Operations Actions Resource types Condition keys

Actions, resources, and condition keys for AWS Elemental MediaPackage V2

AWS Elemental MediaPackage V2 (service prefix: mediapackagev2) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by AWS Elemental MediaPackage V2
Actions defined by AWS Elemental MediaPackage V2
Resource types defined by AWS Elemental MediaPackage V2
Condition keys for AWS Elemental MediaPackage V2

API operations defined by AWS Elemental MediaPackage V2

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Condition key	Possible value(s)	Access level
CancelHarvestJob	mediapackagev2:CancelHarvestJob			Write
CreateChannel	mediapackagev2:CreateChannel			Write
CreateChannel	mediapackagev2:TagResource			Tagging, Write
CreateChannelGroup	mediapackagev2:CreateChannelGroup			Write
CreateChannelGroup	mediapackagev2:TagResource			Tagging, Write
CreateHarvestJob	mediapackagev2:CreateHarvestJob			Write
CreateHarvestJob	mediapackagev2:TagResource			Tagging, Write
CreateOriginEndpoint	mediapackagev2:CreateOriginEndpoint			Write
	mediapackagev2:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	mediapackagev2.amazonaws.com	Write
DeleteChannel	mediapackagev2:DeleteChannel			Write
DeleteChannelGroup	mediapackagev2:DeleteChannelGroup			Write
DeleteChannelPolicy	mediapackagev2:DeleteChannelPolicy			Write
DeleteOriginEndpoint	mediapackagev2:DeleteOriginEndpoint			Write
DeleteOriginEndpointPolicy	mediapackagev2:DeleteOriginEndpointPolicy			Write
GetChannel	mediapackagev2:GetChannel			Read
GetChannelGroup	mediapackagev2:GetChannelGroup			Read
GetChannelPolicy	mediapackagev2:GetChannelPolicy			Read
GetHarvestJob	mediapackagev2:GetHarvestJob			Read
GetOriginEndpoint	mediapackagev2:GetOriginEndpoint			Read
GetOriginEndpointPolicy	mediapackagev2:GetOriginEndpointPolicy			Read
ListChannelGroups	mediapackagev2:ListChannelGroups			List
ListChannels	mediapackagev2:ListChannels			List
ListHarvestJobs	mediapackagev2:ListHarvestJobs			List
ListOriginEndpoints	mediapackagev2:ListOriginEndpoints			List
ListTagsForResource	mediapackagev2:ListTagsForResource			Read
PutChannelPolicy	mediapackagev2:PutChannelPolicy			Write
PutOriginEndpointPolicy	mediapackagev2:PutOriginEndpointPolicy			Write
PutOriginEndpointPolicy	iam:PassRole	iam:PassedToService	mediapackagev2.amazonaws.com	Write
ResetChannelState	mediapackagev2:ResetChannelState			Write
ResetOriginEndpointState	mediapackagev2:ResetOriginEndpointState			Write
TagResource	mediapackagev2:TagResource			Tagging, Write
UntagResource	mediapackagev2:UntagResource			Tagging, Write
UpdateChannel	mediapackagev2:UpdateChannel			Write
UpdateChannelGroup	mediapackagev2:UpdateChannelGroup			Write
UpdateOriginEndpoint	mediapackagev2:UpdateOriginEndpoint			Write
UpdateOriginEndpoint	iam:PassRole	iam:PassedToService	mediapackagev2.amazonaws.com	Write

