# Actions, resources, and condition keys for Amazon Lightsail
Amazon Lightsail (service prefix: `lightsail`) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.
References:
+ Learn how to [configure this service](https://lightsail.aws.amazon.com/ls/docs/).
+ View a list of the [API operations available for this service](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/).
+ Learn how to secure this service and its resources by [using IAM](https://lightsail.aws.amazon.com/ls/docs/how-to/article/security_iam) permission policies.
+ View the [programmatic service authorization reference](https://servicereference.us-east-1.amazonaws.com/v1/lightsail/lightsail.json) for this service.
**Topics**
+ [API operations defined by Amazon Lightsail](#list_lightsail-operations)
+ [Actions defined by Amazon Lightsail](#list_lightsail-actions-as-permissions)
+ [Resource types defined by Amazon Lightsail](#list_lightsail-resources-for-iam-policies)
+ [Condition keys for Amazon Lightsail](#list_lightsail-policy-keys)
## API operations defined by Amazon Lightsail
The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the [Actions table](#list_lightsail-actions-as-permissions).
****
- ** AllocateStaticIp **
- **IAM action:** [lightsail:AllocateStaticIp](#list_lightsail-action-AllocateStaticIp)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AttachCertificateToDistribution **
- **IAM action:** [lightsail:AttachCertificateToDistribution](#list_lightsail-action-AttachCertificateToDistribution)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AttachDisk **
- **IAM action:** [lightsail:AttachDisk](#list_lightsail-action-AttachDisk)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AttachInstancesToLoadBalancer **
- **IAM action:** [lightsail:AttachInstancesToLoadBalancer](#list_lightsail-action-AttachInstancesToLoadBalancer)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AttachLoadBalancerTlsCertificate **
- **IAM action:** [lightsail:AttachLoadBalancerTlsCertificate](#list_lightsail-action-AttachLoadBalancerTlsCertificate)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AttachStaticIp **
- **IAM action:** [lightsail:AttachStaticIp](#list_lightsail-action-AttachStaticIp)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** CloseInstancePublicPorts **
- **IAM action:** [lightsail:CloseInstancePublicPorts](#list_lightsail-action-CloseInstancePublicPorts)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** CopySnapshot **
- **IAM action:** [lightsail:CopySnapshot](#list_lightsail-action-CopySnapshot)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** CreateBucket **
- **IAM action:** [lightsail:CreateBucket](#list_lightsail-action-CreateBucket) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [lightsail:TagResource](#list_lightsail-action-TagResource) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateBucketAccessKey **
- **IAM action:** [lightsail:CreateBucketAccessKey](#list_lightsail-action-CreateBucketAccessKey)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** CreateCertificate **
- **IAM action:** [lightsail:CreateCertificate](#list_lightsail-action-CreateCertificate) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [lightsail:TagResource](#list_lightsail-action-TagResource) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateCloudFormationStack **
- **IAM action:** [lightsail:CreateCloudFormationStack](#list_lightsail-action-CreateCloudFormationStack)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** CreateContactMethod **
- **IAM action:** [lightsail:CreateContactMethod](#list_lightsail-action-CreateContactMethod) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [lightsail:TagResource](#list_lightsail-action-TagResource) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateContainerService **
- **IAM action:** [lightsail:CreateContainerService](#list_lightsail-action-CreateContainerService) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [lightsail:TagResource](#list_lightsail-action-TagResource) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateContainerServiceDeployment **
- **IAM action:** [lightsail:CreateContainerServiceDeployment](#list_lightsail-action-CreateContainerServiceDeployment)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** CreateContainerServiceRegistryLogin **
- **IAM action:** [lightsail:CreateContainerServiceRegistryLogin](#list_lightsail-action-CreateContainerServiceRegistryLogin)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** CreateDisk **
- **IAM action:** [lightsail:CreateDisk](#list_lightsail-action-CreateDisk) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [lightsail:TagResource](#list_lightsail-action-TagResource) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateDiskFromSnapshot **
- **IAM action:** [lightsail:CreateDiskFromSnapshot](#list_lightsail-action-CreateDiskFromSnapshot) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [lightsail:TagResource](#list_lightsail-action-TagResource) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateDiskSnapshot **
- **IAM action:** [lightsail:CreateDiskSnapshot](#list_lightsail-action-CreateDiskSnapshot) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [lightsail:TagResource](#list_lightsail-action-TagResource) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateDistribution **
- **IAM action:** [lightsail:CreateDistribution](#list_lightsail-action-CreateDistribution) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [lightsail:TagResource](#list_lightsail-action-TagResource) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateDomain **
- **IAM action:** [lightsail:CreateDomain](#list_lightsail-action-CreateDomain) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [lightsail:TagResource](#list_lightsail-action-TagResource) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateDomainEntry **
- **IAM action:** [lightsail:CreateDomainEntry](#list_lightsail-action-CreateDomainEntry)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** CreateGUISessionAccessDetails **
- **IAM action:** [lightsail:CreateGUISessionAccessDetails](#list_lightsail-action-CreateGUISessionAccessDetails)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** CreateInstanceSnapshot **
- **IAM action:** [lightsail:CreateInstanceSnapshot](#list_lightsail-action-CreateInstanceSnapshot) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [lightsail:TagResource](#list_lightsail-action-TagResource) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateInstances **
- **IAM action:** [lightsail:CreateInstances](#list_lightsail-action-CreateInstances) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [lightsail:TagResource](#list_lightsail-action-TagResource) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateInstancesFromSnapshot **
- **IAM action:** [lightsail:CreateInstancesFromSnapshot](#list_lightsail-action-CreateInstancesFromSnapshot) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [lightsail:TagResource](#list_lightsail-action-TagResource) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateKeyPair **
- **IAM action:** [lightsail:CreateKeyPair](#list_lightsail-action-CreateKeyPair) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [lightsail:TagResource](#list_lightsail-action-TagResource) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateLoadBalancer **
- **IAM action:** [lightsail:CreateLoadBalancer](#list_lightsail-action-CreateLoadBalancer) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [lightsail:TagResource](#list_lightsail-action-TagResource) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateLoadBalancerTlsCertificate **
- **IAM action:** [lightsail:CreateLoadBalancerTlsCertificate](#list_lightsail-action-CreateLoadBalancerTlsCertificate)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** CreateRelationalDatabase **
- **IAM action:** [lightsail:CreateRelationalDatabase](#list_lightsail-action-CreateRelationalDatabase) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [lightsail:TagResource](#list_lightsail-action-TagResource) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateRelationalDatabaseFromSnapshot **
- **IAM action:** [lightsail:CreateRelationalDatabaseFromSnapshot](#list_lightsail-action-CreateRelationalDatabaseFromSnapshot) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [lightsail:TagResource](#list_lightsail-action-TagResource) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateRelationalDatabaseSnapshot **
- **IAM action:** [lightsail:CreateRelationalDatabaseSnapshot](#list_lightsail-action-CreateRelationalDatabaseSnapshot) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [lightsail:TagResource](#list_lightsail-action-TagResource) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** DeleteAlarm **
- **IAM action:** [lightsail:DeleteAlarm](#list_lightsail-action-DeleteAlarm)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteAutoSnapshot **
- **IAM action:** [lightsail:DeleteAutoSnapshot](#list_lightsail-action-DeleteAutoSnapshot)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteBucket **
- **IAM action:** [lightsail:DeleteBucket](#list_lightsail-action-DeleteBucket)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteBucketAccessKey **
- **IAM action:** [lightsail:DeleteBucketAccessKey](#list_lightsail-action-DeleteBucketAccessKey)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteCertificate **
- **IAM action:** [lightsail:DeleteCertificate](#list_lightsail-action-DeleteCertificate)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteContactMethod **
- **IAM action:** [lightsail:DeleteContactMethod](#list_lightsail-action-DeleteContactMethod)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteContainerImage **
- **IAM action:** [lightsail:DeleteContainerImage](#list_lightsail-action-DeleteContainerImage)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteContainerService **
- **IAM action:** [lightsail:DeleteContainerService](#list_lightsail-action-DeleteContainerService)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteDisk **
- **IAM action:** [lightsail:DeleteDisk](#list_lightsail-action-DeleteDisk)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteDiskSnapshot **
