datazone

235 actions in the datazone service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.

datazone:AcceptPredictions

Write

Grants permission to accept prediction

datazone:AcceptSubscriptionRequest

Write

Grants permission to approve a subscription request for a Data Asset

datazone:AddEntityOwner

Write

Grants permission to add an owner to an entity like domain unit

datazone:AddPolicyGrant

Permissions management

Grants permission to add a policy grant

datazone:AssociateEnvironmentRole

Write

Grants permission to associate a role in a default service blueprint environment

datazone:AssociateGovernedTerms

Write

Grants permission to associate governed terms to an asset

datazone:BatchDeleteLinkedTypes

Write

Grants permission to remove linked type items from an Amazon DataZone Domain

datazone:BatchGetAttributesMetadata

Read

Grants permission to retrieve attributes metadata

datazone:BatchGetCell

Read

Grants permission to batch get cells

datazone:BatchGetCellRun

Read

Grants permission to batch get cell runs

datazone:BatchPutAttributesMetadata

Write

Grants permission to create and update attributes metadata

datazone:BatchPutLinkedTypes

Write

Grants permission to put linked type items to an Amazon DataZone Domain

datazone:CancelMessage

Write

Grants permission to cancel an in-progress agent response

datazone:CancelMetadataGenerationRun

Write

Grants permission to cancel metadata generation run

datazone:CancelSubscription

Write

Grants permission to revoke or unsubscribe an approved subscription to Data Asset

datazone:CreateAccountPool

Write

Grants permission to create an account pool

datazone:CreateAsset

Write

Grants permission to create asset

datazone:CreateAssetFilter

Write

Grants permission to create asset filter

datazone:CreateAssetRevision

Write

Grants permission to create new revision of an asset

datazone:CreateAssetType

Write

Grants permission to create an asset type

datazone:CreateCell

Write

Grants permission to create cells

datazone:CreateCellRun

Write

Grants permission to create cell runs

datazone:CreateConnection

Write

Grants permission to create connections

datazone:CreateDataProduct

Write

Grants permission to create data product

datazone:CreateDataProductRevision

Write

Grants permission to create data product revision

datazone:CreateDataSource

Write

Grants permission to create a new DataSource

datazone:CreateDomain

Write

Grants permission to provision a domain which is a top level entity that contains other Amazon DataZone resources

datazone:CreateDomainUnit

Write

Grants permission to create a domain unit

datazone:CreateEnvironment

Write

Grants permission to create a collection of configurated resources used to publish and subscribe to data

datazone:CreateEnvironmentAction

Write

Grants permission to create an environment action in a default service blueprint environment

datazone:CreateEnvironmentBlueprint

Write

Grants permission to create a custom Environment Blueprint that allow user to add Environments to their Project

datazone:CreateEnvironmentProfile

Write

Grants permission to create a template from a Blueprint that can be used to create a Environment

datazone:CreateFormType

Write

Grants permission to create a form type or a new revision of it

datazone:CreateGlossary

Write

Grants permission to create a business glossary

datazone:CreateGlossaryTerm

Write

Grants permission to create a glossary term

datazone:CreateGroupProfile

Write

Grants permission to create a DataZone group profile for an IAM Identity Center group

datazone:CreateListingChangeSet

Write

Grants permission to create listing change set

datazone:CreateNotebook

Write

Grants permission to create notebooks

datazone:CreateProject

Write

Grants permission to create a Project to enable your team to publish and subscribe to data

datazone:CreateProjectMembership

Write

Grants permission to add a user to a Project

datazone:CreateProjectProfile

Write

Grants permission to create a project profile

datazone:CreateRule

Write

Grants permission to create rule

datazone:CreateSubscriptionGrant

Write

Grants permission to create a grant for an approved subscription on a subscription target

datazone:CreateSubscriptionRequest

Write

Grants permission to create a subscription request for a Data Asset

datazone:CreateSubscriptionTarget

Write

Grants permission to create a subscription target for a Environment in the project

