Managing policies using the CLI

You can use the Elemental Inference API to attach, retrieve, and delete feed policies.

Attaching a policy (PutFeedPolicy)

Use PutFeedPolicy to attach or replace a resource-based policy on a feed. If a policy already exists on the feed, this operation replaces it.

aws elemental-inference put-feed-policy \
  --id <feed-id> \
  --policy '{"Version":"2012-10-17","Statement":[{"Sid":"AllowMediaTailorGetMetadata","Effect":"Allow","Principal":{"Service":"mediatailor.amazonaws.com"},"Action":"elemental-inference:GetMetadata","Resource":"arn:aws:elemental-inference:<region>:<account-id>:feed/<feed-id>","Condition":{"StringEquals":{"aws:SourceAccount":"<account-id>"},"ArnLike":{"aws:SourceArn":"arn:aws:mediatailor:<region>:<account-id>:playbackConfiguration/*"}}}]}'

Retrieving a policy (GetFeedPolicy)

Use GetFeedPolicy to retrieve the resource-based policy attached to a feed.

aws elemental-inference get-feed-policy \
  --id <feed-id>

The response contains the JSON policy document:

{
    "policy": "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Sid\":\"AllowMediaTailorGetMetadata\",\"Effect\":\"Allow\",\"Principal\":{\"Service\":\"mediatailor.amazonaws.com\"},\"Action\":\"elemental-inference:GetMetadata\",\"Resource\":\"arn:aws:elemental-inference:us-west-2:111122223333:feed/abc123\",\"Condition\":{\"StringEquals\":{\"aws:SourceAccount\":\"111122223333\"},\"ArnLike\":{\"aws:SourceArn\":\"arn:aws:mediatailor:us-west-2:111122223333:playbackConfiguration/*\"}}}]}"
}

Deleting a policy (DeleteFeedPolicy)

Use DeleteFeedPolicy to remove the resource-based policy from a feed. After you delete the policy, accounts and services that the policy previously authorized can no longer access the feed.

aws elemental-inference delete-feed-policy \
  --id <feed-id>