# Actions, resources, and condition keys for AWS Amplify Admin
<a name="list_amplifybackend"></a>

AWS Amplify Admin (service prefix: `amplifybackend`) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:
+ Learn how to [configure this service](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/introduction.html).
+ View a list of the [API operations available for this service](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/).
+ Learn how to secure this service and its resources by [using IAM](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/access_policies.html) permission policies.
+ View the [programmatic service authorization reference](https://servicereference.us-east-1.amazonaws.com/v1/amplifybackend/amplifybackend.json) for this service.

**Topics**
+ [API operations defined by AWS Amplify Admin](#list_amplifybackend-operations)
+ [Actions defined by AWS Amplify Admin](#list_amplifybackend-actions-as-permissions)
+ [Resource types defined by AWS Amplify Admin](#list_amplifybackend-resources-for-iam-policies)
+ [Condition keys for AWS Amplify Admin](#list_amplifybackend-policy-keys)

## API operations defined by AWS Amplify Admin
<a name="list_amplifybackend-operations"></a>

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the [Actions table](#list_amplifybackend-actions-as-permissions).


****  


- **   CloneBackend  **
  - **IAM action:**  [amplifybackend:CloneBackend](#list_amplifybackend-action-CloneBackend) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Write

- **   CreateBackend  **
  - **IAM action:**  [amplifybackend:CreateBackend](#list_amplifybackend-action-CreateBackend) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Write

- **   CreateBackendAPI  **
  - **IAM action:**  [amplifybackend:CreateBackendAPI](#list_amplifybackend-action-CreateBackendAPI) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Write

- **   CreateBackendAuth  **
  - **IAM action:**  [amplifybackend:CreateBackendAuth](#list_amplifybackend-action-CreateBackendAuth) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Write

- **   CreateBackendConfig  **
  - **IAM action:**  [amplifybackend:CreateBackendConfig](#list_amplifybackend-action-CreateBackendConfig) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Write

- **   CreateBackendStorage  **
  - **IAM action:**  [amplifybackend:CreateBackendStorage](#list_amplifybackend-action-CreateBackendStorage) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Write

- **   CreateToken  **
  - **IAM action:**  [amplifybackend:CreateToken](#list_amplifybackend-action-CreateToken) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Write

- **   DeleteBackend  **
  - **IAM action:**  [amplifybackend:DeleteBackend](#list_amplifybackend-action-DeleteBackend) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Write

- **   DeleteBackendAPI  **
  - **IAM action:**  [amplifybackend:DeleteBackendAPI](#list_amplifybackend-action-DeleteBackendAPI) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Write

- **   DeleteBackendAuth  **
  - **IAM action:**  [amplifybackend:DeleteBackendAuth](#list_amplifybackend-action-DeleteBackendAuth) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Write

- **   DeleteBackendStorage  **
  - **IAM action:**  [amplifybackend:DeleteBackendStorage](#list_amplifybackend-action-DeleteBackendStorage) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Write

- **   DeleteToken  **
  - **IAM action:**  [amplifybackend:DeleteToken](#list_amplifybackend-action-DeleteToken) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Write

- **   GenerateBackendAPIModels  **
  - **IAM action:**  [amplifybackend:GenerateBackendAPIModels](#list_amplifybackend-action-GenerateBackendAPIModels) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Write

- **   GetBackend  **
  - **IAM action:**  [amplifybackend:GetBackend](#list_amplifybackend-action-GetBackend) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Read

- **   GetBackendAPI  **
  - **IAM action:**  [amplifybackend:GetBackendAPI](#list_amplifybackend-action-GetBackendAPI) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Read

- **   GetBackendAPIModels  **
  - **IAM action:**  [amplifybackend:GetBackendAPIModels](#list_amplifybackend-action-GetBackendAPIModels) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Read

- **   GetBackendAuth  **
  - **IAM action:**  [amplifybackend:GetBackendAuth](#list_amplifybackend-action-GetBackendAuth) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Read

- **   GetBackendJob  **
  - **IAM action:**  [amplifybackend:GetBackendJob](#list_amplifybackend-action-GetBackendJob) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Read

- **   GetBackendStorage  **
  - **IAM action:**  [amplifybackend:GetBackendStorage](#list_amplifybackend-action-GetBackendStorage) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Read

- **   GetToken  **
  - **IAM action:**  [amplifybackend:GetToken](#list_amplifybackend-action-GetToken) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Read

- **   ImportBackendAuth  **
  - **IAM action:**  [amplifybackend:ImportBackendAuth](#list_amplifybackend-action-ImportBackendAuth) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Write

