Actions, resources, and condition keys for Amazon Comprehend Medical
Amazon Comprehend Medical (service prefix: comprehendmedical) provides the following
service-specific operations, resources, actions, and condition keys for use in IAM permission
policies.
References:
-
Learn how to configure this service.
-
View a list of the API operations available for this service.
-
Learn how to secure this service and its resources by using IAM permission policies.
-
View the programmatic service authorization reference
for this service.
Topics
API operations defined by Amazon Comprehend Medical
The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.
| Operation | IAM action | Condition key | Possible value(s) | Access level |
|---|---|---|---|---|
|
DescribeEntitiesDetectionV2Job |
Read |
|||
|
DescribeICD10CMInferenceJob |
Read |
|||
|
DescribePHIDetectionJob |
Read |
|||
|
DescribeRxNormInferenceJob |
Read |
|||
|
DescribeSNOMEDCTInferenceJob |
Read |
|||
|
DetectEntitiesV2 |
Read |
|||
|
DetectPHI |
Read |
|||
|
InferICD10CM |
Read |
|||
|
InferRxNorm |
Read |
|||
|
InferSNOMEDCT |
Read |
|||
|
ListEntitiesDetectionV2Jobs |
Read |
|||
|
ListICD10CMInferenceJobs |
Read |
|||
|
ListPHIDetectionJobs |
Read |
|||
|
ListRxNormInferenceJobs |
Read |
|||
|
ListSNOMEDCTInferenceJobs |
Read |
|||
|
StartEntitiesDetectionV2Job |
Write |
|||
iam:PassedToService |
comprehendmedical.amazonaws.com |
Write |
||
|
StartICD10CMInferenceJob |
Write |
|||
iam:PassedToService |
comprehendmedical.amazonaws.com |
Write |
||
|
StartPHIDetectionJob |
Write |
|||
iam:PassedToService |
comprehendmedical.amazonaws.com |
Write |
||
|
StartRxNormInferenceJob |
Write |
|||
iam:PassedToService |
comprehendmedical.amazonaws.com |
Write |
||
|
StartSNOMEDCTInferenceJob |
Write |
|||
iam:PassedToService |
comprehendmedical.amazonaws.com |
Write |
||
|
StopEntitiesDetectionV2Job |
Write |
|||
|
StopICD10CMInferenceJob |
Write |
|||
|
StopPHIDetectionJob |
Write |
|||
|
StopRxNormInferenceJob |
Write |
|||
|
StopSNOMEDCTInferenceJob |
Write |
Actions defined by Amazon Comprehend Medical
You can specify the following actions in the Action element of an IAM
policy statement. Use policies to grant permissions to perform an operation in AWS. When
you use an action in a policy, you usually allow or deny access to the API operation or CLI
command with the same name. However, in some cases, a single action controls access to more
than one operation. Alternatively, some operations require several different actions.
| Actions | Description | Resource types (*required) | Condition keys | Access level |
|---|---|---|---|---|
Grants permission to describe the properties of a medical entity detection job that you have submitted |
Read |
|||
Grants permission to describe the properties of an ICD-10-CM linking job that you have submitted |
Read |
|||
Grants permission to describe the properties of a PHI entity detection job that you have submitted |
Read |
|||
Grants permission to describe the properties of an RxNorm linking job that you have submitted |
Read |
|||
Grants permission to describe the properties of a SNOMED-CT linking job that you have submitted |
Read |
|||
Grants permission to detect the named medical entities, and their relationships and traits within the given text document |
Read |
|||
Grants permission to detect the protected health information (PHI) entities within the given text document |
Read |
|||
Grants permission to detect the medical condition entities within the given text document and link them to ICD-10-CM codes |
Read |
|||
Grants permission to detect the medication entities within the given text document and link them to RxCUI concept identifiers from the National Library of Medicine RxNorm database |
Read |
|||
Grants permission to detect the medical condition, anatomy, and test, treatment, and procedure entities within the given text document and link them to SNOMED-CT codes |
Read |
|||
Grants permission to list the medical entity detection jobs that you have submitted |
Read |
|||
Grants permission to list the ICD-10-CM linking jobs that you have submitted |
Read |
|||
Grants permission to list the PHI entity detection jobs that you have submitted |
Read |
|||
Grants permission to list the RxNorm linking jobs that you have submitted |
Read |
|||
Grants permission to list the SNOMED-CT linking jobs that you have submitted |
Read |
|||
Grants permission to start an asynchronous medical entity detection job for a collection of documents |
Write |
|||
Grants permission to start an asynchronous ICD-10-CM linking job for a collection of documents |
Write |
|||
Grants permission to start an asynchronous PHI entity detection job for a collection of documents |
Write |
|||
Grants permission to start an asynchronous RxNorm linking job for a collection of documents |
Write |
|||
Grants permission to start an asynchronous SNOMED-CT linking job for a collection of documents |
Write |
|||
Grants permission to stop a medical entity detection job |
Write |
|||
Grants permission to stop an ICD-10-CM linking job |
Write |
|||
Grants permission to stop a PHI entity detection job |
Write |
|||
Grants permission to stop an RxNorm linking job |
Write |
|||
Grants permission to stop a SNOMED-CT linking job |
Write |
Resource types defined by Amazon Comprehend Medical
Amazon Comprehend Medical does not support specifying a resource ARN in the
Resource element of an IAM policy statement.
Condition keys for Amazon Comprehend Medical
Amazon Comprehend Medical defines the following condition keys that can be used in the
Condition element of an IAM policy.
| Condition keys | Description | Type |
|---|---|---|
Filters access by the presence of tag keys in the request |
ArrayOfString |
