Operations Actions Resource types Condition keys

Actions, resources, and condition keys for AWS Elemental MediaLive

AWS Elemental MediaLive (service prefix: medialive) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by AWS Elemental MediaLive
Actions defined by AWS Elemental MediaLive
Resource types defined by AWS Elemental MediaLive
Condition keys for AWS Elemental MediaLive

API operations defined by AWS Elemental MediaLive

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Condition key	Possible value(s)	Access level
AcceptInputDeviceTransfer	medialive:AcceptInputDeviceTransfer			Write
BatchDelete	medialive:BatchDelete			Write
BatchStart	medialive:BatchStart			Write
BatchStop	medialive:BatchStop			Write
BatchUpdateSchedule	medialive:BatchUpdateSchedule			Write
CancelInputDeviceTransfer	medialive:CancelInputDeviceTransfer			Write
ClaimDevice	medialive:ClaimDevice			Write
CreateChannel	medialive:CreateChannel			Write
	medialive:CreateTags			Tagging, Write
	iam:PassRole	iam:PassedToService	medialive.amazonaws.com	Write
CreateChannelPlacementGroup	medialive:CreateChannelPlacementGroup			Write
CreateChannelPlacementGroup	medialive:CreateTags			Tagging, Write
CreateCloudWatchAlarmTemplate	medialive:CreateCloudWatchAlarmTemplate			Write
CreateCloudWatchAlarmTemplate	medialive:CreateTags			Tagging, Write
CreateCloudWatchAlarmTemplateGroup	medialive:CreateCloudWatchAlarmTemplateGroup			Write
CreateCloudWatchAlarmTemplateGroup	medialive:CreateTags			Tagging, Write
CreateCluster	medialive:CreateCluster			Write
CreateCluster	iam:PassRole	iam:PassedToService	medialive.amazonaws.com	Write
CreateEventBridgeRuleTemplate	medialive:CreateEventBridgeRuleTemplate			Write
CreateEventBridgeRuleTemplate	medialive:CreateTags			Tagging, Write
CreateEventBridgeRuleTemplateGroup	medialive:CreateEventBridgeRuleTemplateGroup			Write
CreateEventBridgeRuleTemplateGroup	medialive:CreateTags			Tagging, Write
CreateInput	medialive:CreateInput			Write
	medialive:CreateTags			Tagging, Write
	iam:PassRole	iam:PassedToService	medialive.amazonaws.com	Write
CreateInputSecurityGroup	medialive:CreateInputSecurityGroup			Write
CreateInputSecurityGroup	medialive:CreateTags			Tagging, Write
CreateMultiplex	medialive:CreateMultiplex			Write
CreateMultiplex	medialive:CreateTags			Tagging, Write
CreateMultiplexProgram	medialive:CreateMultiplexProgram			Write
CreateNetwork	medialive:CreateNetwork			Write
CreateNode	medialive:CreateNode			Write
CreateNode	medialive:CreateTags			Tagging, Write
CreateNodeRegistrationScript	medialive:CreateNodeRegistrationScript			Write
CreatePartnerInput	medialive:CreatePartnerInput			Write
CreateSdiSource	medialive:CreateSdiSource			Write
CreateSdiSource	medialive:CreateTags			Tagging, Write
CreateSignalMap	medialive:CreateSignalMap			Write
CreateSignalMap	medialive:CreateTags			Tagging, Write
CreateTags	medialive:CreateTags			Tagging, Write
DeleteChannel	medialive:DeleteChannel			Write
DeleteChannelPlacementGroup	medialive:DeleteChannelPlacementGroup			Write
DeleteCloudWatchAlarmTemplate	medialive:DeleteCloudWatchAlarmTemplate			Write
DeleteCloudWatchAlarmTemplateGroup	medialive:DeleteCloudWatchAlarmTemplateGroup			Write
DeleteCluster	medialive:DeleteCluster			Write
DeleteEventBridgeRuleTemplate	medialive:DeleteEventBridgeRuleTemplate			Write
DeleteEventBridgeRuleTemplateGroup	medialive:DeleteEventBridgeRuleTemplateGroup			Write
DeleteInput	medialive:DeleteInput			Write
DeleteInputSecurityGroup	medialive:DeleteInputSecurityGroup			Write
DeleteMultiplex	medialive:DeleteMultiplex			Write
DeleteMultiplexProgram	medialive:DeleteMultiplexProgram			Write
DeleteNetwork	medialive:DeleteNetwork			Write
DeleteNode	medialive:DeleteNode			Write
DeleteReservation	medialive:DeleteReservation			Write
DeleteSchedule	medialive:DeleteSchedule			Write
DeleteSdiSource	medialive:DeleteSdiSource			Write
DeleteSignalMap	medialive:DeleteSignalMap			Write
DeleteTags	medialive:DeleteTags			Tagging, Write
DescribeAccountConfiguration	medialive:DescribeAccountConfiguration			Read
DescribeChannel	medialive:DescribeChannel			Read
DescribeChannelPlacementGroup	medialive:DescribeChannelPlacementGroup			Read
DescribeCluster	medialive:DescribeCluster			Read
DescribeInput	medialive:DescribeInput			Read
DescribeInputDevice	medialive:DescribeInputDevice			Read
DescribeInputDeviceThumbnail	medialive:DescribeInputDeviceThumbnail			Read
DescribeInputSecurityGroup	medialive:DescribeInputSecurityGroup			Read
DescribeMultiplex	medialive:DescribeMultiplex			Read
