ram

35 actions in the ram service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.

ram:AcceptResourceShareInvitation

Write

Grants permission to accept the specified resource share invitation

ram:AssociateResourceShare

Write

Grants permission to associate resource(s) and/or principal(s) to a resource share

ram:AssociateResourceSharePermission

Write

Grants permission to associate a Permission with a Resource Share

ram:CreatePermission

Write

Grants permission to create a Permission that can be associated to a Resource Share

ram:CreatePermissionVersion

Write

Grants permission to create a new version of a Permission that can be associated to a Resource Share

ram:CreateResourceShare

Write

Grants permission to create a resource share with provided resource(s) and/or principal(s)

ram:DeletePermission

Write

Grants permission to delete a specified Permission

ram:DeletePermissionVersion

Write

Grants permission to delete a specified version of a permission

ram:DeleteResourceShare

Write

Grants permission to delete resource share

ram:DisassociateResourceShare

Write

Grants permission to disassociate resource(s) and/or principal(s) from a resource share

ram:DisassociateResourceSharePermission

Write

Grants permission to disassociate a Permission from a Resource Share

ram:EnableSharingWithAwsOrganization

Permissions management

Grants permission to access customer's organization and create a SLR in the customer's account

ram:GetPermission

Read

Grants permission to get the contents of an AWS RAM permission

ram:GetResourcePolicies

Read

Grants permission to get the policies for the specified resources that you own and have shared

ram:GetResourceShareAssociations

Read

Grants permission to get a set of resource share associations from a provided list or with a specified status of the specified type

ram:GetResourceShareInvitations

Read

Grants permission to get resource share invitations by the specified invitation arn or those for the resource share

ram:GetResourceShares

Read

Grants permission to get a set of resource shares from a provided list or with a specified status

ram:ListPendingInvitationResources

Read

Grants permission to list the resources in a resource share that is shared with you but that the invitation is still pending for

ram:ListPermissionAssociations

List

Grants permission to list information about the permission and any associations

ram:ListPermissions

List

Grants permission to list the AWS RAM permissions

ram:ListPermissionVersions

List

Grants permission to list the versions of an AWS RAM permission

ram:ListPrincipals

List

Grants permission to list the principals that you have shared resources with or that have shared resources with you

ram:ListReplacePermissionAssociationsWork

List

Grants permission to retrieve the status of the asynchronous permission replacement

ram:ListResources

List

Grants permission to list the resources that you added to resource shares or the resources that are shared with you

ram:ListResourceSharePermissions

List

Grants permission to list the Permissions associated with a Resource Share

ram:ListResourceTypes

List

Grants permission to list the shareable resource types supported by AWS RAM

ram:ListSourceAssociations

List

Grants permission to list source associations for resource shares

ram:PromotePermissionCreatedFromPolicy

Write

Grants permission to create a separate, fully manageable customer managed permission

ram:PromoteResourceShareCreatedFromPolicy

Write

Grants permission to promote the specified resource share

ram:RejectResourceShareInvitation

Write

Grants permission to reject the specified resource share invitation

ram:ReplacePermissionAssociations

Write

Grants permission to update all resource shares to a new permission

ram:SetDefaultPermissionVersion

Write

Grants permission to specify a version number as the default version for the respective customer managed permission

ram:TagResource

Tagging

Grants permission to tag the specified resource share or permission

ram:UntagResource

Tagging

Grants permission to untag the specified resource share or permission

ram:UpdateResourceShare

Write

Grants permission to update attributes of the resource share