Operations Actions Resource types Condition keys

Actions, resources, and condition keys for AWS Transfer Family

AWS Transfer Family (service prefix: transfer) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by AWS Transfer Family
Actions defined by AWS Transfer Family
Resource types defined by AWS Transfer Family
Condition keys for AWS Transfer Family

API operations defined by AWS Transfer Family

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Condition key	Possible value(s)	Access level
CreateAccess	transfer:CreateAccess			Write
CreateAccess	iam:PassRole	iam:PassedToService	transfer.amazonaws.com	Write
CreateAgreement	transfer:CreateAgreement			Write
	transfer:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	transfer.amazonaws.com	Write
CreateConnector	transfer:CreateConnector			Write
	transfer:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	transfer.amazonaws.com	Write
CreateProfile	transfer:CreateProfile			Write
CreateProfile	transfer:TagResource			Tagging, Write
CreateServer	transfer:CreateServer			Write
	transfer:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	transfer.amazonaws.com	Write
CreateUser	transfer:CreateUser			Write
	transfer:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	transfer.amazonaws.com	Write
CreateWebApp	transfer:CreateWebApp			Write
	transfer:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	transfer.amazonaws.com	Write
CreateWorkflow	transfer:CreateWorkflow			Write
CreateWorkflow	transfer:TagResource			Tagging, Write
DeleteAccess	transfer:DeleteAccess			Write
DeleteAgreement	transfer:DeleteAgreement			Write
DeleteCertificate	transfer:DeleteCertificate			Write
DeleteConnector	transfer:DeleteConnector			Write
DeleteHostKey	transfer:DeleteHostKey			Write
DeleteProfile	transfer:DeleteProfile			Write
DeleteServer	transfer:DeleteServer			Write
DeleteSshPublicKey	transfer:DeleteSshPublicKey			Write
DeleteUser	transfer:DeleteUser			Write
DeleteWebApp	transfer:DeleteWebApp			Write
DeleteWebAppCustomization	transfer:DeleteWebAppCustomization			Write
DeleteWorkflow	transfer:DeleteWorkflow			Write
DescribeAccess	transfer:DescribeAccess			Read
DescribeAgreement	transfer:DescribeAgreement			Read
DescribeCertificate	transfer:DescribeCertificate			Read
DescribeConnector	transfer:DescribeConnector			Read
DescribeExecution	transfer:DescribeExecution			Read
DescribeHostKey	transfer:DescribeHostKey			Read