AWS 的 受管政策 AWS Data Exchange - AWS Data Exchange 使用者指南
AWSDataExchangeFullAccessAWSDataExchangeProviderFullAccessAWSDataExchangeReadOnlyAWSDataExchangeServiceRolePolicyForLicenseManagementAWSDataExchangeServiceRolePolicyForOrganizationDiscoveryAWSDataExchangeSubscriberFullAccessAWSDataExchangeDataGrantOwnerFullAccessAWSDataExchangeDataGrantReceiverFullAccess政策更新

本文為英文版的機器翻譯版本，如內容有任何歧義或不一致之處，概以英文版為準。

AWS 的 受管政策 AWS Data Exchange

AWS 受管政策是由 AWS AWS .managed 政策建立和管理的獨立政策旨在為許多常見使用案例提供許可，以便您可以開始將許可指派給使用者、群組和角色。

請記住， AWS 受管政策可能不會授予特定使用案例的最低權限許可，因為這些許可可供所有 AWS 客戶使用。我們建議您定義使用案例專屬的客戶管理政策，以便進一步減少許可。

您無法變更 AWS 受管政策中定義的許可。如果 AWS 更新受管政策中 AWS 定義的許可，則更新會影響政策連接的所有主體身分 （使用者、群組和角色）。 AWS 最有可能在 AWS 服務 啟動新的 或現有 服務可用的新API操作時更新受 AWS 管政策。

如需詳細資訊，請參閱 IAM 使用者指南 中的 AWS 受管政策。

AWS 受管政策： AWSDataExchangeFullAccess

您可以將AWSDataExchangeFullAccess政策連接至身分IAM。

此政策會授予管理許可，允許使用 AWS Data Exchange 和 來完整存取 AWS Management Console 和 AWS Marketplace 動作SDK。它還提供對 Amazon S3 的選取存取權 AWS Key Management Service ，並視需要充分利用 AWS Data Exchange。

許可詳細資訊

此政策包含以下許可：

  • AWS Data Exchange – 允許主體完整存取 AWS Data Exchange。這包括提供資料產品和訂閱。

  • AWS Marketplace – 允許委託人存取 AWS Marketplace 以提供產品、訂閱產品和管理產品協議。這是提供或訂閱資料產品的必要條件。

  • Amazon S3 – 允許主體從 Amazon Simple Storage Service 取得 AWS Data Exchange 相關物件 （包括資料產品檔案），並將 AWS Data Exchange 相關檔案上傳至 Amazon S3。這是提供和訂閱資料產品的必要項目。

  • Amazon Redshift – 允許委託人檢視 Amazon Redshift AWS Data Exchange 的資料共用以進行匯入並授權。這是提供 Amazon Redshift 資料產品的必要項目。

  • Amazon API Gateway – 允許主體APIs從 Amazon API Gateway 取得 Amazon API Gateway，以及上傳 APIs。這是提供 Amazon API Gateway 資料集的必要條件。

