293 actions in the iot service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.
Grants permission to accept a pending certificate transfer
Grants permission to add a thing to the specified billing group
Grants permission to add a thing to the specified thing group
Grants permission to associate SBOM files to a package version
Grants permission to associate a group with a continuous job
Grants permission to attach a policy to the specified target
Grants permission to attach the specified policy to the specified principal (certificate or other credential)
Grants permission to associate a Device Defender security profile with a thing group or with this account
Grants permission to attach the specified principal to the specified thing
Grants permission to cancel a mitigation action task that is in progress
Grants permission to cancel an audit that is in progress. The audit can be either scheduled or on-demand
Grants permission to cancel a pending transfer for the specified certificate
Grants permission to cancel a Device Defender ML Detect mitigation action
Grants permission to cancel a job
Grants permission to cancel a job execution on a particular device
Grants permission to clear the default authorizer
Grants permission to close a tunnel
Grants permission to confirm a http url TopicRuleDestinationDestination
Grants permission to connect as the specified client
Grants permission to create a Device Defender audit suppression
Grants permission to create an authorizer
Grants permission to create a billing group
Grants permission to create an X.509 certificate using the specified certificate signing request
Grants permission to create a certificate provider
Grants permission to create a command that can be used to start new executions against a device
Grants permission to create a custom metric for device side metric reporting and monitoring
Grants permission to define a dimension that can be used to to limit the scope of a metric used in a security profile
Grants permission to create a domain configuration
Grants permission to create a Dynamic Thing Group
Grants permission to create a fleet metric
Grants permission to create a job
Grants permission to create a job template
Grants permission to create a 2048 bit RSA key pair and issues an X.509 certificate using the issued public key
Grants permission to define an action that can be applied to audit findings by using StartAuditMitigationActionsTask
Grants permission to create an OTA update job
Grants permission to create a software package that you can deploy to your devices
Grants permission to create a version under the specified package
Grants permission to create an AWS IoT policy
Grants permission to create a new version of the specified AWS IoT policy
Grants permission to create a provisioning claim
Grants permission to create a fleet provisioning template
Grants permission to create a new version of a fleet provisioning template
Grants permission to create a role alias
Grants permission to create a scheduled audit that is run at a specified time interval
Grants permission to create a Device Defender security profile
Grants permission to create a new AWS IoT stream
Grants permission to create a thing in the thing registry
Grants permission to create a thing group
Grants permission to create a new thing type
Grants permission to create a rule
Grants permission to create a TopicRuleDestination
Grants permission to delete the audit configuration associated with the account
Grants permission to delete a Device Defender audit suppression
Grants permission to delete the specified authorizer
Grants permission to delete the specified billing group
Grants permission to delete a registered CA certificate
Grants permission to delete the specified certificate
Grants permission to delete a certificate provider
Grants permission to delete a command
Grants permission to delete a command execution
Grants permission to disconnect the specified connection
Grants permission to deletes the specified custom metric from your AWS account
Grants permission to remove the specified dimension from your AWS account
Grants permission to delete a domain configuration
Grants permission to delete the specified Dynamic Thing Group
Grants permission to delete the specified fleet metric
Grants permission to delete a job and its related job executions
Grants permission to delete a job execution
Grants permission to delete a job template
Grants permission to delete a defined mitigation action from your AWS account
Grants permission to delete an OTA update job
Grants permission to delete a package
Grants permission to delete a version of the specified package
Grants permission to delete the specified policy
Grants permission to Delete the specified version of the specified policy
Grants permission to delete a fleet provisioning template
Grants permission to delete a fleet provisioning template version
Grants permission to delete a CA certificate registration code
Grants permission to delete the specified role alias
Grants permission to delete a scheduled audit
Grants permission to delete a Device Defender security profile
Grants permission to delete a specified stream
Grants permission to delete the specified thing
Grants permission to delete the specified thing group
Grants permission to delete the specified thing shadow
Grants permission to delete the specified thing type
Grants permission to delete the specified rule
Grants permission to delete a TopicRuleDestination
Grants permission to delete the specified v2 logging level
Grants permission to deprecate the specified thing type
Grants permission to get information about audit configurations for the account
Grants permission to get information about a single audit finding. Properties include the reason for noncompliance, the severity of the issue, and when the audit that returned the finding was started
Grants permission to get information about an audit mitigation task that is used to apply mitigation actions to a set of audit findings
Grants permission to get information about a Device Defender audit suppression
Grants permission to get information about a Device Defender audit
Grants permission to describe an authorizer
Grants permission to get information about the specified billing group
Grants permission to describe a registered CA certificate
Grants permission to get information about the specified certificate
