Actions, resources, and condition keys for AWS IQ

AWS IQ (service prefix: iq) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Actions defined by AWS IQ

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Access level
AcceptCall	Grants permission to accept an incoming voice/video call	call*	Write
ApprovePaymentRequest	Grants permission to approve a payment request	paymentRequest*	Write
ApproveProposal	Grants permission to approve a proposal	proposal*	Write
ArchiveConversation	Grants permission to archive a conversation	conversation*	Write
CompleteProposal	Grants permission to complete a proposal	proposal*	Write
CreateConversation	Grants permission to respond to a request or send a direct message to initiate a conversation		Write
CreateExpert	Grants permission to create an expert profile		Write
CreateListing	Grants permission to create a listing		Write
CreateMilestoneProposal	Grants permission to create a milestone proposal		Write
CreatePaymentRequest	Grants permission to create a payment request		Write
CreateProject	Grants permission to submit new requests		Write
CreateRequest	Grants permission to submit new requests		Write
CreateScheduledProposal	Grants permission to create a scheduled proposal		Write
CreateSeller	Grants permission to create a seller profile		Write
CreateUpfrontProposal	Grants permission to create an upfront proposal		Write
DeclineCall	Grants permission to decline an incoming voice/video call	call*	Write
DeleteAttachment	Grants permission to delete an existing attachment	attachment*	Write
DisableIndividualPublicProfile	Grants permission to disable individual public profile page	expert*	Write
DownloadAttachment	Grants permission to download existing attachment	attachment*	Read
EnableIndividualPublicProfile	Grants permission to enable individual public profile page	expert*	Write
EndCall	Grants permission to end a voice/video call	call*	Write
GetBuyer	Grants permission to read buyer information	buyer*	Read
GetCall	Grants permission to read details of a voice/video call	call*	Read
GetChatInfo	Grants permission to read the chat environment details about a conversation	conversation*	Read
GetChatMessages	Grants permission to read chat messages in a conversation	conversation*	Read
GetChatToken	Grants permission to request a websocket token for the conversation notifications	token*	Read
GetCompanyChatMessages	Grants permission to read chat messages in a company conversation	conversation*	Read
GetCompanyProfile	Grants permission to read a company profile	company*	Read
GetConversation	Grants permission to read details of a conversation	conversation*	Read
GetExpert	Grants permission to read expert information	expert*	Read
GetListing	Grants permission to read a listing	listing*	Read
GetMarketplaceSeller	Grants permission to read a seller profile information	seller*	Read
GetPaymentRequest	Grants permission to read a payment request	paymentRequest*	Read
GetProposal	Grants permission to read a proposal	proposal*	Read
GetRequest	Grants permission to get a created request	request*	Read
GetReview	Grants permission to read a review for an expert	seller*	Read
HideRequest	Grants permission to hide a request	request*	Write
InitiateCall	Grants permission to start a voice/video call		Write
LinkAwsCertification	Grants permission to link an AWS certification to individual profile	expert*	Write
ListAttachments	Grants permission to list existing attachments	attachment*	List
ListConversations	Grants permission to list existing conversations	conversation*	Read
ListExpertAccessLogs	Grants permission to list access logs of expert activity	permission*	Read
ListListings	Grants permission to list listings	listing*	Read
ListPaymentRequests	Grants permission to list payment requests	paymentRequest	Read
ListPaymentRequests	Grants permission to list payment requests	paymentSchedule	Read
ListProposals	Grants permission to list proposals	proposal*	Read
ListRequests	Grants permission to list requests that are created	request*	Read
ListReviews	Grants permission to list reviews for an expert	seller*	Read
MarkChatMessageRead	Grants permission to mark a message as read in a conversation	conversation*	Write
RejectPaymentRequest	Grants permission to reject a payment request	paymentRequest*	Write
RejectProposal	Grants permission to reject a proposal	proposal*	Write
SendCompanyChatMessage	Grants permission to send a message in a conversation as a company	conversation*	Write
SendIndividualChatMessage	Grants permission to send a message in a conversation as an individual	conversation*	Write
UnarchiveConversation	Grants permission to unarchive a conversation	conversation*	Write
UnlinkAwsCertification	Grants permission to unlink an AWS certification from individual profile	expert*	Write
UpdateCompanyProfile	Grants permission to update a company profile	company*	Write
UpdateConversationMembers	Grants permission to add more participants into a conversation	conversation*	Write
UpdateExpert	Grants permission to update an expert information	expert*	Write
UpdateListing	Grants permission to update a listing	listing*	Write
UpdateRequest	Grants permission to update a request	request*	Write
UploadAttachment	Grants permission to upload an attachment		Write
WithdrawPaymentRequest	Grants permission to withdraw a payment request	paymentRequest*	Write
WithdrawProposal	Grants permission to withdraw a proposal	proposal*	Write
WriteReview	Grants permission to write a review for an expert	seller*	Write

Resource types defined by AWS IQ

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
attachment	arn:${Partition}:iq:${Region}::attachment/${AttachmentId}
buyer	arn:${Partition}:iq:${Region}::buyer/${BuyerId}
call	arn:${Partition}:iq:${Region}::call/${CallId}
company	arn:${Partition}:iq:${Region}::company/${CompanyId}
conversation	arn:${Partition}:iq:${Region}::conversation/${ConversationId}
expert	arn:${Partition}:iq:${Region}::expert/${ExpertId}
listing	arn:${Partition}:iq:${Region}::listing/${ListingId}
paymentRequest	arn:${Partition}:iq:${Region}::paymentRequest/${ConversationId}/${ProposalId}/${PaymentRequestId}
paymentSchedule	arn:${Partition}:iq:${Region}::paymentSchedule/${ConversationId}/${ProposalId}/${VersionId}
permission	arn:${Partition}:iq-permission:${Region}::permission/${PermissionRequestId}
proposal	arn:${Partition}:iq:${Region}::proposal/${ConversationId}/${ProposalId}
request	arn:${Partition}:iq:${Region}::request/${RequestId}
seller	arn:${Partition}:iq:${Region}::seller/${SellerAwsAccountId}
token	arn:${Partition}:iq:${Region}::token/${TokenId}

Condition keys for AWS IQ

AWS IQ has no service-specific condition keys that can be used in the Condition element of policy statements.

Warning Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Document Conventions

AWS IoT Wireless (iotwireless)

AWS IQ Permissions (iq-permission)