Operations Actions Resource types Condition keys

Actions, resources, and condition keys for AWS End User Messaging SMS and Voice V2

AWS End User Messaging SMS and Voice V2 (service prefix: sms-voice) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by AWS End User Messaging SMS and Voice V2
Actions defined by AWS End User Messaging SMS and Voice V2
Resource types defined by AWS End User Messaging SMS and Voice V2
Condition keys for AWS End User Messaging SMS and Voice V2

API operations defined by AWS End User Messaging SMS and Voice V2

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Condition key	Possible value(s)	Access level
AssociateOriginationIdentity	sms-voice:AssociateOriginationIdentity			Write
AssociateProtectConfiguration	sms-voice:AssociateProtectConfiguration			Write
CreateConfigurationSet	sms-voice:CreateConfigurationSet			Write
CreateConfigurationSet	sms-voice:TagResource			Tagging, Write
CreateEventDestination	sms-voice:CreateEventDestination			Write
CreateEventDestination	iam:PassRole	iam:PassedToService	sms-voice.amazonaws.com	Write
CreateNotifyConfiguration	sms-voice:TagResource			Tagging, Write
CreateOptOutList	sms-voice:CreateOptOutList			Write
CreateOptOutList	sms-voice:TagResource			Tagging, Write
CreatePool	sms-voice:CreatePool			Write
CreatePool	sms-voice:TagResource			Tagging, Write
CreateProtectConfiguration	sms-voice:CreateProtectConfiguration			Write
CreateProtectConfiguration	sms-voice:TagResource			Tagging, Write
CreateRcsAgent	sms-voice:TagResource			Tagging, Write
CreateRegistration	sms-voice:CreateRegistration			Write
CreateRegistration	sms-voice:TagResource			Tagging, Write
CreateRegistrationAssociation	sms-voice:CreateRegistrationAssociation			Write
CreateRegistrationAttachment	sms-voice:CreateRegistrationAttachment			Write
CreateRegistrationAttachment	sms-voice:TagResource			Tagging, Write
CreateRegistrationVersion	sms-voice:CreateRegistrationVersion			Write
CreateVerifiedDestinationNumber	sms-voice:CreateVerifiedDestinationNumber			Write
CreateVerifiedDestinationNumber	sms-voice:TagResource			Tagging, Write
DeleteAccountDefaultProtectConfiguration	sms-voice:DeleteAccountDefaultProtectConfiguration			Write
DeleteConfigurationSet	sms-voice:DeleteConfigurationSet			Write
DeleteDefaultMessageType	sms-voice:DeleteDefaultMessageType			Write
DeleteDefaultSenderId	sms-voice:DeleteDefaultSenderId			Write
DeleteEventDestination	sms-voice:DeleteEventDestination			Write
DeleteKeyword	sms-voice:DeleteKeyword			Write
DeleteMediaMessageSpendLimitOverride	sms-voice:DeleteMediaMessageSpendLimitOverride			Write
DeleteOptOutList	sms-voice:DeleteOptOutList			Write
DeleteOptedOutNumber	sms-voice:DeleteOptedOutNumber			Write
DeletePool	sms-voice:DeletePool			Write
DeleteProtectConfiguration	sms-voice:DeleteProtectConfiguration			Write
DeleteProtectConfigurationRuleSetNumberOverride	sms-voice:DeleteProtectConfigurationRuleSetNumberOverride			Write
DeleteRegistration	sms-voice:DeleteRegistration			Write
DeleteRegistrationAttachment	sms-voice:DeleteRegistrationAttachment			Write
DeleteRegistrationFieldValue	sms-voice:DeleteRegistrationFieldValue			Write
DeleteResourcePolicy	sms-voice:DeleteResourcePolicy			Permissions management, Write
DeleteTextMessageSpendLimitOverride	sms-voice:DeleteTextMessageSpendLimitOverride			Write
DeleteVerifiedDestinationNumber	sms-voice:DeleteVerifiedDestinationNumber			Write
DeleteVoiceMessageSpendLimitOverride	sms-voice:DeleteVoiceMessageSpendLimitOverride			Write
DescribeAccountAttributes	sms-voice:DescribeAccountAttributes			Read
DescribeAccountLimits	sms-voice:DescribeAccountLimits			Read
DescribeConfigurationSets	sms-voice:DescribeConfigurationSets			Read
DescribeKeywords	sms-voice:DescribeKeywords			Read
DescribeOptOutLists	sms-voice:DescribeOptOutLists			Read
DescribeOptedOutNumbers	sms-voice:DescribeOptedOutNumbers			Read
DescribePhoneNumbers	sms-voice:DescribePhoneNumbers			Read
DescribePools	sms-voice:DescribePools			Read
DescribeProtectConfigurations	sms-voice:DescribeProtectConfigurations			Read
