Menu
AWS Storage Gateway
User Guide (API Version 2013-06-30)

AWS Storage Gateway API Permissions: Actions, Resources, and Conditions Reference

When you are setting up Access Control and writing permissions policies that you can attach to an IAM identity (identity-based policies), you can use the following table as a reference. The table lists each AWS Storage Gateway API operation, the corresponding actions for which you can grant permissions to perform the action, and the AWS resource for which you can grant the permissions. You specify the actions in the policy's Action field, and you specify the resource value in the policy's Resource field.

You can use AWS-wide condition keys in your AWS Storage Gateway policies to express conditions. For a complete list of AWS-wide keys, see Available keys in the IAM User Guide.

Note

To specify an action, use the storagegateway: prefix followed by the API operation name (for example, storagegateway:ActivateGateway). For each AWS Storage Gateway action, you can specify a wildcard character (*) as the resource.

If you see an expand arrow () in the upper-right corner of the table, you can open the table in a new window. To close the window, choose the close button (X) in the lower-right corner.

For a list of Storage Gateway resources with the ARN format, see AWS Storage Gateway Resources and Operations.

AWS Storage Gateway API and Required Permissions for Actions

Storage Gateway API Operations Required Permissions (API Actions) Resources

ActivateGateway

storagegateway:ActivateGateway

*

AddCache

storagegateway:AddCache

arn:aws:storagegateway:region:account-id:gateway/gateway-id

AddTagsToResource

storagegateway:AddTagsToResource

arn:aws:storagegateway:region:account-id:gateway/gateway-id

or

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

or

arn:aws:storagegateway:region:account-id:tape/tapebarcode

AddUploadBuffer

storagegateway:AddUploadBuffer

arn:aws:storagegateway:region:account-id:gateway/gateway-id

AddWorkingStorage

storagegateway:AddWorkingStorage

arn:aws:storagegateway:region:account-id:gateway/gateway-id

CancelArchival

storagegateway:CancelArchival

arn:aws:storagegateway:region:account-id:tape/tapebarcode

CancelRetrieval

storagegateway:CancelRetrieval

arn:aws:storagegateway:region:account-id:tape/tapebarcode

CreateCachediSCSIVolume

storagegateway:CreateCachediSCSIVolume

arn:aws:storagegateway:region:account-id:gateway/gateway-id

CreateNFSFileShare

storagegateway:CreateNFSFileShare

arn:aws:storagegateway:region:account-id:gateway/gateway-id

CreateSnapshot

storagegateway:CreateSnapshot

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

CreateSnapshotFromVolumeRecoveryPoint

storagegateway:CreateSnapshotFromVolumeRecoveryPoint

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

CreateStorediSCSIVolume

storagegateway:CreateStorediSCSIVolume

arn:aws:storagegateway:region:account-id:gateway/gateway-id

CreateTapes

storagegateway:CreateTapes

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DeleteBandwidthRateLimit

storagegateway:DeleteBandwidthRateLimit

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DeleteChapCredentials

storagegateway:DeleteChapCredentials

arn:aws:storagegateway:region:account-id:gateway/gateway-id/target/iSCSItarget

DeleteFileShare

storagegateway:DeleteFileShare

arn:aws:storagegateway:region:account-id:gateway/gateway-id/share/share-id

DeleteGateway

storagegateway:DeleteGateway

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DeleteSnapshotSchedule

storagegateway:DeleteSnapshotSchedule

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

DeleteTape

storagegateway:DeleteTape

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DeleteTapeArchive

storagegateway:DeleteTapeArchive

*

DeleteVolume

storagegateway:DeleteVolume

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

DescribeBandwidthRateLimit

storagegateway:DescribeBandwidthRateLimit

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeCache

storagegateway:DescribeCache

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeCachediSCSIVolumes

storagegateway:DescribeCachediSCSIVolumes

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

DescribeChapCredentials

storagegateway:DescribeChapCredentials