- **   ImportBackendStorage  **
  - **IAM action:**  [amplifybackend:ImportBackendStorage](#list_amplifybackend-action-ImportBackendStorage) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Write

- **   ListBackendJobs  **
  - **IAM action:**  [amplifybackend:ListBackendJobs](#list_amplifybackend-action-ListBackendJobs) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** List

- **   ListS3Buckets  **
  - **IAM action:**  [amplifybackend:ListS3Buckets](#list_amplifybackend-action-ListS3Buckets) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** List

- **   RemoveAllBackends  **
  - **IAM action:**  [amplifybackend:RemoveAllBackends](#list_amplifybackend-action-RemoveAllBackends) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Write

- **   RemoveBackendConfig  **
  - **IAM action:**  [amplifybackend:RemoveBackendConfig](#list_amplifybackend-action-RemoveBackendConfig) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Write

- **   UpdateBackendAPI  **
  - **IAM action:**  [amplifybackend:UpdateBackendAPI](#list_amplifybackend-action-UpdateBackendAPI) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Write

- **   UpdateBackendAuth  **
  - **IAM action:**  [amplifybackend:UpdateBackendAuth](#list_amplifybackend-action-UpdateBackendAuth) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Write

- **   UpdateBackendConfig  **
  - **IAM action:**  [amplifybackend:UpdateBackendConfig](#list_amplifybackend-action-UpdateBackendConfig) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Write

- **   UpdateBackendJob  **
  - **IAM action:**  [amplifybackend:UpdateBackendJob](#list_amplifybackend-action-UpdateBackendJob) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Write

- **   UpdateBackendStorage  **
  - **IAM action:**  [amplifybackend:UpdateBackendStorage](#list_amplifybackend-action-UpdateBackendStorage) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Write



## Actions defined by AWS Amplify Admin
<a name="list_amplifybackend-actions-as-permissions"></a>

You can specify the following actions in the `Action` element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.


****  


- **   [CloneBackend](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-environments-backendenvironmentname-clone.html#CloneBackend)  **
  - **Description:** Grants permission to clone an existing Amplify Admin backend environment into a new Amplify Admin backend enviroment
  - **Resource types (\*required):** [backend\*](#list_amplifybackend-resource-backend)
  - **Condition keys:**  
  - **Access level:** Write

- **   [CreateBackend](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend.html#CreateBackend)  **
  - **Description:** Grants permission to create a new Amplify Admin backend environment by Amplify appId
  - **Resource types (\*required):** [created-backend\*](#list_amplifybackend-resource-created-backend)
  - **Condition keys:**  
  - **Access level:** Write

- **   [CreateBackendAPI](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-api.html#CreateBackendAPI)  **
  - **Description:** Grants permission to create an API for an existing Amplify Admin backend environment by appId and backendEnvironmentName
  - **Resource types (\*required):** [api\*](#list_amplifybackend-resource-api) / **Condition keys:**  
  - **Resource types (\*required):** [backend\*](#list_amplifybackend-resource-backend) / **Condition keys:**  
  - **Resource types (\*required):** [environment\*](#list_amplifybackend-resource-environment) / **Condition keys:**  
  - **Access level:** Write

- **   [CreateBackendAuth](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-auth.html#CreateBackendAuth)  **
  - **Description:** Grants permission to create an auth resource for an existing Amplify Admin backend environment by appId and backendEnvironmentName
  - **Resource types (\*required):** [auth\*](#list_amplifybackend-resource-auth) / **Condition keys:**  
  - **Resource types (\*required):** [backend\*](#list_amplifybackend-resource-backend) / **Condition keys:**  
  - **Resource types (\*required):** [environment\*](#list_amplifybackend-resource-environment) / **Condition keys:**  
  - **Access level:** Write

- **   [CreateBackendConfig](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-config.html#CreateBackendConfig)  **
  - **Description:** Grants permission to create a new Amplify Admin backend config by Amplify appId
  - **Resource types (\*required):** [config\*](#list_amplifybackend-resource-config)
  - **Condition keys:**  
  - **Access level:** Write

- **   [CreateBackendStorage](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-storage.html#CreateBackendStorage)  **
  - **Description:** Grants permission to create a backend storage resource
  - **Resource types (\*required):** [backend\*](#list_amplifybackend-resource-backend) / **Condition keys:**  
  - **Resource types (\*required):** [environment\*](#list_amplifybackend-resource-environment) / **Condition keys:**  
  - **Resource types (\*required):** [storage\*](#list_amplifybackend-resource-storage) / **Condition keys:**  
  - **Access level:** Write

