CODEWITHSUNDEEP
amazon-web-servicesamazon-iam
Chip
Chip

Reputation: 1559

How to look up the IAM Actions needed for a given AWS API call?

Is there a way to look up the permissions you'll need enabled in order to make a call to the AWS API?

For example, I want to call PutMetricAlarm on the CloudWatch API so I should need at least the Action cloudwatch:PutMetricAlarm Allowed on that resource. But what else is the minimum I need?

Upvotes: 1

Views: 285

Answers (1)

jogold
jogold

Reputation: 7417

There is a one-to-one relationship between actions defined in the API and IAM actions.

In your example with PutMetricAlarm, no other permission than cloudwatch:PutMetricAlarm is needed.

The IAM action name (the part after the :) is always identical to the name of the action in the API.

The prefix (the part before the :) is a constant for each service but is not always identical to the service name (e.g. CloudWatch Logs is logs, Firewall Manager is fms).

Also note that the prefix and the action name are case insensitive.

Good references:

Upvotes: 1

Related Questions