Permissões da Amazon Cloud Directory: Referência de ações, recursos e condições

Ao configurar o Controle de acesso e escrever políticas de permissões que podem ser anexadas a uma identidade do IAM (políticas baseadas em identidade), você pode usar a tabela a seguir como referência. OListas de tabelas Cada operação de API do Amazon Cloud Directory, as ações correspondentes às quais você pode conceder permissões para executar a ação, o recurso da AWS ao qual você pode conceder as permissões. Especifique as ações no campo Action da política e o valor do recurso no campo Resource da política.

Você pode usar as chaves de condição em toda a AWS nas suas políticas de Amazon Cloud Directory para expressar condições. Para obter uma lista completa das chaves de toda a AWS, consulteChaves de condição globais disponíveisnoGuia do usuário do IAM.

nota

Para especificar uma ação, use o prefixo clouddirectory: seguido do nome da operação da API (por exemplo, clouddirectory:CreateDirectory).

API Amazon Cloud Directory para ações do Cloud Directory

Operações da Amazon Cloud Directory	Permissões necessárias (Ações da API)	Recursos
AddFacetToObject	clouddirectory:AddFacetToObject	*
ApplySchema	clouddirectory:ApplySchema	*
AttachObject	clouddirectory:AttachObject	*
AttachPolicy	clouddirectory:AttachPolicy	*
AttachToIndex	clouddirectory:AttachToIndex	*
AttachTypedLink	clouddirectory:AttachTypedLink	*
BatchRead	clouddirectory:BatchRead	*
BatchWrite	clouddirectory:BatchWrite	*
CreateDirectory	clouddirectory:CreateDirectory	*
CreateFacet	clouddirectory:CreateFacet	*
CreateIndex	clouddirectory:CreateIndex	*
CreateObject	clouddirectory:CreateObject	*
CreateSchema	clouddirectory:CreateSchema	*
CreateTypedLinkFacet	clouddirectory:CreateTypedLinkFacet	*
DeleteDirectory	clouddirectory:DeleteDirectory	*
DeleteFacet	clouddirectory:DeleteFacet	*
DeleteObject	clouddirectory:DeleteObject	*
DeleteSchema	clouddirectory:DeleteSchema	*
DeleteTypedLinkFacet	clouddirectory:DeleteTypedLinkFacet	*
DetachFromIndex	clouddirectory:DetachFromIndex	*
DetachObject	clouddirectory:DetachObject	*
DetachPolicy	clouddirectory:DetachPolicy	*
DetachedTypedLink	clouddirectory:DetachTypedLink	*
DisableDirectory	clouddirectory:DisableDirectory	*
EnableDirectory	clouddirectory:EnableDirectory	*
GetAppliedSchemaVersion	clouddirectory:GetAppliedSchemaVersion	*
GetDirectory	clouddirectory:GetDirectory	*
GetFacet	clouddirectory:GetFacet	*
GetObjectAttributes	clouddirectory:GetObjectAttributes	*
GetObjectInformation	clouddirectory:GetObjectInformation	*
GetSchemaAsJson	clouddirectory:GetSchemaAsJson	*
GetTypedLinkFacetInformation	clouddirectory:GetTypedLinkFacetInformation	*
ListAppliedSchemaArns	clouddirectory:ListAppliedSchemaArns	*
ListAttachedIndices	clouddirectory:ListAttachedIndices	*
ListDevelopmentSchemaArns	clouddirectory:ListDevelopmentSchemaArns	*
ListDirectories	clouddirectory:ListDirectories	*
ListFacetAttributes	clouddirectory:ListFacetAttributes	*
ListFacetNames	clouddirectory:ListFacetNames	*
ListIncomingTypedLinks	clouddirectory:ListIncomingTypedLinks	*
ListIndex	clouddirectory:ListIndex	*
ListObjectAttributes	clouddirectory:ListObjectAttributes	*
ListObjectChildren	clouddirectory:ListObjectChildren	*
ListObjectParentPaths	clouddirectory:ListObjectParentPaths	*
ListObjectParents	clouddirectory:ListObjectParents	*
ListObjectPolicies	clouddirectory:ListObjectPolicies	*
ListOutgoingTypedLinks	clouddirectory:ListOutgoingTypedLinks	*
ListPolicyAttachments	clouddirectory:ListPolicyAttachments	*
ListPublishedSchemaArns	clouddirectory:ListPublishedSchemaArns	*
ListTagsForResource	clouddirectory:ListTagsForResource	*
ListTypedLinkFacetAttributes	clouddirectory:ListTypedLinkFacetAttributes	*
ListTypedLinkFacetNames	clouddirectory:ListTypedLinkFacetNames	*
LookupPolicy	clouddirectory:LookupPolicy	*
PublishSchema	clouddirectory:PublishSchema	*
PutSchemaFromJson	clouddirectory:PutSchemaFromJson	*
RemoveFacetFromObject	clouddirectory:RemoveFacetFromObject	*
TagResource	clouddirectory:TagResource	*
UntagResource	clouddirectory:UntagResource	*
UpdateFacet	clouddirectory:UpdateFacet	*
UpdateObjectAttributes	clouddirectory:UpdateObjectAttributes	*
UpdateSchema	clouddirectory:UpdateSchema	*
UpdateTypedLinkFacet	clouddirectory:UpdateTypedLinkFacet	*
UpgradeAppliedSchema	clouddirectory:UpgradeAppliedSchema	*
UpgradePublishedSchema	clouddirectory:UpgradePublishedSchema	*