DescribeMultiplexProgram	medialive:DescribeMultiplexProgram			Read
DescribeNetwork	medialive:DescribeNetwork			Read
DescribeNode	medialive:DescribeNode			Read
DescribeOffering	medialive:DescribeOffering			Read
DescribeReservation	medialive:DescribeReservation			Read
DescribeSchedule	medialive:DescribeSchedule			Read
DescribeSdiSource	medialive:DescribeSdiSource			Read
DescribeThumbnails	medialive:DescribeThumbnails			Read
GetCloudWatchAlarmTemplate	medialive:GetCloudWatchAlarmTemplate			Read
GetCloudWatchAlarmTemplateGroup	medialive:GetCloudWatchAlarmTemplateGroup			Read
GetEventBridgeRuleTemplate	medialive:GetEventBridgeRuleTemplate			Read
GetEventBridgeRuleTemplateGroup	medialive:GetEventBridgeRuleTemplateGroup			Read
GetSignalMap	medialive:GetSignalMap			Read
ListAlerts	medialive:ListAlerts			List
ListChannelPlacementGroups	medialive:ListChannelPlacementGroups			List
ListChannels	medialive:ListChannels			List
ListCloudWatchAlarmTemplateGroups	medialive:ListCloudWatchAlarmTemplateGroups			List
ListCloudWatchAlarmTemplates	medialive:ListCloudWatchAlarmTemplates			List
ListClusterAlerts	medialive:ListClusterAlerts			List
ListClusters	medialive:ListClusters			List
ListEventBridgeRuleTemplateGroups	medialive:ListEventBridgeRuleTemplateGroups			List
ListEventBridgeRuleTemplates	medialive:ListEventBridgeRuleTemplates			List
ListInputDeviceTransfers	medialive:ListInputDeviceTransfers			List
ListInputDevices	medialive:ListInputDevices			List
ListInputSecurityGroups	medialive:ListInputSecurityGroups			List
ListInputs	medialive:ListInputs			List
ListMultiplexAlerts	medialive:ListMultiplexAlerts			List
ListMultiplexPrograms	medialive:ListMultiplexPrograms			List
ListMultiplexes	medialive:ListMultiplexes			List
ListNetworks	medialive:ListNetworks			List
ListNodes	medialive:ListNodes			List
ListOfferings	medialive:ListOfferings			List
ListReservations	medialive:ListReservations			List
ListSdiSources	medialive:ListSdiSources			List
ListSignalMaps	medialive:ListSignalMaps			List
ListTagsForResource	medialive:ListTagsForResource			List
ListVersions	medialive:ListVersions			List
PurchaseOffering	medialive:CreateTags			Tagging, Write
PurchaseOffering	medialive:PurchaseOffering			Write
RebootInputDevice	medialive:RebootInputDevice			Write
RejectInputDeviceTransfer	medialive:RejectInputDeviceTransfer			Write
RestartChannelPipelines	medialive:RestartChannelPipelines			Write
StartChannel	medialive:StartChannel			Write
StartDeleteMonitorDeployment	medialive:StartDeleteMonitorDeployment			Write
StartInputDevice	medialive:StartInputDevice			Write
StartInputDeviceMaintenanceWindow	medialive:StartInputDeviceMaintenanceWindow			Write
StartMonitorDeployment	medialive:StartMonitorDeployment			Write
StartMultiplex	medialive:StartMultiplex			Write
StartUpdateSignalMap	medialive:StartUpdateSignalMap			Write
StopChannel	medialive:StopChannel			Write
StopInputDevice	medialive:StopInputDevice			Write
StopMultiplex	medialive:StopMultiplex			Write
TransferInputDevice	medialive:TransferInputDevice			Write
UpdateAccountConfiguration	medialive:UpdateAccountConfiguration			Write
UpdateChannel	medialive:CreateTags			Tagging, Write
	medialive:UpdateChannel			Write
	iam:PassRole	iam:PassedToService	medialive.amazonaws.com	Write
UpdateChannelClass	medialive:UpdateChannelClass			Write
UpdateChannelPlacementGroup	medialive:UpdateChannelPlacementGroup			Write
UpdateCloudWatchAlarmTemplate	medialive:UpdateCloudWatchAlarmTemplate			Write
UpdateCloudWatchAlarmTemplateGroup	medialive:UpdateCloudWatchAlarmTemplateGroup			Write
UpdateCluster	medialive:UpdateCluster			Write
UpdateEventBridgeRuleTemplate	medialive:UpdateEventBridgeRuleTemplate			Write
UpdateEventBridgeRuleTemplateGroup	medialive:UpdateEventBridgeRuleTemplateGroup			Write
UpdateInput	medialive:UpdateInput			Write
UpdateInput	iam:PassRole	iam:PassedToService	medialive.amazonaws.com	Write
UpdateInputDevice	medialive:UpdateInputDevice			Write
UpdateInputDevice	iam:PassRole	iam:PassedToService	medialive.amazonaws.com	Write
UpdateInputSecurityGroup	medialive:CreateTags			Tagging, Write
UpdateInputSecurityGroup	medialive:UpdateInputSecurityGroup			Write
UpdateMultiplex	medialive:UpdateMultiplex			Write
UpdateMultiplexProgram	medialive:UpdateMultiplexProgram			Write
UpdateNetwork	medialive:UpdateNetwork			Write
UpdateNode	medialive:UpdateNode			Write
UpdateNodeState	medialive:UpdateNodeState			Write
UpdateReservation	medialive:UpdateReservation			Write
UpdateSdiSource	medialive:UpdateSdiSource			Write

