AWS Resource Access Manager (RAM) (ram)

2026-11-07

7 updated actions

Updates

4 new actions, 6 new conditions | 21 updated actions, 4 updated resources

Additions

    Actions
  • DeleteCustomerManagedPermissionPolicy
    • Access:  Permissions management
    • Resources: 

      Name: customer-managed-permission

      Required: None

    • Conditions: 

      ram:RequestedPermissionArns

      ram:RequestedPermissionResourceTypes
  • GetCustomerManagedPermissionPolicy
    • Access:  Read
    • Resources: 

      Name: customer-managed-permission

      Required: None

    • Conditions: 

      ram:RequestedPermissionArns

      ram:RequestedPermissionResourceTypes
  • PutCustomerManagedPermissionPolicy
    • Access:  Permissions management
    • Resources: 

      Name: customer-managed-permission

      Required: None

    • Conditions: 

      ram:RequestedPermissionArns

      ram:RequestedPermissionResourceTypes
  • UpdatePermission
    • Access:  Write
    • Resources: 

      Name: customer-managed-permission

      Required: None

    • Conditions: 

      ram:RequestedPermissionArns

      ram:RequestedPermissionResourceTypes
    Conditions
  • ram:PermissionTemplateParameter/${ParameterName}
    • Type:  ArrayOfString
  • ram:RequestedPermissionArns
    • Type:  ArrayOfARN
  • ram:RequestedPermissionResourceTypes
    • Type:  ArrayOfString
  • ram:RequestedPrincipals
    • Type:  ArrayOfString
  • ram:RequestedResourceArns
    • Type:  ArrayOfARN
  • ram:RequestedResourceTypes
    • Type:  ArrayOfString

