Operations Actions Resource types Condition keys

Actions, resources, and condition keys for AWS Elemental MediaTailor

AWS Elemental MediaTailor (service prefix: mediatailor) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by AWS Elemental MediaTailor
Actions defined by AWS Elemental MediaTailor
Resource types defined by AWS Elemental MediaTailor
Condition keys for AWS Elemental MediaTailor

API operations defined by AWS Elemental MediaTailor

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Access level
ConfigureLogsForChannel	mediatailor:ConfigureLogsForChannel	Write
ConfigureLogsForPlaybackConfiguration	mediatailor:ConfigureLogsForPlaybackConfiguration	Write
CreateChannel	mediatailor:CreateChannel	Write
CreateChannel	mediatailor:TagResource	Tagging, Write
CreateLiveSource	mediatailor:CreateLiveSource	Write
CreateLiveSource	mediatailor:TagResource	Tagging, Write
CreatePrefetchSchedule	mediatailor:CreatePrefetchSchedule	Write
CreatePrefetchSchedule	mediatailor:TagResource	Tagging, Write
CreateProgram	mediatailor:CreateProgram	Write
CreateProgram	mediatailor:TagResource	Tagging, Write
CreateSourceLocation	mediatailor:CreateSourceLocation	Write
CreateSourceLocation	mediatailor:TagResource	Tagging, Write
CreateVodSource	mediatailor:CreateVodSource	Write
CreateVodSource	mediatailor:TagResource	Tagging, Write
DeleteChannel	mediatailor:DeleteChannel	Write
DeleteChannelPolicy	mediatailor:DeleteChannelPolicy	Permissions management, Write
DeleteLiveSource	mediatailor:DeleteLiveSource	Write
DeletePlaybackConfiguration	mediatailor:DeletePlaybackConfiguration	Write
DeletePrefetchSchedule	mediatailor:DeletePrefetchSchedule	Write
DeleteProgram	mediatailor:DeleteProgram	Write
DeleteSourceLocation	mediatailor:DeleteSourceLocation	Write
DeleteVodSource	mediatailor:DeleteVodSource	Write
DescribeChannel	mediatailor:DescribeChannel	Read
DescribeLiveSource	mediatailor:DescribeLiveSource	Read
DescribeProgram	mediatailor:DescribeProgram	Read
DescribeSourceLocation	mediatailor:DescribeSourceLocation	Read
DescribeVodSource	mediatailor:DescribeVodSource	Read
GetChannelPolicy	mediatailor:GetChannelPolicy	Read
GetChannelSchedule	mediatailor:GetChannelSchedule	Read
GetPlaybackConfiguration	mediatailor:GetPlaybackConfiguration	Read
GetPrefetchSchedule	mediatailor:GetPrefetchSchedule	Read
ListAlerts	mediatailor:ListAlerts	Read
ListChannels	mediatailor:ListChannels	Read
ListLiveSources	mediatailor:ListLiveSources	Read
ListPlaybackConfigurations	mediatailor:ListPlaybackConfigurations	List
ListPrefetchSchedules	mediatailor:ListPrefetchSchedules	List
ListSourceLocations	mediatailor:ListSourceLocations	Read
ListTagsForResource	mediatailor:ListTagsForResource	Read
ListVodSources	mediatailor:ListVodSources	Read
PutChannelPolicy	mediatailor:PutChannelPolicy	Permissions management, Write
PutFunction	mediatailor:TagResource	Tagging, Write
PutPlaybackConfiguration	mediatailor:PutPlaybackConfiguration	Write
PutPlaybackConfiguration	mediatailor:TagResource	Tagging, Write
StartChannel	mediatailor:StartChannel	Write
StopChannel	mediatailor:StopChannel	Write
TagResource	mediatailor:TagResource	Tagging, Write
UntagResource	mediatailor:UntagResource	Tagging, Write
UpdateChannel	mediatailor:UpdateChannel	Write
UpdateLiveSource	mediatailor:UpdateLiveSource	Write
UpdateProgram	mediatailor:UpdateProgram	Write
UpdateSourceLocation	mediatailor:UpdateSourceLocation	Write
UpdateVodSource	mediatailor:UpdateVodSource	Write

