本文属于机器翻译版本。若本译文内容与英语原文存在差异，则一律以英文原文为准。

# 的操作、资源和条件键 AWS 连续体
<a name="list_continuum"></a>

AWS Continuum（服务前缀： `continuum`) 提供以下特定服务的操作、资源、操作和条件密钥，用于 IAM 权限策略。

参考：
+ 了解如何[配置该服务](https://docs.aws.amazon.com/continuum/latest/userguide/what-is-continuum.html)。
+ 查看[适用于该服务的 API 操作列表](https://docs.aws.amazon.com/continuum/latest/APIReference/)。
+ 了解如何[使用 IAM](https://docs.aws.amazon.com/continuum/latest/userguide/security-iam.html) 权限策略保护该服务及其资源。
+ 查看 [编程服务授权参考](https://servicereference.us-east-1.amazonaws.com/v1/continuum/continuum.json) 用于此服务。

**Topics**
+ [动作定义为 AWS 连续体](#list_continuum-actions-as-permissions)
+ [资源类型定义为 AWS 连续体](#list_continuum-resources-for-iam-policies)
+ [的条件键 AWS 连续体](#list_continuum-policy-keys)

## 动作定义为 AWS 连续体
<a name="list_continuum-actions-as-permissions"></a>

您可以在 IAM 策略语句的 `Action` 元素中指定以下操作。对于每个操作，该表列出了该操作支持的资源类型和条件键。可以使用策略授予在 AWS中执行操作的权限。您在策略中使用一项操作时，通常使用相同的名称允许或拒绝对 API 操作或 CLI 命令的访问。但在某些情况下，单一动作可控制对多项操作的访问。还有某些操作需要多种不同的动作。




- **   [AssociateCollector](https://docs.aws.amazon.com/continuum/latest/APIReference/API_AssociateCollector.html)  **
  - **说明:** 授予将收藏家与环境关联的权限
  - **资源类型（\* 为必需）:** [environments\*](#list_continuum-resource-environments)
  - **条件键:** [continuum:CollectorArn](#list_continuum-continuum_CollectorArn)
  - **访问级别:** 写入

- **   [CreateCodeFinding](https://docs.aws.amazon.com/continuum/latest/APIReference/API_CreateCodeFinding.html)  **
  - **说明:** 授予在环境中创建代码查找的权限
  - **资源类型（\* 为必需）:** [code-findings\*](#list_continuum-resource-code-findings) / **条件键:**  
  - **资源类型（\* 为必需）:** [environments\*](#list_continuum-resource-environments) / **条件键:**  
  - **访问级别:** 写入

- **   [CreateCodeScan](https://docs.aws.amazon.com/continuum/latest/APIReference/API_CreateCodeScan.html)  **
  - **说明:** 授予启动环境代码扫描的权限
  - **资源类型（\* 为必需）:** [code-scans\*](#list_continuum-resource-code-scans) / **条件键:**  
  - **资源类型（\* 为必需）:** [environments\*](#list_continuum-resource-environments) / **条件键:**  
  - **访问级别:** 写入

- **   [CreateCollector](https://docs.aws.amazon.com/continuum/latest/APIReference/API_CreateCollector.html)  **
  - **说明:** 授予创建收藏家的权限
  - **资源类型（\* 为必需）:** [collectors\*](#list_continuum-resource-collectors)
  - **条件键:**  
  - **访问级别:** 写入

- **   [CreateEnvironment](https://docs.aws.amazon.com/continuum/latest/APIReference/API_CreateEnvironment.html)  **
  - **说明:** 授予创建环境的权限
  - **资源类型（\* 为必需）:** [environments\*](#list_continuum-resource-environments) / **条件键:** [continuum:RepositoryName](#list_continuum-continuum_RepositoryName)
  - **资源类型（\* 为必需）:** [integrations](#list_continuum-resource-integrations) / **条件键:** [continuum:RepositoryName](#list_continuum-continuum_RepositoryName)
  - **访问级别:** 写入

- **   [CreateIntegration](https://docs.aws.amazon.com/continuum/latest/APIReference/API_CreateIntegration.html)  **
  - **说明:** 授予创建与外部源提供商集成的权限
  - **资源类型（\* 为必需）:** [integrations\*](#list_continuum-resource-integrations)
  - **条件键:** [continuum:S3BucketName](#list_continuum-continuum_S3BucketName)
  - **访问级别:** 写入

