WorkSpaces
Prefix workspaces, 103 actions · Domain End User Computing
5 AWS managed policies. 0 have reviewed guidance; the rest have authoritative permission data pending editorial review. 2 are service-linked role policies, shown with permission data only.
User access (1)
Operator and limited (2)
- AmazonWorkSpacesAdminOperator
- AmazonWorkSpacesSelfServiceAccessOperator
Service-linked roles (2)
Also grants WorkSpaces actions (23)
- AdministratorAccess
- AIDevOpsAgentAccessPolicy
- AIDevOpsAgentActionsPolicy
- AIOpsAssistantPolicy
- AmazonWorkSpacesThinClientFullAccess
- AWS_ConfigRole
- AWSCODAPermissionsBoundary
- AWSConfigServiceRolePolicy
- AWSFinOpsAgentServiceRolePolicy
- AWSMcpServiceActionsFullAccess
- AWSPartnerLedSupportReadOnlyAccess
- AWSResourceExplorerServiceRolePolicy
- AWSSupportServiceRolePolicy
- AWSWellArchitectedAgentResourceScanningServiceRolePolicy
- CloudWatchInternetMonitorFullAccess
- ComputeOptimizerServiceRolePolicy
- PowerUserAccess
- ReadOnlyAccess
- ResourceGroupsTaggingAPITagUntagSupportedResources
- SecurityAudit
- SupportUser
- ViewOnlyAccess
- WellArchitectedAgentResourceScanning
acceptaccountlinkinvitation associateconnectionalias associateipgroups associateworkspaceapplication authorizeiprules copyworkspaceimage createaccountlinkinvitation createconnectclientaddin createconnectionalias createipgroup createrootclientcertificate createstandbyworkspaces createtags createupdatedworkspaceimage createworkspacebundle createworkspaceimage createworkspaces createworkspacespool deleteaccountlinkinvitation deleteclientbranding deleteconnectclientaddin deleteconnectionalias deleteipgroup deleterootclientcertificate deletetags deleteworkspacebundle deleteworkspaceimage deployworkspaceapplications deregisterworkspacedirectory describeaccount describeaccountmodifications describeapplicationassociations describeapplications describebundleassociations describeclientbranding describeclientproperties describeconnectclientaddins describeconnectionaliaspermissions describeconnectionaliases describeconsent describecustomworkspaceimageimport describeimageassociations describeipgroups describetags describeworkspaceassociations describeworkspacebundles describeworkspacedirectories describeworkspaceimagepermissions describeworkspaceimages describeworkspacesnapshots describeworkspaces describeworkspacesconnectionstatus describeworkspacespoolsessions describeworkspacespools directoryaccessmanagement disassociateconnectionalias disassociateipgroups disassociateworkspaceapplication getaccountlink gettroubleshootingrecommendation importclientbranding importcustomworkspaceimage importworkspaceimage invokeonboardingagent invoketroubleshootinginvestigation listaccountlinks listavailablemanagementcidrranges listtroubleshootingrecommendations migrateworkspace modifyaccount modifycertificatebasedauthproperties modifyclientproperties modifyendpointencryptionmode modifysamlproperties modifyselfservicepermissions modifystreamingproperties modifyworkspaceaccessproperties modifyworkspacecreationproperties modifyworkspaceproperties modifyworkspacestate personalization rebootworkspaces rebuildworkspaces registerworkspacedirectory rejectaccountlinkinvitation restoreworkspace revokeiprules startworkspaces startworkspacespool stopworkspaces stopworkspacespool stream terminateworkspaces terminateworkspacespool terminateworkspacespoolsession updateconnectclientaddin updateconnectionaliaspermission updateconsent updaterootclientcertificate updaterulesofipgroup updateworkspacebundle updateworkspaceimagepermission updateworkspacespool