- **IAM action:** [lightsail:DeleteDiskSnapshot](#list_lightsail-action-DeleteDiskSnapshot)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteDistribution **
- **IAM action:** [lightsail:DeleteDistribution](#list_lightsail-action-DeleteDistribution)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteDomain **
- **IAM action:** [lightsail:DeleteDomain](#list_lightsail-action-DeleteDomain)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteDomainEntry **
- **IAM action:** [lightsail:DeleteDomainEntry](#list_lightsail-action-DeleteDomainEntry)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteInstance **
- **IAM action:** [lightsail:DeleteInstance](#list_lightsail-action-DeleteInstance)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteInstanceSnapshot **
- **IAM action:** [lightsail:DeleteInstanceSnapshot](#list_lightsail-action-DeleteInstanceSnapshot)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteKeyPair **
- **IAM action:** [lightsail:DeleteKeyPair](#list_lightsail-action-DeleteKeyPair)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteKnownHostKeys **
- **IAM action:** [lightsail:DeleteKnownHostKeys](#list_lightsail-action-DeleteKnownHostKeys)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteLoadBalancer **
- **IAM action:** [lightsail:DeleteLoadBalancer](#list_lightsail-action-DeleteLoadBalancer)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteLoadBalancerTlsCertificate **
- **IAM action:** [lightsail:DeleteLoadBalancerTlsCertificate](#list_lightsail-action-DeleteLoadBalancerTlsCertificate)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteRelationalDatabase **
- **IAM action:** [lightsail:DeleteRelationalDatabase](#list_lightsail-action-DeleteRelationalDatabase)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteRelationalDatabaseSnapshot **
- **IAM action:** [lightsail:DeleteRelationalDatabaseSnapshot](#list_lightsail-action-DeleteRelationalDatabaseSnapshot)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DetachCertificateFromDistribution **
- **IAM action:** [lightsail:DetachCertificateFromDistribution](#list_lightsail-action-DetachCertificateFromDistribution)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DetachDisk **
- **IAM action:** [lightsail:DetachDisk](#list_lightsail-action-DetachDisk)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DetachInstancesFromLoadBalancer **
- **IAM action:** [lightsail:DetachInstancesFromLoadBalancer](#list_lightsail-action-DetachInstancesFromLoadBalancer)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DetachStaticIp **
- **IAM action:** [lightsail:DetachStaticIp](#list_lightsail-action-DetachStaticIp)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DisableAddOn **
- **IAM action:** [lightsail:DisableAddOn](#list_lightsail-action-DisableAddOn)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DownloadDefaultKeyPair **
- **IAM action:** [lightsail:DownloadDefaultKeyPair](#list_lightsail-action-DownloadDefaultKeyPair)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** EnableAddOn **
- **IAM action:** [lightsail:EnableAddOn](#list_lightsail-action-EnableAddOn)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ExportSnapshot **
- **IAM action:** [lightsail:ExportSnapshot](#list_lightsail-action-ExportSnapshot)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** GetActiveNames **
- **IAM action:** [lightsail:GetActiveNames](#list_lightsail-action-GetActiveNames)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetAlarms **
- **IAM action:** [lightsail:GetAlarms](#list_lightsail-action-GetAlarms)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetAutoSnapshots **
- **IAM action:** [lightsail:GetAutoSnapshots](#list_lightsail-action-GetAutoSnapshots)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetBlueprints **
- **IAM action:** [lightsail:GetBlueprints](#list_lightsail-action-GetBlueprints)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetBucketAccessKeys **
- **IAM action:** [lightsail:GetBucketAccessKeys](#list_lightsail-action-GetBucketAccessKeys)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetBucketBundles **
- **IAM action:** [lightsail:GetBucketBundles](#list_lightsail-action-GetBucketBundles)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetBucketMetricData **
- **IAM action:** [lightsail:GetBucketMetricData](#list_lightsail-action-GetBucketMetricData)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetBuckets **
- **IAM action:** [lightsail:GetBuckets](#list_lightsail-action-GetBuckets)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetBundles **
- **IAM action:** [lightsail:GetBundles](#list_lightsail-action-GetBundles)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetCertificates **
- **IAM action:** [lightsail:GetCertificates](#list_lightsail-action-GetCertificates)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetCloudFormationStackRecords **
- **IAM action:** [lightsail:GetCloudFormationStackRecords](#list_lightsail-action-GetCloudFormationStackRecords)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetContactMethods **
- **IAM action:** [lightsail:GetContactMethods](#list_lightsail-action-GetContactMethods)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetContainerAPIMetadata **
- **IAM action:** [lightsail:GetContainerAPIMetadata](#list_lightsail-action-GetContainerAPIMetadata)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetContainerImages **
- **IAM action:** [lightsail:GetContainerImages](#list_lightsail-action-GetContainerImages)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetContainerLog **
- **IAM action:** [lightsail:GetContainerLog](#list_lightsail-action-GetContainerLog)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetContainerServiceDeployments **
- **IAM action:** [lightsail:GetContainerServiceDeployments](#list_lightsail-action-GetContainerServiceDeployments)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetContainerServiceMetricData **
- **IAM action:** [lightsail:GetContainerServiceMetricData](#list_lightsail-action-GetContainerServiceMetricData)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetContainerServicePowers **
- **IAM action:** [lightsail:GetContainerServicePowers](#list_lightsail-action-GetContainerServicePowers)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetContainerServices **
- **IAM action:** [lightsail:GetContainerServices](#list_lightsail-action-GetContainerServices)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetCostEstimate **
- **IAM action:** [lightsail:GetCostEstimate](#list_lightsail-action-GetCostEstimate)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetDisk **
- **IAM action:** [lightsail:GetDisk](#list_lightsail-action-GetDisk)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetDiskSnapshot **
- **IAM action:** [lightsail:GetDiskSnapshot](#list_lightsail-action-GetDiskSnapshot)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetDiskSnapshots **
- **IAM action:** [lightsail:GetDiskSnapshots](#list_lightsail-action-GetDiskSnapshots)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetDisks **
- **IAM action:** [lightsail:GetDisks](#list_lightsail-action-GetDisks)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetDistributionBundles **
- **IAM action:** [lightsail:GetDistributionBundles](#list_lightsail-action-GetDistributionBundles)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetDistributionLatestCacheReset **
- **IAM action:** [lightsail:GetDistributionLatestCacheReset](#list_lightsail-action-GetDistributionLatestCacheReset)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetDistributionMetricData **
- **IAM action:** [lightsail:GetDistributionMetricData](#list_lightsail-action-GetDistributionMetricData)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetDistributions **
- **IAM action:** [lightsail:GetDistributions](#list_lightsail-action-GetDistributions)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetDomain **
- **IAM action:** [lightsail:GetDomain](#list_lightsail-action-GetDomain)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetDomains **
- **IAM action:** [lightsail:GetDomains](#list_lightsail-action-GetDomains)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetExportSnapshotRecords **
- **IAM action:** [lightsail:GetExportSnapshotRecords](#list_lightsail-action-GetExportSnapshotRecords)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetInstance **
- **IAM action:** [lightsail:GetInstance](#list_lightsail-action-GetInstance)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetInstanceAccessDetails **
- **IAM action:** [lightsail:GetInstanceAccessDetails](#list_lightsail-action-GetInstanceAccessDetails)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** GetInstanceMetricData **
- **IAM action:** [lightsail:GetInstanceMetricData](#list_lightsail-action-GetInstanceMetricData)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetInstancePortStates **
- **IAM action:** [lightsail:GetInstancePortStates](#list_lightsail-action-GetInstancePortStates)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetInstanceSnapshot **
- **IAM action:** [lightsail:GetInstanceSnapshot](#list_lightsail-action-GetInstanceSnapshot)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetInstanceSnapshots **
- **IAM action:** [lightsail:GetInstanceSnapshots](#list_lightsail-action-GetInstanceSnapshots)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetInstanceState **
- **IAM action:** [lightsail:GetInstanceState](#list_lightsail-action-GetInstanceState)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetInstances **
- **IAM action:** [lightsail:GetInstances](#list_lightsail-action-GetInstances)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetKeyPair **
- **IAM action:** [lightsail:GetKeyPair](#list_lightsail-action-GetKeyPair)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetKeyPairs **
- **IAM action:** [lightsail:GetKeyPairs](#list_lightsail-action-GetKeyPairs)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetLoadBalancer **
- **IAM action:** [lightsail:GetLoadBalancer](#list_lightsail-action-GetLoadBalancer)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetLoadBalancerMetricData **
- **IAM action:** [lightsail:GetLoadBalancerMetricData](#list_lightsail-action-GetLoadBalancerMetricData)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetLoadBalancerTlsCertificates **
- **IAM action:** [lightsail:GetLoadBalancerTlsCertificates](#list_lightsail-action-GetLoadBalancerTlsCertificates)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetLoadBalancerTlsPolicies **
- **IAM action:** [lightsail:GetLoadBalancerTlsPolicies](#list_lightsail-action-GetLoadBalancerTlsPolicies)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetLoadBalancers **
- **IAM action:** [lightsail:GetLoadBalancers](#list_lightsail-action-GetLoadBalancers)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetOperation **
- **IAM action:** [lightsail:GetOperation](#list_lightsail-action-GetOperation)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetOperations **
- **IAM action:** [lightsail:GetOperations](#list_lightsail-action-GetOperations)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetOperationsForResource **
- **IAM action:** [lightsail:GetOperationsForResource](#list_lightsail-action-GetOperationsForResource)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetRegions **
- **IAM action:** [lightsail:GetRegions](#list_lightsail-action-GetRegions)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetRelationalDatabase **
- **IAM action:** [lightsail:GetRelationalDatabase](#list_lightsail-action-GetRelationalDatabase)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetRelationalDatabaseBlueprints **
- **IAM action:** [lightsail:GetRelationalDatabaseBlueprints](#list_lightsail-action-GetRelationalDatabaseBlueprints)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetRelationalDatabaseBundles **
- **IAM action:** [lightsail:GetRelationalDatabaseBundles](#list_lightsail-action-GetRelationalDatabaseBundles)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetRelationalDatabaseEvents **
- **IAM action:** [lightsail:GetRelationalDatabaseEvents](#list_lightsail-action-GetRelationalDatabaseEvents)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetRelationalDatabaseLogEvents **
- **IAM action:** [lightsail:GetRelationalDatabaseLogEvents](#list_lightsail-action-GetRelationalDatabaseLogEvents)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetRelationalDatabaseLogStreams **
- **IAM action:** [lightsail:GetRelationalDatabaseLogStreams](#list_lightsail-action-GetRelationalDatabaseLogStreams)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetRelationalDatabaseMasterUserPassword **
- **IAM action:** [lightsail:GetRelationalDatabaseMasterUserPassword](#list_lightsail-action-GetRelationalDatabaseMasterUserPassword)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** GetRelationalDatabaseMetricData **
- **IAM action:** [lightsail:GetRelationalDatabaseMetricData](#list_lightsail-action-GetRelationalDatabaseMetricData)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetRelationalDatabaseParameters **
- **IAM action:** [lightsail:GetRelationalDatabaseParameters](#list_lightsail-action-GetRelationalDatabaseParameters)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetRelationalDatabaseSnapshot **
- **IAM action:** [lightsail:GetRelationalDatabaseSnapshot](#list_lightsail-action-GetRelationalDatabaseSnapshot)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetRelationalDatabaseSnapshots **
- **IAM action:** [lightsail:GetRelationalDatabaseSnapshots](#list_lightsail-action-GetRelationalDatabaseSnapshots)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetRelationalDatabases **
- **IAM action:** [lightsail:GetRelationalDatabases](#list_lightsail-action-GetRelationalDatabases)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetSetupHistory **
- **IAM action:** [lightsail:GetSetupHistory](#list_lightsail-action-GetSetupHistory)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetStaticIp **
- **IAM action:** [lightsail:GetStaticIp](#list_lightsail-action-GetStaticIp)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetStaticIps **
- **IAM action:** [lightsail:GetStaticIps](#list_lightsail-action-GetStaticIps)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** ImportKeyPair **
- **IAM action:** [lightsail:ImportKeyPair](#list_lightsail-action-ImportKeyPair)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** IsVpcPeered **
- **IAM action:** [lightsail:IsVpcPeered](#list_lightsail-action-IsVpcPeered)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** OpenInstancePublicPorts **
- **IAM action:** [lightsail:OpenInstancePublicPorts](#list_lightsail-action-OpenInstancePublicPorts)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** PeerVpc **
- **IAM action:** [lightsail:PeerVpc](#list_lightsail-action-PeerVpc)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** PutAlarm **
- **IAM action:** [lightsail:PutAlarm](#list_lightsail-action-PutAlarm) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [lightsail:TagResource](#list_lightsail-action-TagResource) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** PutInstancePublicPorts **
- **IAM action:** [lightsail:PutInstancePublicPorts](#list_lightsail-action-PutInstancePublicPorts)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** RebootInstance **
- **IAM action:** [lightsail:RebootInstance](#list_lightsail-action-RebootInstance)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** RebootRelationalDatabase **
- **IAM action:** [lightsail:RebootRelationalDatabase](#list_lightsail-action-RebootRelationalDatabase)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** RegisterContainerImage **
- **IAM action:** [lightsail:RegisterContainerImage](#list_lightsail-action-RegisterContainerImage)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ReleaseStaticIp **
- **IAM action:** [lightsail:ReleaseStaticIp](#list_lightsail-action-ReleaseStaticIp)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ResetDistributionCache **
- **IAM action:** [lightsail:ResetDistributionCache](#list_lightsail-action-ResetDistributionCache)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** SendContactMethodVerification **
- **IAM action:** [lightsail:SendContactMethodVerification](#list_lightsail-action-SendContactMethodVerification)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** SetIpAddressType **
- **IAM action:** [lightsail:SetIpAddressType](#list_lightsail-action-SetIpAddressType)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** SetResourceAccessForBucket **
- **IAM action:** [lightsail:SetResourceAccessForBucket](#list_lightsail-action-SetResourceAccessForBucket)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** SetupInstanceHttps **
- **IAM action:** [lightsail:SetupInstanceHttps](#list_lightsail-action-SetupInstanceHttps)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** StartGUISession **
- **IAM action:** [lightsail:StartGUISession](#list_lightsail-action-StartGUISession)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** StartInstance **
- **IAM action:** [lightsail:StartInstance](#list_lightsail-action-StartInstance)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** StartRelationalDatabase **
- **IAM action:** [lightsail:StartRelationalDatabase](#list_lightsail-action-StartRelationalDatabase)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** StopGUISession **
- **IAM action:** [lightsail:StopGUISession](#list_lightsail-action-StopGUISession)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** StopInstance **
- **IAM action:** [lightsail:StopInstance](#list_lightsail-action-StopInstance)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** StopRelationalDatabase **
- **IAM action:** [lightsail:StopRelationalDatabase](#list_lightsail-action-StopRelationalDatabase)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** TagResource **
- **IAM action:** [lightsail:TagResource](#list_lightsail-action-TagResource)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Tagging, Write
- ** TestAlarm **
- **IAM action:** [lightsail:TestAlarm](#list_lightsail-action-TestAlarm)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** UnpeerVpc **
- **IAM action:** [lightsail:UnpeerVpc](#list_lightsail-action-UnpeerVpc)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** UntagResource **
- **IAM action:** [lightsail:UntagResource](#list_lightsail-action-UntagResource)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Tagging, Write
- ** UpdateBucket **
- **IAM action:** [lightsail:UpdateBucket](#list_lightsail-action-UpdateBucket)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** UpdateBucketBundle **
- **IAM action:** [lightsail:UpdateBucketBundle](#list_lightsail-action-UpdateBucketBundle)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** UpdateContainerService **
- **IAM action:** [lightsail:UpdateContainerService](#list_lightsail-action-UpdateContainerService)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** UpdateDistribution **
- **IAM action:** [lightsail:UpdateDistribution](#list_lightsail-action-UpdateDistribution)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** UpdateDistributionBundle **
- **IAM action:** [lightsail:UpdateDistributionBundle](#list_lightsail-action-UpdateDistributionBundle)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** UpdateDomainEntry **
- **IAM action:** [lightsail:UpdateDomainEntry](#list_lightsail-action-UpdateDomainEntry)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** UpdateInstanceMetadataOptions **
- **IAM action:** [lightsail:UpdateInstanceMetadataOptions](#list_lightsail-action-UpdateInstanceMetadataOptions)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** UpdateLoadBalancerAttribute **
- **IAM action:** [lightsail:UpdateLoadBalancerAttribute](#list_lightsail-action-UpdateLoadBalancerAttribute)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** UpdateRelationalDatabase **
- **IAM action:** [lightsail:UpdateRelationalDatabase](#list_lightsail-action-UpdateRelationalDatabase)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** UpdateRelationalDatabaseParameters **
- **IAM action:** [lightsail:UpdateRelationalDatabaseParameters](#list_lightsail-action-UpdateRelationalDatabaseParameters)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
## Actions defined by Amazon Lightsail
You can specify the following actions in the `Action` element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.
