identity-sync:CreateSyncFilter

Write

identity-sync:CreateSyncFilter is a Write access-level action in the identity-sync service. Grants permission to create a sync filter on the sync profile

Resource types

ARNs that identity-sync:CreateSyncFilter can be scoped to in an IAM policy.

arn:${Partition}:identity-sync:${Region}:${Account}:profile/${SyncProfileName}
SyncProfileResource

Condition keys

No condition keys are documented for this action.

Example IAM policy

A minimal policy that allows identity-sync:CreateSyncFilter. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowIdentitysyncCreateSyncFilter",
      "Effect": "Allow",
      "Action": "identity-sync:CreateSyncFilter",
      "Resource": "*"
    }
  ]
}

Related actions in identity-sync

identity-sync:AllowVendedLogDeliveryForResource Permissions management identity-sync:CreateSyncProfile Write identity-sync:CreateSyncTarget Write identity-sync:DeleteSyncFilter Write identity-sync:DeleteSyncProfile Write identity-sync:DeleteSyncTarget Write identity-sync:GetSyncProfile Read identity-sync:GetSyncTarget Read identity-sync:ListSyncFilters List identity-sync:StartSync Write identity-sync:StopSync Write identity-sync:UpdateSyncTarget Write

View all identity-sync actions →