servicediscovery:CreateService

Write

servicediscovery:CreateService is a Write access-level action in the servicediscovery service. Grants permission to create a service

Resource types

ARNs that servicediscovery:CreateService can be scoped to in an IAM policy.

arn:${Partition}:servicediscovery:${Region}:${Account}:namespace/${NamespaceId} required

namespace

arn:${Partition}:servicediscovery:${Region}:${Account}:service/${ServiceId} required

service

Condition keys

Keys you can use in the Condition block of a policy that grants servicediscovery:CreateService.

aws:RequestTag/${TagKey} String

Filters actions based on the tags that are passed in the request

aws:TagKeys ArrayOfString

Filters actions based on the tag keys that are passed in the request

servicediscovery:NamespaceArn ARN

Filters access by specifying the Amazon Resource Name (ARN) for the related namespace

aws:ResourceTag/${TagKey} String

Filters actions based on the tags associated with the resource

Example IAM policy

A minimal policy that allows servicediscovery:CreateService. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowServicediscoveryCreateService",
      "Effect": "Allow",
      "Action": "servicediscovery:CreateService",
      "Resource": "*"
    }
  ]
}

Related actions in servicediscovery

View all servicediscovery actions →