Menu
AWS Migration Hub
User Guide

AWS Migration Hub API Permissions: Actions and Resources Reference

When you are setting up Access Control and writing a permissions policy that you can attach to an IAM identity (identity-based policies), you can use the following table as a reference. The table lists each Migration Hub API operation, the corresponding actions for which you can grant permissions to perform the action, and the AWS resource for which you can grant the permissions. You specify the actions in the policy's Action field, and you specify the resource value in the policy's Resource field.

Note

To specify an action, use the mgh: prefix followed by the API operation name (for example, mgh:CreateProgressUpdateStream).

If you see an expand arrow () in the upper-right corner of the table, you can open the table in a new window. To close the window, choose the close button (X) in the lower-right corner.

AWS Migration Hub API and Required Permissions for Actions

Migration Hub API Operations Required Permissions (API Actions) Resources
AssociateCreatedArtifact mgh:AssociateCreatedArtifact arn:aws:mgh:region:account-id:ProgressUpdateStreamName/resource-id

or

arn:aws:mgh:region:account-id:ProgressUpdateStreamName/resource-id/*
AssociateDiscoveredResource mgh:AssociateDiscoveredResource arn:aws:mgh:region:account-id:ProgressUpdateStreamName/resource-id

or

arn:aws:mgh:region:account-id:ProgressUpdateStreamName/resource-id/*
CreateProgressUpdateStream mgh:CreateProgressUpdateStream arn:aws:mgh:region:account-id:ProgressUpdateStreamName/resource-id
DeleteProgressUpdateStream mgh:DeleteProgressUpdateStream arn:aws:mgh:region:account-id:ProgressUpdateStreamName/resource-id
DescribeApplicationState mgh:DescribeApplicationState arn:aws:mgh:region:account-id:ProgressUpdateStreamName/resource-id

or

arn:aws:mgh:region:account-id:ProgressUpdateStreamName/resource-id/*
DescribeMigrationTask mgh:DescribeMigrationTask arn:aws:mgh:region:account-id:ProgressUpdateStreamName/resource-id

or

arn:aws:mgh:region:account-id:ProgressUpdateStreamName/resource-id/*
DisassociateCreatedArtifact mgh:DisassociateCreatedArtifact arn:aws:mgh:region:account-id:ProgressUpdateStreamName/resource-id

or

arn:aws:mgh:region:account-id:ProgressUpdateStreamName/resource-id/*
DisassociateDiscoveredResource mgh:DisassociateDiscoveredResource arn:aws:mgh:region:account-id:ProgressUpdateStreamName/resource-id

or

arn:aws:mgh:region:account-id:ProgressUpdateStreamName/resource-id/*
ImportMigrationTask mgh:ImportMigrationTask arn:aws:mgh:region:account-id:ProgressUpdateStreamName/resource-id

or

arn:aws:mgh:region:account-id:ProgressUpdateStreamName/resource-id/*
ListCreatedArtifacts mgh:ListCreatedArtifacts arn:aws:mgh:region:account-id:ProgressUpdateStreamName/resource-id

or

arn:aws:mgh:region:account-id:ProgressUpdateStreamName/resource-id/*
ListDiscoveredResources mgh:ListDiscoveredResources arn:aws:mgh:region:account-id:ProgressUpdateStreamName/resource-id

or

arn:aws:mgh:region:account-id:ProgressUpdateStreamName/resource-id/*
ListMigrationTasks mgh:ListMigrationTasks *
ListProgressUpdateStreams mgh:ListProgressUpdateStreams *
NotifyApplicationState mgh:NotifyApplicationState arn:aws:mgh:region:account-id:ProgressUpdateStreamName/resource-id

or

arn:aws:mgh:region:account-id:ProgressUpdateStreamName/resource-id/*
NotifyMigrationTaskState mgh:NotifyMigrationTaskState arn:aws:mgh:region:account-id:ProgressUpdateStreamName/resource-id

or

arn:aws:mgh:region:account-id:ProgressUpdateStreamName/resource-id/*
PutResourceAttributes mgh:PutResourceAttributes arn:aws:mgh:region:account-id:ProgressUpdateStreamName/resource-id

or

arn:aws:mgh:region:account-id:ProgressUpdateStreamName/resource-id/*

Related Topics

On this page: