Change log of AWS IAM permissions

2022-09-16

6 new actions, 1 new resource | 4 updated resources, 4 updated actions

Actions

CreateSegment
- Description: Grants permission to create a segment
- Access: Write
- Conditions:
  aws:RequestTag/${TagKey}
  
  aws:TagKeys
DeleteSegment
- Description: Grants permission to delete a segment
- Access: Write
- Resources:
  Name: Segment
  
  Required: Yes
GetSegment
- Description: Grants permission to get segment details
- Access: Read
- Resources:
  Name: Segment
  
  Required: Yes
ListSegmentReferences
- Description: Grants permission to list resources referencing a segment
- Access: Read
ListSegments
- Description: Grants permission to list segments
- Access: Read
TestSegmentPattern
- Description: Grants permission to test a segment pattern
- Access: Read

Resources

Segment
- Arn: arn:${Partition}:evidently:${Region}:${Account}:segment/${SegmentName}
- Conditions:
  aws:ResourceTag/${TagKey}

Resources

Project
- Old: arn:${Partition}:evidently:${Region}:${OwnerAccountId}:project/${ProjectName}
  New: arn:${Partition}:evidently:${Region}:${Account}:project/${ProjectName}
Feature
- Old: arn:${Partition}:evidently:${Region}:${OwnerAccountId}:project/${ProjectName}/feature/${FeatureName}
  New: arn:${Partition}:evidently:${Region}:${Account}:project/${ProjectName}/feature/${FeatureName}
Experiment
- Old: arn:${Partition}:evidently:${Region}:${OwnerAccountId}:project/${ProjectName}/experiment/${ExperimentName}
  New: arn:${Partition}:evidently:${Region}:${Account}:project/${ProjectName}/experiment/${ExperimentName}
Launch
- Old: arn:${Partition}:evidently:${Region}:${OwnerAccountId}:project/${ProjectName}/launch/${LaunchName}
  New: arn:${Partition}:evidently:${Region}:${Account}:project/${ProjectName}/launch/${LaunchName}

Actions

Amazon CloudWatch Evidently (evidently)