Amazon CloudFront (cloudfront)

2021-07-13

2 new actions | 83 updated actions, 3 updated conditions

Additions

    Actions
  • AssociateAlias
    • Description:  Grants permission to associate an alias to a CloudFront distribution
    • Access:  Write
    • Resources: 

      Name: distribution

      Required: Yes
  • ListConflictingAliases
    • Description:  Grants permission to list all aliases that conflict with the given alias in CloudFront
    • Access:  List
    • Resources: 

      Name: distribution

      Required: Yes

Updates

    Actions
  • CreateCachePolicy
      Description
    • Old: This action adds a new cache policy to CloudFront.
      New: Grants permission to add a new cache policy to CloudFront
  • CreateCloudFrontOriginAccessIdentity
      Description
    • Old: This action creates a new CloudFront origin access identity.
      New: Grants permission to create a new CloudFront origin access identity
  • CreateDistribution
      Description
    • Old: This action creates a new web distribution.
      New: Grants permission to create a new web distribution
  • CreateDistributionWithTags
      Description
    • Old: This action creates a new web distribution with tags.
      New: Grants permission to create a new web distribution with tags
  • CreateFieldLevelEncryptionConfig
      Description
    • Old: This action creates a new field-level encryption configuration.
      New: Grants permission to create a new field-level encryption configuration
  • CreateFieldLevelEncryptionProfile
      Description
    • Old: This action creates a field-level encryption profile.
      New: Grants permission to create a field-level encryption profile
  • CreateFunction
      Description
    • Old: This action creates a CloudFront function
      New: Grants permission to create a CloudFront function
  • CreateInvalidation
      Description
    • Old: This action creates a new invalidation batch request.
      New: Grants permission to create a new invalidation batch request
  • CreateKeyGroup
      Description
    • Old: This action adds a new key group to CloudFront
      New: Grants permission to add a new key group to CloudFront
  • CreateMonitoringSubscription
      Description
    • Old: This action enables additional CloudWatch metrics for the specified CloudFront distribution. The additional metrics incur an additional cost
      New: Grants permission to enable additional CloudWatch metrics for the specified CloudFront distribution. The additional metrics incur an additional cost
  • CreateOriginRequestPolicy
      Description
    • Old: This action adds a new origin request policy to CloudFront.
      New: Grants permission to add a new origin request policy to CloudFront
  • CreatePublicKey
      Description
    • Old: This action adds a new public key to CloudFront.
      New: Grants permission to add a new public key to CloudFront
  • CreateRealtimeLogConfig
      Description
    • Old: This action creates a real-time log configuration
      New: Grants permission to create a real-time log configuration
  • CreateStreamingDistribution
      Description
    • Old: This action creates a new RTMP distribution.
      New: Grants permission to create a new RTMP distribution
  • CreateStreamingDistributionWithTags
      Description
    • Old: This action creates a new RTMP distribution with tags.
      New: Grants permission to create a new RTMP distribution with tags
  • DeleteCachePolicy
      Description
    • Old: This action deletes a cache policy.
      New: Grants permission to delete a cache policy
  • DeleteCloudFrontOriginAccessIdentity
      Description
    • Old: This action deletes a CloudFront origin access identity.
      New: Grants permission to delete a CloudFront origin access identity
  • DeleteDistribution
      Description
    • Old: This action deletes a web distribution.
      New: Grants permission to delete a web distribution
  • DeleteFieldLevelEncryptionConfig
      Description
    • Old: This action deletes a field-level encryption configuration.
      New: Grants permission to delete a field-level encryption configuration
  • DeleteFieldLevelEncryptionProfile
      Description
    • Old: This action deletes a field-level encryption profile.
      New: Grants permission to delete a field-level encryption profile
  • DeleteFunction
      Description
    • Old: This action deletes a CloudFront function
      New: Grants permission to delete a CloudFront function
  • DeleteKeyGroup
      Description
    • Old: This action deletes a key group
      New: Grants permission to delete a key group
  • DeleteMonitoringSubscription
      Description
    • Old: This action disables additional CloudWatch metrics for the specified CloudFront distribution
      New: Grants permission to disable additional CloudWatch metrics for the specified CloudFront distribution
  • DeleteOriginRequestPolicy
      Description
    • Old: This action deletes an origin request policy.
      New: Grants permission to delete an origin request policy
  • DeletePublicKey
      Description
    • Old: This action deletes a public key from CloudFront.
      New: Grants permission to delete a public key from CloudFront
  • DeleteRealtimeLogConfig
      Description
    • Old: This action deletes a real-time log configuration
      New: Grants permission to delete a real-time log configuration
  • DeleteStreamingDistribution
      Description
    • Old: This action deletes an RTMP distribution.
      New: Grants permission to delete an RTMP distribution
  • DescribeFunction
      Description
    • Old: This action gets a CloudFront function summary
      New: Grants permission to get a CloudFront function summary
  • GetCachePolicy
      Description
    • Old: Get the cache policy
      New: Grants permission to get the cache policy
