Operations Actions Resource types Condition keys

Actions, resources, and condition keys for AWS IoT

AWS IoT (service prefix: iot) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

API operations defined by AWS IoT

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	SDK client	IAM action	Condition key	Possible value(s)	Access level
AcceptCertificateTransfer	iot	iot:AcceptCertificateTransfer			Write
AddThingToBillingGroup	iot	iot:AddThingToBillingGroup			Write
AddThingToThingGroup	iot	iot:AddThingToThingGroup			Write
AssociateSbomWithPackageVersion	iot	iot:AssociateSbomWithPackageVersion			Write
AssociateTargetsWithJob	iot	iot:AssociateTargetsWithJob			Write
AttachPolicy	iot	iot:AttachPolicy			Permissions management, Write
AttachPrincipalPolicy	iot	iot:AttachPrincipalPolicy			Permissions management, Write
AttachSecurityProfile	iot	iot:AttachSecurityProfile			Write
AttachThingPrincipal	iot	iot:AttachThingPrincipal			Write
CancelAuditMitigationActionsTask	iot	iot:CancelAuditMitigationActionsTask			Write
CancelAuditTask	iot	iot:CancelAuditTask			Write
CancelCertificateTransfer	iot	iot:CancelCertificateTransfer			Write
CancelDetectMitigationActionsTask	iot	iot:CancelDetectMitigationActionsTask			Write
CancelJob	iot	iot:CancelJob			Write
CancelJobExecution	iot	iot:CancelJobExecution			Write
ClearDefaultAuthorizer	iot	iot:ClearDefaultAuthorizer			Write
CreateAuditSuppression	iot	iot:CreateAuditSuppression			Write
CreateAuthorizer	iot	iot:CreateAuthorizer			Write
CreateAuthorizer	iot	iot:TagResource			Tagging, Write
CreateBillingGroup	iot	iot:CreateBillingGroup			Write
CreateBillingGroup	iot	iot:TagResource			Tagging, Write
CreateCertificateFromCsr	iot	iot:CreateCertificateFromCsr			Write
CreateCertificateProvider	iot	iot:CreateCertificateProvider			Write
CreateCertificateProvider	iot	iot:TagResource			Tagging, Write
CreateCommand	iot	iot:CreateCommand			Write
		iot:TagResource			Tagging, Write
		iam:PassRole	iam:PassedToService	iot.amazonaws.com	Write
CreateCustomMetric	iot	iot:CreateCustomMetric			Write
CreateCustomMetric	iot	iot:TagResource			Tagging, Write
CreateDimension	iot	iot:CreateDimension			Write
CreateDimension	iot	iot:TagResource			Tagging, Write
CreateDomainConfiguration	iot	iot:CreateDomainConfiguration			Write
CreateDomainConfiguration	iot	iot:TagResource			Tagging, Write
CreateDynamicThingGroup	iot	iot:CreateDynamicThingGroup			Write
CreateDynamicThingGroup	iot	iot:TagResource			Tagging, Write
CreateFleetMetric	iot	iot:CreateFleetMetric			Write
CreateFleetMetric	iot	iot:TagResource			Tagging, Write
CreateJob	iot	iot:CreateJob			Write
		iot:TagResource			Tagging, Write