opsworks

74 actions in the opsworks service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.

opsworks:AssignInstance

Write

Grants permission to assign a registered instance to a layer

opsworks:AssignVolume

Write

Grants permission to assign one of the stack's registered Amazon EBS volumes to a specified instance

opsworks:AssociateElasticIp

Write

Grants permission to associate one of the stack's registered Elastic IP addresses with a specified instance

opsworks:AttachElasticLoadBalancer

Write

Grants permission to attach an Elastic Load Balancing load balancer to a specified layer

opsworks:CloneStack

Write

Grants permission to create a clone of a specified stack

opsworks:CreateApp

Write

Grants permission to create an app for a specified stack

opsworks:CreateDeployment

Write

Grants permission to run deployment or stack commands

opsworks:CreateInstance

Write

Grants permission to create an instance in a specified stack

opsworks:CreateLayer

Write

Grants permission to create a layer

opsworks:CreateStack

Write

Grants permission to create a new stack

opsworks:CreateUserProfile

Write

Grants permission to create a new user profile

opsworks:DeleteApp

Write

Grants permission to delete a specified app

opsworks:DeleteInstance

Write

Grants permission to delete a specified instance, which terminates the associated Amazon EC2 instance

opsworks:DeleteLayer

Write

Grants permission to delete a specified layer

opsworks:DeleteStack

Write

Grants permission to delete a specified stack

opsworks:DeleteUserProfile

Write

Grants permission to delete a user profile

opsworks:DeregisterEcsCluster

Write

Grants permission to delete a user profile

opsworks:DeregisterElasticIp

Write

Grants permission to deregister a specified Elastic IP address

opsworks:DeregisterInstance

Write

Grants permission to deregister a registered Amazon EC2 or on-premises instance

opsworks:DeregisterRdsDbInstance

Write

Grants permission to deregister an Amazon RDS instance

opsworks:DeregisterVolume

Write

Grants permission to deregister an Amazon EBS volume

opsworks:DescribeAgentVersions

List

Grants permission to describe the available AWS OpsWorks agent versions

opsworks:DescribeApps

List

Grants permission to request a description of a specified set of apps

opsworks:DescribeCommands

List

Grants permission to describe the results of specified commands

opsworks:DescribeDeployments

List

Grants permission to request a description of a specified set of deployments

opsworks:DescribeEcsClusters

List

Grants permission to describe Amazon ECS clusters that are registered with a stack

opsworks:DescribeElasticIps

List

Grants permission to describe Elastic IP addresses

opsworks:DescribeElasticLoadBalancers

List

Grants permission to describe a stack's Elastic Load Balancing instances

opsworks:DescribeInstances

List

Grants permission to request a description of a set of instances

opsworks:DescribeLayers

List

Grants permission to request a description of one or more layers in a specified stack

opsworks:DescribeLoadBasedAutoScaling

List

Grants permission to describe load-based auto scaling configurations for specified layers

opsworks:DescribeMyUserProfile

List

Grants permission to describe a user's SSH information

opsworks:DescribeOperatingSystems

List

Grants permission to describe the operating systems that are supported by AWS OpsWorks Stacks

opsworks:DescribePermissions

List

Grants permission to describe the permissions for a specified stack

opsworks:DescribeRaidArrays

List

Grants permission to describe an instance's RAID arrays

opsworks:DescribeRdsDbInstances

List

Grants permission to describe Amazon RDS instances

opsworks:DescribeServiceErrors

List

Grants permission to describe AWS OpsWorks service errors

opsworks:DescribeStackProvisioningParameters

List

Grants permission to request a description of a stack's provisioning parameters

opsworks:DescribeStacks

List

Grants permission to request a description of one or more stacks

opsworks:DescribeStackSummary

List

Grants permission to describe the number of layers and apps in a specified stack, and the number of instances in each state, such as running_setup or online

opsworks:DescribeTimeBasedAutoScaling

List

Grants permission to describe time-based auto scaling configurations for specified instances

opsworks:DescribeUserProfiles

List

Grants permission to describe specified users

opsworks:DescribeVolumes

List

Grants permission to describe an instance's Amazon EBS volumes

opsworks:DetachElasticLoadBalancer

Write

Grants permission to detache a specified Elastic Load Balancing instance from its layer

opsworks:DisassociateElasticIp

Write

Grants permission to disassociate an Elastic IP address from its instance

opsworks:GetHostnameSuggestion

Read

Grants permission to get a generated host name for the specified layer, based on the current host name theme

opsworks:GrantAccess

Write

Grants permission to grant RDP access to a Windows instance for a specified time period

opsworks:ListTags

List

Grants permission to return a list of tags that are applied to the specified stack or layer

opsworks:RebootInstance

Write

Grants permission to reboot a specified instance

opsworks:RegisterEcsCluster

Write

Grants permission to register a specified Amazon ECS cluster with a stack

opsworks:RegisterElasticIp

Write

Grants permission to register an Elastic IP address with a specified stack

opsworks:RegisterInstance

Write

Grants permission to register instances with a specified stack that were created outside of AWS OpsWorks

opsworks:RegisterRdsDbInstance

Write

Grants permission to register an Amazon RDS instance with a stack

opsworks:RegisterVolume

Write

Grants permission to register an Amazon EBS volume with a specified stack

opsworks:SetLoadBasedAutoScaling

Write

Grants permission to specify the load-based auto scaling configuration for a specified layer

opsworks:SetPermission

Permissions management

Grants permission to specify a user's permissions

opsworks:SetTimeBasedAutoScaling

Write

Grants permission to specify the time-based auto scaling configuration for a specified instance

opsworks:StartInstance

Write

Grants permission to start a specified instance

opsworks:StartStack

Write

Grants permission to start a stack's instances

opsworks:StopInstance

Write

Grants permission to stop a specified instance

opsworks:StopStack

Write

Grants permission to stop a specified stack

opsworks:TagResource

Tagging

Grants permission to apply tags to a specified stack or layer

opsworks:UnassignInstance

Write

Grants permission to unassign a registered instance from all of it's layers

opsworks:UnassignVolume

Write

Grants permission to unassign an assigned Amazon EBS volume

opsworks:UntagResource

Tagging

Grants permission to remove tags from a specified stack or layer

opsworks:UpdateApp

Write

Grants permission to update a specified app

opsworks:UpdateElasticIp

Write

Grants permission to update a registered Elastic IP address's name

opsworks:UpdateInstance

Write

Grants permission to update a specified instance

opsworks:UpdateLayer

Write

Grants permission to update a specified layer

opsworks:UpdateMyUserProfile

Write

Grants permission to update a user's SSH public key

opsworks:UpdateRdsDbInstance

Write

Grants permission to update an Amazon RDS instance

opsworks:UpdateStack

Write

Grants permission to update a specified stack

opsworks:UpdateUserProfile

Permissions management

Grants permission to update a specified user profile

opsworks:UpdateVolume

Write

Grants permission to update an Amazon EBS volume's name or mount point