Amazon Pinpoint SMS and Voice Service (sms-voice)

Additions

Actions

• AssociateOriginationIdentity
  
  • Description:  Grants permission to associate an origination phone number or sender ID to a pool
  • Access:  Write
  • Resources: 

    Name: PhoneNumber

    Required: No

    Name: Pool

    Required: Yes

    Name: SenderId

    Required: No

• AssociateProtectConfiguration
  
  • Description:  Grants permission to associate a protect configuration to a configuration set
  • Access:  Write
  • Resources: 

    Name: ConfigurationSet

    Required: Yes

    Name: ProtectConfiguration

    Required: Yes

• CreateEventDestination
  
  • Description:  Grants permission to create an event destination within a configuration set
  • Access:  Write
  • Resources: 

    Name: ConfigurationSet

    Required: Yes

• CreateOptOutList
  
  • Description:  Grants permission to create an opt-out list
  • Access:  Write
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• CreatePool
  
  • Description:  Grants permission to create a pool
  • Access:  Write
  • Resources: 

    Name: PhoneNumber

    Required: No

    Name: SenderId

    Required: No

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• CreateProtectConfiguration
  
  • Description:  Grants permission to create a protect configuration
  • Access:  Write
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• CreateRegistration
  
  • Description:  Grants permission to create a registration
  • Access:  Write
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• CreateRegistrationAssociation
  
  • Description:  Grants permission to associate a registration with a phone number or another registration
  • Access:  Write
  • Resources: 

    Name: PhoneNumber

    Required: No

    Name: Registration

    Required: Yes

• CreateRegistrationAttachment
  
  • Description:  Grants permission to create a registration attachment
  • Access:  Write
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• CreateRegistrationVersion
  
  • Description:  Grants permission to create a registration version
  • Access:  Write
  • Resources: 

    Name: Registration

    Required: Yes

• CreateVerifiedDestinationNumber
  
  • Description:  Grants permission to create a verified destination number
  • Access:  Write
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• DeleteAccountDefaultProtectConfiguration
  
  • Description:  Grants permission to delete the account default protect configuration
  • Access:  Write
• DeleteDefaultMessageType
  
  • Description:  Grants permission to delete the default message type for a configuration set
  • Access:  Write
  • Resources: 

    Name: ConfigurationSet

    Required: Yes

• DeleteDefaultSenderId
  
  • Description:  Grants permission to delete the default sender ID for a configuration set
  • Access:  Write
  • Resources: 

    Name: ConfigurationSet

    Required: Yes

• DeleteEventDestination
  
  • Description:  Grants permission to delete an event destination within a configuration set
  • Access:  Write
  • Resources: 

    Name: ConfigurationSet

    Required: Yes

• DeleteKeyword
  
  • Description:  Grants permission to delete a keyword for a pool or origination phone number
  • Access:  Write
  • Resources: 

    Name: PhoneNumber

    Required: No

    Name: Pool

    Required: No

• DeleteMediaMessageSpendLimitOverride
  
  • Description:  Grants permission to delete an override for your account's media messaging monthly spend limit
  • Access:  Write
• DeleteOptOutList
  
  • Description:  Grants permission to delete an opt-out list
  • Access:  Write
  • Resources: 

    Name: OptOutList

    Required: Yes

• DeleteOptedOutNumber
  
  • Description:  Grants permission to delete a destination phone number from an opt-out list
  • Access:  Write
  • Resources: 

    Name: OptOutList

    Required: Yes

• DeletePool
  
  • Description:  Grants permission to delete a pool
  • Access:  Write
  • Resources: 

    Name: Pool

    Required: Yes

• DeleteProtectConfiguration
  
  • Description:  Grants permission to delete a protect configuration
  • Access:  Write
  • Resources: 

    Name: ProtectConfiguration

    Required: Yes

• DeleteProtectConfigurationRuleSetNumberOverride
  
  • Description:  Grants permission to delete a phone number override for a protect configuration
  • Access:  Write
  • Resources: 

