Operations Actions Resource types Condition keys

Actions, resources, and condition keys for AWS Interconnect

AWS Interconnect (service prefix: interconnect) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by AWS Interconnect
Actions defined by AWS Interconnect
Resource types defined by AWS Interconnect
Condition keys for AWS Interconnect

API operations defined by AWS Interconnect

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Access level
AcceptConnectionProposal	interconnect:AcceptConnectionProposal	Write
AcceptConnectionProposal	interconnect:TagResource	Tagging, Write
CreateConnection	interconnect:CreateConnection	Write
CreateConnection	interconnect:TagResource	Tagging, Write
DeleteConnection	interconnect:DeleteConnection	Write
DescribeConnectionProposal	interconnect:DescribeConnectionProposal	Read
GetConnection	interconnect:GetConnection	Read
GetEnvironment	interconnect:GetEnvironment	Read
ListAttachPoints	interconnect:ListAttachPoints	Read
ListConnections	interconnect:ListConnections	List
ListEnvironments	interconnect:ListEnvironments	List
ListTagsForResource	interconnect:ListTagsForResource	Read
TagResource	interconnect:TagResource	Tagging, Write
UntagResource	interconnect:UntagResource	Tagging, Write
UpdateConnection	interconnect:UpdateConnection	Write

Actions defined by AWS Interconnect

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
AcceptConnectionProposal	Grants permission to accept a connection proposal generated elsewhere		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateConnection	Grants permission to create a connection	connection*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
DeleteConnection	Grants permission to delete an existing connection	connection*	aws:ResourceTag/${TagKey}	Write
DescribeConnectionProposal	Grants permission to describe a connection proposal			Read
GetConnection	Grants permission to describe a connection	connection*	aws:ResourceTag/${TagKey}	Read
GetEnvironment	Grants permission to describe an environment	environment*		Read
ListAttachPoints	Grants permission to list available attach points			Read
ListConnections	Grants permission to list connections			List
ListEnvironments	Grants permission to list available environments			List
ListTagsForResource	Grants permission to list tags on a resource			Read
TagResource	Grants permission to apply tags to a resource	connection*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
UntagResource	Grants permission to remove tags from a resource	connection*	aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
UpdateConnection	Grants permission to update an existing connection	connection*	aws:ResourceTag/${TagKey}	Write

Resource types defined by AWS Interconnect

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
connection	arn:${Partition}:interconnect:${Region}:${Account}:connection/${Id}	aws:ResourceTag/${TagKey}
environment	arn:${Partition}:interconnect:${Region}:${Account}:environment/${Id}

Condition keys for AWS Interconnect

AWS Interconnect defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys	Description	Type
aws:RequestTag/${TagKey}	Filters access by a tag key and value pair that is allowed in the request	String
aws:ResourceTag/${TagKey}	Filters access by a tag key and value pair of a resource	String
aws:TagKeys	Filters access by a list of tag keys that are allowed in the request	ArrayOfString

Warning Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Document Conventions

AWS Import Export Disk Service (importexport)

AWS Invoicing Service (invoicing)