Operations Actions Resource types Condition keys

Actions, resources, and condition keys for AWS End User Messaging Social

AWS End User Messaging Social (service prefix: social-messaging) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by AWS End User Messaging Social
Actions defined by AWS End User Messaging Social
Resource types defined by AWS End User Messaging Social
Condition keys for AWS End User Messaging Social

API operations defined by AWS End User Messaging Social

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Condition key	Possible value(s)	Access level
AssociateWhatsAppBusinessAccount	social-messaging:AssociateWhatsAppBusinessAccount			Write
	social-messaging:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	social-messaging.amazonaws.com	Write
CreateWhatsAppFlow	social-messaging:CreateWhatsAppFlow			Write
CreateWhatsAppMessageTemplate	social-messaging:CreateWhatsAppMessageTemplate			Write
CreateWhatsAppMessageTemplateFromLibrary	social-messaging:CreateWhatsAppMessageTemplateFromLibrary			Write
CreateWhatsAppMessageTemplateMedia	social-messaging:CreateWhatsAppMessageTemplateMedia			Write
DeleteWhatsAppFlow	social-messaging:DeleteWhatsAppFlow			Write
DeleteWhatsAppMessageMedia	social-messaging:DeleteWhatsAppMessageMedia			Write
DeleteWhatsAppMessageTemplate	social-messaging:DeleteWhatsAppMessageTemplate			Write
DeprecateWhatsAppFlow	social-messaging:DeprecateWhatsAppFlow			Write
DisassociateWhatsAppBusinessAccount	social-messaging:DisassociateWhatsAppBusinessAccount			Write
GetLinkedWhatsAppBusinessAccount	social-messaging:GetLinkedWhatsAppBusinessAccount			Read
GetLinkedWhatsAppBusinessAccountPhoneNumber	social-messaging:GetLinkedWhatsAppBusinessAccountPhoneNumber			Read
GetWhatsAppFlow	social-messaging:GetWhatsAppFlow			Read
GetWhatsAppFlowPreview	social-messaging:GetWhatsAppFlowPreview			Read
GetWhatsAppMessageMedia	social-messaging:GetWhatsAppMessageMedia			Write
GetWhatsAppMessageTemplate	social-messaging:GetWhatsAppMessageTemplate			Read
ListLinkedWhatsAppBusinessAccounts	social-messaging:ListLinkedWhatsAppBusinessAccounts			List
ListTagsForResource	social-messaging:ListTagsForResource			Read
ListWhatsAppFlowAssets	social-messaging:ListWhatsAppFlowAssets			List
ListWhatsAppFlows	social-messaging:ListWhatsAppFlows			List
ListWhatsAppMessageTemplates	social-messaging:ListWhatsAppMessageTemplates			List
ListWhatsAppTemplateLibrary	social-messaging:ListWhatsAppTemplateLibrary			List
PostWhatsAppMessageMedia	social-messaging:PostWhatsAppMessageMedia			Write
PublishWhatsAppFlow	social-messaging:PublishWhatsAppFlow			Write
PutWhatsAppBusinessAccountEventDestinations	social-messaging:PutWhatsAppBusinessAccountEventDestinations			Write
PutWhatsAppBusinessAccountEventDestinations	iam:PassRole	iam:PassedToService	social-messaging.amazonaws.com	Write
SendWhatsAppMessage	social-messaging:SendWhatsAppMessage			Write
TagResource	social-messaging:TagResource			Tagging, Write
UntagResource	social-messaging:UntagResource			Tagging, Write
UpdateWhatsAppFlow	social-messaging:UpdateWhatsAppFlow			Write
UpdateWhatsAppFlowAssets	social-messaging:UpdateWhatsAppFlowAssets			Write
UpdateWhatsAppMessageTemplate	social-messaging:UpdateWhatsAppMessageTemplate			Write

