View a markdown version of this page

Actions, resources, and condition keys for AWS Elemental Support Cases - Service Authorization Reference

Actions, resources, and condition keys for AWS Elemental Support Cases

AWS Elemental Support Cases (service prefix: elemental-support-cases) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Actions defined by AWS Elemental Support Cases

AWS Elemental Support Cases has no API operations that can be used in the Actions element of an IAM policy statement.

Permission-only actions for AWS Elemental Support Cases

The following actions are defined by AWS Elemental Support Cases but are not directly invocable through any API operation. They can only be used in IAM policy statements to grant or deny permissions.

Actions Description Resource types (*required) Condition keys Access level

AddCaseComment

Grants permission to add a comment to a support case

case*

aws:ResourceTag/${TagKey}

Write

CheckCasePermission

Grants permission to verify whether the caller has the permissions to perform support case operations

Write

CompleteMultipartUpload

Grants permission to complete a multipart file upload to a support case

case*

aws:ResourceTag/${TagKey}

Write

CreateCase

Grants permission to create a support case

aws:RequestTag/${TagKey}

aws:TagKeys

Write

CreateS3CLIUploadCommand

Grants permission to create a cli command to allow a file upload to a support case

case*

aws:ResourceTag/${TagKey}

Write

CreateS3DownloadUrl

Grants permission to download a file from a support case

case*

aws:ResourceTag/${TagKey}

Write

GetCase

Grants permission to describe a support case in your account

case*

aws:ResourceTag/${TagKey}

Read

GetCasePermission

Grants permission to verify whether the caller has the permissions to perform support case operations

Read

GetCases

Grants permission to list the support cases in your account

Read

GetUICache

Grants permission to retrieve cached case user data for use in the Console

Read

ListTagsForCase

Grants permission to list tags on a support case

case*

aws:ResourceTag/${TagKey}

Read

StartMultipartUpload

Grants permission to start a multipart file upload to a support case

case*

aws:ResourceTag/${TagKey}

Write

TagCase

Grants permission to add a tag on a support case

case*

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Tagging, Write

UntagCase

Grants permission to remove a tag on a support case

case*

aws:ResourceTag/${TagKey}

aws:TagKeys

Tagging, Write

UpdateCase

Grants permission to update a support case

case*

aws:ResourceTag/${TagKey}

Write

UpdateCaseStatus

Grants permission to update a support case status

case*

aws:ResourceTag/${TagKey}

Write

UpdateMultipartUpload

Grants permission to update a multipart file upload to a support case

case*

aws:ResourceTag/${TagKey}

Write

Resource types defined by AWS Elemental Support Cases

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types ARN Condition keys

case

arn:${Partition}:elemental-support-cases::${Account}:case/${ResourceId}

aws:ResourceTag/${TagKey}

Condition keys for AWS Elemental Support Cases

AWS Elemental Support Cases defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys Description Type

aws:RequestTag/${TagKey}

Filters access by tags that are passed in the request

String

aws:ResourceTag/${TagKey}

Filters access by tags associated with the resource

String

aws:TagKeys

Filters access by tag keys that are passed in the request

ArrayOfString