profile:CreateSegmentDefinition is a Write access-level action in the profile service. Grants permission to create a segment definition in the domain
ARNs that profile:CreateSegmentDefinition can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants profile:CreateSegmentDefinition.
Filters access by a key that is present in the request the user makes to the customer profile service
Filters access by the list of all the tag key names present in the request the user makes to the customer profile service
A minimal policy that allows profile:CreateSegmentDefinition. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowProfileCreateSegmentDefinition",
"Effect": "Allow",
"Action": "profile:CreateSegmentDefinition",
"Resource": "*"
}
]
}