Actions, resources, and condition keys for AWS IoT Analytics

AWS IoT Analytics (service prefix: iotanalytics) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

Actions defined by AWS IoT Analytics
Resource types defined by AWS IoT Analytics
Condition keys for AWS IoT Analytics

Actions defined by AWS IoT Analytics

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
BatchPutMessage	Puts a batch of messages into the specified channel	channel*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Write
CancelPipelineReprocessing	Cancels reprocessing for the specified pipeline	pipeline*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Write
CreateChannel	Creates a channel	channel*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Write
CreateDataset	Creates a dataset	dataset*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Write
CreateDatasetContent	Generates content from the specified dataset (by executing the dataset actions)	dataset*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Write
CreateDatastore	Creates a datastore	datastore*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Write
CreatePipeline	Creates a pipeline	pipeline*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Write
DeleteChannel	Deletes the specified channel	channel*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Write
DeleteDataset	Deletes the specified dataset	dataset*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Write
DeleteDatasetContent	Deletes the content of the specified dataset	dataset*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Write
DeleteDatastore	Deletes the specified datastore	datastore*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Write
DeletePipeline	Deletes the specified pipeline	pipeline*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Write
DescribeChannel	Describes the specified channel	channel*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Read
DescribeDataset	Describes the specified dataset	dataset*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Read
DescribeDatastore	Describes the specified datastore	datastore*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Read
DescribeLoggingOptions	Describes logging options for the the account			Read
DescribePipeline	Describes the specified pipeline	pipeline*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Read
GetDatasetContent	Gets the content of the specified dataset	dataset*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Read
ListChannels	Lists the channels for the account			List
ListDatasetContents	Lists information about dataset contents that have been created	dataset*	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	List
ListDatasets	Lists the datasets for the account			List
ListDatastores	Lists the datastores for the account			List
ListPipelines	Lists the pipelines for the account			List
ListTagsForResource	Lists the tags (metadata) which you have assigned to the resource	channel	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}	Read
		dataset	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}
		datastore	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}
		pipeline	aws:RequestTag/${TagKey} aws:TagKeys iotanalytics:ResourceTag/${TagKey}
PutLoggingOptions	Puts logging options for the the account