  • AWS KMS – 允許存取 中的清單和描述金鑰 AWS Key Management Service。

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "DataExchangeActions",
            "Effect": "Allow",
            "Action": [
                "dataexchange:*"
            ],
            "Resource": "*"
        },
        {
            "Sid": "S3GetActionConditionalResourceAndADX",
            "Effect": "Allow",
            "Action": "s3:GetObject",
            "Resource": "arn:aws:s3:::*aws-data-exchange*",
            "Condition": {
                "ForAnyValue:StringEquals": {
                    "aws:CalledVia": [
                        "dataexchange.amazonaws.com"
                    ]
                }
            }
        },
        {
            "Sid": "S3GetActionConditionalTagAndADX",
            "Effect": "Allow",
            "Action": "s3:GetObject",
            "Resource": "*",
            "Condition": {
                "StringEqualsIgnoreCase": {
                    "s3:ExistingObjectTag/AWSDataExchange": "true"
                },
                "ForAnyValue:StringEquals": {
                    "aws:CalledVia": [
                        "dataexchange.amazonaws.com"
                    ]
                }
            }
        },
        {
            "Sid": "S3WriteActions",
            "Effect": "Allow",
            "Action": [
                "s3:PutObject",
                "s3:PutObjectAcl"
            ],
            "Resource": "arn:aws:s3:::*aws-data-exchange*",
            "Condition": {
                "ForAnyValue:StringEquals": {
                    "aws:CalledVia": [
                        "dataexchange.amazonaws.com"
                    ]
                }
            }
        },
        {
            "Sid": "S3ReadActions",
            "Effect": "Allow",
            "Action": [
                "s3:GetBucketLocation",
                "s3:ListBucket",
                "s3:ListAllMyBuckets"
            ],
            "Resource": "*"
        },
        {
            "Sid": "AWSMarketplaceProviderActions",
            "Effect": "Allow",
            "Action": [
                "aws-marketplace:DescribeEntity",
                "aws-marketplace:ListEntities",
                "aws-marketplace:StartChangeSet",
                "aws-marketplace:ListChangeSets",
                "aws-marketplace:DescribeChangeSet",
                "aws-marketplace:CancelChangeSet",
                "aws-marketplace:GetAgreementApprovalRequest",
                "aws-marketplace:ListAgreementApprovalRequests",
                "aws-marketplace:AcceptAgreementApprovalRequest",
                "aws-marketplace:RejectAgreementApprovalRequest",
                "aws-marketplace:UpdateAgreementApprovalRequest",
                "aws-marketplace:SearchAgreements",
                "aws-marketplace:GetAgreementTerms",
                "aws-marketplace:TagResource",
                "aws-marketplace:UntagResource",
                "aws-marketplace:ListTagsForResource"
            ],
            "Resource": "*"
        },
        {
            "Sid": "AWSMarketplaceSubscriberActions",
            "Effect": "Allow",
            "Action": [
                "aws-marketplace:Subscribe",
                "aws-marketplace:Unsubscribe",
                "aws-marketplace:ViewSubscriptions",
                "aws-marketplace:GetAgreementRequest",
                "aws-marketplace:ListAgreementRequests",
                "aws-marketplace:CancelAgreementRequest",
                "aws-marketplace:ListPrivateListings",
                "aws-marketplace:DescribeAgreement"
            ],
            "Resource": "*"
        },
        {
            "Sid": "KMSActions",
            "Effect": "Allow",
            "Action": [
                "kms:DescribeKey",
                "kms:ListAliases",
                "kms:ListKeys"
            ],
            "Resource": "*"
        },
        {
            "Sid": "RedshiftConditionalActions",
            "Effect": "Allow",
            "Action": [
                "redshift:AuthorizeDataShare"
            ],
            "Resource": "*",
            "Condition": {
                "StringEqualsIgnoreCase": {
                    "redshift:ConsumerIdentifier": "ADX"
                }
            }
        },
        {
            "Sid": "RedshiftActions",
            "Effect": "Allow",
            "Action": [
                "redshift:DescribeDataSharesForProducer",
                "redshift:DescribeDataShares"
            ],
            "Resource": "*"
        },
        {
            "Sid": "APIGatewayActions",
            "Effect": "Allow",
            "Action": [
                "apigateway:GET"
            ],
            "Resource": "*"
        }
    ]
}

AWS 受管政策： AWSDataExchangeProviderFullAccess

您可以將AWSDataExchangeProviderFullAccess政策連接至身分IAM。

此政策會授予貢獻者許可，讓資料提供者使用 和 來 AWS Data Exchange 存取 AWS Management Console 和 AWS Marketplace 動作SDK。它還提供對 Amazon S3 的選取存取權 AWS Key Management Service ，並視需要充分利用 AWS Data Exchange。

許可詳細資訊

此政策包含以下許可：

  • AWS Data Exchange – 允許主體在 上提供資料產品的完整存取權 AWS Data Exchange。主體可以在 上建立、更新和移除產品 AWS Data Exchange。