datazone:CreateUserProfile

Write

Grants permission to create a user profile for an existing user in the customers IAM Identity Center

datazone:DeleteAccountPool

Write

Grants permission to delete an account pool

datazone:DeleteAsset

Write

Grants permission to delete an asset

datazone:DeleteAssetFilter

Write

Grants permission to delete asset filter

datazone:DeleteAssetType

Write

Grants permission to delete an asset type

datazone:DeleteCell

Write

Grants permission to delete cells

datazone:DeleteCellRun

Write

Grants permission to delete cell runs

datazone:DeleteConnection

Write

Grants permission to delete connections

datazone:DeleteDataExportConfiguration

Write

Grants permission to delete DataZone catalog data export configuration

datazone:DeleteDataProduct

Write

Grants permission to delete data product

datazone:DeleteDataSource

Write

Grants permission to update existing DataSource

datazone:DeleteDomain

Write

Grants permission to delete a provisioned domain

datazone:DeleteDomainSharingPolicy

Permissions management

Grants permission to delete a resource policy for a DataZone Domain

datazone:DeleteDomainUnit

Write

Grants permission to delete an existing domain unit

datazone:DeleteEnvironment

Write

Grants permission to Delete Environment

datazone:DeleteEnvironmentAction

Write

Grants permission to delete an environment action in a default service blueprint environment

datazone:DeleteEnvironmentBlueprint

Write

Grants permission to delete Environment Blueprint

datazone:DeleteEnvironmentBlueprintConfiguration

Write

Grants permission to delete environment blueprint configuration

datazone:DeleteEnvironmentProfile

Write

Grants permission to delete Environment Profile

datazone:DeleteFormType

Write

Grants permission to delete a form type

datazone:DeleteGlossary

Write

Grants permission to delete a business glossary

datazone:DeleteGlossaryTerm

Write

Grants permission to delete a glossary term

datazone:DeleteLineageEvent

Write

Grants permission to delete lineage events

datazone:DeleteListing

Write

Grants permission to delete listing

datazone:DeleteNotebook

Write

Grants permission to delete notebooks

datazone:DeleteProject

Write

Grants permission to delete a Project that enables your team to publish and subscribe to data

datazone:DeleteProjectMembership

Write

Grants permission to remove a user from a project

datazone:DeleteProjectProfile

Write

Grants permission to delete a project profile

datazone:DeleteRule

Write

Grants permission to delete rule

datazone:DeleteSubscriptionGrant

Write

Grants permission to delete a subscription grant from a subscription target

datazone:DeleteSubscriptionRequest

Write

Grants permission to delete a pending subscription request for a Data Asset

datazone:DeleteSubscriptionTarget

Write

Grants permission to delete a subscription target from a Environment in the project

datazone:DeleteTimeSeriesDataPoints

Write

Grants permission to delete existing TimeSeriesDataPoints

datazone:DisassociateEnvironmentRole

Write

Grants permission to disassociate a role in a default service blueprint environment

datazone:DisassociateGovernedTerms

Write

Grants permission to disassociate governed terms to an asset

datazone:GenerateCode

Write

Grants permission to generate code

datazone:GetAccountPool

Read

Grants permission to get account pool details

datazone:GetAsset

Read

Grants permission to retrieve an asset

datazone:GetAssetFilter

Read

Grants permission to get asset filter

datazone:GetAssetType

Read

Grants permission to get an asset type

datazone:GetCell

Read

Grants permission to get cells

datazone:GetCellRun

Read

Grants permission to get cell runs

datazone:GetCellRunResult

Read

Grants permission to get cell run result

datazone:GetCompute

Read

Grants permission to get compute

datazone:GetConnection

Read

Grants permission to get connections

datazone:GetConversation

Read

Grants permission to get conversations

datazone:GetDataExportConfiguration

Read

Grants permission to retrieve DataZone catalog data export configuration

datazone:GetDataProduct

Read

Grants permission to get data product

datazone:GetDataSource

Read

Grants permission to Get a existing DataSource in Amazon DataZone using its identifier

