Operations Actions Permission-only actions Resource types Condition keys

Actions, resources, and condition keys for Amazon Braket

Amazon Braket (service prefix: braket) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by Amazon Braket
Actions defined by Amazon Braket
Permission-only actions for Amazon Braket
Resource types defined by Amazon Braket
Condition keys for Amazon Braket

API operations defined by Amazon Braket

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Condition key	Possible value(s)	Access level
CancelJob	braket:CancelJob			Write
CancelQuantumTask	braket:CancelQuantumTask			Write
CreateJob	braket:CreateJob			Write
	braket:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	braket.amazonaws.com, sagemaker.amazonaws.com	Write
CreateQuantumTask	braket:CreateQuantumTask			Write
CreateQuantumTask	braket:TagResource			Tagging, Write
CreateSpendingLimit	braket:CreateSpendingLimit			Write
CreateSpendingLimit	braket:TagResource			Tagging, Write
DeleteSpendingLimit	braket:DeleteSpendingLimit			Write
GetDevice	braket:GetDevice			Read
GetJob	braket:GetJob			Read
GetQuantumTask	braket:GetQuantumTask			Read
ListTagsForResource	braket:ListTagsForResource			Read
SearchDevices	braket:SearchDevices			List
SearchJobs	braket:SearchJobs			List
SearchQuantumTasks	braket:SearchQuantumTasks			List
SearchSpendingLimits	braket:SearchSpendingLimits			Read
TagResource	braket:TagResource			Tagging, Write
UntagResource	braket:UntagResource			Tagging, Write
UpdateSpendingLimit	braket:UpdateSpendingLimit			Write

Actions defined by Amazon Braket

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
CancelJob	Grants permission to cancel a job	job*	aws:ResourceTag/${TagKey}	Write
CancelQuantumTask	Grants permission to cancel a quantum task	quantum-task*	aws:ResourceTag/${TagKey}	Write
CreateJob	Grants permission to create a job	device*	aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateJob	Grants permission to create a job	job*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateQuantumTask	Grants permission to create a quantum task	device*	aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateQuantumTask	Grants permission to create a quantum task	quantum-task*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateSpendingLimit	Grants permission to create a spending limit	device*	aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateSpendingLimit	Grants permission to create a spending limit	spending-limit*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
DeleteSpendingLimit	Grants permission to delete a spending limit	spending-limit*	aws:ResourceTag/${TagKey}	Write
GetDevice	Grants permission to retrieve information about the devices available in Amazon Braket	device*		Read
GetJob	Grants permission to retrieve jobs	job*	aws:ResourceTag/${TagKey}	Read
GetQuantumTask	Grants permission to retrieve quantum tasks	quantum-task*	aws:ResourceTag/${TagKey}	Read
ListTagsForResource	Grants permission to listing the tags that have been applied to the quantum task resource or the job	job	aws:ResourceTag/${TagKey}	Read
		quantum-task	aws:ResourceTag/${TagKey}
		spending-limit	aws:ResourceTag/${TagKey}
SearchDevices	Grants permission to search for devices available in Amazon Braket			List
SearchJobs	Grants permission to search for jobs			List
SearchQuantumTasks	Grants permission to search for quantum tasks			List
SearchSpendingLimits	Grants permission to search for spending limit			Read
TagResource	Grants permission to add one or more tags to a quantum task or a hybrid job	job	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		quantum-task	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		spending-limit	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
UntagResource	Grants permission to remove one or more tags from a quantum task resource or a job. A tag consists of a key-value pair	job	aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		quantum-task	aws:ResourceTag/${TagKey} aws:TagKeys
		spending-limit	aws:ResourceTag/${TagKey} aws:TagKeys
UpdateSpendingLimit	Grants permission to update a spending limit	spending-limit*	aws:ResourceTag/${TagKey}	Write

Permission-only actions for Amazon Braket

The following actions are defined by Amazon Braket but are not directly invocable through any API operation. They can only be used in IAM policy statements to grant or deny permissions.

Actions	Description	Access level
AcceptUserAgreement	Grants permission to accept the Amazon Braket user agreement	Write
GetServiceLinkedRoleStatus	Grants permission to check if the Amazon Braket service linked role has been created	Read
GetUserAgreementStatus	Grants permission to check if the account has accepted the Amazon Braket user agreement	Read

Resource types defined by Amazon Braket

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
device	arn:${Partition}:braket:::device/${DeviceType}/${Provider}/${DeviceId}
job	arn:${Partition}:braket:${Region}:${Account}:job/${RandomId}	aws:ResourceTag/${TagKey}
quantum-task	arn:${Partition}:braket:${Region}:${Account}:quantum-task/${RandomId}	aws:ResourceTag/${TagKey}
spending-limit	arn:${Partition}:braket:${Region}:${Account}:spending-limit/${RandomId}	aws:ResourceTag/${TagKey}

Condition keys for Amazon Braket

Amazon Braket defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys	Description	Type
aws:RequestTag/${TagKey}	Filters access by the presence of tag key-value pairs in the request	String
aws:ResourceTag/${TagKey}	Filters access by tag key-value pairs attached to the resource	String
aws:TagKeys	Filters access by the presence of tag keys in the request	ArrayOfString

Warning Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Document Conventions

Amazon Bio Discovery (researchstudio)

Amazon Chime (chime)