workspaces-web:AssociateUserAccessLoggingSettings

Write

workspaces-web:AssociateUserAccessLoggingSettings is a Write access-level action in the workspaces-web service. Grants permission to associate user access logging settings with web portals

Resource types

ARNs that workspaces-web:AssociateUserAccessLoggingSettings can be scoped to in an IAM policy.

arn:${Partition}:workspaces-web:${Region}:${Account}:portal/${PortalId}

portal

arn:${Partition}:workspaces-web:${Region}:${Account}:userAccessLoggingSettings/${UserAccessLoggingSettingsId}

userAccessLoggingSettings

Condition keys

Keys you can use in the Condition block of a policy that grants workspaces-web:AssociateUserAccessLoggingSettings.

aws:ResourceTag/${TagKey} String

Filters access by the tags associated with the resource

Dependent actions

To use workspaces-web:AssociateUserAccessLoggingSettings you may also need to grant:

kinesis:PutRecord on portal
kinesis:PutRecords on portal

Example IAM policy

A minimal policy that allows workspaces-web:AssociateUserAccessLoggingSettings. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowWorkspaceswebAssociateUserAccessLoggingSettings",
      "Effect": "Allow",
      "Action": "workspaces-web:AssociateUserAccessLoggingSettings",
      "Resource": "*"
    }
  ]
}

Related actions in workspaces-web

View all workspaces-web actions →