AWS Identity and Access Management
User Guide

Actions and Condition Context Keys for Amazon WorkMail

Amazon WorkMail (service prefix: workmail) provides the following service-specific actions and condition context keys for use in IAM policies.

Actions for Amazon WorkMail

For information about using the following Amazon WorkMail API actions in an IAM policy, see AWS Identity and Access Management Policies for Amazon WorkMail in the Amazon WorkMail Administrator Guide.

  • workmail:AddMembersToGroup

  • workmail:CreateGroup

  • workmail:CreateMailDomain

  • workmail:CreateMailUser

  • workmail:CreateOrganization

  • workmail:CreateResource

  • workmail:DeleteMailDomain

  • workmail:DeleteMobileDevice

  • workmail:DeleteOrganization

  • workmail:DescribeDirectories

  • workmail:DescribeKmsKeys

  • workmail:DescribeMailDomains

  • workmail:DescribeMailGroups

  • workmail:DescribeMailUsers

  • workmail:DescribeOrganizations

  • workmail:DisableMailGroups

  • workmail:DisableMailUsers

  • workmail:EnableMailDomain

  • workmail:EnableMailGroups

  • workmail:EnableMailUsers

  • workmail:GetMailDomainDetails

  • workmail:GetMailGroupDetails

  • workmail:GetMailUserDetails

  • workmail:GetMobileDeviceDetails

  • workmail:GetMobileDevicesForUser

  • workmail:GetMobilePolicyDetails

  • workmail:ListMembersInMailGroup

  • workmail:RemoveMembersFromGroup

  • workmail:ResetUserPassword

  • workmail:SearchMembers

  • workmail:SetAdmin

  • workmail:SetDefaultMailDomain

  • workmail:SetMailGroupDetails

  • workmail:SetMailUserDetails

  • workmail:SetMobilePolicyDetails

  • workmail:WipeMobileDevice

Condition context keys for Amazon WorkMail

Amazon WorkMail has no service-specific context keys that can be used in an IAM policy. For the list of the global condition context keys that are available to all services, see Available Global Condition Keys in the IAM Policy Elements Reference.