Actions defined by AWS Elemental MediaLive

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
AcceptInputDeviceTransfer	Grants permission to accept an input device transfer	input-device*		Write
BatchDelete	Grants permission to delete channels, inputs, input security groups, and multiplexes			Write
BatchStart	Grants permission to start channels and multiplexes			Write
BatchStop	Grants permission to stop channels and multiplexes			Write
BatchUpdateSchedule	Grants permission to add and remove actions from a channel's schedule	channel*	aws:ResourceTag/${TagKey}	Write
CancelInputDeviceTransfer	Grants permission to cancel an input device transfer	input-device*		Write
ClaimDevice	Grants permission to claim an input device	input-device*		Write
CreateChannel	Grants permission to create a channel	channel*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateChannel	Grants permission to create a channel	input*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateChannelPlacementGroup	Grants permission to create a cluster	channel-placement-group*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateChannelPlacementGroup	Grants permission to create a cluster	cluster*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateCloudWatchAlarmTemplate	Grants permission to create a cloudwatch alarm template	cloudwatch-alarm-template*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateCloudWatchAlarmTemplate	Grants permission to create a cloudwatch alarm template	cloudwatch-alarm-template-group*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateCloudWatchAlarmTemplateGroup	Grants permission to create a cloudwatch alarm template group	cloudwatch-alarm-template-group*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateCluster	Grants permission to create a cluster	cluster*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateEventBridgeRuleTemplate	Grants permission to create a eventbridge rule template	eventbridge-rule-template*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateEventBridgeRuleTemplate	Grants permission to create a eventbridge rule template	eventbridge-rule-template-group*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateEventBridgeRuleTemplateGroup	Grants permission to create a eventbridge rule template group	eventbridge-rule-template-group*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateInput	Grants permission to create an input	input*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateInput	Grants permission to create an input	input-security-group*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateInputSecurityGroup	Grants permission to create an input security group	input-security-group*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateMultiplex	Grants permission to create a multiplex	multiplex*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateMultiplexProgram	Grants permission to create a multiplex program	multiplex*	aws:ResourceTag/${TagKey}	Write
CreateNetwork	Grants permission to create a network	network*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateNode	Grants permission to create a node	cluster*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateNode	Grants permission to create a node	node*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateNodeRegistrationScript	Grants permission to create a node registration script	cluster*	aws:ResourceTag/${TagKey}	Write
CreatePartnerInput	Grants permission to create a partner input	input*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateSdiSource	Grants permission to create a SDI source	sdi-source*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateSignalMap	Grants permission to create a signal map	signal-map*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateTags	Grants permission to create tags for channels, inputs, input security groups, multiplexes, reservations, nodes, networks, clusters, channel placement groups, signal maps, SDI sources, template groups, and templates	channel	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		channel-placement-group	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		cloudwatch-alarm-template	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		cloudwatch-alarm-template-group	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		cluster	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		eventbridge-rule-template	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		eventbridge-rule-template-group	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		input	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		input-security-group	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		multiplex	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		network	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		node	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		reservation	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		sdi-source	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		signal-map	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
