Actions Permission-only actions Resource types Condition keys

Actions, resources, and condition keys for AWS RoboMaker

AWS RoboMaker (service prefix: robomaker) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

Actions defined by AWS RoboMaker
Permission-only actions for AWS RoboMaker
Resource types defined by AWS RoboMaker
Condition keys for AWS RoboMaker

Actions defined by AWS RoboMaker

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
BatchDeleteWorlds	Delete one or more worlds in a batch operation			Write
BatchDescribeSimulationJob	Describe multiple simulation jobs			Read
CancelDeploymentJob	Cancel a deployment job	deploymentJob*	aws:ResourceTag/${TagKey}	Write
CancelSimulationJob	Cancel a simulation job	simulationJob*	aws:ResourceTag/${TagKey}	Write
CancelSimulationJobBatch	Cancel a simulation job batch	simulationJobBatch*	aws:ResourceTag/${TagKey}	Write
CancelWorldExportJob	Cancel a world export job	worldExportJob*	aws:ResourceTag/${TagKey}	Write
CancelWorldGenerationJob	Cancel a world generation job	worldGenerationJob*	aws:ResourceTag/${TagKey}	Write
CreateDeploymentJob	Create a deployment job		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateFleet	Create a deployment fleet that represents a logical group of robots running the same robot application		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateRobot	Create a robot that can be registered to a fleet		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateRobotApplication	Create a robot application		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateRobotApplicationVersion	Create a snapshot of a robot application	robotApplication*	aws:ResourceTag/${TagKey}	Write
CreateSimulationApplication	Create a simulation application		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateSimulationApplicationVersion	Create a snapshot of a simulation application	simulationApplication*	aws:ResourceTag/${TagKey}	Write
CreateSimulationJob	Create a simulation job		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateWorldExportJob	Create a world export job	world*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateWorldGenerationJob	Create a world generation job	worldTemplate*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateWorldTemplate	Create a world template		aws:RequestTag/${TagKey} aws:TagKeys	Write
DeleteFleet	Delete a deployment fleet	deploymentFleet*	aws:ResourceTag/${TagKey}	Write
DeleteRobot	Delete a robot	robot*	aws:ResourceTag/${TagKey}	Write
DeleteRobotApplication	Delete a robot application	robotApplication*	aws:ResourceTag/${TagKey}	Write
DeleteSimulationApplication	Delete a simulation application	simulationApplication*	aws:ResourceTag/${TagKey}	Write
DeleteWorldTemplate	Delete a world template	worldTemplate*	aws:ResourceTag/${TagKey}	Write
DeregisterRobot	Deregister a robot from a fleet	deploymentFleet*	aws:ResourceTag/${TagKey}	Write
DeregisterRobot	Deregister a robot from a fleet	robot*	aws:ResourceTag/${TagKey}	Write
DescribeDeploymentJob	Describe a deployment job	deploymentJob*	aws:ResourceTag/${TagKey}	Read
DescribeFleet	Describe a deployment fleet	deploymentFleet*	aws:ResourceTag/${TagKey}	Read
DescribeRobot	Describe a robot	robot*	aws:ResourceTag/${TagKey}	Read
DescribeRobotApplication	Describe a robot application	robotApplication*	aws:ResourceTag/${TagKey}	Read
DescribeSimulationApplication	Describe a simulation application	simulationApplication*	aws:ResourceTag/${TagKey}	Read
DescribeSimulationJob	Describe a simulation job	simulationJob*	aws:ResourceTag/${TagKey}	Read
DescribeSimulationJobBatch	Describe a simulation job batch	simulationJobBatch*	aws:ResourceTag/${TagKey}	Read
DescribeWorld	Describe a world	world*	aws:ResourceTag/${TagKey}	Read
DescribeWorldExportJob	Describe a world export job	worldExportJob*	aws:ResourceTag/${TagKey}	Read
DescribeWorldGenerationJob	Describe a world generation job	worldGenerationJob*	aws:ResourceTag/${TagKey}	Read
DescribeWorldTemplate	Describe a world template	worldTemplate*	aws:ResourceTag/${TagKey}	Read
GetWorldTemplateBody	Get the body of a world template	worldTemplate*	aws:ResourceTag/${TagKey}	Read
ListDeploymentJobs	List deployment jobs			List
ListFleets	List fleets			List
ListRobotApplications	List robot applications			List
ListRobots	List robots			List
ListSimulationApplications	List simulation applications			List
ListSimulationJobBatches	List simulation job batches			List
ListSimulationJobs	List simulation jobs			List
ListTagsForResource	List tags for a RoboMaker resource	deploymentFleet	aws:ResourceTag/${TagKey}	List
		deploymentJob	aws:ResourceTag/${TagKey}
		robot	aws:ResourceTag/${TagKey}
		robotApplication	aws:ResourceTag/${TagKey}
		simulationApplication	aws:ResourceTag/${TagKey}
		simulationJob	aws:ResourceTag/${TagKey}
		simulationJobBatch	aws:ResourceTag/${TagKey}
		world	aws:ResourceTag/${TagKey}
		worldExportJob	aws:ResourceTag/${TagKey}
		worldGenerationJob	aws:ResourceTag/${TagKey}
		worldTemplate	aws:ResourceTag/${TagKey}
ListWorldExportJobs	List world export jobs			List
ListWorldGenerationJobs	List world generation jobs			List
ListWorldTemplates	List world templates			List
ListWorlds	List worlds			List
RegisterRobot	Register a robot to a fleet	deploymentFleet*	aws:ResourceTag/${TagKey}	Write
RegisterRobot	Register a robot to a fleet	robot*	aws:ResourceTag/${TagKey}	Write
RestartSimulationJob	Restart a running simulation job	simulationJob*	aws:ResourceTag/${TagKey}	Write
StartSimulationJobBatch	Create a simulation job batch		aws:RequestTag/${TagKey} aws:TagKeys	Write
SyncDeploymentJob	Ensures the most recently deployed robot application is deployed to all robots in the fleet	deploymentFleet*	aws:ResourceTag/${TagKey}	Write
TagResource	Add tags to a RoboMaker resource	deploymentFleet	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		deploymentJob	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		robot	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		robotApplication	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		simulationApplication	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		simulationJob	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		simulationJobBatch	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		world	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		worldExportJob	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		worldGenerationJob	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		worldTemplate	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
UntagResource	Remove tags from a RoboMaker resource	deploymentFleet	aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		deploymentJob	aws:ResourceTag/${TagKey} aws:TagKeys
		robot	aws:ResourceTag/${TagKey} aws:TagKeys
		robotApplication	aws:ResourceTag/${TagKey} aws:TagKeys
		simulationApplication	aws:ResourceTag/${TagKey} aws:TagKeys
		simulationJob	aws:ResourceTag/${TagKey} aws:TagKeys
		simulationJobBatch	aws:ResourceTag/${TagKey} aws:TagKeys
		world	aws:ResourceTag/${TagKey} aws:TagKeys
		worldExportJob	aws:ResourceTag/${TagKey} aws:TagKeys
		worldGenerationJob	aws:ResourceTag/${TagKey} aws:TagKeys
		worldTemplate	aws:ResourceTag/${TagKey} aws:TagKeys
UpdateRobotApplication	Update a robot application	robotApplication*	aws:ResourceTag/${TagKey}	Write
UpdateSimulationApplication	Update a simulation application	simulationApplication*	aws:ResourceTag/${TagKey}	Write
UpdateWorldTemplate	Update a world template	worldTemplate*	aws:ResourceTag/${TagKey}	Write