    Name: ProtectConfiguration

    Required: Yes

• DeleteRegistration
  
  • Description:  Grants permission to delete a registration
  • Access:  Write
  • Resources: 

    Name: Registration

    Required: Yes

• DeleteRegistrationAttachment
  
  • Description:  Grants permission to delete a registration attachment
  • Access:  Write
  • Resources: 

    Name: RegistrationAttachment

    Required: Yes

• DeleteRegistrationFieldValue
  
  • Description:  Grants permission to delete an optional registration field value
  • Access:  Write
  • Resources: 

    Name: Registration

    Required: Yes

• DeleteResourcePolicy
  
  • Description:  Grants permission to delete a resource policy
  • Access:  Permissions management
  • Resources: 

    Name: OptOutList

    Required: No

    Name: PhoneNumber

    Required: No

    Name: Pool

    Required: No

    Name: SenderId

    Required: No

• DeleteTextMessageSpendLimitOverride
  
  • Description:  Grants permission to delete an override for your account's text messaging monthly spend limit
  • Access:  Write
• DeleteVerifiedDestinationNumber
  
  • Description:  Grants permission to delete a verified destination number
  • Access:  Write
  • Resources: 

    Name: VerifiedDestinationNumber

    Required: Yes

• DeleteVoiceMessageSpendLimitOverride
  
  • Description:  Grants permission to delete an override for your account's voice messaging monthly spend limit
  • Access:  Write
• DescribeAccountAttributes
  
  • Description:  Grants permission to describe the attributes of your account
  • Access:  Read
• DescribeAccountLimits
  
  • Description:  Grants permission to describe the service quotas for your account
  • Access:  Read
• DescribeConfigurationSets
  
  • Description:  Grants permission to describe the configuration sets in your account
  • Access:  Read
  • Resources: 

    Name: ConfigurationSet

    Required: No

• DescribeKeywords
  
  • Description:  Grants permission to describe the keywords for a pool or origination phone number
  • Access:  Read
  • Resources: 

    Name: PhoneNumber

    Required: No

    Name: Pool

    Required: No

• DescribeOptOutLists
  
  • Description:  Grants permission to describe the opt-out lists in your account
  • Access:  Read
  • Resources: 

    Name: OptOutList

    Required: No

• DescribeOptedOutNumbers
  
  • Description:  Grants permission to describe the destination phone numbers in an opt-out list
  • Access:  Read
  • Resources: 

    Name: OptOutList

    Required: Yes

• DescribePhoneNumbers
  
  • Description:  Grants permission to describe the origination phone numbers in your account
  • Access:  Read
  • Resources: 

    Name: PhoneNumber

    Required: No

• DescribePools
  
  • Description:  Grants permission to describe the pools in your account
  • Access:  Read
  • Resources: 

    Name: Pool

    Required: No

• DescribeProtectConfigurations
  
  • Description:  Grants permission to describe the protect configurations in your account
  • Access:  Read
  • Resources: 

    Name: ProtectConfiguration

    Required: No

• DescribeRegistrationAttachments
  
  • Description:  Grants permission to describe the registration attachments in your account
  • Access:  Read
  • Resources: 

    Name: RegistrationAttachment

    Required: No

• DescribeRegistrationFieldDefinitions
  
  • Description:  Grants permission to describe the field definitions for a given registration type
  • Access:  Read
• DescribeRegistrationFieldValues
  
  • Description:  Grants permission to describe the field values for a given registration
  • Access:  Read
  • Resources: 

    Name: Registration

    Required: Yes

• DescribeRegistrationSectionDefinitions
  
  • Description:  Grants permission to describe the section definitions for a given registration type
  • Access:  Read
• DescribeRegistrationTypeDefinitions
  
  • Description:  Grants permission to describe the registration types supported by the service
  • Access:  Read
• DescribeRegistrationVersions
  