Actions defined by AWS Elemental MediaPackage V2

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
CancelHarvestJob	Grants permission to cancel a harvest job	Channel*	aws:ResourceTag/${TagKey}	Write
		ChannelGroup*	aws:ResourceTag/${TagKey}
		HarvestJob*	aws:ResourceTag/${TagKey}
		OriginEndpoint*	aws:ResourceTag/${TagKey}
CreateChannel	Grants permission to create a channel in a channel group	Channel*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateChannel	Grants permission to create a channel in a channel group	ChannelGroup*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateChannelGroup	Grants permission to create a channel group	ChannelGroup*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateHarvestJob	Grants permission to create a harvest job	Channel*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
		ChannelGroup*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		HarvestJob*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		OriginEndpoint*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
CreateOriginEndpoint	Grants permission to create an origin endpoint for a channel	Channel*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
		ChannelGroup*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		OriginEndpoint*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
DeleteChannel	Grants permission to delete a channel in a channel group	Channel*	aws:ResourceTag/${TagKey}	Write
DeleteChannel	Grants permission to delete a channel in a channel group	ChannelGroup*	aws:ResourceTag/${TagKey}	Write
DeleteChannelGroup	Grants permission to delete a channel group	ChannelGroup*	aws:ResourceTag/${TagKey}	Write
DeleteChannelPolicy	Grants permission to delete a resource policy from a channel	Channel*	aws:ResourceTag/${TagKey}	Write
		ChannelGroup*	aws:ResourceTag/${TagKey}
		ChannelPolicy*
DeleteOriginEndpoint	Grants permission to delete an origin endpoint of a channel	Channel*	aws:ResourceTag/${TagKey}	Write
		ChannelGroup*	aws:ResourceTag/${TagKey}
		OriginEndpoint*	aws:ResourceTag/${TagKey}
DeleteOriginEndpointPolicy	Grants permission to delete a resource policy from an origin endpoint	Channel*	aws:ResourceTag/${TagKey}	Write
		ChannelGroup*	aws:ResourceTag/${TagKey}
		OriginEndpoint*	aws:ResourceTag/${TagKey}
		OriginEndpointPolicy*
GetChannel	Grants permission to retrieve details of a channel in a channel group	Channel*	aws:ResourceTag/${TagKey}	Read
GetChannel		ChannelGroup*	aws:ResourceTag/${TagKey}	Read
GetChannelGroup	Grants permission to retrieve details of a channel group	ChannelGroup*	aws:ResourceTag/${TagKey}	Read
GetChannelPolicy	Grants permission to retrieve a resource policy for a channel	Channel*	aws:ResourceTag/${TagKey}	Read
		ChannelGroup*	aws:ResourceTag/${TagKey}
		ChannelPolicy*
GetHarvestJob	Grants permission to retrieve details of an harvest job	Channel*	aws:ResourceTag/${TagKey}	Read
		ChannelGroup*	aws:ResourceTag/${TagKey}
		HarvestJob*	aws:ResourceTag/${TagKey}
		OriginEndpoint*	aws:ResourceTag/${TagKey}
GetHeadObject	Grants permission to make GetHeadObject requests to MediaPackage	OriginEndpoint*	aws:ResourceTag/${TagKey}	Read
GetObject	Grants permission to make GetObject requests to MediaPackage	OriginEndpoint*	aws:ResourceTag/${TagKey}	Read
GetOriginEndpoint	Grants permission to retrieve details of an origin endpoint	Channel*	aws:ResourceTag/${TagKey}	Read
		ChannelGroup*	aws:ResourceTag/${TagKey}
		OriginEndpoint*	aws:ResourceTag/${TagKey}
GetOriginEndpointPolicy	Grants permission to retrieve details of a resource policy for an origin endpoint	Channel*	aws:ResourceTag/${TagKey}	Read
		ChannelGroup*	aws:ResourceTag/${TagKey}
		OriginEndpoint*	aws:ResourceTag/${TagKey}
		OriginEndpointPolicy*
HarvestObject	Grants permission to make HarvestObject requests to MediaPackage	OriginEndpoint*	aws:ResourceTag/${TagKey}	Read
ListChannelGroups	Grants permission to list all channel groups for an aws account			List
ListChannels	Grants permission to list all channels in a channel group	ChannelGroup*	aws:ResourceTag/${TagKey}	List
ListHarvestJobs	Grants permission to list all harvest jobs in a channel group, channel, origin endpoint	ChannelGroup*	aws:ResourceTag/${TagKey}	List
ListOriginEndpoints	Grants permission to list all origin endpoints of a channel	Channel*	aws:ResourceTag/${TagKey}	List
ListOriginEndpoints	Grants permission to list all origin endpoints of a channel	ChannelGroup*	aws:ResourceTag/${TagKey}	List
ListTagsForResource	Grants permission to list tags for the specified resource	Channel	aws:ResourceTag/${TagKey}	Read
		ChannelGroup	aws:ResourceTag/${TagKey}
		HarvestJob	aws:ResourceTag/${TagKey}
		OriginEndpoint	aws:ResourceTag/${TagKey}
PutChannelPolicy	Grants permission to attach a resource policy for a channel	Channel*	aws:ResourceTag/${TagKey}	Write
		ChannelGroup*	aws:ResourceTag/${TagKey}
		ChannelPolicy*
PutObject	Grants permission to make PutObject requests to MediaPackage	Channel*	aws:ResourceTag/${TagKey}	Write
PutOriginEndpointPolicy	Grants permission to attach a resource policy to an origin endpoint	Channel*	aws:ResourceTag/${TagKey}	Write
		ChannelGroup*	aws:ResourceTag/${TagKey}
		OriginEndpoint*	aws:ResourceTag/${TagKey}
		OriginEndpointPolicy*
ResetChannelState	Grants permission to reset a channel	Channel*	aws:ResourceTag/${TagKey}	Write
ResetChannelState	Grants permission to reset a channel	ChannelGroup*	aws:ResourceTag/${TagKey}	Write
ResetOriginEndpointState	Grants permission to reset an origin endpoint	Channel*	aws:ResourceTag/${TagKey}	Write
		ChannelGroup*	aws:ResourceTag/${TagKey}
		OriginEndpoint*	aws:ResourceTag/${TagKey}
TagResource	Grants permission to add specified tags to the specified resource	Channel	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		ChannelGroup	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		HarvestJob	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		OriginEndpoint	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
UntagResource	Grants permission to remove the specified tags from the specified resource	Channel	aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		ChannelGroup	aws:ResourceTag/${TagKey} aws:TagKeys
		HarvestJob	aws:ResourceTag/${TagKey} aws:TagKeys
		OriginEndpoint	aws:ResourceTag/${TagKey} aws:TagKeys
UpdateChannel	Grants permission to update a channel in a channel group	Channel*	aws:ResourceTag/${TagKey}	Write
UpdateChannel	Grants permission to update a channel in a channel group	ChannelGroup*	aws:ResourceTag/${TagKey}	Write
UpdateChannelGroup	Grants permission to update a channel group	ChannelGroup*	aws:ResourceTag/${TagKey}	Write
UpdateOriginEndpoint	Grants permission to update an origin endpoint of a channel	Channel*	aws:ResourceTag/${TagKey}	Write
		ChannelGroup*	aws:ResourceTag/${TagKey}
		OriginEndpoint*	aws:ResourceTag/${TagKey}