datazone:GetDataSourceRun

Read

Grants permission to get DataSource run job in Amazon DataZone using it's identifier

datazone:GetDomain

Read

Grants permission to retrieve information about a domain

datazone:GetDomainExecutionRoleCredentials

Read

Grants permission to use features that require access to domain execution role credentials

datazone:GetDomainSharingPolicy

Read

Grants permission to retrieve a resource policy for a DataZone Domain

datazone:GetDomainUnit

Read

Grants permission to get an existing domain unit

datazone:GetEnvironment

Read

Grants permission to get Environment details

datazone:GetEnvironmentAction

Read

Grants permission to get an environment action in a default service blueprint environment

datazone:GetEnvironmentActionLink

Read

Grants permission to get environment action link

datazone:GetEnvironmentBlueprint

Read

Grants permission to get Environment Blueprint details

datazone:GetEnvironmentBlueprintConfiguration

Read

Grants permission to get environment blueprint configuration

datazone:GetEnvironmentCredentials

Read

Grants permission to get short term credentials that assume the Environment user role

datazone:GetEnvironmentProfile

Read

Grants permission to get Environment Profile details

datazone:GetFormType

Read

Grants permission to get a form type

datazone:GetGlossary

Read

Grants permission to get a business glossary

datazone:GetGlossaryTerm

Read

Grants permission to get a glossary term

datazone:GetGroupProfile

Read

Grants permission to retrieve an existing DataZone group profile

datazone:GetIamPortalLoginUrl

Permissions management

Grants permission to an IAM principal to log into the DataZone Portal

datazone:GetJobRun

Read

Grants permission to get job runs

datazone:GetLineageEvent

Read

Grants permission to get lineage events

datazone:GetLineageNode

Read

Grants permission to get the lineage node

datazone:GetListing

Read

Grants permission to get listing

datazone:GetMetadataGenerationRun

Read

Grants permission to get metadata generation run

datazone:GetNotebook

Read

Grants permission to get notebooks

datazone:GetNotebookCompute

Read

Grants permission to get notebook compute

datazone:GetNotebookExport

Read

Grants permission to get notebook exports

datazone:GetProject

Read

Grants permission to get Project details

datazone:GetProjectProfile

Read

Grants permission to get project profile details

datazone:GetRule

Read

Grants permission to get rule

datazone:GetSubscription

Read

Grants permission to retrieve a subscription

datazone:GetSubscriptionEligibility

Read

Grants permission to get subscription eligibilty

datazone:GetSubscriptionGrant

Read

Grants permission to retireve a subscription grant

datazone:GetSubscriptionRequestDetails

Read

Grants permission to reject a subscription request for a Data Asset

datazone:GetSubscriptionTarget

Read

Grants permission to retireve details of subscription target

datazone:GetTimeSeriesDataPoint

Read

Grants permission to get an existing TimeSeriesDataPoints in Amazon DataZone using its identifier

datazone:GetUpdateEligibility

Read

Grants permission to get update eligibility status for project constructs

datazone:GetUserProfile

Read

Grants permission to retrieve a user profile for an existing user in the DataZone Domain

datazone:ListAccountEnvironments

List

Grants permission to list Environments across all domains in an AWS Account

datazone:ListAccountPools

List

Grants permission to list account pools

datazone:ListAccountsInAccountPool

List

Grants permission to list accounts in an account pool

datazone:ListAssetFilters

List

Grants permission to list asset filters

datazone:ListAssetRevisions

List

Grants permission to list revisions of an asset

datazone:ListCellRuns

List

Grants permission to list cell runs

datazone:ListConnections

List

Grants permission to list connections

datazone:ListConversations

List

Grants permission to list conversations

datazone:ListDataProductRevisions

List

Grants permission to list data product revisions

datazone:ListDataSourceRunActivities

List

Grants permission to list DataSource runs job's activities on Asset

datazone:ListDataSourceRuns

List

Grants permission to list DataSource runs job

datazone:ListDataSources

List

Grants permission to list existing DataSources

datazone:ListDomains

List

Grants permission to retrieve all domains

datazone:ListDomainUnitsForParent

List

Grants permission to list child domain units for a given parent domain unit

datazone:ListEntityOwners

List

Grants permission to list owners of an entity like domain unit

datazone:ListEnvironmentActions

List

Grants permission to list environment actions in a default service blueprint environment

