View a markdown version of this page

Actions, resources, and condition keys for AWS Clean Rooms ML - Service Authorization Reference

Actions, resources, and condition keys for AWS Clean Rooms ML

AWS Clean Rooms ML (service prefix: cleanrooms-ml) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

API operations defined by AWS Clean Rooms ML

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation IAM action Condition key Possible value(s) Access level

CancelTrainedModel

cleanrooms-ml:CancelTrainedModel

Write

CancelTrainedModelInferenceJob

cleanrooms-ml:CancelTrainedModelInferenceJob

Write

CreateAudienceModel

cleanrooms-ml:CreateAudienceModel

Write

cleanrooms-ml:TagResource

Tagging, Write

CreateConfiguredAudienceModel

cleanrooms-ml:CreateConfiguredAudienceModel

Write

cleanrooms-ml:TagResource

Tagging, Write

iam:PassRole

iam:PassedToService

cleanrooms-ml.amazonaws.com

Write

CreateConfiguredModelAlgorithm

cleanrooms-ml:CreateConfiguredModelAlgorithm

Write

cleanrooms-ml:TagResource

Tagging, Write

iam:PassRole

iam:PassedToService

cleanrooms-ml.amazonaws.com

Write

CreateConfiguredModelAlgorithmAssociation

cleanrooms-ml:CreateConfiguredModelAlgorithmAssociation

Write

cleanrooms-ml:TagResource

Tagging, Write

CreateMLInputChannel

cleanrooms-ml:CreateMLInputChannel

Write

cleanrooms-ml:TagResource

Tagging, Write

iam:PassRole

iam:PassedToService

cleanrooms-ml.amazonaws.com

Write

CreateTrainedModel

cleanrooms-ml:CreateTrainedModel

Write

cleanrooms-ml:TagResource

Tagging, Write

CreateTrainingDataset

cleanrooms-ml:CreateTrainingDataset

Write

cleanrooms-ml:TagResource

Tagging, Write

iam:PassRole

iam:PassedToService

cleanrooms-ml.amazonaws.com

Write

DeleteAudienceGenerationJob

cleanrooms-ml:DeleteAudienceGenerationJob

Write

DeleteAudienceModel

cleanrooms-ml:DeleteAudienceModel

Write

DeleteConfiguredAudienceModel

cleanrooms-ml:DeleteConfiguredAudienceModel

Write

DeleteConfiguredAudienceModelPolicy

cleanrooms-ml:DeleteConfiguredAudienceModelPolicy

Write

DeleteConfiguredModelAlgorithm