  • AWS Marketplace – 允許主體存取 AWS Marketplace ，以提供和訂閱資料產品，以及管理訂閱驗證請求。這是提供資料產品的必要項目。

  • Amazon S3 – 允許主體從 Amazon Simple Storage Service 取得 AWS Data Exchange 相關物件 （包括資料產品檔案），並將 AWS Data Exchange 相關檔案上傳至 Amazon S3。這是提供資料產品的必要項目。

  • Amazon API Gateway – 允許主體APIs從 Amazon API Gateway 取得 Amazon API Gateway，以及上傳 APIs。這是提供 Amazon API Gateway API資料集的必要條件。

  • Amazon Redshift – 允許委託人檢視 Amazon Redshift AWS Data Exchange 的資料共用以進行匯入並授權。這是提供 Amazon Redshift 資料產品的必要項目。

  • AWS KMS – 允許 的存取， AWS Key Management Service 以便使用金鑰加密和存取資料。

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "dataexchange:CreateDataSet",
                "dataexchange:CreateRevision",
                "dataexchange:CreateAsset",
                "dataexchange:Get*",
                "dataexchange:Update*",
                "dataexchange:List*",
                "dataexchange:Delete*",
                "dataexchange:TagResource",
                "dataexchange:UntagResource",
                "dataexchange:PublishDataSet",
                "dataexchange:SendApiAsset",
                "dataexchange:RevokeRevision",
                "dataexchange:SendDataSetNotification",
                "tag:GetTagKeys",
                "tag:GetTagValues"
            ],
            "Resource": "*"
        },
        {
            "Effect": "Allow",
            "Action": [
                "dataexchange:CreateJob",
                "dataexchange:StartJob",
                "dataexchange:CancelJob"
            ],
            "Resource": "*",
            "Condition": {
                "StringEquals": {
                    "dataexchange:JobType": [
                        "IMPORT_ASSETS_FROM_S3",
                        "IMPORT_ASSET_FROM_SIGNED_URL",
                        "EXPORT_ASSETS_TO_S3",
                        "EXPORT_ASSET_TO_SIGNED_URL",
                        "IMPORT_ASSET_FROM_API_GATEWAY_API",
                        "IMPORT_ASSETS_FROM_REDSHIFT_DATA_SHARES"
                    ]
                }
            }
        },
        {
            "Effect": "Allow",
            "Action": "s3:GetObject",
            "Resource": "arn:aws:s3:::*aws-data-exchange*",
            "Condition": {
                "ForAnyValue:StringEquals": {
                    "aws:CalledVia": [
                        "dataexchange.amazonaws.com"
                    ]
                }
            }
        },
        {
            "Effect": "Allow",
            "Action": "s3:GetObject",
            "Resource": "*",
            "Condition": {
                "StringEqualsIgnoreCase": {
                    "s3:ExistingObjectTag/AWSDataExchange": "true"
                },
                "ForAnyValue:StringEquals": {
                    "aws:CalledVia": [
                        "dataexchange.amazonaws.com"
                    ]
                }
            }
        },
        {
            "Effect": "Allow",
            "Action": [
                "s3:PutObject",
                "s3:PutObjectAcl"
            ],
            "Resource": "arn:aws:s3:::*aws-data-exchange*",
            "Condition": {
                "ForAnyValue:StringEquals": {
                    "aws:CalledVia": [
                        "dataexchange.amazonaws.com"
                    ]
                }
            }
        },
        {
            "Effect": "Allow",
            "Action": [
                "s3:GetBucketLocation",
                "s3:ListBucket",
                "s3:ListAllMyBuckets"
            ],
            "Resource": "*"
        },
        {
            "Effect": "Allow",
            "Action": [
                "aws-marketplace:DescribeEntity",
                "aws-marketplace:ListEntities",
                "aws-marketplace:DescribeChangeSet",
                "aws-marketplace:ListChangeSets",
                "aws-marketplace:StartChangeSet",
                "aws-marketplace:CancelChangeSet",
                "aws-marketplace:GetAgreementApprovalRequest",
                "aws-marketplace:ListAgreementApprovalRequests",
                "aws-marketplace:AcceptAgreementApprovalRequest",
                "aws-marketplace:RejectAgreementApprovalRequest",
                "aws-marketplace:UpdateAgreementApprovalRequest",
                "aws-marketplace:SearchAgreements",
                "aws-marketplace:GetAgreementTerms",
                "aws-marketplace:DescribeAgreement"
            ],
            "Resource": "*"
        },
        {
            "Effect": "Allow",
            "Action": [
                "aws-marketplace:TagResource",
                "aws-marketplace:UntagResource",
                "aws-marketplace:ListTagsForResource"
            ],
            "Resource": "*"
        },
        {
            "Effect": "Allow",
            "Action": [
                "kms:DescribeKey",
                "kms:ListAliases",
                "kms:ListKeys"
            ],
            "Resource": "*"
        },
        {
            "Effect": "Allow",
            "Action": ["redshift:AuthorizeDataShare"],
            "Resource": "*",
            "Condition": {
                "StringEqualsIgnoreCase": {
                  "redshift:ConsumerIdentifier": "ADX"
         }
            }
        },
        {
            "Effect": "Allow",
            "Action": [
                "redshift:DescribeDataSharesForProducer",
                "redshift:DescribeDataShares"
            ],
            "Resource": "*"
        },
        {
            "Effect": "Allow",
            "Action": [
                "apigateway:GET",
            ],
            "Resource": "*"
        }
    ]
}

