AWS Resource Explorer (resource-explorer-2)

2022-11-10

19 new actions, 2 new resources, 3 new conditions

Additions

    Actions
  • AssociateDefaultView
    • Description:  Grants permission to set the specified view as the default for this AWS Region in this AWS account
    • Access:  Write
    • Resources: 

      Name: view

      Required: Yes

  • BatchGetView
    • Description:  Grants permission to retrieve details about views that you specify by a list of ARNs
    • Access:  Read
    • Dependents: 

      resource-explorer-2:GetView

  • CreateIndex
    • Description:  Grants permission to turn on Resource Explorer in the AWS Region in which you called this operation by creating an index
    • Access:  Write
    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:TagKeys

  • CreateView
    • Description:  Grants permission to create a view that users can query
    • Access:  Write
    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:TagKeys

  • DeleteIndex
    • Description:  Grants permission to turn off Resource Explorer in the specified AWS Region by deleting the index
    • Access:  Write
    • Resources: 

      Name: index

      Required: Yes

  • DeleteView
    • Description:  Grants permission to delete a view
    • Access:  Write
    • Resources: 

      Name: view

      Required: Yes

  • DisassociateDefaultView
    • Description:  Grants permission to remove the default view for the AWS Region in which you call this operation
    • Access:  Write
  • GetDefaultView
    • Description:  Grants permission to retrieve the Amazon resource name (ARN) of the view that is the default for the AWS Region in which you call this operation
    • Access:  Read
  • GetIndex
    • Description:  Grants permission to retrieve information about the index in the AWS Region in which you call this operation
    • Access:  Read
  • GetView
    • Description:  Grants permission to retrieve information about the specified view
    • Access:  Read
    • Resources: 

      Name: view

      Required: Yes

  • ListIndexes
    • Description:  Grants permission to list the indexes in all AWS Regions
    • Access:  List
  • ListSupportedResourceTypes
    • Description:  Grants permission to retrieve a list of all resource types currently supported by Resource Explorer
    • Access:  List
  • ListTagsForResource
    • Description:  Grants permission to list the tags that are attached to the specified resource
    • Access:  Read
    • Resources: 

      Name: index

      Required: No

      Name: view

      Required: No

  • ListViews
    • Description:  Grants permission to list the Amazon resource names (ARNs) of all of the views available in the AWS Region in which you call this operation
    • Access:  List
  • Search
    • Description:  Grants permission to search for resources and display details about all resources that match the specified criteria
    • Access:  Read
    • Resources: 

      Name: view

      Required: Yes

  • TagResource
    • Description:  Grants permission to add one or more tag key and value pairs to the specified resource
    • Access:  Tagging
    • Resources: 

      Name: index

      Required: No

      Name: view

      Required: No

    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:TagKeys

  • UntagResource
    • Description:  Grants permission to remove one or more tag key and value pairs from the specified resource
    • Access:  Tagging
    • Resources: 

      Name: index

      Required: No

      Name: view

      Required: No

    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:TagKeys

  • UpdateIndexType
    • Description:  Grants permission to change the type of the index from LOCAL to AGGREGATOR or back
    • Access:  Write
    • Resources: 

      Name: index

      Required: Yes

  • UpdateView
    • Description:  Grants permission to modify some of the details of a view
    • Access:  Write
    • Resources: 

      Name: view

      Required: Yes

    Resources
  • view
    • Arn:  arn:${Partition}:resource-explorer-2:${Region}:${Account}:view/${ViewName}/${ViewUuid}
    • Conditions: 

      aws:ResourceTag/${TagKey}

  • index
    • Arn:  arn:${Partition}:resource-explorer-2:${Region}:${Account}:index/${IndexUuid}
    • Conditions: 

      aws:ResourceTag/${TagKey}

    Conditions
  • aws:RequestTag/${TagKey}
    • Description:  Filters access by the tag keys that are passed in the request
    • Type:  String
  • aws:ResourceTag/${TagKey}
    • Description:  Filters access by the tag keyss attached to the resource
    • Type:  String
  • aws:TagKeys
    • Description:  Filters access by the tag keys that are passed in the request
    • Type:  ArrayOfString