View a markdown version of this page

Actions, resources, and condition keys for Amazon Interactive Video Service - Service Authorization Reference

Actions, resources, and condition keys for Amazon Interactive Video Service

Amazon Interactive Video Service (service prefix: ivs) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

API operations defined by Amazon Interactive Video Service

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation SDK client IAM action Condition key Possible value(s) Access level

BatchGetChannel

ivs

ivs:BatchGetChannel

Read

BatchGetStreamKey

ivs

ivs:BatchGetStreamKey

Read

BatchStartViewerSessionRevocation

ivs

ivs:BatchStartViewerSessionRevocation

Write

CreateAdConfiguration

ivs

ivs:CreateAdConfiguration

Write

ivs:TagResource

Tagging, Write

CreateChannel

ivs

ivs:CreateChannel

Write

ivs:TagResource

Tagging, Write

CreatePlaybackRestrictionPolicy

ivs

ivs:CreatePlaybackRestrictionPolicy

Write

ivs:TagResource

Tagging, Write

CreateRecordingConfiguration

ivs

ivs:CreateRecordingConfiguration

Write

ivs:TagResource

Tagging, Write

CreateStreamKey

ivs

ivs:CreateStreamKey

Write

ivs:TagResource

Tagging, Write

DeleteAdConfiguration

ivs

ivs:DeleteAdConfiguration

Write

DeleteChannel

ivs

ivs:DeleteChannel

Write

DeletePlaybackKeyPair

ivs

ivs:DeletePlaybackKeyPair

Write

DeletePlaybackRestrictionPolicy

ivs

ivs:DeletePlaybackRestrictionPolicy

Write

DeleteRecordingConfiguration

ivs

ivs:DeleteRecordingConfiguration

Write

DeleteStreamKey

ivs

ivs:DeleteStreamKey

Write

GetAdConfiguration

ivs

ivs:GetAdConfiguration

Read

GetChannel

ivs

ivs:GetChannel

Read

GetPlaybackKeyPair

ivs

ivs:GetPlaybackKeyPair

Read

GetPlaybackRestrictionPolicy

ivs

ivs:GetPlaybackRestrictionPolicy

Read

GetRecordingConfiguration

ivs

ivs:GetRecordingConfiguration

Read

GetStream

ivs

ivs:GetStream

Read

GetStreamKey

ivs

ivs:GetStreamKey

Read

GetStreamSession

ivs

ivs:GetStreamSession

Read

ImportPlaybackKeyPair

ivs

ivs:ImportPlaybackKeyPair

Write

ivs:TagResource

Tagging, Write

InsertAdBreak

ivs

ivs:InsertAdBreak

Write

ListAdConfigurations

ivs

ivs:ListAdConfigurations

List

ListChannels

ivs

ivs:ListChannels

List

ListPlaybackKeyPairs

ivs

ivs:ListPlaybackKeyPairs

List

ListPlaybackRestrictionPolicies

ivs

ivs:ListPlaybackRestrictionPolicies

List

ListRecordingConfigurations

ivs

ivs:ListRecordingConfigurations

List

ListStreamKeys

ivs

ivs:ListStreamKeys

List

ListStreamSessions

ivs

ivs:ListStreamSessions

List

ListStreams

ivs

ivs:ListStreams

List

ListTagsForResource

ivs

ivs:ListTagsForResource

Read

PutMetadata

ivs

ivs:PutMetadata

Write

StartViewerSessionRevocation

ivs

ivs:StartViewerSessionRevocation

Write

StopStream

ivs

ivs:StopStream

Write

TagResource

ivs

ivs:TagResource

Tagging, Write

UntagResource

ivs

ivs:UntagResource

Tagging, Write

UpdateAdConfiguration

ivs

ivs:UpdateAdConfiguration

Write

UpdateChannel

ivs

ivs:UpdateChannel

Write

UpdatePlaybackRestrictionPolicy

ivs

ivs:UpdatePlaybackRestrictionPolicy

Write

CreateEncoderConfiguration

ivs-realtime

ivs:CreateEncoderConfiguration

Write

ivs:TagResource

Tagging, Write

CreateIngestConfiguration

ivs-realtime

