DataSyncAPI 권한: 작업 및 리소스

AWS Identity and Access Management(IAM) 정책을 생성할 때, 수행할 권한을 부여할 수 있는 해당 작업, 권한 부여된AWS 리소스가 각각 나열되어 있습니다.AWS DataSync

일반적으로 정책에DataSync 권한을 추가하는 방법은 다음과 같습니다.

• Action요소에 동작을 지정합니다. 값에는datasync: 접두사와 API 작업 이름이 포함됩니다. 예: datasync:CreateTask.

• Resource요소의 작업과 관련된AWS 리소스를 지정합니다.

DataSync정책에서AWS 조건 키를 사용할 수도 있습니다. 전체 키는 IAM 사용 가능한 키를 참조하십시오.AWS

리소스 및 해당 Amazon 리소스 이름 (ARN) 형식은 섹션을 참조하십시오DataSync 리소스 및 작업.DataSync

DataSyncAPI 작업 및 해당 작업

AddStorageSystem

작업: datasync:AddStorageSystem

리소스: 없음

작업:

• kms:Decrypt

• iam:CreateServiceLinkedRole

리소스: *

작업: secretsmanager:CreateSecret

리소스: arn:aws:secretsmanager:region:account-id:secret:datasync!*

CancelTaskExecution

작업: datasync:CancelTaskExecution

리소스: arn:aws:datasync:region:account-id:task/task-id/execution/exec-id

CreateAgent

작업: datasync:CreateAgent

리소스: 없음

CreateLocationEfs

작업: datasync:CreateLocationEfs

리소스: 없음

CreateLocationFsxLustre

작업: datasync:CreateLocationFsxLustre

리소스: 없음

CreateLocationFsxOntap

작업: datasync:CreateLocationFsxOntap

리소스: 없음

CreateLocationFsxOpenZfs

작업: datasync:CreateLocationFsxOpenZfs

리소스: 없음

CreateLocationFsxWindows

작업: datasync:CreateLocationFsxWindows

리소스: 없음

CreateLocationHdfs

작업: dataSync:CreateLocationHdfs

리소스: arn:aws:datasync:region:account-id:agent/agent-id

CreateLocationNfs

작업: datasync:CreateLocationNfs

리소스: arn:aws:datasync:region:account-id:agent/agent-id

CreateLocationObjectStorage

작업: dataSync:CreateLocationObjectStorage

리소스: arn:aws:datasync:region:account-id:agent/agent-id

CreateLocationS3

작업: datasync:CreateLocationS3

리소스:arn:aws:datasync:region:account-id:agent/agent-id (아웃포스트의 Amazon S3에만 해당)

CreateLocationSmb

작업: datasync:CreateLocationSmb

리소스: arn:aws:datasync:region:account-id:agent/agent-id

CreateTask

작업: datasync:CreateTask

리소스:

• arn:aws:datasync:region:account-id:location/source-location-id

• arn:aws:datasync:region:account-id:location/destination-location-id

DeleteAgent

작업: datasync:DeleteAgent

리소스: arn:aws:datasync:region:account-id:agent/agent-id

DeleteLocation

작업: datasync:DeleteLocation

리소스: arn:aws:datasync:region:account-id:location/location-id

DeleteTask

작업: datasync:DeleteTask

리소스: arn:aws:datasync:region:account-id:task/task-id

DescribeAgent

작업: datasync:DescribeAgent

리소스: arn:aws:datasync:region:account-id:agent/agent-id

DescribeDiscoveryJob

작업: datasync:DescribeDiscoveryJob

리소스: arn:aws:datasync:region:account-id:system/storage-system-id/job/discovery-job-id

DescribeLocationEfs

작업: datasync:DescribeLocationEfs

리소스: arn:aws:datasync:region:account-id:location/location-id

DescribeLocationFsxLustre

작업: datasync:DescribeLocationFsxLustre

리소스: arn:aws:datasync:region:account-id:location/location-id

DescribeLocationFsxOntap

작업: datasync:DescribeLocationFsxOntap

리소스: arn:aws:datasync:region:account-id:location/location-id

DescribeLocationFsxOpenZfs

작업: datasync:DescribeLocationFsxOpenZfs

리소스: arn:aws:datasync:region:account-id:location/location-id

DescribeLocationFsxWindows

작업: datasync:DescribeLocationFsxWindows

리소스:arn:aws:datasync:region:account-id:location/location-id

DescribeLocationHdfs

작업: datasync:DescribeLocationHdfs

리소스: arn:aws:datasync:region:account-id:location/location-id

DescribeLocationNfs

작업: datasync:DescribeLocationNfs

리소스: arn:aws:datasync:region:account-id:location/location-id

DescribeLocationObjectStorage

작업: datasync:DescribeLocationObjectStorage

리소스: arn:aws:datasync:region:account-id:location/location-id

DescribeLocationS3

작업: datasync:DescribeLocationS3

리소스: arn:aws:datasync:region:account-id:location/location-id

DescribeLocationSmb

작업: datasync:DescribeLocationSmb

리소스: arn:aws:datasync:region:account-id:location/location-id

DescribeStorageSystem

작업: datasync:DescribeStorageSystem

리소스: arn:aws:datasync:region:account-id:system/storage-system-id

작업: secretsmanager:DescribeSecret

리소스: arn:aws:secretsmanager:region:account-id:secret:datasync!*

DescribeStorageSystemResourceMetrics

작업: datasync:DescribeStorageSystemResourceMetrics

리소스: arn:aws:datasync:region:account-id:system/storage-system-id/job/discovery-job-id

