amplifybackend:CreateToken

Write

amplifybackend:CreateToken is a Write access-level action in the amplifybackend service. Grants permission to create an Amplify Admin challenge token by appId

Resource types

ARNs that amplifybackend:CreateToken can be scoped to in an IAM policy.

arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/${AppId}/ required
backend
arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/${AppId}/challenge/ required
token

Condition keys

No condition keys are documented for this action.

Example IAM policy

A minimal policy that allows amplifybackend:CreateToken. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowAmplifybackendCreateToken",
      "Effect": "Allow",
      "Action": "amplifybackend:CreateToken",
      "Resource": "*"
    }
  ]
}

Related actions in amplifybackend

amplifybackend:CloneBackend Write amplifybackend:CreateBackend Write amplifybackend:CreateBackendAPI Write amplifybackend:CreateBackendAuth Write amplifybackend:CreateBackendConfig Write amplifybackend:CreateBackendStorage Write amplifybackend:DeleteBackend Write amplifybackend:DeleteBackendAPI Write amplifybackend:DeleteBackendAuth Write amplifybackend:DeleteBackendStorage Write amplifybackend:DeleteToken Write amplifybackend:GenerateBackendAPIModels Write

View all amplifybackend actions →