Operations Actions Resource types Condition keys

Actions, resources, and condition keys for AWS Outposts

AWS Outposts (service prefix: outposts) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

API operations defined by AWS Outposts

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Access level
CancelCapacityTask	outposts:CancelCapacityTask	Write
CancelOrder	outposts:CancelOrder	Write
CreateOrder	outposts:CreateOrder	Write
CreateOutpost	outposts:CreateOutpost	Write
CreateOutpost	outposts:TagResource	Tagging, Write
CreateQuote	outposts:CreateQuote	Write
CreateRenewal	outposts:CreateRenewal	Write
CreateSite	outposts:CreateSite	Write
CreateSite	outposts:TagResource	Tagging, Write
DeleteOutpost	outposts:DeleteOutpost	Write
DeleteQuote	outposts:DeleteQuote	Write
DeleteSite	outposts:DeleteSite	Write
GetCapacityTask	outposts:GetCapacityTask	Read
GetCatalogItem	outposts:GetCatalogItem	Read
GetConnection	outposts:GetConnection	Read
GetOrder	outposts:GetOrder	Read
GetOutpost	outposts:GetOutpost	Read
GetOutpostBillingInformation	outposts:GetOutpostBillingInformation	Read
GetOutpostInstanceTypes	outposts:GetOutpostInstanceTypes	Read
GetOutpostSupportedInstanceTypes	outposts:GetOutpostSupportedInstanceTypes	Read
GetQuote	outposts:GetQuote	Read
GetRenewalPricing	outposts:GetRenewalPricing	Read
GetSite	outposts:GetSite	Read
GetSiteAddress	outposts:GetSiteAddress	Read
ListAssetInstances	outposts:ListAssetInstances	List
ListAssets	outposts:ListAssets	List
ListBlockingInstancesForCapacityTask	outposts:ListBlockingInstancesForCapacityTask	List
ListCapacityTasks	outposts:ListCapacityTasks	List
ListCatalogItems	outposts:ListCatalogItems	List
ListOrderableInstanceTypes	outposts:ListOrderableInstanceTypes	List
ListOrders	outposts:ListOrders	List
ListOutposts	outposts:ListOutposts	List
ListQuotes	outposts:ListQuotes	List
ListSites	outposts:ListSites	List
ListTagsForResource	outposts:ListTagsForResource	Read
StartCapacityTask	outposts:StartCapacityTask	Write
StartConnection	outposts:StartConnection	Write
TagResource	outposts:TagResource	Tagging, Write
UntagResource	outposts:UntagResource	Tagging, Write
UpdateOutpost	outposts:UpdateOutpost	Write
UpdateQuote	outposts:UpdateQuote	Write
UpdateSite	outposts:UpdateSite	Write
UpdateSiteAddress	outposts:UpdateSiteAddress	Write
UpdateSiteRackPhysicalProperties	outposts:UpdateSiteRackPhysicalProperties	Write

