m2:CreateDeployment

Write

m2:CreateDeployment is a Write access-level action in the m2 service. Grants permission to create a deployment

Resource types

ARNs that m2:CreateDeployment can be scoped to in an IAM policy.

arn:${Partition}:m2:${Region}:${Account}:app/${ApplicationId}
Application
arn:${Partition}:m2:${Region}:${Account}:env/${EnvironmentId}
Environment

Condition keys

Keys you can use in the Condition block of a policy that grants m2:CreateDeployment.

aws:ResourceTag/${TagKey} String

Filters access by a tag key and value pair of a resource

Dependent actions

To use m2:CreateDeployment you may also need to grant:

Example IAM policy

A minimal policy that allows m2:CreateDeployment. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowM2CreateDeployment",
      "Effect": "Allow",
      "Action": "m2:CreateDeployment",
      "Resource": "*"
    }
  ]
}

Related actions in m2

m2:CancelBatchJobExecution Write m2:CreateApplication Write m2:CreateDataSetExportTask Write m2:CreateDataSetImportTask Write m2:CreateEnvironment Write m2:DeleteApplication Write m2:DeleteApplicationFromEnvironment Write m2:DeleteEnvironment Write m2:GetApplication Read m2:GetApplicationVersion Read m2:GetBatchJobExecution Read m2:GetDataSetDetails Read

View all m2 actions →