunchProfile	Grants permission to get a launch profile	launch-profile*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId	Read
GetLaunchProfileDetails	Grants permission to get a launch profile's details, which includes the summary of studio components and streaming images used by the launch profile	launch-profile*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId	Read
GetLaunchProfileInitialization	Grants permission to get a launch profile initialization. A launch profile initialization is a dereferenced version of a launch profile, including attached studio component connection information	launch-profile*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId	Read
GetLaunchProfileMember	Grants permission to get a launch profile member	launch-profile*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId	Read
GetStreamingImage	Grants permission to get a streaming image	streaming-image*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId	Read
GetStreamingSession	Grants permission to get a streaming session	streaming-session*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:createdBy nimble:ownedBy nimble:requesterPrincipalId	Read
GetStreamingSessionBackup	Grants permission to get a streaming session backup	streaming-session-backup*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:ownedBy nimble:requesterPrincipalId	Read
GetStreamingSessionStream	Grants permission to get a streaming session stream	streaming-session*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:createdBy nimble:ownedBy nimble:requesterPrincipalId	Read
GetStudio	Grants permission to get a studio	studio*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId	Read
GetStudioComponent	Grants permission to get a studio component	studio-component*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId	Read
GetStudioMember	Grants permission to get a studio member	studio*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId	Read
ListEulaAcceptances	Grants permission to list EULA acceptances	eula-acceptance*	nimble:studioId	Read
ListEulas	Grants permission to list EULAs	eula*		Read
ListLaunchProfileMembers	Grants permission to list launch profile members	launch-profile*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId	Read
ListLaunchProfiles	Grants permission to list launch profiles	studio*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:principalId nimble:requesterPrincipalId nimble:studioId	Read
ListStreamingImages	Grants permission to list streaming images	studio*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId	Read
ListStreamingSessionBackups	Grants permission to list streaming session backups	studio*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:requesterPrincipalId nimble:studioId	Read
ListStreamingSessions	Grants permission to list streaming sessions	studio*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:createdBy nimble:ownedBy nimble:requesterPrincipalId nimble:studioId	Read
ListStudioComponents	Grants permission to list studio components	studio*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId	Read
ListStudioMembers	Grants permission to list studio members	studio*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId	Read
ListStudios	Grants permission to list all studios			Read
ListTagsForResource	Grants permission to list all tags on a Nimble Studio resource	launch-profile	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId	Read
		streaming-image	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId
		streaming-session	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:createdBy nimble:ownedBy
		streaming-session-backup	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:ownedBy
		studio	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId
		studio-component	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId
PutLaunchProfileMembers	Grants permission to add/update launch profile members	launch-profile*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId	Write
PutStudioMembers	Grants permission to add/update studio members	studio*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId	Write
StartStreamingSession	Grants permission to start a streaming session	streaming-session*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:createdBy nimble:ownedBy nimble:requesterPrincipalId	Write
StartStreamingSession	Grants permission to start a streaming session	streaming-session-backup	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:ownedBy nimble:requesterPrincipalId	Write
StartStudioSSOConfigurationRepair	Grants permission to repair the studio's AWS IAM Identity Center configuration	studio*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId	Write
StopStreamingSession	Grants permission to stop a streaming session	streaming-session*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:createdBy nimble:ownedBy nimble:requesterPrincipalId	Write
TagResource	Grants permission to add or overwrite one or more tags for the specified Nimble Studio resource	launch-profile	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId	Tagging, Write
		streaming-image	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId
		streaming-session	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:createdBy nimble:ownedBy
		streaming-session-backup	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:ownedBy
		studio	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId
		studio-component	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId
UntagResource	Grants permission to disassociate one or more tags from the specified Nimble Studio resource	launch-profile	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId	Tagging, Write
		streaming-image	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId
		streaming-session	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:createdBy nimble:ownedBy
		streaming-session-backup	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:ownedBy
		studio	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId
		studio-component	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId
UpdateLaunchProfile	Grants permission to update a launch profile	launch-profile*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId	Write
UpdateLaunchProfileMember	Grants permission to update a launch profile member	launch-profile*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId	Write
UpdateStreamingImage	Grants permission to update a streaming image	streaming-image*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId	Write
UpdateStudio	Grants permission to update a studio	studio*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId	Write
UpdateStudioComponent	Grants permission to update a studio component	studio-component*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId	Write

Permission-only actions for Amazon Nimble Studio

The following actions are defined by Amazon Nimble Studio but are not directly invocable through any API operation. They can only be used in IAM policy statements to grant or deny permissions.

Actions	Description	Resource types (*required)	Condition keys	Access level
GetFeatureMap	Grants permission to allow Nimble Studio portal to show the appropriate features for this account			Read
PutStudioLogEvents	Grants permission to report metrics and logs for the Nimble Studio portal to monitor application health	studio*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId	Write

Actions

Description

Resource types (*required)

Condition keys

Access level

GetFeatureMap

Grants permission to allow Nimble Studio portal to show the appropriate features for this account

Read

PutStudioLogEvents

Grants permission to report metrics and logs for the Nimble Studio portal to monitor application health

studio*

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

nimble:studioId

Write

Resource types defined by Amazon Nimble Studio

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
eula	arn:${Partition}:nimble:${Region}:${Account}:eula/${EulaId}
eula-acceptance	arn:${Partition}:nimble:${Region}:${Account}:eula-acceptance/${EulaAcceptanceId}	nimble:studioId
launch-profile	arn:${Partition}:nimble:${Region}:${Account}:launch-profile/${LaunchProfileId}	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId
streaming-image	arn:${Partition}:nimble:${Region}:${Account}:streaming-image/${StreamingImageId}	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId
streaming-session	arn:${Partition}:nimble:${Region}:${Account}:streaming-session/${StreamingSessionId}	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:createdBy nimble:ownedBy
streaming-session-backup	arn:${Partition}:nimble:${Region}:${Account}:streaming-session-backup/${StreamingSessionBackupId}	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:ownedBy
studio	arn:${Partition}:nimble:${Region}:${Account}:studio/${StudioId}	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId
studio-component	arn:${Partition}:nimble:${Region}:${Account}:studio-component/${StudioComponentId}	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys nimble:studioId

Condition keys for Amazon Nimble Studio

Amazon Nimble Studio defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys	Description	Type
aws:RequestTag/${TagKey}	Filters access by a tag key and value pair that is allowed in the request	String
aws:ResourceTag/${TagKey}	Filters access by a tag key and value pair of a resource	String
aws:TagKeys	Filters access by a list of tag keys that are allowed in the request	ArrayOfString
nimble:createdBy	Filters access by the createdBy request parameter or the ID of the creator of the resource	String
nimble:ownedBy	Filters access by the ownedBy request parameter or the ID of the owner of the resource	String
nimble:principalId	Filters access by the principalId request parameter	String
nimble:requesterPrincipalId	Filters access by the ID of the logged in user	String
nimble:studioId	Filters access by a specific studio	ARN

Warning Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Document Conventions

Amazon Neptune Analytics (neptune-graph)

Amazon Nova Act (nova-act)