IoT Greengrass
Prefix greengrass, 112 actions · Domain IoT & Edge
9 AWS managed policies. 0 have reviewed guidance; the rest have authoritative permission data pending editorial review. 2 are service-linked role policies, shown with permission data only.
User access (3)
Operator and limited (1)
- AWSRoboMakerServiceRolePolicyOperator
Service roles (3)
Service-linked roles (2)
- AWSRoboMakerServicePolicyOperator
- AWSServiceRoleForIoTSiteWiseOperator
Also grants IoT Greengrass actions (19)
- AdministratorAccess
- AIDevOpsAgentAccessPolicy
- AIDevOpsAgentActionsPolicy
- AIOpsAssistantPolicy
- AssuranceServiceRolePolicy
- AWS_ConfigRole
- AWSCODAPermissionsBoundary
- AWSConfigServiceRolePolicy
- AWSIoTSiteWiseConsoleFullAccess
- AWSMcpServiceActionsFullAccess
- AWSResourceExplorerServiceRolePolicy
- AWSSupportServiceRolePolicy
- AWSWellArchitectedAgentResourceScanningServiceRolePolicy
- PowerUserAccess
- ReadOnlyAccess
- ResourceGroupsTaggingAPITagUntagSupportedResources
- SecurityAudit
- ViewOnlyAccess
- WellArchitectedAgentResourceScanning
associateroletogroup associateserviceroletoaccount batchassociateclientdevicewithcoredevice batchdisassociateclientdevicefromcoredevice canceldeployment createcomponentversion createconnectordefinition createconnectordefinitionversion createcoredefinition createcoredefinitionversion createdeployment createdevicedefinition createdevicedefinitionversion createfunctiondefinition createfunctiondefinitionversion creategroup creategroupcertificateauthority creategroupversion createloggerdefinition createloggerdefinitionversion createresourcedefinition createresourcedefinitionversion createsoftwareupdatejob createsubscriptiondefinition createsubscriptiondefinitionversion deletecomponent deleteconnectordefinition deletecoredefinition deletecoredevice deletedeployment deletedevicedefinition deletefunctiondefinition deletegroup deleteloggerdefinition deleteresourcedefinition deletesubscriptiondefinition describecomponent disassociaterolefromgroup disassociateservicerolefromaccount discover getassociatedrole getbulkdeploymentstatus getcomponent getcomponentversionartifact getconnectivityinfo getconnectordefinition getconnectordefinitionversion getcoredefinition getcoredefinitionversion getcoredevice getdeployment getdeploymentstatus getdevicedefinition getdevicedefinitionversion getfunctiondefinition getfunctiondefinitionversion getgroup getgroupcertificateauthority getgroupcertificateconfiguration getgroupversion getloggerdefinition getloggerdefinitionversion getresourcedefinition getresourcedefinitionversion getserviceroleforaccount getsubscriptiondefinition getsubscriptiondefinitionversion getthingruntimeconfiguration listbulkdeploymentdetailedreports listbulkdeployments listclientdevicesassociatedwithcoredevice listcomponentversions listcomponents listconnectordefinitionversions listconnectordefinitions listcoredefinitionversions listcoredefinitions listcoredevices listdeployments listdevicedefinitionversions listdevicedefinitions listeffectivedeployments listfunctiondefinitionversions listfunctiondefinitions listgroupcertificateauthorities listgroupversions listgroups listinstalledcomponents listloggerdefinitionversions listloggerdefinitions listresourcedefinitionversions listresourcedefinitions listsubscriptiondefinitionversions listsubscriptiondefinitions listtagsforresource resetdeployments resolvecomponentcandidates startbulkdeployment stopbulkdeployment tagresource untagresource updateconnectivityinfo updateconnectordefinition updatecoredefinition updatedevicedefinition updatefunctiondefinition updategroup updategroupcertificateconfiguration updateloggerdefinition updateresourcedefinition updatesubscriptiondefinition updatethingruntimeconfiguration