ivs:CreateIngestConfiguration

Write

ivs:TagResource

Tagging, Write

CreateParticipantToken

ivs-realtime

ivs:CreateParticipantToken

Write

CreateStage

ivs-realtime

ivs:CreateStage

Write

ivs:TagResource

Tagging, Write

CreateStorageConfiguration

ivs-realtime

ivs:CreateStorageConfiguration

Write

ivs:TagResource

Tagging, Write

DeleteEncoderConfiguration

ivs-realtime

ivs:DeleteEncoderConfiguration

Write

DeleteIngestConfiguration

ivs-realtime

ivs:DeleteIngestConfiguration

Write

DeletePublicKey

ivs-realtime

ivs:DeletePublicKey

Write

DeleteStage

ivs-realtime

ivs:DeleteStage

Write

DeleteStorageConfiguration

ivs-realtime

ivs:DeleteStorageConfiguration

Write

DisconnectParticipant

ivs-realtime

ivs:DisconnectParticipant

Write

GetComposition

ivs-realtime

ivs:GetComposition

Read

GetEncoderConfiguration

ivs-realtime

ivs:GetEncoderConfiguration

Read

GetIngestConfiguration

ivs-realtime

ivs:GetIngestConfiguration

Read

GetParticipant

ivs-realtime

ivs:GetParticipant

Read

GetPublicKey

ivs-realtime

ivs:GetPublicKey

Read

GetStage

ivs-realtime

ivs:GetStage

Read

GetStageSession

ivs-realtime

ivs:GetStageSession

Read

GetStorageConfiguration

ivs-realtime

ivs:GetStorageConfiguration

Read

ImportPublicKey

ivs-realtime

ivs:ImportPublicKey

Write

ivs:TagResource

Tagging, Write

ListCompositions

ivs-realtime

ivs:ListCompositions

List

ListEncoderConfigurations

ivs-realtime

ivs:ListEncoderConfigurations

List

ListIngestConfigurations

ivs-realtime

ivs:ListIngestConfigurations

List

ListParticipantEvents

ivs-realtime

ivs:ListParticipantEvents

List

ListParticipantReplicas

ivs-realtime

ivs:ListParticipantReplicas

List

ListParticipants

ivs-realtime

ivs:ListParticipants

List

ListPublicKeys

ivs-realtime

ivs:ListPublicKeys

List

ListStageSessions

ivs-realtime

ivs:ListStageSessions

List

ListStages

ivs-realtime

ivs:ListStages

List

ListStorageConfigurations

ivs-realtime

ivs:ListStorageConfigurations

List

ListTagsForResource

ivs-realtime

ivs:ListTagsForResource

Read

StartComposition

ivs-realtime

ivs:StartComposition

Write

ivs:TagResource

Tagging, Write

StartParticipantReplication

ivs-realtime

ivs:StartParticipantReplication

Write

StopComposition

ivs-realtime

ivs:StopComposition

Write

StopParticipantReplication

ivs-realtime

ivs:StopParticipantReplication

Write

TagResource

ivs-realtime

ivs:TagResource

Tagging, Write

UntagResource

ivs-realtime

ivs:UntagResource

Tagging, Write

UpdateIngestConfiguration

ivs-realtime

ivs:UpdateIngestConfiguration

Write

UpdateStage

ivs-realtime

ivs:UpdateStage

Write

Actions defined by Amazon Interactive Video Service

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions Description Resource types (*required) Condition keys Access level

BatchGetChannel

Grants permission to get multiple channels simultaneously by channel ARN

Channel*

aws:ResourceTag/${TagKey}

Read

BatchGetStreamKey

Grants permission to get multiple stream keys simultaneously by stream key ARN

Stream-Key*

aws:ResourceTag/${TagKey}

Read

BatchStartViewerSessionRevocation

Grants permission to perform StartViewerSessionRevocation on multiple channel ARN and viewer ID pairs simultaneously