AWS 受管政策： AWSDataExchangeReadOnly

您可以將AWSDataExchangeReadOnly政策連接至身分IAM。

此政策授予唯讀許可，允許使用 AWS Data Exchange 和 對 AWS Management Console 和 AWS Marketplace 動作進行唯讀存取SDK。

許可詳細資訊

此政策包含以下許可：

  • AWS Data Exchange – 允許主體唯讀存取 AWS Data Exchange 產品。這包括提供和訂閱的資料產品。

  • AWS Marketplace – 允許主體對 AWS Marketplace 所提供和訂閱產品的唯讀存取。這是檢視資料產品的必要項目。

{
"Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "DataExchangeReadOnlyActions",
            "Effect": "Allow",
            "Action": [
                "dataexchange:GetAsset",
                "dataexchange:GetDataSet",
                "dataexchange:GetEventAction",
                "dataexchange:GetJob",
                "dataexchange:GetRevision",
                "dataexchange:GetDataGrant",
                "dataexchange:GetReceivedDataGrant",
                "dataexchange:ListDataGrants",
                "dataexchange:ListReceivedDataGrants",
                "dataexchange:ListDataSetRevisions",
                "dataexchange:ListDataSets",
                "dataexchange:ListEventActions",
                "dataexchange:ListJobs",
                "dataexchange:ListRevisionAssets",
                "dataexchange:ListTagsForResource"
            ],
            "Resource": "*"
        },
        {
            "Sid": "AWSMarketplaceReadOnlyActions",
            "Effect": "Allow",
            "Action": [
                "aws-marketplace:ViewSubscriptions",
                "aws-marketplace:GetAgreementRequest",
                "aws-marketplace:ListAgreementRequests",
                "aws-marketplace:GetAgreementApprovalRequest",
                "aws-marketplace:ListAgreementApprovalRequests",
                "aws-marketplace:DescribeEntity",
                "aws-marketplace:ListEntities",
                "aws-marketplace:DescribeChangeSet",
                "aws-marketplace:ListChangeSets",
                "aws-marketplace:SearchAgreements",
                "aws-marketplace:GetAgreementTerms",               
                "aws-marketplace:ListPrivateListings",
                "aws-marketplace:ListTagsForResource"
                
            ],
            "Resource": "*"
        }
    ]
}

AWS 受管政策： AWSDataExchangeServiceRolePolicyForLicenseManagement

您無法將 AWSDataExchangeServiceRolePolicyForLicenseManagement 連接至您的IAM實體。此政策會連接到服務連結角色，而此角色可讓 AWS Data Exchange 代表您執行動作。它授予角色許可， AWS Data Exchange 允許 擷取您 AWS 組織的相關資訊，並管理 AWS Data Exchange 資料授予授權。如需詳細資訊，請參閱AWS Data Exchange 授權管理的服務連結角色。

