activities
latest
false
Atividades de Automação de TI
- Visão geral
- Active Directory
- Notas de Versão
- Sobre o pacote de atividades Active Directory
- Compatibilidade do Projeto
- Active Directory Scope
- Get Object Distinguished Name
- Get Object Properties
- Get Objects by Filter
- Get Objects by LDAP Filter
- Is Object Member of Group
- Move Object
- Rename Object
- Update Object Properties
- Add Computer to Group
- Computer Exists
- Create Computer
- Delete Computer
- Get Computer Status
- Get Computers in Group
- Join Computer to Domain
- Remove Computer from Group
- Set Computer Status
- Unjoin Computer from Domain
- Add Group to Group
- Create Group
- Excluir grupo
- Group Exists
- Remove Group from Group
- Add User to Group
- Change User Password
- Create User
- Delete User
- Forçar Alteração da Senha
- Get Password Expiration Date
- Get User Expiration Date
- Get User Groups
- Get User Status
- Get Users in Group
- Remove User from Group
- Set User Expiration Date
- Set User Status
- User Exists
- Validate User Credentials
- Criar uma unidade organizacional
- Excluir unidade organizacional
- APIs do Active Directory
- Guias de instruções do Active Directory
- Amazon Web Services
- Notas de Versão
- Sobre o pacote de atividades Amazon Web Services
- Compatibilidade do Projeto
- Permissions List
- Amazon Web Services Scope
- Configure Robot
- Create Instance
- Create Instance from Launch Template
- Get Instance by ID
- Get Instance List
- Reboot Instance
- Start Instance
- Stop Instance
- Terminate Instance
- Anexar volume à instância
- Criar instantâneos da instância
- Criar volume
- Criar instantâneo de volume
- Excluir Instantâneo
- Excluir volume
- Desanexar volume da instância
- Obter volumes de instância
- Obter instantâneo
- Obter volume
- Obter lista de volumes
- Add User to Group
- Create Group
- Excluir grupo
- For Each Group
- Get Group
- Remove User from Group
- Update Group
- Add/Remove Inline Policy
- Attach/Detach Managed Policy
- Create Managed Policy
- Delete Managed Policy
- For Each Managed Policy
- Get IAM Identities Attached to a Managed Policy
- Get IAM Identity Inline Policies
- Get IAM Identity Managed Polices
- Get Managed Policy
- Update Managed Policy
- Add Role to Instance Profile
- Create Role
- Delete Role
- For Each Role
- Get Role
- Remove Role from Instance Profile
- Update Role
- Change User Password
- Create User
- Delete User
- For Each User
- For Each User Group
- For Each User in Group
- Get User
- Update User
- Configure Logging for Bucket
- Configure Public Access to Bucket
- Create Bucket
- Delete Bucket
- Delete Bucket Policy
- Empty Bucket
- Get Bucket
- Get Bucket List
- Get Bucket Policy
- Set Bucket Policy
- Update Bucket Properties
- Copy Object
- Delete Multiple Objects
- Delete Single Object
- Download Object to File
- For Each Object in Bucket
- Get Object
- Get Object ACL
- Set Object ACL
- Upload Object from File
- Upload Objects from Folder
- Run Power Shell Command
- APIs do Amazon Web Services
- Guias de instruções da Amazon Web Services
- Amazon WorkSpaces
- Azure
- Notas de Versão
- Sobre o pacote de atividades Azure
- Compatibilidade do Projeto
- Append to Blob
- Attach VM Data Disk
- Azure Scope
- Configure Robot
- Copy Blob
- Create Blob Container
- Create IP Configuration
- Create Network Interface
- Create NSG
- Create Resource Group
- Create Security Rule
- Create Storage Account
- Create Tables
- Create VM
- Delete Blob
- Delete Blob Container
- Delete IP Configuration
- Delete Network Interface
- Delete NSG
- Delete Resource Group
- Delete Rows
- Excluir segredo
- Delete Security Rule
- Delete Storage Account
