Operations Actions Resource types Condition keys

Actions, resources, and condition keys for Amazon Machine Learning

Amazon Machine Learning (service prefix: machinelearning) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by Amazon Machine Learning
Actions defined by Amazon Machine Learning
Resource types defined by Amazon Machine Learning
Condition keys for Amazon Machine Learning

API operations defined by Amazon Machine Learning

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Access level
AddTags	machinelearning:AddTags	Tagging, Write
CreateBatchPrediction	machinelearning:CreateBatchPrediction	Write
CreateDataSourceFromS3	machinelearning:CreateDataSourceFromS3	Write
CreateEvaluation	machinelearning:CreateEvaluation	Write
CreateMLModel	machinelearning:CreateMLModel	Write
CreateRealtimeEndpoint	machinelearning:CreateRealtimeEndpoint	Write
DeleteBatchPrediction	machinelearning:DeleteBatchPrediction	Write
DeleteDataSource	machinelearning:DeleteDataSource	Write
DeleteEvaluation	machinelearning:DeleteEvaluation	Write
DeleteMLModel	machinelearning:DeleteMLModel	Write
DeleteRealtimeEndpoint	machinelearning:DeleteRealtimeEndpoint	Write
DescribeBatchPredictions	machinelearning:DescribeBatchPredictions	List
DescribeDataSources	machinelearning:DescribeDataSources	List
DescribeEvaluations	machinelearning:DescribeEvaluations	List
DescribeMLModels	machinelearning:DescribeMLModels	List
DescribeTags	machinelearning:DescribeTags	List
GetBatchPrediction	machinelearning:GetBatchPrediction	Read
GetDataSource	machinelearning:GetDataSource	Read
GetEvaluation	machinelearning:GetEvaluation	Read
GetMLModel	machinelearning:GetMLModel	Read
Predict	machinelearning:Predict	Write

Actions defined by Amazon Machine Learning

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Access level
AddTags	Adds one or more tags to an object, up to a limit of 10. Each tag consists of a key and an optional value	batchprediction	Tagging, Write
		datasource
		evaluation
		mlmodel
CreateBatchPrediction	Generates predictions for a group of observations	batchprediction*	Write
		datasource*
		mlmodel*
CreateDataSourceFromRDS	Creates a DataSource object from an Amazon RDS	datasource*	Write
CreateDataSourceFromRedshift	Creates a DataSource from a database hosted on an Amazon Redshift cluster	datasource*	Write
CreateDataSourceFromS3	Creates a DataSource object from S3	datasource*	Write
CreateEvaluation	Creates a new Evaluation of an MLModel	datasource*	Write
		evaluation*
		mlmodel*
CreateMLModel	Creates a new MLModel	datasource*	Write
CreateMLModel	Creates a new MLModel	mlmodel*	Write
CreateRealtimeEndpoint	Creates a real-time endpoint for the MLModel	mlmodel*	Write
DeleteBatchPrediction	Assigns the DELETED status to a BatchPrediction, rendering it unusable	batchprediction*	Write
DeleteDataSource	Assigns the DELETED status to a DataSource, rendering it unusable	datasource*	Write
DeleteEvaluation	Assigns the DELETED status to an Evaluation, rendering it unusable	evaluation*	Write
DeleteMLModel	Assigns the DELETED status to an MLModel, rendering it unusable	mlmodel*	Write
DeleteRealtimeEndpoint	Deletes a real time endpoint of an MLModel	mlmodel*	Write
DeleteTags	Deletes the specified tags associated with an ML object. After this operation is complete, you can't recover deleted tags	batchprediction	Tagging, Write
		datasource
		evaluation
		mlmodel
DescribeBatchPredictions	Returns a list of BatchPrediction operations that match the search criteria in the request		List
DescribeDataSources	Returns a list of DataSource that match the search criteria in the request		List
DescribeEvaluations	Returns a list of DescribeEvaluations that match the search criteria in the request		List
DescribeMLModels	Returns a list of MLModel that match the search criteria in the request		List
DescribeTags	Describes one or more of the tags for your Amazon ML object	batchprediction	List
		datasource
		evaluation
		mlmodel
GetBatchPrediction	Returns a BatchPrediction that includes detailed metadata, status, and data file information	batchprediction*	Read
GetDataSource	Returns a DataSource that includes metadata and data file information, as well as the current status of the DataSource	datasource*	Read
GetEvaluation	Returns an Evaluation that includes metadata as well as the current status of the Evaluation	datasource*	Read
GetMLModel	Returns an MLModel that includes detailed metadata, and data source information as well as the current status of the MLModel	mlmodel*	Read
Predict	Generates a prediction for the observation using the specified ML Model	mlmodel*	Write
UpdateBatchPrediction	Updates the BatchPredictionName of a BatchPrediction	batchprediction*	Write
UpdateDataSource	Updates the DataSourceName of a DataSource	datasource*	Write
UpdateEvaluation	Updates the EvaluationName of an Evaluation	evaluation*	Write
UpdateMLModel	Updates the MLModelName and the ScoreThreshold of an MLModel	mlmodel*	Write

Resource types defined by Amazon Machine Learning

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
batchprediction	arn:${Partition}:machinelearning:${Region}:${Account}:batchprediction/${BatchPredictionId}
datasource	arn:${Partition}:machinelearning:${Region}:${Account}:datasource/${DatasourceId}
evaluation	arn:${Partition}:machinelearning:${Region}:${Account}:evaluation/${EvaluationId}
mlmodel	arn:${Partition}:machinelearning:${Region}:${Account}:mlmodel/${MlModelId}

Condition keys for Amazon Machine Learning

Amazon Machine Learning has no service-specific condition keys that can be used in the Condition element of policy statements.

Warning Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Document Conventions

Amazon Lookout for Vision (lookoutvision)

Amazon Macie (macie2)