Grants permission to describe a certificate provider
Grants permission to describe a custom metric that is defined in your AWS account
Grants permission to describe the default authorizer
Grants permission to describe a Device Defender ML Detect mitigation action
Grants permission to get details about a dimension that is defined in your AWS account
Grants permission to get information about the domain configuration
Grants permission to describe the encryption configuration for the account
Grants permission to get a unique endpoint specific to the AWS account making the call
Grants permission to get account event configurations
Grants permission to get information about the specified fleet metric
Grants permission to get information about the specified index
Grants permission to describe a job
Grants permission to describe a job execution
Grants permission to describe a job template
Grants permission to describe a managed job template
Grants permission to get information about a mitigation action
Grants permission to get information about a fleet provisioning template
Grants permission to get information about a fleet provisioning template version
Grants permission to describe a role alias
Grants permission to get information about a scheduled audit
Grants permission to get information about a Device Defender security profile
Grants permission to get information about the specified stream
Grants permission to get information about the specified thing
Grants permission to get information about the specified thing group
Grants permission to get information about the bulk thing registration task
Grants permission to get information about the specified thing type
Grants permission to describe a tunnel
Grants permission to detach a policy from the specified target
Grants permission to remove the specified policy from the specified certificate
Grants permission to disassociate a Device Defender security profile from a thing group or from this account
Grants permission to detach the specified principal from the specified thing
Grants permission to disable the specified rule
Grants permission to disassociate SBOM files from a package version
Grants permission to enable the specified rule
Grants permission to fetch a Device Defender's ML Detect Security Profile training model's status
Grants permission to get buckets aggregation for IoT fleet index
Grants permission to get cardinality for IoT fleet index
Grants permission to get the information about the command
Grants permission to get the information of a command execution
Grants permission to retrieve the specified connection information
Grants permission to get effective policies
Grants permission to get current fleet indexing configuration
Grants permission to get a job document
Grants permission to get the logging options
Grants permission to get the information about the OTA update job
Grants permission to get the information about the package
Grants permission to get the package configuration of the account
Grants permission to get the version of the package
Grants permission to get percentiles for IoT fleet index
Grants permission to get information about the specified policy with the policy document of the default version
Grants permission to get information about the specified policy version
Grants permission to get a registration code used to register a CA certificate with AWS IoT
Grants permission to get the retained message on the specified topic
Grants permission to get statistics for IoT fleet index
Grants permission to get the thing's connectivity data
Grants permission to get the thing shadow
Grants permission to get information about the specified rule
Grants permission to get a TopicRuleDestination
Grants permission to get v2 logging options
Grants permission to list the active violations for a given Device Defender security profile or Thing
Grants permission to list the policies attached to the specified thing group
Grants permission to list the findings (results) of a Device Defender audit or of the audits performed during a specified time period
Grants permission to get the status of audit mitigation action tasks that were executed
Grants permission to get a list of audit mitigation action tasks that match the specified filters
Grants permission to list your Device Defender audit suppressions
Grants permission to list the Device Defender audits that have been performed during a given time period
Grants permission to list the authorizers registered in your account
Grants permission to list all billing groups
Grants permission to list the CA certificates registered for your AWS account
Grants permission to list certificate providers in the account
Grants permission to list your certificates
Grants permission to list the device certificates signed by the specified CA certificate
Grants permission to list commands executions in the account
Grants permission to list commands in the account
Grants permission to list the custom metrics in your AWS account
Grants permission to lists mitigation actions executions for a Device Defender ML Detect Security Profile
Grants permission to list Device Defender ML Detect mitigation actions tasks
Grants permission to list the dimensions that are defined for your AWS account
Grants permission to list the domain configuration created by your AWS account
Grants permission to list the fleet metrics in your account
Grants permission to list all indices for fleet index
Grants permission to list the job executions for a job
Grants permission to list the job executions for the specified thing
Grants permission to list jobs
Grants permission to list job templates
Grants permission to list managed job templates
Grants permissions to list the metric values for a thing based on the metricName, and dimension if specified
Grants permission to get a list of all mitigation actions that match the specified filter criteria
Grants permission to list all named shadows for a given thing
Grants permission to list OTA update jobs in the account
Grants permission to list certificates that are being transfered but not yet accepted
Grants permission to list packages in the account
Grants permission to list versions for a package in the account
Grants permission to list your policies
Grants permission to list the principals associated with the specified policy
Grants permission to list the versions of the specified policy, and identifies the default version
