appstream:CreateAppBlock is a Write access-level action in the appstream service. Grants permission to create an app block. App blocks store details about the virtual hard disk that contains the files for the application in an S3 bucket. It also stores the setup script with details about how to mount the virtual hard disk. App blocks are only supported for Elastic fleets
This action does not support resource-level permissions; use "Resource": "*" in your policy.
Keys you can use in the Condition block of a policy that grants appstream:CreateAppBlock.
Filters access by the presence of tag key-value pairs in the request
Filters access by the tag key-value pairs attached to the resource
Filters access by the presence of tag keys in the request
A minimal policy that allows appstream:CreateAppBlock. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowAppstreamCreateAppBlock",
"Effect": "Allow",
"Action": "appstream:CreateAppBlock",
"Resource": "*"
}
]
}