DescribeRegistrationAttachments	sms-voice:DescribeRegistrationAttachments			Read
DescribeRegistrationFieldDefinitions	sms-voice:DescribeRegistrationFieldDefinitions			Read
DescribeRegistrationFieldValues	sms-voice:DescribeRegistrationFieldValues			Read
DescribeRegistrationSectionDefinitions	sms-voice:DescribeRegistrationSectionDefinitions			Read
DescribeRegistrationTypeDefinitions	sms-voice:DescribeRegistrationTypeDefinitions			Read
DescribeRegistrationVersions	sms-voice:DescribeRegistrationVersions			Read
DescribeRegistrations	sms-voice:DescribeRegistrations			Read
DescribeSenderIds	sms-voice:DescribeSenderIds			Read
DescribeSpendLimits	sms-voice:DescribeSpendLimits			Read
DescribeVerifiedDestinationNumbers	sms-voice:DescribeVerifiedDestinationNumbers			Read
DisassociateOriginationIdentity	sms-voice:DisassociateOriginationIdentity			Write
DisassociateProtectConfiguration	sms-voice:DisassociateProtectConfiguration			Write
DiscardRegistrationVersion	sms-voice:DiscardRegistrationVersion			Write
GetProtectConfigurationCountryRuleSet	sms-voice:GetProtectConfigurationCountryRuleSet			Read
GetResourcePolicy	sms-voice:GetResourcePolicy			Read
ListPoolOriginationIdentities	sms-voice:ListPoolOriginationIdentities			Read
ListProtectConfigurationRuleSetNumberOverrides	sms-voice:ListProtectConfigurationRuleSetNumberOverrides			Read
ListRegistrationAssociations	sms-voice:ListRegistrationAssociations			Read
ListTagsForResource	sms-voice:ListTagsForResource			Read
PutKeyword	sms-voice:PutKeyword			Write
PutMessageFeedback	sms-voice:PutMessageFeedback			Write
PutOptedOutNumber	sms-voice:PutOptedOutNumber			Write
PutProtectConfigurationRuleSetNumberOverride	sms-voice:PutProtectConfigurationRuleSetNumberOverride			Write
PutRegistrationFieldValue	sms-voice:PutRegistrationFieldValue			Write
PutResourcePolicy	sms-voice:PutResourcePolicy			Permissions management, Write
ReleasePhoneNumber	sms-voice:ReleasePhoneNumber			Write
ReleaseSenderId	sms-voice:ReleaseSenderId			Write
RequestPhoneNumber	sms-voice:AssociateOriginationIdentity			Write
	sms-voice:RequestPhoneNumber			Write
	sms-voice:TagResource			Tagging, Write
RequestSenderId	sms-voice:RequestSenderId			Write
RequestSenderId	sms-voice:TagResource			Tagging, Write
SendDestinationNumberVerificationCode	sms-voice:SendDestinationNumberVerificationCode			Write
	sms-voice:SendTextMessage			Write
	sms-voice:SendVoiceMessage			Write
SendMediaMessage	sms-voice:SendMediaMessage			Write
SendTextMessage	sms-voice:SendTextMessage			Write
SendVoiceMessage	sms-voice:SendVoiceMessage			Write
SetAccountDefaultProtectConfiguration	sms-voice:SetAccountDefaultProtectConfiguration			Write
SetDefaultMessageFeedbackEnabled	sms-voice:SetDefaultMessageFeedbackEnabled			Write
SetDefaultMessageType	sms-voice:SetDefaultMessageType			Write
SetDefaultSenderId	sms-voice:SetDefaultSenderId			Write
SetMediaMessageSpendLimitOverride	sms-voice:SetMediaMessageSpendLimitOverride			Write
SetTextMessageSpendLimitOverride	sms-voice:SetTextMessageSpendLimitOverride			Write
SetVoiceMessageSpendLimitOverride	sms-voice:SetVoiceMessageSpendLimitOverride			Write
SubmitRegistrationVersion	sms-voice:SubmitRegistrationVersion			Write
TagResource	sms-voice:TagResource			Tagging, Write
UntagResource	sms-voice:UntagResource			Tagging, Write
UpdateEventDestination	sms-voice:UpdateEventDestination			Write
UpdateEventDestination	iam:PassRole	iam:PassedToService	sms-voice.amazonaws.com	Write
UpdatePhoneNumber	sms-voice:UpdatePhoneNumber			Write
UpdatePhoneNumber	iam:PassRole	iam:PassedToService	sms-voice.amazonaws.com	Write
UpdatePool	sms-voice:UpdatePool			Write
UpdatePool	iam:PassRole	iam:PassedToService	sms-voice.amazonaws.com	Write
UpdateProtectConfiguration	sms-voice:UpdateProtectConfiguration			Write
UpdateProtectConfigurationCountryRuleSet	sms-voice:UpdateProtectConfigurationCountryRuleSet			Write
UpdateRcsAgent	iam:PassRole	iam:PassedToService	sms-voice.amazonaws.com	Write
UpdateSenderId	sms-voice:UpdateSenderId			Write
VerifyDestinationNumber	sms-voice:VerifyDestinationNumber			Write