Actions (103)
| Action | Access level | Policies granting without limits | Policies granting with resource or condition limits |
|---|---|---|---|
| workspaces:AcceptAccountLinkInvitation | Write | 4 | 1 |
| workspaces:AssociateConnectionAlias | Write | 4 | 1 |
| workspaces:AssociateIpGroups | Write | 4 | 1 |
| workspaces:AssociateWorkspaceApplication | Write | 4 | 1 |
| workspaces:AuthorizeIpRules | Write | 4 | 1 |
| workspaces:CopyWorkspaceImage | Write | 4 | 1 |
| workspaces:CreateAccountLinkInvitation | Write | 4 | 1 |
| workspaces:CreateConnectClientAddIn | Write | 4 | 1 |
| workspaces:CreateConnectionAlias | Write | 4 | 1 |
| workspaces:CreateIpGroup | Write | 4 | 1 |
| workspaces:CreateRootClientCertificate | Write | 4 | 1 |
| workspaces:CreateStandbyWorkspaces | Write | 5 | 1 |
| workspaces:CreateTags | Tagging | 6 | 1 |
| workspaces:CreateUpdatedWorkspaceImage | Write | 4 | 1 |
| workspaces:CreateWorkspaceBundle | Write | 4 | 1 |
| workspaces:CreateWorkspaceImage | Write | 5 | 1 |
| workspaces:CreateWorkspaces | Write | 5 | 1 |
| workspaces:CreateWorkspacesPool | Write | 5 | 1 |
| workspaces:DeleteAccountLinkInvitation | Write | 4 | 1 |
| workspaces:DeleteClientBranding | Write | 4 | 1 |
| workspaces:DeleteConnectClientAddIn | Write | 4 | 1 |
| workspaces:DeleteConnectionAlias | Write | 4 | 1 |
| workspaces:DeleteIpGroup | Write | 4 | 1 |
| workspaces:DeleteRootClientCertificate | Write | 4 | 1 |
| workspaces:DeleteTags | Tagging | 6 | 1 |
| workspaces:DeleteWorkspaceBundle | Write | 4 | 1 |
| workspaces:DeleteWorkspaceImage | Write | 4 | 1 |
| workspaces:DeployWorkspaceApplications | Write | 4 | 1 |
| workspaces:DeregisterWorkspaceDirectory | Write | 5 | 1 |
| workspaces:DescribeAccount | Read | 13 | 1 |
| workspaces:DescribeAccountModifications | Read | 13 | 1 |
| workspaces:DescribeApplicationAssociations | List | 13 | 1 |
| workspaces:DescribeApplications | List | 12 | 1 |
| workspaces:DescribeBundleAssociations | List | 11 | 1 |
| workspaces:DescribeClientBranding | Read | 11 | 1 |
| workspaces:DescribeClientProperties | List | 11 | 1 |
| workspaces:DescribeConnectClientAddIns | List | 11 | 1 |
| workspaces:DescribeConnectionAliasPermissions | Read | 11 | 1 |
| workspaces:DescribeConnectionAliases | Read | 16 | 2 |
| workspaces:DescribeConsent | Read | 11 | 1 |
| workspaces:DescribeCustomWorkspaceImageImport | Read | 12 | 1 |
| workspaces:DescribeImageAssociations | List | 11 | 1 |
| workspaces:DescribeIpGroups | Read | 13 | 1 |
| workspaces:DescribeTags | Read | 17 | 2 |
| workspaces:DescribeWorkspaceAssociations | List | 13 | 1 |
| workspaces:DescribeWorkspaceBundles | List | 14 | 1 |
| workspaces:DescribeWorkspaceDirectories | Read | 18 | 1 |
