AWS Well-Architected Tool (wellarchitected)

Additions

Actions

• CreateAgentContext
  
  • Description:  Grants permission to create a context associated with a profile
  • Access:  Write
  • Resources: 

    Name: agent-profile

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• CreateAgentGoal
  
  • Description:  Grants permission to create a goal associated with a profile
  • Access:  Write
  • Resources: 

    Name: agent-profile

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• CreateAgentProfile
  
  • Description:  Grants permission to create an agent profile
  • Access:  Write
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• DeleteAgentContext
  
  • Description:  Grants permission to delete a context associated with a profile
  • Access:  Write
  • Resources: 

    Name: agent-profile

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• DeleteAgentGoal
  
  • Description:  Grants permission to delete a goal associated with a profile
  • Access:  Write
  • Resources: 

    Name: agent-profile

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• DeleteAgentProfile
  
  • Description:  Grants permission to delete an agent profile
  • Access:  Write
  • Resources: 

    Name: agent-profile

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• GetAgentContext
  
  • Description:  Grants permission to get context associated with a profile
  • Access:  Read
  • Resources: 

    Name: agent-profile

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• GetAgentGoal
  
  • Description:  Grants permission to get goal associated with a profile
  • Access:  Read
  • Resources: 

    Name: agent-profile

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• GetAgentProfile
  
  • Description:  Grants permission to get agent profile by profile arn
  • Access:  Read
  • Resources: 

    Name: agent-profile

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• GetAgentRecommendation
  
  • Description:  Grants permission to get a recommendation by recommendation ARN
  • Access:  Read
  • Resources: 

    Name: agent-recommendation

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• GetAgentRecommendationGeneration
  
  • Description:  Grants permission to get a recommendation generation
  • Access:  Read
  • Resources: 

    Name: agent-profile

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• ListAgentContexts
  
  • Description:  Grants permission to list contexts associated with a profile by filters on the fields
  • Access:  Read
  • Resources: 

    Name: agent-profile

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• ListAgentGoals
  
  • Description:  Grants permission to list goals associated with a profile by filters on the fields
  • Access:  Read
  • Resources: 

    Name: agent-profile

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• ListAgentProfiles
  
  • Description:  Grants permission to list agent profiles
  • Access:  Read
• ListAgentRecommendationGenerations
  
  • Description:  Grants permission to list recommendation generations
  • Access:  Read
  • Resources: 

    Name: agent-profile

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• ListAgentRecommendationItems
  
  • Description:  Grants permission to list recommendation items associated with a recommendation
  • Access:  Read
  • Resources: 

    Name: agent-recommendation

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• ListAgentRecommendations
  
  • Description:  Grants permission to list recommendations by profile ARN
  • Access:  Read
  • Resources: 

    Name: agent-profile

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• PutAgentRecommendationFeedback
  
  • Description:  Grants permission to put feedback on a recommendation
  • Access:  Write
  • Resources: 

    Name: agent-recommendation

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• StartAgentRecommendationGeneration
  
  • Description:  Grants permission to start a recommendation generation process
  • Access:  Write
  • Resources: 

    Name: agent-profile

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• UpdateAgentContext
  
  • Description:  Grants permission to update a context associated with a profile
  • Access:  Write
  • Resources: 

    Name: agent-profile

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• UpdateAgentGoal
  
  • Description:  Grants permission to update a goal associated with a profile
  • Access:  Write
  • Resources: 

    Name: agent-profile

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• UpdateAgentProfile
  
  • Description:  Grants permission to update an agent profile
  • Access:  Write
  • Resources: 

    Name: agent-profile

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• UpdateAgentRecommendationStatus
  
  • Description:  Grants permission to update the status of a recommendation
  • Access:  Write
  • Resources: 

    Name: agent-recommendation

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

Resources

• agent-profile
  
  • Arn:  arn:${Partition}:wellarchitected:${Region}:${Account}:agent-profile/${ProfileName}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• agent-recommendation
  
  • Arn:  arn:${Partition}:wellarchitected:${Region}:${Account}:agent-recommendation/${ResourceId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

Updates

Actions

• UpgradeLensReview
  
  Resources
  
  • ＋ agent-profile
  • ＋ agent-recommendation