Account access manager (account-access)

Additions

Actions

• CreateApplication
  
  • Access:  Write
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• CreateEntitlement
  
  • Access:  Write
  • Resources: 

    Name: application

    Required: None

• DeleteApplication
  
  • Access:  Write
  • Resources: 

    Name: application

    Required: None

• DeleteEntitlement
  
  • Access:  Write
  • Resources: 

    Name: application

    Required: None

• GetApplication
  
  • Access:  Read
  • Resources: 

    Name: application

    Required: None

• GetEntitlement
  
  • Access:  Read
  • Resources: 

    Name: application

    Required: None

• ListApplications
  
  • Access:  List
• ListEntitlements
  
  • Access:  List
  • Resources: 

    Name: application

    Required: None

• ListTagsForResource
  
  • Access:  Read
  • Resources: 

    Name: application

    Required: None

  • Conditions: 

    aws:ResourceTag/${TagKey}

• TagResource
  
  • Access:  Tagging
  • Resources: 

    Name: application

    Required: None

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:ResourceTag/${TagKey}

    aws:TagKeys

• UntagResource
  
  • Access:  Tagging
  • Resources: 

    Name: application

    Required: None

  • Conditions: 

    aws:TagKeys

Resources

• application
  
  • Arn:  arn:${Partition}:account-access:${Region}:${Account}:application/${ResourceId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

Conditions

• aws:RequestTag/${TagKey}
  
  • Type:  String
• aws:ResourceTag/${TagKey}
  
  • Type:  String
• aws:TagKeys
  
  • Type:  ArrayOfString