Actions defined by AWS End User Messaging Social

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
AssociateWhatsAppBusinessAccount	Grants permission to associate a WhatsApp Business Account with your AWS account		aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateWhatsAppFlow	Grants permission to create a new WhatsApp Flow	waba*	aws:ResourceTag/${TagKey}	Write
CreateWhatsAppMessageTemplate	Grants permission to create a WhatsApp message template	waba*	aws:ResourceTag/${TagKey}	Write
CreateWhatsAppMessageTemplateFromLibrary	Grants permission to create a WhatsApp message template from Meta's template library	waba*	aws:ResourceTag/${TagKey}	Write
CreateWhatsAppMessageTemplateMedia	Grants permission to create media for WhatsApp message templates	waba*	aws:ResourceTag/${TagKey}	Write
DeleteWhatsAppFlow	Grants permission to delete a WhatsApp Flow	waba*	aws:ResourceTag/${TagKey}	Write
DeleteWhatsAppMessageMedia	Grants permission to delete a media object from WhatsApp	phone-number-id*	aws:ResourceTag/${TagKey}	Write
DeleteWhatsAppMessageTemplate	Grants permission to delete a WhatsApp message template	waba*	aws:ResourceTag/${TagKey}	Write
DeprecateWhatsAppFlow	Grants permission to deprecate a published WhatsApp Flow	waba*	aws:ResourceTag/${TagKey}	Write
DisassociateWhatsAppBusinessAccount	Grants permission to disassociate a WhatsApp Business Account from your AWS account	waba*	aws:ResourceTag/${TagKey}	Write
GetLinkedWhatsAppBusinessAccount	Grants permission to view the details of a WhatsApp Business Account	waba*	aws:ResourceTag/${TagKey}	Read
GetLinkedWhatsAppBusinessAccountPhoneNumber	Grants permission to view the details of a phone number	phone-number-id*	aws:ResourceTag/${TagKey}	Read
GetWhatsAppFlow	Grants permission to retrieve the metadata and status of a WhatsApp Flow	waba*	aws:ResourceTag/${TagKey}	Read
GetWhatsAppFlowPreview	Grants permission to generate a web preview URL for testing a WhatsApp Flow	waba*	aws:ResourceTag/${TagKey}	Read
GetWhatsAppMessageMedia	Grants permission to get a media object from WhatsApp	phone-number-id*	aws:ResourceTag/${TagKey}	Write
GetWhatsAppMessageTemplate	Grants permission to get details of a WhatsApp message template	waba*	aws:ResourceTag/${TagKey}	Read
ListLinkedWhatsAppBusinessAccounts	Grants permission to view all of your WhatsApp Business Accounts			List
ListTagsForResource	Grants permission to list tags for a resource	phone-number-id	aws:ResourceTag/${TagKey}	Read
ListTagsForResource	Grants permission to list tags for a resource	waba	aws:ResourceTag/${TagKey}	Read
ListWhatsAppFlowAssets	Grants permission to list the assets of a WhatsApp Flow	waba*	aws:ResourceTag/${TagKey}	List
ListWhatsAppFlows	Grants permission to list all WhatsApp Flows for a WhatsApp Business Account	waba*	aws:ResourceTag/${TagKey}	List
ListWhatsAppMessageTemplates	Grants permission to list WhatsApp message templates	waba*	aws:ResourceTag/${TagKey}	List
ListWhatsAppTemplateLibrary	Grants permission to list available templates from Meta's template library	waba*	aws:ResourceTag/${TagKey}	List
PostWhatsAppMessageMedia	Grants permission to upload a media object to WhatsApp	phone-number-id*	aws:ResourceTag/${TagKey}	Write
PublishWhatsAppFlow	Grants permission to publish a WhatsApp Flow	waba*	aws:ResourceTag/${TagKey}	Write
PutWhatsAppBusinessAccountEventDestinations	Grants permission to update a WhatsApp Business Accounts event destination	waba*	aws:ResourceTag/${TagKey}	Write
SendWhatsAppMessage	Grants permission to send a message through WhatsApp	phone-number-id*	aws:ResourceTag/${TagKey}	Write
TagResource	Grants permission to add a tag to a resource	phone-number-id	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
TagResource	Grants permission to add a tag to a resource	waba	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
UntagResource	Grants permission to remove a tag from a resource	phone-number-id	aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
UntagResource	Grants permission to remove a tag from a resource	waba	aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
UpdateWhatsAppFlow	Grants permission to update the metadata of a WhatsApp Flow	waba*	aws:ResourceTag/${TagKey}	Write
UpdateWhatsAppFlowAssets	Grants permission to update the Flow JSON definition of a WhatsApp Flow	waba*	aws:ResourceTag/${TagKey}	Write
UpdateWhatsAppMessageTemplate	Grants permission to update a WhatsApp message template	waba*	aws:ResourceTag/${TagKey}	Write

Resource types defined by AWS End User Messaging Social

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
phone-number-id	arn:${Partition}:social-messaging:${Region}:${Account}:phone-number-id/${OriginationPhoneNumberId}	aws:ResourceTag/${TagKey}
waba	arn:${Partition}:social-messaging:${Region}:${Account}:waba/${WabaId}	aws:ResourceTag/${TagKey}

Condition keys for AWS End User Messaging Social

AWS End User Messaging Social defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys	Description	Type
aws:RequestTag/${TagKey}	Filters access by the tags that are passed in the request	String
aws:ResourceTag/${TagKey}	Filters access by the tags associated with the resource	String
aws:TagKeys	Filters access by the tag keys that are passed in the request	ArrayOfString

Warning Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Document Conventions

AWS End User Messaging SMS and Voice V2 (sms-voice)

AWS Entity Resolution (entityresolution)