Actions defined by AWS End User Messaging SMS and Voice V2

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
AssociateOriginationIdentity	Grants permission to associate an origination phone number or sender ID to a pool	PhoneNumber	aws:ResourceTag/${TagKey}	Write
		Pool*	aws:ResourceTag/${TagKey}
		SenderId	aws:ResourceTag/${TagKey}
AssociateProtectConfiguration	Grants permission to associate a protect configuration to a configuration set	ConfigurationSet*	aws:ResourceTag/${TagKey}	Write
AssociateProtectConfiguration		ProtectConfiguration*	aws:ResourceTag/${TagKey}	Write
CreateConfigurationSet	Grants permission to create a configuration set		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateEventDestination	Grants permission to create an event destination within a configuration set	ConfigurationSet*	aws:ResourceTag/${TagKey}	Write
CreateOptOutList	Grants permission to create an opt-out list		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreatePool	Grants permission to create a pool	PhoneNumber	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreatePool	Grants permission to create a pool	SenderId	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateProtectConfiguration	Grants permission to create a protect configuration		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateRegistration	Grants permission to create a registration		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateRegistrationAssociation	Grants permission to associate a registration with a phone number or another registration	PhoneNumber	aws:ResourceTag/${TagKey}	Write
CreateRegistrationAssociation		Registration*	aws:ResourceTag/${TagKey}	Write
CreateRegistrationAttachment	Grants permission to create a registration attachment		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateRegistrationVersion	Grants permission to create a registration version	Registration*	aws:ResourceTag/${TagKey}	Write
CreateVerifiedDestinationNumber	Grants permission to create a verified destination number		aws:RequestTag/${TagKey} aws:TagKeys	Write
DeleteAccountDefaultProtectConfiguration	Grants permission to delete the account default protect configuration			Write
DeleteConfigurationSet	Grants permission to delete a configuration set	ConfigurationSet*	aws:ResourceTag/${TagKey}	Write
DeleteDefaultMessageType	Grants permission to delete the default message type for a configuration set	ConfigurationSet*	aws:ResourceTag/${TagKey}	Write
DeleteDefaultSenderId	Grants permission to delete the default sender ID for a configuration set	ConfigurationSet*	aws:ResourceTag/${TagKey}	Write
DeleteEventDestination	Grants permission to delete an event destination within a configuration set	ConfigurationSet*	aws:ResourceTag/${TagKey}	Write
DeleteKeyword	Grants permission to delete a keyword for a pool or origination phone number	PhoneNumber	aws:ResourceTag/${TagKey}	Write
DeleteKeyword		Pool	aws:ResourceTag/${TagKey}	Write
DeleteMediaMessageSpendLimitOverride	Grants permission to delete an override for your account's media messaging monthly spend limit			Write
DeleteOptOutList	Grants permission to delete an opt-out list	OptOutList*	aws:ResourceTag/${TagKey}	Write
DeleteOptedOutNumber	Grants permission to delete a destination phone number from an opt-out list	OptOutList*	aws:ResourceTag/${TagKey}	Write
DeletePool	Grants permission to delete a pool	Pool*	aws:ResourceTag/${TagKey}	Write
DeleteProtectConfiguration	Grants permission to delete a protect configuration	ProtectConfiguration*	aws:ResourceTag/${TagKey}	Write
DeleteProtectConfigurationRuleSetNumberOverride	Grants permission to delete a phone number override for a protect configuration	ProtectConfiguration*	aws:ResourceTag/${TagKey}	Write
