apigateway:UpdateRestApiPolicy is a Permissions management access-level action in the apigateway service. Grants permission to manage the IAM resource policy for an API. This is an additional authorization control for managing an API due to the sensitive nature of the resource policy
ARNs that apigateway:UpdateRestApiPolicy can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants apigateway:UpdateRestApiPolicy.
Filters access by the requirement of API. Available during the CreateRoute and UpdateRoute operations. Also available as a collection during import and reimport
Filters access by API name. Available during the CreateApi and UpdateApi operations
Filters access by type of authorizer in the request, for example REQUEST or JWT. Available during CreateAuthorizer and UpdateAuthorizer. Also available during import and reimport as an ArrayOfString
Filters access by status of the default execute-api endpoint. Available during the CreateApi and UpdateApi operations
Filters access by endpoint type. Available during the CreateDomainName, UpdateDomainName, CreateApi, and UpdateApi operations
Filters access by authorization type, for example NONE, AWS_IAM, CUSTOM, JWT. Available during the CreateRoute and UpdateRoute operations. Also available as a collection during import
Filters access by TLS version. Available during the CreateDomain and UpdateDomain operations
Filters access by the requirement of API key for the existing Route resource. Available during the UpdateRoute and DeleteRoute operations. Also available as a collection during reimport
Filters access by API name. Available during the UpdateApi and DeleteApi operations
Filters access by the current type of authorizer, for example REQUEST or JWT. Available during UpdateAuthorizer and DeleteAuthorizer operations. Also available during import and reimport as an ArrayOfString
Filters access by status of the default execute-api endpoint. Available during the UpdateApi and DeleteApi operations
Filters access by endpoint type. Available during the UpdateDomainName, DeleteDomainName, UpdateApi, and DeleteApi operations
Filters access by authorization type of the existing Route resource, for example NONE, AWS_IAM, CUSTOM. Available during the UpdateRoute and DeleteRoute operations. Also available as a collection during reimport
Filters access by TLS version. Available during the UpdateDomainName and DeleteDomainName operations
Filters access by tag key-value pairs attached to the resource
A minimal policy that allows apigateway:UpdateRestApiPolicy. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowApigatewayUpdateRestApiPolicy",
"Effect": "Allow",
"Action": "apigateway:UpdateRestApiPolicy",
"Resource": "*"
}
]
}