- **   [CreateToken](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-challenge.html#CreateToken)  **
  - **Description:** Grants permission to create an Amplify Admin challenge token by appId
  - **Resource types (\*required):** [backend\*](#list_amplifybackend-resource-backend) / **Condition keys:**  
  - **Resource types (\*required):** [token\*](#list_amplifybackend-resource-token) / **Condition keys:**  
  - **Access level:** Write

- **   [DeleteBackend](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-environments-backendenvironmentname-remove.html#DeleteBackend)  **
  - **Description:** Grants permission to delete an existing Amplify Admin backend environment by appId and backendEnvironmentName
  - **Resource types (\*required):** [backend\*](#list_amplifybackend-resource-backend) / **Condition keys:**  
  - **Resource types (\*required):** [environment\*](#list_amplifybackend-resource-environment) / **Condition keys:**  
  - **Access level:** Write

- **   [DeleteBackendAPI](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-api-backendenvironmentname-remove.html#DeleteBackendAPI)  **
  - **Description:** Grants permission to delete an API of an existing Amplify Admin backend environment by appId and backendEnvironmentName
  - **Resource types (\*required):** [api\*](#list_amplifybackend-resource-api) / **Condition keys:**  
  - **Resource types (\*required):** [backend\*](#list_amplifybackend-resource-backend) / **Condition keys:**  
  - **Resource types (\*required):** [environment\*](#list_amplifybackend-resource-environment) / **Condition keys:**  
  - **Access level:** Write

- **   [DeleteBackendAuth](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-auth-backendenvironmentname-remove.html#DeleteBackendAuth)  **
  - **Description:** Grants permission to delete an auth resource of an existing Amplify Admin backend environment by appId and backendEnvironmentName
  - **Resource types (\*required):** [auth\*](#list_amplifybackend-resource-auth) / **Condition keys:**  
  - **Resource types (\*required):** [backend\*](#list_amplifybackend-resource-backend) / **Condition keys:**  
  - **Resource types (\*required):** [environment\*](#list_amplifybackend-resource-environment) / **Condition keys:**  
  - **Access level:** Write

- **   [DeleteBackendStorage](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-storage.html#DeleteBackendStorage)  **
  - **Description:** Grants permission to delete a backend storage resource
  - **Resource types (\*required):** [backend\*](#list_amplifybackend-resource-backend) / **Condition keys:**  
  - **Resource types (\*required):** [environment\*](#list_amplifybackend-resource-environment) / **Condition keys:**  
  - **Resource types (\*required):** [storage\*](#list_amplifybackend-resource-storage) / **Condition keys:**  
  - **Access level:** Write

- **   [DeleteToken](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-challenge-sessionid-remove.html#DeleteToken)  **
  - **Description:** Grants permission to delete an Amplify Admin challenge token by appId
  - **Resource types (\*required):** [backend\*](#list_amplifybackend-resource-backend) / **Condition keys:**  
  - **Resource types (\*required):** [token\*](#list_amplifybackend-resource-token) / **Condition keys:**  
  - **Access level:** Write

- **   [GenerateBackendAPIModels](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-api-backendenvironmentname-generatemodels.html#GenerateBackendAPIModels)  **
  - **Description:** Grants permission to generate models for an API of an existing Amplify Admin backend environment by appId and backendEnvironmentName
  - **Resource types (\*required):** [api\*](#list_amplifybackend-resource-api) / **Condition keys:**  
  - **Resource types (\*required):** [backend\*](#list_amplifybackend-resource-backend) / **Condition keys:**  
  - **Resource types (\*required):** [environment\*](#list_amplifybackend-resource-environment) / **Condition keys:**  
  - **Access level:** Write

- **   [GetBackend](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-details.html#GetBackend)  **
  - **Description:** Grants permission to retrieve an existing Amplify Admin backend environment by appId and backendEnvironmentName
  - **Resource types (\*required):** [backend\*](#list_amplifybackend-resource-backend) / **Condition keys:**  
  - **Resource types (\*required):** [environment\*](#list_amplifybackend-resource-environment) / **Condition keys:**  
  - **Access level:** Read

- **   [GetBackendAPI](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-api-backendenvironmentname-details.html#GetBackendAPI)  **
  - **Description:** Grants permission to retrieve an API of an existing Amplify Admin backend environment by appId and backendEnvironmentName
  - **Resource types (\*required):** [api\*](#list_amplifybackend-resource-api) / **Condition keys:**  
  - **Resource types (\*required):** [backend\*](#list_amplifybackend-resource-backend) / **Condition keys:**  
  - **Resource types (\*required):** [environment\*](#list_amplifybackend-resource-environment) / **Condition keys:**  
  - **Access level:** Read

