Operations Actions Permission-only actions Resource types Condition keys

Actions, resources, and condition keys for AWS CodeBuild

AWS CodeBuild (service prefix: codebuild) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by AWS CodeBuild
Actions defined by AWS CodeBuild
Permission-only actions for AWS CodeBuild
Resource types defined by AWS CodeBuild
Condition keys for AWS CodeBuild

API operations defined by AWS CodeBuild

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Condition key	Possible value(s)	Access level
BatchDeleteBuilds	codebuild:BatchDeleteBuilds			Write
BatchGetBuildBatches	codebuild:BatchGetBuildBatches			Read
BatchGetBuilds	codebuild:BatchGetBuilds			Read
BatchGetCommandExecutions	codebuild:BatchGetCommandExecutions			Read
BatchGetFleets	codebuild:BatchGetFleets			Read
BatchGetProjects	codebuild:BatchGetProjects			Read
BatchGetReportGroups	codebuild:BatchGetReportGroups			Read
BatchGetReports	codebuild:BatchGetReports			Read
BatchGetSandboxes	codebuild:BatchGetSandboxes			Read
CreateFleet	codebuild:CreateFleet			Write
CreateFleet	iam:PassRole			Write
CreateProject	codebuild:CreateProject			Write
CreateProject	iam:PassRole	iam:PassedToService	codebuild.amazonaws.com	Write
CreateReportGroup	codebuild:CreateReportGroup			Write
CreateWebhook	codebuild:CreateWebhook			Write
DeleteBuildBatch	codebuild:DeleteBuildBatch			Write
DeleteFleet	codebuild:DeleteFleet			Write
DeleteProject	codebuild:DeleteProject			Write
DeleteReport	codebuild:DeleteReport			Write
DeleteReportGroup	codebuild:DeleteReportGroup			Write
DeleteResourcePolicy	codebuild:DeleteResourcePolicy			Permissions management, Write
DeleteSourceCredentials	codebuild:DeleteSourceCredentials			Write
DeleteWebhook	codebuild:DeleteWebhook			Write
DescribeCodeCoverages	codebuild:DescribeCodeCoverages			Read
DescribeTestCases	codebuild:DescribeTestCases			Read
GetReportGroupTrend	codebuild:GetReportGroupTrend			Read
GetResourcePolicy	codebuild:GetResourcePolicy			Read
ImportSourceCredentials	codebuild:ImportSourceCredentials			Write
InvalidateProjectCache	codebuild:InvalidateProjectCache			Write
ListBuildBatches	codebuild:ListBuildBatches			List
ListBuildBatchesForProject	codebuild:ListBuildBatchesForProject			List
ListBuilds	codebuild:ListBuilds			List
ListBuildsForProject	codebuild:ListBuildsForProject			List
ListCommandExecutionsForSandbox	codebuild:ListCommandExecutionsForSandbox			List
ListCuratedEnvironmentImages	codebuild:ListCuratedEnvironmentImages			List
ListFleets	codebuild:ListFleets			List
ListProjects	codebuild:ListProjects			List
ListReportGroups	codebuild:ListReportGroups			List
ListReports	codebuild:ListReports			List
ListReportsForReportGroup	codebuild:ListReportsForReportGroup			List
ListSandboxes	codebuild:ListSandboxes			List
ListSandboxesForProject	codebuild:ListSandboxesForProject			List
ListSharedProjects	codebuild:ListSharedProjects			List
ListSharedReportGroups