DeleteRegistration	Grants permission to delete a registration	Registration*	aws:ResourceTag/${TagKey}	Write
DeleteRegistrationAttachment	Grants permission to delete a registration attachment	RegistrationAttachment*	aws:ResourceTag/${TagKey}	Write
DeleteRegistrationFieldValue	Grants permission to delete an optional registration field value	Registration*	aws:ResourceTag/${TagKey}	Write
DeleteResourcePolicy	Grants permission to delete a resource policy	OptOutList	aws:ResourceTag/${TagKey}	Permissions management, Write
		PhoneNumber	aws:ResourceTag/${TagKey}
		Pool	aws:ResourceTag/${TagKey}
		SenderId	aws:ResourceTag/${TagKey}
DeleteTextMessageSpendLimitOverride	Grants permission to delete an override for your account's text messaging monthly spend limit			Write
DeleteVerifiedDestinationNumber	Grants permission to delete a verified destination number	VerifiedDestinationNumber*	aws:ResourceTag/${TagKey}	Write
DeleteVoiceMessageSpendLimitOverride	Grants permission to delete an override for your account's voice messaging monthly spend limit			Write
DescribeAccountAttributes	Grants permission to describe the attributes of your account			Read
DescribeAccountLimits	Grants permission to describe the service quotas for your account			Read
DescribeConfigurationSets	Grants permission to describe the configuration sets in your account	ConfigurationSet	aws:ResourceTag/${TagKey}	Read
DescribeKeywords	Grants permission to describe the keywords for a pool or origination phone number	PhoneNumber	aws:ResourceTag/${TagKey}	Read
DescribeKeywords		Pool	aws:ResourceTag/${TagKey}	Read
DescribeOptOutLists	Grants permission to describe the opt-out lists in your account	OptOutList	aws:ResourceTag/${TagKey}	Read
DescribeOptedOutNumbers	Grants permission to describe the destination phone numbers in an opt-out list	OptOutList*	aws:ResourceTag/${TagKey}	Read
DescribePhoneNumbers	Grants permission to describe the origination phone numbers in your account	PhoneNumber	aws:ResourceTag/${TagKey}	Read
DescribePools	Grants permission to describe the pools in your account	Pool	aws:ResourceTag/${TagKey}	Read
DescribeProtectConfigurations	Grants permission to describe the protect configurations in your account	ProtectConfiguration	aws:ResourceTag/${TagKey}	Read
DescribeRegistrationAttachments	Grants permission to describe the registration attachments in your account	RegistrationAttachment	aws:ResourceTag/${TagKey}	Read
DescribeRegistrationFieldDefinitions	Grants permission to describe the field definitions for a given registration type			Read
DescribeRegistrationFieldValues	Grants permission to describe the field values for a given registration	Registration*	aws:ResourceTag/${TagKey}	Read
DescribeRegistrationSectionDefinitions	Grants permission to describe the section definitions for a given registration type			Read
DescribeRegistrationTypeDefinitions	Grants permission to describe the registration types supported by the service			Read
DescribeRegistrationVersions	Grants permission to describe the versions for a given registration	Registration*	aws:ResourceTag/${TagKey}	Read
DescribeRegistrations	Grants permission to describe the registrations in your account	Registration	aws:ResourceTag/${TagKey}	Read
DescribeSenderIds	Grants permission to describe the sender IDs in your account	SenderId	aws:ResourceTag/${TagKey}	Read
DescribeSpendLimits	Grants permission to describe the monthly spend limits for your account			Read
DescribeVerifiedDestinationNumbers	Grants permission to describe the verified destination numbers in your account	VerifiedDestinationNumber	aws:ResourceTag/${TagKey}	Read
DisassociateOriginationIdentity	Grants permission to disassociate an origination phone number or sender ID from a pool	PhoneNumber	aws:ResourceTag/${TagKey}	Write