Actions (112)
| Action | Access level | Policies granting without limits | Policies granting with resource or condition limits |
|---|---|---|---|
| greengrass:AssociateRoleToGroup | Write | 9 | 1 |
| greengrass:AssociateServiceRoleToAccount | Permissions management | 9 | 1 |
| greengrass:BatchAssociateClientDeviceWithCoreDevice | Write | 7 | 1 |
| greengrass:BatchDisassociateClientDeviceFromCoreDevice | Write | 7 | 1 |
| greengrass:CancelDeployment | Write | 7 | 1 |
| greengrass:CreateComponentVersion | Write | 7 | 1 |
| greengrass:CreateConnectorDefinition | Write | 7 | 1 |
| greengrass:CreateConnectorDefinitionVersion | Write | 7 | 1 |
| greengrass:CreateCoreDefinition | Write | 9 | 1 |
| greengrass:CreateCoreDefinitionVersion | Write | 9 | 1 |
| greengrass:CreateDeployment | Write | 11 | 1 |
| greengrass:CreateDeviceDefinition | Write | 7 | 1 |
| greengrass:CreateDeviceDefinitionVersion | Write | 7 | 1 |
| greengrass:CreateFunctionDefinition | Write | 11 | 1 |
| greengrass:CreateFunctionDefinitionVersion | Write | 11 | 1 |
| greengrass:CreateGroup | Write | 9 | 1 |
| greengrass:CreateGroupCertificateAuthority | Write | 9 | 1 |
| greengrass:CreateGroupVersion | Write | 11 | 1 |
| greengrass:CreateLoggerDefinition | Write | 9 | 1 |
| greengrass:CreateLoggerDefinitionVersion | Write | 9 | 1 |
| greengrass:CreateResourceDefinition | Write | 9 | 1 |
| greengrass:CreateResourceDefinitionVersion | Write | 9 | 1 |
| greengrass:CreateSoftwareUpdateJob | Write | 7 | 1 |
| greengrass:CreateSubscriptionDefinition | Write | 9 | 1 |
| greengrass:CreateSubscriptionDefinitionVersion | Write | 9 | 1 |
| greengrass:DeleteComponent | Write | 7 | 1 |
| greengrass:DeleteConnectorDefinition | Write | 7 | 1 |
| greengrass:DeleteCoreDefinition | Write | 9 | 1 |
| greengrass:DeleteCoreDevice | Write | 7 | 1 |
| greengrass:DeleteDeployment | Write | 7 | 1 |
| greengrass:DeleteDeviceDefinition | Write | 7 | 1 |
| greengrass:DeleteFunctionDefinition | Write | 9 | 1 |
| greengrass:DeleteGroup | Write | 9 | 1 |
| greengrass:DeleteLoggerDefinition | Write | 9 | 1 |
| greengrass:DeleteResourceDefinition | Write | 8 | 1 |
| greengrass:DeleteSubscriptionDefinition | Write | 9 | 1 |
| greengrass:DescribeComponent | Read | 15 | 3 |
| greengrass:DisassociateRoleFromGroup | Write | 9 | 1 |
| greengrass:DisassociateServiceRoleFromAccount | Write | 9 | 1 |
| greengrass:Discover | Read | 7 | 1 |
| greengrass:GetAssociatedRole | Read | 14 | 1 |
| greengrass:GetBulkDeploymentStatus | Read | 9 | 1 |
| greengrass:GetComponent | Read | 13 | 1 |
| greengrass:GetComponentVersionArtifact | Read | 9 | 1 |
| greengrass:GetConnectivityInfo | Read | 12 | 1 |
| greengrass:GetConnectorDefinition | Read | 9 | 1 |
| greengrass:GetConnectorDefinitionVersion | Read | 9 | 1 |
| greengrass:GetCoreDefinition | Read | 13 | 1 |
| greengrass:GetCoreDefinitionVersion | Read | 16 | 1 |
| greengrass:GetCoreDevice | Read | 11 | 1 |
| greengrass:GetDeployment | Read | 16 | 2 |
