Actions Permission-only actions Resource types Condition keys

Actions, resources, and condition keys for AWS FinOps Agent

AWS FinOps Agent (service prefix: finops-agent) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

Actions defined by AWS FinOps Agent
Permission-only actions for AWS FinOps Agent
Resource types defined by AWS FinOps Agent
Condition keys for AWS FinOps Agent

Actions defined by AWS FinOps Agent

AWS FinOps Agent has no API operations that can be used in the Actions element of an IAM policy statement.

Permission-only actions for AWS FinOps Agent

The following actions are defined by AWS FinOps Agent but are not directly invocable through any API operation. They can only be used in IAM policy statements to grant or deny permissions.

Actions	Description	Access level
AcceptAgentRequest	Grants permission to accept a pending approval request from the agent	Write
CancelTask	Grants permission to cancel a task	Write
CancelTurn	Grants permission to cancel an in-progress conversation turn	Write
CreateAgentSpace	Grants permission to create a new FinOps Agent workspace	Write
CreateAutomation	Grants permission to create a reusable automation	Write
CreateConnection	Grants permission to create a connection	Write
CreateConversation	Grants permission to create a new conversation with the FinOps Agent	Write
CreateDocument	Grants permission to create a document	Write
CreateIntegration	Grants permission to create a third-party integration	Write
CreateOneTimeLoginSession	Grants permission to create a one-time login session for the FinOps Agent web application	Write
CreateTask	Grants permission to create a task	Write
CreateTurn	Grants permission to create a new turn in a conversation	Write
DeleteAgentSpace	Grants permission to delete a FinOps Agent workspace	Write
DeleteArtifact	Grants permission to delete an artifact and its content	Write
DeleteAutomation	Grants permission to delete an automation	Write
DeleteConnection	Grants permission to delete a connection	Write
DeleteDocument	Grants permission to delete a document	Write
DeleteIntegration	Grants permission to delete a third-party integration	Write
GetAgentRequest	Grants permission to view details of a pending approval request from the agent	Read
GetAgentSpace	Grants permission to view details of a FinOps Agent workspace	Read
GetArtifactContent	Grants permission to download artifact content	Read
GetArtifactMetadata	Grants permission to view artifact metadata	Read
GetAutomation	Grants permission to view details of an automation	Read
GetConnection	Grants permission to view details of a connection	Read
GetDocumentContent	Grants permission to download document content	Read
GetDocumentMetadata	Grants permission to view document metadata	Read
GetIntegration	Grants permission to view details of a third-party integration	Read
GetTask	Grants permission to view details of a task	Read
GetTurn	Grants permission to view details of a conversation turn	Read
ListAgentSpaces	Grants permission to list all FinOps Agent workspaces in the account	List
ListArtifacts	Grants permission to list artifacts	List
ListAutomations	Grants permission to list automations	List
ListConnections	Grants permission to list connections	List
ListConversations	Grants permission to list conversations	List
ListDocuments	Grants permission to list documents	List
ListIntegrations	Grants permission to list third-party integrations	List
ListRecords	Grants permission to list records for real-time agent activity display	List
ListTasks	Grants permission to list tasks	List
ListTurns	Grants permission to list turns in a conversation	List
RejectAgentRequest	Grants permission to reject a pending approval request from the agent	Write
RestoreDocument	Grants permission to restore an archived document	Write
SendFeedback	Grants permission to submit feedback on agent responses	Write
UpdateAgentSpace	Grants permission to update a FinOps Agent workspace configuration	Write
UpdateAutomation	Grants permission to update an automation	Write
UpdateConnection	Grants permission to update a connection	Write
UpdateDocument	Grants permission to update a document's content and metadata	Write

Resource types defined by AWS FinOps Agent

AWS FinOps Agent does not support specifying a resource ARN in the Resource element of an IAM policy statement.

Condition keys for AWS FinOps Agent

AWS FinOps Agent has no service-specific condition keys that can be used in the Condition element of policy statements.

Warning Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Document Conventions

AWS Fault Injection Service (fis)

AWS Firewall Manager (fms)