		Pool*	aws:ResourceTag/${TagKey}
		SenderId	aws:ResourceTag/${TagKey}
DisassociateProtectConfiguration	Grants permission to disassociate a protect configuration from a configuration set	ConfigurationSet*	aws:ResourceTag/${TagKey}	Write
DisassociateProtectConfiguration		ProtectConfiguration*	aws:ResourceTag/${TagKey}	Write
DiscardRegistrationVersion	Grants permission to discard the latest version of a given registration	Registration*	aws:ResourceTag/${TagKey}	Write
GetProtectConfigurationCountryRuleSet	Grants permission to get the country rule set for a protect configuration	ProtectConfiguration*	aws:ResourceTag/${TagKey}	Read
GetResourcePolicy	Grants permission to get a resource policy	OptOutList	aws:ResourceTag/${TagKey}	Read
		PhoneNumber	aws:ResourceTag/${TagKey}
		Pool	aws:ResourceTag/${TagKey}
		SenderId	aws:ResourceTag/${TagKey}
ListPoolOriginationIdentities	Grants permission to list all origination phone numbers and sender IDs associated to a pool	Pool*	aws:ResourceTag/${TagKey}	Read
ListProtectConfigurationRuleSetNumberOverrides	Grants permission to list all phone number overrides for a protect configuration	ProtectConfiguration*	aws:ResourceTag/${TagKey}	Read
ListRegistrationAssociations	Grants permission to list all resources associated to a registration	Registration*	aws:ResourceTag/${TagKey}	Read
ListTagsForResource	Grants permission to list the tags for a resource	ConfigurationSet	aws:ResourceTag/${TagKey}	Read
		OptOutList	aws:ResourceTag/${TagKey}
		PhoneNumber	aws:ResourceTag/${TagKey}
		Pool	aws:ResourceTag/${TagKey}
		ProtectConfiguration	aws:ResourceTag/${TagKey}
		Registration	aws:ResourceTag/${TagKey}
		RegistrationAttachment	aws:ResourceTag/${TagKey}
		SenderId	aws:ResourceTag/${TagKey}
		VerifiedDestinationNumber	aws:ResourceTag/${TagKey}
PutKeyword	Grants permission to create or update a keyword for a pool or origination phone number	PhoneNumber	aws:ResourceTag/${TagKey}	Write
PutKeyword		Pool	aws:ResourceTag/${TagKey}	Write
PutMessageFeedback	Grants permission to put feedback for a text, voice, or media message	Message*		Write
PutOptedOutNumber	Grants permission to put a destination phone number into an opt-out list	OptOutList*	aws:ResourceTag/${TagKey}	Write
PutProtectConfigurationRuleSetNumberOverride	Grants permission to put a phone number override for a protect configuration	ProtectConfiguration*	aws:ResourceTag/${TagKey}	Write
PutRegistrationFieldValue	Grants permission to put a registration field value	Registration*	aws:ResourceTag/${TagKey}	Write
PutResourcePolicy	Grants permission to put a resource policy	OptOutList	aws:ResourceTag/${TagKey}	Permissions management, Write
		PhoneNumber	aws:ResourceTag/${TagKey}
		Pool	aws:ResourceTag/${TagKey}
		SenderId	aws:ResourceTag/${TagKey}
ReleasePhoneNumber	Grants permission to release an origination phone number	PhoneNumber*	aws:ResourceTag/${TagKey}	Write
ReleaseSenderId	Grants permission to release a sender ID	SenderId*	aws:ResourceTag/${TagKey}	Write
RequestPhoneNumber	Grants permission to request an origination phone number	Pool	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
RequestSenderId	Grants permission to request an unregistered sender ID		aws:RequestTag/${TagKey} aws:TagKeys	Write
SendDestinationNumberVerificationCode	Grants permission to send a text or voice message containing a verification code to a destination phone number	PhoneNumber	aws:ResourceTag/${TagKey}	Write
		Pool	aws:ResourceTag/${TagKey}
		SenderId	aws:ResourceTag/${TagKey}
SendMediaMessage	Grants permission to send a media message to a destination phone number	PhoneNumber	aws:ResourceTag/${TagKey}	Write
SendMediaMessage		Pool	aws:ResourceTag/${TagKey}	Write
