fsx

56 actions in the fsx service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.

fsx:AssociateFileGateway

Write

Grants permission to associate a File Gateway instance with an Amazon FSx for Windows File Server file system

fsx:AssociateFileSystemAliases

Write

Grants permission to associate DNS aliases with an Amazon FSx for Windows File Server file system

fsx:BypassSnaplockEnterpriseRetention

Permissions management

Grants permission to allow deletion of an FSx for ONTAP SnapLock Enterprise volume that contains WORM (write once, read many) files with active retention periods

fsx:CancelDataRepositoryTask

Write

Grants permission to cancel a data repository task

fsx:CopyBackup

Write

Grants permission to copy a backup

fsx:CopySnapshotAndUpdateVolume

Write

Grants permission to update an existing volume by using a snapshot from another Amazon FSx for OpenZFS file system

fsx:CreateAndAttachS3AccessPoint

Write

Grants permission to create and attach a S3 Access Point to a FSx File System

fsx:CreateBackup

Write

Grants permission to create a new backup of an Amazon FSx file system or an Amazon FSx volume

fsx:CreateDataRepositoryAssociation

Write

Grants permission to create a new data respository association for an Amazon FSx for Lustre file system

fsx:CreateDataRepositoryTask

Write

Grants permission to create a new data respository task for an Amazon FSx for Lustre file system

fsx:CreateFileCache

Write

Grants permission to create a new, empty, Amazon file cache

fsx:CreateFileSystem

Write

Grants permission to create a new, empty, Amazon FSx file system

fsx:CreateFileSystemFromBackup

Write

Grants permission to create a new Amazon FSx file system from an existing backup

fsx:CreateSnapshot

Write

Grants permission to create a new snapshot on a volume

fsx:CreateStorageVirtualMachine

Write

Grants permission to create a new storage virtual machine in an Amazon FSx for Ontap file system

fsx:CreateVolume

Write

Grants permission to create a new volume

fsx:CreateVolumeFromBackup

Write

Grants permission to create a new volume from backup

fsx:DeleteBackup

Write

Grants permission to delete a backup, deleting its contents. After deletion, the backup no longer exists, and its data is no longer available

fsx:DeleteDataRepositoryAssociation

Write

Grants permission to delete a data repository association

fsx:DeleteFileCache

Write

Grants permission to delete a file cache, deleting its contents

fsx:DeleteFileSystem

Write

Grants permission to delete a file system, deleting its contents and any existing automatic backups of the file system

fsx:DeleteResourcePolicy

Permissions management

Grants permission to manage cross-account sharing of FSx volumes through AWS Resource Access Manager (RAM). PutResourcePolicy and GetResourcePolicy are also required

fsx:DeleteSnapshot

Write

Grants permission to delete a snapshot on a volume

fsx:DeleteStorageVirtualMachine

Write

Grants permission to delete a storage virtual machine, deleting its contents

fsx:DeleteVolume

Write

Grants permission to delete a volume, deleting its contents and any existing automatic backups of the volume

fsx:DescribeAssociatedFileGateways

Read

Grants permission to describe the File Gateway instances associated with an Amazon FSx for Windows File Server file system

fsx:DescribeBackups

Read

Grants permission to return the descriptions of all backups owned by your AWS account in the AWS Region of the endpoint that you're calling

fsx:DescribeDataRepositoryAssociations

Read

Grants permission to return the descriptions of all data repository associations owned by your AWS account in the AWS Region of the endpoint that you're calling

fsx:DescribeDataRepositoryTasks

Read

Grants permission to return the descriptions of all data repository tasks owned by your AWS account in the AWS Region of the endpoint that you're calling

fsx:DescribeFileCaches

Read

Grants permission to return the descriptions of all file caches owned by your AWS account in the AWS Region of the endpoint that you're calling

fsx:DescribeFileSystemAliases

Read

Grants permission to return the description of all DNS aliases owned by your Amazon FSx for Windows File Server file system

fsx:DescribeFileSystems

Read

Grants permission to return the descriptions of all file systems owned by your AWS account in the AWS Region of the endpoint that you're calling

fsx:DescribeS3AccessPointAttachments

Read

Grants permission to return the descriptions of S3 Access Point Attachments

fsx:DescribeSharedVpcConfiguration

Read

Grants permission to return the descriptions of whether FSx route table updates from participant accounts are allowed in your account

fsx:DescribeSnapshots

Read

Grants permission to return the descriptions of all snapshots owned by your AWS account in the AWS Region of the endpoint you're calling

fsx:DescribeStorageVirtualMachines

Read

Grants permission to return the descriptions of all storage virtual machines owned by your AWS account in the AWS Region of the endpoint that you're calling

fsx:DescribeVolumes

Read

Grants permission to return the descriptions of all volumes owned by your AWS account in the AWS Region of the endpoint that you're calling

fsx:DetachAndDeleteS3AccessPoint

Write

Grants permission to detach an S3 Access Point from an Amazon FSx File System and delete the S3 Access Point

fsx:DisassociateFileGateway

Write

Grants permission to disassociate a File Gateway instance from an Amazon FSx for Windows File Server file system

fsx:DisassociateFileSystemAliases

Write

Grants permission to disassociate file system aliases with an Amazon FSx for Windows File Server file system

fsx:GetResourcePolicy

Permissions management

Grants permission to manage cross-account sharing of FSx volumes through AWS Resource Access Manager (RAM). PutResourcePolicy and DeleteResourcePolicy are also required

fsx:ListTagsForResource

Read

Grants permission to list tags for an Amazon FSx resource

fsx:ManageBackupPrincipalAssociations

Permissions management

Grants permission to manage backup principal associations through AWS Backup

fsx:PutResourcePolicy

Permissions management

Grants permission to manage cross-account sharing of FSx volumes through AWS Resource Access Manager (RAM). DeleteResourcePolicy and GetResourcePolicy are also required

fsx:ReleaseFileSystemNfsV3Locks

Write

Grants permission to release file system NFS V3 locks

fsx:RestoreVolumeFromSnapshot

Write

Grants permission to restore volume state from a snapshot

fsx:StartMisconfiguredStateRecovery

Write

Grants permission to start misconfigured state recovery

fsx:TagResource

Tagging

Grants permission to tag an Amazon FSx resource

fsx:UntagResource

Tagging

Grants permission to remove a tag from an Amazon FSx resource

fsx:UpdateDataRepositoryAssociation

Write

Grants permission to update data repository association configuration

fsx:UpdateFileCache

Write

Grants permission to update file cache configuration

fsx:UpdateFileSystem

Write

Grants permission to update file system configuration

fsx:UpdateSharedVpcConfiguration

Write

Grants permission to enable or disable FSx route table updates from participant accounts in your account

fsx:UpdateSnapshot

Write

Grants permission to update snapshot configuration

fsx:UpdateStorageVirtualMachine

Write

Grants permission to update storage virtual machine configuration

fsx:UpdateVolume

Write

Grants permission to update volume configuration