Operations Actions Resource types Condition keys

Actions, resources, and condition keys for AWS Directory Service Data

AWS Directory Service Data (service prefix: ds-data) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by AWS Directory Service Data
Actions defined by AWS Directory Service Data
Resource types defined by AWS Directory Service Data
Condition keys for AWS Directory Service Data

API operations defined by AWS Directory Service Data

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Access level
AddGroupMember	ds-data:AddGroupMember	Write
AddGroupMember	ds:AccessDSData	Permissions management, Write
CreateGroup	ds-data:CreateGroup	Write
CreateGroup	ds:AccessDSData	Permissions management, Write
CreateUser	ds-data:CreateUser	Write
CreateUser	ds:AccessDSData	Permissions management, Write
DeleteGroup	ds-data:DeleteGroup	Write
DeleteGroup	ds:AccessDSData	Permissions management, Write
DeleteUser	ds-data:DeleteUser	Write
DeleteUser	ds:AccessDSData	Permissions management, Write
DescribeGroup	ds-data:DescribeGroup	Read
DescribeGroup	ds:AccessDSData	Permissions management, Write
DescribeUser	ds-data:DescribeUser	Read
DescribeUser	ds:AccessDSData	Permissions management, Write
DisableUser	ds-data:DisableUser	Write
DisableUser	ds:AccessDSData	Permissions management, Write
ListGroupMembers	ds-data:ListGroupMembers	List
ListGroupMembers	ds:AccessDSData	Permissions management, Write
ListGroups	ds-data:ListGroups	List
ListGroups	ds:AccessDSData	Permissions management, Write
ListGroupsForMember	ds-data:ListGroupsForMember	List
ListGroupsForMember	ds:AccessDSData	Permissions management, Write
ListUsers	ds-data:ListUsers	List
ListUsers	ds:AccessDSData	Permissions management, Write
RemoveGroupMember	ds-data:RemoveGroupMember	Write
RemoveGroupMember	ds:AccessDSData	Permissions management, Write
SearchGroups	ds-data:DescribeGroup	Read
	ds-data:SearchGroups	Read
	ds:AccessDSData	Permissions management, Write
SearchUsers	ds-data:DescribeUser	Read
	ds-data:SearchUsers	Read
	ds:AccessDSData	Permissions management, Write
UpdateGroup	ds-data:UpdateGroup	Write
UpdateGroup	ds:AccessDSData	Permissions management, Write
UpdateUser	ds-data:UpdateUser	Write
UpdateUser	ds:AccessDSData	Permissions management, Write

Actions, resources, and condition keys for AWS Directory Service Data

Topics

API operations defined by AWS Directory Service Data

Actions defined by AWS Directory Service Data