SendTextMessage	Grants permission to send a text message to a destination phone number	PhoneNumber	aws:ResourceTag/${TagKey}	Write
		Pool	aws:ResourceTag/${TagKey}
		SenderId	aws:ResourceTag/${TagKey}
SendVoiceMessage	Grants permission to send a voice message to a destination phone number	PhoneNumber	aws:ResourceTag/${TagKey}	Write
SendVoiceMessage		Pool	aws:ResourceTag/${TagKey}	Write
SetAccountDefaultProtectConfiguration	Grants permission to set a default protect configuration for the account	ProtectConfiguration*	aws:ResourceTag/${TagKey}	Write
SetDefaultMessageFeedbackEnabled	Grants permission to set the default message feedback for a configuration set	ConfigurationSet*	aws:ResourceTag/${TagKey}	Write
SetDefaultMessageType	Grants permission to set the default message type for a configuration set	ConfigurationSet*	aws:ResourceTag/${TagKey}	Write
SetDefaultSenderId	Grants permission to set the default sender ID for a configuration set	ConfigurationSet*	aws:ResourceTag/${TagKey}	Write
SetMediaMessageSpendLimitOverride	Grants permission to set an override for your account's media messaging monthly spend limit			Write
SetTextMessageSpendLimitOverride	Grants permission to set an override for your account's text messaging monthly spend limit			Write
SetVoiceMessageSpendLimitOverride	Grants permission to set an override for your account's voice messaging monthly spend limit			Write
SubmitRegistrationVersion	Grants permission to submit the latest version of a given registration	Registration*	aws:ResourceTag/${TagKey}	Write
TagResource	Grants permission to add tags to a resource	ConfigurationSet	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		OptOutList	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		PhoneNumber	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		Pool	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		ProtectConfiguration	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		Registration	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		RegistrationAttachment	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		SenderId	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		VerifiedDestinationNumber	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
UntagResource	Grants permission to remove tags from a resource	ConfigurationSet	aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		OptOutList	aws:ResourceTag/${TagKey} aws:TagKeys
		PhoneNumber	aws:ResourceTag/${TagKey} aws:TagKeys
		Pool	aws:ResourceTag/${TagKey} aws:TagKeys
		ProtectConfiguration	aws:ResourceTag/${TagKey} aws:TagKeys
		Registration	aws:ResourceTag/${TagKey} aws:TagKeys
		RegistrationAttachment	aws:ResourceTag/${TagKey} aws:TagKeys
		SenderId	aws:ResourceTag/${TagKey} aws:TagKeys
		VerifiedDestinationNumber	aws:ResourceTag/${TagKey} aws:TagKeys
UpdateEventDestination	Grants permission to update an event destination within a configuration set	ConfigurationSet*	aws:ResourceTag/${TagKey}	Write
UpdatePhoneNumber	Grants permission to update an origination phone number's configuration	PhoneNumber*	aws:ResourceTag/${TagKey}	Write
UpdatePool	Grants permission to update a pool's configuration	Pool*	aws:ResourceTag/${TagKey}	Write
UpdateProtectConfiguration	Grants permission to update a protect configuration	ProtectConfiguration*	aws:ResourceTag/${TagKey}	Write
UpdateProtectConfigurationCountryRuleSet	Grants permission to update a country rule set for a protect configuration	ProtectConfiguration*	aws:ResourceTag/${TagKey}	Write
UpdateSenderId	Grants permission to update a sender ID's configuration	SenderId*	aws:ResourceTag/${TagKey}	Write
VerifyDestinationNumber	Grants permission to verify a destination phone number	VerifiedDestinationNumber*	aws:ResourceTag/${TagKey}	Write

