本文属于机器翻译版本。若本译文内容与英语原文存在差异，则一律以英文原文为准。

# 的操作、资源和条件键 AWS Database Migration Service
<a name="list_awsdatabasemigrationservice"></a>

AWS Database Migration Service（服务前缀:`dms`）提供以下特定于服务的资源、操作和条件上下文密钥，供在 IAM 权限策略中使用。

参考：
+ 了解如何[配置该服务](https://docs.aws.amazon.com/dms/latest/userguide/)。
+ 查看[适用于该服务的 API 操作列表](https://docs.aws.amazon.com/dms/latest/APIReference/)。
+ 了解如何[使用 IAM](https://docs.aws.amazon.com/dms/latest/userguide/CHAP_Security.html) 权限策略保护该服务及其资源。

**Topics**
+ [操作定义为 AWS Database Migration Service](#awsdatabasemigrationservice-actions-as-permissions)
+ [定义的资源类型 AWS Database Migration Service](#awsdatabasemigrationservice-resources-for-iam-policies)
+ [的条件密钥 AWS Database Migration Service](#awsdatabasemigrationservice-policy-keys)

## 操作定义为 AWS Database Migration Service
<a name="awsdatabasemigrationservice-actions-as-permissions"></a>

您可以在 IAM 策略语句的 `Action` 元素中指定以下操作。可以使用策略授予在 AWS中执行操作的权限。您在策略中使用一项操作时，通常使用相同的名称允许或拒绝对 API 操作或 CLI 命令的访问。但在某些情况下，单一动作可控制对多项操作的访问。还有某些操作需要多种不同的动作。

操作表的**访问级别**列描述如何对操作进行分类（列出、读取、权限管理或标记）。此分类可以帮助您了解当您在策略中使用操作时，相应操作授予的访问级别。有关访问级别的更多信息，请参阅[策略摘要中的访问级别](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_understand-policy-summary-access-level-summaries.html)。

操作表的**资源类型**列指示每项操作是否支持资源级权限。如果该列没有任何值，您必须在策略语句的 `Resource` 元素中指定策略应用的所有资源（“\*”）。通过在 IAM policy 中使用条件来筛选访问权限，以控制是否可以在资源或请求中使用特定标签键。如果操作具有一个或多个必需资源，则调用方必须具有使用这些资源来使用该操作的权限。必需资源在表中以星号 (\*) 表示。如果您在 IAM policy 中使用 `Resource` 元素限制资源访问权限，则必须为每种必需的资源类型添加 ARN 或模式。某些操作支持多种资源类型。如果资源类型是可选的（未指示为必需），则可以选择使用一种可选资源类型。

操作表的**条件键**列包括可以在策略语句的 `Condition` 元素中指定的键。有关与服务资源关联的条件键的更多信息，请参阅资源类型表的**条件键**列。

操作表的**依赖操作**列显示成功调用操作可能需要的其他权限。除了操作本身的权限以外，可能还需要这些权限。若某个操作指定依赖操作，则这些依赖关系可能适用于为该操作定义的其他资源，而不仅仅是表中列出的第一个资源。

**注意**  
资源条件键在[资源类型](#awsdatabasemigrationservice-resources-for-iam-policies)表中列出。您可以在操作表的**资源类型（\* 为必需）**列中找到应用于某项操作的资源类型的链接。资源类型表中的资源类型包括**条件密钥**列，这是应用于操作表中操作的资源条件键。

有关下表中各列的详细信息，请参阅[操作表](reference_policies_actions-resources-contextkeys.html#actions_table)。




- **  [AddTagsToResource](https://docs.aws.amazon.com/dms/latest/APIReference/API_AddTagsToResource.html) **
  - **描述:** 授予向 DMS 资源（包括复制实例、终端节点、安全组和迁移任务）添加元数据标签的权限
  - **访问级别:** Tagging
  - **资源类型（\* 为必需）:**  [Certificate](#awsdatabasemigrationservice-Certificate)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [DataMigration](#awsdatabasemigrationservice-DataMigration)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [DataProvider](#awsdatabasemigrationservice-DataProvider)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [Endpoint](#awsdatabasemigrationservice-Endpoint)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [EventSubscription](#awsdatabasemigrationservice-EventSubscription)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [InstanceProfile](#awsdatabasemigrationservice-InstanceProfile)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [MigrationProject](#awsdatabasemigrationservice-MigrationProject)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [ReplicationConfig](#awsdatabasemigrationservice-ReplicationConfig)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [ReplicationInstance](#awsdatabasemigrationservice-ReplicationInstance)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [ReplicationSubnetGroup](#awsdatabasemigrationservice-ReplicationSubnetGroup)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [ReplicationTask](#awsdatabasemigrationservice-ReplicationTask)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [ReplicationTaskAssessmentRun](#awsdatabasemigrationservice-ReplicationTaskAssessmentRun)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [ReplicationTaskIndividualAssessment](#awsdatabasemigrationservice-ReplicationTaskIndividualAssessment)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  / **条件键:**  [aws:ResourceTag/${TagKey}](#awsdatabasemigrationservice-aws_ResourceTag___TagKey_) <br /> [aws:RequestTag/${TagKey}](#awsdatabasemigrationservice-aws_RequestTag___TagKey_) <br /> [aws:TagKeys](#awsdatabasemigrationservice-aws_TagKeys) <br /> [dms:req-tag/${TagKey}](#awsdatabasemigrationservice-dms_req-tag___TagKey_)  / **相关操作:** 

- **  [ApplyPendingMaintenanceAction](https://docs.aws.amazon.com/dms/latest/APIReference/API_ApplyPendingMaintenanceAction.html) **
  - **描述:** 授予将待处理的维护操作应用于资源（例如，应用于复制实例）的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [ReplicationInstance\*](#awsdatabasemigrationservice-ReplicationInstance) 
  - **条件键:** 
  - **相关操作:** 

- **  [AssociateExtensionPack](https://docs.aws.amazon.com/dms/latest/APIReference/API_StartExtensionPackAssociation.html) **
  - **描述:** 授予权限以关联扩展包
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [MigrationProject\*](#awsdatabasemigrationservice-MigrationProject) 
  - **条件键:** 
  - **相关操作:** 

- **  [BatchStartRecommendations](https://docs.aws.amazon.com/dms/latest/APIReference/API_BatchStartRecommendations.html) **
  - **描述:** 授予权限以开始分析最多 20 个源数据库，从而为每个源数据库推荐目标引擎
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [CancelMetadataModelConversion](https://docs.aws.amazon.com/dms/latest/APIReference/API_CancelMetadataModelConversion.html) **
  - **描述:** 授予取消启动的单个元数据模型转换操作的权限 StartMetadataModelConversion
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [MigrationProject\*](#awsdatabasemigrationservice-MigrationProject) 
  - **条件键:** 
  - **相关操作:** 

- **  [CancelMetadataModelCreation](https://docs.aws.amazon.com/dms/latest/APIReference/API_CancelMetadataModelCreation.html) **
  - **描述:** 授予取消启动的单个元数据模型创建操作的权限 StartMetadataModelCreation
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [MigrationProject\*](#awsdatabasemigrationservice-MigrationProject) 
  - **条件键:** 
  - **相关操作:** 

- **  [CancelReplicationTaskAssessmentRun](https://docs.aws.amazon.com/dms/latest/APIReference/API_CancelReplicationTaskAssessmentRun.html) **
  - **描述:** 授予取消单个迁移前评估运行的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [ReplicationTaskAssessmentRun\*](#awsdatabasemigrationservice-ReplicationTaskAssessmentRun) 
  - **条件键:** 
  - **相关操作:** 

