View a markdown version of this page

Actions, resources, and condition keys for AWS Clean Rooms - Service Authorization Reference

Actions, resources, and condition keys for AWS Clean Rooms

AWS Clean Rooms (service prefix: cleanrooms) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

API operations defined by AWS Clean Rooms

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation IAM action Condition key Possible value(s) Access level

BatchGetCollaborationAnalysisTemplate

cleanrooms:BatchGetCollaborationAnalysisTemplate

Read

BatchGetSchema

cleanrooms:BatchGetSchema

Read

BatchGetSchemaAnalysisRule

cleanrooms:BatchGetSchemaAnalysisRule

Read

CreateAnalysisTemplate

cleanrooms:CreateAnalysisTemplate

Write

cleanrooms:TagResource

Tagging, Write

iam:PassRole

iam:PassedToService

cleanrooms.amazonaws.com

Write

CreateCollaboration

cleanrooms:CreateCollaboration

Write

cleanrooms:TagResource

Tagging, Write

CreateCollaborationChangeRequest

cleanrooms:CreateCollaborationChangeRequest

Write

CreateConfiguredAudienceModelAssociation

cleanrooms:CreateConfiguredAudienceModelAssociation

Write

cleanrooms:TagResource

Tagging, Write

CreateConfiguredTable

cleanrooms:CreateConfiguredTable

Write

cleanrooms:TagResource

Tagging, Write

CreateConfiguredTableAnalysisRule

cleanrooms:CreateConfiguredTableAnalysisRule

Write

CreateConfiguredTableAssociation

cleanrooms:CreateConfiguredTableAssociation

Write