許可詳細資訊

此政策包含以下許可：

  • AWS Organizations – 允許主體擷取 AWS 組織的相關資訊。

  • AWS License Manager – 允許主體建立授權的版本，並刪除授權。它也允許擷取授權資訊。

{
    "Version": "2012-10-17",
    "Statement": [
        {
        "Sid": "AllowLicenseManagerActions",
        "Effect": "Allow",
        "Action": [
            "organizations:DescribeOrganization",
            "license-manager:ListDistributedGrants",
            "license-manager:GetGrant",
            "license-manager:CreateGrantVersion",
            "license-manager:DeleteGrant"
        ],
      "Resource": [
                "*"
            ]
        }
    ]
}

AWS 受管政策： AWSDataExchangeServiceRolePolicyForOrganizationDiscovery

您無法將 AWSDataExchangeServiceRolePolicyForOrganizationDiscovery 連接至您的IAM實體。此政策會連接至服務連結角色， AWS Data Exchange 允許 代表您執行動作。它授予角色許可， AWS Data Exchange 允許 擷取您 AWS 組織的相關資訊，以判斷 AWS Data Exchange 資料授予授權分發的資格。如需詳細資訊，請參閱中組織探索的服務連結角色 AWSAWS Data Exchange。

此政策包含以下許可：

  • AWS Organizations – 允許主體擷取 AWS 組織的相關資訊。

{
    "Version": "2012-10-17",
    "Statement": [
                {
        "Sid": "AllowAWSOrganizationsActions",
        "Effect": "Allow",
        "Action": [
                "organizations:DescribeOrganization",
                "organizations:DescribeAccount",
                "organizations:ListAccounts"
         ],
         "Resource": [
            "*"
         ]
       } 
    ]
}

AWS 受管政策：AWSDataExchangeSubscriberFullAccess

您可以將AWSDataExchangeSubscriberFullAccess政策連接至身分IAM。

此政策授予貢獻者許可，允許資料訂閱者使用 和 存取 AWS Data Exchange AWS Management Console 和 AWS Marketplace 動作SDK。它還提供對 Amazon S3 的選取存取權 AWS Key Management Service ，並視需要充分利用 AWS Data Exchange。

許可詳細資訊

此政策包含以下許可：

  • AWS Data Exchange – 允許委託人完整存取 的訂閱者功能 AWS Data Exchange。這包括訂閱和存取資料產品。

  • AWS Marketplace – 允許主體存取 AWS Marketplace 以檢視和訂閱 產品。這是訂閱資料產品的必要條件。

  • Amazon S3 – 允許主體檢視並從 Amazon Simple Storage Service 取得 AWS Data Exchange 相關物件 （包括資料產品檔案）。這是存取訂閱的資料產品的必要條件。