Resource types defined by AWS Elemental MediaPackage V2

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
Channel	arn:${Partition}:mediapackagev2:${Region}:${Account}:channelGroup/${ChannelGroupName}/channel/${ChannelName}	aws:ResourceTag/${TagKey}
ChannelGroup	arn:${Partition}:mediapackagev2:${Region}:${Account}:channelGroup/${ChannelGroupName}	aws:ResourceTag/${TagKey}
ChannelPolicy	arn:${Partition}:mediapackagev2:${Region}:${Account}:channelGroup/${ChannelGroupName}/channel/${ChannelName}
HarvestJob	arn:${Partition}:mediapackagev2:${Region}:${Account}:channelGroup/${ChannelGroupName}/channel/${ChannelName}/originEndpoint/${OriginEndpointName}/harvestJob/${HarvestJobName}	aws:ResourceTag/${TagKey}
OriginEndpoint	arn:${Partition}:mediapackagev2:${Region}:${Account}:channelGroup/${ChannelGroupName}/channel/${ChannelName}/originEndpoint/${OriginEndpointName}	aws:ResourceTag/${TagKey}
OriginEndpointPolicy	arn:${Partition}:mediapackagev2:${Region}:${Account}:channelGroup/${ChannelGroupName}/channel/${ChannelName}/originEndpoint/${OriginEndpointName}

Condition keys for AWS Elemental MediaPackage V2

AWS Elemental MediaPackage V2 defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys	Description	Type
aws:RequestTag/${TagKey}	Filters access by tags that are passed in the request	String
aws:ResourceTag/${TagKey}	Filters access by tags associated with the resource	String
aws:TagKeys	Filters access by tag keys that are passed in the request	ArrayOfString

Warning Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Document Conventions

AWS Elemental MediaPackage (mediapackage)

AWS Elemental MediaPackage VOD (mediapackage-vod)