An IAM role is an IAM identity with specific permissions. The role's permissions determine what the identity can and cannot do in AWS. You can create IAM roles in your AWS account and use them to delegate permissions to Amplify Hosting. To learn more about roles, see IAM roles in the IAM User Guide.
You can use the following types of IAM roles to grant Amplify Hosting the permissions it needs to perform actions on your behalf or run compute code that accesses other AWS resources.
- IAM service role
-
Amplify assumes this role to perform actions on your behalf. This role is required for applications with backend resources.
- IAM SSR Compute role
-
Allows a server-side rendered (SSR) application to securely access specific AWS resources.
- IAM SSR CloudWatch Logs role
-
When you deploy an SSR app, the app requires an IAM service role that Amplify assumes to allow Amplify to access Amazon CloudWatch Logs.
Topics