  • AWS KMS – 允許 AWS Key Management Service 存取已使用金鑰加密的資料。

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "DataExchangeReadOnlyActions",
            "Effect": "Allow",
            "Action": [
                "dataexchange:Get*",
                "dataexchange:List*"
            ],
            "Resource": "*"
        },
        {
            "Sid": "DataExchangeExportActions",
            "Effect": "Allow",
            "Action": [
                "dataexchange:CreateJob",
                "dataexchange:StartJob",
                "dataexchange:CancelJob"
            ],
            "Resource": "*",
            "Condition": {
                "StringEquals": {
                    "dataexchange:JobType": [
                        "EXPORT_ASSETS_TO_S3",
                        "EXPORT_ASSET_TO_SIGNED_URL",
                        "EXPORT_REVISIONS_TO_S3"
                    ]
                }
            }
        },
        {
            "Sid": "DataExchangeEventActionActions",
            "Effect": "Allow",
            "Action": [
                "dataexchange:CreateEventAction",
                "dataexchange:UpdateEventAction",
                "dataexchange:DeleteEventAction",
                "dataexchange:SendApiAsset"
            ],
            "Resource": "*"
        },
        {
            "Sid": "S3GetActionConditionalResourceAndADX",
            "Effect": "Allow",
            "Action": "s3:GetObject",
            "Resource": "arn:aws:s3:::*aws-data-exchange*",
            "Condition": {
                "ForAnyValue:StringEquals": {
                    "aws:CalledVia": [
                        "dataexchange.amazonaws.com"
                    ]
                }
            }
        },
        {
            "Sid": "S3ReadActions",
            "Effect": "Allow",
            "Action": [
                "s3:GetBucketLocation",
                "s3:ListBucket",
                "s3:ListAllMyBuckets"
            ],
            "Resource": "*"
        },
        {
            "Sid": "AWSMarketplaceSubscriberActions",
            "Effect": "Allow",
            "Action": [ 
                "aws-marketplace:Subscribe",
                "aws-marketplace:Unsubscribe",
                "aws-marketplace:ViewSubscriptions",
                "aws-marketplace:GetAgreementRequest",
                "aws-marketplace:ListAgreementRequests",
                "aws-marketplace:CancelAgreementRequest",
                "aws-marketplace:ListPrivateListings"
            ],
            "Resource": "*"
        },
        {
            "Sid": "KMSActions",
            "Effect": "Allow",
            "Action": [
                "kms:DescribeKey",
                "kms:ListAliases",
                "kms:ListKeys"
            ],
            "Resource": "*"
        }
    ]
}

AWS 受管政策：AWSDataExchangeDataGrantOwnerFullAccess

您可以將AWSDataExchangeDataGrantOwnerFullAccess政策連接至身分IAM。

此政策可讓 Data Grant 擁有者使用 AWS Management Console 和 存取 AWS Data Exchange 動作SDKs。

許可詳細資訊

此政策包含以下許可：

  • dataexchange – 允許主體在 上建立資料授與的完整存取權 AWS Data Exchange。主體可以在 上建立、檢視、更新和刪除資料集和資料授與 AWS Data Exchange。

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "DataExchangeActions",
            "Effect": "Allow",
            "Action": [
                "dataexchange:CreateDataSet",
                "dataexchange:UpdateDataSet",
                "dataexchange:GetDataSet",
                "dataexchange:DeleteDataSet",
                "dataexchange:ListDataSets",
                "dataexchange:CreateRevision",
                "dataexchange:UpdateRevision",
                "dataexchange:GetRevision",
                "dataexchange:DeleteRevision",
                "dataexchange:RevokeRevision",
                "dataexchange:ListDataSetRevisions",
                "dataexchange:CreateAsset",
                "dataexchange:UpdateAsset",
                "dataexchange:GetAsset",
                "dataexchange:DeleteAsset",
                "dataexchange:ListRevisionAssets",
                "dataexchange:SendApiAsset",
                "dataexchange:CreateDataGrant",
                "dataexchange:GetDataGrant",
                "dataexchange:DeleteDataGrant",
                "dataexchange:ListDataGrants",
                "dataexchange:PublishToDataGrant",
                "dataexchange:SendDataSetNotification",
                "dataexchange:TagResource",
                "dataexchange:UntagResource"
            ],
            "Resource": "*"
        },
        {
            "Sid": "DataExchangeJobsActions",
            "Effect": "Allow",
            "Action": [
                "dataexchange:CreateJob",
                "dataexchange:StartJob",
                "dataexchange:CancelJob"
            ],
            "Resource": "*",
            "Condition": {
                "StringEquals": {
                    "dataexchange:JobType": [
                        "IMPORT_ASSETS_FROM_S3",
                        "IMPORT_ASSET_FROM_SIGNED_URL",
                        "EXPORT_ASSETS_TO_S3",
                        "EXPORT_ASSET_TO_SIGNED_URL",
                        "IMPORT_ASSET_FROM_API_GATEWAY_API",
                        "IMPORT_ASSETS_FROM_REDSHIFT_DATA_SHARES",
                        "IMPORT_ASSETS_FROM_LAKE_FORMATION_TAG_POLICY"
                    ]
                }
            }
        }
    ]
}