- **  [CreateDataMigration](https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html) **
  - **描述:** 授予使用提供的设置创建数据库迁移的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [MigrationProject\*](#awsdatabasemigrationservice-MigrationProject)  / **条件键:**  / **相关操作:**  iam:PassRole 
  - **资源类型（\* 为必需）:**  / **条件键:**  [aws:ResourceTag/${TagKey}](#awsdatabasemigrationservice-aws_ResourceTag___TagKey_) <br /> [aws:RequestTag/${TagKey}](#awsdatabasemigrationservice-aws_RequestTag___TagKey_) <br /> [aws:TagKeys](#awsdatabasemigrationservice-aws_TagKeys) <br /> [dms:req-tag/${TagKey}](#awsdatabasemigrationservice-dms_req-tag___TagKey_)  / **相关操作:** 

- **  [CreateDataProvider](https://docs.aws.amazon.com/dms/latest/APIReference/API_CreateDataProvider.html) **
  - **描述:** 授予权限以使用提供的设置创建数据提供程序
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:** 
  - **条件键:**  [aws:ResourceTag/${TagKey}](#awsdatabasemigrationservice-aws_ResourceTag___TagKey_) <br /> [aws:RequestTag/${TagKey}](#awsdatabasemigrationservice-aws_RequestTag___TagKey_) <br /> [aws:TagKeys](#awsdatabasemigrationservice-aws_TagKeys) <br /> [dms:req-tag/${TagKey}](#awsdatabasemigrationservice-dms_req-tag___TagKey_) 
  - **相关操作:**  iam:PassRole 

- **  [CreateEndpoint](https://docs.aws.amazon.com/dms/latest/APIReference/API_CreateEndpoint.html) **
  - **描述:** 授予使用提供的设置创建终端节点的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:** 
  - **条件键:**  [aws:ResourceTag/${TagKey}](#awsdatabasemigrationservice-aws_ResourceTag___TagKey_) <br /> [aws:RequestTag/${TagKey}](#awsdatabasemigrationservice-aws_RequestTag___TagKey_) <br /> [aws:TagKeys](#awsdatabasemigrationservice-aws_TagKeys) <br /> [dms:req-tag/${TagKey}](#awsdatabasemigrationservice-dms_req-tag___TagKey_) 
  - **相关操作:**  iam:PassRole 

- **  [CreateEventSubscription](https://docs.aws.amazon.com/dms/latest/APIReference/API_CreateEventSubscription.html) **
  - **描述:** 授予创建 AWS DMS 事件通知订阅的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:** 
  - **条件键:**  [aws:ResourceTag/${TagKey}](#awsdatabasemigrationservice-aws_ResourceTag___TagKey_) <br /> [aws:RequestTag/${TagKey}](#awsdatabasemigrationservice-aws_RequestTag___TagKey_) <br /> [aws:TagKeys](#awsdatabasemigrationservice-aws_TagKeys) <br /> [dms:req-tag/${TagKey}](#awsdatabasemigrationservice-dms_req-tag___TagKey_) 
  - **相关操作:** 

- **  [CreateFleetAdvisorCollector](https://docs.aws.amazon.com/dms/latest/APIReference/API_CreateFleetAdvisorCollector.html) **
  - **描述:** 授予使用指定参数创建 Fleet Advisor 收集器的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:**  iam:PassRole 

- **  [CreateInstanceProfile](https://docs.aws.amazon.com/dms/latest/APIReference/API_CreateInstanceProfile.html) **
  - **描述:** 授予权限以使用提供的设置创建实例配置文件
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:** 
  - **条件键:**  [aws:ResourceTag/${TagKey}](#awsdatabasemigrationservice-aws_ResourceTag___TagKey_) <br /> [aws:RequestTag/${TagKey}](#awsdatabasemigrationservice-aws_RequestTag___TagKey_) <br /> [aws:TagKeys](#awsdatabasemigrationservice-aws_TagKeys) <br /> [dms:req-tag/${TagKey}](#awsdatabasemigrationservice-dms_req-tag___TagKey_) 
  - **相关操作:**  iam:PassRole 

- **  [CreateMigrationProject](https://docs.aws.amazon.com/dms/latest/APIReference/API_CreateMigrationProject.html) **
  - **描述:** 授予权限以使用提供的设置创建迁移项目
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [DataProvider\*](#awsdatabasemigrationservice-DataProvider)  / **条件键:**  / **相关操作:**  iam:PassRole 
  - **资源类型（\* 为必需）:**  [InstanceProfile\*](#awsdatabasemigrationservice-InstanceProfile)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  / **条件键:**  [aws:ResourceTag/${TagKey}](#awsdatabasemigrationservice-aws_ResourceTag___TagKey_) <br /> [aws:RequestTag/${TagKey}](#awsdatabasemigrationservice-aws_RequestTag___TagKey_) <br /> [aws:TagKeys](#awsdatabasemigrationservice-aws_TagKeys) <br /> [dms:req-tag/${TagKey}](#awsdatabasemigrationservice-dms_req-tag___TagKey_)  / **相关操作:** 

- **  [CreateOutboundIntegration](https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html) [仅权限]**
  - **描述:** 授予 DMS 创建资源以实现与自管理数据库的零 ETL 集成的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:** 
  - **条件键:**  [aws:ResourceTag/${TagKey}](#awsdatabasemigrationservice-aws_ResourceTag___TagKey_) <br /> [aws:RequestTag/${TagKey}](#awsdatabasemigrationservice-aws_RequestTag___TagKey_) <br /> [aws:TagKeys](#awsdatabasemigrationservice-aws_TagKeys) <br /> [dms:req-tag/${TagKey}](#awsdatabasemigrationservice-dms_req-tag___TagKey_) 
  - **相关操作:**  iam:PassRole 

- **  [CreateReplicationConfig](https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html) **
  - **描述:** 授予使用提供的设置创建复制配置的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [Endpoint\*](#awsdatabasemigrationservice-Endpoint)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  / **条件键:**  [aws:ResourceTag/${TagKey}](#awsdatabasemigrationservice-aws_ResourceTag___TagKey_) <br /> [aws:RequestTag/${TagKey}](#awsdatabasemigrationservice-aws_RequestTag___TagKey_) <br /> [aws:TagKeys](#awsdatabasemigrationservice-aws_TagKeys) <br /> [dms:req-tag/${TagKey}](#awsdatabasemigrationservice-dms_req-tag___TagKey_)  / **相关操作:** 

- **  [CreateReplicationInstance](https://docs.aws.amazon.com/dms/latest/APIReference/API_CreateReplicationInstance.html) **
  - **描述:** 授予使用指定参数创建复制实例的权限
  - **访问级别:** Write
  - **资源类型（\* 为必需）:** 
  - **条件键:**  [aws:ResourceTag/${TagKey}](#awsdatabasemigrationservice-aws_ResourceTag___TagKey_) <br /> [aws:RequestTag/${TagKey}](#awsdatabasemigrationservice-aws_RequestTag___TagKey_) <br /> [aws:TagKeys](#awsdatabasemigrationservice-aws_TagKeys) <br /> [dms:req-tag/${TagKey}](#awsdatabasemigrationservice-dms_req-tag___TagKey_) 
  - **相关操作:**  iam:PassRole 

- **  [CreateReplicationSubnetGroup](https://docs.aws.amazon.com/dms/latest/APIReference/API_CreateReplicationSubnetGroup.html) **
  - **描述:** 授予在 VPC 中的子网 ID 列表给定的情况下创建复制子网组的权限
  - **访问级别:** Write
  - **资源类型（\* 为必需）:** 
  - **条件键:**  [aws:ResourceTag/${TagKey}](#awsdatabasemigrationservice-aws_ResourceTag___TagKey_) <br /> [aws:RequestTag/${TagKey}](#awsdatabasemigrationservice-aws_RequestTag___TagKey_) <br /> [aws:TagKeys](#awsdatabasemigrationservice-aws_TagKeys) <br /> [dms:req-tag/${TagKey}](#awsdatabasemigrationservice-dms_req-tag___TagKey_) 
  - **相关操作:** 

