Operations Actions Resource types Condition keys

Actions, resources, and condition keys for AWS Compute Optimizer

AWS Compute Optimizer (service prefix: compute-optimizer) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by AWS Compute Optimizer
Actions defined by AWS Compute Optimizer
Resource types defined by AWS Compute Optimizer
Condition keys for AWS Compute Optimizer

API operations defined by AWS Compute Optimizer

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Access level
DeleteRecommendationPreferences	compute-optimizer:DeleteRecommendationPreferences	Write
DescribeRecommendationExportJobs	compute-optimizer:DescribeRecommendationExportJobs	List
ExportAutoScalingGroupRecommendations	compute-optimizer:ExportAutoScalingGroupRecommendations	Write
	compute-optimizer:GetAutoScalingGroupRecommendations	List
	autoscaling:DescribeAutoScalingGroups	List
ExportEBSVolumeRecommendations	compute-optimizer:ExportEBSVolumeRecommendations	Write
	compute-optimizer:GetEBSVolumeRecommendations	List
	ec2:DescribeVolumes	List
ExportEC2InstanceRecommendations	compute-optimizer:ExportEC2InstanceRecommendations	Write
	compute-optimizer:GetEC2InstanceRecommendations	List
	ec2:DescribeInstances	List
ExportECSServiceRecommendations	compute-optimizer:ExportECSServiceRecommendations	Write
	compute-optimizer:GetECSServiceRecommendations	List
	ecs:ListClusters	List
	ecs:ListServices	List
ExportIdleRecommendations	compute-optimizer:ExportIdleRecommendations	Write
ExportIdleRecommendations	compute-optimizer:GetIdleRecommendations	List
ExportLambdaFunctionRecommendations	compute-optimizer:ExportLambdaFunctionRecommendations	Write
	compute-optimizer:GetLambdaFunctionRecommendations	List
	lambda:ListFunctions	List
	lambda:ListProvisionedConcurrencyConfigs	List
ExportLicenseRecommendations	compute-optimizer:ExportLicenseRecommendations	Write
	compute-optimizer:GetLicenseRecommendations	List
	ec2:DescribeInstances	List
ExportRDSDatabaseRecommendations	compute-optimizer:ExportRDSDatabaseRecommendations	Write
	compute-optimizer:GetRDSDatabaseRecommendations	List
	rds:DescribeDBClusters	List
	rds:DescribeDBInstances	List
GetAutoScalingGroupRecommendations	compute-optimizer:GetAutoScalingGroupRecommendations	List
GetAutoScalingGroupRecommendations	autoscaling:DescribeAutoScalingGroups	List
GetEBSVolumeRecommendations	compute-optimizer:GetEBSVolumeRecommendations	List
GetEBSVolumeRecommendations	ec2:DescribeVolumes	List
GetEC2InstanceRecommendations	compute-optimizer:GetEC2InstanceRecommendations	List
GetEC2InstanceRecommendations	ec2:DescribeInstances	List
GetEC2RecommendationProjectedMetrics	compute-optimizer:GetEC2RecommendationProjectedMetrics	List
GetEC2RecommendationProjectedMetrics	ec2:DescribeInstances	List
GetECSServiceRecommendationProjectedMetrics	compute-optimizer:GetECSServiceRecommendationProjectedMetrics	List
GetECSServiceRecommendations	compute-optimizer:GetECSServiceRecommendations	List
	ecs:ListClusters	List
	ecs:ListServices	List
GetEffectiveRecommendationPreferences	compute-optimizer:GetEffectiveRecommendationPreferences	Read
	autoscaling:DescribeAutoScalingGroups	List
	autoscaling:DescribeAutoScalingInstances	List
	ec2:DescribeInstances	List
GetEnrollmentStatus	compute-optimizer:GetEnrollmentStatus	List
GetEnrollmentStatusesForOrganization	compute-optimizer:GetEnrollmentStatusesForOrganization	List
GetEnrollmentStatusesForOrganization	organizations:ListAccounts	List
GetIdleRecommendations	compute-optimizer:GetIdleRecommendations	List
GetLambdaFunctionRecommendations	compute-optimizer:GetLambdaFunctionRecommendations	List
	lambda:ListFunctions	List
	lambda:ListProvisionedConcurrencyConfigs	List
GetLicenseRecommendations	compute-optimizer:GetLicenseRecommendations	List
GetLicenseRecommendations	ec2:DescribeInstances	List
GetRDSDatabaseRecommendationProjectedMetrics	compute-optimizer:GetRDSDatabaseRecommendationProjectedMetrics	List
GetRDSDatabaseRecommendationProjectedMetrics	rds:DescribeDBInstances	List
GetRDSDatabaseRecommendations	compute-optimizer:GetRDSDatabaseRecommendations	List
	rds:DescribeDBClusters	List
	rds:DescribeDBInstances	List
GetRecommendationPreferences	compute-optimizer:GetRecommendationPreferences	Read
GetRecommendationSummaries	compute-optimizer:GetRecommendationSummaries	List
PutRecommendationPreferences	compute-optimizer:PutRecommendationPreferences	Write
UpdateEnrollmentStatus	compute-optimizer:UpdateEnrollmentStatus	Write

Actions defined by AWS Compute Optimizer

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Condition keys	Access level
DeleteRecommendationPreferences	Grants permission to delete recommendation preferences	compute-optimizer:ResourceType	Write
DescribeRecommendationExportJobs	Grants permission to view the status of recommendation export jobs		List
ExportAutoScalingGroupRecommendations	Grants permission to export AutoScaling group recommendations to S3 for the provided accounts		Write
ExportEBSVolumeRecommendations	Grants permission to export EBS volume recommendations to S3 for the provided accounts		Write
ExportEC2InstanceRecommendations	Grants permission to export EC2 instance recommendations to S3 for the provided accounts		Write
ExportECSServiceRecommendations	Grants permission to export ECS service recommendations to S3 for the provided accounts		Write
ExportIdleRecommendations	Grants permission to export idle recommendations to S3 for the provided accounts		Write
ExportLambdaFunctionRecommendations	Grants permission to export Lambda function recommendations to S3 for the provided accounts		Write
ExportLicenseRecommendations	Grants permission to export license recommendations to S3 for the provided account(s)		Write
ExportRDSDatabaseRecommendations	Grants permission to export rds recommendations to S3 for the provided accounts		Write