DeleteChannel	Grants permission to delete a channel	channel*	aws:ResourceTag/${TagKey}	Write
DeleteChannelPlacementGroup	Grants permission to delete a cluster	channel-placement-group*	aws:ResourceTag/${TagKey}	Write
DeleteCloudWatchAlarmTemplate	Grants permission to delete a cloudwatch alarm template	cloudwatch-alarm-template*	aws:ResourceTag/${TagKey}	Write
DeleteCloudWatchAlarmTemplateGroup	Grants permission to delete a cloudwatch alarm template group	cloudwatch-alarm-template-group*	aws:ResourceTag/${TagKey}	Write
DeleteCluster	Grants permission to delete a cluster	cluster*	aws:ResourceTag/${TagKey}	Write
DeleteEventBridgeRuleTemplate	Grants permission to delete a eventbridge rule template	eventbridge-rule-template*	aws:ResourceTag/${TagKey}	Write
DeleteEventBridgeRuleTemplateGroup	Grants permission to delete a eventbridge rule template group	eventbridge-rule-template-group*	aws:ResourceTag/${TagKey}	Write
DeleteInput	Grants permission to delete an input	input*	aws:ResourceTag/${TagKey}	Write
DeleteInputSecurityGroup	Grants permission to delete an input security group	input-security-group*	aws:ResourceTag/${TagKey}	Write
DeleteMultiplex	Grants permission to delete a multiplex	multiplex*	aws:ResourceTag/${TagKey}	Write
DeleteMultiplexProgram	Grants permission to delete a multiplex program	multiplex*	aws:ResourceTag/${TagKey}	Write
DeleteNetwork	Grants permission to delete a network	network*	aws:ResourceTag/${TagKey}	Write
DeleteNode	Grants permission to delete a node	node*	aws:ResourceTag/${TagKey}	Write
DeleteReservation	Grants permission to delete an expired reservation	reservation*	aws:ResourceTag/${TagKey}	Write
DeleteSchedule	Grants permission to delete all schedule actions for a channel	channel*	aws:ResourceTag/${TagKey}	Write
DeleteSdiSource	Grants permission to delete a SDI source	sdi-source*	aws:ResourceTag/${TagKey}	Write
DeleteSignalMap	Grants permission to delete a signal map	signal-map*	aws:ResourceTag/${TagKey}	Write
DeleteTags	Grants permission to delete tags from channels, inputs, input security groups, multiplexes, reservations, nodes, clusters, networks, channel placement groups, SDI source, signal maps, template groups, and templates	channel	aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		channel-placement-group	aws:ResourceTag/${TagKey} aws:TagKeys
		cloudwatch-alarm-template	aws:ResourceTag/${TagKey} aws:TagKeys
		cloudwatch-alarm-template-group	aws:ResourceTag/${TagKey} aws:TagKeys
		cluster	aws:ResourceTag/${TagKey} aws:TagKeys
		eventbridge-rule-template	aws:ResourceTag/${TagKey} aws:TagKeys
		eventbridge-rule-template-group	aws:ResourceTag/${TagKey} aws:TagKeys
		input	aws:ResourceTag/${TagKey} aws:TagKeys
		input-security-group	aws:ResourceTag/${TagKey} aws:TagKeys
		multiplex	aws:ResourceTag/${TagKey} aws:TagKeys
		network	aws:ResourceTag/${TagKey} aws:TagKeys
		node	aws:ResourceTag/${TagKey} aws:TagKeys
		reservation	aws:ResourceTag/${TagKey} aws:TagKeys
		sdi-source	aws:ResourceTag/${TagKey} aws:TagKeys
		signal-map	aws:ResourceTag/${TagKey} aws:TagKeys
DescribeAccountConfiguration	Grants permission to view the account configuration of the customer			Read
DescribeChannel	Grants permission to get details about a channel	channel*	aws:ResourceTag/${TagKey}	Read
DescribeChannelPlacementGroup	Grants permission to describe a channel placement group	channel-placement-group*	aws:ResourceTag/${TagKey}	Read
DescribeCluster	Grants permission to describe a cluster	cluster*	aws:ResourceTag/${TagKey}	Read
DescribeInput	Grants permission to describe an input	input*	aws:ResourceTag/${TagKey}	Read
DescribeInputDevice	Grants permission to describe an input device	input-device*		Read
DescribeInputDeviceThumbnail	Grants permission to describe an input device thumbnail	input-device*		Read