- **  [CreateReplicationTask](https://docs.aws.amazon.com/dms/latest/APIReference/API_CreateReplicationTask.html) **
  - **描述:** 授予使用指定参数创建复制任务的权限
  - **访问级别:** Write
  - **资源类型（\* 为必需）:**  [Endpoint\*](#awsdatabasemigrationservice-Endpoint)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [ReplicationInstance\*](#awsdatabasemigrationservice-ReplicationInstance)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  / **条件键:**  [aws:ResourceTag/${TagKey}](#awsdatabasemigrationservice-aws_ResourceTag___TagKey_) <br /> [aws:RequestTag/${TagKey}](#awsdatabasemigrationservice-aws_RequestTag___TagKey_) <br /> [aws:TagKeys](#awsdatabasemigrationservice-aws_TagKeys) <br /> [dms:req-tag/${TagKey}](#awsdatabasemigrationservice-dms_req-tag___TagKey_)  / **相关操作:** 

- **  [DeleteCertificate](https://docs.aws.amazon.com/dms/latest/APIReference/API_DeleteCertificate.html) **
  - **描述:** 授予删除指定证书的权限
  - **访问级别:** Write
  - **资源类型（\* 为必需）:**  [Certificate\*](#awsdatabasemigrationservice-Certificate) 
  - **条件键:** 
  - **相关操作:** 

- **  [DeleteConnection](https://docs.aws.amazon.com/dms/latest/APIReference/API_DeleteConnection.html) **
  - **描述:** 授予删除复制实例和终端节点之间的指定连接的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [Endpoint\*](#awsdatabasemigrationservice-Endpoint)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [ReplicationInstance\*](#awsdatabasemigrationservice-ReplicationInstance)  / **条件键:**  / **相关操作:** 

- **  [DeleteDataMigration](https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html) **
  - **描述:** 授予删除指定的数据库迁移的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [DataMigration\*](#awsdatabasemigrationservice-DataMigration) 
  - **条件键:** 
  - **相关操作:** 

- **  [DeleteDataProvider](https://docs.aws.amazon.com/dms/latest/APIReference/API_DeleteDataProvider.html) **
  - **描述:** 授予权限以删除指定的数据提供程序
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [DataProvider\*](#awsdatabasemigrationservice-DataProvider) 
  - **条件键:** 
  - **相关操作:** 

- **  [DeleteEndpoint](https://docs.aws.amazon.com/dms/latest/APIReference/API_DeleteEndpoint.html) **
  - **描述:** 授予删除指定终端节点的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [Endpoint\*](#awsdatabasemigrationservice-Endpoint) 
  - **条件键:** 
  - **相关操作:** 

- **  [DeleteEventSubscription](https://docs.aws.amazon.com/dms/latest/APIReference/API_DeleteEventSubscription.html) **
  - **描述:** 授予删除 AWS DMS 活动订阅的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [EventSubscription\*](#awsdatabasemigrationservice-EventSubscription) 
  - **条件键:** 
  - **相关操作:** 

- **  [DeleteFleetAdvisorCollector](https://docs.aws.amazon.com/dms/latest/APIReference/API_DeleteFleetAdvisorCollector.html) **
  - **描述:** 授予删除指定 Fleet Advisor 收集器的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [DeleteFleetAdvisorDatabases](https://docs.aws.amazon.com/dms/latest/APIReference/API_DeleteFleetAdvisorDatabases.html) **
  - **描述:** 授予删除指定 Fleet Advisor 数据库的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [DeleteInstanceProfile](https://docs.aws.amazon.com/dms/latest/APIReference/API_DeleteInstanceProfile.html) **
  - **描述:** 授予权限以删除指定的实例配置文件
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [InstanceProfile\*](#awsdatabasemigrationservice-InstanceProfile) 
  - **条件键:** 
  - **相关操作:** 

- **  [DeleteMigrationProject](https://docs.aws.amazon.com/dms/latest/APIReference/API_DeleteMigrationProject.html) **
  - **描述:** 授予权限以删除指定的迁移项目
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [MigrationProject\*](#awsdatabasemigrationservice-MigrationProject) 
  - **条件键:** 
  - **相关操作:** 

- **  [DeleteReplicationConfig](https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html) **
  - **描述:** 授予删除指定的复制配置的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [ReplicationConfig\*](#awsdatabasemigrationservice-ReplicationConfig) 
  - **条件键:** 
  - **相关操作:** 

- **  [DeleteReplicationInstance](https://docs.aws.amazon.com/dms/latest/APIReference/API_DeleteReplicationInstance.html) **
  - **描述:** 授予删除指定复制实例的权限
  - **访问级别:** Write
  - **资源类型（\* 为必需）:**  [ReplicationInstance\*](#awsdatabasemigrationservice-ReplicationInstance) 
  - **条件键:** 
  - **相关操作:** 

- **  [DeleteReplicationSubnetGroup](https://docs.aws.amazon.com/dms/latest/APIReference/API_DeleteReplicationSubnetGroup.html) **
  - **描述:** 授予删除子网组的权限
  - **访问级别:** Write
  - **资源类型（\* 为必需）:**  [ReplicationSubnetGroup\*](#awsdatabasemigrationservice-ReplicationSubnetGroup) 
  - **条件键:** 
  - **相关操作:** 

- **  [DeleteReplicationTask](https://docs.aws.amazon.com/dms/latest/APIReference/API_DeleteReplicationTask.html) **
  - **描述:** 授予删除指定复制任务的权限
  - **访问级别:** Write
  - **资源类型（\* 为必需）:**  [ReplicationTask\*](#awsdatabasemigrationservice-ReplicationTask) 
  - **条件键:** 
  - **相关操作:** 

- **  [DeleteReplicationTaskAssessmentRun](https://docs.aws.amazon.com/dms/latest/APIReference/API_DeleteReplicationTaskAssessmentRun.html) **
  - **描述:** 授予删除单个迁移前评估运行记录的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [ReplicationTaskAssessmentRun\*](#awsdatabasemigrationservice-ReplicationTaskAssessmentRun) 
  - **条件键:** 
  - **相关操作:** 

- **  [DescribeAccountAttributes](https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeAccountAttributes.html) **
  - **描述:** 授予列出客户账户所有 AWS DMS 属性的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [DescribeApplicableIndividualAssessments](https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeApplicableIndividualAssessments.html) **
  - **描述:** 授予列出可为新迁移前评估运行指定的单个评估的权限
  - **访问级别:** Read
  - **资源类型（\* 为必需）:**  [ReplicationInstance](#awsdatabasemigrationservice-ReplicationInstance)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [ReplicationTask](#awsdatabasemigrationservice-ReplicationTask)  / **条件键:**  / **相关操作:** 

- **  [DescribeCertificates](https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeCertificates.html) **
  - **描述:** 授予提供证书描述的权限
  - **访问级别:** Read
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [DescribeConnections](https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeConnections.html) **
  - **描述:** 授予描述在复制实例与终端节点之间已建立的连接状态的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [DescribeConversionConfiguration](https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeConversionConfiguration.html) **
  - **描述:** 授予返回有关 DMS 架构转换项目配置信息的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:**  [MigrationProject\*](#awsdatabasemigrationservice-MigrationProject) 
  - **条件键:** 
  - **相关操作:** 

