comprehend:CreateEndpoint

Write

comprehend:CreateEndpoint is a Write access-level action in the comprehend service. Grants permission to create a model-specific endpoint for synchronous inference for a previously trained custom model

Resource types

ARNs that comprehend:CreateEndpoint can be scoped to in an IAM policy.

arn:${Partition}:comprehend:${Region}:${Account}:document-classifier/${DocumentClassifierName}
document-classifier
arn:${Partition}:comprehend:${Region}:${Account}:document-classifier-endpoint/${DocumentClassifierEndpointName}
document-classifier-endpoint
arn:${Partition}:comprehend:${Region}:${Account}:entity-recognizer/${EntityRecognizerName}
entity-recognizer
arn:${Partition}:comprehend:${Region}:${Account}:entity-recognizer-endpoint/${EntityRecognizerEndpointName}
entity-recognizer-endpoint
arn:${Partition}:comprehend:${Region}:${Account}:flywheel/${FlywheelName}
flywheel

Condition keys

Keys you can use in the Condition block of a policy that grants comprehend:CreateEndpoint.

aws:ResourceTag/${TagKey} String

Filters access by requiring tag value associated with the resource

Example IAM policy

A minimal policy that allows comprehend:CreateEndpoint. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowComprehendCreateEndpoint",
      "Effect": "Allow",
      "Action": "comprehend:CreateEndpoint",
      "Resource": "*"
    }
  ]
}

Related actions in comprehend

View all comprehend actions →