****
- ** [AllocateStaticIp](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_AllocateStaticIp.html) **
- **Description:** Grants permission to create a static IP address that can be attached to an instance
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Write
- ** [AttachCertificateToDistribution](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_AttachCertificateToDistribution.html) **
- **Description:** Grants permission to attach an SSL/TLS certificate to your Amazon Lightsail content delivery network (CDN) distribution
- **Resource types (\*required):** [Certificate\*](#list_lightsail-resource-Certificate) / **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Resource types (\*required):** [Distribution\*](#list_lightsail-resource-Distribution) / **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [AttachDisk](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_AttachDisk.html) **
- **Description:** Grants permission to attach a disk to an instance
- **Resource types (\*required):** [Disk\*](#list_lightsail-resource-Disk)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [AttachInstancesToLoadBalancer](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_AttachInstancesToLoadBalancer.html) **
- **Description:** Grants permission to attach one or more instances to a load balancer
- **Resource types (\*required):** [LoadBalancer\*](#list_lightsail-resource-LoadBalancer)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [AttachLoadBalancerTlsCertificate](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_AttachLoadBalancerTlsCertificate.html) **
- **Description:** Grants permission to attach a TLS certificate to a load balancer
- **Resource types (\*required):** [LoadBalancer\*](#list_lightsail-resource-LoadBalancer)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [AttachStaticIp](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_AttachStaticIp.html) **
- **Description:** Grants permission to attach a static IP address to an instance
- **Resource types (\*required):** [Instance\*](#list_lightsail-resource-Instance) / **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Resource types (\*required):** [StaticIp\*](#list_lightsail-resource-StaticIp) / **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CloseInstancePublicPorts](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_CloseInstancePublicPorts.html) **
- **Description:** Grants permission to close a public port of an instance
- **Resource types (\*required):** [Instance\*](#list_lightsail-resource-Instance)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CopySnapshot](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_CopySnapshot.html) **
- **Description:** Grants permission to copy a snapshot from one AWS Region to another in Amazon Lightsail
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Write
- ** [CreateBucket](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_CreateBucket.html) **
- **Description:** Grants permission to create an Amazon Lightsail bucket
- **Resource types (\*required):**
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_lightsail-aws_RequestTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Access level:** Write
- ** [CreateBucketAccessKey](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_CreateBucketAccessKey.html) **
- **Description:** Grants permission to create a new access key for the specified bucket
- **Resource types (\*required):** [Bucket\*](#list_lightsail-resource-Bucket)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateCertificate](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_CreateCertificate.html) **
- **Description:** Grants permission to create an SSL/TLS certificate
- **Resource types (\*required):**
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_lightsail-aws_RequestTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Access level:** Write
- ** [CreateCloudFormationStack](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_CreateCloudFormationStack.html) **
- **Description:** Grants permission to create a new Amazon EC2 instance from an exported Amazon Lightsail snapshot
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Write
- ** [CreateContactMethod](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_CreateContactMethod.html) **
- **Description:** Grants permission to create an email or SMS text message contact method
- **Resource types (\*required):**
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_lightsail-aws_RequestTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Access level:** Write
- ** [CreateContainerService](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_CreateContainerService.html) **
- **Description:** Grants permission to create an Amazon Lightsail container service
- **Resource types (\*required):**
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_lightsail-aws_RequestTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Access level:** Write
- ** [CreateContainerServiceDeployment](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_CreateContainerServiceDeployment.html) **
- **Description:** Grants permission to create a deployment for your Amazon Lightsail container service
- **Resource types (\*required):** [ContainerService\*](#list_lightsail-resource-ContainerService)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateContainerServiceRegistryLogin](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_CreateContainerServiceRegistryLogin.html) **
- **Description:** Grants permission to create a temporary set of log in credentials that you can use to log in to the Docker process on your local machine
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Write
- ** [CreateDisk](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_CreateDisk.html) **
- **Description:** Grants permission to create a disk
- **Resource types (\*required):**
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_lightsail-aws_RequestTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Access level:** Write
- ** [CreateDiskFromSnapshot](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_CreateDiskFromSnapshot.html) **
- **Description:** Grants permission to create a disk from snapshot
- **Resource types (\*required):** [DiskSnapshot\*](#list_lightsail-resource-DiskSnapshot)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_lightsail-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Access level:** Write
- ** [CreateDiskSnapshot](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_CreateDiskSnapshot.html) **
- **Description:** Grants permission to create a disk snapshot
- **Resource types (\*required):** [Disk](#list_lightsail-resource-Disk) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_lightsail-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Resource types (\*required):** [Instance](#list_lightsail-resource-Instance) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_lightsail-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Access level:** Write
- ** [CreateDistribution](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_CreateDistribution.html) **
- **Description:** Grants permission to create an Amazon Lightsail content delivery network (CDN) distribution
- **Resource types (\*required):**
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_lightsail-aws_RequestTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Access level:** Write
- ** [CreateDomain](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_CreateDomain.html) **
- **Description:** Grants permission to create a domain resource for the specified domain name
- **Resource types (\*required):**
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_lightsail-aws_RequestTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Access level:** Write
- ** [CreateDomainEntry](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_CreateDomainEntry.html) **
- **Description:** Grants permission to create one or more DNS record entries for a domain resource: Address (A), canonical name (CNAME), mail exchanger (MX), name server (NS), start of authority (SOA), service locator (SRV), or text (TXT)
- **Resource types (\*required):** [Domain\*](#list_lightsail-resource-Domain)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateGUISessionAccessDetails](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_CreateGUISessionAccessDetails.html) **
- **Description:** Grants permission to create URLs that are used to access an instance's graphical user interface (GUI) session
- **Resource types (\*required):** [Instance\*](#list_lightsail-resource-Instance)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateInstanceSnapshot](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_CreateInstanceSnapshot.html) **
- **Description:** Grants permission to create an instance snapshot
- **Resource types (\*required):** [Instance\*](#list_lightsail-resource-Instance)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_lightsail-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Access level:** Write
- ** [CreateInstances](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_CreateInstances.html) **
- **Description:** Grants permission to create one or more instances
- **Resource types (\*required):**
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_lightsail-aws_RequestTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Access level:** Write
- ** [CreateInstancesFromSnapshot](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_CreateInstancesFromSnapshot.html) **
- **Description:** Grants permission to create one or more instances based on an instance snapshot
- **Resource types (\*required):** [InstanceSnapshot\*](#list_lightsail-resource-InstanceSnapshot)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_lightsail-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Access level:** Write
- ** [CreateKeyPair](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_CreateKeyPair.html) **
- **Description:** Grants permission to create a key pair used to authenticate and connect to an instance
- **Resource types (\*required):**
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_lightsail-aws_RequestTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Access level:** Write
- ** [CreateLoadBalancer](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_CreateLoadBalancer.html) **
- **Description:** Grants permission to create a load balancer
- **Resource types (\*required):**
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_lightsail-aws_RequestTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Access level:** Write
- ** [CreateLoadBalancerTlsCertificate](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_CreateLoadBalancerTlsCertificate.html) **
- **Description:** Grants permission to create a load balancer TLS certificate
- **Resource types (\*required):** [LoadBalancer\*](#list_lightsail-resource-LoadBalancer)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateRelationalDatabase](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_CreateRelationalDatabase.html) **
- **Description:** Grants permission to create a new relational database
- **Resource types (\*required):**
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_lightsail-aws_RequestTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Access level:** Write
- ** [CreateRelationalDatabaseFromSnapshot](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_CreateRelationalDatabaseFromSnapshot.html) **
- **Description:** Grants permission to create a new relational database from a snapshot
- **Resource types (\*required):** [RelationalDatabaseSnapshot\*](#list_lightsail-resource-RelationalDatabaseSnapshot)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_lightsail-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Access level:** Write
- ** [CreateRelationalDatabaseSnapshot](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_CreateRelationalDatabaseSnapshot.html) **
- **Description:** Grants permission to create a relational database snapshot
- **Resource types (\*required):**
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_lightsail-aws_RequestTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Access level:** Write
- ** [DeleteAlarm](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_DeleteAlarm.html) **
- **Description:** Grants permission to delete an alarm
- **Resource types (\*required):** [Alarm\*](#list_lightsail-resource-Alarm)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteAutoSnapshot](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_DeleteAutoSnapshot.html) **
