View a markdown version of this page

Actions, resources, and condition keys for AWS Migration Hub Strategy Recommendations - Service Authorization Reference

Actions, resources, and condition keys for AWS Migration Hub Strategy Recommendations

AWS Migration Hub Strategy Recommendations (service prefix: migrationhub-strategy) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

API operations defined by AWS Migration Hub Strategy Recommendations

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation IAM action Condition key Possible value(s) Access level

GetApplicationComponentDetails

migrationhub-strategy:GetApplicationComponentDetails

Read

GetApplicationComponentStrategies

migrationhub-strategy:GetApplicationComponentStrategies

Read

GetAssessment

migrationhub-strategy:GetAssessment

Read

GetImportFileTask

migrationhub-strategy:GetImportFileTask

Read

GetLatestAssessmentId

migrationhub-strategy:GetLatestAssessmentId

Read

GetPortfolioPreferences

migrationhub-strategy:GetPortfolioPreferences

Read

GetPortfolioSummary

migrationhub-strategy:GetPortfolioSummary

Read

GetRecommendationReportDetails

migrationhub-strategy:GetRecommendationReportDetails

Read

GetServerDetails

migrationhub-strategy:GetServerDetails

Read

GetServerStrategies

migrationhub-strategy:GetServerStrategies

Read

ListAnalyzableServers

migrationhub-strategy:ListAnalyzableServers

List

ListApplicationComponents

migrationhub-strategy:ListApplicationComponents

List

ListCollectors

migrationhub-strategy:ListCollectors

List

ListImportFileTask

migrationhub-strategy:ListImportFileTask

List

ListServers

migrationhub-strategy:ListServers

List

PutPortfolioPreferences

migrationhub-strategy:PutPortfolioPreferences

Write

StartAssessment

migrationhub-strategy:StartAssessment

Write

StartImportFileTask

migrationhub-strategy:StartImportFileTask

Write

StartRecommendationReportGeneration

migrationhub-strategy:StartRecommendationReportGeneration

Write

StopAssessment

migrationhub-strategy:StopAssessment

Write

UpdateApplicationComponentConfig

migrationhub-strategy:UpdateApplicationComponentConfig

Write

UpdateServerConfig

migrationhub-strategy:UpdateServerConfig

Write

Actions defined by AWS Migration Hub Strategy Recommendations

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions Description Resource types (*required) Condition keys Access level

GetAntiPattern

Grants permission to get details of each anti pattern that collector should look at in a customer's environment

Read

GetApplicationComponentDetails

Grants permission to get details of an application

Read

GetApplicationComponentStrategies

Grants permission to get a list of all recommended strategies and tools for an application running in a server

Read

GetAssessment

Grants permission to retrieve status of an on-going assessment

Read

GetImportFileTask

Grants permission to get details of a specific import task

Read

GetLatestAssessmentId

Grants permission to retrieve the latest assessment id

Read

GetMessage

Grants permission to the collector to receive information from the service

Read

GetPortfolioPreferences

Grants permission to retrieve customer migration/Modernization preferences

Read

GetPortfolioSummary

Grants permission to retrieve overall summary (number-of servers to rehost etc as well as overall number of anti patterns)

Read

GetRecommendationReportDetails

Grants permission to retrieve detailed information about a recommendation report

Read

GetServerDetails

Grants permission to get info about a specific server

Read

GetServerStrategies

Grants permission to get recommended strategies and tools for a specific server

Read

ListAnalyzableServers

Grants permission to get a list of all analyzable servers in a customer's vcenter environment

List

ListAntiPatterns

Grants permission to get a list of all anti patterns that collector should look for in a customer's environment

List

ListApplicationComponents

Grants permission to get a list of all applications running on servers on customer's servers

List

ListCollectors

Grants permission to get a list of all collectors installed by the customer

List

ListImportFileTask

Grants permission to get list of all imports performed by the customer

List

ListJarArtifacts

Grants permission to get a list of binaries that collector should assess

List

ListServers

Grants permission to get a list of all servers in a customer's environment

List

PutLogData

Grants permission to the collector to send logs to the service

Write

PutMetricData

Grants permission to the collector to send metrics to the service

Write

PutPortfolioPreferences

Grants permission to save customer's Migration/Modernization preferences

Write

RegisterCollector

Grants permission to register the collector to receive an ID and to start receiving messages from the service

Write

SendMessage

Grants permission to the collector to send information to the service

Write

StartAssessment

Grants permission to start assessment in a customer's environment (collect data from all servers and provide recommendations)

Write

StartImportFileTask

Grants permission to start importing data from a file provided by customer

Write

StartRecommendationReportGeneration

Grants permission to start generating a recommendation report

Write

StopAssessment

Grants permission to stop an on-going assessment

Write

UpdateApplicationComponentConfig

Grants permission to update details for an application

Write

UpdateCollectorConfiguration

Grants permission to the collector to send configuration information to the service

Write

UpdateServerConfig

Grants permission to update info on a server along with the recommended strategy

Write

Resource types defined by AWS Migration Hub Strategy Recommendations

AWS Migration Hub Strategy Recommendations does not support specifying a resource ARN in the Resource element of an IAM policy statement.

Condition keys for AWS Migration Hub Strategy Recommendations

AWS Migration Hub Strategy Recommendations has no service-specific condition keys that can be used in the Condition element of policy statements.