AWS Elemental MediaConnect
User Guide

The AWS Documentation website is getting a new look!
Try it now and let us know what you think. Switch to the new look >>

You can return to the original look by selecting English in the language selector above.

Step 3a: Create a Policy

Create two policies for AWS Elemental MediaConnect: one to provide read/write access and one to provide read-only access. Perform these steps one time only for each policy.

To create policies

  1. Use your AWS account ID or account alias, and the credentials for your admin IAM user, to sign in to the IAM console.

  2. In the navigation pane of the console, choose Policies.

  3. On the Policies page, create a policy named MediaConnectAllAccess that allows all actions on all resources in AWS Elemental MediaConnect:

    1. Choose Create policy.

    2. Choose the JSON tab and paste the following policy:

      { "Version": "2012-10-17", "Statement": [ { "Action": [ "mediaconnect:*" ], "Effect": "Allow", "Resource": "*" }, { "Action": [ "ec2:DescribeAvailabilityZones" ], "Effect": "Allow", "Resource": "*" }, { "Action": [ "cloudwatch:GetMetricStatistics" ], "Effect": "Allow", "Resource": "*" }, { "Action": [ "iam:PassRole" ], "Effect": "Allow", "Resource": "*" } ] }

      This policy allows all actions on all resources in AWS Elemental MediaConnect.

    3. Choose Review policy.

    4. On the Review policy page, for Name, enter MediaConnectAllAccess, and then choose Create policy.

  4. On the Policies page, create a read-only policy named MediaConnectReadOnlyAccess for AWS Elemental MediaConnect:

    1. Choose Create policy.

    2. Choose the JSON tab and paste the following policy:

      { "Version": "2012-10-17", "Statement": [ { "Action": [ "mediaconnect:List*", "mediaconnect:Describe*" ], "Effect": "Allow", "Resource": "*" }, { "Action": [ "ec2:DescribeAvailabilityZones" ], "Effect": "Allow", "Resource": "*" }, { "Action": [ "cloudwatch:GetMetricStatistics" ], "Effect": "Allow", "Resource": "*" }, { "Action": [ "iam:PassRole" ], "Effect": "Allow", "Resource": "*" } ] }
    3. Choose Review policy.

    4. On the Review policy page, for Name, enter MediaConnectReadOnlyAccess, and then choose Create policy.