View a markdown version of this page

Actions, resources, and condition keys for AWS Proton - Service Authorization Reference

Actions, resources, and condition keys for AWS Proton

AWS Proton (service prefix: proton) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

API operations defined by AWS Proton

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation IAM action Condition key Possible value(s) Access level

AcceptEnvironmentAccountConnection

proton:AcceptEnvironmentAccountConnection

Write

CancelComponentDeployment

proton:CancelComponentDeployment

Write

CancelEnvironmentDeployment

proton:CancelEnvironmentDeployment

Write

CancelServiceInstanceDeployment

proton:CancelServiceInstanceDeployment

Write

CancelServicePipelineDeployment

proton:CancelServicePipelineDeployment

Write

CreateComponent

proton:CreateComponent

Write

proton:TagResource

Tagging, Write

CreateEnvironment

proton:CreateEnvironment

Write

proton:TagResource

Tagging, Write

iam:PassRole

iam:PassedToService

proton.amazonaws.com

Write

CreateEnvironmentAccountConnection

proton:CreateEnvironmentAccountConnection

Write

proton:TagResource

Tagging, Write

iam:PassRole

iam:PassedToService

proton.amazonaws.com

Write

CreateEnvironmentTemplate

proton:CreateEnvironmentTemplate

Write

proton:TagResource

Tagging, Write

CreateEnvironmentTemplateVersion

proton:CreateEnvironmentTemplateVersion

Write

proton:TagResource

Tagging, Write

CreateRepository

proton:CreateRepository

Write

proton:TagResource

Tagging, Write

codestar-connections:PassConnection

Read

CreateService

proton:CreateService

Write

proton:TagResource

Tagging, Write

codestar-connections:PassConnection

Read

CreateServiceInstance

proton:CreateServiceInstance

Write

proton:TagResource

Tagging, Write

CreateServiceSyncConfig

proton:CreateServiceSyncConfig

Write

CreateServiceTemplate

proton:CreateServiceTemplate

Write

proton:TagResource

Tagging, Write

CreateServiceTemplateVersion

proton:CreateServiceTemplateVersion

Write

proton:TagResource

Tagging, Write

CreateTemplateSyncConfig

proton:CreateTemplateSyncConfig

Write

DeleteComponent

proton:DeleteComponent

Write

DeleteDeployment

proton:DeleteDeployment

Write

DeleteEnvironment

proton:DeleteEnvironment

Write

DeleteEnvironmentAccountConnection

proton:DeleteEnvironmentAccountConnection

Write

DeleteEnvironmentTemplate

proton:DeleteEnvironmentTemplate

Write

DeleteEnvironmentTemplateVersion

proton:DeleteEnvironmentTemplateVersion

Write

DeleteRepository

proton:DeleteRepository

Write

DeleteService

proton:DeleteService

Write

DeleteServiceSyncConfig

proton:DeleteServiceSyncConfig

Write

DeleteServiceTemplate

proton:DeleteServiceTemplate

Write

DeleteServiceTemplateVersion

proton:DeleteServiceTemplateVersion

Write

DeleteTemplateSyncConfig

proton:DeleteTemplateSyncConfig

Write

GetAccountSettings

proton:GetAccountSettings

Read

GetComponent

proton:GetComponent

Read

GetDeployment

proton:GetComponent

Read

proton:GetDeployment

Read

proton:GetEnvironment

Read

proton:GetService

Read

proton:GetServiceInstance

Read

GetEnvironment

proton:GetEnvironment

Read

GetEnvironmentAccountConnection

proton:GetEnvironmentAccountConnection

Read

GetEnvironmentTemplate

proton:GetEnvironmentTemplate

Read

GetEnvironmentTemplateVersion

proton:GetEnvironmentTemplateVersion

Read

GetRepository

proton:GetRepository

Read

GetRepositorySyncStatus

proton:GetRepositorySyncStatus

Read

GetResourcesSummary

proton:GetResourcesSummary

Read

GetService

proton:GetService

Read

GetServiceInstance

proton:GetServiceInstance

Read

GetServiceInstanceSyncStatus

proton:GetServiceInstanceSyncStatus

Read

GetServiceSyncBlockerSummary

proton:GetServiceSyncBlockerSummary

Read

GetServiceSyncConfig