AWS Identity and Access Management
User Guide

Actions, Resources, and Condition Keys for Alexa for Business

Alexa for Business (service prefix: a4b) provides the following service-specific resources, actions, and condition context keys for use in IAM permission policies.

References:

Actions Defined by Alexa for Business

You can specify the following actions in the Action element of an IAM policy statement. By using policies, you define the permissions for anyone performing an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions. For details about the columns in the following table, see The Actions Table.

Actions Description Access Level Resource Types (*required) Condition Keys Dependent Actions
AssociateDeviceWithRoom Associates device with given room Write

device*

room*

AssociateSkillGroupWithRoom Associates the skill group with given room. SkillGroup ARN and Room ARN must be specified. Write

room*

skillgroup*

CreateProfile Creates a new profile. Write
CreateRoom Create room with given details. Write

profile*

CreateSkillGroup Creates a skill group with given name and description. Write
CreateUser Creates a user Write
DeleteProfile Delete profile by profile ARN Write

profile*

DeleteRoom Delete room. Write

room*

DeleteRoomSkillParameter Delete a parameter from a skill and room. Write

room*

DeleteSkillGroup Deletes skill group with skill group ARN. Skillgroup ARN must be specified. Write

skillgroup*

DeleteUser Delete a user Write

user*

DisassociateDeviceFromRoom Disassociates device from its current room Write

device*

DisassociateSkillGroupFromRoom Disassociates the skill group from given room. SkillGroup ARN and Room ARN must be specified. Write

room*

skillgroup*

GetDevice Get device details. Read

device*

GetProfile Gets profile when provided with Profile ARN Read

profile*

GetRoom Get room details. Read

room*

GetRoomSkillParameter Get an existing parameter that has been set for a skill and room. Read

room*

GetSkillGroup Gets skill group details with skill group ARN. Skillgroup ARN must be specified Read

skillgroup*

ListSkills Lists skills. List
ListTags Lists all tags on a resource Read
PutRoomSkillParameter Put a room specific parameter for a skill. Write

room*

ResolveRoom Returns resolved room information Read
RevokeInvitation Revoke an invitation. Write

user*

SearchDevices Search for devices. List
SearchProfiles Search for profiles. List
SearchRooms Search for rooms. List
SearchSkillGroups Search for skill groups. List
SearchUsers Search for users. List
SendInvitation Send an invitation to a user. Write

user*

StartDeviceSync Restore the device and its account to its known, default settings by clearing all information and settings set by its previous users Write
TagResource Adds metadata tags to a resource. Tagging
UntagResource Removes metadata tags from a resource. Tagging
UpdateDevice Updates device name. Write

device*

UpdateProfile Updates an existing profile. Write

profile*

UpdateRoom Update room details. Write

room*

UpdateSkillGroup Updates skill group details with skill group ARN. Skillgroup ARN must be specified. Write

skillgroup*

Resources Defined by Alexa for Business

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements. Each action in the Actions table identifies the resource types that can be specified with that action. A resource type can also define which condition keys you can include in a policy. These keys are displayed in the last column of the table. For details about the columns in the following table, see The Resource Types Table.

Resource Types ARN Condition Keys
profile arn:${Partition}:a4b:${Region}:${Account}:profile/${Resource_id}
room arn:${Partition}:a4b:${Region}:${Account}:room/${Resource_id}
device arn:${Partition}:a4b:${Region}:${Account}:device/${Resource_id}
skillgroup arn:${Partition}:a4b:${Region}:${Account}:skill-group/${Resource_id}
user arn:${Partition}:a4b:${Region}:${Account}:user/${Resource_id}

Condition Keys for Alexa for Business

Alexa for Business has no service-specific context keys that can be used in the Condition element of policy statements. For the list of the global context keys that are available to all services, see Available Keys for Conditions in the IAM Policy Reference.