- Delete Table
- Excluir VM
- Detach VM Data Disk
- Download Blob to File
- For Each Blob Container
- For Each Blob in Container
- For Each Network Interface
- For Each NSG
- For Each Row in Table
- For Each Security Alert
- Get Blob
- Get Blob Container
- Get Blob Containers List
- Get Blob List
- Get Disk
- Get Disk List
- Get RDP Files
- Get Resource Group
- Get Resource Group List
- Get Row
- Get Rows By Filter
- Get Secrets
- Get Storage Account
- Get Storage Account Key
- Get Storage Account List
- Get Network Interface
- Get NSG
- Get NSG Network Interface List
- Get Security Alert
- Get Security Rule
- Get Security Rule List
- Get Table
- Get Table List
- Get VM
- Get VM Custom Image
- Get VM Custom Image List
- Get VM Disk List
- Get VM Image by Publisher
- Get VM List
- Get VM NSG List
- Get VM Network Interface List
- Insert Rows
- Regenerate Storage Account Key
- Restart VM
- Run Script in VM
- Set Blob Tier
- Set Security Alert State
- Shutdown VM
- Iniciar VM
- Parar VM
- Upload Blob from File
- APIs do Azure
- Guias de instruções do Azure
- Azure Active Directory
- Notas de Versão
- Sobre as atividades do Azure Active Directory
- Compatibilidade do Projeto
- Listar todos os grupos no grupo
- List All Records
- Política de ciclo de vida das listas
- List Users
- List Groups
- GetGroupMembersDelta
- Obter funções de usuário
- Listar todos os grupos de um usuário
- Listar usuários na função
- List Users in Group
- Listar os proprietários de um grupo
- Listar funções de diretório
- List Directory Reports
- Usuário adicionado ao grupo
- Usuário removido do grupo
- Add Group to Lifecycle Policy
- Add Member to Group
- Add Member to Role
- Add Owner to Group
- Assign License
- Azure AD Application Scope
- Azure AD Delegated Scope
- Create Assigned Group
- Create Lifecycle Policy
- Create User
- Excluir grupo
- Delete Lifecycle Policy
- Delete User
- For Each Direct Report
- For Each Group
- For Each Group in Group
- For Each Lifecycle Policy
- For Each Parent Group
- For Each Role
- For Each User
- For Each User Group
- For Each User in Group
- For Each User in Group Owners
- For Each User in Role
- For Each User Role
- Get Group by Id
- Get Group by Name
- Get Manager
- Get User
- Group Exists
- Is Group in Lifecycle Policy
- Is Member in Role
- Is Member of Group
- Is Owner of Group
- Remove Group from Lifecycle Policy
- Remover Licença
- Remove Member from Group
- Remove Member from Role
- Remove Owner from Group
- Redefinir Senha
- Set Manager
- Update Group
- Update Lifecycle Policy
- Update User
- User Exists
- APIs do Azure Active Directory
- Guias de instruções do Azure Active Directory
- Azure Windows Virtual Desktop
- Notas de Versão
- Sobre o pacote de atividades do Azure Windows Virtual Desktop
- Compatibilidade do Projeto
- Windows Virtual Desktop Scope
- Create Host Pool
- Add Virtual Machine to Host Pool
- Update Host Pool
- Get Host Pool
- Delete Host Pool
- For Each Host Pool
- Get Session Host
- For Each Session Host
- Update Session Host
- Delete Session Host
- For Each User Session
- Disconnect User Session
- Delete User Session
- Send Message to User Session
- Get Application Group
- For Each Application Group
- Assign Users and Groups to Application Group
- Remove Users and Groups from Application Group
- Create Workspace
- Update Workspace
- Get Workspace
- For Each Workspace
- Delete Workspace
- APIs de Área de Trabalho Virtual do Windows Azure
- Citrix
- Notas de Versão
- Sobre o pacote de atividades Citrix
- Compatibilidade do Projeto
- Citrix Scope
- Get Server List
- Get Storage Repositories
- Add Tag to VM
- Add VM to Folder
- Remove Tag From VM
