Autorizzazioni API Amazon Cloud Directory: Riferimento su operazioni, risorse e condizioni

Quando configuri il Controllo degli accessi e scrivi policy di autorizzazioni che puoi collegare a un'identità IAM (policy basate su identità), puoi usare la tabella seguente come riferimento. LaElencare tabelle Ogni operazione API Amazon Cloud Directory, le operazioni corrispondenti per l'esecuzione delle quali puoi concedere le autorizzazioni necessarie, la risorsa AWS per cui puoi concedere le autorizzazioni. Specifica le operazioni nel campo Action della policy e il valore della risorsa nel campo Resource della policy.

Per esprimere le condizioni, puoi utilizzare le chiavi di condizione a livello di AWS nelle policy Amazon Cloud Directory. Per un elenco completo di chiavi AWS, consultaChiavi di condizione globali disponibilinellaGuida per l'utente di IAM: .

Nota

Per specificare un'operazione, utilizza il prefisso clouddirectory: seguito dal nome dell'operazione API (ad esempio, clouddirectory:CreateDirectory).

Amazon Cloud Directory API e autorizzazioni necessarie per le operazioni
Operazioni dell'API Amazon Cloud Directory	Autorizzazioni necessarie (operazioni API)	Risorse
AddFacetToObject	clouddirectory:AddFacetToObject	*
ApplySchema	clouddirectory:ApplySchema	*
AttachObject	clouddirectory:AttachObject	*
AttachPolicy	clouddirectory:AttachPolicy	*
AttachToIndex	clouddirectory:AttachToIndex	*
AttachTypedLink	clouddirectory:AttachTypedLink	*
BatchRead	clouddirectory:BatchRead	*
BatchWrite	clouddirectory:BatchWrite	*
CreateDirectory	clouddirectory:CreateDirectory	*
CreateFacet	clouddirectory:CreateFacet	*
CreateIndex	clouddirectory:CreateIndex	*
CreateObject	clouddirectory:CreateObject	*
CreateSchema	clouddirectory:CreateSchema	*
CreateTypedLinkFacet	clouddirectory:CreateTypedLinkFacet	*
DeleteDirectory	clouddirectory:DeleteDirectory	*
DeleteFacet	clouddirectory:DeleteFacet	*
DeleteObject	clouddirectory:DeleteObject	*
DeleteSchema	clouddirectory:DeleteSchema	*
DeleteTypedLinkFacet	clouddirectory:DeleteTypedLinkFacet	*
DetachFromIndex	clouddirectory:DetachFromIndex	*
DetachObject	clouddirectory:DetachObject	*
DetachPolicy	clouddirectory:DetachPolicy	*
DetachedTypedLink	clouddirectory:DetachTypedLink	*
DisableDirectory	clouddirectory:DisableDirectory	*
EnableDirectory	clouddirectory:EnableDirectory	*
GetAppliedSchemaVersion	clouddirectory:GetAppliedSchemaVersion	*
GetDirectory	clouddirectory:GetDirectory	*
GetFacet	clouddirectory:GetFacet	*
GetObjectAttributes	clouddirectory:GetObjectAttributes	*
GetObjectInformation	clouddirectory:GetObjectInformation	*
GetSchemaAsJson	clouddirectory:GetSchemaAsJson	*
GetTypedLinkFacetInformation	clouddirectory:GetTypedLinkFacetInformation	*
ListAppliedSchemaArns	clouddirectory:ListAppliedSchemaArns	*
ListAttachedIndices	clouddirectory:ListAttachedIndices	*
ListDevelopmentSchemaArns	clouddirectory:ListDevelopmentSchemaArns	*
ListDirectories	clouddirectory:ListDirectories	*
ListFacetAttributes	clouddirectory:ListFacetAttributes	*
ListFacetNames	clouddirectory:ListFacetNames	*
ListIncomingTypedLinks	clouddirectory:ListIncomingTypedLinks	*
ListIndex	clouddirectory:ListIndex	*
ListObjectAttributes	clouddirectory:ListObjectAttributes	*
ListObjectChildren	clouddirectory:ListObjectChildren	*
ListObjectParentPaths	clouddirectory:ListObjectParentPaths	*
ListObjectParents	clouddirectory:ListObjectParents	*
ListObjectPolicies	clouddirectory:ListObjectPolicies	*
ListOutgoingTypedLinks	clouddirectory:ListOutgoingTypedLinks	*
ListPolicyAttachments	clouddirectory:ListPolicyAttachments	*
ListPublishedSchemaArns	clouddirectory:ListPublishedSchemaArns	*
ListTagsForResource	clouddirectory:ListTagsForResource	*
ListTypedLinkFacetAttributes	clouddirectory:ListTypedLinkFacetAttributes	*
ListTypedLinkFacetNames	clouddirectory:ListTypedLinkFacetNames	*
LookupPolicy	clouddirectory:LookupPolicy	*
PublishSchema	clouddirectory:PublishSchema	*
PutSchemaFromJson	clouddirectory:PutSchemaFromJson	*
RemoveFacetFromObject	clouddirectory:RemoveFacetFromObject	*
TagResource	clouddirectory:TagResource	*
UntagResource	clouddirectory:UntagResource	*
UpdateFacet	clouddirectory:UpdateFacet	*
UpdateObjectAttributes	clouddirectory:UpdateObjectAttributes	*
UpdateSchema	clouddirectory:UpdateSchema	*
UpdateTypedLinkFacet	clouddirectory:UpdateTypedLinkFacet	*
UpgradeAppliedSchema	clouddirectory:UpgradeAppliedSchema	*
UpgradePublishedSchema	clouddirectory:UpgradePublishedSchema	*