dms:DescribeMetadataModel

Read

dms:DescribeMetadataModel is a Read access-level action in the dms service. Grants permission to get detailed information about the specified metadata model, including its definition and corresponding converted objects in the target database if applicable

Resource types

ARNs that dms:DescribeMetadataModel can be scoped to in an IAM policy.

arn:${Partition}:dms:${Region}:${Account}:migration-project: required
MigrationProject

Condition keys

Keys you can use in the Condition block of a policy that grants dms:DescribeMetadataModel.

aws:ResourceTag/${TagKey} String

Filters access by the presence of tag key-value pairs attached to the resource

dms:migration-project-tag/${TagKey} String

Filters access by the presence of tag key-value pairs in the request for MigrationProject

Example IAM policy

A minimal policy that allows dms:DescribeMetadataModel. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowDmsDescribeMetadataModel",
      "Effect": "Allow",
      "Action": "dms:DescribeMetadataModel",
      "Resource": "*"
    }
  ]
}

Related actions in dms

View all dms actions →