AWS SQL Workbench (sqlworkbench)

Additions

Actions

• AssociateConnectionWithChart
  
  • Access:  Write
  • Resources: 

    Name: chart

    Required: Yes

    Name: connection

    Required: Yes

• AssociateConnectionWithTab
  
  • Access:  Write
  • Resources: 

    Name: connection

    Required: Yes

• AssociateQueryWithTab
  
  • Access:  Write
  • Resources: 

    Name: query

    Required: Yes

• BatchDeleteFolder
  
  • Description:  Grants permission to delete folders on your account
  • Access:  Write
• CreateAccount
  
  • Description:  Grants permission to create SQLWorkbench account
  • Access:  Write
• CreateChart
  
  • Description:  Grants permission to create new saved chart on your account
  • Access:  Write
  • Resources: 

    Name: chart

    Required: Yes

  • Conditions: 

    aws:TagKeys

    aws:RequestTag/${TagKey}

• CreateConnection
  
  • Description:  Grants permission to create a new connection on your account
  • Access:  Write
  • Resources: 

    Name: connection

    Required: Yes

  • Conditions: 

    aws:TagKeys

    aws:RequestTag/${TagKey}

• CreateFolder
  
  • Description:  Grants permission to create folder on your account
  • Access:  Write
• CreateSavedQuery
  
  • Description:  Grants permission to create a new saved query on your account
  • Access:  Write
  • Resources: 

    Name: query

    Required: Yes

  • Conditions: 

    aws:TagKeys

    aws:RequestTag/${TagKey}

• DeleteChart
  
  • Description:  Grants permission to remove charts on your account
  • Access:  Write
  • Resources: 

    Name: chart

    Required: Yes

• DeleteConnection
  
  • Description:  Grants permission to remove connections on your account
  • Access:  Write
  • Resources: 

    Name: connection

    Required: Yes

• DeleteSavedQuery
  
  • Description:  Grants permission to remove saved queries on your account
  • Access:  Write
  • Resources: 

    Name: query

    Required: Yes

• DeleteTab
  
  • Description:  Grants permission to remove a tab on your account
  • Access:  Write
• DriverExecute
  
  • Description:  Grants permission to execute a query in your redshift cluster
  • Access:  Write
  • Resources: 

    Name: connection

    Required: Yes

• GenerateSession
  
  • Description:  Grants permission to generate a new session on your account
  • Access:  Write
• GetAccountInfo
  
  • Description:  Grants permission to get account info
  • Access:  Read
• GetChart
  
  • Description:  Grants permission to get charts on your account
  • Access:  Read
  • Resources: 

    Name: chart

    Required: Yes

• GetConnection
  
  • Description:  Grants permission to get connections on your account
  • Access:  Read
  • Resources: 

    Name: connection

    Required: Yes

• GetKMSKey
  
  • Description:  Grants permission to describe KMS Keys
  • Access:  Read
• GetSavedQuery
  
  • Description:  Grants permission to get saved query on your account
  • Access:  Read
  • Resources: 

    Name: query

    Required: Yes

• GetUserInfo
  
  • Description:  Grants permission to get user info
  • Access:  Read
• GetUserWorkspaceSettings
  
  • Description:  Grants permission to get workspace settings on your account
  • Access:  Read
• ListBuckets
  
  • Description:  Grants permission to list buckets
  • Access:  Read
• ListConnections
  
  • Description:  Grants permission to list the connections on your account
  • Access:  List
• ListDatabases
  
  • Description:  Grants permission to list databases of your redshift cluster
  • Access:  List
• ListFiles
  
  • Description:  Grants permission to list files and folders
  • Access:  List
• ListKMSKeyAliases
  
  • Description:  Grants permission to list KMS Key Aliases
  • Access:  List
• ListKMSKeys
  
  • Description:  Grants permission to list KMS Keys
  • Access:  List
• ListRedshiftClusters
  
  • Description:  Grants permission to list redshift clusters on your account
  • Access:  List
• ListSampleDatabases
  
  • Description:  Grants permission to list sample databases
  • Access:  Read
• ListSavedQueryVersions
  
  • Description:  Grants permission to list versions of saved query on your account
  • Access:  List
  • Resources: 

    Name: query

    Required: Yes

• ListTabs
  
  • Description:  Grants permission to list tabs on your account
  • Access:  List
• ListTagsForResource
  
  • Description:  Grants permission to list the tags of an sqlworkbench resource
  • Access:  Read
  • Resources: 

    Name: chart

    Required: No

    Name: connection

    Required: No

    Name: query

    Required: No

• PutTab
  
  • Description:  Grants permission to create or update a tab on your account
  • Access:  Write
• PutUserWorkspaceSettings
  
  • Description:  Grants permission to update workspace settings on your account
  • Access:  Write
• TagResource
  
  • Description:  Grants permission to tag an sqlworkbench resource
  • Access:  Tagging
  • Resources: 

    Name: chart

    Required: No

    Name: connection

    Required: No

    Name: query

    Required: No

  • Conditions: 

    aws:TagKeys

    aws:RequestTag/${TagKey}

• UntagResource
  
  • Description:  Grants permission to untag an sqlworkbench resource
  • Access:  Tagging
  • Resources: 

    Name: chart

    Required: No

    Name: connection

    Required: No

    Name: query

    Required: No

  • Conditions: 

    aws:TagKeys

    aws:RequestTag/${TagKey}

• UpdateChart
  
  • Description:  Grants permission to update a chart on your account
  • Access:  Write
  • Resources: 

    Name: chart

    Required: Yes

  • Conditions: 

    aws:TagKeys

    aws:RequestTag/${TagKey}

• UpdateConnection
  
  • Description:  Grants permission to update a connection on your account
  • Access:  Write
  • Resources: 

    Name: connection

    Required: Yes

  • Conditions: 

    aws:TagKeys

    aws:RequestTag/${TagKey}

• UpdateFileFolder
  
  • Description:  Grants permission to move files on your account
  • Access:  Write
  • Resources: 

    Name: chart

    Required: No

    Name: query

    Required: No

• UpdateFolder
  
  • Description:  Grants permission to update a folder's name and details on your account
  • Access:  Write
• UpdateSavedQuery
  
  • Description:  Grants permission to update a saved query on your account
  • Access:  Write
  • Resources: 

    Name: query

    Required: Yes

  • Conditions: 

    aws:TagKeys

    aws:RequestTag/${TagKey}

Resources

• connection
  
  • Arn:  arn:${Partition}:sqlworkbench:${Region}:${Account}:connection/${ResourceId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• query
  
  • Arn:  arn:${Partition}:sqlworkbench:${Region}:${Account}:query/${ResourceId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• chart
  
  • Arn:  arn:${Partition}:sqlworkbench:${Region}:${Account}:chart/${ResourceId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

Conditions

• aws:RequestTag/${TagKey}
  
  • Description:  Filters access based on the tags that are passed in the request
  • Type:  String
• aws:ResourceTag/${TagKey}
  
  • Description:  Filters access based on the tags associated with the resource
  • Type:  String
• aws:TagKeys
  
  • Description:  Filters access based on the tag keys that are passed in the request
  • Type:  String