AWS IoT Greengrass (greengrass)

2026-07-15

19 new actions, 3 new resources | 1 updated action, 1 updated resource

Additions

    Actions
  • BatchAssociateClientDeviceWithCoreDevice
    • Description:  Grants permission to associate a list of client devices with a core device
    • Access:  Write
    • Resources: 

      Name: coreDevice

      Required: Yes

  • BatchDisassociateClientDeviceFromCoreDevice
    • Description:  Grants permission to disassociate a list of client devices from a core device
    • Access:  Write
    • Resources: 

      Name: coreDevice

      Required: Yes

  • CancelDeployment
    • Description:  Grants permission to cancel a deployment
    • Access:  Write
    • Resources: 

      Name: deployment

      Required: Yes

  • CreateComponentVersion
    • Description:  Grants permission to create a component
    • Access:  Write
    • Resources: 

      Name: component

      Required: Yes

    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:TagKeys
  • DeleteComponent
    • Description:  Grants permission to delete a component
    • Access:  Write
    • Resources: 

      Name: componentVersion

      Required: Yes

  • DeleteCoreDevice
    • Description:  Grants permission to delete a AWS IoT Greengrass core device, which is an AWS IoT thing. This operation removes the core device from the list of core devices. This operation doesn't delete the AWS IoT thing
    • Access:  Write
    • Resources: 

      Name: coreDevice

      Required: Yes

  • DeleteDeployment
    • Description:  Grants permission to delete a deployment. To delete an active deployment, it needs to be cancelled first
    • Access:  Write
    • Resources: 

      Name: deployment

      Required: Yes

  • DescribeComponent
    • Description:  Grants permission to retrieve metadata for a version of a component
    • Access:  Read
    • Resources: 

      Name: componentVersion

      Required: Yes

  • GetComponent
    • Description:  Grants permission to get the recipe for a version of a component
    • Access:  Read
    • Resources: 

      Name: componentVersion

      Required: Yes

  • GetComponentVersionArtifact
    • Description:  Grants permission to get the pre-signed URL to download a public component artifact
    • Access:  Read
    • Resources: 

      Name: componentVersion

      Required: Yes

  • GetCoreDevice
    • Description:  Grants permission to retrieves metadata for a AWS IoT Greengrass core device
    • Access:  Read
    • Resources: 

      Name: coreDevice

      Required: Yes

  • GetDeployment
    • Description:  Grants permission to get a deployment
    • Access:  Read
    • Resources: 

      Name: deployment

      Required: Yes

  • ListClientDevicesAssociatedWithCoreDevice
    • Description:  Grants permission to retrieve a paginated list of client devices associated to a AWS IoT Greengrass core device
    • Access:  List
    • Resources: 

      Name: coreDevice

      Required: Yes

  • ListComponentVersions
    • Description:  Grants permission to retrieve a paginated list of all versions for a component
    • Access:  List
    • Resources: 

      Name: component

      Required: Yes

  • ListComponents
    • Description:  Grants permission to retrieve a paginated list of component summaries
    • Access:  List
  • ListCoreDevices
    • Description:  Grants permission to retrieve a paginated list of AWS IoT Greengrass core devices
    • Access:  List
  • ListEffectiveDeployments
    • Description:  Grants permission to retrieves a paginated list of deployment jobs that AWS IoT Greengrass sends to AWS IoT Greengrass core devices
    • Access:  List
    • Resources: 

      Name: coreDevice

      Required: Yes

  • ListInstalledComponents
    • Description:  Grants permission to retrieve a paginated list of the components that a AWS IoT Greengrass core device runs
    • Access:  List
    • Resources: 

      Name: coreDevice

      Required: Yes

  • ResolveComponentCandidates
    • Description:  Grants permission to list components that meet the component, version, and platform requirements of a deployment
    • Access:  List
    • Resources: 

      Name: componentVersion

      Required: Yes

    Resources
  • component
    • Arn:  arn:${Partition}:greengrass:${Region}:${Account}:components:${ComponentName}
    • Conditions: 

      aws:ResourceTag/${TagKey}
  • componentVersion
    • Arn:  arn:${Partition}:greengrass:${Region}:${Account}:components:${ComponentName}:versions:${ComponentVersion}
    • Conditions: 

      aws:ResourceTag/${TagKey}
  • coreDevice
    • Arn:  arn:${Partition}:greengrass:${Region}:${Account}:coreDevices:${CoreDeviceThingName}
    • Conditions: 

      aws:ResourceTag/${TagKey}

Updates

    Resources
  • functionDefinition
      Arn
    • Old: arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/groups/${GroupId}/deployments/${DeploymentId}
      New: arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/groups/${GroupId}/deployments/${DeploymentId} arn:${Partition}:greengrass:${Region}:${Account}:deployments:${DeploymentId}
      Conditions
    • ＋ aws:ResourceTag/${TagKey}