235 actions in the datazone service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.
Grants permission to accept prediction
Grants permission to approve a subscription request for a Data Asset
Grants permission to add an owner to an entity like domain unit
Grants permission to add a policy grant
Grants permission to associate a role in a default service blueprint environment
Grants permission to associate governed terms to an asset
Grants permission to remove linked type items from an Amazon DataZone Domain
Grants permission to retrieve attributes metadata
Grants permission to batch get cells
Grants permission to batch get cell runs
Grants permission to create and update attributes metadata
Grants permission to put linked type items to an Amazon DataZone Domain
Grants permission to cancel an in-progress agent response
Grants permission to cancel metadata generation run
Grants permission to revoke or unsubscribe an approved subscription to Data Asset
Grants permission to create an account pool
Grants permission to create asset
Grants permission to create asset filter
Grants permission to create new revision of an asset
Grants permission to create an asset type
Grants permission to create cells
Grants permission to create cell runs
Grants permission to create connections
Grants permission to create data product
Grants permission to create data product revision
Grants permission to create a new DataSource
Grants permission to provision a domain which is a top level entity that contains other Amazon DataZone resources
Grants permission to create a domain unit
Grants permission to create a collection of configurated resources used to publish and subscribe to data
Grants permission to create an environment action in a default service blueprint environment
Grants permission to create a custom Environment Blueprint that allow user to add Environments to their Project
Grants permission to create a template from a Blueprint that can be used to create a Environment
Grants permission to create a form type or a new revision of it
Grants permission to create a business glossary
Grants permission to create a glossary term
Grants permission to create a DataZone group profile for an IAM Identity Center group
Grants permission to create listing change set
Grants permission to create notebooks
Grants permission to create a Project to enable your team to publish and subscribe to data
Grants permission to add a user to a Project
Grants permission to create a project profile
Grants permission to create rule
Grants permission to create a grant for an approved subscription on a subscription target
Grants permission to create a subscription request for a Data Asset
Grants permission to create a subscription target for a Environment in the project
Grants permission to create a user profile for an existing user in the customers IAM Identity Center
Grants permission to delete an account pool
Grants permission to delete an asset
Grants permission to delete asset filter
Grants permission to delete an asset type
Grants permission to delete cells
Grants permission to delete cell runs
Grants permission to delete connections
Grants permission to delete DataZone catalog data export configuration
Grants permission to delete data product
Grants permission to update existing DataSource
Grants permission to delete a provisioned domain
Grants permission to delete a resource policy for a DataZone Domain
Grants permission to delete an existing domain unit
Grants permission to Delete Environment
Grants permission to delete an environment action in a default service blueprint environment
Grants permission to delete Environment Blueprint
Grants permission to delete environment blueprint configuration
Grants permission to delete Environment Profile
Grants permission to delete a form type
Grants permission to delete a business glossary
Grants permission to delete a glossary term
Grants permission to delete lineage events
Grants permission to delete listing
Grants permission to delete notebooks
Grants permission to delete a Project that enables your team to publish and subscribe to data
Grants permission to remove a user from a project
Grants permission to delete a project profile
Grants permission to delete rule
Grants permission to delete a subscription grant from a subscription target
Grants permission to delete a pending subscription request for a Data Asset
Grants permission to delete a subscription target from a Environment in the project
Grants permission to delete existing TimeSeriesDataPoints
Grants permission to disassociate a role in a default service blueprint environment
Grants permission to disassociate governed terms to an asset
Grants permission to generate code
Grants permission to get account pool details
Grants permission to retrieve an asset
Grants permission to get asset filter
Grants permission to get an asset type
Grants permission to get cells
Grants permission to get cell runs
Grants permission to get cell run result
Grants permission to get compute
Grants permission to get connections
Grants permission to get conversations
Grants permission to retrieve DataZone catalog data export configuration
Grants permission to get data product
Grants permission to Get a existing DataSource in Amazon DataZone using its identifier
Grants permission to get DataSource run job in Amazon DataZone using it's identifier
Grants permission to retrieve information about a domain
Grants permission to use features that require access to domain execution role credentials
Grants permission to retrieve a resource policy for a DataZone Domain
Grants permission to get an existing domain unit
Grants permission to get Environment details
Grants permission to get an environment action in a default service blueprint environment
Grants permission to get environment action link
Grants permission to get Environment Blueprint details
Grants permission to get environment blueprint configuration
Grants permission to get short term credentials that assume the Environment user role
Grants permission to get Environment Profile details
Grants permission to get a form type
Grants permission to get a business glossary
Grants permission to get a glossary term
Grants permission to retrieve an existing DataZone group profile
Grants permission to an IAM principal to log into the DataZone Portal
Grants permission to get job runs
Grants permission to get lineage events