DescribeInputSecurityGroup	Grants permission to describe an input security group	input-security-group*	aws:ResourceTag/${TagKey}	Read
DescribeMultiplex	Grants permission to describe a multiplex	multiplex*	aws:ResourceTag/${TagKey}	Read
DescribeMultiplexProgram	Grants permission to describe a multiplex program	multiplex*	aws:ResourceTag/${TagKey}	Read
DescribeNetwork	Grants permission to describe a network	network*	aws:ResourceTag/${TagKey}	Read
DescribeNode	Grants permission to describe a node	node*	aws:ResourceTag/${TagKey}	Read
DescribeOffering	Grants permission to get details about a reservation offering	offering*		Read
DescribeReservation	Grants permission to get details about a reservation	reservation*	aws:ResourceTag/${TagKey}	Read
DescribeSchedule	Grants permission to view a list of actions scheduled on a channel	channel*	aws:ResourceTag/${TagKey}	Read
DescribeSdiSource	Grants permission to describe a SDI source	sdi-source*	aws:ResourceTag/${TagKey}	Read
DescribeThumbnails	Grants permission to view the thumbnails for a channel	channel*	aws:ResourceTag/${TagKey}	Read
GetCloudWatchAlarmTemplate	Grants permission to get a cloudwatch alarm template	cloudwatch-alarm-template*	aws:ResourceTag/${TagKey}	Read
GetCloudWatchAlarmTemplateGroup	Grants permission to get a cloudwatch alarm template group	cloudwatch-alarm-template-group*	aws:ResourceTag/${TagKey}	Read
GetEventBridgeRuleTemplate	Grants permission to get a eventbridge rule template	eventbridge-rule-template*	aws:ResourceTag/${TagKey}	Read
GetEventBridgeRuleTemplateGroup	Grants permission to get a eventbridge rule template group	eventbridge-rule-template-group*	aws:ResourceTag/${TagKey}	Read
GetSignalMap	Grants permission to get a signal map	signal-map*	aws:ResourceTag/${TagKey}	Read
ListAlerts	Grants permission to list channel alerts			List
ListChannelPlacementGroups	Grants permission to list channel placement groups			List
ListChannels	Grants permission to list channels			List
ListCloudWatchAlarmTemplateGroups	Grants permission to list cloudwatch alarm template groups			List
ListCloudWatchAlarmTemplates	Grants permission to list cloudwatch alarm templates			List
ListClusterAlerts	Grants permission to list cluster alerts			List
ListClusters	Grants permission to list clusters			List
ListEventBridgeRuleTemplateGroups	Grants permission to list eventbridge rule template groups			List
ListEventBridgeRuleTemplates	Grants permission to list eventbridge rule templates			List
ListInputDeviceTransfers	Grants permission to list input device transfers			List
ListInputDevices	Grants permission to list input devices			List
ListInputSecurityGroups	Grants permission to list input security groups			List
ListInputs	Grants permission to list inputs			List
ListMultiplexAlerts	Grants permission to list multiplex alerts			List
ListMultiplexPrograms	Grants permission to list multiplex programs			List
ListMultiplexes	Grants permission to list multiplexes			List
ListNetworks	Grants permission to list networks			List
ListNodes	Grants permission to list nodes			List
ListOfferings	Grants permission to list reservation offerings			List
ListReservations	Grants permission to list reservations			List
ListSdiSources	Grants permission to list SDI sources			List
ListSignalMaps	Grants permission to list signal maps			List
ListTagsForResource	Grants permission to list tags for channels, inputs, input security groups, multiplexes, reservations, nodes, clusters, networks, channel placement groups, SDI sources, signal maps, template groups, and templates	channel	aws:ResourceTag/${TagKey}	List
		channel-placement-group	aws:ResourceTag/${TagKey}
		cloudwatch-alarm-template	aws:ResourceTag/${TagKey}
		cloudwatch-alarm-template-group	aws:ResourceTag/${TagKey}
		cluster	aws:ResourceTag/${TagKey}
		eventbridge-rule-template	aws:ResourceTag/${TagKey}
		eventbridge-rule-template-group	aws:ResourceTag/${TagKey}
		input	aws:ResourceTag/${TagKey}
		input-security-group	aws:ResourceTag/${TagKey}
		multiplex	aws:ResourceTag/${TagKey}
		network	aws:ResourceTag/${TagKey}
		node	aws:ResourceTag/${TagKey}
		reservation	aws:ResourceTag/${TagKey}
		sdi-source	aws:ResourceTag/${TagKey}
		signal-map	aws:ResourceTag/${TagKey}
ListVersions	Grants permission to list available versions of MediaLive			List
PollAnywhere	Grants permission to the node to poll the cluster			Write
