clouddirectory

66 actions in the clouddirectory service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.

clouddirectory:AddFacetToObject

Write

Grants permission to add a new Facet to an object

clouddirectory:ApplySchema

Write

Grants permission to copy input published schema into Directory with same name and version as that of published schema

clouddirectory:AttachObject

Write

Grants permission to attach an existing object to another existing object

clouddirectory:AttachPolicy

Write

Grants permission to attach a policy object to any other object

clouddirectory:AttachToIndex

Write

Grants permission to attach the specified object to the specified index

clouddirectory:AttachTypedLink

Write

Grants permission to attach a typed link b/w a source & target object reference

clouddirectory:BatchRead

Read

Grants permission to perform all the read operations in a batch. Each individual operation inside BatchRead needs to be granted permissions explicitly

clouddirectory:BatchWrite

Write

Grants permission to perform all the write operations in a batch. Each individual operation inside BatchWrite needs to be granted permissions explicitly

clouddirectory:CreateDirectory

Write

Grants permission to create a Directory by copying the published schema into the directory

clouddirectory:CreateFacet

Write

Grants permission to create a new Facet in a schema

clouddirectory:CreateIndex

Write

Grants permission to create an index object

clouddirectory:CreateObject

Write

Grants permission to create an object in a Directory

clouddirectory:CreateSchema

Write

Grants permission to create a new schema in a development state

clouddirectory:CreateTypedLinkFacet

Write

Grants permission to create a new Typed Link facet in a schema

clouddirectory:DeleteDirectory

Write

Grants permission to delete a directory. Only disabled directories can be deleted

clouddirectory:DeleteFacet

Write

Grants permission to delete a given Facet. All attributes and Rules associated with the facet will be deleted

clouddirectory:DeleteObject

Write

Grants permission to delete an object and its associated attributes

clouddirectory:DeleteSchema

Write

Grants permission to delete a given schema

clouddirectory:DeleteTypedLinkFacet

Write

Grants permission to delete a given TypedLink Facet. All attributes and Rules associated with the facet will be deleted

clouddirectory:DetachFromIndex

Write

Grants permission to detach the specified object from the specified index

clouddirectory:DetachObject

Write

Grants permission to detach a given object from the parent object

clouddirectory:DetachPolicy

Write

Grants permission to detach a policy from an object

clouddirectory:DetachTypedLink

Write

Grants permission to detach a given typed link b/w given source and target object reference

clouddirectory:DisableDirectory

Write

Grants permission to disable the specified directory

clouddirectory:EnableDirectory

Write

Grants permission to enable the specified directory

clouddirectory:GetAppliedSchemaVersion

Read

Grants permission to return current applied schema version ARN, including the minor version in use

clouddirectory:GetDirectory

Read

Grants permission to retrieve metadata about a directory

clouddirectory:GetFacet

Read

Grants permission to get details of the Facet, such as Facet Name, Attributes, Rules, or ObjectType

clouddirectory:GetLinkAttributes

Read

Grants permission to retrieve attributes that are associated with a typed link

clouddirectory:GetObjectAttributes

Read

Grants permission to retrieve attributes within a facet that are associated with an object

clouddirectory:GetObjectInformation

Read

Grants permission to retrieve metadata about an object

clouddirectory:GetSchemaAsJson

Read

Grants permission to retrieve a JSON representation of the schema

clouddirectory:GetTypedLinkFacetInformation

Read

Grants permission to return identity attributes order information associated with a given typed link facet

clouddirectory:ListAppliedSchemaArns

List

Grants permission to list schemas applied to a directory

clouddirectory:ListAttachedIndices

Read

Grants permission to list indices attached to an object

clouddirectory:ListDevelopmentSchemaArns

List

Grants permission to retrieve the ARNs of schemas in the development state

clouddirectory:ListDirectories

List

Grants permission to list directories created within an account

clouddirectory:ListFacetAttributes

Read

Grants permission to retrieve attributes attached to the facet

clouddirectory:ListFacetNames

Read

Grants permission to retrieve the names of facets that exist in a schema

clouddirectory:ListIncomingTypedLinks

Read

Grants permission to return a paginated list of all incoming TypedLinks for a given object

clouddirectory:ListIndex

Read

Grants permission to list objects attached to the specified index

clouddirectory:ListManagedSchemaArns

List

Grants permission to list the major version families of each managed schema. If a major version ARN is provided as SchemaArn, the minor version revisions in that family are listed instead

clouddirectory:ListObjectAttributes

Read

Grants permission to list all attributes associated with an object

clouddirectory:ListObjectChildren

Read

Grants permission to return a paginated list of child objects associated with a given object

clouddirectory:ListObjectParentPaths

Read

Grants permission to retrieve all available parent paths for any object type such as node, leaf node, policy node, and index node objects

clouddirectory:ListObjectParents

Read

Grants permission to list parent objects associated with a given object in pagination fashion

clouddirectory:ListObjectPolicies

Read

Grants permission to return policies attached to an object in pagination fashion

clouddirectory:ListOutgoingTypedLinks

Read

Grants permission to return a paginated list of all outgoing TypedLinks for a given object

clouddirectory:ListPolicyAttachments

Read

Grants permission to return all of the ObjectIdentifiers to which a given policy is attached

clouddirectory:ListPublishedSchemaArns

List

Grants permission to retrieve published schema ARNs

clouddirectory:ListTagsForResource

Read

Grants permission to return tags for a resource

clouddirectory:ListTypedLinkFacetAttributes

Read

Grants permission to return a paginated list of attributes associated with typed link facet

clouddirectory:ListTypedLinkFacetNames

Read

Grants permission to return a paginated list of typed link facet names that exist in a schema

clouddirectory:LookupPolicy

Read

Grants permission to list all policies from the root of the Directory to the object specified

clouddirectory:PublishSchema

Write

Grants permission to publish a development schema with a version

clouddirectory:PutSchemaFromJson

Write

Grants permission to update a schema using JSON upload. Only available for development schemas

clouddirectory:RemoveFacetFromObject

Write

Grants permission to remove the specified facet from the specified object

clouddirectory:TagResource

Tagging

Grants permission to add tags to a resource

clouddirectory:UntagResource

Tagging

Grants permission to remove tags from a resource

clouddirectory:UpdateFacet

Write

Grants permission to add/update/delete existing Attributes, Rules, or ObjectType of a Facet

clouddirectory:UpdateLinkAttributes

Write

Grants permission to update a given typed link's attributes. Attributes to be updated must not contribute to the typed link's identity, as defined by its IdentityAttributeOrder

clouddirectory:UpdateObjectAttributes

Write

Grants permission to update a given object's attributes

clouddirectory:UpdateSchema

Write

Grants permission to update the schema name with a new name

clouddirectory:UpdateTypedLinkFacet

Write

Grants permission to add/update/delete existing Attributes, Rules, identity attribute order of a TypedLink Facet

clouddirectory:UpgradeAppliedSchema

Write

Grants permission to upgrade a single directory in-place using the PublishedSchemaArn with schema updates found in MinorVersion. Backwards-compatible minor version upgrades are instantaneously available for readers on all objects in the directory

clouddirectory:UpgradePublishedSchema

Write

Grants permission to upgrade a published schema under a new minor version revision using the current contents of DevelopmentSchemaArn