| greengrass:GetDeploymentStatus | Read | 14 | 1 |
| greengrass:GetDeviceDefinition | Read | 12 | 1 |
| greengrass:GetDeviceDefinitionVersion | Read | 12 | 1 |
| greengrass:GetFunctionDefinition | Read | 12 | 1 |
| greengrass:GetFunctionDefinitionVersion | Read | 14 | 1 |
| greengrass:GetGroup | Read | 16 | 1 |
| greengrass:GetGroupCertificateAuthority | Read | 12 | 1 |
| greengrass:GetGroupCertificateConfiguration | Read | 11 | 1 |
| greengrass:GetGroupVersion | Read | 16 | 1 |
| greengrass:GetLoggerDefinition | Read | 12 | 1 |
| greengrass:GetLoggerDefinitionVersion | Read | 12 | 1 |
| greengrass:GetResourceDefinition | Read | 11 | 1 |
| greengrass:GetResourceDefinitionVersion | Read | 10 | 1 |
| greengrass:GetServiceRoleForAccount | Read | 12 | 1 |
| greengrass:GetSubscriptionDefinition | Read | 12 | 1 |
| greengrass:GetSubscriptionDefinitionVersion | Read | 12 | 1 |
| greengrass:GetThingRuntimeConfiguration | Read | 9 | 1 |
| greengrass:ListBulkDeploymentDetailedReports | Read | 14 | 1 |
| greengrass:ListBulkDeployments | List | 14 | 1 |
| greengrass:ListClientDevicesAssociatedWithCoreDevice | List | 15 | 1 |
| greengrass:ListComponentVersions | List | 18 | 3 |
| greengrass:ListComponents | List | 18 | 1 |
| greengrass:ListConnectorDefinitionVersions | List | 14 | 1 |
| greengrass:ListConnectorDefinitions | List | 15 | 1 |
| greengrass:ListCoreDefinitionVersions | List | 17 | 1 |
| greengrass:ListCoreDefinitions | List | 18 | 1 |
| greengrass:ListCoreDevices | List | 16 | 1 |
| greengrass:ListDeployments | List | 20 | 2 |
| greengrass:ListDeviceDefinitionVersions | List | 17 | 1 |
| greengrass:ListDeviceDefinitions | List | 18 | 1 |
| greengrass:ListEffectiveDeployments | List | 15 | 1 |
| greengrass:ListFunctionDefinitionVersions | List | 17 | 1 |
| greengrass:ListFunctionDefinitions | List | 18 | 1 |
| greengrass:ListGroupCertificateAuthorities | List | 16 | 1 |
| greengrass:ListGroupVersions | List | 17 | 1 |
| greengrass:ListGroups | List | 19 | 1 |
| greengrass:ListInstalledComponents | List | 15 | 1 |
| greengrass:ListLoggerDefinitionVersions | List | 17 | 1 |
| greengrass:ListLoggerDefinitions | List | 18 | 1 |
| greengrass:ListResourceDefinitionVersions | List | 15 | 1 |
| greengrass:ListResourceDefinitions | List | 16 | 1 |
| greengrass:ListSubscriptionDefinitionVersions | List | 17 | 1 |
| greengrass:ListSubscriptionDefinitions | List | 18 | 1 |
| greengrass:ListTagsForResource | Read | 15 | 3 |
| greengrass:ResetDeployments | Write | 9 | 1 |
| greengrass:ResolveComponentCandidates | List | 7 | 1 |
| greengrass:StartBulkDeployment | Write | 7 | 1 |
| greengrass:StopBulkDeployment | Write | 7 | 1 |
| greengrass:TagResource | Tagging | 8 | 1 |
| greengrass:UntagResource | Tagging | 8 | 1 |
| greengrass:UpdateConnectivityInfo | Write | 9 | 1 |
| greengrass:UpdateConnectorDefinition | Write | 7 | 1 |
| greengrass:UpdateCoreDefinition | Write | 9 | 1 |
| greengrass:UpdateDeviceDefinition | Write | 9 | 1 |
| greengrass:UpdateFunctionDefinition | Write | 9 | 1 |
| greengrass:UpdateGroup | Write | 9 | 1 |
| greengrass:UpdateGroupCertificateConfiguration | Write | 9 | 1 |
| greengrass:UpdateLoggerDefinition | Write | 9 | 1 |
| greengrass:UpdateResourceDefinition | Write | 9 | 1 |
| greengrass:UpdateSubscriptionDefinition | Write | 9 | 1 |
| greengrass:UpdateThingRuntimeConfiguration | Write | 7 | 1 |