Operations Actions Resource types Condition keys

Actions, resources, and condition keys for AWS Elemental Inference

AWS Elemental Inference (service prefix: elemental-inference) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by AWS Elemental Inference
Actions defined by AWS Elemental Inference
Resource types defined by AWS Elemental Inference
Condition keys for AWS Elemental Inference

API operations defined by AWS Elemental Inference

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Access level
AssociateFeed	elemental-inference:AssociateFeed	Write
CreateDictionary	elemental-inference:CreateDictionary	Write
CreateDictionary	elemental-inference:TagResource	Tagging, Write
CreateFeed	elemental-inference:CreateFeed	Write
CreateFeed	elemental-inference:TagResource	Tagging, Write
DeleteDictionary	elemental-inference:DeleteDictionary	Write
DeleteFeed	elemental-inference:DeleteFeed	Write
DisassociateFeed	elemental-inference:DisassociateFeed	Write
ExportDictionaryEntries	elemental-inference:ExportDictionaryEntries	Read
GetDictionary	elemental-inference:GetDictionary	Read
GetFeed	elemental-inference:GetFeed	Read
ListDictionaries	elemental-inference:ListDictionaries	List
ListFeeds	elemental-inference:ListFeeds	List
ListTagsForResource	elemental-inference:ListTagsForResource	Read
TagResource	elemental-inference:TagResource	Tagging, Write
UntagResource	elemental-inference:UntagResource	Tagging, Write
UpdateDictionary	elemental-inference:UpdateDictionary	Write
UpdateFeed	elemental-inference:UpdateFeed	Write

Actions defined by AWS Elemental Inference

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
AssociateFeed	Grants permission to associate a feed with an AWS resource	feed*	aws:ResourceTag/${TagKey}	Write
CreateDictionary	Grants permission to create a new dictionary		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateFeed	Grants permission to create a new feed		aws:RequestTag/${TagKey} aws:TagKeys	Write
DeleteDictionary	Grants permission to delete a dictionary	dictionary*	aws:ResourceTag/${TagKey}	Write
DeleteFeed	Grants permission to delete a feed	feed*	aws:ResourceTag/${TagKey}	Write
DisassociateFeed	Grants permission to disassociate a feed from an AWS resource	feed*	aws:ResourceTag/${TagKey}	Write
ExportDictionaryEntries	Grants permission to export dictionary entries	dictionary*	aws:ResourceTag/${TagKey}	Read
GetDictionary	Grants permission to get dictionary details	dictionary*	aws:ResourceTag/${TagKey}	Read
GetFeed	Grants permission to get feed details	feed*	aws:ResourceTag/${TagKey}	Read
GetMetadata	Grants permission to retrieve metadata for a specific feed output	feed*	aws:ResourceTag/${TagKey}	Read
ListDictionaries	Grants permission to list dictionaries in the account			List
ListFeeds	Grants permission to list feeds in the account			List
ListTagsForResource	Grants permission to list tags on a resource			Read
PutMedia	Grants permission to upload media data for a specified feed	feed*	aws:ResourceTag/${TagKey}	Write
TagResource	Grants permission to add tags to a resource	dictionary	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
TagResource	Grants permission to add tags to a resource	feed	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
UntagResource	Grants permission to remove tags from a resource	dictionary	aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
UntagResource	Grants permission to remove tags from a resource	feed	aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
UpdateDictionary	Grants permission to update dictionary configuration	dictionary*	aws:ResourceTag/${TagKey}	Write
UpdateFeed	Grants permission to update feed configuration	feed*	aws:ResourceTag/${TagKey}	Write

Resource types defined by AWS Elemental Inference

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
dictionary	arn:${Partition}:elemental-inference:${Region}:${Account}:dictionary/${Id}	aws:ResourceTag/${TagKey}
feed	arn:${Partition}:elemental-inference:${Region}:${Account}:feed/${Id}	aws:ResourceTag/${TagKey}

Condition keys for AWS Elemental Inference

AWS Elemental Inference defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys	Description	Type
aws:RequestTag/${TagKey}	Filters access by tags that are passed in the request	String
aws:ResourceTag/${TagKey}	Filters access by tags associated with the resource	String
aws:TagKeys	Filters access by tag keys that are passed in the request	ArrayOfString

Warning Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Document Conventions

AWS Elemental Appliances and Software Activation Service (elemental-activations)

AWS Elemental MediaConnect (mediaconnect)