Channel*

aws:ResourceTag/${TagKey}

Write

CreateAdConfiguration

Grants permission to create a new ad configuration

Ad-Configuration*

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Write

CreateChannel

Grants permission to create a new channel and an associated stream key

Channel*

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Write

Stream-Key*

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

CreateEncoderConfiguration

Grants permission to create a new encoder configuration

Encoder-Configuration*

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Write

CreateIngestConfiguration

Grants permission to create a new ingest configuration

Ingest-Configuration*

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Write

CreateParticipantToken

Grants permission to create a participant token

Stage*

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Write

CreatePlaybackRestrictionPolicy

Grants permission to create a playback restriction policy

Playback-Restriction-Policy*

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Write

CreateRecordingConfiguration

Grants permission to create a a new recording configuration

Recording-Configuration*

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Write

CreateStage

Grants permission to create a stage

Stage*

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Write

CreateStorageConfiguration

Grants permission to create a new storage configuration

Storage-Configuration*

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Write

CreateStreamKey

Grants permission to create a stream key

Stream-Key*

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Write

DeleteAdConfiguration

Grants permission to delete an ad configuration for the specified ARN

Ad-Configuration*

aws:ResourceTag/${TagKey}

Write

DeleteChannel

Grants permission to delete a channel and channel's stream keys

Channel*

aws:ResourceTag/${TagKey}

Write

Stream-Key*

aws:ResourceTag/${TagKey}

DeleteEncoderConfiguration

Grants permission to delete an encoder configuration for the specified ARN

Encoder-Configuration*

aws:ResourceTag/${TagKey}

Write

DeleteIngestConfiguration

Grants permission to delete an ingest configuration for the specified ARN

Ingest-Configuration*

aws:ResourceTag/${TagKey}

Write

DeletePlaybackKeyPair

Grants permission to delete the playback key pair for a specified ARN

Playback-Key-Pair*

aws:ResourceTag/${TagKey}

Write

DeletePlaybackRestrictionPolicy

Grants permission to delete the playback restriction policy for a specified ARN

Playback-Restriction-Policy*

aws:ResourceTag/${TagKey}

Write

DeletePublicKey

Grants permission to delete the public key for the specified ARN

Public-Key*

aws:ResourceTag/${TagKey}

Write

DeleteRecordingConfiguration

Grants permission to delete a recording configuration for the specified ARN

Recording-Configuration*

aws:ResourceTag/${TagKey}

Write

DeleteStage

Grants permission to delete the stage for a specified ARN

Stage*

aws:ResourceTag/${TagKey}

Write

DeleteStorageConfiguration

Grants permission to delete an storage configuration for the specified ARN

Storage-Configuration*

aws:ResourceTag/${TagKey}

Write

DeleteStreamKey

Grants permission to delete the stream key for a specified ARN

Stream-Key*

aws:ResourceTag/${TagKey}

Write

DisconnectParticipant

Grants permission to disconnect a participant from for the specified stage ARN

Stage*

aws:ResourceTag/${TagKey}

Write

GetAdConfiguration

Grants permission to get the ad configuration for the specified ARN

Ad-Configuration*

aws:ResourceTag/${TagKey}

Read

GetChannel

Grants permission to get the channel configuration for a specified channel ARN

Channel*

aws:ResourceTag/${TagKey}

Read

GetComposition

Grants permission to get the composition for the specified ARN

Composition*

aws:ResourceTag/${TagKey}

Read

GetEncoderConfiguration

Grants permission to get the encoder configuration for the specified ARN

Encoder-Configuration*

aws:ResourceTag/${TagKey}

Read

GetIngestConfiguration

Grants permission to get the ingest configuration for the specified ARN

Ingest-Configuration*

aws:ResourceTag/${TagKey}

Read

GetParticipant

Grants permission to get participant information for a specified stage ARN, session, and participant

Stage*

aws:ResourceTag/${TagKey}

Read

GetPlaybackKeyPair

Grants permission to get the playback keypair information for a specified ARN

Playback-Key-Pair*

aws:ResourceTag/${TagKey}

Read

GetPlaybackRestrictionPolicy

Grants permission to get the playback restriction policy for a specified ARN

Playback-Restriction-Policy*

aws:ResourceTag/${TagKey}

Read

GetPublicKey

Grants permission to get the public key for the specified ARN

Public-Key*

aws:ResourceTag/${TagKey}

Read

GetRecordingConfiguration

Grants permission to get the recording configuration for the specified ARN

Recording-Configuration*

aws:ResourceTag/${TagKey}

Read

GetStage

Grants permission to get stage information for a specified ARN

Stage*

aws:ResourceTag/${TagKey}

Read

GetStageSession

Grants permission to get stage session information for a specified stage ARN and session

Stage*

aws:ResourceTag/${TagKey}

Read

GetStorageConfiguration

Grants permission to get the storage configuration for the specified ARN

Storage-Configuration*

aws:ResourceTag/${TagKey}

Read

GetStream

Grants permission to get information about the active (live) stream on a specified channel

