Resource Access Manager
Prefix ram, 39 actions · Domain Security, Identity & Compliance
13 AWS managed policies. 2 have reviewed guidance; the rest have authoritative permission data pending editorial review. 4 are service-linked role policies, shown with permission data only.
User access (3)
Operator and limited (4)
Service roles (2)
Service-linked roles (4)
Also grants Resource Access Manager actions (41)
- AdministratorAccess
- AIDevOpsAgentAccessPolicy
- AIOpsAssistantPolicy
- AmazonDataZoneDomainExecutionRolePolicy
- AmazonDataZoneFullAccess
- AmazonDataZoneFullUserAccess
- AmazonDataZoneSageMakerEnvironmentRolePermissionsBoundary
- AmazonOmicsFullAccess
- AmazonSecurityLakeAdministrator
- AssuranceServiceRolePolicy
- AWS_ConfigRole
- AWSApplicationMigrationNetworkMigrationMultiAccount
- AWSBackupFullAccess
- AWSBackupOperatorAccess
- AWSCODAPermissionsBoundary
- AWSConfigServiceRolePolicy
- AWSFinOpsAgentServiceRolePolicy
- AWSMcpServiceActionsFullAccess
- AWSResilienceHubV2AssessmentExecutionPolicy
- AWSResourceExplorerFullAccess
- AWSResourceExplorerOrganizationsAccess
- AWSResourceExplorerReadOnlyAccess
- AWSResourceExplorerServiceRolePolicy
- AWSSupportServiceRolePolicy
- AWSTransformNetworkMigrationAgentPolicy
- AWSWellArchitectedAgentResourceScanningServiceRolePolicy
- CloudWatchOmniAWSIntegrationPolicy
- FMSServiceRolePolicy
- NetworkSecurityManagerServiceRolePolicy
- PowerUserAccess
- ReadOnlyAccess
- ResourceGroupsTaggingAPITagUntagSupportedResources
- SageMakerStudioAdminIAMDefaultExecutionPolicy
- SageMakerStudioAdminIAMPermissiveExecutionPolicy
- SageMakerStudioDomainExecutionRolePolicy
- SageMakerStudioFullAccess
- SageMakerStudioProjectRoleMachineLearningPolicy
- SageMakerStudioProjectUserRolePolicy
- SecurityAudit
- ViewOnlyAccess
- WellArchitectedAgentResourceScanning
acceptresourceshareinvitation associateresourceshare associateresourcesharepermission createpermission createpermissionversion createresourceshare deletecustomermanagedpermissionpolicy deletepermission deletepermissionversion deleteresourceshare disassociateresourceshare disassociateresourcesharepermission enablesharingwithawsorganization getcustomermanagedpermissionpolicy getpermission getresourcepolicies getresourceshareassociations getresourceshareinvitations getresourceshares listpendinginvitationresources listpermissionassociations listpermissionversions listpermissions listprincipals listreplacepermissionassociationswork listresourcesharepermissions listresourcetypes listresources listsourceassociations promotepermissioncreatedfrompolicy promoteresourcesharecreatedfrompolicy putcustomermanagedpermissionpolicy rejectresourceshareinvitation replacepermissionassociations setdefaultpermissionversion tagresource untagresource updatepermission updateresourceshare
Actions (39)
| Action | Access level | Policies granting without limits | Policies granting with resource or condition limits |
|---|---|---|---|
| ram:AcceptResourceShareInvitation | Write | 7 | 7 |
| ram:AssociateResourceShare | Write | 5 | 18 |
| ram:AssociateResourceSharePermission | Write | 4 | 8 |
| ram:CreatePermission | Write | 4 | 1 |
| ram:CreatePermissionVersion | Write | 4 | 1 |
| ram:CreateResourceShare | Write | 5 | 19 |
| ram:DeleteCustomerManagedPermissionPolicy | Permissions management | 4 | 1 |
| ram:DeletePermission | Write | 4 | 1 |
| ram:DeletePermissionVersion | Write | 4 | 1 |
| ram:DeleteResourceShare | Write | 5 | 18 |
| ram:DisassociateResourceShare | Write | 5 | 14 |
| ram:DisassociateResourceSharePermission | Write | 4 | 1 |
| ram:EnableSharingWithAwsOrganization | Permissions management | 4 | 1 |
| ram:GetCustomerManagedPermissionPolicy | Read | 12 | 1 |
| ram:GetPermission | Read | 19 | 2 |
| ram:GetResourcePolicies | Read | 13 | 1 |
| ram:GetResourceShareAssociations | Read | 32 | 3 |
| ram:GetResourceShareInvitations | Read | 21 | 4 |
| ram:GetResourceShares | Read | 32 | 8 |
| ram:ListPendingInvitationResources | Read | 18 | 1 |
| ram:ListPermissionAssociations | List | 19 | 1 |
| ram:ListPermissionVersions | List | 19 | 2 |
| ram:ListPermissions | List | 19 | 2 |
| ram:ListPrincipals | List | 18 | 1 |
| ram:ListReplacePermissionAssociationsWork | List | 16 | 1 |
| ram:ListResourceSharePermissions | List | 22 | 3 |
| ram:ListResourceTypes | List | 16 | 1 |
| ram:ListResources | List | 26 | 1 |
| ram:ListSourceAssociations | List | 16 | 1 |
| ram:PromotePermissionCreatedFromPolicy | Write | 4 | 1 |
| ram:PromoteResourceShareCreatedFromPolicy | Write | 4 | 1 |
| ram:PutCustomerManagedPermissionPolicy | Permissions management | 4 | 1 |
| ram:RejectResourceShareInvitation | Write | 5 | 3 |
| ram:ReplacePermissionAssociations | Write | 4 | 1 |
| ram:SetDefaultPermissionVersion | Write | 4 | 1 |
| ram:TagResource | Tagging | 6 | 7 |
| ram:UntagResource | Tagging | 5 | 1 |
| ram:UpdatePermission | Write | 4 | 1 |
| ram:UpdateResourceShare | Write | 5 | 10 |