Operations Actions Resource types Condition keys

Actions, resources, and condition keys for AWS CodePipeline

AWS CodePipeline (service prefix: codepipeline) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by AWS CodePipeline
Actions defined by AWS CodePipeline
Resource types defined by AWS CodePipeline
Condition keys for AWS CodePipeline

API operations defined by AWS CodePipeline

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Condition key	Possible value(s)	Access level
AcknowledgeJob	codepipeline:AcknowledgeJob			Write
AcknowledgeThirdPartyJob	codepipeline:AcknowledgeThirdPartyJob			Write
CreateCustomActionType	codepipeline:CreateCustomActionType			Write
CreateCustomActionType	codepipeline:TagResource			Tagging, Write
CreatePipeline	codepipeline:CreatePipeline			Write
	codepipeline:TagResource			Tagging, Write
	codestar-connections:PassConnection			Read
	iam:PassRole	iam:PassedToService	cloudformation.amazonaws.com, codebuild.amazonaws.com, codepipeline.amazonaws.com	Write
DeleteCustomActionType	codepipeline:DeleteCustomActionType			Write
DeletePipeline	codepipeline:DeletePipeline			Write
DeleteWebhook	codepipeline:DeleteWebhook			Write
DeregisterWebhookWithThirdParty	codepipeline:DeregisterWebhookWithThirdParty			Write
DisableStageTransition	codepipeline:DisableStageTransition			Write
EnableStageTransition	codepipeline:EnableStageTransition			Write
GetActionType	codepipeline:GetActionType			Read
GetJobDetails	codepipeline:GetJobDetails			Read
GetPipeline	codepipeline:GetPipeline			Read
GetPipelineExecution	codepipeline:GetPipelineExecution			Read
GetPipelineState	codepipeline:GetPipelineState			Read
GetThirdPartyJobDetails	codepipeline:GetThirdPartyJobDetails			Read
ListActionExecutions	codepipeline:ListActionExecutions			Read
ListActionTypes	codepipeline:ListActionTypes			Read
ListDeployActionExecutionTargets	codepipeline:ListDeployActionExecutionTargets			Read
ListPipelineExecutions	codepipeline:ListPipelineExecutions			List
ListPipelines	codepipeline:ListPipelines			List
ListRuleExecutions	codepipeline:ListRuleExecutions			Read
ListRuleTypes	codepipeline:ListRuleTypes			Read
ListTagsForResource	codepipeline:ListTagsForResource			Read
ListWebhooks	codepipeline:ListWebhooks			List
OverrideStageCondition	codepipeline:OverrideStageCondition			Write
PollForJobs	codepipeline:PollForJobs			Write
PollForThirdPartyJobs	codepipeline:PollForThirdPartyJobs			Write
PutActionRevision	codepipeline:PutActionRevision			Write
PutApprovalResult	codepipeline:PutApprovalResult			Write
PutJobFailureResult	codepipeline:PutJobFailureResult			Write
PutJobSuccessResult	codepipeline:PutJobSuccessResult			Write
PutThirdPartyJobFailureResult	codepipeline:PutThirdPartyJobFailureResult			Write
PutThirdPartyJobSuccessResult	codepipeline:PutThirdPartyJobSuccessResult			Write
PutWebhook	codepipeline:PutWebhook			Write
	codepipeline:TagResource			Tagging, Write
	codepipeline:UntagResource			Tagging, Write
RegisterWebhookWithThirdParty	codepipeline:RegisterWebhookWithThirdParty			Write
RetryStageExecution	codepipeline:RetryStageExecution			Write
RollbackStage	codepipeline:RollbackStage			Write
StartPipelineExecution	codepipeline:StartPipelineExecution			Write
StopPipelineExecution	codepipeline:StopPipelineExecution			Write
TagResource	codepipeline:TagResource			Tagging, Write
UntagResource	codepipeline:UntagResource			Tagging, Write
UpdateActionType	codepipeline:UpdateActionType			Write
UpdatePipeline	codepipeline:UpdatePipeline