50 actions in the elasticbeanstalk service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.
Grants permission to cancel in-progress environment configuration update or application version deployment
Grants permission to add tags to an Elastic Beanstalk resource and to update tag values
Grants permission to apply a scheduled managed action immediately
Grants permission to associate an operations role with an environment
Grants permission to check CNAME availability
Grants permission to create or update a group of environments, each running a separate component of a single application
Grants permission to create a new application
Grants permission to create an application version for an application
Grants permission to create a configuration template
Grants permission to launch an environment for an application
Grants permission to create a new version of a custom platform
Grants permission to create the Amazon S3 storage location for the account
Grants permission to delete an application along with all associated versions and configurations
Grants permission to delete an application version from an application
Grants permission to delete a configuration template
Grants permission to delete the draft configuration associated with the running environment
Grants permission to delete a version of a custom platform
Grants permission to retrieve a list of account attributes, including resource quotas
Grants permission to retrieve the descriptions of existing applications
Grants permission to retrieve a list of application versions stored in an AWS Elastic Beanstalk storage bucket
Grants permission to retrieve descriptions of environment configuration options
Grants permission to retrieve a description of the settings for a configuration set
Grants permission to retrieve information about the overall health of an environment
Grants permission to retrieve a list of an environment's completed and failed managed actions
Grants permission to retrieve a list of an environment's upcoming and in-progress managed actions
Grants permission to retrieve a list of AWS resources for an environment
Grants permission to retrieve descriptions for existing environments
Grants permission to retrieve a list of event descriptions matching a set of criteria
Grants permission to retrieve more detailed information about the health of environment instances
Grants permission to retrieve a description of a managed platform version
Grants permission to disassociate an operations role with an environment
Grants permission to retrieve a list of the available solution stack names
Grants permission to retrieve a list of the available platform branches
Grants permission to retrieve a list of the available platforms
Grants permission to retrieve a list of tags of an Elastic Beanstalk resource
Grants permission to submit instance statistics for enhanced health
Grants permission to delete and recreate all of the AWS resources for an environment and to force a restart
Grants permission to remove tags from an Elastic Beanstalk resource
Grants permission to initiate a request to compile information of the deployed environment
Grants permission to request an environment to restart the application container server running on each Amazon EC2 instance
Grants permission to retrieve the compiled information from a RequestEnvironmentInfo request
Grants permission to swap the CNAMEs of two environments
Grants permission to terminate an environment
Grants permission to update an application with specified properties
Grants permission to update the application version lifecycle policy associated with the application
Grants permission to update an application version with specified properties
Grants permission to update a configuration template with specified properties or configuration option values
Grants permission to update an environment
Doesn't grant permission to update tags. To grant permission to add tags to an Elastic Beanstalk resource, remove tags, and to update tag values, specify elasticbeanstalk:AddTags and elasticbeanstalk:RemoveTags
Grants permission to check the validity of a set of configuration settings for a configuration template or an environment