  • Description:  Grants permission to describe the versions for a given registration
  • Access:  Read
  • Resources: 

    Name: Registration

    Required: Yes

• DescribeRegistrations
  
  • Description:  Grants permission to describe the registrations in your account
  • Access:  Read
  • Resources: 

    Name: Registration

    Required: No

• DescribeSenderIds
  
  • Description:  Grants permission to describe the sender IDs in your account
  • Access:  Read
  • Resources: 

    Name: SenderId

    Required: No

• DescribeSpendLimits
  
  • Description:  Grants permission to describe the monthly spend limits for your account
  • Access:  Read
• DescribeVerifiedDestinationNumbers
  
  • Description:  Grants permission to describe the verified destination numbers in your account
  • Access:  Read
  • Resources: 

    Name: VerifiedDestinationNumber

    Required: No

• DisassociateOriginationIdentity
  
  • Description:  Grants permission to disassociate an origination phone number or sender ID from a pool
  • Access:  Write
  • Resources: 

    Name: PhoneNumber

    Required: No

    Name: Pool

    Required: Yes

    Name: SenderId

    Required: No

• DisassociateProtectConfiguration
  
  • Description:  Grants permission to disassociate a protect configuration from a configuration set
  • Access:  Write
  • Resources: 

    Name: ConfigurationSet

    Required: Yes

    Name: ProtectConfiguration

    Required: Yes

• DiscardRegistrationVersion
  
  • Description:  Grants permission to discard the latest version of a given registration
  • Access:  Write
  • Resources: 

    Name: Registration

    Required: Yes

• GetProtectConfigurationCountryRuleSet
  
  • Description:  Grants permission to get the country rule set for a protect configuration
  • Access:  Read
  • Resources: 

    Name: ProtectConfiguration

    Required: Yes

• GetResourcePolicy
  
  • Description:  Grants permission to get a resource policy
  • Access:  Read
  • Resources: 

    Name: OptOutList

    Required: No

    Name: PhoneNumber

    Required: No

    Name: Pool

    Required: No

    Name: SenderId

    Required: No

• ListPoolOriginationIdentities
  
  • Description:  Grants permission to list all origination phone numbers and sender IDs associated to a pool
  • Access:  Read
  • Resources: 

    Name: Pool

    Required: Yes

• ListProtectConfigurationRuleSetNumberOverrides
  
  • Description:  Grants permission to list all phone number overrides for a protect configuration
  • Access:  Read
  • Resources: 

    Name: ProtectConfiguration

    Required: Yes

• ListRegistrationAssociations
  
  • Description:  Grants permission to list all resources associated to a registration
  • Access:  Read
  • Resources: 

    Name: Registration

    Required: Yes

• ListTagsForResource
  
  • Description:  Grants permission to list the tags for a resource
  • Access:  Read
  • Resources: 

    Name: ConfigurationSet

    Required: No

    Name: OptOutList

    Required: No

    Name: PhoneNumber

    Required: No

    Name: Pool

    Required: No

    Name: ProtectConfiguration

    Required: No

    Name: Registration

    Required: No

    Name: RegistrationAttachment

    Required: No

    Name: SenderId

    Required: No

    Name: VerifiedDestinationNumber

    Required: No

• PutKeyword
  
  • Description:  Grants permission to create or update a keyword for a pool or origination phone number
  • Access:  Write
  • Resources: 

    Name: PhoneNumber

    Required: No

    Name: Pool

    Required: No

• PutMessageFeedback
  
  • Description:  Grants permission to put feedback for a text, voice, or media message
  • Access:  Write
  • Resources: 

    Name: Message

    Required: Yes

• PutOptedOutNumber
  
  • Description:  Grants permission to put a destination phone number into an opt-out list
  • Access:  Write
  • Resources: 

    Name: OptOutList

    Required: Yes

• PutProtectConfigurationRuleSetNumberOverride
  
  • Description:  Grants permission to put a phone number override for a protect configuration
  • Access:  Write
  • Resources: 