Actions defined by AWS Outposts

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
CancelCapacityTask	Grants permission to cancel a capacity task	outpost*	aws:ResourceTag/${TagKey}	Write
CancelOrder	Grants permission to cancel an order			Write
CreateOrder	Grants permission to create an order	outpost*	aws:ResourceTag/${TagKey}	Write
CreateOutpost	Grants permission to create an Outpost	site*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreatePrivateConnectivityConfig	Grants permission to create a private connectivity configuration	outpost*	aws:ResourceTag/${TagKey}	Write
CreateQuote	Grants permission to create a quote			Write
CreateRenewal	Grants permission to create a renewal for the specified Outpost	outpost*	aws:ResourceTag/${TagKey}	Write
CreateSite	Grants permission to create a site		aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
DeleteOutpost	Grants permission to delete an Outpost	outpost*	aws:ResourceTag/${TagKey}	Write
DeleteQuote	Grants permission to delete a quote			Write
DeleteSite	Grants permission to delete a site	site*	aws:ResourceTag/${TagKey}	Write
GetCapacityTask	Grants permission to get information about the specified capacity task	outpost*	aws:ResourceTag/${TagKey}	Read
GetCatalogItem	Grants permission to get a catalog item			Read
GetConnection	Grants permission to get information about the connection for your Outpost server			Read
GetOrder	Grants permission to get information about an order			Read
GetOutpost	Grants permission to get information about the specified Outpost	outpost*	aws:ResourceTag/${TagKey}	Read
GetOutpostBillingInformation	Grants permission to get Outpost billing information for the specified Outpost	outpost*	aws:ResourceTag/${TagKey}	Read
GetOutpostInstanceTypes	Grants permission to get the instance types for the specified Outpost	outpost*	aws:ResourceTag/${TagKey}	Read
GetOutpostSupportedInstanceTypes	Grants permission to get the supported instance types for the specified Outpost	outpost*	aws:ResourceTag/${TagKey}	Read
GetPrivateConnectivityConfig	Grants permission to get a private connectivity configuration	outpost*	aws:ResourceTag/${TagKey}	Read
GetQuote	Grants permission to get information about a quote			Read
GetRenewalPricing	Grants permission to get renewal pricing for the specified Outpost	outpost*	aws:ResourceTag/${TagKey}	Read
GetSite	Grants permission to get a site	site*	aws:ResourceTag/${TagKey}	Read
GetSiteAddress	Grants permission to get a site address	site*	aws:ResourceTag/${TagKey}	Read
ListAssetInstances	Grants permission to list all running instances for the specified Outpost	outpost*	aws:ResourceTag/${TagKey}	List
ListAssets	Grants permission to list the assets for your Outpost	outpost*	aws:ResourceTag/${TagKey}	List
ListBlockingInstancesForCapacityTask	Grants permission to list all running instances that are blocking the capacity task from running for the specified Outpost	outpost*	aws:ResourceTag/${TagKey}	List
ListCapacityTasks	Grants permission to list the capacity tasks for your AWS account			List
ListCatalogItems	Grants permission to list all catalog items			List
ListOrderableInstanceTypes	Grants permission to list the orderable instance types for your AWS account			List
ListOrders	Grants permission to list the orders for your AWS account			List
ListOutposts	Grants permission to list the Outposts for your AWS account			List
ListQuotes	Grants permission to list quotes for your AWS account			List
ListSites	Grants permission to list the sites for your AWS account			List
ListTagsForResource	Grants permission to list tags for a resource			Read
StartCapacityTask	Grants permission to create a capacity task	outpost*	aws:ResourceTag/${TagKey}	Write
StartConnection	Grants permission to start a connection for your Outpost server			Write
TagResource	Grants permission to tag a resource	outpost	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
TagResource	Grants permission to tag a resource	site	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
UntagResource	Grants permission to untag a resource	outpost	aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
UntagResource	Grants permission to untag a resource	site	aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
UpdateOutpost	Grants permission to update an Outpost	outpost*	aws:ResourceTag/${TagKey}	Write
UpdateQuote	Grants permission to update a quote			Write
UpdateSite	Grants permission to update a site	site*	aws:ResourceTag/${TagKey}	Write
UpdateSiteAddress	Grants permission to update the site address	site*	aws:ResourceTag/${TagKey}	Write
UpdateSiteRackPhysicalProperties	Grants permission to update the physical properties of a rack at a site	site*	aws:ResourceTag/${TagKey}	Write

Resource types defined by AWS Outposts

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
outpost	arn:${Partition}:outposts:${Region}:${Account}:outpost/${OutpostId}	aws:ResourceTag/${TagKey}
site	arn:${Partition}:outposts:${Region}:${Account}:site/${SiteId}	aws:ResourceTag/${TagKey}

Condition keys for AWS Outposts

AWS Outposts defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys	Description	Type
aws:RequestTag/${TagKey}	Filters access by the tags that are passed in the request	String
aws:ResourceTag/${TagKey}	Filters access by the tags associated with the resource	String
aws:TagKeys	Filters access by the tag keys that are passed in the request	ArrayOfString

Warning Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Document Conventions

AWS Organizations (organizations)

AWS Panorama (panorama)