Operations Actions Resource types Condition keys

Actions, resources, and condition keys for AWS Glue DataBrew

AWS Glue DataBrew (service prefix: databrew) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by AWS Glue DataBrew
Actions defined by AWS Glue DataBrew
Resource types defined by AWS Glue DataBrew
Condition keys for AWS Glue DataBrew

API operations defined by AWS Glue DataBrew

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Condition key	Possible value(s)	Access level
BatchDeleteRecipeVersion	databrew:BatchDeleteRecipeVersion			Write
CreateDataset	databrew:CreateDataset			Write
CreateDataset	databrew:TagResource			Tagging, Write
CreateProfileJob	databrew:CreateProfileJob			Write
	databrew:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	databrew.amazonaws.com	Write
CreateProject	databrew:CreateProject			Write
	databrew:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	databrew.amazonaws.com	Write
CreateRecipe	databrew:CreateRecipe			Write
CreateRecipe	databrew:TagResource			Tagging, Write
CreateRecipeJob	databrew:CreateRecipeJob			Write
	databrew:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	databrew.amazonaws.com	Write
CreateRuleset	databrew:CreateRuleset			Write
CreateRuleset	databrew:TagResource			Tagging, Write
CreateSchedule	databrew:CreateSchedule			Write
CreateSchedule	databrew:TagResource			Tagging, Write
DeleteDataset	databrew:DeleteDataset			Write
DeleteJob	databrew:DeleteJob			Write
DeleteProject	databrew:DeleteProject			Write
DeleteRecipeVersion	databrew:DeleteRecipeVersion			Write
DeleteRuleset	databrew:DeleteRuleset			Write
DeleteSchedule	databrew:DeleteSchedule			Write
DescribeDataset	databrew:DescribeDataset			Read
DescribeJob	databrew:DescribeJob			Read
DescribeJobRun	databrew:DescribeJobRun			Read
DescribeProject	databrew:DescribeProject			Read
DescribeRecipe	databrew:DescribeRecipe			Read
DescribeRuleset	databrew:DescribeRuleset			Read
DescribeSchedule	databrew:DescribeSchedule			Read
ListDatasets	databrew:ListDatasets			Read
ListJobRuns	databrew:ListJobRuns			Read
ListJobs	databrew:ListJobs			Read
ListProjects	databrew:ListProjects			Read
ListRecipeVersions	databrew:ListRecipeVersions			Read
ListRecipes	databrew:ListRecipes			Read
ListRulesets	databrew:ListRulesets			Read
ListSchedules	databrew:ListSchedules			Read
ListTagsForResource	databrew:ListTagsForResource			Read
PublishRecipe	databrew:PublishRecipe			Write
SendProjectSessionAction	databrew:SendProjectSessionAction			Write
StartJobRun	databrew:StartJobRun			Write
StartProjectSession	databrew:StartProjectSession			Write
StopJobRun	databrew:StopJobRun			Write
TagResource	databrew:TagResource			Tagging, Write
UntagResource