View a markdown version of this page

Actions, resources, and condition keys for AWS Tax Settings - Service Authorization Reference

Actions, resources, and condition keys for AWS Tax Settings

AWS Tax Settings (service prefix: tax) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

API operations defined by AWS Tax Settings

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation IAM action Condition key Possible value(s) Access level

BatchDeleteTaxRegistration

tax:BatchDeleteTaxRegistration

Write

BatchGetTaxExemptions

tax:GetExemptions

Read

BatchPutTaxRegistration

tax:BatchPutTaxRegistration

Write

DeleteSupplementalTaxRegistration

tax:DeleteSupplementalTaxRegistration

Write

DeleteTaxRegistration

tax:DeleteTaxRegistration

Write

GetTaxExemptionTypes

tax:GetExemptions

Read

GetTaxInheritance

tax:GetTaxInheritance

Read

GetTaxRegistration

tax:GetTaxRegistration

Read

GetTaxRegistrationDocument

tax:GetTaxRegistrationDocument

Read

ListSupplementalTaxRegistrations

tax:ListSupplementalTaxRegistrations

Read

ListTaxExemptions

tax:GetExemptions

Read

ListTaxRegistrations

tax:ListTaxRegistrations

Read

PutSupplementalTaxRegistration

tax:PutSupplementalTaxRegistration

Write

PutTaxExemption

tax:UpdateExemptions

Write

PutTaxInheritance

tax:PutTaxInheritance

Write

PutTaxRegistration

tax:PutTaxRegistration

Write

Actions defined by AWS Tax Settings

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions Description Resource types (*required) Condition keys Access level

BatchDeleteTaxRegistration

Grants permission to batch delete tax registration data

Write

BatchPutTaxRegistration

Grants permission to batch update tax registrations

Write

CancelDocument

Grants permission to cancel documents such as withholding slips

Write

CreateDocument

Grants permission to upload new documents such as withholding slips

Write

DeleteSupplementalTaxRegistration

Grants permission to delete supplemental tax registration data

Write

DeleteTaxRegistration

Grants permission to delete tax registration data

Write

GetDocument

Grants permission to retrieve documents such as withholding slips

Read

GetDocumentUploadUrl

Grants permission to retrieve a generated URL to upload documents

Read

GetExemptions

Grants permission to view tax exemptions data

Read

GetTaxInheritance

Grants permission to view tax inheritance status

Read

GetTaxRegistration

Grants permission to view tax registrations data

Read

GetTaxRegistrationDocument

Grants permission to download tax registration documents

Read

ListDocuments

Grants permission to view documents such as withholding slips

Read

ListSupplementalTaxRegistrations

Grants permission to view supplemental tax registrations

Read

ListTaxRegistrations

Grants permission to view tax registrations

Read

ListWithholdingEligibleInvoices

Grants permission to view eligible withholding invoices

Read

PutSupplementalTaxRegistration

Grants permission to update supplemental tax registrations data

Write

PutTaxInheritance

Grants permission to set tax inheritance

Write

PutTaxRegistration

Grants permission to update tax registrations data

Write

UpdateExemptions

Grants permission to update tax exemptions data

Write

Permission-only actions for AWS Tax Settings

The following actions are defined by AWS Tax Settings but are not directly invocable through any API operation. They can only be used in IAM policy statements to grant or deny permissions.

Actions Description Resource types (*required) Condition keys Access level

GetTaxInfoReportingDocument

Grants permission to view/download tax documents/forms

Read

GetTaxInterview

Grants permission to retrieve tax interview data

Read

PutTaxInterview

Grants permission to update tax interview data

Write

Resource types defined by AWS Tax Settings

AWS Tax Settings does not support specifying a resource ARN in the Resource element of an IAM policy statement.

Condition keys for AWS Tax Settings

AWS Tax Settings has no service-specific condition keys that can be used in the Condition element of policy statements.