appsync

87 actions in the appsync service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.

appsync:AssociateApi

Write

Grants permission to attach a GraphQL API to a custom domain name in AppSync

appsync:AssociateMergedGraphqlApi

Write

Grants permission to associate a merged API to a source API

appsync:AssociateSourceGraphqlApi

Write

Grants permission to associate a source API to a merged API

appsync:AssociateWebACL

Write

Grants permission to associate a web ACL and a resource

appsync:CreateApi

Write

Grants permission to create an API

appsync:CreateApiCache

Write

Grants permission to create an API cache in AppSync

appsync:CreateApiKey

Write

Grants permission to create a unique key that you can distribute to clients who are executing your API

appsync:CreateChannelNamespace

Write

Grants permission to create a channel namespace

appsync:CreateDataSource

Write

Grants permission to create a data source

appsync:CreateDomainName

Write

Grants permission to create a custom domain name in AppSync

appsync:CreateFunction

Write

Grants permission to create a new function

appsync:CreateGraphqlApi

Write

Grants permission to create a GraphQL API, which is the top level AppSync resource

appsync:CreateResolver

Write

Grants permission to create a resolver. A resolver converts incoming requests into a format that a data source can understand, and converts the data source's responses into GraphQL

appsync:CreateType

Write

Grants permission to create a type

appsync:DeleteApi

Write

Grants permission to delete a API. This will also clean up every AppSync resource below that API

appsync:DeleteApiCache

Write

Grants permission to delete an API cache in AppSync

appsync:DeleteApiKey

Write

Grants permission to delete an API key

appsync:DeleteChannelNamespace

Write

Grants permission to delete a channel namespace

appsync:DeleteDataSource

Write

Grants permission to delete a data source

appsync:DeleteDomainName

Write

Grants permission to delete a custom domain name in AppSync

appsync:DeleteFunction

Write

Grants permission to delete a function

appsync:DeleteGraphqlApi

Write

Grants permission to delete a GraphQL Api. This will also clean up every AppSync resource below that API

appsync:DeleteResolver

Write

Grants permission to delete a resolver

appsync:DeleteResourcePolicy

Write

Grants permission to remove a resource policy

appsync:DeleteType

Write

Grants permission to delete a type

appsync:DisassociateApi

Write

Grants permission to detach a GraphQL API to a custom domain name in AppSync

appsync:DisassociateMergedGraphqlApi

Write

Grants permission to remove an associated source API from a merged API identified by the source API

appsync:DisassociateSourceGraphqlApi

Write

Grants permission to remove an associated source API from a merged API identified by the merged API

appsync:DisassociateWebACL

Write

Grants permission to disassociate a web ACL and a resource

appsync:EvaluateCode

Read

Grants permission to evaluate code with a runtime and context

appsync:EvaluateMappingTemplate

Read

Grants permission to evaluate template mapping

appsync:EventConnect

Write

Grants permission to connect to an Event API

appsync:EventPublish

Write

Grants permission to publish events to a channel namespace

appsync:EventSubscribe

Write

Grants permission to subscribe to a channel namespace

appsync:FlushApiCache

Write

Grants permission to flush an API cache in AppSync

appsync:GetApi

Read

Grants permission to retrieve an API

appsync:GetApiAssociation

Read

Grants permission to read custom domain name - GraphQL API association details in AppSync

appsync:GetApiCache

Read

Grants permission to read information about an API cache in AppSync

appsync:GetChannelNamespace

Read

Grants permission to retrieve a channel namespace

appsync:GetDataSource

Read

Grants permission to retrieve a data source

appsync:GetDataSourceIntrospection

Read

Grants permission to retrieve a data source introspection

appsync:GetDomainName

Read

Grants permission to read information about a custom domain name in AppSync

appsync:GetFunction

Read

Grants permission to retrieve a function

appsync:GetGraphqlApi

Read

Grants permission to retrieve a GraphQL API

appsync:GetGraphqlApiEnvironmentVariables

Read

Grants permission to retrieve the environment variables for a GraphQL API

appsync:GetIntrospectionSchema

Read

Grants permission to retrieve the introspection schema for a GraphQL API

appsync:GetResolver

Read

Grants permission to retrieve a resolver

appsync:GetResourcePolicy

Read

Grants permission to read a resource policy

appsync:GetSchemaCreationStatus

Read

Grants permission to retrieve the current status of a schema creation operation

appsync:GetSourceApiAssociation

Read

Grants permission to read information about a merged API associated source API

appsync:GetType

Read

Grants permission to retrieve a type

appsync:GetWebACLForResource

Read

Grants permission to get associated web ACLs for a resource

appsync:GraphQL

Write

Grants permission to send a GraphQL query to a GraphQL API

appsync:ListApiKeys

List

Grants permission to list the API keys for a given API

appsync:ListApis

List

Grants permission to list APIs

appsync:ListChannelNamespaces

List

Grants permission to list channel namespace

appsync:ListDataSources

List

Grants permission to list the data sources for a given API

appsync:ListDomainNames

List

Grants permission to enumerate custom domain names in AppSync

appsync:ListFunctions

List

Grants permission to list the functions for a given API

appsync:ListGraphqlApis

List

Grants permission to list GraphQL APIs

appsync:ListResolvers

List

Grants permission to list the resolvers for a given API and type

appsync:ListResolversByFunction

List

Grants permission to list the resolvers that are associated with a specific function

appsync:ListResourcesForWebACL

List

Grants permission to get associated resources for a web ACL

appsync:ListSourceApiAssociations

List

Grants permission to list source APIs associated to a given merged API

appsync:ListTagsForResource

Read

Grants permission to list the tags for a resource

appsync:ListTypes

List

Grants permission to list the types for a given API

appsync:ListTypesByAssociation

List

Grants permission to list the types for a given merged API and source API association

appsync:PutGraphqlApiEnvironmentVariables

Write

Grants permission to update the environment variables for a GraphQL API

appsync:PutResourcePolicy

Write

Grants permission to set a resource policy

appsync:SetWebACL

Permissions management

Grants permission to set a web ACL

appsync:SourceGraphQL

Write

Grants permission to send a GraphQL query to a source API of a merged API

appsync:StartDataSourceIntrospection

Write

Grants permission to introspect a data source

appsync:StartSchemaCreation

Write

Grants permission to add a new schema to your GraphQL API. This operation is asynchronous - GetSchemaCreationStatus can show when it has completed

appsync:StartSchemaMerge

Write

Grants permission to initiate a schema merge for a given merged API and associated source API

appsync:TagResource

Tagging

Grants permission to tag a resource

appsync:UntagResource

Tagging

Grants permission to untag a resource

appsync:UpdateApi

Write

Grants permission to update an API

appsync:UpdateApiCache

Write

Grants permission to update an API cache in AppSync

appsync:UpdateApiKey

Write

Grants permission to update an API key for a given API

appsync:UpdateChannelNamespace

Write

Grants permission to update a channel namespace

appsync:UpdateDataSource

Write

Grants permission to update a data source

appsync:UpdateDomainName

Write

Grants permission to update a custom domain name in AppSync

appsync:UpdateFunction

Write

Grants permission to update an existing function

appsync:UpdateGraphqlApi

Write

Grants permission to update a GraphQL API

appsync:UpdateResolver

Write

Grants permission to update a resolver

appsync:UpdateSourceApiAssociation

Write

Grants permission to update a merged API source API association

appsync:UpdateType

Write

Grants permission to update a type