AWS 受管政策： AWSDataExchangeDataGrantReceiverFullAccess

您可以將AWSDataExchangeDataGrantReceiverFullAccess政策連接至身分IAM。

此政策可讓 Data Grant 接收者使用 AWS Management Console 和 存取 AWS Data Exchange 動作SDKs。

許可詳細資訊

此政策包含以下許可：

  • dataexchange – 允許主體在 上建立資料授與的完整存取權 AWS Data Exchange。主體可以在 上建立、檢視、更新和刪除資料集和資料授與 AWS Data Exchange。

{
	"Version": "2012-10-17",
	"Statement": [
		{
			"Sid": "DataExchangeReadOnlyActions",
			"Effect": "Allow",
			"Action": [
				"dataexchange:GetDataSet",
				"dataexchange:ListDataSets",
				"dataexchange:GetRevision",
				"dataexchange:ListDataSetRevisions",
				"dataexchange:GetAsset",
				"dataexchange:ListRevisionAssets",
				"dataexchange:SendApiAsset"
			],
			"Resource": "*"
		},
		{
			"Sid": "DataExchangeExportActions",
			"Effect": "Allow",
			"Action": [
				"dataexchange:CreateJob",
				"dataexchange:StartJob",
				"dataexchange:CancelJob"
			],
			"Resource": "*",
			"Condition": {
				"StringEquals": {
					"dataexchange:JobType": [
						"EXPORT_ASSETS_TO_S3",
						"EXPORT_ASSET_TO_SIGNED_URL",
						"EXPORT_REVISIONS_TO_S3"
					]
				}
			}
		},
		{
			"Sid": "DataExchangeEventActionActions",
			"Effect": "Allow",
			"Action": [
				"dataexchange:CreateEventAction",
				"dataexchange:UpdateEventAction",
				"dataexchange:DeleteEventAction",
				"dataexchange:GetEventAction",
				"dataexchange:ListEventActions"
			],
			"Resource": "*"
		},
		{
			"Sid": "DataExchangeDataGrantActions",
			"Effect": "Allow",
			"Action": [
				"dataexchange:AcceptDataGrant",
				"dataexchange:ListReceivedDataGrants",
				"dataexchange:GetReceivedDataGrant"
			],
			"Resource": "*"
		}
	]
}

AWS Data Exchange 受 AWS 管政策的更新

下表提供有關自此服務開始追蹤這些變更 AWS Data Exchange 以來 受 AWS 管政策更新的詳細資訊。如需此頁面變更 （以及本使用者指南的任何其他變更） 的自動提醒，請訂閱的文件歷史記錄 AWS Data Exchange頁面上的RSS摘要。

變更 描述 日期

AWSDataExchangeDataGrantOwnerFullAccess – 新政策

AWS Data Exchange 新增了新的政策，以授予 Data Grant 擁有者對 AWS Data Exchange 動作的存取權。

 2024 年 10 月 24 日

AWSDataExchangeDataGrantReceiverFullAccess – 新政策

AWS Data Exchange 新增了新的政策，以授予資料授予接收者對 AWS Data Exchange 動作的存取權。

 2024 年 10 月 24 日

AWSDataExchangeReadOnly – 更新現有政策

新增了新資料授予功能的 AWSDataExchangeReadOnly AWS 受管政策的必要許可。

 2024 年 10 月 24 日

AWSDataExchangeServiceRolePolicyForLicenseManagement – 新政策

已新增支援服務連結角色的新政策，以管理客戶帳戶中的使用權授予。

 2024 年 10 月 17 日

AWSDataExchangeServiceRolePolicyForOrganizationDiscovery – 新政策

已新增支援服務連結角色的新政策，以提供 AWS 組織中帳戶資訊的讀取存取權。

 2024 年 10 月 17 日

AWSDataExchangeReadOnly

 新增了陳述式，IDs讓政策更易於讀取、將萬用卡式許可擴展為唯讀ADX許可的完整清單，並新增了新動作： aws-marketplace:ListTagsForResource和 aws-marketplace:ListPrivateListings。