Permission-only actions for AWS RoboMaker

The following actions are defined by AWS RoboMaker but are not directly invocable through any API operation. They can only be used in IAM policy statements to grant or deny permissions.

Actions	Description	Resource types (*required)	Condition keys	Access level
ListSupportedAvailabilityZones	Lists supported availability zones			List
UpdateRobotDeployment	Report the deployment status for an individual robot			Write

Resource types defined by AWS RoboMaker

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
deploymentFleet	arn:${Partition}:robomaker:${Region}:${Account}:deployment-fleet/${FleetName}/${CreatedOnEpoch}	aws:ResourceTag/${TagKey}
deploymentJob	arn:${Partition}:robomaker:${Region}:${Account}:deployment-job/${DeploymentJobId}	aws:ResourceTag/${TagKey}
robot	arn:${Partition}:robomaker:${Region}:${Account}:robot/${RobotName}/${CreatedOnEpoch}	aws:ResourceTag/${TagKey}
robotApplication	arn:${Partition}:robomaker:${Region}:${Account}:robot-application/${ApplicationName}/${CreatedOnEpoch}	aws:ResourceTag/${TagKey}
simulationApplication	arn:${Partition}:robomaker:${Region}:${Account}:simulation-application/${ApplicationName}/${CreatedOnEpoch}	aws:ResourceTag/${TagKey}
simulationJob	arn:${Partition}:robomaker:${Region}:${Account}:simulation-job/${SimulationJobId}	aws:ResourceTag/${TagKey}
simulationJobBatch	arn:${Partition}:robomaker:${Region}:${Account}:simulation-job-batch/${SimulationJobBatchId}	aws:ResourceTag/${TagKey}
world	arn:${Partition}:robomaker:${Region}:${Account}:world/${WorldId}	aws:ResourceTag/${TagKey}
worldExportJob	arn:${Partition}:robomaker:${Region}:${Account}:world-export-job/${WorldExportJobId}	aws:ResourceTag/${TagKey}
worldGenerationJob	arn:${Partition}:robomaker:${Region}:${Account}:world-generation-job/${WorldGenerationJobId}	aws:ResourceTag/${TagKey}
worldTemplate	arn:${Partition}:robomaker:${Region}:${Account}:world-template/${WorldTemplateJobId}	aws:ResourceTag/${TagKey}

Condition keys for AWS RoboMaker

AWS RoboMaker defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys	Description	Type
aws:RequestTag/${TagKey}	Filters access based on the tags that are passed in the request	String
aws:ResourceTag/${TagKey}	Filters access based on the tags associated with the resource	String
aws:TagKeys	Filters access based on the tag keys that are passed in the request	ArrayOfString

Warning Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Document Conventions

AWS Resource Groups (resource-groups)

AWS Route53 Global Resolver (route53globalresolver)