Amazon WorkSpaces (workspaces)

Additions

Actions

• AssociateWorkspaceApplication
  
  • Description:  Grants permission to associate a workspace application with a WorkSpace
  • Access:  Write
  • Resources: 

    Name: workspaceapplication

    Required: Yes

    Name: workspaceid

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• DeployWorkspaceApplications
  
  • Description:  Grants permission to deploy all pending workspace applications on a WorkSpace
  • Access:  Write
  • Resources: 

    Name: workspaceid

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• DescribeApplicationAssociations
  
  • Description:  Grants permission to retrieve information about resources associated with a WorkSpace application
  • Access:  List
  • Resources: 

    Name: workspaceapplication

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• DescribeApplications
  
  • Description:  Grants permission to obtain information about WorkSpace applications
  • Access:  List
• DescribeBundleAssociations
  
  • Description:  Grants permission to retrieve information about resources associated with a WorkSpace bundle
  • Access:  List
  • Resources: 

    Name: workspacebundle

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• DescribeImageAssociations
  
  • Description:  Grants permission to retrieve information about resources associated with a WorkSpace image
  • Access:  List
  • Resources: 

    Name: workspaceimage

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• DescribeWorkspaceAssociations
  
  • Description:  Grants permission to retrieve information about resources associated with a WorkSpace
  • Access:  List
  • Resources: 

    Name: workspaceid

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• DisassociateWorkspaceApplication
  
  • Description:  Grants permission to disassociate a workspace application from a WorkSpace
  • Access:  Write
  • Resources: 

    Name: workspaceapplication

    Required: Yes

    Name: workspaceid

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

Resources

• workspaceapplication
  
  • Arn:  arn:${Partition}:workspaces:${Region}:${Account}:workspaceapplication/${WorkSpaceApplicationId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

Updates

Actions

• AuthorizeIpRules
  
  Dependents
  
  • ＋ workspaces:UpdateRulesOfIpGroup
• RevokeIpRules
  
  Dependents
  
  • ＋ workspaces:UpdateRulesOfIpGroup
• UpdateRulesOfIpGroup
  
  Dependents
  
  • ＋ workspaces:AuthorizeIpRules
  • ＋ workspaces:RevokeIpRules