- Remove VM from Folder
- Delete All VM Snapshots
- Delete VM Snapshot
- Get VM Snapshot List
- Revert VM to Snapshot
- Take VM Snapshot
- Create VM From Template
- Excluir VM
- Get Template List
- Get VM by UUID
- Get VM List
- Power Off VM
- Power On VM
- Rename VM
- Restart VM
- Resume VM
- Suspend VM
- APIs do Citrix
- Guias de instruções das Atividades do Citrix
- Desktop Triggers
- Exchange Server
- Google Cloud
- Notas de Versão
- Sobre o pacote de atividades Google Cloud
- Compatibilidade do Projeto
- Google Cloud Scope
- Create Bucket
- Update Bucket Properties
- Get Bucket
- For Each Bucket
- Delete Bucket
- Get Object
- Delete Object
- Copy Object
- Upload Object from File
- Download Object to File
- For Each Object in Bucket
- Create Instance
- Create Instance from Template
- Get Instance
- For Each Instance
- Start Instance
- Stop Instance
- Reset Instance
- Delete Instance
- Configure Robot
- Run Script on Instance
- Get Project
- For Each Project
- Create Role
- Delete Role
- For Each Grantable Role
- For Each Role
- Get Role
- Undelete Role
- Update Role
- Get IAM Policy
- Set IAM Policy
- Get Secret Data
- APIs do Google Cloud
- Guias de instruções do Google Cloud
- Hyper V
- NetIQ eDirectory
- Notas de Versão
- Sobre o pacote de atividades NetIQ eDirectory
- Compatibilidade do Projeto
- Escopo do NetIQ eDirectory
- Add Object to Group
- Delete Object
- Get Object Distinguished Name
- Get Object Properties
- Get Objects by Filter
- Get Objects by LDAP Filter
- Is Object Member of Group
- Move Object
- Remove Object from Group
- Rename Object
- Update Object Properties
- Add Computer to Group
- Computer Exists
- Delete Computer
- Create Computer
- Get Computer Status
- Remove Computer from Group
- Set Computer Status
- Add Group to Group
- Create Group
- Excluir grupo
- Get Computers in Group
- Get Users in Group
- Group Exists
- Remove Group from Group
- Criar uma unidade organizacional
- Excluir unidade organizacional
- Add User to Group
- Change User Password
- Create User
- Delete User
- Forçar Alteração da Senha
- Get Password Expiration Date
- Get User Expiration Date
- Get User Groups
- Get User Status
- Remove User from Group
- Set User Expiration Date
- Set User Status
- User Exists
- Validate User Credentials
- APIs do NetIQ eDirectory
- System Center
- VMware
- Notas de Versão
- Sobre o pacote de atividades VMware
- Compatibilidade do Projeto
- VMware Scope
- Get Datastore
- Get Datastore List
- Get Host
- Get Host List
- Delete All VM Snapshots
- Delete VM Snapshot
- Get VM Snapshot List
- Revert VM to Snapshot
- Take VM Snapshot
- Configure Robot
- Create VM From Template
- Convert Template to VM
- Convert VM to Template
- Customize VM
- Excluir VM
- Get VM
- Get VM List
- Power Off VM
- Suspend VM
- Run Program in VM
- Restart VM
- Rename VM
- Power On VM
- Move VM to Folder
- Migrate VM
- Get Template List
- Export OVF Template
- Deploy OVF Template
- Assign Tag to VM
- Remove Tag From VM
- Assign Tag to Folder
- Remove Tag from Folder
- Create Folder
- Get Folder
- Rename Folder
- Move Folder
- Delete Folder
- Mount Tools Installer
- Unmount Tools Installer
- Upgrade Tools
- Guias de instruções das atividades do VMWare
Importante :
A tradução automática foi aplicada parcialmente neste conteúdo.
A localização de um conteúdo recém-publicado pode levar de 1 a 2 semanas para ficar disponível.
A tabela a seguir inclui uma lista de todas as atividades do Amazon Web Services, suas operações disponíveis e permissões associadas.
A tabela a seguir inclui uma lista de todas as atividades do Amazon Web Services, suas operações disponíveis e permissões associadas.