- **  [DescribeDataMigrations](https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html) **
  - **描述:** 授予返回指定区域中您账户的数据库迁移信息的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [DescribeEndpointSettings](https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeEndpointSettings.html) **
  - **描述:** 授予在为特定数据库引擎创建终端节点时返回可能的终端节点设置的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [DescribeEndpointTypes](https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeEndpointTypes.html) **
  - **描述:** 授予返回有关可用终端节点类型的信息的权限
  - **访问级别:** Read
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [DescribeEndpoints](https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeEndpoints.html) **
  - **描述:** 授予返回有关当前区域账户终端节点信息的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [DescribeEngineVersions](https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeEngineVersions.html) **
  - **描述:** 授予权限以返回 DMS 复制实例可用版本的相关信息
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [DescribeEventCategories](https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeEventCategories.html) **
  - **描述:** 授予列出所有事件源类型的类别（或如果指定，则列出指定源类型的类别）的权限
  - **访问级别:** Read
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [DescribeEventSubscriptions](https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeEventSubscriptions.html) **
  - **描述:** 授予列出客户账户的所有订阅描述的权限
  - **访问级别:** Read
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [DescribeEvents](https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeEvents.html) **
  - **描述:** 授予列出给定源标识符和源类型事件的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [DescribeFleetAdvisorCollectors](https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeFleetAdvisorCollectors.html) **
  - **描述:** 授予根据筛选条件设置返回账户中 Fleet Advisor 收集器分页列表的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [DescribeFleetAdvisorDatabases](https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeFleetAdvisorDatabases.html) **
  - **描述:** 授予根据筛选条件设置返回账户中 Fleet Advisor 数据库分页列表的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [DescribeFleetAdvisorLsaAnalysis](https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeFleetAdvisorLsaAnalysis.html) **
  - **描述:** 授予返回由 Fleet Advisor 收集器生成的大规模评估 (LSA) 分析描述的分页列表的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [DescribeFleetAdvisorSchemaObjectSummary](https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeFleetAdvisorSchemaObjectSummary.html) **
  - **描述:** 授予返回 Fleet Advisor 收集器根据筛选条件设置发现的架构描述的分页列表的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [DescribeFleetAdvisorSchemas](https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeFleetAdvisorSchemas.html) **
  - **描述:** 授予返回 Fleet Advisor 收集器根据筛选条件设置发现的架构分页列表的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [DescribeMetadataModel](https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeMetadataModel.html) **
  - **描述:** 授予获取有关指定元数据模型的详细信息的权限，包括其定义和目标数据库中相应的转换对象（如果适用）
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:**  [MigrationProject\*](#awsdatabasemigrationservice-MigrationProject) 
  - **条件键:** 
  - **相关操作:** 

- **  [DescribeMetadataModelChildren](https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeMetadataModelChildren.html) **
  - **描述:** 授予获取数据库层次结构中指定元数据模型的子元数据模型列表的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:**  [MigrationProject\*](#awsdatabasemigrationservice-MigrationProject) 
  - **条件键:** 
  - **相关操作:** 

- **  [DescribeMetadataModelCreations](https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeMetadataModelCreations.html) **
  - **描述:** 授予返回迁移项目元数据模型创建请求的分页列表的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:**  [MigrationProject\*](#awsdatabasemigrationservice-MigrationProject) 
  - **条件键:** 
  - **相关操作:** 

- **  [DescribeMetadataModelImports](https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeMetadataModelImports.html) **
  - **描述:** 授予返回有关启动迁移项目元数据模型导入操作信息的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:**  [MigrationProject\*](#awsdatabasemigrationservice-MigrationProject) 
  - **条件键:** 
  - **相关操作:** 

- **  [DescribeOrderableReplicationInstances](https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeOrderableReplicationInstances.html) **
  - **描述:** 授予返回有关可在指定区域内创建的复制实例类型信息的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [DescribePendingMaintenanceActions](https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribePendingMaintenanceActions.html) **
  - **描述:** 授予返回待处理维护操作相关信息的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [DescribeRecommendationLimitations](https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeFleetAdvisorLsaAnalysis.html) **
  - **描述:** 授予返回目标 AWS 引擎推荐限制的分页列表的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [DescribeRecommendations](https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeRecommendations.html) **
  - **描述:** 授予权限以返回源数据库的目标引擎推荐说明的分页列表
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [DescribeRefreshSchemasStatus](https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeRefreshSchemasStatus.html) **
  - **描述:** 授予返回 RefreshSchemas 操作状态的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:**  [Endpoint\*](#awsdatabasemigrationservice-Endpoint) 
  - **条件键:** 
  - **相关操作:** 

- **  [DescribeReplicationConfigs](https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html) **
  - **描述:** 授予描述复制配置的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [DescribeReplicationInstanceTaskLogs](https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeReplicationInstanceTaskLogs.html) **
  - **描述:** 授予返回有关指定任务的任务日志信息的权限
  - **访问级别:** Read
  - **资源类型（\* 为必需）:**  [ReplicationInstance\*](#awsdatabasemigrationservice-ReplicationInstance)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  / **条件键:**  [aws:ResourceTag/${TagKey}](#awsdatabasemigrationservice-aws_ResourceTag___TagKey_) <br /> [aws:TagKeys](#awsdatabasemigrationservice-aws_TagKeys)  / **相关操作:** 

- **  [DescribeReplicationInstances](https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeReplicationInstances.html) **
  - **描述:** 授予返回有关当前区域中账户的复制实例信息的权限
  - **访问级别:** Read
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [DescribeReplicationSubnetGroups](https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeReplicationSubnetGroups.html) **
  - **描述:** 授予返回有关复制子网组信息的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [DescribeReplicationTableStatistics](https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html) **
  - **描述:** 授予描述复制表统计信息的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:**  [ReplicationConfig\*](#awsdatabasemigrationservice-ReplicationConfig) 
  - **条件键:** 
  - **相关操作:** 

- **  [DescribeReplicationTaskAssessmentResults](https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeReplicationTaskAssessmentResults.html) **
  - **描述:** 授予从 Amazon S3 返回最新任务评估结果的权限
  - **访问级别:** Read
  - **资源类型（\* 为必需）:**  [ReplicationTask](#awsdatabasemigrationservice-ReplicationTask) 
  - **条件键:** 
  - **相关操作:** 

- **  [DescribeReplicationTaskAssessmentRuns](https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeReplicationTaskAssessmentRuns.html) **
  - **描述:** 授予根据过滤器设置返回迁移前评估运行的分页列表的权限
  - **访问级别:** Read
  - **资源类型（\* 为必需）:**  [ReplicationInstance](#awsdatabasemigrationservice-ReplicationInstance)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [ReplicationTask](#awsdatabasemigrationservice-ReplicationTask)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [ReplicationTaskAssessmentRun](#awsdatabasemigrationservice-ReplicationTaskAssessmentRun)  / **条件键:**  / **相关操作:** 

- **  [DescribeReplicationTaskIndividualAssessments](https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeReplicationTaskIndividualAssessments.html) **
  - **描述:** 授予根据筛选条件设置返回单个评估的分页列表的权限
  - **访问级别:** Read
  - **资源类型（\* 为必需）:**  [ReplicationTask](#awsdatabasemigrationservice-ReplicationTask)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [ReplicationTaskAssessmentRun](#awsdatabasemigrationservice-ReplicationTaskAssessmentRun)  / **条件键:**  / **相关操作:** 

- **  [DescribeReplicationTasks](https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeReplicationTasks.html) **
  - **描述:** 授予返回有关您账户在当前区域的复制任务信息的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [DescribeReplications](https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html) **
  - **描述:** 授予描述复制的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [DescribeSchemas](https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeSchemas.html) **
  - **描述:** 授予返回有关指定终端节点的架构信息的权限
  - **访问级别:** Read
  - **资源类型（\* 为必需）:**  [Endpoint\*](#awsdatabasemigrationservice-Endpoint) 
  - **条件键:** 
  - **相关操作:** 

