comprehend:DescribeEntityRecognizer is a Read access-level action in the comprehend service. Grants permission to provide details about an entity recognizer including status, S3 buckets containing training data, recognizer metadata, metrics, and so on
ARNs that comprehend:DescribeEntityRecognizer can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants comprehend:DescribeEntityRecognizer.
Filters access by requiring tag value associated with the resource
A minimal policy that allows comprehend:DescribeEntityRecognizer. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowComprehendDescribeEntityRecognizer",
"Effect": "Allow",
"Action": "comprehend:DescribeEntityRecognizer",
"Resource": "*"
}
]
}