Updates

    Actions
  • AssociateResourceShare
      Conditions
    • ＋ ram:RequestedPermissionArns
    • ＋ ram:RequestedPermissionResourceTypes
    • ＋ ram:RequestedPrincipals
    • ＋ ram:RequestedResourceArns
    • ＋ ram:RequestedResourceTypes
    • － aws:ResourceTag/${TagKey}
    • － ram:AllowsExternalPrincipals
    • － ram:Principal
    • － ram:RequestedResourceType
    • － ram:ResourceArn
    • － ram:ResourceShareName
    • － ram:ResourceTag/${TagKey}
    • － ram:RetainSharingOnAccountLeaveOrganization
  • CreatePermission
      Conditions
    • ＋ ram:RequestedPermissionArns
    • ＋ ram:RequestedPermissionResourceTypes
    • － aws:ResourceTag/${TagKey}
    • － ram:PermissionArn
    • － ram:PermissionResourceType
      Resources
    • ＋ customer-managed-permission
  • CreatePermissionVersion
      Conditions
    • ＋ ram:RequestedPermissionArns
    • ＋ ram:RequestedPermissionResourceTypes
    • － ram:PermissionArn
    • － ram:PermissionResourceType
  • CreateResourceShare
      Conditions
    • ＋ ram:RequestedPermissionArns
    • ＋ ram:RequestedPermissionResourceTypes
    • ＋ ram:RequestedPrincipals
    • ＋ ram:RequestedResourceArns
    • ＋ ram:RequestedResourceTypes
    • － aws:RequestTag/${TagKey}
    • － ram:AllowsExternalPrincipals
    • － ram:Principal
    • － ram:RequestedAllowsExternalPrincipals
    • － ram:RequestedResourceType
    • － ram:ResourceArn
    • － ram:RetainSharingOnAccountLeaveOrganization
      Resources
    • ＋ customer-managed-permission
    • ＋ permission
    • ＋ resource-share
  • DeletePermissionVersion
      Conditions
    • ＋ ram:RequestedPermissionArns
    • ＋ ram:RequestedPermissionResourceTypes
    • － aws:ResourceTag/${TagKey}
    • － ram:PermissionArn
    • － ram:PermissionResourceType
  • DeleteResourceShare
      Conditions
    • ＋ ram:RequestedPermissionArns
    • ＋ ram:RequestedPermissionResourceTypes
    • － ram:PermissionArn
    • － ram:PermissionResourceType
  • DisassociateResourceSharePermission
      Conditions
    • ＋ ram:RequestedPrincipals
    • ＋ ram:RequestedResourceArns
    • ＋ ram:RequestedResourceTypes
    • － aws:ResourceTag/${TagKey}
    • － ram:AllowsExternalPrincipals
    • － ram:Principal
    • － ram:RequestedResourceType
    • － ram:ResourceArn
    • － ram:ResourceShareName
    • － ram:ResourceTag/${TagKey}
    • － ram:RetainSharingOnAccountLeaveOrganization
  • GetResourceShareAssociations
      Conditions
    • ＋ ram:RequestedPermissionArns
    • ＋ ram:RequestedPermissionResourceTypes
    • － ram:PermissionArn
  • ListPermissions
      Conditions
    • ＋ ram:RequestedPermissionArns
    • ＋ ram:RequestedPermissionResourceTypes
    • － ram:PermissionArn
    • － ram:PermissionResourceType
      Resources
    • － customer-managed-permission
    • － permission
  • RejectResourceShareInvitation
      Conditions
    • ＋ ram:RequestedPermissionArns
    • ＋ ram:RequestedPermissionResourceTypes
    • － ram:PermissionArn
    • － ram:PermissionResourceType
  • UntagResource
      Conditions
    • ＋ ram:RequestedPermissionArns
    • ＋ ram:RequestedPermissionResourceTypes
    • － ram:PermissionArn
    • － ram:PermissionResourceType
  • UpdateResourceShare
      Conditions
    • ＋ ram:RequestedPermissionArns
    • ＋ ram:RequestedPermissionResourceTypes
    • － ram:PermissionArn
    • － ram:PermissionResourceType
  • AssociateResourceSharePermission
      Conditions
    • ＋ ram:RequestedPermissionArns
    • ＋ ram:RequestedPermissionResourceTypes
  • EnableSharingWithAwsOrganization
      Conditions
    • ＋ ram:RequestedPermissionArns
    • ＋ ram:RequestedPermissionResourceTypes
  • ListPrincipals
      Resources
    • ＋ customer-managed-permission
    • ＋ permission
  • AcceptResourceShareInvitation
      Conditions
    • － ram:ResourceShareName
    • － ram:ShareOwnerAccountId
  • DisassociateResourceShare
      Conditions
    • － aws:ResourceTag/${TagKey}
    • － ram:AllowsExternalPrincipals
    • － ram:ResourceShareName
    • － ram:ResourceTag/${TagKey}
    • － ram:RetainSharingOnAccountLeaveOrganization
  • ListPermissionAssociations
      Conditions
    • － aws:RequestTag/${TagKey}
    • － aws:TagKeys
  • ListPermissionVersions
      Conditions
    • － ram:ResourceShareName
  • ListResources
      Conditions
    • － aws:ResourceTag/${TagKey}
    • － ram:AllowsExternalPrincipals
    • － ram:ResourceShareName
    • － ram:RetainSharingOnAccountLeaveOrganization
  • TagResource
      Conditions
    • － ram:ResourceShareName
    • － ram:ShareOwnerAccountId
    Resources
  • permission
      Arn
    • Old: arn:${Partition}:ram::${Account}:permission/${ResourcePath}
      New: arn:${Partition}:ram::aws:permission/${ResourcePath}
  • resource-share-invitation
      Conditions
    • ＋ ram:ResourceShareName
  • customer-managed-permission
      Conditions
    • ＋ ram:ResourceTag/${TagKey}
  • resource-share
      Conditions
    • ＋ ram:ResourceTag/${TagKey}
    • ＋ ram:RetainSharingOnAccountLeaveOrganization