PurchaseOffering	Grants permission to purchase a reservation offering	offering*	aws:RequestTag/${TagKey} aws:TagKeys	Write
PurchaseOffering	Grants permission to purchase a reservation offering	reservation*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
RebootInputDevice	Grants permission to reboot an input device	input-device*		Write
RejectInputDeviceTransfer	Grants permission to reject an input device transfer	input-device*		Write
RestartChannelPipelines	Grants permission to restart pipelines on a running channel	channel*	aws:ResourceTag/${TagKey}	Write
StartChannel	Grants permission to start a channel	channel*	aws:ResourceTag/${TagKey}	Write
StartDeleteMonitorDeployment	Grants permission to start deletion of a signal map's monitor	signal-map*	aws:ResourceTag/${TagKey}	Write
StartInputDevice	Grants permission to start an input device attached to a MediaConnect flow	input-device*		Write
StartInputDeviceMaintenanceWindow	Grants permission to start a maintenance window for an input device	input-device*		Write
StartMonitorDeployment	Grants permission to start a signal map monitor deployment	signal-map*	aws:ResourceTag/${TagKey}	Write
StartMultiplex	Grants permission to start a multiplex	multiplex*	aws:ResourceTag/${TagKey}	Write
StartUpdateSignalMap	Grants permission to start a signal map update	signal-map*	aws:ResourceTag/${TagKey}	Write
StopChannel	Grants permission to stop a channel	channel*	aws:ResourceTag/${TagKey}	Write
StopInputDevice	Grants permission to stop an input device attached to a MediaConnect flow	input-device*		Write
StopMultiplex	Grants permission to stop a multiplex	multiplex*	aws:ResourceTag/${TagKey}	Write
SubmitAnywhereStateChange	Grants permission to the node to submit state changes to the cluster			Write
TransferInputDevice	Grants permission to transfer an input device	input-device*		Write
UpdateAccountConfiguration	Grants permission to update a customer's account configuration			Write
UpdateChannel	Grants permission to update a channel	channel*	aws:ResourceTag/${TagKey}	Write
UpdateChannelClass	Grants permission to update the class of a channel	channel*	aws:ResourceTag/${TagKey}	Write
UpdateChannelPlacementGroup	Grants permission to update a node	channel-placement-group*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
UpdateCloudWatchAlarmTemplate	Grants permission to update a cloudwatch alarm template	cloudwatch-alarm-template*	aws:ResourceTag/${TagKey}	Write
UpdateCloudWatchAlarmTemplate	Grants permission to update a cloudwatch alarm template	cloudwatch-alarm-template-group*	aws:ResourceTag/${TagKey}	Write
UpdateCloudWatchAlarmTemplateGroup	Grants permission to update a cloudwatch alarm template group	cloudwatch-alarm-template-group*	aws:ResourceTag/${TagKey}	Write
UpdateCluster	Grants permission to update a cluster	cluster*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
UpdateEventBridgeRuleTemplate	Grants permission to update a eventbridge rule template	eventbridge-rule-template*	aws:ResourceTag/${TagKey}	Write
UpdateEventBridgeRuleTemplate	Grants permission to update a eventbridge rule template	eventbridge-rule-template-group*	aws:ResourceTag/${TagKey}	Write
UpdateEventBridgeRuleTemplateGroup	Grants permission to update a eventbridge rule template group	eventbridge-rule-template-group*	aws:ResourceTag/${TagKey}	Write
UpdateInput	Grants permission to update an input	input*	aws:ResourceTag/${TagKey}	Write
UpdateInputDevice	Grants permission to update an input device	input-device*		Write
UpdateInputSecurityGroup	Grants permission to update an input security group	input-security-group*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
UpdateMultiplex	Grants permission to update a multiplex	multiplex*	aws:ResourceTag/${TagKey}	Write
UpdateMultiplexProgram	Grants permission to update a multiplex program	multiplex*	aws:ResourceTag/${TagKey}	Write
UpdateNetwork	Grants permission to update the state of a node	network*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
UpdateNode	Grants permission to update a node	node*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
UpdateNodeState	Grants permission to update the state of a node	node*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
UpdateReservation	Grants permission to update a reservation	reservation*	aws:ResourceTag/${TagKey}	Write
UpdateSdiSource	Grants permission to update the state of a sdi source	sdi-source*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write

