ram:UpdateResourceShare is a Write access-level action in the ram service. Grants permission to update attributes of the resource share
ARNs that ram:UpdateResourceShare can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants ram:UpdateResourceShare.
Filters access by the tags associated with the resource
Filters access by resource shares that allow or deny sharing with external principals. For example, specify true if the action can only be performed on resource shares that allow sharing with external principals. External principals are AWS accounts that are outside of its AWS organization
Filters access by a resource share with the specified name
A minimal policy that allows ram:UpdateResourceShare. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowRamUpdateResourceShare",
"Effect": "Allow",
"Action": "ram:UpdateResourceShare",
"Resource": "*"
}
]
}