- **  [DescribeTableStatistics](https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeTableStatistics.html) **
  - **描述:** 授予返回有关数据库迁移任务的表统计数据（包括表名称、插入的行、更新的行和删除的行）的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:**  [ReplicationTask\*](#awsdatabasemigrationservice-ReplicationTask) 
  - **条件键:** 
  - **相关操作:** 

- **  [ExportMetadataModelAssessment](https://docs.aws.amazon.com/dms/latest/APIReference/API_ExportMetadataModelAssessment.html) **
  - **描述:** 授予权限以导出指定的元数据模型评估
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [MigrationProject](#awsdatabasemigrationservice-MigrationProject) 
  - **条件键:** 
  - **相关操作:** 

- **  [GetTargetSelectionRules](https://docs.aws.amazon.com/dms/latest/APIReference/API_GetTargetSelectionRules.html) **
  - **描述:** 授予将源选择规则转换为目标对应规则以进行架构转换操作的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:**  [MigrationProject\*](#awsdatabasemigrationservice-MigrationProject) 
  - **条件键:** 
  - **相关操作:** 

- **  [ImportCertificate](https://docs.aws.amazon.com/dms/latest/APIReference/API_ImportCertificate.html) **
  - **描述:** 授予上传指定证书的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:** 
  - **条件键:**  [aws:ResourceTag/${TagKey}](#awsdatabasemigrationservice-aws_ResourceTag___TagKey_) <br /> [aws:RequestTag/${TagKey}](#awsdatabasemigrationservice-aws_RequestTag___TagKey_) <br /> [aws:TagKeys](#awsdatabasemigrationservice-aws_TagKeys) 
  - **相关操作:** 

- **  [ListDataProviders](https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeDataProviders.html) **
  - **描述:** 授予列出数据提供者的 AWS DMS 属性的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [ListExtensionPacks](https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeExtensionPackAssociations.html) **
  - **描述:** 授予列出扩展 AWS 包的 DMS 属性的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:**  [MigrationProject](#awsdatabasemigrationservice-MigrationProject) 
  - **条件键:** 
  - **相关操作:** 

- **  [ListInstanceProfiles](https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeInstanceProfiles.html) **
  - **描述:** 授予列出实例配置 AWS 文件的 DMS 属性的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:**  [InstanceProfile](#awsdatabasemigrationservice-InstanceProfile) 
  - **条件键:** 
  - **相关操作:** 

- **  [ListMetadataModelAssessmentActionItems](https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html) [仅权限]**
  - **描述:** 授予列出元数据模型评估措施项的 AWS DMS 属性的权限。注意。尽管需要执行此操作 StartMetadataModelImport，但后者目前并未授权上述架构转换操作
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:**  [MigrationProject](#awsdatabasemigrationservice-MigrationProject) 
  - **条件键:** 
  - **相关操作:**  dms:StartMetadataModelImport 

- **  [ListMetadataModelAssessments](https://docs.aws.amazon.com/dms/latest/APIReference/API_ListMetadataModelExports.html) **
  - **描述:** 授予列出元数据模型评估的 AWS DMS 属性的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:**  [MigrationProject](#awsdatabasemigrationservice-MigrationProject) 
  - **条件键:** 
  - **相关操作:** 

- **  [ListMetadataModelConversions](https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeMetadataModelConversions.html) **
  - **描述:** 授予列出元数据模型转换的 AWS DMS 属性的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:**  [MigrationProject](#awsdatabasemigrationservice-MigrationProject) 
  - **条件键:** 
  - **相关操作:** 

- **  [ListMetadataModelExports](https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html) **
  - **描述:** 授予列出元数据模型导出的 AWS DMS 属性的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:**  [MigrationProject](#awsdatabasemigrationservice-MigrationProject) 
  - **条件键:** 
  - **相关操作:** 

- **  [ListMigrationProjects](https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html) **
  - **描述:** 授予列出迁移项目的 AWS DMS 属性的权限。注意。尽管此操作需要 DescribeMigrationProjects 和 DescribeConversionConfiguration，但这两个必需的操作目前都未授权上述架构转换操作
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:**  [DataProvider](#awsdatabasemigrationservice-DataProvider)  / **条件键:**  / **相关操作:**  dms:DescribeConversionConfiguration 
  - **资源类型（\* 为必需）:**  [InstanceProfile](#awsdatabasemigrationservice-InstanceProfile)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [MigrationProject](#awsdatabasemigrationservice-MigrationProject)  / **条件键:**  / **相关操作:** 

- **  [ListTagsForResource](https://docs.aws.amazon.com/dms/latest/APIReference/API_ListTagsForResource.html) **
  - **描述:** 授予列出 AWS DMS 资源所有标签的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:**  [Certificate](#awsdatabasemigrationservice-Certificate)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [DataMigration](#awsdatabasemigrationservice-DataMigration)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [DataProvider](#awsdatabasemigrationservice-DataProvider)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [Endpoint](#awsdatabasemigrationservice-Endpoint)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [EventSubscription](#awsdatabasemigrationservice-EventSubscription)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [InstanceProfile](#awsdatabasemigrationservice-InstanceProfile)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [MigrationProject](#awsdatabasemigrationservice-MigrationProject)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [ReplicationConfig](#awsdatabasemigrationservice-ReplicationConfig)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [ReplicationInstance](#awsdatabasemigrationservice-ReplicationInstance)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [ReplicationSubnetGroup](#awsdatabasemigrationservice-ReplicationSubnetGroup)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [ReplicationTask](#awsdatabasemigrationservice-ReplicationTask)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [ReplicationTaskAssessmentRun](#awsdatabasemigrationservice-ReplicationTaskAssessmentRun)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [ReplicationTaskIndividualAssessment](#awsdatabasemigrationservice-ReplicationTaskIndividualAssessment)  / **条件键:**  / **相关操作:** 

- **  [ModifyDataMigration](https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html) **
  - **描述:** 授予修改指定的数据库迁移的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [DataMigration\*](#awsdatabasemigrationservice-DataMigration) 
  - **条件键:** 
  - **相关操作:**  iam:PassRole 

- **  [ModifyEndpoint](https://docs.aws.amazon.com/dms/latest/APIReference/API_ModifyEndpoint.html) **
  - **描述:** 授予权限以修改指定端点
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [Endpoint\*](#awsdatabasemigrationservice-Endpoint)  / **条件键:**  / **相关操作:**  iam:PassRole 
  - **资源类型（\* 为必需）:**  [Certificate](#awsdatabasemigrationservice-Certificate)  / **条件键:**  / **相关操作:** 

- **  [ModifyEventSubscription](https://docs.aws.amazon.com/dms/latest/APIReference/API_ModifyEventSubscription.html) **
  - **描述:** 授予修改现有 AWS DMS 事件通知订阅的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [ModifyFleetAdvisorCollector](https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html) [仅权限]**
  - **描述:** 授予修改指定 Fleet Advisor 收集器的名称和描述的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [ModifyFleetAdvisorCollectorStatuses](https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html) [仅权限]**
  - **描述:** 授予修改指定 Fleet Advisor 收集器状态的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [ModifyOutboundIntegration](https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html) [仅权限]**
  - **描述:** 授予 DMS 修改资源的权限，以实现与自管理数据库的零 ETL 集成
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:**  iam:PassRole 

- **  [ModifyReplicationConfig](https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html) **
  - **描述:** 授予修改指定的复制配置的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [ReplicationConfig\*](#awsdatabasemigrationservice-ReplicationConfig) 
  - **条件键:** 
  - **相关操作:** 

