ram:CreatePermission is a Write access-level action in the ram service. Grants permission to create a Permission that can be associated to a Resource Share
This action does not support resource-level permissions; use "Resource": "*" in your policy.
Keys you can use in the Condition block of a policy that grants ram:CreatePermission.
Filters access by the tags that are passed in the request when creating or tagging a resource share. If users don't pass these specific tags, or if they don't specify tags at all, the request fails
Filters access by the tags associated with the resource
Filters access by the tag keys that are passed when creating or tagging a resource share
Filters access by the specified Permission ARN
Filters access by permissions of specified resource type
A minimal policy that allows ram:CreatePermission. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowRamCreatePermission",
"Effect": "Allow",
"Action": "ram:CreatePermission",
"Resource": "*"
}
]
}