Operations Actions Resource types Condition keys

Actions, resources, and condition keys for AWS Amplify Admin

AWS Amplify Admin (service prefix: amplifybackend) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by AWS Amplify Admin
Actions defined by AWS Amplify Admin
Resource types defined by AWS Amplify Admin
Condition keys for AWS Amplify Admin

API operations defined by AWS Amplify Admin

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Access level
CloneBackend	amplifybackend:CloneBackend	Write
CreateBackend	amplifybackend:CreateBackend	Write
CreateBackendAPI	amplifybackend:CreateBackendAPI	Write
CreateBackendAuth	amplifybackend:CreateBackendAuth	Write
CreateBackendConfig	amplifybackend:CreateBackendConfig	Write
CreateBackendStorage	amplifybackend:CreateBackendStorage	Write
CreateToken	amplifybackend:CreateToken	Write
DeleteBackend	amplifybackend:DeleteBackend	Write
DeleteBackendAPI	amplifybackend:DeleteBackendAPI	Write
DeleteBackendAuth	amplifybackend:DeleteBackendAuth	Write
DeleteBackendStorage	amplifybackend:DeleteBackendStorage	Write
DeleteToken	amplifybackend:DeleteToken	Write
GenerateBackendAPIModels	amplifybackend:GenerateBackendAPIModels	Write
GetBackend	amplifybackend:GetBackend	Read
GetBackendAPI	amplifybackend:GetBackendAPI	Read
GetBackendAPIModels	amplifybackend:GetBackendAPIModels	Read
GetBackendAuth	amplifybackend:GetBackendAuth	Read
GetBackendJob	amplifybackend:GetBackendJob	Read
GetBackendStorage	amplifybackend:GetBackendStorage	Read
GetToken	amplifybackend:GetToken	Read
ImportBackendAuth	amplifybackend:ImportBackendAuth	Write
ImportBackendStorage	amplifybackend:ImportBackendStorage	Write
ListBackendJobs	amplifybackend:ListBackendJobs	List
ListS3Buckets	amplifybackend:ListS3Buckets	List
RemoveAllBackends	amplifybackend:RemoveAllBackends	Write
RemoveBackendConfig	amplifybackend:RemoveBackendConfig	Write
UpdateBackendAPI	amplifybackend:UpdateBackendAPI	Write
UpdateBackendAuth	amplifybackend:UpdateBackendAuth	Write
UpdateBackendConfig	amplifybackend:UpdateBackendConfig	Write
UpdateBackendJob	amplifybackend:UpdateBackendJob	Write
UpdateBackendStorage	amplifybackend:UpdateBackendStorage	Write