Channel*

aws:ResourceTag/${TagKey}

Read

GetStreamKey

Grants permission to get stream-key information for a specified ARN

Stream-Key*

aws:ResourceTag/${TagKey}

Read

GetStreamSession

Grants permission to get information about the stream session on a specified channel

Channel*

aws:ResourceTag/${TagKey}

Read

ImportPlaybackKeyPair

Grants permission to import the public key

Playback-Key-Pair*

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Write

ImportPublicKey

Grants permission to import a public key

Public-Key*

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Write

InsertAdBreak

Grants permission to request an ad insertion on a channel using an associated ad configuration

Channel*

aws:ResourceTag/${TagKey}

Write

ListAdConfigurations

Grants permission to get summary information about ad configurations

List

ListChannels

Grants permission to get summary information about channels

Channel*

aws:ResourceTag/${TagKey}

List

ListCompositions

Grants permission to get summary information about compositions

Encoder-Configuration

aws:ResourceTag/${TagKey}

List

Stage

aws:ResourceTag/${TagKey}

ListEncoderConfigurations

Grants permission to get summary information about encoder configurations

List

ListIngestConfigurations

Grants permission to get summary information about ingest configurations

List

ListParticipantEvents

Grants permission to list participant events for a specified stage ARN, session, and participant

Stage*

aws:ResourceTag/${TagKey}

List

ListParticipantReplicas

Grants permission to get summary information about participant replicas

Stage*

aws:ResourceTag/${TagKey}

List

ListParticipants

Grants permission to list participants for a specified stage ARN and session

Stage*

aws:ResourceTag/${TagKey}

List

ListPlaybackKeyPairs

Grants permission to get summary information about playback key pairs

Playback-Key-Pair*

aws:ResourceTag/${TagKey}

List

ListPlaybackRestrictionPolicies

Grants permission to get summary information about playback restriction policies

List

ListPublicKeys

Grants permission to get summary information about public keys

List

ListRecordingConfigurations

Grants permission to get summary information about recording configurations

Recording-Configuration*

aws:ResourceTag/${TagKey}

List

ListStageSessions

Grants permission to list stage sessions for a specified stage ARN

Stage*

aws:ResourceTag/${TagKey}

List

ListStages

Grants permission to get summary information about stages

Stage*

aws:ResourceTag/${TagKey}

List

ListStorageConfigurations

Grants permission to get summary information about storage configurations

List

ListStreamKeys

Grants permission to get summary information about stream keys

Channel*

aws:ResourceTag/${TagKey}

List

Stream-Key*

aws:ResourceTag/${TagKey}

ListStreamSessions

Grants permission to get summary information about streams sessions on a specified channel

Channel*

aws:ResourceTag/${TagKey}

List

ListStreams

Grants permission to get summary information about live streams

Channel*

aws:ResourceTag/${TagKey}

List

ListTagsForResource

Grants permission to get information about the tags for a specified ARN

Ad-Configuration

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Read

Channel

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Composition

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Encoder-Configuration

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Ingest-Configuration

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Playback-Key-Pair

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Playback-Restriction-Policy

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Public-Key

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Recording-Configuration

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Stage

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Storage-Configuration

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Stream-Key

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

PutMetadata

Grants permission to insert metadata into an RTMP stream for a specified channel

Channel*

aws:ResourceTag/${TagKey}

Write

StartComposition

Grants permission to start a new composition

Channel

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Write

Encoder-Configuration*

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Stage*

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Storage-Configuration

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

StartParticipantReplication

Grants permission to start a new participant replication

Stage*

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Write

StartViewerSessionRevocation

Grants permission to start the process of revoking the viewer session associated with a specified channel ARN and viewer ID