  • GetCachePolicyConfig
      Description
    • Old: Get the cache policy configuration
      New: Grants permission to get the cache policy configuration
  • GetCloudFrontOriginAccessIdentity
      Description
    • Old: Get the information about a CloudFront origin access identity.
      New: Grants permission to get the information about a CloudFront origin access identity
  • GetCloudFrontOriginAccessIdentityConfig
      Description
    • Old: Get the configuration information about a Cloudfront origin access identity.
      New: Grants permission to get the configuration information about a Cloudfront origin access identity
  • GetDistribution
      Description
    • Old: Get the information about a web distribution.
      New: Grants permission to get the information about a web distribution
  • GetDistributionConfig
      Description
    • Old: Get the configuration information about a distribution.
      New: Grants permission to get the configuration information about a distribution
  • GetFieldLevelEncryption
      Description
    • Old: Get the field-level encryption configuration information.
      New: Grants permission to get the field-level encryption configuration information
  • GetFieldLevelEncryptionConfig
      Description
    • Old: Get the field-level encryption configuration information.
      New: Grants permission to get the field-level encryption configuration information
  • GetFieldLevelEncryptionProfile
      Description
    • Old: Get the field-level encryption configuration information.
      New: Grants permission to get the field-level encryption configuration information
  • GetFieldLevelEncryptionProfileConfig
      Description
    • Old: Get the field-level encryption profile configuration information.
      New: Grants permission to get the field-level encryption profile configuration information
  • GetFunction
      Description
    • Old: This action gets a CloudFront function's code
      New: Grants permission to get a CloudFront function's code
  • GetInvalidation
      Description
    • Old: Get the information about an invalidation.
      New: Grants permission to get the information about an invalidation
  • GetKeyGroup
      Description
    • Old: This action gets a key group
      New: Grants permission to get a key group
  • GetKeyGroupConfig
      Description
    • Old: This action gets a key group configuration
      New: Grants permission to get a key group configuration
  • GetMonitoringSubscription
      Description
    • Old: This action gets information about whether additional CloudWatch metrics are enabled for the specified CloudFront distribution
      New: Grants permission to get information about whether additional CloudWatch metrics are enabled for the specified CloudFront distribution
  • GetOriginRequestPolicy
      Description
    • Old: Get the origin request policy
      New: Grants permission to get the origin request policy
  • GetOriginRequestPolicyConfig
      Description
    • Old: Get the origin request policy configuration
      New: Grants permission to get the origin request policy configuration
  • GetPublicKey
      Description
    • Old: Get the public key information.
      New: Grants permission to get the public key information
  • GetPublicKeyConfig
      Description
    • Old: Get the public key configuration information.
      New: Grants permission to get the public key configuration information
  • GetRealtimeLogConfig
      Description
    • Old: This action gets a real-time log configuration
      New: Grants permission to get a real-time log configuration
  • GetStreamingDistribution
      Description
    • Old: Get the information about an RTMP distribution.
      New: Grants permission to get the information about an RTMP distribution
  • GetStreamingDistributionConfig
      Description
    • Old: Get the configuration information about a streaming distribution.
      New: Grants permission to get the configuration information about a streaming distribution
  • ListCachePolicies
      Description
    • Old: List all cache policies that have been created in CloudFront for this account.
      New: Grants permission to list all cache policies that have been created in CloudFront for this account
  • ListCloudFrontOriginAccessIdentities
      Description
    • Old: List your CloudFront origin access identities.
      New: Grants permission to list your CloudFront origin access identities
  • ListDistributions
      Description
    • Old: List the distributions associated with your AWS account.
      New: Grants permission to list the distributions associated with your AWS account
  • ListDistributionsByCachePolicyId
      Description
    • Old: List distribution IDs for distributions that have a cache behavior that's associated with the specified cache policy.
      New: Grants permission to list distribution IDs for distributions that have a cache behavior that's associated with the specified cache policy
  • ListDistributionsByKeyGroup
      Description
    • Old: This action lists distribution IDs for distributions that have a cache behavior that's associated with the specified key group
      New: Grants permission to list distribution IDs for distributions that have a cache behavior that's associated with the specified key group
  • ListDistributionsByOriginRequestPolicyId
      Description
    • Old: List distribution IDs for distributions that have a cache behavior that's associated with the specified origin request policy.
      New: Grants permission to list distribution IDs for distributions that have a cache behavior that's associated with the specified origin request policy
  • ListDistributionsByRealtimeLogConfig
      Description