Grants permission to list the policies attached to the specified principal. If you use an Amazon Cognito identity, the ID needs to be in Amazon Cognito Identity format
Grants permission to list the things associated with the specified principal
Grants permission to list the things associated with the specified principal
Grants permission to list the fleet provisioning templates in your AWS account
Grants permission to get a list of fleet provisioning template versions
Grants permission to list related resources for a single audit finding
Grants permission to list the retained messages for your account
Grants permission to list role aliases
Grants permission to list SBOM validation results of a package version
Grants permission to list all of your scheduled audits
Grants permission to list the Device Defender security profiles you have created
Grants permission to list the Device Defender security profiles attached to a target
Grants permission to list the streams in your account
Grants permission to retrieve the specified connection's subscriptions
Grants permission to list all tags for a given resource
Grants permission to list targets for the specified policy
Grants permission to list the targets associated with a given Device Defender security profile
Grants permission to list all thing groups
Grants permission to list thing groups to which the specified thing belongs
Grants permission to list the principals associated with the specified thing
Grants permission to list the principals associated with the specified thing
Grants permission to list information about bulk thing registration tasks
Grants permission to list bulk thing registration tasks
Grants permission to list all things
Grants permission to list all things in the specified billing group
Grants permission to list all things in the specified thing group
Grants permission to list all thing types
Grants permission to list all TopicRuleDestinations
Grants permission to list the rules for the specific topic
Grants permission to list tunnels
Grants permission to list the v2 logging levels
Grants permission to list the Device Defender security profile violations discovered during the given time period
Grants permission to open a tunnel
Grants permission to publish to the specified topic
Grants permission to put verification state on a violation
Grants permission to receive from the specified topic
Grants permission to register a CA certificate with AWS IoT
Grants permission to register a device certificate with AWS IoT
Grants permission to register a device certificate with AWS IoT without a registered CA (certificate authority)
Grants permission to register your thing
Grants permission to reject a pending certificate transfer
Grants permission to remove thing from the specified billing group
Grants permission to remove thing from the specified thing group
Grants permission to replace the specified rule
Grants permission to publish a retained message to the specified topic
Grants permission to rotate the access token of a tunnel
Grants permission to search IoT fleet index
Grants permission to send a direct message to an IoT client
Grants permission to set the default authorizer. This will be used if a websocket connection is made without specifying an authorizer
Grants permission to set the specified version of the specified policy as the policy's default (operative) version
Grants permission to set the logging options
Grants permission to set the v2 logging level
Grants permission to set the v2 logging options
Grants permission to start a task that applies a set of mitigation actions to the specified target
Grants permission to start a new command execution
Grants permission to start a Device Defender ML Detect mitigation actions task
Grants permission to start an on-demand Device Defender audit
Grants permission to start a bulk thing registration task
Grants permission to stop a bulk thing registration task
Grants permission to subscribe to the specified TopicFilter
Grants permission to tag a specified resource
Grants permission to test the policies evaluation for group policies
Grants permission to test invoke the specified custom authorizer for testing purposes
Grants permission to transfer the specified certificate to the specified AWS account
Grants permission to untag a specified resource
Grants permission to configure or reconfigure the Device Defender audit settings for this account
Grants permission to update a Device Defender audit suppression
Grants permission to update an authorizer
Grants permission to update information associated with the specified billing group
Grants permission to update a registered CA certificate
Grants permission to update the status of the specified certificate. This operation is idempotent
Grants permission to update a certificate provider
Grants permission to update a command
Grants permission to update the specified custom metric
Grants permission to update the definition for a dimension
Grants permission to update a domain configuration
Grants permission to update a Dynamic Thing Group
Grants permission to update the encryption configuration for the account
Grants permission to update event configurations
Grants permission to update a fleet metric
Grants permission to update fleet indexing configuration
Grants permission to update a job
Grants permission to update the definition for the specified mitigation action
Grants permission to update a package
Grants permission to update the package configuration of the account
Grants permission to update the version of the specified package
Grants permission to update a fleet provisioning template
Grants permission to update the role alias
Grants permission to update a scheduled audit, including what checks are performed and how often the audit takes place
Grants permission to update a Device Defender security profile
Grants permission to update the data for a stream
Grants permission to update information associated with the specified thing
Grants permission to update information associated with the specified thing group
Grants permission to update the thing groups to which the thing belongs
Grants permission to update the thing shadow
Grants permission to update information associated with the specified thing type
Grants permission to update a TopicRuleDestination
Grants permission to validate a Device Defender security profile behaviors specification