Actions, resources, and condition keys for Amazon CodeCatalyst

AcceptConnection

Grants permission to accept a request to connect this account to an Amazon CodeCatalyst space

aws:RequestTag/${TagKey}

aws:TagKeys

Write

AssociateIamRoleToConnection

Grants permission to associate an IAM role to a connection

connections*

aws:ResourceTag/${TagKey}

Write

AssociateIdentityCenterApplicationToSpace

Grants permission to associate an IAM Identity Center application with an Amazon CodeCatalyst space

identity-center-applications*

aws:ResourceTag/${TagKey}

Write

AssociateIdentityToIdentityCenterApplication

Grants permission to associate an identity with an IAM Identity Center application for an Amazon CodeCatalyst space

identity-center-applications*

aws:ResourceTag/${TagKey}

Write

BatchAssociateIdentitiesToIdentityCenterApplication

Grants permission to associate multiple identities with an IAM Identity Center application for an Amazon CodeCatalyst space

identity-center-applications*

aws:ResourceTag/${TagKey}

Write

BatchDisassociateIdentitiesFromIdentityCenterApplication

Grants permission to disassociate multiple identities from an IAM Identity Center application for an Amazon CodeCatalyst space

identity-center-applications*

aws:ResourceTag/${TagKey}

Write

CreateIdentityCenterApplication

Grants permission to create an IAM Identity Center application

aws:RequestTag/${TagKey}

aws:TagKeys

Write

CreateSpace

Grants permission to create an Amazon CodeCatalyst space

aws:RequestTag/${TagKey}

aws:TagKeys

Write

CreateSpaceAdminRoleAssignment

Grants permission to create an administrator role assignment for a given Amazon CodeCatalyst space and IAM Identity Center application

identity-center-applications*

aws:ResourceTag/${TagKey}

Write

DeleteConnection

Grants permission to delete a connection

connections*

aws:ResourceTag/${TagKey}

Write

DeleteIdentityCenterApplication

Grants permission to delete an IAM Identity Center application

identity-center-applications*

aws:ResourceTag/${TagKey}

Write

DisassociateIamRoleFromConnection

Grants permission to disassociate an IAM role from a connection

connections*

aws:ResourceTag/${TagKey}

Write

DisassociateIdentityCenterApplicationFromSpace

Grants permission to disassociate an IAM Identity Center application from an Amazon CodeCatalyst space

identity-center-applications*

aws:ResourceTag/${TagKey}

Write

DisassociateIdentityFromIdentityCenterApplication

Grants permission to disassociate an identity from an IAM Identity Center application for an Amazon CodeCatalyst space

identity-center-applications*

aws:ResourceTag/${TagKey}

Write

GetBillingAuthorization

Grants permission to describe the billing authorization for a connection

connections*

aws:ResourceTag/${TagKey}

Read

GetConnection

Grants permission to get a connection

connections*

aws:ResourceTag/${TagKey}

Read

GetIdentityCenterApplication

Grants permission to get information about an IAM Identity Center application

identity-center-applications*

aws:ResourceTag/${TagKey}

Read

GetPendingConnection

Grants permission to get a pending request to connect this account to an Amazon CodeCatalyst space

Read

ListConnections

Grants permission to list connections that are not pending

List

ListIamRolesForConnection

Grants permission to list IAM roles associated with a connection

connections*

aws:ResourceTag/${TagKey}

List

ListIdentityCenterApplications

Grants permission to view a list of all IAM Identity Center applications in the account

List

ListIdentityCenterApplicationsForSpace

Grants permission to view a list of IAM Identity Center applications by Amazon CodeCatalyst space

List

ListSpacesForIdentityCenterApplication

Grants permission to view a list of Amazon CodeCatalyst spaces by IAM Identity Center application

identity-center-applications*

aws:ResourceTag/${TagKey}

List

ListTagsForResource

Grants permission to list tags for an Amazon CodeCatalyst resource

connections

aws:ResourceTag/${TagKey}

Read

identity-center-applications

aws:ResourceTag/${TagKey}

PutBillingAuthorization

Grants permission to create or update the billing authorization for a connection

connections*

aws:ResourceTag/${TagKey}

Write

RejectConnection

Grants permission to reject a request to connect this account to an Amazon CodeCatalyst space

Write

SynchronizeIdentityCenterApplication

Grants permission to synchronize an IAM Identity Center application with the backing identity store

identity-center-applications*

aws:ResourceTag/${TagKey}

Write

TagResource

Grants permission to tag an Amazon CodeCatalyst resource

connections

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Tagging, Write

identity-center-applications

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

UntagResource

Grants permission to untag an Amazon CodeCatalyst resource

connections

aws:ResourceTag/${TagKey}

aws:TagKeys

Tagging, Write

identity-center-applications

aws:ResourceTag/${TagKey}

aws:TagKeys

UpdateIdentityCenterApplication

Grants permission to update an IAM Identity Center application

identity-center-applications*

aws:ResourceTag/${TagKey}

Write

connections

arn:${Partition}:codecatalyst:${Region}:${Account}:/connections/${ConnectionId}

aws:ResourceTag/${TagKey}

identity-center-applications

arn:${Partition}:codecatalyst:${Region}:${Account}:/identity-center-applications/${IdentityCenterApplicationId}

aws:ResourceTag/${TagKey}

project

arn:${Partition}:codecatalyst:::space/${SpaceId}/project/${ProjectId}

space

arn:${Partition}:codecatalyst:::space/${SpaceId}

aws:RequestTag/${TagKey}

Filters access by a tag's key and value in a request

String

aws:ResourceTag/${TagKey}

Filters access by the presence of tag key-value pairs in the request

String

aws:TagKeys

Filters access by the tag keys in a request

ArrayOfString