Atividades EC2
| Atividade | Operações | Permissões |
|---|---|---|
| AWSConfigureRobot | GetDocumentAsync CreateDocumentAsync CreateAssociationAsync SendCommandAsync DeleteDocumentAsync | ssm:GetDocument ssm:CreateDocument ssm:CreateAssociation ssm:SendCommand ssm:DeleteDocument ssm:ListAssociations |
| AWSCreateInstance | RunInstancesAsync CreateTagsAsync DeleteInstânciasAsync DescriptionInstanceAttributeAsync DescriptionImagesAsync | ec2:RunInstances ec2:CriarTags ec2:DescreverInstâncias ec2:DescreverInstânciasDeAtributo ec2:DescreverImages |
| AWSCreateInstanceFromTemplate | RunInstancesAsync CreateTagsAsync DeleteInstânciasAsync DescriptionInstanceAttributeAsync DescriptionImagesAsync | ec2:RunInstances ec2:CriarTags ec2:DescreverInstâncias ec2:DescreverInstânciasDeAtributo ec2:DescreverImages |
| AWSGetInstance | DescrevaInstânciasAssíncronas DescrevaInstanceAttributeAsync DescrevaImagesAsync | ec2:DescreverInstâncias ec2:DescreverInstânciaAtributo ec2:DescreverImages |
| AWSGetInstanceList | DescrevaInstânciasAssíncronas DescrevaInstanceAttributeAsync DescrevaImagesAsync | ec2:DescreverInstâncias ec2:DescreverInstânciaAtributo ec2:DescreverImages |
| AWSRebootInstance | RebootInstancesAsync DescriptionDescreveInstânciasAsync DescreveInstânciaAttributeAsync DescreverImagesAsync | ec2:RebootInstances ec2:DescriptionInstances ec2:DescriptionInstanceAttribute ec2:DescriptionImages |
| AWSRunPowerShellCommand | GetDocumentAsync CreateDocumentAsync CreateAssociationAsync SendCommandAsync DeleteDocumentAsync DescreverInstânciasAsync DescrevaInstânciaAttributeAsync DescreverImagesAsync | ssm:GetDocument ssm:CreateDocument ssm:CreateAssociation ssm:SendCommand ssm:DeleteDocument ec2:DescriptionInstances ec2:DescriptionInstanceAttribute ec2:DescriptionImages ssm:ListAssociations |
| AWSStartInstance | StartInstancesAsync DescrevaInstânciasAsync DescrevaInstanceAttributeAsync DescrevaImagesAsync | ec2:StartInstances ec2:DescriptionInstances ec2:DescriptionInstanceAttribute ec2:DescriptionImages |
| AWSStopInstance | StopInstancesAsync DescrevaInstânciasAsync DescrevaInstânciaAtributoAsync DescrevaImagesAsync | ec2:StopInstances ec2:DescriptionInstances ec2:DescriptionInstanceAttribute ec2:DescriptionImages |
| AWSTerminateInstance | TerminateInstancesAsync DescrevaInstânciasAsync DescreveInstânciaAtributoAsync DescrevaImagesAsync | ec2:EncerrarInstâncias ec2:DescreverInstâncias ec2:DescreverAtributoDeInstância ec2:DescreverImages |
Atividades dos baldes S3
| Atividade | Operações | Permissões |
|---|---|---|
| AWSConfigureLoggingBucket | GetACLAsync TapACLAsyncputBucketLoggingAsync | s3:GetBucketAcl s3:PutBucketAcl s3:PutBucketLogging |
| AWSConfigurePublicAccessBucket | PutPublicAccessBlockAsync | s3:PutBucketPublicAccessBlock |