Actions defined by AWS Amplify Admin

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Access level
CloneBackend	Grants permission to clone an existing Amplify Admin backend environment into a new Amplify Admin backend enviroment	backend*	Write
CreateBackend	Grants permission to create a new Amplify Admin backend environment by Amplify appId	created-backend*	Write
CreateBackendAPI	Grants permission to create an API for an existing Amplify Admin backend environment by appId and backendEnvironmentName	api*	Write
		backend*
		environment*
CreateBackendAuth	Grants permission to create an auth resource for an existing Amplify Admin backend environment by appId and backendEnvironmentName	auth*	Write
		backend*
		environment*
CreateBackendConfig	Grants permission to create a new Amplify Admin backend config by Amplify appId	config*	Write
CreateBackendStorage	Grants permission to create a backend storage resource	backend*	Write
		environment*
		storage*
CreateToken	Grants permission to create an Amplify Admin challenge token by appId	backend*	Write
CreateToken		token*	Write
DeleteBackend	Grants permission to delete an existing Amplify Admin backend environment by appId and backendEnvironmentName	backend*	Write
DeleteBackend		environment*	Write
DeleteBackendAPI	Grants permission to delete an API of an existing Amplify Admin backend environment by appId and backendEnvironmentName	api*	Write
		backend*
		environment*
DeleteBackendAuth	Grants permission to delete an auth resource of an existing Amplify Admin backend environment by appId and backendEnvironmentName	auth*	Write
		backend*
		environment*
DeleteBackendStorage	Grants permission to delete a backend storage resource	backend*	Write
		environment*
		storage*
DeleteToken	Grants permission to delete an Amplify Admin challenge token by appId	backend*	Write
DeleteToken		token*	Write
GenerateBackendAPIModels	Grants permission to generate models for an API of an existing Amplify Admin backend environment by appId and backendEnvironmentName	api*	Write
		backend*
		environment*
GetBackend	Grants permission to retrieve an existing Amplify Admin backend environment by appId and backendEnvironmentName	backend*	Read
GetBackend		environment*	Read
GetBackendAPI	Grants permission to retrieve an API of an existing Amplify Admin backend environment by appId and backendEnvironmentName	api*	Read
		backend*
		environment*
GetBackendAPIModels	Grants permission to retrieve models for an API of an existing Amplify Admin backend environment by appId and backendEnvironmentName	api*	Read
		backend*
		environment*
GetBackendAuth	Grants permission to retrieve an auth resource of an existing Amplify Admin backend environment by appId and backendEnvironmentName	auth*	Read
		backend*
		environment*
GetBackendJob	Grants permission to retrieve a job of an existing Amplify Admin backend environment by appId and backendEnvironmentName	backend*	Read
GetBackendJob		job*	Read
GetBackendStorage	Grants permission to retrieve an existing backend storage resource	backend*	Read
GetBackendStorage		environment*	Read
GetToken	Grants permission to retrieve an Amplify Admin challenge token by appId	backend*	Read
GetToken		token*	Read
ImportBackendAuth	Grants permission to import an existing auth resource of an Amplify Admin backend environment by appId and backendEnvironmentName	auth*	Write
		backend*
		environment*
ImportBackendStorage	Grants permission to import an existing backend storage resource	backend*	Write
		environment*
		storage*
ListBackendJobs	Grants permission to retrieve the jobs of an existing Amplify Admin backend environment by appId and backendEnvironmentName	backend*	List
ListBackendJobs		job*	List
ListS3Buckets	Grants permission to retrieve s3 buckets		List
RemoveAllBackends	Grants permission to delete all existing Amplify Admin backend environments by appId	backend*	Write
RemoveAllBackends		environment*	Write
RemoveBackendConfig	Grants permission to delete an Amplify Admin backend config by Amplify appId	config*	Write
UpdateBackendAPI	Grants permission to update an API of an existing Amplify Admin backend environment by appId and backendEnvironmentName	api*	Write
		backend*
		environment*
UpdateBackendAuth	Grants permission to update an auth resource of an existing Amplify Admin backend environment by appId and backendEnvironmentName	auth*	Write
		backend*
		environment*
UpdateBackendConfig	Grants permission to update an Amplify Admin backend config by Amplify appId	config*	Write
UpdateBackendJob	Grants permission to update a job of an existing Amplify Admin backend environment by appId and backendEnvironmentName	backend*	Write
UpdateBackendJob		job*	Write
UpdateBackendStorage	Grants permission to update a backend storage resource	backend*	Write
		environment*
		storage*

Resource types defined by AWS Amplify Admin

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
api	arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/${AppId}/api/*
auth	arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/${AppId}/auth/*
backend	arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/${AppId}/*
config	arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/${AppId}/config/*
created-backend	arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/*
environment	arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/${AppId}/environments/*
job	arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/${AppId}/job/*
storage	arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/${AppId}/storage/*
token	arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/${AppId}/challenge/*

Condition keys for AWS Amplify Admin

AWS Amplify Admin has no service-specific condition keys that can be used in the Condition element of policy statements.

Warning Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Document Conventions

AWS Amplify (amplify)

AWS Amplify UI Builder (amplifyuibuilder)