datazone:ListEnvironmentBlueprintConfigurations

List

Grants permission to list environment blueprint configurations

datazone:ListEnvironmentBlueprintConfigurationSummaries

List

Grants permission to list environment blueprint configuration summaries

datazone:ListEnvironmentBlueprints

List

Grants permission to list Domain for Environment Blueprints

datazone:ListEnvironmentProfiles

List

Grants permission to list Domain for Environment Profiles

datazone:ListEnvironments

List

Grants permission to show Environments in the Domain

datazone:ListGroupsForUser

List

Grants permission to list all the DataZone group profiles that the DataZone user profile is a member of

datazone:ListJobRuns

List

Grants permission to list job runs

datazone:ListLineageEvents

List

Grants permission to list lineage events

datazone:ListLineageNodeHistory

List

Grants permission to list historical versions of lineage node

datazone:ListLinkedTypes

List

Grants permission to list linked type items linked to an Amazon DataZone Domain

datazone:ListMetadataGenerationRuns

List

Grants permission to list metadata generation runs

datazone:ListNotebooks

List

Grants permission to list notebooks

datazone:ListNotifications

List

Grants permission to list notifications and events for a datazone user

datazone:ListPolicyGrants

List

Grants permission to list policy grants

datazone:ListProjectMemberships

List

Grants permission to list Project Members

datazone:ListProjectProfiles

List

Grants permission to list project profiles

datazone:ListProjects

List

Grants permission to list Projects

datazone:ListRules

List

Grants permission to list rules

datazone:ListSubscriptionGrants

List

Grants permission to List subscription grants for a subscribed principal

datazone:ListSubscriptionRequests

List

Grants permission to list subscription requests

datazone:ListSubscriptions

List

Grants permission to list subscriptions

datazone:ListSubscriptionTargets

List

Grants permission to list subscription targets

datazone:ListTagsForResource

Read

Grants permission to retrieve all tags associated with a resource

datazone:ListTimeSeriesDataPoints

List

Grants permission to list existing TimeSeriesDataPoints

datazone:ListWarehouseMetadata

List

Grants permission to list available Manager Secrets

datazone:PostLineageEvent

Write

Grants permission to post lineage events

datazone:PostTimeSeriesDataPoints

Write

Grants permission to post a new TimeSeriesDataPoints

datazone:ProvisionDomain

Write

Grants permission to provision domain with default project setup

datazone:PutCellRunResult

Write

Grants permission to put cell run results

datazone:PutDataExportConfiguration

Write

Grants permission to create and update DataZone catalog data export configuration

datazone:PutDomainSharingPolicy

Permissions management

Grants permission to add a resource policy for a DataZone Domain

datazone:PutEnvironmentBlueprintConfiguration

Write

Grants permission to put environment blueprint configuration

datazone:QueryGraph

List

Grants permission to query graph

datazone:RefreshToken

Write

Grants permission to refresh token

datazone:RejectPredictions

Write

Grants permission to reject prediction

datazone:RejectSubscriptionRequest

Write

Grants permission to reject a subscription request for a Data Asset

datazone:RemoveEntityOwner

Write

Grants permission to remove an existing owner of an entity like domain unit

datazone:RemovePolicyGrant

Permissions management

Grants permission to remove a policy grant

datazone:RevokeSubscription

Permissions management

Grants permission to revoke a subscription

datazone:Search

List

Grants permission to search datazone entities

datazone:SearchGroupProfiles

List

Grants permission to search DataZone group profiles and IAM Identity Center groups

