Operations Actions Resource types Condition keys

Actions, resources, and condition keys for AWS Elemental MediaConvert

AWS Elemental MediaConvert (service prefix: mediaconvert) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by AWS Elemental MediaConvert
Actions defined by AWS Elemental MediaConvert
Resource types defined by AWS Elemental MediaConvert
Condition keys for AWS Elemental MediaConvert

API operations defined by AWS Elemental MediaConvert

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Condition key	Possible value(s)	Access level
AssociateCertificate	mediaconvert:AssociateCertificate			Write
CancelJob	mediaconvert:CancelJob			Write
CreateJob	mediaconvert:CreateJob			Write
	mediaconvert:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	mediaconvert.amazonaws.com	Write
CreateJobTemplate	mediaconvert:CreateJobTemplate			Write
CreateJobTemplate	mediaconvert:TagResource			Tagging, Write
CreatePreset	mediaconvert:CreatePreset			Write
CreatePreset	mediaconvert:TagResource			Tagging, Write
CreateQueue	mediaconvert:CreateQueue			Write
CreateQueue	mediaconvert:TagResource			Tagging, Write
CreateResourceShare	mediaconvert:CreateResourceShare			Write
DeleteJobTemplate	mediaconvert:DeleteJobTemplate			Write
DeletePolicy	mediaconvert:DeletePolicy			Write
DeletePreset	mediaconvert:DeletePreset			Write
DeleteQueue	mediaconvert:DeleteQueue			Write
DescribeEndpoints	mediaconvert:DescribeEndpoints			List
DisassociateCertificate	mediaconvert:DisassociateCertificate			Write
GetJob	mediaconvert:GetJob			Read
GetJobTemplate	mediaconvert:GetJobTemplate			Read
GetJobTemplate	mediaconvert:ListJobTemplates			List
GetPolicy	mediaconvert:GetPolicy			Read
GetPreset	mediaconvert:GetPreset			Read
GetPreset	mediaconvert:ListPresets			List
GetQueue	mediaconvert:GetQueue			Read
ListJobTemplates	mediaconvert:ListJobTemplates			List
ListJobs	mediaconvert:ListJobs			List
ListPresets	mediaconvert:ListPresets			List
ListQueues	mediaconvert:ListQueues			List
ListTagsForResource	mediaconvert:ListTagsForResource			Read
ListVersions	mediaconvert:ListVersions			List
Probe	mediaconvert:Probe			Read
PutPolicy	mediaconvert:PutPolicy			Write
SearchJobs	mediaconvert:SearchJobs			List
TagResource	mediaconvert:TagResource			Tagging, Write
UntagResource	mediaconvert:UntagResource			Tagging, Write
UpdateJobTemplate	mediaconvert:UpdateJobTemplate			Write
UpdatePreset	mediaconvert:UpdatePreset			Write
UpdateQueue	mediaconvert:UpdateQueue			Write

Actions defined by AWS Elemental MediaConvert

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
AssociateCertificate	Grants permission to associate an AWS Certificate Manager (ACM) Amazon Resource Name (ARN) with AWS Elemental MediaConvert			Write
CancelJob	Grants permission to cancel an AWS Elemental MediaConvert job that is waiting in queue	Job*	aws:ResourceTag/${TagKey}	Write
CreateJob	Grants permission to create and submit an AWS Elemental MediaConvert job	JobTemplate	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys mediaconvert:HttpInputsAllowed mediaconvert:HttpsInputsAllowed mediaconvert:S3InputsAllowed	Write