- **   [DeleteCollector](https://docs.aws.amazon.com/continuum/latest/APIReference/API_DeleteCollector.html)  **
  - **说明:** 授予删除收藏家的权限
  - **资源类型（\* 为必需）:** [collectors\*](#list_continuum-resource-collectors)
  - **条件键:**  
  - **访问级别:** 写入

- **   [DeleteEnvironment](https://docs.aws.amazon.com/continuum/latest/APIReference/API_DeleteEnvironment.html)  **
  - **说明:** 授予删除环境的权限
  - **资源类型（\* 为必需）:** [environments\*](#list_continuum-resource-environments)
  - **条件键:**  
  - **访问级别:** 写入

- **   [DeleteIntegration](https://docs.aws.amazon.com/continuum/latest/APIReference/API_DeleteIntegration.html)  **
  - **说明:** 授予权限以删除集成
  - **资源类型（\* 为必需）:** [integrations\*](#list_continuum-resource-integrations)
  - **条件键:**  
  - **访问级别:** 写入

- **   [DisassociateCollector](https://docs.aws.amazon.com/continuum/latest/APIReference/API_DisassociateCollector.html)  **
  - **说明:** 授予取消收藏家与环境关联的权限
  - **资源类型（\* 为必需）:** [environments\*](#list_continuum-resource-environments)
  - **条件键:** [continuum:CollectorArn](#list_continuum-continuum_CollectorArn)
  - **访问级别:** 写入

- **   [GetCodeFinding](https://docs.aws.amazon.com/continuum/latest/APIReference/API_GetCodeFinding.html)  **
  - **说明:** 授予查找代码的权限
  - **资源类型（\* 为必需）:** [code-findings\*](#list_continuum-resource-code-findings)
  - **条件键:**  
  - **访问级别:** 读取

- **   [GetCodeIssue](https://docs.aws.amazon.com/continuum/latest/APIReference/API_GetCodeIssue.html)  **
  - **说明:** 授予处理代码问题的权限
  - **资源类型（\* 为必需）:** [code-issues\*](#list_continuum-resource-code-issues)
  - **条件键:**  
  - **访问级别:** 读取

- **   [GetCodeIssueArtifact](https://docs.aws.amazon.com/continuum/latest/APIReference/API_GetCodeIssueArtifact.html)  **
  - **说明:** 授予获取代码问题构件的权限
  - **资源类型（\* 为必需）:** [code-issues\*](#list_continuum-resource-code-issues)
  - **条件键:**  
  - **访问级别:** 读取

- **   [GetCodeScan](https://docs.aws.amazon.com/continuum/latest/APIReference/API_GetCodeScan.html)  **
  - **说明:** 授予进行代码扫描的权限
  - **资源类型（\* 为必需）:** [code-scans\*](#list_continuum-resource-code-scans)
  - **条件键:**  
  - **访问级别:** 读取

- **   [GetCollector](https://docs.aws.amazon.com/continuum/latest/APIReference/API_GetCollector.html)  **
  - **说明:** 授予获得收藏家的权限
  - **资源类型（\* 为必需）:** [collectors\*](#list_continuum-resource-collectors)
  - **条件键:**  
  - **访问级别:** 读取

- **   [GetCollectorDataAccessAuthorization](https://docs.aws.amazon.com/continuum/latest/APIReference/API_GetCollectorDataAccessAuthorization.html)  **
  - **说明:** 授予从环境中访问收集者数据的权限
  - **资源类型（\* 为必需）:** [collectors\*](#list_continuum-resource-collectors)
  - **条件键:** [continuum:EnvironmentArn](#list_continuum-continuum_EnvironmentArn)
  - **访问级别:** 读取

- **   [GetEnvironment](https://docs.aws.amazon.com/continuum/latest/APIReference/API_GetEnvironment.html)  **
  - **说明:** 授予获取环境的权限
  - **资源类型（\* 为必需）:** [environments\*](#list_continuum-resource-environments)
  - **条件键:**  
  - **访问级别:** 读取

- **   [GetIntegration](https://docs.aws.amazon.com/continuum/latest/APIReference/API_GetIntegration.html)  **
  - **说明:** 授予权限以获得集成
  - **资源类型（\* 为必需）:** [integrations\*](#list_continuum-resource-integrations)
  - **条件键:**  
  - **访问级别:** 读取

