vpc-lattice-svcs:Invoke

Write

vpc-lattice-svcs:Invoke is a Write access-level action in the vpc-lattice-svcs service. Grants permission to invoke a VPC Lattice service

Resource types

ARNs that vpc-lattice-svcs:Invoke can be scoped to in an IAM policy.

arn:${Partition}:vpc-lattice:${Region}:${Account}:service/${ServiceId}/${RequestPath} required
Service

Condition keys

Keys you can use in the Condition block of a policy that grants vpc-lattice-svcs:Invoke.

vpc-lattice-svcs:Port Numeric

Filters access by the destination port the request is made to

vpc-lattice-svcs:RequestHeader/${HeaderName} String

Filters access by a header name-value pair in the request headers

vpc-lattice-svcs:RequestMethod String

Filters access by the method of the request

vpc-lattice-svcs:RequestPath String

Filters access by the path portion of the request URL

vpc-lattice-svcs:RequestQueryString/${QueryStringKey} ArrayOfString

Filters access by the query string key-value pairs in the request URL

vpc-lattice-svcs:ServiceArn ARN

Filters access by the ARN of the service receiving the request

vpc-lattice-svcs:ServiceNetworkArn ARN

Filters access by the ARN of the service network receiving the request

vpc-lattice-svcs:SourceVpc String

Filters access by the VPC the request is made from

vpc-lattice-svcs:SourceVpcOwnerAccount String

Filters access by the owning account of the VPC the request is made from

aws:ResourceTag/${TagKey} String

Filters access by tag key-value pairs attached to the resource

Example IAM policy

A minimal policy that allows vpc-lattice-svcs:Invoke. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowVpclatticesvcsInvoke",
      "Effect": "Allow",
      "Action": "vpc-lattice-svcs:Invoke",
      "Resource": "*"
    }
  ]
}

Related actions in vpc-lattice-svcs

View all vpc-lattice-svcs actions →