Actions, Resources, and Condition Keys for AWS IoT Events
AWS IoT Events (service prefix: iotevents
) provides the following service-specific resources, actions, and condition context
keys for use in IAM permission policies.
References:
-
Learn how to configure this service.
-
View a list of the API operations available for this service.
-
Learn how to protect this service and its resources by using IAM permission policies.
Topics
Actions Defined by AWS IoT Events
You can specify the following actions in the Action
element of an IAM policy statement. By using policies, you define the permissions
for anyone performing an operation in AWS. When you use an action in a policy,
you usually allow or deny access to the API operation or CLI command with the
same name. However, in some cases, a single action controls access to more than
one operation. Alternatively, some operations require several different actions.
For details about the columns in the following table, see The Actions Table.
Actions | Description | Access Level | Resource Types (*required) | Condition Keys | Dependent Actions |
---|---|---|---|---|---|
BatchPutMessage | Sends a set of messages to the AWS IoT Events system. | Write | |||
CreateDetectorModel | Creates a detector model. | Write | |||
CreateInput | Creates an input. | Write | |||
DeleteDetectorModel | Deletes a detector model. | Write | |||
DeleteInput | Deletes an input. | Write | |||
DescribeDetector | Returns information about the specified detector (instance). | Read | |||
DescribeDetectorModel | Describes a detector model. | Read | |||
DescribeInput | Describes an input. | Read | |||
DescribeLoggingOptions | Retrieves the current settings of the AWS IoT Events logging options. | Read | |||
ListDetectorModelVersions | Lists all the versions of a detector model. Only the metadata associated with each detector model version is returned. | List | |||
ListDetectorModels | Lists the detector models you have created. Only the metadata associated with each detector model is returned. | List | |||
ListDetectors | Lists detectors (the instances of a detector model). | List | |||
ListInputs | Lists the inputs you have created. | List | |||
PutLoggingOptions | Sets or updates the AWS IoT Events logging options. | Write | |||
UpdateDetectorModel | Updates a detector model. | Write | |||
UpdateInput | Updates an input. | Write |
Resources Defined by IoT Events
The following resource types are defined by this service and can be used in the
Resource
element of IAM permission policy statements. Each action in the Actions table identifies the resource types that can be specified with that action. A resource
type can also define which condition keys you can include in a policy. These
keys are displayed in the last column of the table. For details about the columns
in the following table, see The Resource Types Table.
Resource Types | ARN | Condition Keys |
---|---|---|
detectorModel |
arn:${Partition}:iotevents:${Region}:${Account}:detectorModel/${DetectorModelName}
|
|
input |
arn:${Partition}:iotevents:${Region}:${Account}:input/${inputName}
|
Condition Keys for AWS IoT Events
AWS IoT Events defines the following condition keys that can be used in the
Condition
element of an IAM policy. You can use these keys to further refine the conditions
under which the policy statement applies. For details about the columns in the
following table, see The Condition Keys Table.
To view the global condition keys that are available to all services, see Available Global Condition Keys in the IAM Policy Reference.
Condition Keys | Description | Type |
---|---|---|
iotevents:KeyValue | The value of the key (identifying the device or system) which caused the creation of this detector (instance). | String |