Resource types defined by AWS End User Messaging SMS and Voice V2

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
ConfigurationSet	arn:${Partition}:sms-voice:${Region}:${Account}:configuration-set/${ConfigurationSetName}	aws:ResourceTag/${TagKey}
Message	arn:${Partition}:sms-voice:${Region}:${Account}:message/${MessageId}
OptOutList	arn:${Partition}:sms-voice:${Region}:${Account}:opt-out-list/${OptOutListName}	aws:ResourceTag/${TagKey}
PhoneNumber	arn:${Partition}:sms-voice:${Region}:${Account}:phone-number/${PhoneNumberId}	aws:ResourceTag/${TagKey}
Pool	arn:${Partition}:sms-voice:${Region}:${Account}:pool/${PoolId}	aws:ResourceTag/${TagKey}
ProtectConfiguration	arn:${Partition}:sms-voice:${Region}:${Account}:protect-configuration/${ProtectConfigurationId}	aws:ResourceTag/${TagKey}
Registration	arn:${Partition}:sms-voice:${Region}:${Account}:registration/${RegistrationId}	aws:ResourceTag/${TagKey}
RegistrationAttachment	arn:${Partition}:sms-voice:${Region}:${Account}:registration-attachment/${RegistrationAttachmentId}	aws:ResourceTag/${TagKey}
SenderId	arn:${Partition}:sms-voice:${Region}:${Account}:sender-id/${SenderId}/${IsoCountryCode}	aws:ResourceTag/${TagKey}
VerifiedDestinationNumber	arn:${Partition}:sms-voice:${Region}:${Account}:verified-destination-number/${VerifiedDestinationNumberId}	aws:ResourceTag/${TagKey}

Condition keys for AWS End User Messaging SMS and Voice V2

AWS End User Messaging SMS and Voice V2 defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys	Description	Type
aws:RequestTag/${TagKey}	Filters access by the tags that are passed in the request	String
aws:ResourceTag/${TagKey}	Filters access by the tags associated with the resource	String
aws:TagKeys	Filters access by the tag keys that are passed in the request	ArrayOfString

Warning Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Document Conventions

AWS Elemental Support Content (elemental-support-content)

AWS End User Messaging Social (social-messaging)