- **Description:** Grants permission to delete an automatic snapshot of an instance or disk
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Write
- ** [DeleteBucket](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_DeleteBucket.html) **
- **Description:** Grants permission to delete an Amazon Lightsail bucket
- **Resource types (\*required):** [Bucket\*](#list_lightsail-resource-Bucket)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteBucketAccessKey](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_DeleteBucketAccessKey.html) **
- **Description:** Grants permission to delete an access key for the specified Amazon Lightsail bucket
- **Resource types (\*required):** [Bucket\*](#list_lightsail-resource-Bucket)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteCertificate](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_DeleteCertificate.html) **
- **Description:** Grants permission to delete an SSL/TLS certificate
- **Resource types (\*required):** [Certificate\*](#list_lightsail-resource-Certificate)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteContactMethod](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_DeleteContactMethod.html) **
- **Description:** Grants permission to delete a contact method
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Write
- ** [DeleteContainerImage](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_DeleteContainerImage.html) **
- **Description:** Grants permission to delete a container image that is registered to your Amazon Lightsail container service
- **Resource types (\*required):** [ContainerService\*](#list_lightsail-resource-ContainerService)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteContainerService](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_DeleteContainerService.html) **
- **Description:** Grants permission to delete your Amazon Lightsail container service
- **Resource types (\*required):** [ContainerService\*](#list_lightsail-resource-ContainerService)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteDisk](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_DeleteDisk.html) **
- **Description:** Grants permission to delete a disk
- **Resource types (\*required):** [Disk\*](#list_lightsail-resource-Disk)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteDiskSnapshot](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_DeleteDiskSnapshot.html) **
- **Description:** Grants permission to delete a disk snapshot
- **Resource types (\*required):** [DiskSnapshot\*](#list_lightsail-resource-DiskSnapshot)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteDistribution](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_DeleteDistribution.html) **
- **Description:** Grants permission to delete your Amazon Lightsail content delivery network (CDN) distribution
- **Resource types (\*required):** [Distribution\*](#list_lightsail-resource-Distribution)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteDomain](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_DeleteDomain.html) **
- **Description:** Grants permission to delete a domain resource and all of its DNS records
- **Resource types (\*required):** [Domain\*](#list_lightsail-resource-Domain)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteDomainEntry](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_DeleteDomainEntry.html) **
- **Description:** Grants permission to delete a DNS record entry for a domain resource
- **Resource types (\*required):** [Domain\*](#list_lightsail-resource-Domain)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteInstance](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_DeleteInstance.html) **
- **Description:** Grants permission to delete an instance
- **Resource types (\*required):** [Instance\*](#list_lightsail-resource-Instance)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteInstanceSnapshot](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_DeleteInstanceSnapshot.html) **
- **Description:** Grants permission to delete an instance snapshot
- **Resource types (\*required):** [InstanceSnapshot\*](#list_lightsail-resource-InstanceSnapshot)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteKeyPair](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_DeleteKeyPair.html) **
- **Description:** Grants permission to delete a key pair used to authenticate and connect to an instance
- **Resource types (\*required):** [KeyPair\*](#list_lightsail-resource-KeyPair)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteKnownHostKeys](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_DeleteKnownHostKeys.html) **
- **Description:** Grants permission to delete the known host key or certificate used by the Amazon Lightsail browser-based SSH or RDP clients to authenticate an instance
- **Resource types (\*required):** [Instance\*](#list_lightsail-resource-Instance)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteLoadBalancer](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_DeleteLoadBalancer.html) **
- **Description:** Grants permission to delete a load balancer
- **Resource types (\*required):** [LoadBalancer\*](#list_lightsail-resource-LoadBalancer)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteLoadBalancerTlsCertificate](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_DeleteLoadBalancerTlsCertificate.html) **
- **Description:** Grants permission to delete a load balancer TLS certificate
- **Resource types (\*required):** [LoadBalancer\*](#list_lightsail-resource-LoadBalancer)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteRelationalDatabase](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_DeleteRelationalDatabase.html) **
- **Description:** Grants permission to delete a relational database
- **Resource types (\*required):** [RelationalDatabase\*](#list_lightsail-resource-RelationalDatabase)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteRelationalDatabaseSnapshot](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_DeleteRelationalDatabaseSnapshot.html) **
- **Description:** Grants permission to delete a relational database snapshot
- **Resource types (\*required):** [RelationalDatabaseSnapshot\*](#list_lightsail-resource-RelationalDatabaseSnapshot)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DetachCertificateFromDistribution](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_DetachCertificateFromDistribution.html) **
- **Description:** Grants permission to detach an SSL/TLS certificate from your Amazon Lightsail content delivery network (CDN) distribution
- **Resource types (\*required):** [Distribution\*](#list_lightsail-resource-Distribution)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DetachDisk](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_DetachDisk.html) **
- **Description:** Grants permission to detach a disk from an instance
- **Resource types (\*required):** [Disk\*](#list_lightsail-resource-Disk)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DetachInstancesFromLoadBalancer](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_DetachInstancesFromLoadBalancer.html) **
- **Description:** Grants permission to detach one or more instances from a load balancer
- **Resource types (\*required):** [LoadBalancer\*](#list_lightsail-resource-LoadBalancer)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DetachStaticIp](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_DetachStaticIp.html) **
- **Description:** Grants permission to detach a static IP from an instance to which it is attached
- **Resource types (\*required):** [StaticIp\*](#list_lightsail-resource-StaticIp)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DisableAddOn](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_DisableAddOn.html) **
- **Description:** Grants permission to disable an add-on for an Amazon Lightsail resource
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Write
- ** [DownloadDefaultKeyPair](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_DownloadDefaultKeyPair.html) **
- **Description:** Grants permission to download the default key pair used to authenticate and connect to instances in a specific AWS Region
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Write
- ** [EnableAddOn](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_EnableAddOn.html) **
- **Description:** Grants permission to enable or modify an add-on for an Amazon Lightsail resource
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Write
- ** [ExportSnapshot](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_ExportSnapshot.html) **
- **Description:** Grants permission to export an Amazon Lightsail snapshot to Amazon EC2
- **Resource types (\*required):** [DiskSnapshot](#list_lightsail-resource-DiskSnapshot) / **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Resource types (\*required):** [InstanceSnapshot](#list_lightsail-resource-InstanceSnapshot) / **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [GetActiveNames](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetActiveNames.html) **
- **Description:** Grants permission to get the names of all active (not deleted) resources
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetAlarms](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetAlarms.html) **
- **Description:** Grants permission to view information about the configured alarms
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetAutoSnapshots](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetAutoSnapshots.html) **
- **Description:** Grants permission to view the available automatic snapshots for an instance or disk
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetBlueprints](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetBlueprints.html) **
- **Description:** Grants permission to get a list of instance images, or blueprints. You can use a blueprint to create a new instance already running a specific operating system, as well as a pre-installed application or development stack. The software that runs on your instance depends on the blueprint you define when creating the instance
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetBucketAccessKeys](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetBucketAccessKeys.html) **
- **Description:** Grants permission to get the existing access key IDs for the specified Amazon Lightsail bucket
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetBucketBundles](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetBucketBundles.html) **
- **Description:** Grants permission to get the bundles that can be applied to an Amazon Lightsail bucket
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetBucketMetricData](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetBucketMetricData.html) **
- **Description:** Grants permission to get the data points of a specific metric for an Amazon Lightsail bucket
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetBuckets](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetBuckets.html) **
- **Description:** Grants permission to get information about one or more Amazon Lightsail buckets
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetBundles](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetBundles.html) **
- **Description:** Grants permission to get a list of instance bundles. You can use a bundle to create a new instance with a set of performance specifications, such as CPU count, disk size, RAM size, and network transfer allowance. The cost of your instance depends on the bundle you define when creating the instance
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetCertificates](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetCertificates.html) **
- **Description:** Grants permission to view information about one or more Amazon Lightsail SSL/TLS certificates
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetCloudFormationStackRecords](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetCloudFormationStackRecords.html) **
- **Description:** Grants permission to get information about all CloudFormation stacks used to create Amazon EC2 resources from exported Amazon Lightsail snapshots
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetContactMethods](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetContactMethods.html) **
- **Description:** Grants permission to view information about the configured contact methods
