workspaces

101 actions in the workspaces service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.

workspaces:AcceptAccountLinkInvitation

Write

Grants permission to accept invitations from other AWS accounts to share the same configuration for WorkSpaces BYOL

workspaces:AssociateConnectionAlias

Write

Grants permission to associate connection aliases with directories

workspaces:AssociateIpGroups

Write

Grants permission to associate IP access control groups with directories

workspaces:AssociateWorkspaceApplication

Write

Grants permission to associate a workspace application with a WorkSpace

workspaces:AuthorizeIpRules

Write

Grants permission to add rules to IP access control groups

workspaces:CopyWorkspaceImage

Write

Grants permission to copy a WorkSpace image

workspaces:CreateAccountLinkInvitation

Write

Grants permission to invite other AWS accounts to share the same configuration for WorkSpaces BYOL

workspaces:CreateConnectClientAddIn

Write

Grants permission to create an Amazon Connect client add-in within a directory

workspaces:CreateConnectionAlias

Write

Grants permission to create connection aliases for use with cross-Region redirection

workspaces:CreateIpGroup

Write

Grants permission to create IP access control groups

workspaces:CreateRootClientCertificate

Write

Grants permission to create a root client certificate

workspaces:CreateStandbyWorkspaces

Write

Grants permission to create one or more Standby WorkSpaces

workspaces:CreateTags

Tagging

Grants permission to create tags for WorkSpaces resources

workspaces:CreateUpdatedWorkspaceImage

Write

Grants permission to create an updated WorkSpace image

workspaces:CreateWorkspaceBundle

Write

Grants permission to create a WorkSpace bundle

workspaces:CreateWorkspaceImage

Write

Grants permission to create a new WorkSpace image

workspaces:CreateWorkspaces

Write

Grants permission to create one or more WorkSpaces

workspaces:CreateWorkspacesPool

Write

Grants permission to create a WorkSpaces Pool

workspaces:DeleteAccountLinkInvitation

Write

Grants permission to delete invitations to other AWS accounts to share the same configuration for WorkSpaces BYOL

workspaces:DeleteClientBranding

Write

Grants permission to delete AWS WorkSpaces Client branding data within a directory

workspaces:DeleteConnectClientAddIn

Write

Grants permission to delete an Amazon Connect client add-in that is configured within a directory

workspaces:DeleteConnectionAlias

Write

Grants permission to delete connection aliases

workspaces:DeleteIpGroup

Write

Grants permission to delete IP access control groups

workspaces:DeleteRootClientCertificate

Write

Grants permission to delete root client certificate

workspaces:DeleteTags

Tagging

Grants permission to delete tags from WorkSpaces resources

workspaces:DeleteWorkspaceBundle

Write

Grants permission to delete WorkSpace bundles

workspaces:DeleteWorkspaceImage

Write

Grants permission to delete WorkSpace images

workspaces:DeployWorkspaceApplications

Write

Grants permission to deploy all pending workspace applications on a WorkSpace

workspaces:DeregisterWorkspaceDirectory

Write

Grants permission to deregister directories from use with Amazon WorkSpaces

workspaces:DescribeAccount

Read

Grants permission to retrieve the configuration of Bring Your Own License (BYOL) for WorkSpaces accounts

workspaces:DescribeAccountModifications

Read

Grants permission to retrieve modifications to the configuration of Bring Your Own License (BYOL) for WorkSpaces accounts

workspaces:DescribeApplicationAssociations

List

Grants permission to retrieve information about resources associated with a WorkSpace application

workspaces:DescribeApplications

List

Grants permission to obtain information about WorkSpace applications

workspaces:DescribeBundleAssociations

List

Grants permission to retrieve information about resources associated with a WorkSpace bundle

workspaces:DescribeClientBranding

Read

Grants permission to retrieve AWS WorkSpaces Client branding data within a directory

workspaces:DescribeClientProperties

List

Grants permission to retrieve information about WorkSpaces clients

workspaces:DescribeConnectClientAddIns

List

Grants permission to retrieve a list of Amazon Connect client add-ins that have been created

workspaces:DescribeConnectionAliases

Read

Grants permission to retrieve a list that describes the connection aliases used for cross-Region redirection

workspaces:DescribeConnectionAliasPermissions

Read

Grants permission to retrieve the permissions that the owners of connection aliases have granted to other AWS accounts for connection aliases

workspaces:DescribeConsent

Read

Grants permission to retrieve information about consent agreement to BYOL minimum requirements

workspaces:DescribeCustomWorkspaceImageImport

Read

Grants permission to retrieve information about WorkSpace BYOL image import task

workspaces:DescribeImageAssociations

List

Grants permission to retrieve information about resources associated with a WorkSpace image

workspaces:DescribeIpGroups

Read

Grants permission to retrieve information about IP access control groups

workspaces:DescribeTags

Read

Grants permission to describe the tags for WorkSpaces resources

workspaces:DescribeWorkspaceAssociations

List

Grants permission to retrieve information about resources associated with a WorkSpace

workspaces:DescribeWorkspaceBundles

List

Grants permission to obtain information about WorkSpace bundles

workspaces:DescribeWorkspaceDirectories

Read

Grants permission to retrieve information about directories that are registered with WorkSpaces

workspaces:DescribeWorkspaceImagePermissions

Read

Grants permission to retrieve information about WorkSpace image permissions

workspaces:DescribeWorkspaceImages

List

Grants permission to retrieve information about WorkSpace images

workspaces:DescribeWorkspaces

List

Grants permission to obtain information about WorkSpaces

workspaces:DescribeWorkspacesConnectionStatus

Read

Grants permission to obtain the connection status of WorkSpaces

workspaces:DescribeWorkspaceSnapshots

List

Grants permission to retrieve information about WorkSpace snapshots

workspaces:DescribeWorkspacesPools

List

Grants permission to retrieve information about WorkSpaces Pools

workspaces:DescribeWorkspacesPoolSessions

List

Grants permission to retrieve information about the sessions of a WorkSpaces Pool