| workspaces:DescribeWorkspaceImagePermissions | Read | 11 | 1 |
| workspaces:DescribeWorkspaceImages | List | 13 | 1 |
| workspaces:DescribeWorkspaceSnapshots | List | 12 | 1 |
| workspaces:DescribeWorkspaces | List | 19 | 2 |
| workspaces:DescribeWorkspacesConnectionStatus | Read | 16 | 1 |
| workspaces:DescribeWorkspacesPoolSessions | List | 13 | 1 |
| workspaces:DescribeWorkspacesPools | List | 14 | 3 |
| workspaces:DirectoryAccessManagement | List | 4 | 1 |
| workspaces:DisassociateConnectionAlias | Write | 4 | 1 |
| workspaces:DisassociateIpGroups | Write | 4 | 1 |
| workspaces:DisassociateWorkspaceApplication | Write | 4 | 1 |
| workspaces:GetAccountLink | Read | 4 | 1 |
| workspaces:GetTroubleshootingRecommendation | Read | 4 | 1 |
| workspaces:ImportClientBranding | Write | 4 | 1 |
| workspaces:ImportCustomWorkspaceImage | Write | 4 | 1 |
| workspaces:ImportWorkspaceImage | Write | 4 | 1 |
| workspaces:InvokeOnboardingAgent | Write | 4 | 1 |
| workspaces:InvokeTroubleshootingInvestigation | Read | 4 | 1 |
| workspaces:ListAccountLinks | List | 4 | 1 |
| workspaces:ListAvailableManagementCidrRanges | List | 4 | 1 |
| workspaces:ListTroubleshootingRecommendations | Read | 4 | 1 |
| workspaces:MigrateWorkspace | Write | 4 | 1 |
| workspaces:ModifyAccount | Write | 4 | 1 |
| workspaces:ModifyCertificateBasedAuthProperties | Write | 5 | 1 |
| workspaces:ModifyClientProperties | Write | 4 | 1 |
| workspaces:ModifyEndpointEncryptionMode | Write | 4 | 1 |
| workspaces:ModifySamlProperties | Write | 5 | 1 |
| workspaces:ModifySelfservicePermissions | Permissions management | 4 | 1 |
| workspaces:ModifyStreamingProperties | Write | 5 | 1 |
| workspaces:ModifyWorkspaceAccessProperties | Write | 4 | 1 |
| workspaces:ModifyWorkspaceCreationProperties | Write | 5 | 1 |
| workspaces:ModifyWorkspaceProperties | Write | 6 | 1 |
| workspaces:ModifyWorkspaceState | Write | 4 | 1 |
| workspaces:Personalization | Write | 4 | 1 |
| workspaces:RebootWorkspaces | Write | 6 | 1 |
| workspaces:RebuildWorkspaces | Write | 6 | 1 |
| workspaces:RegisterWorkspaceDirectory | Write | 5 | 1 |
| workspaces:RejectAccountLinkInvitation | Write | 4 | 1 |
| workspaces:RestoreWorkspace | Write | 5 | 1 |
| workspaces:RevokeIpRules | Write | 4 | 1 |
| workspaces:StartWorkspaces | Write | 5 | 1 |
| workspaces:StartWorkspacesPool | Write | 5 | 1 |
| workspaces:StopWorkspaces | Write | 5 | 1 |
| workspaces:StopWorkspacesPool | Write | 5 | 1 |
| workspaces:Stream | Write | 4 | 1 |
| workspaces:TerminateWorkspaces | Write | 5 | 1 |
| workspaces:TerminateWorkspacesPool | Write | 5 | 1 |
| workspaces:TerminateWorkspacesPoolSession | Write | 5 | 1 |
| workspaces:UpdateConnectClientAddIn | Write | 4 | 1 |
| workspaces:UpdateConnectionAliasPermission | Permissions management | 4 | 1 |
| workspaces:UpdateConsent | Write | 4 | 1 |
| workspaces:UpdateRootClientCertificate | Write | 4 | 1 |
| workspaces:UpdateRulesOfIpGroup | Write | 4 | 1 |
| workspaces:UpdateWorkspaceBundle | Write | 4 | 1 |
| workspaces:UpdateWorkspaceImagePermission | Permissions management | 4 | 1 |
| workspaces:UpdateWorkspacesPool | Write | 5 | 2 |