2024 年 7 月 9 日
AWSDataExchangeFullAccess 已移除動作： aws-marketplace:GetPrivateListing 2024 年 5 月 22 日
AWSDataExchangeSubscriberFullAccess 新增了 陳述式IDs，讓政策更容易讀取和新增動作：aws-marketplace:ListPrivateListings。 2024 年 4 月 30 日
AWSDataExchangeFullAccess 新增了 陳述式IDs，讓政策更容易讀取和新增動作：aws-marketplace:TagResource、aws-marketplace:UntagResource、aws-marketplace:ListTagsForResource、aws-marketplace:ListPrivateListings、 aws-marketplace:GetPrivateListing和 aws-marketplace:DescribeAgreement。 2024 年 4 月 30 日

AWSDataExchangeProviderFullAccess

 新增了陳述式IDs，讓政策更容易閱讀。 2024 年 8 月 9 日

AWSDataExchangeProviderFullAccess

 已新增 dataexchange:SendDataSetNotification，這是傳送資料集通知的新許可。 2024 年 3 月 5 日

AWSDataExchangeSubscriberFullAccess、 AWSDataExchangeProviderFullAccess AWSDataExchangeReadOnly和 AWSDataExchangeFullAccess – 更新至現有政策

新增了所有受管政策的精細動作。新增的動作為 aws-marketplace:CreateAgreementRequest、aws-marketplace:AcceptAgreementRequest、aws-marketplace:ListEntitlementDetails、aws-marketplace:ListPrivateListings、aws-marketplace:GetPrivateListing、license-manager:ListReceivedGrantsaws-marketplace:TagResource、aws-marketplace:UntagResource、aws-marketplace:ListTagsForResource、aws-marketplace:DescribeAgreement、、aws-marketplace:GetAgreementTermsaws-marketplace:GetLicense。

 2023 年 7 月 31 日

AWSDataExchangeProviderFullAccess – 更新現有政策

新增 dataexchange:RevokeRevision，撤銷修訂的新許可。

 2022 年 3 月 15 日

AWSDataExchangeProviderFullAccess 和 AWSDataExchangeFullAccess – 更新現有政策

已新增 apigateway:GET，這是從 Amazon API Gateway 擷取API資產的新許可。

 2021 年 12 月 3 日
AWSDataExchangeProviderFullAccess 和 AWSDataExchangeSubscriberFullAccess – 更新現有政策

已新增 dataexchange:SendApiAsset，這是傳送請求至API資產的新許可。

 2021 年 11 月 29 日

AWSDataExchangeProviderFullAccess 和 AWSDataExchangeFullAccess – 更新現有政策

新增了 redshift:AuthorizeDataShare、 redshift:DescribeDataSharesForProducer和 redshift:DescribeDataShares，以授權存取和建立 Amazon Redshift 資料集的新許可。

 2021 年 11 月 1 日

AWSDataExchangeSubscriberFullAccess – 更新現有政策

新增 dataexchange:CreateEventAction、 dataexchange:UpdateEventAction和 dataexchange:DeleteEventAction，控制存取以自動匯出資料集的新修訂的新許可。

 2021 年 9 月 30 日

AWSDataExchangeProviderFullAccess 和 AWSDataExchangeFullAccess – 更新現有政策

已新增 dataexchange:PublishDataSet，這是控制對發佈新版本資料集之存取權的新許可。

 2021 年 5 月 25 日

AWSDataExchangeReadOnly、 AWSDataExchangeProviderFullAccess和 AWSDataExchangeFullAccess – 更新至現有政策

新增 aws-marketplace:SearchAgreements和 aws-marketplace:GetAgreementTerms以啟用產品和優惠的檢視訂閱。

 2021 年 5 月 12 日

AWS Data Exchange 已開始追蹤變更

AWS Data Exchange 已開始追蹤其 AWS 受管政策的變更。

 2021 年 4 月 20 日