config:*AWS AWS Config IAM Actions
97 IAM actions for config:*
Actions
97 actions available. Filter by access level or search by name.
Filter:
| Action | Access Level |
|---|---|
config:AssociateResourceTypes | Write |
config:BatchGetAggregateResourceConfig | Tagging |
config:BatchGetResourceConfig | Read |
config:DeleteAggregationAuthorization | Write |
config:DeleteConfigRule | Write |
config:DeleteConfigurationAggregator | Write |
config:DeleteConfigurationRecorder | Write |
config:DeleteConformancePack | Write |
config:DeleteDeliveryChannel | Write |
config:DeleteEvaluationResults | Write |
config:DeleteOrganizationConfigRule | Write |
config:DeleteOrganizationConformancePack | Write |
config:DeletePendingAggregationRequest | Write |
config:DeleteRemediationConfiguration | Write |
config:DeleteRemediationExceptions | Write |
config:DeleteResourceConfig | Write |
config:DeleteRetentionConfiguration | Write |
config:DeleteServiceLinkedConfigurationRecorder | Write |
config:DeleteStoredQuery | Write |
config:DeliverConfigSnapshot | Read |
config:DescribeAggregateComplianceByConfigRules | Read |
config:DescribeAggregateComplianceByConformancePacks | Read |
config:DescribeAggregationAuthorizations | Read |
config:DescribeComplianceByConfigRule | Read |
config:DescribeComplianceByResource | Read |
config:DescribeConfigRuleEvaluationStatus | Read |
config:DescribeConfigRules | Read |
config:DescribeConfigurationAggregators | Read |
config:DescribeConfigurationAggregatorSourcesStatus | Read |
config:DescribeConfigurationRecorders | Read |
config:DescribeConfigurationRecorderStatus | Read |
config:DescribeConformancePackCompliance | Read |
config:DescribeConformancePacks | Read |
config:DescribeConformancePackStatus | Read |
config:DescribeDeliveryChannels | Read |
config:DescribeDeliveryChannelStatus | Read |
config:DescribeOrganizationConfigRules | Read |
config:DescribeOrganizationConfigRuleStatuses | Read |
config:DescribeOrganizationConformancePacks | Read |
config:DescribeOrganizationConformancePackStatuses | Read |
config:DescribePendingAggregationRequests | Read |
config:DescribeRemediationConfigurations | Read |
config:DescribeRemediationExceptions | Read |
config:DescribeRemediationExecutionStatus | Read |
config:DescribeRetentionConfigurations | Read |
config:DisassociateResourceTypes | Write |
config:GetAggregateComplianceDetailsByConfigRule | Tagging |
config:GetAggregateConfigRuleComplianceSummary | Tagging |
config:GetAggregateConformancePackComplianceSummary | Tagging |
config:GetAggregateDiscoveredResourceCounts | Tagging |
config:GetAggregateResourceConfig | Tagging |
config:GetComplianceDetailsByConfigRule | Read |
config:GetComplianceDetailsByResource | Read |
config:GetComplianceSummaryByConfigRule | Read |
config:GetComplianceSummaryByResourceType | Read |
config:GetConformancePackComplianceDetails | Read |
config:GetConformancePackComplianceSummary | Read |
config:GetCustomRulePolicy | Permissions |
config:GetDiscoveredResourceCounts | Read |
config:GetOrganizationConfigRuleDetailedStatus | Read |
config:GetOrganizationConformancePackDetailedStatus | Read |
config:GetOrganizationCustomRulePolicy | Permissions |
config:GetResourceConfigHistory | Read |
config:GetResourceEvaluationSummary | Read |
config:GetStoredQuery | Read |
config:ListAggregateDiscoveredResources | Tagging |
config:ListConfigurationRecorders | List |
config:ListConformancePackComplianceScores | List |
config:ListDiscoveredResources | List |
config:ListResourceEvaluations | List |
config:ListStoredQueries | List |
config:ListTagsForResource | Tagging |
config:PutAggregationAuthorization | Tagging |
config:PutConfigRule | Write |
config:PutConfigurationAggregator | Write |
config:PutConfigurationRecorder | Write |
config:PutConformancePack | Write |
config:PutDeliveryChannel | Write |
config:PutEvaluations | Write |
config:PutExternalEvaluation | Write |
config:PutOrganizationConfigRule | Write |
config:PutOrganizationConformancePack | Write |
config:PutRemediationConfigurations | Write |
config:PutRemediationExceptions | Write |
config:PutResourceConfig | Write |
config:PutRetentionConfiguration | Write |
config:PutServiceLinkedConfigurationRecorder | Write |
config:PutStoredQuery | Write |
config:SelectAggregateResourceConfig | Tagging |
config:SelectResourceConfig | Read |
config:StartConfigRulesEvaluation | Write |
config:StartConfigurationRecorder | Write |
config:StartRemediationExecution | Write |
config:StartResourceEvaluation | Write |
config:StopConfigurationRecorder | Write |
config:TagResource | Tagging |
config:UntagResource | Tagging |
Resource Types
ARN patterns for resources in this service.
| Resource | ARN Pattern |
|---|---|
${ResourceType} | arn:aws:config:${Region}:${Account}:${ResourceType}/${ResourceId} |
Condition Keys
Condition keys you can use in IAM policy conditions for this service.
aws:RequestTag/${TagKey}aws:ResourceTag/${TagKey}aws:TagKeysconfig:ConfigurationRecorderServicePrincipalLearn AWS the Practical Way
Our bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.
Subscribe to NewsletterLearn AWS the Practical Way
Our bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.
Subscribe to NewsletterQuick Facts
Total Actions97
Prefix
configResource Types1
Condition Keys4
Access Level Breakdown
Read40
Write38
List5
Permissions2
Tagging12