Operations Actions Resource types Condition keys

Actions, resources, and condition keys for AWS Entity Resolution

AWS Entity Resolution (service prefix: entityresolution) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by AWS Entity Resolution
Actions defined by AWS Entity Resolution
Resource types defined by AWS Entity Resolution
Condition keys for AWS Entity Resolution

API operations defined by AWS Entity Resolution

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Condition key	Possible value(s)	Access level
AddPolicyStatement	entityresolution:AddPolicyStatement			Permissions management, Write
BatchDeleteUniqueId	entityresolution:BatchDeleteUniqueId			Write
CreateIdMappingWorkflow	entityresolution:CreateIdMappingWorkflow			Write
	entityresolution:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	entityresolution.amazonaws.com	Write
CreateIdNamespace	entityresolution:CreateIdNamespace			Write
	entityresolution:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	entityresolution.amazonaws.com	Write
CreateMatchingWorkflow	entityresolution:CreateMatchingWorkflow			Write
	entityresolution:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	entityresolution.amazonaws.com	Write
CreateSchemaMapping	entityresolution:CreateSchemaMapping			Write
CreateSchemaMapping	entityresolution:TagResource			Tagging, Write
DeleteIdMappingWorkflow	entityresolution:DeleteIdMappingWorkflow			Write
DeleteIdNamespace	entityresolution:DeleteIdNamespace			Write
DeleteMatchingWorkflow	entityresolution:DeleteMatchingWorkflow			Write
DeletePolicyStatement	entityresolution:DeletePolicyStatement			Permissions management, Write
DeleteSchemaMapping	entityresolution:DeleteSchemaMapping			Write
GenerateMatchId	entityresolution:GenerateMatchId			Write
GetIdMappingJob	entityresolution:GetIdMappingJob			Read
GetIdMappingWorkflow	entityresolution:GetIdMappingWorkflow			Read
GetIdNamespace	entityresolution:GetIdNamespace			Read
GetMatchId	entityresolution:GetMatchId			Read
GetMatchingJob	entityresolution:GetMatchingJob			Read
GetMatchingWorkflow	entityresolution:GetMatchingWorkflow			Read
GetPolicy	entityresolution:GetPolicy			Read
GetProviderService	entityresolution:GetProviderService			Read
GetSchemaMapping	entityresolution:GetSchemaMapping			Read
ListIdMappingJobs	entityresolution:ListIdMappingJobs			List
ListIdMappingWorkflows	entityresolution:ListIdMappingWorkflows			List
ListIdNamespaces	entityresolution:ListIdNamespaces			List
ListMatchingJobs	entityresolution:ListMatchingJobs			List
ListMatchingWorkflows	entityresolution:ListMatchingWorkflows			List
ListProviderServices	entityresolution:ListProviderServices			List
ListSchemaMappings	entityresolution:ListSchemaMappings			List
ListTagsForResource	entityresolution:ListTagsForResource			Read
PutPolicy	entityresolution:PutPolicy			Permissions management, Write
StartIdMappingJob	entityresolution:StartIdMappingJob			Write
	entityresolution:UseIdNamespace			Permissions management, Write
	iam:PassRole	iam:PassedToService	entityresolution.amazonaws.com	Write
StartMatchingJob	entityresolution:StartMatchingJob			Write
TagResource	entityresolution:TagResource			Tagging, Write
UntagResource	entityresolution:UntagResource			Tagging, Write
UpdateIdMappingWorkflow	entityresolution:UpdateIdMappingWorkflow			Write
UpdateIdMappingWorkflow	iam:PassRole	iam:PassedToService	entityresolution.amazonaws.com	Write
UpdateIdNamespace	entityresolution:UpdateIdNamespace			Write
UpdateIdNamespace	iam:PassRole	iam:PassedToService	entityresolution.amazonaws.com	Write
UpdateMatchingWorkflow	entityresolution:UpdateMatchingWorkflow			Write
UpdateMatchingWorkflow	iam:PassRole	iam:PassedToService	entityresolution.amazonaws.com	Write
UpdateSchemaMapping	entityresolution:UpdateSchemaMapping			Write

