AWS Serverless Application Repository API Permissions: Actions and Resources Reference

Focus mode

AWS Serverless Application Repository API Permissions: Actions and Resources Reference - AWS Serverless Application Repository

When you set up access control and write permissions policies that you can attach to an IAM identity (identity-based policies), you can use the following table as a reference. The table includes each AWS Serverless Application Repository API operation, the corresponding actions that you can grant permissions to perform the action, and the AWS resource that you can grant the permissions. You specify the actions in the policy's Action field, and you specify the resource value in the policy's Resource field.

To specify an action, use the serverlessrepo: prefix followed by the API operation name (for example, serverlessrepo:ListApplications).

Operation	URI	Method	AWS Resources (ARNs)
Operation: ListApplications Required Permissions: serverlessrepo:ListApplications	/applications	GET	*
Operation: CreateApplication Required Permissions: serverlessrepo:CreateApplication	/applications	POST	*
Operation: GetApplication Required Permissions: serverlessrepo:GetApplication	/applications/`application-id`	GET	arn:aws:serverlessrepo:`region`:`account-id`:applications/`application-name`
Operation: DeleteApplication Required Permissions: serverlessrepo:DeleteApplication	/applications/`application-id`	DELETE	arn:aws:serverlessrepo:`region`:`account-id`:applications/`application-name`
Operation: UpdateApplication Required Permissions: serverlessrepo:UpdateApplication	/applications/`application-id`	PATCH	arn:aws:serverlessrepo:`region`:`account-id`:applications/`application-name`
Operation: CreateCloudFormationChangeSet Required Permissions: serverlessrepo:CreateCloudFormationChangeSet	/applications/`application-id`/changesets	POST	arn:aws:serverlessrepo:`region`:`account-id`:applications/`application-name`
Operation: GetApplicationPolicy Required Permissions: serverlessrepo:GetApplicationPolicy	/applications/`application-id`/policy	GET	arn:aws:serverlessrepo:`region`:`account-id`:applications/`application-name`
Operation: PutApplicationPolicy Required Permissions: serverlessrepo:PutApplicationPolicy	/applications/`application-id`/policy	PUT	arn:aws:serverlessrepo:`region`:`account-id`:applications/`application-name`
Operation: ListApplicationVersions Required Permissions: serverlessrepo:ListApplicationVersions	/applications/`application-id`/versions	GET	arn:aws:serverlessrepo:`region`:`account-id`:applications/`application-name`
Operation: CreateApplicationVersion Required Permissions: serverlessrepo:CreateApplicationVersion	/applications/`application-id`/versions/`semantic-version`	PUT	arn:aws:serverlessrepo:`region`:`account-id`:applications/`application-name`
Operation: ListApplicationDependencies Required Permissions: serverlessrepo:ListApplicationDependencies	/applications/`application-id`/dependencies	GET	arn:aws:serverlessrepo:`region`:`account-id`:applications/`application-name`
Operation: SearchApplications Required Permissions: serverlessrepo:SearchApplications	n/a	n/a	*