- **   [GetResourcePolicy](https://docs.aws.amazon.com/continuum/latest/APIReference/API_GetResourcePolicy.html)  **
  - **说明:** 授予将资源策略附加到资源的权限
  - **资源类型（\* 为必需）:** [collectors\*](#list_continuum-resource-collectors)
  - **条件键:**  
  - **访问级别:** 读取

- **   [ListAssociatedCollectors](https://docs.aws.amazon.com/continuum/latest/APIReference/API_ListAssociatedCollectors.html)  **
  - **说明:** 授予列出与环境相关的收藏家的权限
  - **资源类型（\* 为必需）:** [environments\*](#list_continuum-resource-environments)
  - **条件键:**  
  - **访问级别:** 列表

- **   [ListAssociatedEnvironments](https://docs.aws.amazon.com/continuum/latest/APIReference/API_ListAssociatedEnvironments.html)  **
  - **说明:** 授予列出与收集器相关的环境的权限
  - **资源类型（\* 为必需）:** [collectors\*](#list_continuum-resource-collectors)
  - **条件键:**  
  - **访问级别:** 列表

- **   [ListCodeFindings](https://docs.aws.amazon.com/continuum/latest/APIReference/API_ListCodeFindings.html)  **
  - **说明:** 授予列出环境中代码发现结果的权限
  - **资源类型（\* 为必需）:** [environments\*](#list_continuum-resource-environments)
  - **条件键:**  
  - **访问级别:** 列表

- **   [ListCodeIssueArtifacts](https://docs.aws.amazon.com/continuum/latest/APIReference/API_ListCodeIssueArtifacts.html)  **
  - **说明:** 授予列出代码问题构件的权限
  - **资源类型（\* 为必需）:** [code-issues\*](#list_continuum-resource-code-issues)
  - **条件键:**  
  - **访问级别:** 列表

- **   [ListCodeIssues](https://docs.aws.amazon.com/continuum/latest/APIReference/API_ListCodeIssues.html)  **
  - **说明:** 授予列出环境中代码问题的权限
  - **资源类型（\* 为必需）:** [environments\*](#list_continuum-resource-environments)
  - **条件键:**  
  - **访问级别:** 列表

- **   [ListCodeScans](https://docs.aws.amazon.com/continuum/latest/APIReference/API_ListCodeScans.html)  **
  - **说明:** 授予列出环境代码扫描的权限
  - **资源类型（\* 为必需）:** [environments\*](#list_continuum-resource-environments)
  - **条件键:**  
  - **访问级别:** 列表

- **   [ListCollectors](https://docs.aws.amazon.com/continuum/latest/APIReference/API_ListCollectors.html)  **
  - **说明:** 授予收藏家名单的权限
  - **资源类型（\* 为必需）:** [collectors\*](#list_continuum-resource-collectors)
  - **条件键:**  
  - **访问级别:** 列表

- **   [ListEnvironments](https://docs.aws.amazon.com/continuum/latest/APIReference/API_ListEnvironments.html)  **
  - **说明:** 授予列出环境的权限
  - **资源类型（\* 为必需）:** [environments\*](#list_continuum-resource-environments)
  - **条件键:**  
  - **访问级别:** 列表

- **   [ListIntegrations](https://docs.aws.amazon.com/continuum/latest/APIReference/API_ListIntegrations.html)  **
  - **说明:** 授予列出集成的权限
  - **资源类型（\* 为必需）:** [integrations\*](#list_continuum-resource-integrations)
  - **条件键:**  
  - **访问级别:** 列表

- **   [PutResourcePolicy](https://docs.aws.amazon.com/continuum/latest/APIReference/API_PutResourcePolicy.html)  **
  - **说明:** 授予将资源策略附加到资源的权限
  - **资源类型（\* 为必需）:** [collectors\*](#list_continuum-resource-collectors)
  - **条件键:**  
  - **访问级别:** 写入

- **   [StartIntegrationAuthorization](https://docs.aws.amazon.com/continuum/latest/APIReference/API_StartIntegrationAuthorization.html)  **
  - **说明:** 授予为新集成启动 OAuth 授权的权限
  - **资源类型（\* 为必需）:** 
  - **条件键:**  
  - **访问级别:** 写入

