View a markdown version of this page

Actions, resources, and condition keys for AWS App Mesh - Service Authorization Reference

Actions, resources, and condition keys for AWS App Mesh

AWS App Mesh (service prefix: appmesh) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

API operations defined by AWS App Mesh

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation IAM action Condition key Possible value(s) Access level

CreateGatewayRoute

appmesh:CreateGatewayRoute

Write

appmesh:TagResource

Tagging, Write

CreateMesh

appmesh:CreateMesh

Write

appmesh:TagResource

Tagging, Write

CreateRoute

appmesh:CreateRoute

Write

appmesh:TagResource

Tagging, Write

CreateVirtualGateway

appmesh:CreateVirtualGateway

Write

appmesh:TagResource

Tagging, Write

CreateVirtualNode

appmesh:CreateVirtualNode

Write

appmesh:TagResource

Tagging, Write

iam:PassRole

iam:PassedToService

appmesh.amazonaws.com

Write

CreateVirtualRouter

appmesh:CreateVirtualRouter

Write

appmesh:TagResource

Tagging, Write

CreateVirtualService

appmesh:CreateVirtualService

Write

appmesh:TagResource

Tagging, Write

DeleteGatewayRoute

appmesh:DeleteGatewayRoute

Write