    • Old: This action gets a list of distributions that have a cache behavior that’s associated with the specified real-time log configuration
      New: Grants permission to get a list of distributions that have a cache behavior that’s associated with the specified real-time log configuration
  • ListDistributionsByWebACLId
      Description
    • Old: List the distributions associated with your AWS account with given AWS WAF web ACL.
      New: Grants permission to list the distributions associated with your AWS account with given AWS WAF web ACL
  • ListFieldLevelEncryptionConfigs
      Description
    • Old: List all field-level encryption configurations that have been created in CloudFront for this account.
      New: Grants permission to list all field-level encryption configurations that have been created in CloudFront for this account
  • ListFieldLevelEncryptionProfiles
      Description
    • Old: List all field-level encryption profiles that have been created in CloudFront for this account.
      New: Grants permission to list all field-level encryption profiles that have been created in CloudFront for this account
  • ListFunctions
      Description
    • Old: This action gets a list of CloudFront functions
      New: Grants permission to get a list of CloudFront functions
  • ListInvalidations
      Description
    • Old: List your invalidation batches.
      New: Grants permission to list your invalidation batches
  • ListKeyGroups
      Description
    • Old: This action lists all key groups that have been created in CloudFront for this account
      New: Grants permission to list all key groups that have been created in CloudFront for this account
  • ListOriginRequestPolicies
      Description
    • Old: List all origin request policies that have been created in CloudFront for this account.
      New: Grants permission to list all origin request policies that have been created in CloudFront for this account
  • ListPublicKeys
      Description
    • Old: List all public keys that have been added to CloudFront for this account.
      New: Grants permission to list all public keys that have been added to CloudFront for this account
  • ListRealtimeLogConfigs
      Description
    • Old: This action gets a list of real-time log configurations
      New: Grants permission to get a list of real-time log configurations
  • ListStreamingDistributions
      Description
    • Old: List your RTMP distributions.
      New: Grants permission to list your RTMP distributions
  • ListTagsForResource
      Description
    • Old: List tags for a CloudFront resource.
      New: Grants permission to list tags for a CloudFront resource
  • PublishFunction
      Description
    • Old: This action publishes a CloudFront function
      New: Grants permission to publish a CloudFront function
  • TagResource
      Description
    • Old: Add tags to a CloudFront resource.
      New: Grants permission to add tags to a CloudFront resource
  • TestFunction
      Description
    • Old: This action tests a CloudFront function
      New: Grants permission to test a CloudFront function
  • UntagResource
      Description
    • Old: Remove tags from a CloudFront resource.
      New: Grants permission to remove tags from a CloudFront resource
  • UpdateCachePolicy
      Description
    • Old: This action updates a cache policy.
      New: Grants permission to update a cache policy
  • UpdateCloudFrontOriginAccessIdentity
      Description
    • Old: This action sets the configuration for a CloudFront origin access identity.
      New: Grants permission to set the configuration for a CloudFront origin access identity
  • UpdateDistribution
      Description
    • Old: This action updates the configuration for a web distribution.
      New: Grants permission to update the configuration for a web distribution
  • UpdateFieldLevelEncryptionConfig
      Description
    • Old: This action updates a field-level encryption configuration.
      New: Grants permission to update a field-level encryption configuration
  • UpdateFieldLevelEncryptionProfile
      Description
    • Old: This action updates a field-level encryption profile.
      New: Grants permission to update a field-level encryption profile
  • UpdateFunction
      Description
    • Old: This action updates a CloudFront function
      New: Grants permission to update a CloudFront function
  • UpdateKeyGroup
      Description
    • Old: This action updates a key group
      New: Grants permission to update a key group
  • UpdateOriginRequestPolicy
      Description
    • Old: This action updates an origin request policy.
      New: Grants permission to update an origin request policy
  • UpdatePublicKey
      Description
    • Old: This action updates public key information.
      New: Grants permission to update public key information
  • UpdateRealtimeLogConfig
      Description
    • Old: This action updates a real-time log configuration
      New: Grants permission to update a real-time log configuration
  • UpdateStreamingDistribution
      Description
    • Old: This action updates the configuration for an RTMP distribution.
      New: Grants permission to update the configuration for an RTMP distribution
    Conditions
  • aws:RequestTag/${TagKey}
      Description
    • Old: Filters actions based on the presence of tag key-value pairs in the request
      New: Filters access based on the presence of tag key-value pairs in the request
  • aws:ResourceTag/${TagKey}
      Description
    • Old: Filters actions based on tag key-value pairs attached to the resource
      New: Filters access based on tag key-value pairs attached to the resource
  • aws:TagKeys
      Description
    • Old: Filters actions based on the presence of tag keys in the request
      New: Filters access based on the presence of tag keys in the request