Operations Actions Resource types Condition keys

Actions, resources, and condition keys for AWS Artifact

AWS Artifact (service prefix: artifact) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

API operations defined by AWS Artifact

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Access level
CreateComplianceInquiry	artifact:CreateComplianceInquiry	Write
CreateComplianceInquiry	artifact:TagResource	Tagging, Write
ExportComplianceInquiry	artifact:ExportComplianceInquiry	Read
GetAccountSettings	artifact:GetAccountSettings	Read
GetComplianceInquiryMetadata	artifact:GetComplianceInquiryMetadata	Read
GetReport	artifact:GetReport	Read
GetReportMetadata	artifact:GetReportMetadata	Read
GetTermForReport	artifact:GetTermForReport	Read
ListComplianceInquiries	artifact:ListComplianceInquiries	List
ListComplianceInquiryQueries	artifact:ListComplianceInquiryQueries	List
ListCustomerAgreements	artifact:ListCustomerAgreements	List
ListReportVersions	artifact:ListReportVersions	List
ListReports	artifact:ListReports	List
ListTagsForResource	artifact:ListTagsForResource	Read
PutAccountSettings	artifact:PutAccountSettings	Write
PutComplianceInquiryFeedback	artifact:PutComplianceInquiryFeedback	Write
TagResource	artifact:TagResource	Tagging, Write
UntagResource	artifact:UntagResource	Tagging, Write

Actions defined by AWS Artifact

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
AcceptAgreement	Grants permission to accept an AWS agreement that has not yet been accepted by the customer account	agreement*		Write
AcceptNdaForAgreement	Grants permission to accept the terms of an NDA Document for a given agreement resource	agreement*		Write
CreateComplianceInquiry	Grants permission to create a compliance inquiry	compliance-inquiry*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
ExportComplianceInquiry	Grants permission to export a compliance inquiry	compliance-inquiry*	aws:ResourceTag/${TagKey}	Read
GetAccountSettings	Grants permission to get the account settings for Artifact			Read
GetAgreement	Grants permission to get an AWS agreement that has not yet been accepted by the customer account	agreement*		Read
GetComplianceInquiryMetadata	Grants permission to get metadata associated with a compliance inquiry	compliance-inquiry*	aws:ResourceTag/${TagKey}	Read
GetCustomerAgreement	Grants permission to get an AWS agreement that has been accepted by the customer account	customer-agreement*		Read
GetNdaForAgreement	Grants permission to retrieve the NDA Document for a given agreement resource	agreement*		Read
GetReport	Grants permission to download a report	report*	artifact:ReportCategory artifact:ReportSeries	Read
GetReportMetadata	Grants permission to download metadata associated with a report	report*	artifact:ReportCategory artifact:ReportSeries	Read
GetTermForReport	Grants permission to download a term associated with a report	report*	artifact:ReportCategory artifact:ReportSeries	Read
ListAgreements	Grants permission to list AWS agreements			List
ListComplianceInquiries	Grants permission to list compliance inquiries submitted by the customer account			List