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetContainerAPIMetadata](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetContainerAPIMetadata.html) **
- **Description:** Grants permission to view information about Amazon Lightsail containers, such as the current version of the Lightsail Control (lightsailctl) plugin
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetContainerImages](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetContainerImages.html) **
- **Description:** Grants permission to view the container images that are registered to your Amazon Lightsail container service
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetContainerLog](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetContainerLog.html) **
- **Description:** Grants permission to view the log events of a container of your Amazon Lightsail container service
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetContainerServiceDeployments](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetContainerServiceDeployments.html) **
- **Description:** Grants permission to view the deployments for your Amazon Lightsail container service
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetContainerServiceMetricData](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetContainerServiceMetricData.html) **
- **Description:** Grants permission to view the data points of a specific metric of your Amazon Lightsail container service
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetContainerServicePowers](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetContainerServicePowers.html) **
- **Description:** Grants permission to view the list of powers that can be specified for your Amazon Lightsail container services
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetContainerServices](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetContainerServices.html) **
- **Description:** Grants permission to view information about one or more of your Amazon Lightsail container services
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetCostEstimate](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetCostEstimate.html) **
- **Description:** Grants permission to get the information about the cost estimate for a specified resource
- **Resource types (\*required):** [Disk](#list_lightsail-resource-Disk) / **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Resource types (\*required):** [Instance](#list_lightsail-resource-Instance) / **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Read
- ** [GetDisk](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetDisk.html) **
- **Description:** Grants permission to get information about a disk
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetDiskSnapshot](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetDiskSnapshot.html) **
- **Description:** Grants permission to get information about a disk snapshot
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetDiskSnapshots](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetDiskSnapshots.html) **
- **Description:** Grants permission to get information about all disk snapshots
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetDisks](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetDisks.html) **
- **Description:** Grants permission to get information about all disks
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetDistributionBundles](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetDistributionBundles.html) **
- **Description:** Grants permission to view the list of bundles that can be applied to you Amazon Lightsail content delivery network (CDN) distributions
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetDistributionLatestCacheReset](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetDistributionLatestCacheReset.html) **
- **Description:** Grants permission to view the timestamp and status of the last cache reset of a specific Amazon Lightsail content delivery network (CDN) distribution
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetDistributionMetricData](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetDistributionMetricData.html) **
- **Description:** Grants permission to view the data points of a specific metric for an Amazon Lightsail content delivery network (CDN) distribution
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetDistributions](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetDistributions.html) **
- **Description:** Grants permission to view information about one or more of your Amazon Lightsail content delivery network (CDN) distributions
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetDomain](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetDomain.html) **
- **Description:** Grants permission to get DNS records for a domain resource
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetDomains](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetDomains.html) **
- **Description:** Grants permission to get DNS records for all domain resources
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetExportSnapshotRecords](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetExportSnapshotRecords.html) **
- **Description:** Grants permission to get information about all records of exported Amazon Lightsail snapshots to Amazon EC2
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetInstance](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetInstance.html) **
- **Description:** Grants permission to get information about an instance
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetInstanceAccessDetails](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetInstanceAccessDetails.html) **
- **Description:** Grants permission to get temporary keys you can use to authenticate and connect to an instance
- **Resource types (\*required):** [Instance\*](#list_lightsail-resource-Instance)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [GetInstanceMetricData](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetInstanceMetricData.html) **
- **Description:** Grants permission to get the data points for the specified metric of an instance
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetInstancePortStates](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetInstancePortStates.html) **
- **Description:** Grants permission to get the port states of an instance
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetInstanceSnapshot](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetInstanceSnapshot.html) **
- **Description:** Grants permission to get information about an instance snapshot
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetInstanceSnapshots](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetInstanceSnapshots.html) **
- **Description:** Grants permission to get information about all instance snapshots
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetInstanceState](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetInstanceState.html) **
- **Description:** Grants permission to get the state of an instance
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetInstances](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetInstances.html) **
- **Description:** Grants permission to get information about all instances
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetKeyPair](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetKeyPair.html) **
- **Description:** Grants permission to get information about a key pair
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetKeyPairs](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetKeyPairs.html) **
- **Description:** Grants permission to get information about all key pairs
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetLoadBalancer](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetLoadBalancer.html) **
- **Description:** Grants permission to get information about a load balancer
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetLoadBalancerMetricData](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetLoadBalancerMetricData.html) **
- **Description:** Grants permission to get the data points for the specified metric of a load balancer
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetLoadBalancerTlsCertificates](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetLoadBalancerTlsCertificates.html) **
- **Description:** Grants permission to get information about a load balancer's TLS certificates
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetLoadBalancerTlsPolicies](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetLoadBalancerTlsPolicies.html) **
- **Description:** Grants permission to get a list of TLS security policies that you can apply to Lightsail load balancers
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetLoadBalancers](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetLoadBalancers.html) **
- **Description:** Grants permission to get information about load balancers
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetOperation](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetOperation.html) **
- **Description:** Grants permission to get information about an operation. Operations include events such as when you create an instance, allocate a static IP, attach a static IP, and so on
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetOperations](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetOperations.html) **
- **Description:** Grants permission to get information about all operations. Operations include events such as when you create an instance, allocate a static IP, attach a static IP, and so on
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetOperationsForResource](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetOperationsForResource.html) **
- **Description:** Grants permission to get operations for a resource
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetRegions](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetRegions.html) **
- **Description:** Grants permission to get a list of all valid AWS Regions for Amazon Lightsail
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetRelationalDatabase](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetRelationalDatabase.html) **
- **Description:** Grants permission to get information about a relational database
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetRelationalDatabaseBlueprints](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetRelationalDatabaseBlueprints.html) **
- **Description:** Grants permission to get a list of relational database images, or blueprints. You can use a blueprint to create a new database running a specific database engine. The database engine that runs on your database depends on the blueprint you define when creating the relational database
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetRelationalDatabaseBundles](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetRelationalDatabaseBundles.html) **
- **Description:** Grants permission to get a list of relational database bundles. You can use a bundle to create a new database with a set of performance specifications, such as CPU count, disk size, RAM size, network transfer allowance, and standard of high availability. The cost of your database depends on the bundle you define when creating the relational database
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetRelationalDatabaseEvents](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetRelationalDatabaseEvents.html) **
- **Description:** Grants permission to get events for a relational database
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetRelationalDatabaseLogEvents](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetRelationalDatabaseLogEvents.html) **
- **Description:** Grants permission to get events for the specified log stream of a relational database
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetRelationalDatabaseLogStreams](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetRelationalDatabaseLogStreams.html) **
- **Description:** Grants permission to get the log streams available for a relational database
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetRelationalDatabaseMasterUserPassword](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetRelationalDatabaseMasterUserPassword.html) **
- **Description:** Grants permission to get the master user password of a relational database
