ram:GetResourceShares is a Read access-level action in the ram service. Grants permission to get a set of resource shares from a provided list or with a specified status
This action does not support resource-level permissions; use "Resource": "*" in your policy.
Keys you can use in the Condition block of a policy that grants ram:GetResourceShares.
Filters access by the tags that are passed in the request when creating or tagging a resource share. If users don't pass these specific tags, or if they don't specify tags at all, the request fails
Filters access by the tag keys that are passed when creating or tagging a resource share
A minimal policy that allows ram:GetResourceShares. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowRamGetResourceShares",
"Effect": "Allow",
"Action": "ram:GetResourceShares",
"Resource": "*"
}
]
}