workspaces:DirectoryAccessManagement

List

Grants permission to directory management actions while managing and provisioning workspaces

workspaces:DisassociateConnectionAlias

Write

Grants permission to disassociate connection aliases from directories

workspaces:DisassociateIpGroups

Write

Grants permission to disassociate IP access control groups from directories

workspaces:DisassociateWorkspaceApplication

Write

Grants permission to disassociate a workspace application from a WorkSpace

workspaces:GetAccountLink

Read

Grants permission to retrieve a link with another AWS Account for sharing configuration for WorkSpaces BYOL

workspaces:GetTroubleshootingRecommendation

Read

Grants permission to get troubleshooting recommendations

workspaces:ImportClientBranding

Write

Grants permission to import AWS WorkSpaces Client branding data within a directory

workspaces:ImportCustomWorkspaceImage

Write

Grants permission to import Bring Your Own License (BYOL) images into Amazon WorkSpaces

workspaces:ImportWorkspaceImage

Write

Grants permission to import Bring Your Own License (BYOL) images into Amazon WorkSpaces

workspaces:InvokeTroubleshootingInvestigation

Read

Grants permission to invoke troubleshooting investigation

workspaces:ListAccountLinks

List

Grants permission to retrieve links with the AWS Account(s) that share your configuration for WorkSpaces BYOL

workspaces:ListAvailableManagementCidrRanges

List

Grants permission to list the available CIDR ranges for enabling Bring Your Own License (BYOL) for WorkSpaces accounts

workspaces:ListTroubleshootingRecommendations

Read

Grants permission to list troubleshooting recommendations

workspaces:MigrateWorkspace

Write

Grants permission to migrate WorkSpaces

workspaces:ModifyAccount

Write

Grants permission to modify the configuration of Bring Your Own License (BYOL) for WorkSpaces accounts

workspaces:ModifyCertificateBasedAuthProperties

Write

Grants permission to modify the certificate-based authorization properties of a directory

workspaces:ModifyClientProperties

Write

Grants permission to modify the properties of WorkSpaces clients

workspaces:ModifyEndpointEncryptionMode

Write

Grants permission to configure the specified directory between Standard TLS and FIPS 140-2 validated mode

workspaces:ModifySamlProperties

Write

Grants permission to modify the SAML properties of a directory

workspaces:ModifySelfservicePermissions

Permissions management

Grants permission to modify the self-service WorkSpace management capabilities for your users

workspaces:ModifyStreamingProperties

Write

Grants permission to modify the streaming properties

workspaces:ModifyWorkspaceAccessProperties

Write

Grants permission to specify which devices and operating systems users can use to access their WorkSpaces

workspaces:ModifyWorkspaceCreationProperties

Write

Grants permission to modify the default properties used to create WorkSpaces

workspaces:ModifyWorkspaceProperties

Write

Grants permission to modify WorkSpace properties, including the running mode and the AutoStop period

workspaces:ModifyWorkspaceState

Write

Grants permission to modify the state of WorkSpaces

workspaces:RebootWorkspaces

Write

Grants permission to reboot WorkSpaces

workspaces:RebuildWorkspaces

Write

Grants permission to rebuild WorkSpaces

workspaces:RegisterWorkspaceDirectory

Write

Grants permission to register directories for use with Amazon WorkSpaces

workspaces:RejectAccountLinkInvitation

Write

Grants permission to reject invitations from other AWS accounts to share the same configuration for WorkSpaces BYOL

workspaces:RestoreWorkspace

Write

Grants permission to restore WorkSpaces

workspaces:RevokeIpRules

Write

Grants permission to remove rules from IP access control groups

workspaces:StartWorkspaces

Write

Grants permission to start AutoStop WorkSpaces

workspaces:StartWorkspacesPool

Write

Grants permission to start a WorkSpaces Pool

workspaces:StopWorkspaces

Write

Grants permission to stop AutoStop WorkSpaces

workspaces:StopWorkspacesPool

Write

Grants permission to stop a WorkSpaces Pool

workspaces:Stream

Write

Grants permission to federated users to sign in by using their existing credentials and stream their workspace

workspaces:TerminateWorkspaces

Write

Grants permission to terminate WorkSpaces

workspaces:TerminateWorkspacesPool

Write

Grants permission to terminate a WorkSpaces Pool

workspaces:TerminateWorkspacesPoolSession

Write

Grants permission to terminate a WorkSpaces Pool session

workspaces:UpdateConnectClientAddIn

Write

Grants permission to update an Amazon Connect client add-in. Use this action to update the name and endpoint URL of an Amazon Connect client add-in

workspaces:UpdateConnectionAliasPermission

Permissions management

Grants permission to share or unshare connection aliases with other accounts

workspaces:UpdateConsent

Write

Grants permission to update the consent agreement to BYOL minimum requirements

workspaces:UpdateRootClientCertificate

Write

Grants permission to update a root client certificate

workspaces:UpdateRulesOfIpGroup

Write

Grants permission to replace rules for IP access control groups

workspaces:UpdateWorkspaceBundle

Write

Grants permission to update the WorkSpace images used in WorkSpace bundles

workspaces:UpdateWorkspaceImagePermission

Permissions management

Grants permission to share or unshare WorkSpace images with other accounts by specifying whether other accounts have permission to copy the image

workspaces:UpdateWorkspacesPool

Write

Grants permission to update the WorkSpaces pool