datazone:SearchListings

List

Grants permission to search listings

datazone:SearchRules

List

Grants permission to search rules

datazone:SearchTypes

List

Grants permission to search types such asset types and form types in a domain

datazone:SearchUserProfiles

List

Grants permission to search DataZone user profiles, IAM Identity Center users, and DataZone IAM principal profiles

datazone:SendMessage

Write

Grants permission to send messages

datazone:SsoLogin

Write

Grants permission to login using SSO

datazone:SsoLogout

Write

Grants permission to logout as SSO user

datazone:StartAccountBootstrapAction

Write

Grants permission to start account bootstrap action for a domain

datazone:StartCompute

Write

Grants permission to start compute

datazone:StartConversation

Write

Grants permission to start conversations

datazone:StartDataSourceRun

Write

Grants permission to start a DataSource run job

datazone:StartMetadataGenerationRun

Write

Grants permission to start metadata generation run

datazone:StartNotebookCompute

Write

Grants permission to start notebook compute

datazone:StartNotebookExport

Write

Grants permission to export notebooks

datazone:StartNotebookImport

Write

Grants permission to import notebooks

datazone:StartNotebookSync

Write

Grants permission to start notebook sync

datazone:StopCompute

Write

Grants permission to stop compute

datazone:StopMetadataGenerationRun

Write

Grants permission to stop metadata generation run

datazone:StopNotebookCompute

Write

Grants permission to stop notebook compute

datazone:TagResource

Tagging

Grants permission to add or update tags to a resource

datazone:UntagResource

Tagging

Grants permission to remove tags associated with a resource

datazone:UpdateAccountPool

Write

Grants permission to update an account pool

datazone:UpdateAssetFilter

Write

Grants permission to update asset filter

datazone:UpdateCell

Write

Grants permission to update cells

datazone:UpdateCellRun

Write

Grants permission to update cell runs

datazone:UpdateConnection

Write

Grants permission to update connections

datazone:UpdateDataSource

Write

Grants permission to update existing DataSource

datazone:UpdateDataSourceRunActivities

Write

Grants permission to update data source run activities

datazone:UpdateDomain

Write

Grants permission to update information for a domain

datazone:UpdateDomainUnit

Write

Grants permission to update an existing domain unit

datazone:UpdateEnvironment

Write

Grants permission to update Environment settings

datazone:UpdateEnvironmentAction

Write

Grants permission to update an environment action in a default service blueprint environment

datazone:UpdateEnvironmentBlueprint

Write

Grants permission to update Environment Blueprint settings

datazone:UpdateEnvironmentConfiguration

Write

Grants permission to update environment configuration

datazone:UpdateEnvironmentDeploymentStatus

Write

Grants permission to update status of the Environment deployment

datazone:UpdateEnvironmentProfile

Write

Grants permission to update EnvironmentProfile configuration

datazone:UpdateGlossary

Write

Grants permission to update a business glossary

datazone:UpdateGlossaryTerm

Write

Grants permission to update a glossary term

datazone:UpdateGroupProfile

Write

Grants permission to update a DataZone group profile

datazone:UpdateNotebook

Write

Grants permission to update notebooks

datazone:UpdateProject

Write

Grants permission to update a Project that enables your team to publish and subscribe to data

datazone:UpdateProjectProfile

Write

Grants permission to update a project profile

datazone:UpdateRule

Write

Grants permission to update rule

datazone:UpdateSubscriptionGrantStatus

Write

Grants permission to update a subscription grant status for custom grants

datazone:UpdateSubscriptionRequest

Write

Grants permission to update business reason for subscription request for a Data Asset

datazone:UpdateSubscriptionTarget

Write

Grants permission to update a subscription target

datazone:UpdateUserProfile

Write

Grants permission to update a DataZone user profile

datazone:ValidatePassRole

Write

Grants permission to validate pass role