- **   [UpdateCollector](https://docs.aws.amazon.com/continuum/latest/APIReference/API_UpdateCollector.html)  **
  - **说明:** 授予更新收藏家的权限
  - **资源类型（\* 为必需）:** [collectors\*](#list_continuum-resource-collectors)
  - **条件键:**  
  - **访问级别:** 写入

- **   [UpdateEnvironment](https://docs.aws.amazon.com/continuum/latest/APIReference/API_UpdateEnvironment.html)  **
  - **说明:** 授予更新环境的权限
  - **资源类型（\* 为必需）:** [environments\*](#list_continuum-resource-environments) / **条件键:** [continuum:RepositoryName](#list_continuum-continuum_RepositoryName)
  - **资源类型（\* 为必需）:** [integrations](#list_continuum-resource-integrations) / **条件键:** [continuum:RepositoryName](#list_continuum-continuum_RepositoryName)
  - **访问级别:** 写入

- **   [UpdateIntegration](https://docs.aws.amazon.com/continuum/latest/APIReference/API_UpdateIntegration.html)  **
  - **说明:** 授予更新 Amazon S3 集成的 IAM 角色的权限
  - **资源类型（\* 为必需）:** [integrations\*](#list_continuum-resource-integrations)
  - **条件键:**  
  - **访问级别:** 写入



## 资源类型定义为 AWS 连续体
<a name="list_continuum-resources-for-iam-policies"></a>

以下资源类型是由该服务定义的，可以在 IAM 权限策略语句的 `Resource` 元素中使用这些资源类型。



| 资源类型 | ARN | 条件键 | 
| --- | --- | --- | 
|  [code-findings](https://docs.aws.amazon.com/continuum/latest/APIReference/code-findings.html)  | arn:${Partition}:continuum:${Region}:${Account}:environments/${EnvironmentId}/code-findings/${FindingId} |   | 
|  [code-issues](https://docs.aws.amazon.com/continuum/latest/APIReference/code-issues.html)  | arn:${Partition}:continuum:${Region}:${Account}:environments/${EnvironmentId}/code-issues/${IssueId} |   | 
|  [code-scans](https://docs.aws.amazon.com/continuum/latest/APIReference/code-scans.html)  | arn:${Partition}:continuum:${Region}:${Account}:environments/${EnvironmentId}/code-scans/${ScanRunId} |   | 
|  [collectors](https://docs.aws.amazon.com/continuum/latest/APIReference/collectors.html)  | arn:${Partition}:continuum:${Region}:${Account}:collectors/${CollectorId} |   | 
|  [environments](https://docs.aws.amazon.com/continuum/latest/APIReference/environments.html)  | arn:${Partition}:continuum:${Region}:${Account}:environments/${EnvironmentId} |   | 
|  [integrations](https://docs.aws.amazon.com/continuum/latest/APIReference/integrations.html)  | arn:${Partition}:continuum:${Region}:${Account}:integrations/${IntegrationId} |   | 

## 的条件键 AWS 连续体
<a name="list_continuum-policy-keys"></a>

AWS Continuum 定义了以下条件键，这些条件键可用于 `Condition` IAM 政策的元素。



| 条件键 | 描述 | 类型 | 
| --- | --- | --- | 
|   [continuum:CollectorArn](https://docs.aws.amazon.com/continuum/latest/userguide/security-iam.html#condition-keys-CollectorArn)  | 按收藏家的 ARN 过滤访问权限 AssociateCollector 要么 DisassociateCollector 请求 | ArrayOfARN | 
|   [continuum:EnvironmentArn](https://docs.aws.amazon.com/continuum/latest/userguide/security-iam.html#condition-keys-EnvironmentArn)  | 按请求访问收集器数据的环境的 ARN 筛选访问权限 | ARN | 
|   [continuum:RepositoryName](https://docs.aws.amazon.com/continuum/latest/userguide/security-iam.html#condition-keys-RepositoryName)  | 按存储库筛选访问权限，以小写形式显示 owner/repo 价值观，那个 CreateEnvironment 要么 UpdateEnvironment 请求选择作为来源 | ArrayOfString | 
|   [continuum:S3BucketName](https://docs.aws.amazon.com/continuum/latest/userguide/security-iam.html#condition-keys-S3BucketName)  | 按 Amazon S3 存储桶的名称筛选访问权限 CreateIntegration 请求 | String |