Actions, resources, and condition keys for AWS Transform custom
AWS Transform custom (service prefix: transform-custom) provides the following
service-specific operations, resources, actions, and condition keys for use in IAM permission
policies.
References:
-
Learn how to configure this service.
-
View a list of the API operations available for this service.
-
Learn how to secure this service and its resources by using IAM permission policies.
-
View the programmatic service authorization reference
for this service.
Topics
Actions defined by AWS Transform custom
You can specify the following actions in the Action element of an IAM
policy statement. Use policies to grant permissions to perform an operation in AWS. When
you use an action in a policy, you usually allow or deny access to the API operation or CLI
command with the same name. However, in some cases, a single action controls access to more
than one operation. Alternatively, some operations require several different actions.
| Actions | Description | Resource types (*required) | Condition keys | Access level |
|---|---|---|---|---|
Grants permission to invoke BatchCreateFindings on AWS Transform custom |
Write |
|||
Grants permission to invoke BatchUpdateFindings on AWS Transform custom |
Write |
|||
Grants permission to invoke CompleteTransformationPackageUpload on AWS Transform custom |
Write |
|||
Grants permission to invoke ConverseStream on AWS Transform custom |
Write |
|||
Grants permission to invoke CreateAnalysis on AWS Transform custom |
Write |
|||
Grants permission to invoke CreateCampaign on AWS Transform custom |
Write |
|||
Grants permission to invoke CreateRemediation on AWS Transform custom |
Write |
|||
Grants permission to invoke CreateRepository on AWS Transform custom |
Write |
|||
Grants permission to invoke CreateSource on AWS Transform custom |
Write |
|||
Grants permission to invoke CreateTransformationPackageUrl on AWS Transform custom |
Write |
|||
Grants permission to invoke DeleteAnalysis on AWS Transform custom |
Write |
|||
Grants permission to invoke DeleteCampaign on AWS Transform custom |
Write |
|||
Grants permission to invoke DeleteFinding on AWS Transform custom |
Write |
|||
Grants permission to invoke DeleteKnowledgeItem on AWS Transform custom |
Write |
|||
Grants permission to invoke DeleteRemediation on AWS Transform custom |
Write |
|||
Grants permission to invoke DeleteRepository on AWS Transform custom |
Write |
|||
Grants permission to invoke DeleteSource on AWS Transform custom |
Write |
|||
Grants permission to invoke DeleteTransformationPackage on AWS Transform custom |
Write |
|||
Grants permission to invoke ExecuteTransformation on AWS Transform custom |
Write |
|||
Grants permission to invoke GetAnalysis on AWS Transform custom |
Read |
|||
Grants permission to invoke GetCampaign on AWS Transform custom |
Read |
|||
Grants permission to invoke GetFinding on AWS Transform custom |
Read |
|||
Grants permission to invoke GetFindingGroups on AWS Transform custom |
Read |
|||
Grants permission to invoke GetKnowledgeItem on AWS Transform custom |
Read |
|||
Grants permission to invoke GetRemediation on AWS Transform custom |
Read |
|||
Grants permission to invoke GetRepository on AWS Transform custom |
Read |
|||
Grants permission to invoke GetSource on AWS Transform custom |
Read |
|||
Grants permission to invoke GetTransformationPackageUrl on AWS Transform custom |
Read |
|||
Grants permission to invoke ListAnalyses on AWS Transform custom |
List |
|||
Grants permission to invoke ListCampaignRepositories on AWS Transform custom |
Read |
|||
Grants permission to invoke ListCampaign on AWS Transform custom |
List |
|||
Grants permission to invoke ListFindings on AWS Transform custom |
List |
|||
Grants permission to invoke ListKnowledgeItems on AWS Transform custom |
List |
|||
Grants permission to invoke ListRemediations on AWS Transform custom |
List |
|||
Grants permission to invoke ListRepositories on AWS Transform custom |
List |
|||
Grants permission to invoke ListSources on AWS Transform custom |
List |
|||
Grants permission to invoke ListTagsForResource on AWS Transform custom |
Read |
|||
Grants permission to invoke ListTransformationPackageMetadata on AWS Transform custom |
List |
|||
Grants permission to list active shares of a Transformation Package |
Read |
|||
Grants permission to send a CLI telemetry event |
Write |
|||
Grants permission to share a Transformation Package with another AWS account or AWS Organization |
Write |
|||
Grants permission to invoke TagResource on AWS Transform custom |
Tagging, Write |
|||
Grants permission to revoke an existing share of a Transformation Package |
Write |
|||
Grants permission to invoke UntagResource on AWS Transform custom |
Tagging, Write |
|||
Grants permission to invoke UpdateAnalysis on AWS Transform custom |
Write |
|||
Grants permission to invoke UpdateCampaign on AWS Transform custom |
Write |
|||
Grants permission to invoke UpdateCampaignRepositories on AWS Transform custom |
Write |
|||
Grants permission to invoke UpdateKnowledgeItemConfiguration on AWS Transform custom |
Write |
|||
Grants permission to invoke UpdateKnowledgeItemStatus on AWS Transform custom |
Write |
|||
Grants permission to invoke UpdateRemediation on AWS Transform custom |
Write |
|||
Grants permission to invoke UpdateRepository on AWS Transform custom |
Write |
|||
Grants permission to invoke UpdateSource on AWS Transform custom |
Write |
Resource types defined by AWS Transform custom
The following resource types are defined by this service and can be used in the
Resource element of IAM permission policy statements.
| Resource types | ARN | Condition keys |
|---|---|---|
arn:${Partition}:transform-custom:${Region}:${Account}:analysis/${AnalysisId} |
||
arn:${Partition}:transform-custom:${Region}:${Account}:campaign/${Name} |
||
arn:${Partition}:transform-custom:${Region}:${Account}:finding/${FindingId} |
||
arn:${Partition}:transform-custom:${Region}:${Account}:package/${TransformationPackageName}/knowledge-item/${Id} |
||
arn:${Partition}:transform-custom:${Region}:${Account}:package/${Name} |
||
arn:${Partition}:transform-custom:${Region}:${Account}:remediation/${RemediationId} |
||
arn:${Partition}:transform-custom:${Region}:${Account}:repository/${RepositoryId} |
||
arn:${Partition}:transform-custom:${Region}:${Account}:source/${Name} |
Condition keys for AWS Transform custom
AWS Transform custom defines the following condition keys that can be used in the
Condition element of an IAM policy.
| Condition keys | Description | Type |
|---|---|---|
Filters access by the tags that are passed in the request |
String |
|
Filters access by the tags associated with the resource |
String |
|
Filters access by the tag keys that are passed in the request |
ArrayOfString |