- **   [GetBackendAPIModels](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-api-backendenvironmentname-getmodels.html#GetBackendAPIModels)  **
  - **Description:** Grants permission to retrieve models for an API of an existing Amplify Admin backend environment by appId and backendEnvironmentName
  - **Resource types (\*required):** [api\*](#list_amplifybackend-resource-api) / **Condition keys:**  
  - **Resource types (\*required):** [backend\*](#list_amplifybackend-resource-backend) / **Condition keys:**  
  - **Resource types (\*required):** [environment\*](#list_amplifybackend-resource-environment) / **Condition keys:**  
  - **Access level:** Read

- **   [GetBackendAuth](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-auth-backendenvironmentname-details.html#GetBackendAuth)  **
  - **Description:** Grants permission to retrieve an auth resource of an existing Amplify Admin backend environment by appId and backendEnvironmentName
  - **Resource types (\*required):** [auth\*](#list_amplifybackend-resource-auth) / **Condition keys:**  
  - **Resource types (\*required):** [backend\*](#list_amplifybackend-resource-backend) / **Condition keys:**  
  - **Resource types (\*required):** [environment\*](#list_amplifybackend-resource-environment) / **Condition keys:**  
  - **Access level:** Read

- **   [GetBackendJob](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-job-backendenvironmentname-jobid.html#GetBackendJob)  **
  - **Description:** Grants permission to retrieve a job of an existing Amplify Admin backend environment by appId and backendEnvironmentName
  - **Resource types (\*required):** [backend\*](#list_amplifybackend-resource-backend) / **Condition keys:**  
  - **Resource types (\*required):** [job\*](#list_amplifybackend-resource-job) / **Condition keys:**  
  - **Access level:** Read

- **   [GetBackendStorage](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-storage.html#GetBackendStorage)  **
  - **Description:** Grants permission to retrieve an existing backend storage resource
  - **Resource types (\*required):** [backend\*](#list_amplifybackend-resource-backend) / **Condition keys:**  
  - **Resource types (\*required):** [environment\*](#list_amplifybackend-resource-environment) / **Condition keys:**  
  - **Access level:** Read

- **   [GetToken](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-challenge-sessionid.html#GetToken)  **
  - **Description:** Grants permission to retrieve an Amplify Admin challenge token by appId
  - **Resource types (\*required):** [backend\*](#list_amplifybackend-resource-backend) / **Condition keys:**  
  - **Resource types (\*required):** [token\*](#list_amplifybackend-resource-token) / **Condition keys:**  
  - **Access level:** Read

- **   [ImportBackendAuth](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-auth-backendenvironmentname.html#ImportBackendAuth)  **
  - **Description:** Grants permission to import an existing auth resource of an Amplify Admin backend environment by appId and backendEnvironmentName
  - **Resource types (\*required):** [auth\*](#list_amplifybackend-resource-auth) / **Condition keys:**  
  - **Resource types (\*required):** [backend\*](#list_amplifybackend-resource-backend) / **Condition keys:**  
  - **Resource types (\*required):** [environment\*](#list_amplifybackend-resource-environment) / **Condition keys:**  
  - **Access level:** Write

- **   [ImportBackendStorage](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-storage.html#ImportBackendStorage)  **
  - **Description:** Grants permission to import an existing backend storage resource
  - **Resource types (\*required):** [backend\*](#list_amplifybackend-resource-backend) / **Condition keys:**  
  - **Resource types (\*required):** [environment\*](#list_amplifybackend-resource-environment) / **Condition keys:**  
  - **Resource types (\*required):** [storage\*](#list_amplifybackend-resource-storage) / **Condition keys:**  
  - **Access level:** Write

- **   [ListBackendJobs](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-job-backendenvironmentname.html#ListBackendJobs)  **
  - **Description:** Grants permission to retrieve the jobs of an existing Amplify Admin backend environment by appId and backendEnvironmentName
  - **Resource types (\*required):** [backend\*](#list_amplifybackend-resource-backend) / **Condition keys:**  
  - **Resource types (\*required):** [job\*](#list_amplifybackend-resource-job) / **Condition keys:**  
  - **Access level:** List

- **   [ListS3Buckets](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-storage.html#ListS3Buckets)  **
  - **Description:** Grants permission to retrieve s3 buckets
  - **Resource types (\*required):** 
  - **Condition keys:**  
  - **Access level:** List