Channel*

aws:ResourceTag/${TagKey}

Write

StopComposition

Grants permission to stop the composition for the specified ARN

Composition*

aws:ResourceTag/${TagKey}

Write

StopParticipantReplication

Grants permission to stop the participant replication for the specified ARN

Stage*

aws:ResourceTag/${TagKey}

Write

StopStream

Grants permission to disconnect a streamer on a specified channel

Channel*

aws:ResourceTag/${TagKey}

Write

TagResource

Grants permission to add or update tags for a resource with a specified ARN

Ad-Configuration

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Tagging, Write

Channel

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Composition

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Encoder-Configuration

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Ingest-Configuration

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Playback-Key-Pair

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Playback-Restriction-Policy

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Public-Key

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Recording-Configuration

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Stage

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Storage-Configuration

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Stream-Key

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

UntagResource

Grants permission to remove tags for a resource with a specified ARN

Ad-Configuration

aws:ResourceTag/${TagKey}

aws:TagKeys

Tagging, Write

Channel

aws:ResourceTag/${TagKey}

aws:TagKeys

Composition

aws:ResourceTag/${TagKey}

aws:TagKeys

Encoder-Configuration

aws:ResourceTag/${TagKey}

aws:TagKeys

Ingest-Configuration

aws:ResourceTag/${TagKey}

aws:TagKeys

Playback-Key-Pair

aws:ResourceTag/${TagKey}

aws:TagKeys

Playback-Restriction-Policy

aws:ResourceTag/${TagKey}

aws:TagKeys

Public-Key

aws:ResourceTag/${TagKey}

aws:TagKeys

Recording-Configuration

aws:ResourceTag/${TagKey}

aws:TagKeys

Stage

aws:ResourceTag/${TagKey}

aws:TagKeys

Storage-Configuration

aws:ResourceTag/${TagKey}

aws:TagKeys

Stream-Key

aws:ResourceTag/${TagKey}

aws:TagKeys

UpdateAdConfiguration

Grants permission to update an ad configuration

Write

UpdateChannel

Grants permission to update a channel's configuration

Channel*

aws:ResourceTag/${TagKey}

Write

UpdateIngestConfiguration

Grants permission to update ingest configuration for a specified ARN

Ingest-Configuration*

aws:ResourceTag/${TagKey}

Write

UpdatePlaybackRestrictionPolicy

Grants permission to update a playback restriction policy for a specified ARN

Playback-Restriction-Policy*

aws:ResourceTag/${TagKey}

Write

UpdateStage

Grants permission to update a stage's configuration

Stage*

aws:ResourceTag/${TagKey}

Write

Resource types defined by Amazon Interactive Video Service

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types ARN Condition keys

Ad-Configuration

arn:${Partition}:ivs:${Region}:${Account}:ad-configuration/${ResourceId}

aws:ResourceTag/${TagKey}

Channel

arn:${Partition}:ivs:${Region}:${Account}:channel/${ResourceId}

aws:ResourceTag/${TagKey}

Composition

arn:${Partition}:ivs:${Region}:${Account}:composition/${ResourceId}

aws:ResourceTag/${TagKey}

Encoder-Configuration

arn:${Partition}:ivs:${Region}:${Account}:encoder-configuration/${ResourceId}

aws:ResourceTag/${TagKey}

Ingest-Configuration

arn:${Partition}:ivs:${Region}:${Account}:ingest-configuration/${ResourceId}

aws:ResourceTag/${TagKey}

Playback-Key-Pair

arn:${Partition}:ivs:${Region}:${Account}:playback-key/${ResourceId}

aws:ResourceTag/${TagKey}

Playback-Restriction-Policy

arn:${Partition}:ivs:${Region}:${Account}:playback-restriction-policy/${ResourceId}

aws:ResourceTag/${TagKey}

Public-Key

arn:${Partition}:ivs:${Region}:${Account}:public-key/${ResourceId}

aws:ResourceTag/${TagKey}

Recording-Configuration

arn:${Partition}:ivs:${Region}:${Account}:recording-configuration/${ResourceId}

aws:ResourceTag/${TagKey}

Stage

arn:${Partition}:ivs:${Region}:${Account}:stage/${ResourceId}

aws:ResourceTag/${TagKey}

Storage-Configuration

arn:${Partition}:ivs:${Region}:${Account}:storage-configuration/${ResourceId}

aws:ResourceTag/${TagKey}

Stream-Key

arn:${Partition}:ivs:${Region}:${Account}:stream-key/${ResourceId}

aws:ResourceTag/${TagKey}

Condition keys for Amazon Interactive Video Service

Amazon Interactive Video Service defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys Description Type

aws:RequestTag/${TagKey}

Filters access by the tags associated with the request

String

aws:ResourceTag/${TagKey}

Filters access by the tags associated with the resource

String

aws:TagKeys

Filters access by the tag keys that are passed in the request

ArrayOfString