DescribeStorageSystemResources

작업: datasync:DescribeStorageSystemResources

리소스: arn:aws:datasync:region:account-id:system/storage-system-id/job/discovery-job-id

DescribeTask

작업: datasync:DescribeTask

리소스: arn:aws:datasync:region:account-id:task/task-id

DescribeTaskExecution

작업: datasync:DescribeTaskExecution

리소스: arn:aws:datasync:region:account-id:task/task-id/execution/exec-id

GenerateRecommendations

작업: datasync:GenerateRecommendations

리소스: arn:aws:datasync:region:account-id:system/storage-system-id/job/discovery-job-id

ListAgents

작업: datasync:ListAgents

리소스: 없음

ListDiscoveryJobs

작업: datasync:ListDiscoveryJobs

리소스: arn:aws:datasync:region:account-id:system/storage-system-id

ListLocations

작업: datasync:ListLocations

리소스: 없음

ListTagsForResource

작업: datasync:ListTagsForResource

리소스:

• arn:aws:datasync:region:account-id:agent/agent-id

• arn:aws:datasync:region:account-id:task/task-id

• arn:aws:datasync:region:account-id:location/location-id

ListTaskExecutions

작업: datasync:ListTaskExecutions

리소스: arn:aws:datasync:region:account-id:task/task-id

ListTasks

작업: datasync:ListTasks

리소스: 없음

RemoveStorageSystem

작업: datasync:RemoveStorageSystem

리소스: arn:aws:datasync:region:account-id:system/storage-system-id

작업: secretsmanager:DeleteSecret

리소스: arn:aws:secretsmanager:region:account-id:secret:datasync!*

StartDiscoveryJob

작업: datasync:StartDiscoveryJob

리소스: arn:aws:datasync:region:account-id:system/storage-system-id

StopDiscoveryJob

작업: datasync:StopDiscoveryJob

리소스: arn:aws:datasync:region:account-id:system/storage-system-id/job/discovery-job-id

StartTaskExecution

작업: datasync:StartTaskExecution

리소스: arn:aws:datasync:region:account-id:task/task-id

TagResource

작업: datasync:TagResource

리소스:

• arn:aws:datasync:region:account-id:agent/agent-id

• arn:aws:datasync:region:account-id:task/task-id

• arn:aws:datasync:region:account-id:location/location-id

UntagResource

작업: datasync:UntagResource

리소스:

• arn:aws:datasync:region:account-id:agent/agent-id

• arn:aws:datasync:region:account-id:task/task-id

• arn:aws:datasync:region:account-id:location/location-id

UpdateAgent

작업: datasync:UpdateAgent

리소스: arn:aws:datasync:region:account-id:agent/agent-id

UpdateDiscoveryJob

작업: datasync:UpdateDiscoveryJob

리소스: arn:aws:datasync:region:account-id:system/storage-system-id/job/discovery-job-id

UpdateLocationHdfs

작업: datasync:UpdateLocationHdfs

리소스:

• arn:aws:datasync:region:account-id:agent/agent-id

• arn:aws:datasync:region:account-id:location/location-id

UpdateLocationNfs

작업: datasync:UpdateLocationNfs

리소스: arn:aws:datasync:region:account-id:location/location-id

UpdateLocationObjectStorage

작업: datasync:UpdateLocationObjectStorage

리소스:

• arn:aws:datasync:region:account-id:agent/agent-id

• arn:aws:datasync:region:account-id:location/location-id

UpdateLocationSmb

작업: datasync:UpdateLocationSmb

리소스:

• arn:aws:datasync:region:account-id:agent/agent-id

• arn:aws:datasync:region:account-id:location/location-id

UpdateStorageSystem

작업: datasync:UpdateStorageSystem

리소스:

• arn:aws:datasync:region:account-id:agent/agent-id

• arn:aws:datasync:region:account-id:system/storage-system-id

UpdateTask

작업: datasync:UpdateTask

리소스: arn:aws:datasync:region:account-id:task/task-id

UpdateTaskExecution

작업: datasync:UpdateTaskExecution

리소스: arn:aws:datasync:region:account-id:task/task-id/execution/exec-id