- **   [RemoveAllBackends](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-remove.html#RemoveAllBackends)  **
  - **Description:** Grants permission to delete all existing Amplify Admin backend environments by appId
  - **Resource types (\*required):** [backend\*](#list_amplifybackend-resource-backend) / **Condition keys:**  
  - **Resource types (\*required):** [environment\*](#list_amplifybackend-resource-environment) / **Condition keys:**  
  - **Access level:** Write

- **   [RemoveBackendConfig](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-config-remove.html#RemoveBackendConfig)  **
  - **Description:** Grants permission to delete an Amplify Admin backend config by Amplify appId
  - **Resource types (\*required):** [config\*](#list_amplifybackend-resource-config)
  - **Condition keys:**  
  - **Access level:** Write

- **   [UpdateBackendAPI](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-api-backendenvironmentname.html#UpdateBackendAPI)  **
  - **Description:** Grants permission to update an API of an existing Amplify Admin backend environment by appId and backendEnvironmentName
  - **Resource types (\*required):** [api\*](#list_amplifybackend-resource-api) / **Condition keys:**  
  - **Resource types (\*required):** [backend\*](#list_amplifybackend-resource-backend) / **Condition keys:**  
  - **Resource types (\*required):** [environment\*](#list_amplifybackend-resource-environment) / **Condition keys:**  
  - **Access level:** Write

- **   [UpdateBackendAuth](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-auth-backendenvironmentname.html#UpdateBackendAuth)  **
  - **Description:** Grants permission to update an auth resource of an existing Amplify Admin backend environment by appId and backendEnvironmentName
  - **Resource types (\*required):** [auth\*](#list_amplifybackend-resource-auth) / **Condition keys:**  
  - **Resource types (\*required):** [backend\*](#list_amplifybackend-resource-backend) / **Condition keys:**  
  - **Resource types (\*required):** [environment\*](#list_amplifybackend-resource-environment) / **Condition keys:**  
  - **Access level:** Write

- **   [UpdateBackendConfig](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-config-update.html#UpdateBackendConfig)  **
  - **Description:** Grants permission to update an Amplify Admin backend config by Amplify appId
  - **Resource types (\*required):** [config\*](#list_amplifybackend-resource-config)
  - **Condition keys:**  
  - **Access level:** Write

- **   [UpdateBackendJob](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-job-backendenvironmentname-jobid.html#UpdateBackendJob)  **
  - **Description:** Grants permission to update a job of an existing Amplify Admin backend environment by appId and backendEnvironmentName
  - **Resource types (\*required):** [backend\*](#list_amplifybackend-resource-backend) / **Condition keys:**  
  - **Resource types (\*required):** [job\*](#list_amplifybackend-resource-job) / **Condition keys:**  
  - **Access level:** Write

- **   [UpdateBackendStorage](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-storage.html#UpdateBackendStorage)  **
  - **Description:** Grants permission to update a backend storage resource
  - **Resource types (\*required):** [backend\*](#list_amplifybackend-resource-backend) / **Condition keys:**  
  - **Resource types (\*required):** [environment\*](#list_amplifybackend-resource-environment) / **Condition keys:**  
  - **Resource types (\*required):** [storage\*](#list_amplifybackend-resource-storage) / **Condition keys:**  
  - **Access level:** Write



## Resource types defined by AWS Amplify Admin
<a name="list_amplifybackend-resources-for-iam-policies"></a>

The following resource types are defined by this service and can be used in the `Resource` element of IAM permission policy statements.


****  

| Resource types | ARN | Condition keys | 
| --- | --- | --- | 
|  [api](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-api.html)  | arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/${AppId}/api/\* |   | 
|  [auth](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-auth.html)  | arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/${AppId}/auth/\* |   | 
|  [backend](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend.html)  | arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/${AppId}/\* |   | 
|  [config](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-config.html)  | arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/${AppId}/config/\* |   | 
|  [created-backend](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend.html)  | arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/\* |   | 
|  [environment](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-api-backendenvironmentname-details.html)  | arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/${AppId}/environments/\* |   | 
|  [job](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-job-backendenvironmentname.html)  | arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/${AppId}/job/\* |   | 
|  [storage](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-storage.html)  | arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/${AppId}/storage/\* |   | 
|  [token](https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-token.html)  | arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/${AppId}/challenge/\* |   | 

## Condition keys for AWS Amplify Admin
<a name="list_amplifybackend-policy-keys"></a>

AWS Amplify Admin has no service-specific condition keys that can be used in the `Condition` element of policy statements.