Resource types defined by AWS Elemental MediaLive

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
channel	arn:${Partition}:medialive:${Region}:${Account}:channel:${ChannelId}	aws:ResourceTag/${TagKey}
channel-placement-group	arn:${Partition}:medialive:${Region}:${Account}:channelPlacementGroup:${ClusterId}/${ChannelPlacementGroupId}	aws:ResourceTag/${TagKey}
cloudwatch-alarm-template	arn:${Partition}:medialive:${Region}:${Account}:cloudwatch-alarm-template:${CloudWatchAlarmTemplateId}	aws:ResourceTag/${TagKey}
cloudwatch-alarm-template-group	arn:${Partition}:medialive:${Region}:${Account}:cloudwatch-alarm-template-group:${CloudWatchAlarmTemplateGroupId}	aws:ResourceTag/${TagKey}
cluster	arn:${Partition}:medialive:${Region}:${Account}:cluster:${ClusterId}	aws:ResourceTag/${TagKey}
eventbridge-rule-template	arn:${Partition}:medialive:${Region}:${Account}:eventbridge-rule-template:${EventBridgeRuleTemplateId}	aws:ResourceTag/${TagKey}
eventbridge-rule-template-group	arn:${Partition}:medialive:${Region}:${Account}:eventbridge-rule-template-group:${EventBridgeRuleTemplateGroupId}	aws:ResourceTag/${TagKey}
input	arn:${Partition}:medialive:${Region}:${Account}:input:${InputId}	aws:ResourceTag/${TagKey}
input-device	arn:${Partition}:medialive:${Region}:${Account}:inputDevice:${DeviceId}
input-security-group	arn:${Partition}:medialive:${Region}:${Account}:inputSecurityGroup:${InputSecurityGroupId}	aws:ResourceTag/${TagKey}
multiplex	arn:${Partition}:medialive:${Region}:${Account}:multiplex:${MultiplexId}	aws:ResourceTag/${TagKey}
network	arn:${Partition}:medialive:${Region}:${Account}:network:${NetworkId}	aws:ResourceTag/${TagKey}
node	arn:${Partition}:medialive:${Region}:${Account}:node:${ClusterId}/${NodeId}	aws:ResourceTag/${TagKey}
offering	arn:${Partition}:medialive:${Region}:${Account}:offering:${OfferingId}
reservation	arn:${Partition}:medialive:${Region}:${Account}:reservation:${ReservationId}	aws:ResourceTag/${TagKey}
sdi-source	arn:${Partition}:medialive:${Region}:${Account}:sdiSource:${SdiSourceId}	aws:ResourceTag/${TagKey}
signal-map	arn:${Partition}:medialive:${Region}:${Account}:signal-map:${SignalMapId}	aws:ResourceTag/${TagKey}

Condition keys for AWS Elemental MediaLive

AWS Elemental MediaLive defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys	Description	Type
aws:RequestTag/${TagKey}	Filters access by the tags that are passed in the request	String
aws:ResourceTag/${TagKey}	Filters access by the tags associated with the resource	String
aws:TagKeys	Filters access by the tag keys that are passed in the request	ArrayOfString

Warning Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Document Conventions

AWS Elemental MediaConvert (mediaconvert)

AWS Elemental MediaPackage (mediapackage)