Operations Actions Resource types Condition keys

Actions, resources, and condition keys for AWS AppConfig

AWS AppConfig (service prefix: appconfig) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

API operations defined by AWS AppConfig

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	SDK client	IAM action	Condition key	Possible value(s)	Access level
CreateApplication	appconfig	appconfig:CreateApplication			Write
CreateApplication	appconfig	appconfig:TagResource			Tagging, Write
CreateConfigurationProfile	appconfig	appconfig:CreateConfigurationProfile			Write
		appconfig:TagResource			Tagging, Write
		iam:PassRole	iam:PassedToService	appconfig.amazonaws.com	Write
CreateDeploymentStrategy	appconfig	appconfig:CreateDeploymentStrategy			Write
CreateDeploymentStrategy	appconfig	appconfig:TagResource			Tagging, Write
CreateEnvironment	appconfig	appconfig:CreateEnvironment			Write
		appconfig:TagResource			Tagging, Write
		iam:PassRole	iam:PassedToService	appconfig.amazonaws.com	Write
CreateExperimentDefinition	appconfig	appconfig:CreateExperimentDefinition			Write
CreateExperimentDefinition	appconfig	appconfig:TagResource			Tagging, Write
CreateExtension	appconfig	appconfig:CreateExtension			Write
		appconfig:TagResource			Tagging, Write
		iam:PassRole	iam:PassedToService	appconfig.amazonaws.com	Write
CreateExtensionAssociation	appconfig	appconfig:CreateExtensionAssociation			Write
CreateExtensionAssociation	appconfig	appconfig:TagResource			Tagging, Write
CreateHostedConfigurationVersion	appconfig	appconfig:CreateHostedConfigurationVersion			Write
DeleteApplication	appconfig	appconfig:DeleteApplication			Write
DeleteConfigurationProfile	appconfig	appconfig:DeleteConfigurationProfile			Write
DeleteDeploymentStrategy	appconfig	appconfig:DeleteDeploymentStrategy			Write
DeleteEnvironment	appconfig	appconfig:DeleteEnvironment			Write
DeleteExperimentDefinition	appconfig	appconfig:DeleteExperimentDefinition			Write
DeleteExtension	appconfig	appconfig:DeleteExtension			Write
DeleteExtensionAssociation	appconfig	appconfig:DeleteExtensionAssociation			Write
DeleteHostedConfigurationVersion	appconfig	appconfig:DeleteHostedConfigurationVersion			Write
GetAccountSettings	appconfig	appconfig:GetAccountSettings			Read
GetApplication	appconfig	appconfig:GetApplication			Read
GetConfiguration	appconfig	appconfig:GetConfiguration			Read
GetConfigurationProfile	appconfig	appconfig:GetConfigurationProfile			Read
GetDeployment	appconfig	appconfig:GetDeployment			Read
GetDeploymentStrategy	appconfig	appconfig:GetDeploymentStrategy			Read
GetEnvironment	appconfig	appconfig:GetEnvironment			Read
GetExperimentDefinition	appconfig	appconfig:GetExperimentDefinition			Read
GetExperimentRun	appconfig	appconfig:GetExperimentRun			Read
GetExtension	appconfig	appconfig:GetExtension			Read
GetExtensionAssociation	appconfig	appconfig:GetExtensionAssociation			Read
GetHostedConfigurationVersion	appconfig	appconfig:GetHostedConfigurationVersion			Read
ListApplications	appconfig	appconfig:ListApplications			List
ListConfigurationProfiles	appconfig	appconfig:ListConfigurationProfiles			List
ListDeploymentStrategies	appconfig	appconfig:ListDeploymentStrategies			List
ListDeployments	appconfig	appconfig:ListDeployments			List
ListEnvironments	appconfig	appconfig:ListEnvironments			List
ListExperimentDefinitions	appconfig	appconfig:ListExperimentDefinitions			List
ListExperimentRunEvents	appconfig	appconfig:ListExperimentRunEvents			List
ListExperimentRuns	appconfig	appconfig:ListExperimentRuns			List
ListExtensionAssociations	appconfig	appconfig:ListExtensionAssociations			List
ListExtensions	appconfig	appconfig:ListExtensions			List
ListHostedConfigurationVersions	appconfig	appconfig:ListHostedConfigurationVersions			List
ListTagsForResource	appconfig	appconfig:ListTagsForResource			Read
StartDeployment	appconfig	appconfig:StartDeployment			Write
StartDeployment	appconfig	appconfig:TagResource			Tagging, Write
StartExperimentRun	appconfig	appconfig:StartExperimentRun			Write
StartExperimentRun	appconfig	appconfig:TagResource			Tagging, Write
StopDeployment	appconfig	appconfig:StopDeployment			Write
StopExperimentRun	appconfig	appconfig:StopExperimentRun