    Name: ProtectConfiguration

    Required: Yes

• PutRegistrationFieldValue
  
  • Description:  Grants permission to put a registration field value
  • Access:  Write
  • Resources: 

    Name: Registration

    Required: Yes

• PutResourcePolicy
  
  • Description:  Grants permission to put a resource policy
  • Access:  Permissions management
  • Resources: 

    Name: OptOutList

    Required: No

    Name: PhoneNumber

    Required: No

    Name: Pool

    Required: No

    Name: SenderId

    Required: No

• ReleasePhoneNumber
  
  • Description:  Grants permission to release an origination phone number
  • Access:  Write
  • Resources: 

    Name: PhoneNumber

    Required: Yes

• ReleaseSenderId
  
  • Description:  Grants permission to release a sender ID
  • Access:  Write
  • Resources: 

    Name: SenderId

    Required: Yes

• RequestPhoneNumber
  
  • Description:  Grants permission to request an origination phone number
  • Access:  Write
  • Resources: 

    Name: Pool

    Required: No

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• RequestSenderId
  
  • Description:  Grants permission to request an unregistered sender ID
  • Access:  Write
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• SendDestinationNumberVerificationCode
  
  • Description:  Grants permission to send a text or voice message containing a verification code to a destination phone number
  • Access:  Write
  • Resources: 

    Name: PhoneNumber

    Required: No

    Name: Pool

    Required: No

    Name: SenderId

    Required: No

• SendMediaMessage
  
  • Description:  Grants permission to send a media message to a destination phone number
  • Access:  Write
  • Resources: 

    Name: PhoneNumber

    Required: No

    Name: Pool

    Required: No

• SendTextMessage
  
  • Description:  Grants permission to send a text message to a destination phone number
  • Access:  Write
  • Resources: 

    Name: PhoneNumber

    Required: No

    Name: Pool

    Required: No

    Name: SenderId

    Required: No

• SetAccountDefaultProtectConfiguration
  
  • Description:  Grants permission to set a default protect configuration for the account
  • Access:  Write
  • Resources: 

    Name: ProtectConfiguration

    Required: Yes

• SetDefaultMessageFeedbackEnabled
  
  • Description:  Grants permission to set the default message feedback for a configuration set
  • Access:  Write
  • Resources: 

    Name: ConfigurationSet

    Required: Yes

• SetDefaultMessageType
  
  • Description:  Grants permission to set the default message type for a configuration set
  • Access:  Write
  • Resources: 

    Name: ConfigurationSet

    Required: Yes

• SetDefaultSenderId
  
  • Description:  Grants permission to set the default sender ID for a configuration set
  • Access:  Write
  • Resources: 

    Name: ConfigurationSet

    Required: Yes

• SetMediaMessageSpendLimitOverride
  
  • Description:  Grants permission to set an override for your account's media messaging monthly spend limit
  • Access:  Write
• SetTextMessageSpendLimitOverride
  
  • Description:  Grants permission to set an override for your account's text messaging monthly spend limit
  • Access:  Write
• SetVoiceMessageSpendLimitOverride
  
  • Description:  Grants permission to set an override for your account's voice messaging monthly spend limit
  • Access:  Write
• SubmitRegistrationVersion
  
  • Description:  Grants permission to submit the latest version of a given registration
  • Access:  Write
  • Resources: 

    Name: Registration

    Required: Yes

• TagResource
  
  • Description:  Grants permission to add tags to a resource
  • Access:  Tagging
  • Resources: 

    Name: ConfigurationSet

    Required: No

    Name: OptOutList

    Required: No

    Name: PhoneNumber

    Required: No

    Name: Pool

    Required: No

    Name: ProtectConfiguration

    Required: No

    Name: Registration

    Required: No

    Name: RegistrationAttachment

    Required: No

    Name: SenderId

    Required: No

    Name: VerifiedDestinationNumber

    Required: No

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• UntagResource
  
  • Description:  Grants permission to remove tags from a resource
  • Access:  Tagging
  • Resources: 