Grants permission to get the lineage node
Grants permission to get listing
Grants permission to get metadata generation run
Grants permission to get notebooks
Grants permission to get notebook compute
Grants permission to get notebook exports
Grants permission to get Project details
Grants permission to get project profile details
Grants permission to get rule
Grants permission to retrieve a subscription
Grants permission to get subscription eligibilty
Grants permission to retireve a subscription grant
Grants permission to reject a subscription request for a Data Asset
Grants permission to retireve details of subscription target
Grants permission to get an existing TimeSeriesDataPoints in Amazon DataZone using its identifier
Grants permission to get update eligibility status for project constructs
Grants permission to retrieve a user profile for an existing user in the DataZone Domain
Grants permission to list Environments across all domains in an AWS Account
Grants permission to list account pools
Grants permission to list accounts in an account pool
Grants permission to list asset filters
Grants permission to list revisions of an asset
Grants permission to list cell runs
Grants permission to list connections
Grants permission to list conversations
Grants permission to list data product revisions
Grants permission to list DataSource runs job's activities on Asset
Grants permission to list DataSource runs job
Grants permission to list existing DataSources
Grants permission to retrieve all domains
Grants permission to list child domain units for a given parent domain unit
Grants permission to list owners of an entity like domain unit
Grants permission to list environment actions in a default service blueprint environment
Grants permission to list environment blueprint configurations
Grants permission to list environment blueprint configuration summaries
Grants permission to list Domain for Environment Blueprints
Grants permission to list Domain for Environment Profiles
Grants permission to show Environments in the Domain
Grants permission to list all the DataZone group profiles that the DataZone user profile is a member of
Grants permission to list job runs
Grants permission to list lineage events
Grants permission to list historical versions of lineage node
Grants permission to list linked type items linked to an Amazon DataZone Domain
Grants permission to list metadata generation runs
Grants permission to list notebooks
Grants permission to list notifications and events for a datazone user
Grants permission to list policy grants
Grants permission to list Project Members
Grants permission to list project profiles
Grants permission to list Projects
Grants permission to list rules
Grants permission to List subscription grants for a subscribed principal
Grants permission to list subscription requests
Grants permission to list subscriptions
Grants permission to list subscription targets
Grants permission to retrieve all tags associated with a resource
Grants permission to list existing TimeSeriesDataPoints
Grants permission to list available Manager Secrets
Grants permission to post lineage events
Grants permission to post a new TimeSeriesDataPoints
Grants permission to provision domain with default project setup
Grants permission to put cell run results
Grants permission to create and update DataZone catalog data export configuration
Grants permission to add a resource policy for a DataZone Domain
Grants permission to put environment blueprint configuration
Grants permission to query graph
Grants permission to refresh token
Grants permission to reject prediction
Grants permission to reject a subscription request for a Data Asset
Grants permission to remove an existing owner of an entity like domain unit
Grants permission to remove a policy grant
Grants permission to revoke a subscription
Grants permission to search datazone entities
Grants permission to search DataZone group profiles and IAM Identity Center groups
Grants permission to search listings
Grants permission to search rules
Grants permission to search types such asset types and form types in a domain
Grants permission to search DataZone user profiles, IAM Identity Center users, and DataZone IAM principal profiles
Grants permission to send messages
Grants permission to login using SSO
Grants permission to logout as SSO user
Grants permission to start account bootstrap action for a domain
Grants permission to start compute
Grants permission to start conversations
Grants permission to start a DataSource run job
Grants permission to start metadata generation run
Grants permission to start notebook compute
Grants permission to export notebooks
Grants permission to import notebooks
Grants permission to start notebook sync
Grants permission to stop compute
Grants permission to stop metadata generation run
Grants permission to stop notebook compute
Grants permission to add or update tags to a resource
Grants permission to remove tags associated with a resource
Grants permission to update an account pool
Grants permission to update asset filter
Grants permission to update cells
Grants permission to update cell runs
Grants permission to update connections
Grants permission to update existing DataSource
Grants permission to update data source run activities
Grants permission to update information for a domain
Grants permission to update an existing domain unit
Grants permission to update Environment settings
Grants permission to update an environment action in a default service blueprint environment
Grants permission to update Environment Blueprint settings
Grants permission to update environment configuration
Grants permission to update status of the Environment deployment
Grants permission to update EnvironmentProfile configuration
Grants permission to update a business glossary
Grants permission to update a glossary term
Grants permission to update a DataZone group profile
Grants permission to update notebooks
Grants permission to update a Project that enables your team to publish and subscribe to data
Grants permission to update a project profile
Grants permission to update rule
Grants permission to update a subscription grant status for custom grants
Grants permission to update business reason for subscription request for a Data Asset
Grants permission to update a subscription target
Grants permission to update a DataZone user profile
Grants permission to validate pass role