Menu
AWS Identity and Access Management
User Guide

Actions, Resources, and Condition Keys for Amazon Pinpoint

Amazon Pinpoint (service prefix: mobiletargeting) provides the following service-specific resources, actions, and condition context keys for use in IAM permission policies.

References:

Actions Defined by Amazon Pinpoint

You can specify the following actions in the Action element of an IAM policy statement. By using policies, you define the permissions for anyone performing an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions. For details about the columns in the following table, see The Actions Table.

Actions Description Access Level Resource Types (*required) Condition Keys Dependent Actions
CreateCampaign Create a campaign for an app. Write

apps*

CreateImportJob Import endpoint definitions from to create a segment. Write

apps*

CreateSegment Create a segment that is based on endpoint data reported to Pinpoint by your app. To allow a user to create a segment by importing endpoint data from outside of Pinpoint, allow the mobiletargeting:CreateImportJob action. Write

apps*

DeleteApnsChannel Delete the APNs channel for an app. Write

apps*

DeleteCampaign Delete a specific campaign. Write

apps*

campaigns*

DeleteGcmChannel Delete the GCM channel for an app. Write

apps*

DeleteSegment Delete a specific segment. Write

apps*

segments*

GetApnsChannel Retrieve information about the APNs channel for an app. Read

apps*

GetApplicationSettings Retrieve the default settings for an app. List

apps*

GetCampaign Retrieve information about a specific campaign. Read

apps*

campaigns*

GetCampaignActivities Retrieve information about the activities performed by a campaign. Read

apps*

campaigns*

GetCampaignVersion Retrieve information about a specific campaign version. Read

apps*

campaigns*

GetCampaignVersions Retrieve information about the current and prior versions of a campaign. Read

apps*

campaigns*

GetCampaigns Retrieve information about all campaigns for an app. List

apps*

GetEndpoint Retrieve information about a specific endpoint. Read

apps*

GetGcmChannel Retrieve information about the GCM channel for an app. Read

apps*

GetImportJob Retrieve information about a specific import job. Read

apps*

GetImportJobs Retrieve information about all import jobs for an app. List

apps*

GetReports [permission only] View analytics in the console. Read
GetSegment Retrieve information about a specific segment. Read

apps*

segments*

GetSegmentImportJobs Retrieve information about jobs that create segments by importing endpoint definitions from . Read

apps*

segments*

GetSegmentVersion Retrieve information about a specific segment version. Read

apps*

segments*

GetSegmentVersions Retrieve information about the current and prior versions of a segment. Read

apps*

segments*

GetSegments Retrieve information about the segments for an app. List

apps*

UpdateApnsChannel Update the Apple Push Notification service (APNs) certificate and private key that allows to send push notifications to your iOS app. Write

apps*

UpdateApplicationSettings Update the default settings for an app. Write

apps*

UpdateCampaign Update a specific campaign. Write

apps*

campaigns*

UpdateEndpoint Create an endpoint or update the information for an endpoint. Write

apps*

UpdateEndpointsBatch Create or update endpoints as a batch operation. Write

apps*

UpdateGcmChannel Update the Firebase Cloud Messaging (FCM) or Google Cloud Messaging (GCM) API key that allows to send push notifications to your Android app. Write

apps*

UpdateSegment Update a specific segment. Write

apps*

segments*

Resources Defined by Pinpoint

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements. Each action in the Actions table identifies the resource types that can be specified with that action. A resource type can also define which condition keys you can include in a policy. These keys are displayed in the last column of the table. For details about the columns in the following table, see The Resource Types Table.

Resource Types ARN Condition Keys
apps arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/${AppId}
campaigns arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/${AppId}/campaigns/${CampaignId}
endpoints arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/${AppId}/endpoints/${EndpointId}
segments arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/${AppId}/segments/${SegmentId}

Condition Keys for Amazon Pinpoint

Pinpoint has no service-specific context keys that can be used in the Condition element of policy statements. For the list of the global context keys that are available to all services, see Available Keys for Conditions in the IAM Policy Reference.