Actions defined by AWS Elemental MediaTailor

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
ConfigureLogsForChannel	Grants permission to configure logs on the channel with the specified channel name	channel*	aws:ResourceTag/${TagKey}	Write
ConfigureLogsForPlaybackConfiguration	Grants permission to configure logs for a playback configuration	playbackConfiguration*	aws:ResourceTag/${TagKey}	Write
CreateChannel	Grants permission to create a new channel		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateLiveSource	Grants permission to create a new live source on the source location with the specified source location name		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreatePrefetchSchedule	Grants permission to create a prefetch schedule for the playback configuration with the specified playback configuration name	playbackConfiguration*	aws:ResourceTag/${TagKey}	Write
CreateProgram	Grants permission to create a new program on the channel with the specified channel name			Write
CreateSourceLocation	Grants permission to create a new source location		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateVodSource	Grants permission to create a new VOD source on the source location with the specified source location name		aws:RequestTag/${TagKey} aws:TagKeys	Write
DeleteChannel	Grants permission to delete the channel with the specified channel name	channel*	aws:ResourceTag/${TagKey}	Write
DeleteChannelPolicy	Grants permission to delete the IAM policy on the channel with the specified channel name	channel*	aws:ResourceTag/${TagKey}	Permissions management, Write
DeleteLiveSource	Grants permission to delete the live source with the specified live source name on the source location with the specified source location name	liveSource*	aws:ResourceTag/${TagKey}	Write
DeletePlaybackConfiguration	Grants permission to delete the specified playback configuration	playbackConfiguration*	aws:ResourceTag/${TagKey}	Write
DeletePrefetchSchedule	Grants permission to delete a prefetch schedule for a playback configuration with the specified prefetch schedule name	playbackConfiguration*	aws:ResourceTag/${TagKey}	Write
DeletePrefetchSchedule		prefetchSchedule*		Write
DeleteProgram	Grants permission to delete the program with the specified program name on the channel with the specified channel name	program*		Write
DeleteSourceLocation	Grants permission to delete the source location with the specified source location name	sourceLocation*	aws:ResourceTag/${TagKey}	Write
DeleteVodSource	Grants permission to delete the VOD source with the specified VOD source name on the source location with the specified source location name	vodSource*	aws:ResourceTag/${TagKey}	Write
DescribeChannel	Grants permission to retrieve the channel with the specified channel name	channel*	aws:ResourceTag/${TagKey}	Read
DescribeLiveSource	Grants permission to retrieve the live source with the specified live source name on the source location with the specified source location name	liveSource*	aws:ResourceTag/${TagKey}	Read
DescribeProgram	Grants permission to retrieve the program with the specified program name on the channel with the specified channel name	program*		Read
DescribeSourceLocation	Grants permission to retrieve the source location with the specified source location name	sourceLocation*	aws:ResourceTag/${TagKey}	Read
DescribeVodSource	Grants permission to retrieve the VOD source with the specified VOD source name on the source location with the specified source location name	vodSource*	aws:ResourceTag/${TagKey}	Read
GetChannelPolicy	Grants permission to read the IAM policy on the channel with the specified channel name	channel*	aws:ResourceTag/${TagKey}	Read
GetChannelSchedule	Grants permission to retrieve the schedule of programs on the channel with the specified channel name	channel*	aws:ResourceTag/${TagKey}	Read
GetPlaybackConfiguration	Grants permission to retrieve the configuration for the specified name	playbackConfiguration*	aws:ResourceTag/${TagKey}	Read
GetPrefetchSchedule	Grants permission to retrieve prefetch schedule for a playback configuration with the specified prefetch schedule name	playbackConfiguration*	aws:ResourceTag/${TagKey}	Read
GetPrefetchSchedule		prefetchSchedule*		Read
ListAlerts	Grants permission to retrieve the list of alerts on a resource			Read
ListChannels	Grants permission to retrieve the list of existing channels			Read
ListLiveSources	Grants permission to retrieve the list of existing live sources on the source location with the specified source location name			Read
ListPlaybackConfigurations	Grants permission to retrieve the list of available configurations			List
ListPrefetchSchedules	Grants permission to retrieve the list of prefetch schedules for a playback configuration	playbackConfiguration*	aws:ResourceTag/${TagKey}	List
ListSourceLocations	Grants permission to retrieve the list of existing source locations			Read
ListTagsForResource	Grants permission to list the tags assigned to the specified playback configuration resource	channel	aws:ResourceTag/${TagKey}	Read
		liveSource	aws:ResourceTag/${TagKey}
		playbackConfiguration	aws:ResourceTag/${TagKey}
		sourceLocation	aws:ResourceTag/${TagKey}
		vodSource	aws:ResourceTag/${TagKey}
ListVodSources	Grants permission to retrieve the list of existing VOD sources on the source location with the specified source location name			Read
PutChannelPolicy	Grants permission to set the IAM policy on the channel with the specified channel name	channel*	aws:ResourceTag/${TagKey}	Permissions management, Write
PutPlaybackConfiguration	Grants permission to add a new configuration		aws:RequestTag/${TagKey} aws:TagKeys	Write
StartChannel	Grants permission to start the channel with the specified channel name	channel*	aws:ResourceTag/${TagKey}	Write
StopChannel	Grants permission to stop the channel with the specified channel name	channel*	aws:ResourceTag/${TagKey}	Write
TagResource	Grants permission to add tags to the specified playback configuration resource	channel	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		liveSource	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		playbackConfiguration	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		sourceLocation	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		vodSource	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
UntagResource	Grants permission to remove tags from the specified playback configuration resource	channel	aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		liveSource	aws:ResourceTag/${TagKey} aws:TagKeys
		playbackConfiguration	aws:ResourceTag/${TagKey} aws:TagKeys
		sourceLocation	aws:ResourceTag/${TagKey} aws:TagKeys
		vodSource	aws:ResourceTag/${TagKey} aws:TagKeys
UpdateChannel	Grants permission to update the channel with the specified channel name	channel*	aws:ResourceTag/${TagKey}	Write
UpdateLiveSource	Grants permission to update the live source with the specified live source name on the source location with the specified source location name	liveSource*	aws:ResourceTag/${TagKey}	Write
UpdateProgram	Grants permission to update the program with the specified program name on the channel with the specified channel name	program*		Write
UpdateSourceLocation	Grants permission to update the source location with the specified source location name	sourceLocation*	aws:ResourceTag/${TagKey}	Write
UpdateVodSource	Grants permission to update the VOD source with the specified VOD source name on the source location with the specified source location name	vodSource*	aws:ResourceTag/${TagKey}	Write