- **  [ModifyReplicationInstance](https://docs.aws.amazon.com/dms/latest/APIReference/API_ModifyReplicationInstance.html) **
  - **描述:** 授予修改复制实例以应用新设置的权限
  - **访问级别:** Write
  - **资源类型（\* 为必需）:**  [ReplicationInstance\*](#awsdatabasemigrationservice-ReplicationInstance) 
  - **条件键:** 
  - **相关操作:** 

- **  [ModifyReplicationSubnetGroup](https://docs.aws.amazon.com/dms/latest/APIReference/API_ModifyReplicationSubnetGroup.html) **
  - **描述:** 授予修改指定复制子网组设置的权限
  - **访问级别:** Write
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [ModifyReplicationTask](https://docs.aws.amazon.com/dms/latest/APIReference/API_ModifyReplicationTask.html) **
  - **描述:** 授予修改指定复制任务的权限
  - **访问级别:** Write
  - **资源类型（\* 为必需）:**  [ReplicationTask\*](#awsdatabasemigrationservice-ReplicationTask) 
  - **条件键:** 
  - **相关操作:** 

- **  [MoveReplicationTask](https://docs.aws.amazon.com/dms/latest/APIReference/API_MoveReplicationTask.html) **
  - **描述:** 授予将指定复制任务移动到其他复制实例的权限
  - **访问级别:** Write
  - **资源类型（\* 为必需）:**  [ReplicationInstance\*](#awsdatabasemigrationservice-ReplicationInstance)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [ReplicationTask\*](#awsdatabasemigrationservice-ReplicationTask)  / **条件键:**  / **相关操作:** 

- **  [RebootReplicationInstance](https://docs.aws.amazon.com/dms/latest/APIReference/API_RebootReplicationInstance.html) **
  - **描述:** 授予重启复制实例的权限。重启将导致暂时中断，直到复制实例再次变为可用
  - **访问级别:** Write
  - **资源类型（\* 为必需）:**  [ReplicationInstance\*](#awsdatabasemigrationservice-ReplicationInstance) 
  - **条件键:** 
  - **相关操作:** 

- **  [RefreshSchemas](https://docs.aws.amazon.com/dms/latest/APIReference/API_RefreshSchemas.html) **
  - **描述:** 授予为指定终端节点填充架构的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [Endpoint\*](#awsdatabasemigrationservice-Endpoint)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [ReplicationInstance\*](#awsdatabasemigrationservice-ReplicationInstance)  / **条件键:**  / **相关操作:** 

- **  [ReloadReplicationTables](https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html) **
  - **描述:** 授予使用复制源重新加载目标数据库表的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [ReplicationConfig\*](#awsdatabasemigrationservice-ReplicationConfig) 
  - **条件键:** 
  - **相关操作:** 

- **  [ReloadTables](https://docs.aws.amazon.com/dms/latest/APIReference/API_ReloadTables.html) **
  - **描述:** 授予使用源数据重新加载目标数据库表的权限
  - **访问级别:** Write
  - **资源类型（\* 为必需）:**  [ReplicationTask\*](#awsdatabasemigrationservice-ReplicationTask) 
  - **条件键:** 
  - **相关操作:** 

- **  [RemoveTagsFromResource](https://docs.aws.amazon.com/dms/latest/APIReference/API_RemoveTagsFromResource.html) **
  - **描述:** 授予从 DMS 资源中删除元数据标签的权限
  - **访问级别:** 标签
  - **资源类型（\* 为必需）:**  [Certificate](#awsdatabasemigrationservice-Certificate)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [DataMigration](#awsdatabasemigrationservice-DataMigration)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [DataProvider](#awsdatabasemigrationservice-DataProvider)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [Endpoint](#awsdatabasemigrationservice-Endpoint)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [EventSubscription](#awsdatabasemigrationservice-EventSubscription)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [InstanceProfile](#awsdatabasemigrationservice-InstanceProfile)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [MigrationProject](#awsdatabasemigrationservice-MigrationProject)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [ReplicationConfig](#awsdatabasemigrationservice-ReplicationConfig)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [ReplicationInstance](#awsdatabasemigrationservice-ReplicationInstance)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [ReplicationSubnetGroup](#awsdatabasemigrationservice-ReplicationSubnetGroup)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [ReplicationTask](#awsdatabasemigrationservice-ReplicationTask)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [ReplicationTaskAssessmentRun](#awsdatabasemigrationservice-ReplicationTaskAssessmentRun)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [ReplicationTaskIndividualAssessment](#awsdatabasemigrationservice-ReplicationTaskIndividualAssessment)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  / **条件键:**  [aws:ResourceTag/${TagKey}](#awsdatabasemigrationservice-aws_ResourceTag___TagKey_) <br /> [aws:RequestTag/${TagKey}](#awsdatabasemigrationservice-aws_RequestTag___TagKey_) <br /> [aws:TagKeys](#awsdatabasemigrationservice-aws_TagKeys)  / **相关操作:** 

- **  [RunFleetAdvisorLsaAnalysis](https://docs.aws.amazon.com/dms/latest/APIReference/API_RunFleetAdvisorLsaAnalysis.html) **
  - **描述:** 授予对账户中的每个 Fleet Advisor 收集器进行大规模评估 (LSA) 分析的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [StartDataMigration](https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html) **
  - **描述:** 授予启动数据库迁移的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [DataMigration\*](#awsdatabasemigrationservice-DataMigration) 
  - **条件键:** 
  - **相关操作:** 

- **  [StartMetadataModelAssessment](https://docs.aws.amazon.com/dms/latest/APIReference/API_StartMetadataModelAssessment.html) **
  - **描述:** 授予权限以启动元数据模型的新评估
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [MigrationProject\*](#awsdatabasemigrationservice-MigrationProject) 
  - **条件键:** 
  - **相关操作:** 

- **  [StartMetadataModelConversion](https://docs.aws.amazon.com/dms/latest/APIReference/API_StartMetadataModelConversion.html) **
  - **描述:** 授予权限以启动元数据模型的新转换
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [MigrationProject\*](#awsdatabasemigrationservice-MigrationProject) 
  - **条件键:** 
  - **相关操作:** 

- **  [StartMetadataModelCreation](https://docs.aws.amazon.com/dms/latest/APIReference/API_StartMetadataModelCreation.html) **
  - **描述:** 授予使用架构转换操作的指定属性创建给定类型的源元数据模型的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [MigrationProject\*](#awsdatabasemigrationservice-MigrationProject) 
  - **条件键:** 
  - **相关操作:** 

- **  [StartMetadataModelExportAsScripts](https://docs.aws.amazon.com/dms/latest/APIReference/API_StartMetadataModelExportAsScript.html) **
  - **描述:** 授予权限以将元数据模型的新导出作为脚本启动
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [MigrationProject\*](#awsdatabasemigrationservice-MigrationProject) 
  - **条件键:** 
  - **相关操作:** 

- **  [StartMetadataModelExportToTarget](https://docs.aws.amazon.com/dms/latest/APIReference/API_StartMetadataModelExportToTarget.html) **
  - **描述:** 授予权限以将元数据模型的新导出启动到目标
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [MigrationProject\*](#awsdatabasemigrationservice-MigrationProject) 
  - **条件键:** 
  - **相关操作:** 

- **  [StartMetadataModelImport](https://docs.aws.amazon.com/dms/latest/APIReference/API_StartMetadataModelImport.html) **
  - **描述:** 授予权限以启动元数据模型的新导入
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [MigrationProject\*](#awsdatabasemigrationservice-MigrationProject) 
  - **条件键:** 
  - **相关操作:** 

- **  [StartRecommendations](https://docs.aws.amazon.com/dms/latest/APIReference/API_StartRecommendations.html) **
  - **描述:** 授予权限以启动对源数据库的分析，从而提供目标引擎的建议
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [StartReplication](https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html) **
  - **描述:** 授予启动复制的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [ReplicationConfig\*](#awsdatabasemigrationservice-ReplicationConfig) 
  - **条件键:** 
  - **相关操作:** 

