# AWS Migration Hub API のアクセス許可: アクションとリソースのリファレンス
<a name="migrationhub-api-permissions-ref"></a>

[アクセスコントロール](auth-and-access-control.md#access-control) をセットアップし、IAM アイデンティティにアタッチできるアクセス権限ポリシー (アイデンティティベースのポリシー) を作成するときは、以下のテーブルをリファレンスとして使用できます。表は、各 Migration Hub API オペレーション、アクションを実行するアクセス許可を付与するためのアクション、およびアクセス許可を付与する AWS リソースをを示しています。ポリシーの `Action` フィールドでアクションを指定し、ポリシーの `Resource` フィールドでリソースの値を指定します。

**注記**  
アクションを指定するには、API オペレーション名 (`mgh:` など) の前に `mgh:CreateProgressUpdateStream` プレフィックスを使用します。

スクロールバーを使用して、テーブルの残りの部分を確認します。


**AWS Migration Hub API とアクションで必要なアクセス許可**  

| Migration Hub API オペレーション | 必要なアクセス権限 (API アクション) | リソース | 
| --- | --- | --- | 
|  [AssociateCreatedArtifact](http://docs.aws.amazon.com/migrationhub/latest/ug/API_AssociateCreatedArtifact.html)  | mgh:AssociateCreatedArtifact | arn:aws:mgh:{{region}}:{{account-id}}:ProgressUpdateStreamName/{{resource-id}}またはarn:aws:mgh:{{region}}:{{account-id}}:ProgressUpdateStreamName/{{resource-id}}/\* | 
|  [AssociateDiscoveredResource](http://docs.aws.amazon.com/migrationhub/latest/ug/API_AssociateDiscoveredResource.html)  |  mgh:AssociateDiscoveredResource  | arn:aws:mgh:{{region}}:{{account-id}}:ProgressUpdateStreamName/{{resource-id}}またはarn:aws:mgh:{{region}}:{{account-id}}:ProgressUpdateStreamName/{{resource-id}}/\* | 
|  [CreateProgressUpdateStream](http://docs.aws.amazon.com/migrationhub/latest/ug/API_CreateProgressUpdateStream.html)  | mgh:CreateProgressUpdateStream |  arn:aws:mgh:{{region}}:{{account-id}}:ProgressUpdateStreamName/{{resource-id}}  | 
| [DeleteProgressUpdateStream](http://docs.aws.amazon.com/migrationhub/latest/ug/API_DeleteProgressUpdateStream.html) | mgh:DeleteProgressUpdateStream |  arn:aws:mgh:{{region}}:{{account-id}}:ProgressUpdateStreamName/{{resource-id}}  | 
| [DescribeApplicationState](http://docs.aws.amazon.com/migrationhub/latest/ug/API_DescribeApplicationState.html)  |  mgh:DescribeApplicationState  | arn:aws:mgh:{{region}}:{{account-id}}:ProgressUpdateStreamName/{{resource-id}}またはarn:aws:mgh:{{region}}:{{account-id}}:ProgressUpdateStreamName/{{resource-id}}/\* | 
| [DescribeMigrationTask](http://docs.aws.amazon.com/migrationhub/latest/ug/API_DescribeMigrationTask.html) | mgh:DescribeMigrationTask | arn:aws:mgh:{{region}}:{{account-id}}:ProgressUpdateStreamName/{{resource-id}}またはarn:aws:mgh:{{region}}:{{account-id}}:ProgressUpdateStreamName/{{resource-id}}/\* | 
|  [DisassociateCreatedArtifact](http://docs.aws.amazon.com/migrationhub/latest/ug/API_DisassociateCreatedArtifact.html)  | mgh:DisassociateCreatedArtifact | arn:aws:mgh:{{region}}:{{account-id}}:ProgressUpdateStreamName/{{resource-id}}またはarn:aws:mgh:{{region}}:{{account-id}}:ProgressUpdateStreamName/{{resource-id}}/\* | 
| [DisassociateDiscoveredResource](http://docs.aws.amazon.com/migrationhub/latest/ug/API_DisassociateDiscoveredResource.html) | mgh:DisassociateDiscoveredResource | arn:aws:mgh:{{region}}:{{account-id}}:ProgressUpdateStreamName/{{resource-id}}またはarn:aws:mgh:{{region}}:{{account-id}}:ProgressUpdateStreamName/{{resource-id}}/\* | 
| [ImportMigrationTask](http://docs.aws.amazon.com/migrationhub/latest/ug/API_ImportMigrationTask.html) | mgh:ImportMigrationTask | arn:aws:mgh:{{region}}:{{account-id}}:ProgressUpdateStreamName/{{resource-id}}またはarn:aws:mgh:{{region}}:{{account-id}}:ProgressUpdateStreamName/{{resource-id}}/\* | 
| [ListCreatedArtifacts](http://docs.aws.amazon.com/migrationhub/latest/ug/API_ListCreatedArtifacts.html) | mgh:ListCreatedArtifacts | arn:aws:mgh:{{region}}:{{account-id}}:ProgressUpdateStreamName/{{resource-id}}またはarn:aws:mgh:{{region}}:{{account-id}}:ProgressUpdateStreamName/{{resource-id}}/\* | 
|  [ListDiscoveredResources](http://docs.aws.amazon.com/migrationhub/latest/ug/API_ListDiscoveredResources.html)  | mgh:ListDiscoveredResources | arn:aws:mgh:{{region}}:{{account-id}}:ProgressUpdateStreamName/{{resource-id}}またはarn:aws:mgh:{{region}}:{{account-id}}:ProgressUpdateStreamName/{{resource-id}}/\* | 
|  [ListMigrationTasks](http://docs.aws.amazon.com/migrationhub/latest/ug/API_ListMigrationTasks.html)  | mgh:ListMigrationTasks |  \*  | 
|  [ListProgressUpdateStreams](http://docs.aws.amazon.com/migrationhub/latest/ug/API_ListProgressUpdateStreams.html)  | mgh:ListProgressUpdateStreams |  \*  | 
| [NotifyApplicationState](http://docs.aws.amazon.com/migrationhub/latest/ug/API_NotifyApplicationState.html) | mgh:NotifyApplicationState | arn:aws:mgh:{{region}}:{{account-id}}:ProgressUpdateStreamName/{{resource-id}}またはarn:aws:mgh:{{region}}:{{account-id}}:ProgressUpdateStreamName/{{resource-id}}/\* | 
| [NotifyMigrationTaskState](http://docs.aws.amazon.com/migrationhub/latest/ug/API_NotifyMigrationTaskState.html) | mgh:NotifyMigrationTaskState | arn:aws:mgh:{{region}}:{{account-id}}:ProgressUpdateStreamName/{{resource-id}}またはarn:aws:mgh:{{region}}:{{account-id}}:ProgressUpdateStreamName/{{resource-id}}/\* | 
| [PutResourceAttributes](http://docs.aws.amazon.com/migrationhub/latest/ug/API_PutResourceAttributes.html) | mgh:PutResourceAttributes | arn:aws:mgh:{{region}}:{{account-id}}:ProgressUpdateStreamName/{{resource-id}}またはarn:aws:mgh:{{region}}:{{account-id}}:ProgressUpdateStreamName/{{resource-id}}/\* | 

## 関連トピック
<a name="w2aac17c17c23"></a>
+ [アクセスコントロール](auth-and-access-control.md#access-control)