    Name: ConfigurationSet

    Required: No

    Name: OptOutList

    Required: No

    Name: PhoneNumber

    Required: No

    Name: Pool

    Required: No

    Name: ProtectConfiguration

    Required: No

    Name: Registration

    Required: No

    Name: RegistrationAttachment

    Required: No

    Name: SenderId

    Required: No

    Name: VerifiedDestinationNumber

    Required: No

  • Conditions: 

    aws:TagKeys

• UpdateEventDestination
  
  • Description:  Grants permission to update an event destination within a configuration set
  • Access:  Write
  • Resources: 

    Name: ConfigurationSet

    Required: Yes

• UpdatePhoneNumber
  
  • Description:  Grants permission to update an origination phone number's configuration
  • Access:  Write
  • Resources: 

    Name: PhoneNumber

    Required: Yes

• UpdatePool
  
  • Description:  Grants permission to update a pool's configuration
  • Access:  Write
  • Resources: 

    Name: Pool

    Required: Yes

• UpdateProtectConfiguration
  
  • Description:  Grants permission to update a protect configuration
  • Access:  Write
  • Resources: 

    Name: ProtectConfiguration

    Required: Yes

• UpdateProtectConfigurationCountryRuleSet
  
  • Description:  Grants permission to update a country rule set for a protect configuration
  • Access:  Write
  • Resources: 

    Name: ProtectConfiguration

    Required: Yes

• UpdateSenderId
  
  • Description:  Grants permission to update a sender ID's configuration
  • Access:  Write
  • Resources: 

    Name: SenderId

    Required: Yes

• VerifyDestinationNumber
  
  • Description:  Grants permission to verify a destination phone number
  • Access:  Write
  • Resources: 

    Name: VerifiedDestinationNumber

    Required: Yes

Resources

• ConfigurationSet
  
  • Arn:  arn:${Partition}:sms-voice:${Region}:${Account}:configuration-set/${ConfigurationSetName}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• Message
  
  • Arn:  arn:${Partition}:sms-voice:${Region}:${Account}:message/${MessageId}
• OptOutList
  
  • Arn:  arn:${Partition}:sms-voice:${Region}:${Account}:opt-out-list/${OptOutListName}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• PhoneNumber
  
  • Arn:  arn:${Partition}:sms-voice:${Region}:${Account}:phone-number/${PhoneNumberId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• Pool
  
  • Arn:  arn:${Partition}:sms-voice:${Region}:${Account}:pool/${PoolId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• ProtectConfiguration
  
  • Arn:  arn:${Partition}:sms-voice:${Region}:${Account}:protect-configuration/${ProtectConfigurationId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• Registration
  
  • Arn:  arn:${Partition}:sms-voice:${Region}:${Account}:registration/${RegistrationId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• RegistrationAttachment
  
  • Arn:  arn:${Partition}:sms-voice:${Region}:${Account}:registration-attachment/${RegistrationAttachmentId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• SenderId
  
  • Arn:  arn:${Partition}:sms-voice:${Region}:${Account}:sender-id/${SenderId}/${IsoCountryCode}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• VerifiedDestinationNumber
  
  • Arn:  arn:${Partition}:sms-voice:${Region}:${Account}:verified-destination-number/${VerifiedDestinationNumberId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

Conditions

• aws:RequestTag/${TagKey}
  
  • Description:  Filters access by the tags that are passed in the request
  • Type:  String
• aws:ResourceTag/${TagKey}
  
  • Description:  Filters access by the tags associated with the resource
  • Type:  String
• aws:TagKeys
  
  • Description:  Filters access by the tag keys that are passed in the request
  • Type:  ArrayOfString

Updates

Actions

• DeleteConfigurationSet
  
  Conditions
  
  • ＋ aws:RequestTag/${TagKey}
  • ＋ aws:TagKeys