arn:aws:storagegateway:region:account-id:gateway/gateway-id/target/iSCSItarget

DescribeGatewayInformation

storagegateway:DescribeGatewayInformation

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeMaintenanceStartTime

storagegateway:DescribeMaintenanceStartTime

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeNFSFileShares

storagegateway:DescribeNFSFileShares

arn:aws:storagegateway:region:account-id:gateway/gateway-id/share/share-id

DescribeSnapshotSchedule

storagegateway:DescribeSnapshotSchedule

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

DescribeStorediSCSIVolumes

storagegateway:DescribeStorediSCSIVolumes

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

DescribeTapeArchives

storagegateway:DescribeTapeArchives

*

DescribeTapeRecoveryPoints

storagegateway:DescribeTapeRecoveryPoints

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeTapes

storagegateway:DescribeTapes

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeUploadBuffer

storagegateway:DescribeUploadBuffer

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeVTLDevices

storagegateway:DescribeVTLDevices

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeWorkingStorage

storagegateway:DescribeWorkingStorage

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DisableGateway

storagegateway:DisableGateway

arn:aws:storagegateway:region:account-id:gateway/gateway-id

ListFileShares

storagegateway:ListFileShares

arn:aws:storagegateway:region:account-id:gateway/gateway-id

ListGateways

storagegateway:ListGateways

*

ListLocalDisks

storagegateway:ListLocalDisks

arn:aws:storagegateway:region:account-id:gateway/gateway-id

ListTagsForResource

storagegateway:ListTagsForResource

arn:aws:storagegateway:region:account-id:gateway/gateway-id or arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id or arn:aws:storagegateway:region:account-id:tape/tapebarcode

ListTapes

storagegateway:ListTapes

arn:aws:storagegateway:region:account-id:gateway/gateway-id

ListVolumeInitiators

storagegateway:ListVolumeInitiators

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

ListVolumeRecoveryPoints

storagegateway:ListVolumeRecoveryPoints

arn:aws:storagegateway:region:account-id:gateway/gateway-id

ListVolumes

storagegateway:ListVolumes

arn:aws:storagegateway:region:account-id:gateway/gateway-id

RefreshCache

storagegateway:RefreshCache

arn:aws:storagegateway:region:account-id:gateway/gateway-id/share/share-id

RemoveTagsFromResource

storagegateway:RemoveTagsFromResource

arn:aws:storagegateway:region:account-id:gateway/gateway-id or arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id or arn:aws:storagegateway:region:account-id:tape/tapebarcode

ResetCache

storagegateway:ResetCache

arn:aws:storagegateway:region:account-id:gateway/gateway-id

RetrieveTapeArchive

storagegateway:RetrieveTapeArchive

arn:aws:storagegateway:region:account-id:gateway/gateway-id

RetrieveTapeRecoveryPoint

storagegateway:RetrieveTapeRecoveryPoint

arn:aws:storagegateway:region:account-id:gateway/gateway-id

ShutdownGateway

storagegateway:ShutdownGateway

arn:aws:storagegateway:region:account-id:gateway/gateway-id

StartGateway

storagegateway:StartGateway

arn:aws:storagegateway:region:account-id:gateway/gateway-id

UpdateBandwidthRateLimit

storagegateway:UpdateBandwidthRateLimit

arn:aws:storagegateway:region:account-id:gateway/gateway-id

UpdateChapCredentials

storagegateway:UpdateChapCredentials

arn:aws:storagegateway:region:account-id:gateway/gateway-id/target/iSCSItarget

UpdateGatewayInformation

storagegateway:UpdateGatewayInformation

arn:aws:storagegateway:region:account-id:gateway/gateway-id

UpdateGatewaySoftwareNow

storagegateway:UpdateGatewaySoftwareNow

arn:aws:storagegateway:region:account-id:gateway/gateway-id

UpdateMaintenanceStartTime

storagegateway:UpdateMaintenanceStartTime

arn:aws:storagegateway:region:account-id:gateway/gateway-id

UpdateNFSFileShare

storagegateway:UpdateNFSFileShare

arn:aws:storagegateway:region:account-id:gateway/gateway-id/share/share-id

UpdateSnapshotSchedule

storagegateway:UpdateSnapshotSchedule

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

UpdateVTLDeviceType

storagegateway:UpdateVTLDeviceType

arn:aws:storagegateway:region:account-id:gateway/gateway-id/device/vtldevice

Related Topics