- **  [StartReplicationTask](https://docs.aws.amazon.com/dms/latest/APIReference/API_StartReplicationTask.html) **
  - **描述:** 授予启动复制任务的权限
  - **访问级别:** Write
  - **资源类型（\* 为必需）:**  [ReplicationTask\*](#awsdatabasemigrationservice-ReplicationTask) 
  - **条件键:** 
  - **相关操作:** 

- **  [StartReplicationTaskAssessment](https://docs.aws.amazon.com/dms/latest/APIReference/API_StartReplicationTaskAssessment.html) **
  - **描述:** 授予为源数据库中的不支持的数据类型启动复制任务评估的权限
  - **访问级别:** Write
  - **资源类型（\* 为必需）:**  [ReplicationTask\*](#awsdatabasemigrationservice-ReplicationTask) 
  - **条件键:** 
  - **相关操作:** 

- **  [StartReplicationTaskAssessmentRun](https://docs.aws.amazon.com/dms/latest/APIReference/API_StartReplicationTaskAssessmentRun.html) **
  - **描述:** 授予为迁移任务的一个或多个单独评估启动新的迁移前评估运行的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [ReplicationTask\*](#awsdatabasemigrationservice-ReplicationTask) 
  - **条件键:** 
  - **相关操作:**  iam:PassRole 

- **  [StopDataMigration](https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html) **
  - **描述:** 授予停止数据库迁移的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [DataMigration\*](#awsdatabasemigrationservice-DataMigration) 
  - **条件键:** 
  - **相关操作:** 

- **  [StopReplication](https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html) **
  - **描述:** 授予停止复制的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [ReplicationConfig\*](#awsdatabasemigrationservice-ReplicationConfig) 
  - **条件键:** 
  - **相关操作:** 

- **  [StopReplicationTask](https://docs.aws.amazon.com/dms/latest/APIReference/API_StopReplicationTask.html) **
  - **描述:** 授予停止复制任务的权限
  - **访问级别:** Write
  - **资源类型（\* 为必需）:**  [ReplicationTask\*](#awsdatabasemigrationservice-ReplicationTask) 
  - **条件键:** 
  - **相关操作:** 

- **  [TestConnection](https://docs.aws.amazon.com/dms/latest/APIReference/API_TestConnection.html) **
  - **描述:** 授予测试复制实例和终端节点之间连接的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:**  [Endpoint\*](#awsdatabasemigrationservice-Endpoint)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [ReplicationInstance\*](#awsdatabasemigrationservice-ReplicationInstance)  / **条件键:**  / **相关操作:** 

- **  [UpdateConversionConfiguration](https://docs.aws.amazon.com/dms/latest/APIReference/API_ModifyConversionConfiguration.html) **
  - **描述:** 授予权限以更新转换配置
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [MigrationProject\*](#awsdatabasemigrationservice-MigrationProject) 
  - **条件键:** 
  - **相关操作:** 

- **  [UpdateDataProvider](https://docs.aws.amazon.com/dms/latest/APIReference/API_ModifyDataProvider.html) **
  - **描述:** 授予权限以更新指定的数据提供程序
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [DataProvider\*](#awsdatabasemigrationservice-DataProvider) 
  - **条件键:** 
  - **相关操作:** 

- **  [UpdateInstanceProfile](https://docs.aws.amazon.com/dms/latest/APIReference/API_ModifyInstanceProfile.html) **
  - **描述:** 授予权限以更新指定的实例配置文件
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [InstanceProfile\*](#awsdatabasemigrationservice-InstanceProfile) 
  - **条件键:** 
  - **相关操作:** 

- **  [UpdateMigrationProject](https://docs.aws.amazon.com/dms/latest/APIReference/API_ModifyMigrationProject.html) **
  - **描述:** 授予权限以更新指定的迁移项目
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [MigrationProject\*](#awsdatabasemigrationservice-MigrationProject) 
  - **条件键:** 
  - **相关操作:** 

- **  [UpdateSubscriptionsToEventBridge](https://docs.aws.amazon.com/dms/latest/APIReference/API_UpdateSubscriptionsToEventBridge.html) **
  - **描述:** 授予将 DMS 订阅迁移到 Eventbridge 的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [UploadFileMetadataList](https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html) [仅权限]**
  - **描述:** 授予将文件上传到 Amazon S3 桶的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 



## 定义的资源类型 AWS Database Migration Service
<a name="awsdatabasemigrationservice-resources-for-iam-policies"></a>

以下资源类型是由该服务定义的，可以在 IAM 权限策略语句的 `Resource` 元素中使用这些资源类型。[操作表](#awsdatabasemigrationservice-actions-as-permissions)中的每个操作指定了可以使用该操作指定的资源类型。您也可以在策略中包含条件键，从而定义资源类型。这些键显示在资源类型表的最后一列。有关下表中各列的详细信息，请参阅[资源类型表](reference_policies_actions-resources-contextkeys.html#resources_table)。



| 资源类型 | ARN | 条件键 | 
| --- | --- | --- | 
|   [Certificate](https://docs.aws.amazon.com/dms/latest/APIReference/API_Certificate.html)  |  arn:${Partition}:dms:${Region}:${Account}:cert:\*  |  [aws:ResourceTag/${TagKey}](#awsdatabasemigrationservice-aws_ResourceTag___TagKey_) <br /> [dms:cert-tag/${TagKey}](#awsdatabasemigrationservice-dms_cert-tag___TagKey_)  | 
|   [DataProvider](https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html)  |  arn:${Partition}:dms:${Region}:${Account}:data-provider:\*  |  [aws:ResourceTag/${TagKey}](#awsdatabasemigrationservice-aws_ResourceTag___TagKey_) <br /> [dms:data-provider-tag/${TagKey}](#awsdatabasemigrationservice-dms_data-provider-tag___TagKey_)  | 
|   [DataMigration](https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html)  |  arn:${Partition}:dms:${Region}:${Account}:data-migration:\*  |  [aws:ResourceTag/${TagKey}](#awsdatabasemigrationservice-aws_ResourceTag___TagKey_) <br /> [dms:data-migration-tag/${TagKey}](#awsdatabasemigrationservice-dms_data-migration-tag___TagKey_)  | 
|   [Endpoint](https://docs.aws.amazon.com/dms/latest/APIReference/API_Endpoint.html)  |  arn:${Partition}:dms:${Region}:${Account}:endpoint:\*  |  [aws:ResourceTag/${TagKey}](#awsdatabasemigrationservice-aws_ResourceTag___TagKey_) <br /> [dms:endpoint-tag/${TagKey}](#awsdatabasemigrationservice-dms_endpoint-tag___TagKey_)  | 
|   [EventSubscription](https://docs.aws.amazon.com/dms/latest/APIReference/API_EventSubscription.html)  |  arn:${Partition}:dms:${Region}:${Account}:es:\*  |  [aws:ResourceTag/${TagKey}](#awsdatabasemigrationservice-aws_ResourceTag___TagKey_) <br /> [dms:es-tag/${TagKey}](#awsdatabasemigrationservice-dms_es-tag___TagKey_)  | 
|   [InstanceProfile](https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html)  |  arn:${Partition}:dms:${Region}:${Account}:instance-profile:\*  |  [aws:ResourceTag/${TagKey}](#awsdatabasemigrationservice-aws_ResourceTag___TagKey_) <br /> [dms:instance-profile-tag/${TagKey}](#awsdatabasemigrationservice-dms_instance-profile-tag___TagKey_)  | 
|   [MigrationProject](https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html)  |  arn:${Partition}:dms:${Region}:${Account}:migration-project:\*  |  [aws:ResourceTag/${TagKey}](#awsdatabasemigrationservice-aws_ResourceTag___TagKey_) <br /> [dms:migration-project-tag/${TagKey}](#awsdatabasemigrationservice-dms_migration-project-tag___TagKey_)  | 
|   [ReplicationConfig](https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html)  |  arn:${Partition}:dms:${Region}:${Account}:replication-config:\*  |  [aws:ResourceTag/${TagKey}](#awsdatabasemigrationservice-aws_ResourceTag___TagKey_) <br /> [dms:replication-config-tag/${TagKey}](#awsdatabasemigrationservice-dms_replication-config-tag___TagKey_)  | 
|   [ReplicationInstance](https://docs.aws.amazon.com/dms/latest/APIReference/API_ReplicationInstance.html)  |  arn:${Partition}:dms:${Region}:${Account}:rep:\*  |  [aws:ResourceTag/${TagKey}](#awsdatabasemigrationservice-aws_ResourceTag___TagKey_) <br /> [dms:rep-tag/${TagKey}](#awsdatabasemigrationservice-dms_rep-tag___TagKey_)  | 
|   [ReplicationSubnetGroup](https://docs.aws.amazon.com/dms/latest/APIReference/API_ReplicationSubnetGroup.html)  |  arn:${Partition}:dms:${Region}:${Account}:subgrp:\*  |  [aws:ResourceTag/${TagKey}](#awsdatabasemigrationservice-aws_ResourceTag___TagKey_) <br /> [dms:subgrp-tag/${TagKey}](#awsdatabasemigrationservice-dms_subgrp-tag___TagKey_)  | 
|   [ReplicationTask](https://docs.aws.amazon.com/dms/latest/APIReference/API_ReplicationTask.html)  |  arn:${Partition}:dms:${Region}:${Account}:task:\*  |  [aws:ResourceTag/${TagKey}](#awsdatabasemigrationservice-aws_ResourceTag___TagKey_) <br /> [dms:task-tag/${TagKey}](#awsdatabasemigrationservice-dms_task-tag___TagKey_)  | 
|   [ReplicationTaskAssessmentRun](https://docs.aws.amazon.com/dms/latest/APIReference/API_ReplicationTaskAssessmentRun.html)  |  arn:${Partition}:dms:${Region}:${Account}:assessment-run:\*  |  [aws:ResourceTag/${TagKey}](#awsdatabasemigrationservice-aws_ResourceTag___TagKey_) <br /> [dms:assessment-run-tag/${TagKey}](#awsdatabasemigrationservice-dms_assessment-run-tag___TagKey_)  | 
|   [ReplicationTaskIndividualAssessment](https://docs.aws.amazon.com/dms/latest/APIReference/API_ReplicationTaskIndividualAssessment.html)  |  arn:${Partition}:dms:${Region}:${Account}:individual-assessment:\*  |  [aws:ResourceTag/${TagKey}](#awsdatabasemigrationservice-aws_ResourceTag___TagKey_) <br /> [dms:individual-assessment-tag/${TagKey}](#awsdatabasemigrationservice-dms_individual-assessment-tag___TagKey_)  | 

## 的条件密钥 AWS Database Migration Service
<a name="awsdatabasemigrationservice-policy-keys"></a>

AWS Database Migration Service 定义了以下可用于 IAM 策略`Condition`元素的条件键。您可以使用这些键进一步细化应用策略语句的条件。有关下表中各列的详细信息，请参阅[条件键表](reference_policies_actions-resources-contextkeys.html#context_keys_table)。

要查看适用于所有服务的全局条件键，请参阅 [AWS 全局条件上下文键](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html)。



| 条件键 | 描述 | Type | 
| --- | --- | --- | 
|   [aws:RequestTag/${TagKey}](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag)  | 根据在请求中是否具有标签键值对来筛选访问权限 | 字符串 | 
|   [aws:ResourceTag/${TagKey}](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag)  | 按是否存在附加到资源的标签键值对筛选访问权限 | 字符串 | 
|   [aws:TagKeys](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys)  | 根据在请求中是否具有标签键来筛选访问 | ArrayOfString | 
|   [dms:assessment-run-tag/${TagKey}](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsdatabasemigrationservice.html#awsdatabasemigrationservice-dms_assessment-run-tag___TagKey_)  | 根据请求中是否存在标签键值对来筛选访问权限 AssessmentRun | 字符串 | 
|   [dms:cert-tag/${TagKey}](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsdatabasemigrationservice.html#awsdatabasemigrationservice--dms_cert-tag___TagKey_)  | 根据在 Certificate 请求中是否具有标签键值对来筛选访问权限 | 字符串 | 
|   [dms:data-migration-tag/${TagKey}](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsdatabasemigrationservice.html#awsdatabasemigrationservice--dms_data-migration-tag___TagKey_)  | 根据请求中是否存在标签键值对来筛选访问权限 DataMigration | 字符串 | 
|   [dms:data-provider-tag/${TagKey}](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsdatabasemigrationservice.html#awsdatabasemigrationservice--dms_dp-tag___TagKey_)  | 根据请求中是否存在标签键值对来筛选访问权限 DataProvider | 字符串 | 
|   [dms:endpoint-tag/${TagKey}](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsdatabasemigrationservice.html#awsdatabasemigrationservice-dms_endpoint-tag___TagKey_)  | 根据在 Endpoint 请求中是否具有标签键值对来筛选访问权限 | 字符串 | 
|   [dms:es-tag/${TagKey}](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsdatabasemigrationservice.html#awsdatabasemigrationservice-dms_es-tag___TagKey_)  | 根据请求中是否存在标签键值对来筛选访问权限 EventSubscription | 字符串 | 
|   [dms:individual-assessment-tag/${TagKey}](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsdatabasemigrationservice.html#awsdatabasemigrationservice-dms_individual-assessment-tag___TagKey_)  | 根据请求中是否存在标签键值对来筛选访问权限 IndividualAssessment | 字符串 | 
|   [dms:instance-profile-tag/${TagKey}](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsdatabasemigrationservice.html#awsdatabasemigrationservice--dms_ip-tag___TagKey_)  | 根据请求中是否存在标签键值对来筛选访问权限 InstanceProfile | 字符串 | 
|   [dms:migration-project-tag/${TagKey}](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsdatabasemigrationservice.html#awsdatabasemigrationservice--dms_mp-tag___TagKey_)  | 根据请求中是否存在标签键值对来筛选访问权限 MigrationProject | 字符串 | 
|   [dms:rep-tag/${TagKey}](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsdatabasemigrationservice.html#awsdatabasemigrationservice-dms_rep-tag___TagKey_)  | 根据请求中是否存在标签键值对来筛选访问权限 ReplicationInstance | 字符串 | 
|   [dms:replication-config-tag/${TagKey}](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsdatabasemigrationservice.html#awsdatabasemigrationservice-dms_replication-config-tag___TagKey_)  | 根据请求中是否存在标签键值对来筛选访问权限 ReplicationConfig | 字符串 | 
|   [dms:req-tag/${TagKey}](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsdatabasemigrationservice.html#awsdatabasemigrationservice-dms_req-tag___TagKey_)  | 根据在给定请求中是否具有标签键值对来筛选访问权限 | 字符串 | 
|   [dms:subgrp-tag/${TagKey}](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsdatabasemigrationservice.html#awsdatabasemigrationservice-dms_subgrp-tag___TagKey_)  | 根据请求中是否存在标签键值对来筛选访问权限 ReplicationSubnetGroup | 字符串 | 
|   [dms:task-tag/${TagKey}](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsdatabasemigrationservice.html#awsdatabasemigrationservice-dms_task-tag___TagKey_)  | 根据请求中是否存在标签键值对来筛选访问权限 ReplicationTask | 字符串 |