- **Resource types (\*required):** [RelationalDatabase\*](#list_lightsail-resource-RelationalDatabase)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [GetRelationalDatabaseMetricData](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetRelationalDatabaseMetricData.html) **
- **Description:** Grants permission to get the data points for the specified metric of a relational database
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetRelationalDatabaseParameters](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetRelationalDatabaseParameters.html) **
- **Description:** Grants permission to get the parameters of a relational database
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetRelationalDatabaseSnapshot](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetRelationalDatabaseSnapshot.html) **
- **Description:** Grants permission to get information about a relational database snapshot
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetRelationalDatabaseSnapshots](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetRelationalDatabaseSnapshots.html) **
- **Description:** Grants permission to get information about all relational database snapshots
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetRelationalDatabases](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetRelationalDatabases.html) **
- **Description:** Grants permission to get information about all relational databases
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetSetupHistory](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetSetupHistory.html) **
- **Description:** Grants permission to get detailed information for setup requests that were run on the specified resource
- **Resource types (\*required):** [Instance](#list_lightsail-resource-Instance)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Read
- ** [GetStaticIp](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetStaticIp.html) **
- **Description:** Grants permission to get information about a static IP
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [GetStaticIps](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetStaticIps.html) **
- **Description:** Grants permission to get information about all static IPs
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [ImportKeyPair](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_ImportKeyPair.html) **
- **Description:** Grants permission to import a public key from a key pair
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Write
- ** [IsVpcPeered](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_IsVpcPeered.html) **
- **Description:** Grants permission to get a boolean value indicating whether the Amazon Lightsail virtual private cloud (VPC) is peered
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Read
- ** [OpenInstancePublicPorts](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_OpenInstancePublicPorts.html) **
- **Description:** Grants permission to add, or open a public port of an instance
- **Resource types (\*required):** [Instance\*](#list_lightsail-resource-Instance)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [PeerVpc](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_PeerVpc.html) **
- **Description:** Grants permission to try to peer the Amazon Lightsail virtual private cloud (VPC) with the default VPC
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Write
- ** [PutAlarm](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_PutAlarm.html) **
- **Description:** Grants permission to creates or update an alarm, and associate it with the specified metric
- **Resource types (\*required):** [Alarm\*](#list_lightsail-resource-Alarm)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_lightsail-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Access level:** Write
- ** [PutInstancePublicPorts](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_PutInstancePublicPorts.html) **
- **Description:** Grants permission to set the specified open ports for an instance, and closes all ports for every protocol not included in the request
- **Resource types (\*required):** [Instance\*](#list_lightsail-resource-Instance)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [RebootInstance](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_RebootInstance.html) **
- **Description:** Grants permission to reboot an instance that is in a running state
- **Resource types (\*required):** [Instance\*](#list_lightsail-resource-Instance)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [RebootRelationalDatabase](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_RebootRelationalDatabase.html) **
- **Description:** Grants permission to reboot a relational database that is in a running state
- **Resource types (\*required):** [RelationalDatabase\*](#list_lightsail-resource-RelationalDatabase)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [RegisterContainerImage](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_RegisterContainerImage.html) **
- **Description:** Grants permission to register a container image to your Amazon Lightsail container service
- **Resource types (\*required):** [ContainerService\*](#list_lightsail-resource-ContainerService)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ReleaseStaticIp](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_ReleaseStaticIp.html) **
- **Description:** Grants permission to delete a static IP
- **Resource types (\*required):** [StaticIp\*](#list_lightsail-resource-StaticIp)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ResetDistributionCache](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_ResetDistributionCache.html) **
- **Description:** Grants permission to delete currently cached content from your Amazon Lightsail content delivery network (CDN) distribution
- **Resource types (\*required):** [Distribution\*](#list_lightsail-resource-Distribution)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [SendContactMethodVerification](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_SendContactMethodVerification.html) **
- **Description:** Grants permission to send a verification request to an email contact method to ensure it's owned by the requester
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Write
- ** [SetIpAddressType](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_SetIpAddressType.html) **
- **Description:** Grants permission to set the IP address type for a Amazon Lightsail resource
- **Resource types (\*required):** [Distribution](#list_lightsail-resource-Distribution) / **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Resource types (\*required):** [Instance](#list_lightsail-resource-Instance) / **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Resource types (\*required):** [LoadBalancer](#list_lightsail-resource-LoadBalancer) / **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [SetResourceAccessForBucket](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_SetResourceAccessForBucket.html) **
- **Description:** Grants permission to set the Amazon Lightsail resources that can access the specified Amazon Lightsail bucket
- **Resource types (\*required):** [Bucket\*](#list_lightsail-resource-Bucket) / **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Resource types (\*required):** [Instance\*](#list_lightsail-resource-Instance) / **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [SetupInstanceHttps](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_SetupInstanceHttps.html) **
- **Description:** Grants permission to create an SSL/TLS certificate and install it on a specified instance
- **Resource types (\*required):** [Instance\*](#list_lightsail-resource-Instance)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [StartGUISession](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_StartGUISession.html) **
- **Description:** Grants permission to initiate a graphical user interface (GUI) session used to access an instance's operating system or application
- **Resource types (\*required):** [Instance\*](#list_lightsail-resource-Instance)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [StartInstance](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_StartInstance.html) **
- **Description:** Grants permission to start an instance that is in a stopped state
- **Resource types (\*required):** [Instance\*](#list_lightsail-resource-Instance)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [StartRelationalDatabase](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_StartRelationalDatabase.html) **
- **Description:** Grants permission to start a relational database that is in a stopped state
- **Resource types (\*required):** [RelationalDatabase\*](#list_lightsail-resource-RelationalDatabase)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [StopGUISession](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_StopGUISession.html) **
- **Description:** Grants permission to terminate a graphical user interface (GUI) session used to access an instance's operating system or application
- **Resource types (\*required):** [Instance\*](#list_lightsail-resource-Instance)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [StopInstance](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_StopInstance.html) **
- **Description:** Grants permission to stop an instance that is in a running state
- **Resource types (\*required):** [Instance\*](#list_lightsail-resource-Instance)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [StopRelationalDatabase](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_StopRelationalDatabase.html) **
- **Description:** Grants permission to stop a relational database that is in a running state
- **Resource types (\*required):** [RelationalDatabase\*](#list_lightsail-resource-RelationalDatabase)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [TagResource](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_TagResource.html) **
- **Description:** Grants permission to tag a resource
- **Resource types (\*required):** [Alarm](#list_lightsail-resource-Alarm) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_lightsail-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Resource types (\*required):** [Bucket](#list_lightsail-resource-Bucket) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_lightsail-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Resource types (\*required):** [Certificate](#list_lightsail-resource-Certificate) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_lightsail-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Resource types (\*required):** [ContactMethod](#list_lightsail-resource-ContactMethod) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_lightsail-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Resource types (\*required):** [ContainerService](#list_lightsail-resource-ContainerService) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_lightsail-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Resource types (\*required):** [Disk](#list_lightsail-resource-Disk) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_lightsail-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Resource types (\*required):** [DiskSnapshot](#list_lightsail-resource-DiskSnapshot) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_lightsail-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Resource types (\*required):** [Distribution](#list_lightsail-resource-Distribution) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_lightsail-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Resource types (\*required):** [Domain](#list_lightsail-resource-Domain) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_lightsail-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Resource types (\*required):** [Instance](#list_lightsail-resource-Instance) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_lightsail-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Resource types (\*required):** [InstanceSnapshot](#list_lightsail-resource-InstanceSnapshot) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_lightsail-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Resource types (\*required):** [KeyPair](#list_lightsail-resource-KeyPair) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_lightsail-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Resource types (\*required):** [LoadBalancer](#list_lightsail-resource-LoadBalancer) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_lightsail-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Resource types (\*required):** [RelationalDatabase](#list_lightsail-resource-RelationalDatabase) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_lightsail-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Resource types (\*required):** [RelationalDatabaseSnapshot](#list_lightsail-resource-RelationalDatabaseSnapshot) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_lightsail-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Resource types (\*required):** [StaticIp](#list_lightsail-resource-StaticIp) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_lightsail-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Access level:** Tagging, Write