Resource types defined by AWS Elemental MediaTailor

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
channel	arn:${Partition}:mediatailor:${Region}:${Account}:channel/${ChannelName}	aws:ResourceTag/${TagKey}
liveSource	arn:${Partition}:mediatailor:${Region}:${Account}:liveSource/${SourceLocationName}/${LiveSourceName}	aws:ResourceTag/${TagKey}
playbackConfiguration	arn:${Partition}:mediatailor:${Region}:${Account}:playbackConfiguration/${ResourceId}	aws:ResourceTag/${TagKey}
prefetchSchedule	arn:${Partition}:mediatailor:${Region}:${Account}:prefetchSchedule/${ResourceId}
program	arn:${Partition}:mediatailor:${Region}:${Account}:program/${ChannelName}/${ProgramName}
sourceLocation	arn:${Partition}:mediatailor:${Region}:${Account}:sourceLocation/${SourceLocationName}	aws:ResourceTag/${TagKey}
vodSource	arn:${Partition}:mediatailor:${Region}:${Account}:vodSource/${SourceLocationName}/${VodSourceName}	aws:ResourceTag/${TagKey}

Condition keys for AWS Elemental MediaTailor

AWS Elemental MediaTailor defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys	Description	Type
aws:RequestTag/${TagKey}	Filters access by the presence of tag key-value pairs in the request	String
aws:ResourceTag/${TagKey}	Filters access by tag key-value pairs attached to the resource	String
aws:TagKeys	Filters access by the presence of tag keys in the request	ArrayOfString

Warning Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Document Conventions

AWS Elemental MediaStore (mediastore)

AWS Elemental Support Cases (elemental-support-cases)