AWS Support Authorization (supportauthz)

Additions

Actions

• CreateSupportPermit
  
  • Description:  Grants permission to create a support permit
  • Access:  Write
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• DeleteSupportPermit
  
  • Description:  Grants permission to delete a support permit
  • Access:  Write
  • Resources: 

    Name: supportpermit

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• GetAction
  
  • Description:  Grants permission to retrieve details about a support action
  • Access:  Read
• GetSupportPermit
  
  • Description:  Grants permission to retrieve a support permit
  • Access:  Read
  • Resources: 

    Name: supportpermit

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• ListActions
  
  • Description:  Grants permission to list available support actions
  • Access:  List
• ListSupportPermitRequests
  
  • Description:  Grants permission to list support permit requests
  • Access:  List
• ListSupportPermits
  
  • Description:  Grants permission to list support permits
  • Access:  List
• ListTagsForResource
  
  • Description:  Grants permission to list tags for a resource
  • Access:  Read
  • Resources: 

    Name: supportpermit

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• RegisterKey
  
  • Description:  Grants permission to register a KMS key to use for a support permit
  • Access:  Write
• RejectSupportPermitRequest
  
  • Description:  Grants permission to reject a support permit request
  • Access:  Write
  • Resources: 

    Name: supportpermitrequest

    Required: Yes

• TagResource
  
  • Description:  Grants permission to add tags to a resource
  • Access:  Tagging
  • Resources: 

    Name: supportpermit

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:ResourceTag/${TagKey}

    aws:TagKeys

• UntagResource
  
  • Description:  Grants permission to remove tags from a resource
  • Access:  Tagging
  • Resources: 

    Name: supportpermit

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

    aws:TagKeys

Resources

• supportpermit
  
  • Arn:  arn:${Partition}:supportauthz:${Region}:${Account}:supportpermit/${ResourceId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• supportpermitrequest
  
  • Arn:  arn:${Partition}:supportauthz:${Region}:${Account}:supportpermitrequest/${ResourceId}

Conditions

• aws:RequestTag/${TagKey}
  
  • Description:  Filters access by a tag key-value pair in the request
  • Type:  String
• aws:ResourceTag/${TagKey}
  
  • Description:  Filters access by a tag key-value pair assigned to the resource
  • Type:  String
• aws:TagKeys
  
  • Description:  Filters access by the tag keys in the request
  • Type:  ArrayOfString