AppSync
Prefix appsync, 87 actions · Domain Application Integration
4 AWS managed policies. 0 have reviewed guidance; the rest have authoritative permission data pending editorial review.
User access (1)
Operator and limited (2)
- AWSAppSyncInvokeFullAccessOperator
- AWSAppSyncSchemaAuthorOperator
Service roles (1)
- AmplifyBackendDeployFullAccessOperator
Also grants AppSync actions (25)
- AdministratorAccess
- AdministratorAccess-Amplify
- AIDevOpsAgentAccessPolicy
- AIDevOpsAgentActionsPolicy
- AIOpsAssistantPolicy
- AssuranceServiceRolePolicy
- AWS_ConfigRole
- AWSCODAPermissionsBoundary
- AWSConfigServiceRolePolicy
- AWSMcpServiceActionsFullAccess
- AWSResourceExplorerServiceRolePolicy
- AWSSupportServiceRolePolicy
- AWSWAFConsoleFullAccess
- AWSWAFConsoleReadOnlyAccess
- AWSWAFFullAccess
- AWSWAFReadOnlyAccess
- AWSWellArchitectedAgentResourceScanningServiceRolePolicy
- CloudWatchOmniAWSIntegrationPolicy
- NetworkSecurityManagerServiceRolePolicy
- PowerUserAccess
- ReadOnlyAccess
- ResourceGroupsTaggingAPITagUntagSupportedResources
- SecurityAudit
- ViewOnlyAccess
- WellArchitectedAgentResourceScanning
associateapi associatemergedgraphqlapi associatesourcegraphqlapi associatewebacl createapi createapicache createapikey createchannelnamespace createdatasource createdomainname createfunction creategraphqlapi createresolver createtype deleteapi deleteapicache deleteapikey deletechannelnamespace deletedatasource deletedomainname deletefunction deletegraphqlapi deleteresolver deleteresourcepolicy deletetype disassociateapi disassociatemergedgraphqlapi disassociatesourcegraphqlapi disassociatewebacl evaluatecode evaluatemappingtemplate eventconnect eventpublish eventsubscribe flushapicache getapi getapiassociation getapicache getchannelnamespace getdatasource getdatasourceintrospection getdomainname getfunction getgraphqlapi getgraphqlapienvironmentvariables getintrospectionschema getresolver getresourcepolicy getschemacreationstatus getsourceapiassociation gettype getwebaclforresource graphql listapikeys listapis listchannelnamespaces listdatasources listdomainnames listfunctions listgraphqlapis listresolvers listresolversbyfunction listresourcesforwebacl listsourceapiassociations listtagsforresource listtypes listtypesbyassociation putgraphqlapienvironmentvariables putresourcepolicy setwebacl sourcegraphql startdatasourceintrospection startschemacreation startschemamerge tagresource untagresource updateapi updateapicache updateapikey updatechannelnamespace updatedatasource updatedomainname updatefunction updategraphqlapi updateresolver updatesourceapiassociation updatetype
Actions (87)
| Action | Access level | Policies granting without limits | Policies granting with resource or condition limits |
|---|---|---|---|
| appsync:AssociateApi | Write | 5 | 1 |
| appsync:AssociateMergedGraphqlApi | Write | 5 | 1 |
| appsync:AssociateSourceGraphqlApi | Write | 5 | 1 |
| appsync:AssociateWebACL | Write | 5 | 3 |
| appsync:CreateApi | Write | 5 | 1 |
| appsync:CreateApiCache | Write | 5 | 1 |
| appsync:CreateApiKey | Write | 5 | 2 |
| appsync:CreateChannelNamespace | Write | 5 | 1 |
| appsync:CreateDataSource | Write | 5 | 2 |
| appsync:CreateDomainName | Write | 5 | 1 |
| appsync:CreateFunction | Write | 6 | 2 |
| appsync:CreateGraphqlApi | Write | 5 | 2 |
| appsync:CreateResolver | Write | 6 | 2 |
