directconnect:StartBgpFailoverTest

Write

directconnect:StartBgpFailoverTest is a Write access-level action in the directconnect service. Grants permission to start the virtual interface failover test that verifies your configuration meets your resiliency requirements by placing the BGP peering session in the DOWN state. You can then send traffic to verify that there are no outages

Resource types

ARNs that directconnect:StartBgpFailoverTest can be scoped to in an IAM policy.

arn:${Partition}:directconnect:${Region}:${Account}:dxvif/${VirtualInterfaceId}
dxvif

Condition keys

Keys you can use in the Condition block of a policy that grants directconnect:StartBgpFailoverTest.

aws:ResourceTag/${TagKey} String

Filters access by actions based on tag key-value pairs attached to the resource

Example IAM policy

A minimal policy that allows directconnect:StartBgpFailoverTest. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowDirectconnectStartBgpFailoverTest",
      "Effect": "Allow",
      "Action": "directconnect:StartBgpFailoverTest",
      "Resource": "*"
    }
  ]
}

Related actions in directconnect

View all directconnect actions →