Actions, resources, and condition keys for AWS X-Ray
AWS X-Ray (service prefix: xray) provides the following
service-specific operations, resources, actions, and condition keys for use in IAM permission
policies.
References:
-
Learn how to configure this service.
-
View a list of the API operations available for this service.
-
Learn how to secure this service and its resources by using IAM permission policies.
-
View the programmatic service authorization reference
for this service.
Topics
API operations defined by AWS X-Ray
The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.
| Operation | IAM action | Condition key | Possible value(s) | Access level |
|---|---|---|---|---|
|
BatchGetTraces |
List |
|||
|
CancelTraceRetrieval |
Read |
|||
|
CreateGroup |
Write |
|||
Tagging, Write |
||||
|
CreateSamplingRule |
Write |
|||
Tagging, Write |
||||
|
DeleteGroup |
Write |
|||
|
DeleteResourcePolicy |
Write |
|||
|
DeleteSamplingRule |
Write |
|||
|
GetEncryptionConfig |
Read |
|||
|
GetGroup |
Read |
|||
|
GetGroups |
Read |
|||
|
GetIndexingRules |
Read |
|||
|
GetInsight |
Read |
|||
|
GetInsightEvents |
Read |
|||
|
GetInsightImpactGraph |
Read |
|||
|
GetInsightSummaries |
Read |
|||
|
GetRetrievedTracesGraph |
Read |
|||
|
GetSamplingRules |
Read |
|||
|
GetSamplingStatisticSummaries |
Read |
|||
|
GetSamplingTargets |
Read |
|||
|
GetServiceGraph |
Read |
|||
|
GetTimeSeriesServiceStatistics |
Read |
|||
|
GetTraceGraph |
Read |
|||
|
GetTraceSegmentDestination |
Read |
|||
|
GetTraceSummaries |
Read |
|||
|
ListResourcePolicies |
List |
|||
|
ListRetrievedTraces |
List |
|||
|
ListTagsForResource |
List |
|||
|
PutEncryptionConfig |
Permissions management, Write |
|||
|
PutResourcePolicy |
Write |
|||
|
PutTelemetryRecords |
Write |
|||
|
PutTraceSegments |
Write |
|||
|
StartTraceRetrieval |
Read |
|||
|
TagResource |
Tagging, Write |
|||
|
UntagResource |
Tagging, Write |
|||
|
UpdateGroup |