Grants permission to remove the secret from replication and promote the secret to a regional secret in the replica Region Grants permission to start rotation of a secret Grants permission to cancel deletion of a secret Grants permission to convert an existing secret to a multi-Region secret and begin replicating the secret to a list of new regions Grants permission to remove regions from replication Grants permission to create a new version of the secret with new encrypted data Grants permission to attach a resource policy to a secret Grants permission to list the available secrets Grants permission to list the available versions of a secret Grants permission to retrieve and decrypt the encrypted data Grants permission to get the resource policy attached to a secret
Splashshopper list manager password#
Grants permission to generate a random string for use in password creation
Grants permission to retrieve the metadata about a secret, but not the encrypted data Secretsmanager:ForceDeleteWithoutRecovery Grants permission to delete the resource policy attached to a secret Secretsmanager:ForceOverwriteReplicaSecret Grants permission to create a secret that stores encrypted data that can be queried and rotated Secretsmanager:resource/AllowRotationLambdaArn Grants permission to cancel an in-progress secret rotation If the resource type is optional (not indicated as required), then you can choose to use one but not the other.įor details about the columns in the following table, see Actions table. Some actions support multiple resource types. If you specify a resource-level permission ARN in a statement using this action, then it must be of this type. Required resources are indicated in the table with an asterisk (*). If the column includes a resource type, then you can specify an ARN of that type in a statement with that action. If there is no value for this column, you must specify all resources ("*") in the Resource element of your policy statement. The Resource types column indicates whether each action supports resource-level permissions. Alternatively, some operations require several different actions. However, in some cases, a single action controls access to more than one operation. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. Use policies to grant permissions to perform an operation in AWS.
You can specify the following actions in the Action element of an IAM policy statement.
0 kommentar(er)