| appsync:CreateType | Write | 6 | 2 |
| appsync:DeleteApi | Write | 5 | 1 |
| appsync:DeleteApiCache | Write | 5 | 1 |
| appsync:DeleteApiKey | Write | 5 | 2 |
| appsync:DeleteChannelNamespace | Write | 5 | 1 |
| appsync:DeleteDataSource | Write | 5 | 2 |
| appsync:DeleteDomainName | Write | 5 | 1 |
| appsync:DeleteFunction | Write | 6 | 2 |
| appsync:DeleteGraphqlApi | Write | 5 | 2 |
| appsync:DeleteResolver | Write | 6 | 2 |
| appsync:DeleteResourcePolicy | Write | 5 | 1 |
| appsync:DeleteType | Write | 6 | 2 |
| appsync:DisassociateApi | Write | 5 | 1 |
| appsync:DisassociateMergedGraphqlApi | Write | 5 | 1 |
| appsync:DisassociateSourceGraphqlApi | Write | 5 | 1 |
| appsync:DisassociateWebACL | Write | 5 | 3 |
| appsync:EvaluateCode | Read | 7 | 1 |
| appsync:EvaluateMappingTemplate | Read | 8 | 1 |
| appsync:EventConnect | Write | 5 | 1 |
| appsync:EventPublish | Write | 5 | 1 |
| appsync:EventSubscribe | Write | 5 | 1 |
| appsync:FlushApiCache | Write | 5 | 1 |
| appsync:GetApi | Read | 13 | 3 |
| appsync:GetApiAssociation | Read | 13 | 1 |
| appsync:GetApiCache | Read | 11 | 2 |
| appsync:GetChannelNamespace | Read | 13 | 2 |
| appsync:GetDataSource | Read | 15 | 4 |
| appsync:GetDataSourceIntrospection | Read | 7 | 1 |
| appsync:GetDomainName | Read | 14 | 2 |
| appsync:GetFunction | Read | 11 | 2 |
| appsync:GetGraphqlApi | Read | 18 | 4 |
| appsync:GetGraphqlApiEnvironmentVariables | Read | 10 | 1 |
| appsync:GetIntrospectionSchema | Read | 14 | 1 |
| appsync:GetResolver | Read | 14 | 2 |
| appsync:GetResourcePolicy | Read | 8 | 1 |
| appsync:GetSchemaCreationStatus | Read | 9 | 2 |
| appsync:GetSourceApiAssociation | Read | 16 | 2 |
| appsync:GetType | Read | 9 | 2 |
| appsync:GetWebACLForResource | Read | 7 | 5 |
| appsync:GraphQL | Write | 8 | 1 |
| appsync:ListApiKeys | List | 13 | 1 |
| appsync:ListApis | List | 17 | 3 |
| appsync:ListChannelNamespaces | List | 15 | 2 |
| appsync:ListDataSources | List | 16 | 4 |
| appsync:ListDomainNames | List | 15 | 2 |
| appsync:ListFunctions | List | 14 | 3 |
| appsync:ListGraphqlApis | List | 19 | 4 |
| appsync:ListResolvers | List | 16 | 3 |
| appsync:ListResolversByFunction | List | 12 | 2 |
| appsync:ListResourcesForWebACL | List | 15 | 1 |
| appsync:ListSourceApiAssociations | List | 15 | 2 |
| appsync:ListTagsForResource | Read | 15 | 4 |
| appsync:ListTypes | List | 15 | 2 |
| appsync:ListTypesByAssociation | List | 11 | 1 |
| appsync:PutGraphqlApiEnvironmentVariables | Write | 5 | 1 |
| appsync:PutResourcePolicy | Write | 5 | 1 |
| appsync:SetWebACL | Permissions management | 5 | 3 |
| appsync:SourceGraphQL | Write | 5 | 1 |
| appsync:StartDataSourceIntrospection | Write | 5 | 1 |
| appsync:StartSchemaCreation | Write | 7 | 2 |
| appsync:StartSchemaMerge | Write | 5 | 1 |
| appsync:TagResource | Tagging | 7 | 2 |
| appsync:UntagResource | Tagging | 7 | 2 |
| appsync:UpdateApi | Write | 5 | 1 |
| appsync:UpdateApiCache | Write | 5 | 1 |
| appsync:UpdateApiKey | Write | 7 | 1 |
| appsync:UpdateChannelNamespace | Write | 5 | 1 |
| appsync:UpdateDataSource | Write | 5 | 2 |
| appsync:UpdateDomainName | Write | 5 | 1 |
| appsync:UpdateFunction | Write | 7 | 2 |
| appsync:UpdateGraphqlApi | Write | 5 | 2 |
| appsync:UpdateResolver | Write | 7 | 2 |
| appsync:UpdateSourceApiAssociation | Write | 5 | 1 |
| appsync:UpdateType | Write | 6 | 2 |