Amazon AppStream 2.0 (appstream)

Additions

Actions

• AssociateApplicationFleet
  
  • Description:  Grants permission to associate the specified application with the fleet
  • Access:  Write
  • Resources: 

    Name: application

    Required: Yes

    Name: fleet

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• CreateAppBlock
  
  • Description:  Grants permission to create an app block. App blocks store details about the virtual hard disk that contains the files for the application in an S3 bucket. It also stores the setup script with details about how to mount the virtual hard disk. App blocks are only supported for Elastic fleets
  • Access:  Write
  • Resources: 

    Name: app-block

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

    aws:TagKeys

• CreateApplication
  
  • Description:  Grants permission to create an application within customer account. Applications store the details about how to launch applications on streaming instances. This is only supported for Elastic fleets
  • Access:  Write
  • Resources: 

    Name: app-block

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

    aws:TagKeys

• DeleteAppBlock
  
  • Description:  Grants permission to delete the specified app block
  • Access:  Write
  • Resources: 

    Name: app-block

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• DeleteApplication
  
  • Description:  Grants permission to delete the specified application
  • Access:  Write
  • Resources: 

    Name: application

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• DescribeAppBlocks
  
  • Description:  Grants permission to retrieve a list that describes one or more specified app blocks, if the app block arns are provided. Otherwise, all app blocks in the account are described
  • Access:  Read
  • Resources: 

    Name: app-block

    Required: No

• DescribeApplicationFleetAssociations
  
  • Description:  Grants permission to retrieve the associations that are associated with the specified application or fleet
  • Access:  Read
  • Resources: 

    Name: application

    Required: No

    Name: fleet

    Required: No

• DescribeApplications
  
  • Description:  Grants permission to retrieve a list that describes one or more specified applications, if the application arns are provided. Otherwise, all applications in the account are described
  • Access:  Read
  • Resources: 

    Name: application

    Required: No

• DisassociateApplicationFleet
  
  • Description:  Grants permission to disassociate the specified application from the specified fleet
  • Access:  Write
  • Resources: 

    Name: application

    Required: Yes

    Name: fleet

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• UpdateApplication
  
  • Description:  Grants permission to update the specified fields for the specified application
  • Access:  Write
  • Resources: 

    Name: application

    Required: Yes

    Name: app-block

    Required: No

  • Conditions: 

    aws:ResourceTag/${TagKey}

Resources

• app-block
  
  • Arn:  arn:${Partition}:appstream:${Region}:${Account}:app-block/${AppBlockName}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• application
  
  • Arn:  arn:${Partition}:appstream:${Region}:${Account}:application/${ApplicationName}
  • Conditions: 

    aws:ResourceTag/${TagKey}

Updates

Actions

• CreateFleet
  
  Resources
  

  • New_value: No

    Old_value: Yes

• TagResource
  
  Resources
  
  • ＋ app-block
  • ＋ application
• UntagResource
  
  Resources
  
  • ＋ app-block
  • ＋ application