- ** [TestAlarm](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_TestAlarm.html) **
- **Description:** Grants permission to test an alarm by displaying a banner on the Amazon Lightsail console or if a notification trigger is configured for the specified alarm, by sending a notification to the notification protocol
- **Resource types (\*required):** [Alarm\*](#list_lightsail-resource-Alarm)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [UnpeerVpc](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_UnpeerVpc.html) **
- **Description:** Grants permission to try to unpeer the Amazon Lightsail virtual private cloud (VPC) from the default VPC
- **Resource types (\*required):**
- **Condition keys:**
- **Access level:** Write
- ** [UntagResource](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_UntagResource.html) **
- **Description:** Grants permission to untag a resource
- **Resource types (\*required):** [Alarm](#list_lightsail-resource-Alarm) / **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Resource types (\*required):** [Bucket](#list_lightsail-resource-Bucket) / **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Resource types (\*required):** [Certificate](#list_lightsail-resource-Certificate) / **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Resource types (\*required):** [ContactMethod](#list_lightsail-resource-ContactMethod) / **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Resource types (\*required):** [ContainerService](#list_lightsail-resource-ContainerService) / **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Resource types (\*required):** [Disk](#list_lightsail-resource-Disk) / **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Resource types (\*required):** [DiskSnapshot](#list_lightsail-resource-DiskSnapshot) / **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Resource types (\*required):** [Distribution](#list_lightsail-resource-Distribution) / **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Resource types (\*required):** [Domain](#list_lightsail-resource-Domain) / **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Resource types (\*required):** [Instance](#list_lightsail-resource-Instance) / **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Resource types (\*required):** [InstanceSnapshot](#list_lightsail-resource-InstanceSnapshot) / **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Resource types (\*required):** [KeyPair](#list_lightsail-resource-KeyPair) / **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Resource types (\*required):** [LoadBalancer](#list_lightsail-resource-LoadBalancer) / **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Resource types (\*required):** [RelationalDatabase](#list_lightsail-resource-RelationalDatabase) / **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Resource types (\*required):** [RelationalDatabaseSnapshot](#list_lightsail-resource-RelationalDatabaseSnapshot) / **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Resource types (\*required):** [StaticIp](#list_lightsail-resource-StaticIp) / **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_lightsail-aws_TagKeys)
- **Access level:** Tagging, Write
- ** [UpdateBucket](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_UpdateBucket.html) **
- **Description:** Grants permission to update an existing Amazon Lightsail bucket
- **Resource types (\*required):** [Bucket\*](#list_lightsail-resource-Bucket)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [UpdateBucketBundle](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_UpdateBucketBundle.html) **
- **Description:** Grants permission to update the bundle, or storage plan, of an existing Amazon Lightsail bucket
- **Resource types (\*required):** [Bucket\*](#list_lightsail-resource-Bucket)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [UpdateContainerService](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_UpdateContainerService.html) **
- **Description:** Grants permission to update the configuration of your Amazon Lightsail container service, such as its power, scale, and public domain names
- **Resource types (\*required):** [ContainerService\*](#list_lightsail-resource-ContainerService)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [UpdateDistribution](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_UpdateDistribution.html) **
- **Description:** Grants permission to update an existing Amazon Lightsail content delivery network (CDN) distribution or its configuration
- **Resource types (\*required):** [Distribution\*](#list_lightsail-resource-Distribution)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [UpdateDistributionBundle](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_UpdateDistributionBundle.html) **
- **Description:** Grants permission to update the bundle of your Amazon Lightsail content delivery network (CDN) distribution
- **Resource types (\*required):** [Distribution\*](#list_lightsail-resource-Distribution)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [UpdateDomainEntry](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_UpdateDomainEntry.html) **
- **Description:** Grants permission to update a domain recordset after it is created
- **Resource types (\*required):** [Domain\*](#list_lightsail-resource-Domain)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [UpdateInstanceMetadataOptions](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_UpdateInstanceMetadataOptions.html) **
- **Description:** Grants permission to update metadata options for an instance
- **Resource types (\*required):** [Instance\*](#list_lightsail-resource-Instance)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [UpdateLoadBalancerAttribute](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_DetachInstancesFromLoadBalancer.html) **
- **Description:** Grants permission to update a load balancer attribute, such as the health check path and session stickiness
- **Resource types (\*required):** [LoadBalancer\*](#list_lightsail-resource-LoadBalancer)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [UpdateRelationalDatabase](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_UpdateRelationalDatabase.html) **
- **Description:** Grants permission to update a relational database
- **Resource types (\*required):** [RelationalDatabase\*](#list_lightsail-resource-RelationalDatabase)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
- ** [UpdateRelationalDatabaseParameters](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_UpdateRelationalDatabaseParameters.html) **
- **Description:** Grants permission to update the parameters of a relational database
- **Resource types (\*required):** [RelationalDatabase\*](#list_lightsail-resource-RelationalDatabase)
- **Condition keys:** [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_)
- **Access level:** Write
## Resource types defined by Amazon Lightsail
The following resource types are defined by this service and can be used in the `Resource` element of IAM permission policy statements.
****
| Resource types | ARN | Condition keys |
| --- | --- | --- |
| [Alarm](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_Alarm.html) | arn:${Partition}:lightsail:${Region}:${Account}:Alarm/${Id} | [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_) |
| [Bucket](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_Bucket.html) | arn:${Partition}:lightsail:${Region}:${Account}:Bucket/${Id} | [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_) |
| [Certificate](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_Certificate.html) | arn:${Partition}:lightsail:${Region}:${Account}:Certificate/${Id} | [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_) |
| [CloudFormationStackRecord](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_CloudFormationStackRecord.html) | arn:${Partition}:lightsail:${Region}:${Account}:CloudFormationStackRecord/${Id} | |
| [ContactMethod](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_ContactMethod.html) | arn:${Partition}:lightsail:${Region}:${Account}:ContactMethod/${Id} | [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_) |
| [ContainerService](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_ContainerService.html) | arn:${Partition}:lightsail:${Region}:${Account}:ContainerService/${Id} | [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_) |
| [Disk](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_Disk.html) | arn:${Partition}:lightsail:${Region}:${Account}:Disk/${Id} | [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_) |
| [DiskSnapshot](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_DiskSnapshot.html) | arn:${Partition}:lightsail:${Region}:${Account}:DiskSnapshot/${Id} | [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_) |
| [Distribution](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_LightsailDistribution.html) | arn:${Partition}:lightsail:${Region}:${Account}:Distribution/${Id} | [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_) |
| [Domain](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_Domain.html) | arn:${Partition}:lightsail:${Region}:${Account}:Domain/${Id} | [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_) |
| [ExportSnapshotRecord](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_ExportSnapshotRecord.html) | arn:${Partition}:lightsail:${Region}:${Account}:ExportSnapshotRecord/${Id} | |
| [Instance](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_Instance.html) | arn:${Partition}:lightsail:${Region}:${Account}:Instance/${Id} | [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_) |
| [InstanceSnapshot](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_InstanceSnapshot.html) | arn:${Partition}:lightsail:${Region}:${Account}:InstanceSnapshot/${Id} | [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_) |
| [KeyPair](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_KeyPair.html) | arn:${Partition}:lightsail:${Region}:${Account}:KeyPair/${Id} | [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_) |
| [LoadBalancer](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_LoadBalancer.html) | arn:${Partition}:lightsail:${Region}:${Account}:LoadBalancer/${Id} | [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_) |
| [LoadBalancerTlsCertificate](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_LoadBalancerTlsCertificate.html) | arn:${Partition}:lightsail:${Region}:${Account}:LoadBalancerTlsCertificate/${Id} | |
| [RelationalDatabase](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_RelationalDatabase.html) | arn:${Partition}:lightsail:${Region}:${Account}:RelationalDatabase/${Id} | [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_) |
| [RelationalDatabaseSnapshot](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_RelationalDatabaseSnapshot.html) | arn:${Partition}:lightsail:${Region}:${Account}:RelationalDatabaseSnapshot/${Id} | [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_) |
| [StaticIp](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_StaticIp.html) | arn:${Partition}:lightsail:${Region}:${Account}:StaticIp/${Id} | [aws:ResourceTag/${TagKey}](#list_lightsail-aws_ResourceTag___TagKey_) |
## Condition keys for Amazon Lightsail
Amazon Lightsail defines the following condition keys that can be used in the `Condition` element of an IAM policy.
****
| Condition keys | Description | Type |
| --- | --- | --- |
| [aws:RequestTag/${TagKey}](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag) | Filters access by a tag key and value pair that is allowed in the request | String |
| [aws:ResourceTag/${TagKey}](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag) | Filters access by a tag key and value pair of a resource | String |
| [aws:TagKeys](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys) | Filters access by a list of tag keys that are allowed in the request | ArrayOfString |