Actions defined by AWS Entity Resolution

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
AddPolicyStatement	Grants permission to give an AWS service or another account permission to use an AWS Entity Resolution resources			Permissions management, Write
BatchDeleteUniqueId	Grants permission to batch delete unique Id	MatchingWorkflow*	aws:ResourceTag/${TagKey}	Write
CreateIdMappingWorkflow	Grants permission to create a idmapping workflow		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateIdNamespace	Grants permission to create a IdNamespace		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateMatchingWorkflow	Grants permission to create a matching workflow		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateSchemaMapping	Grants permission to create a schema mapping		aws:RequestTag/${TagKey} aws:TagKeys	Write
DeleteIdMappingWorkflow	Grants permission to delete a idmapping workflow	IdMappingWorkflow*	aws:ResourceTag/${TagKey}	Write
DeleteIdNamespace	Grants permission to delete a IdNamespace	IdNamespace*	aws:ResourceTag/${TagKey}	Write
DeleteMatchingWorkflow	Grants permission to delete a matching workflow	MatchingWorkflow*	aws:ResourceTag/${TagKey}	Write
DeletePolicyStatement	Grants permission to delete permission given to an AWS service or another account permission to use an AWS Entity Resolution resources			Permissions management, Write
DeleteSchemaMapping	Grants permission to delete a schema mapping	SchemaMapping*	aws:ResourceTag/${TagKey}	Write
GenerateMatchId	Grants permission to generate match Id	MatchingWorkflow*	aws:ResourceTag/${TagKey}	Write
GetIdMappingJob	Grants permission to get a idmapping job	IdMappingWorkflow*	aws:ResourceTag/${TagKey}	Read
GetIdMappingWorkflow	Grants permission to get a idmapping workflow	IdMappingWorkflow*	aws:ResourceTag/${TagKey}	Read
GetIdNamespace	Grants permission to get a IdNamespace	IdNamespace*	aws:ResourceTag/${TagKey}	Read
GetMatchId	Grants permission to get match Id	MatchingWorkflow*	aws:ResourceTag/${TagKey}	Read
GetMatchingJob	Grants permission to get a matching job	MatchingWorkflow*	aws:ResourceTag/${TagKey}	Read
GetMatchingWorkflow	Grants permission to get a matching workflow	MatchingWorkflow*	aws:ResourceTag/${TagKey}	Read
GetPolicy	Grants permission to get a resource policy for an AWS Entity Resolution resources			Read
GetProviderService	Grants permission to get provider service	ProviderService*	aws:ResourceTag/${TagKey}	Read
GetSchemaMapping	Grants permission to get a schema mapping	SchemaMapping*	aws:ResourceTag/${TagKey}	Read
ListIdMappingJobs	Grants permission to list idmapping jobs	IdMappingWorkflow*	aws:ResourceTag/${TagKey}	List
ListIdMappingWorkflows	Grants permission to list idmapping workflows			List
ListIdNamespaces	Grants permission to list IdNamespaces			List
ListMatchingJobs	Grants permission to list matching jobs	MatchingWorkflow*	aws:ResourceTag/${TagKey}	List
ListMatchingWorkflows	Grants permission to list matching workflows			List
ListProviderServices	Grants permission to list provider service			List
ListSchemaMappings	Grants permission to list schema mappings			List
ListTagsForResource	Grants permission to List tags for a resource			Read
PutPolicy	Grants permission to put a resource policy for an AWS Entity Resolution resources			Permissions management, Write
StartIdMappingJob	Grants permission to start a idmapping job	IdMappingWorkflow*	aws:ResourceTag/${TagKey}	Write
StartMatchingJob	Grants permission to start a matching job	MatchingWorkflow*	aws:ResourceTag/${TagKey}	Write
TagResource	Grants permission to adds tags to a resource	IdMappingWorkflow	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		IdNamespace	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		MatchingWorkflow	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		ProviderService	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		SchemaMapping	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
UntagResource	Grants permission to untag a resource	IdMappingWorkflow	aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		IdNamespace	aws:ResourceTag/${TagKey} aws:TagKeys
		MatchingWorkflow	aws:ResourceTag/${TagKey} aws:TagKeys
		ProviderService	aws:ResourceTag/${TagKey} aws:TagKeys
		SchemaMapping	aws:ResourceTag/${TagKey} aws:TagKeys
UpdateIdMappingWorkflow	Grants permission to update a idmapping workflow	IdMappingWorkflow*	aws:ResourceTag/${TagKey}	Write
UpdateIdNamespace	Grants permission to update a IdNamespace	IdNamespace*	aws:ResourceTag/${TagKey}	Write
UpdateMatchingWorkflow	Grants permission to update a matching workflow	MatchingWorkflow*	aws:ResourceTag/${TagKey}	Write
UpdateSchemaMapping	Grants permission to update a schema mapping	SchemaMapping*	aws:ResourceTag/${TagKey}	Write
UseIdNamespace	Grants permission to give an AWS service or another account permission to use IdNamespace within a workflow			Permissions management, Write
UseWorkflow	Grants permission to give an AWS service or another account permission to use workflow within a IdNamespace			Permissions management, Write

Resource types defined by AWS Entity Resolution

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
IdMappingWorkflow	arn:${Partition}:entityresolution:${Region}:${Account}:idmappingworkflow/${WorkflowName}	aws:ResourceTag/${TagKey}
IdNamespace	arn:${Partition}:entityresolution:${Region}:${Account}:idnamespace/${IdNamespaceName}	aws:ResourceTag/${TagKey}
MatchingWorkflow	arn:${Partition}:entityresolution:${Region}:${Account}:matchingworkflow/${WorkflowName}	aws:ResourceTag/${TagKey}
ProviderService	arn:${Partition}:entityresolution:${Region}:${Account}:providerservice/${ProviderName}/${ProviderServiceName}	aws:ResourceTag/${TagKey}
SchemaMapping	arn:${Partition}:entityresolution:${Region}:${Account}:schemamapping/${SchemaName}	aws:ResourceTag/${TagKey}

Condition keys for AWS Entity Resolution

AWS Entity Resolution defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys	Description	Type
aws:RequestTag/${TagKey}	Filters access by a key that is present in the request the user makes to the entity resolution service	String
aws:ResourceTag/${TagKey}	Filters access by a tag key and value pair	String
aws:TagKeys	Filters access by the list of all the tag key names present in the request the user makes to the entity resolution service	ArrayOfString

Warning Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Document Conventions

AWS End User Messaging Social (social-messaging)

AWS Fault Injection Service (fis)