| AWSCreateBucket | FazS3BucketExistV2Async ColocarBucketAsync ColocarBucketVersioningAsync DeleteBucketEncryptionAsync ColocarBucketEncryptionAsync ColocarBucketTaggingAsync ColocarPublicAccessBlockAsync ListBucketsAsync GetBucketLocationAsync GetBucketTaggingAsync GetBucketVersioningAsync GetACLAsync GetBucketLoggingAsync GetObjectLockConfigurationAsync GetPublicAccessBlockAsync GetBucketEncryptionAsync WithAsyncS3 | s3:GetBucketAcl s3:CreateBucket s3:PutBucketObjectLockConfiguration s3:PutBucketVersioning s3:PutEncryptionConfiguration s3:PutEncryptionConfiguration s3:PutBucketTagging s3:PutBucketPublicAccessBlock s3:ListBucket s3:GetBucketLocation s3:GetBucketTagging s3:GetBucketVersioning s3:GetBucketAcl s3:GetBucketLogging s3:GetBucketObjectLockConfiguration s3:GetBucketPublicAccessBlock s3: GetEncryptionConfiguration s3:DeleteBucket s3:DeleteObject |
| AWSDeleteBucket | GetBucketVersioningAsync ListVersionsAsync ListObjectsV2Async DeleteObjectsAsync DeleteBucketAsync | s3:GetBucketVersioning s3:ListBucketVersions s3:ListBucket s3:DeleteObjectVersion s3:DeleteBucket s3:ListAllMyBuckets |
| AWSDeleteBucketPolicy | DeleteBucketPolicyAsync | s3:DeleteBucketPolicy |
| AWSEmptyBucket | GetBucketVersioningAsync ListVersionsAsync ListObjectsV2Async DeleteObjectsAsync | s3:GetBucketVersioning s3:ListBucketVersions s3:ListBucket s3:DeleteObjectVersion |
| AWSGetBucket | ContainsS3BucketExistV2Async ListBucketsAsync GetBucketLocationAsync GetBucketTaggingAsync GetACLAsync GetBucketVersioningAsync GetBucketLoggingAsync GetObjectLockConfigurationAsync GetPublicAccessBlockAsync GetBucketEncryptionAsync | s3:GetBucketAcl (opcional) s3:ListBucket s3:GetBucketLocation s3:GetBucketTagging s3:GetBucketAcl s3:GetBucketVersioning s3:GetBucketLogging s3:GetBucketObjectLockConfiguration s3:GetBucketPublicAccessBlock s3:GetEncryptionConfiguration |
| AWSGetBucketList | ListBucketsAsync GetBucketLocationAsync GetBucketTaggingAsync WorksS3BucketExistV2Async | s3:ListBucket s3:GetBucketLocation s3:GetBucketTagging s3:GetBucketAcl |
| AWSGetBucketPolicy | GetBucketPolicyAsync | s3:GetBucketPolicy |
| AWSSetBucketPolicy | PutBucketPolicyAsync | s3:PutBucketPolicy |
| AWSUpdateBucket | FazS3BucketExistV2Async ColocarBucketVersioningAsync DeleteBucketEncryptionAsync ColocarBucketEncryptionAsync ColocarBucketTaggingAsync ColocarPublicAccessBlockAsync | s3:GetBucketAcl s3:PutBucketVersioning s3:PutEncryptionConfiguration s3:PutEncryptionConfiguration s3:PutBucketTagging s3:PutBucketPublicAccessBlock |
Atividades de objetos do S3
| Atividade | Operações | Permissões |
|---|---|---|
| AWSCopyObject | GetBucketLocationAsync CopyObjectAsync | s3:GetBucketLocation s3:GetObject s3:PutObject |
| AWSDeleteMultipleObjects | DeleteObjectsAsync | s3:DeleteObjectVersion s3:GetObject |
| AWSDeleteSingleObject | DeleteObjectsAsync | s3:DeleteObjectVersion s3:GetObject |
| AWSDownloadSingleObject | GetObjectAsync | s3:GetObject |
| AWSForEachObject | ListObjectsV2Async GetObjectMetadataAsync GetBucketLocationAsync GetObjectTaggingAsync ListVersionsAsync | s3:ListBucket s3:GetObject s3:ListBucketVersions s3:GetBucketLocation s3:GetObjectTagging s3:ListBucketVersions |
| AWSGetObject | GetObjectMetadataAsync GetBucketLocationAsync GetObjectTaggingAsync ListVersionsAsync | s3:ListBucketVersions s3:GetBucketLocation s3:GetObjectTagging s3:GetObjectVersionTagging1 s3:ListBucketVersions s3:GetObject |
| AWSGetObjectACL | GetACLAsync | s3:GetObjectAcl s3:GetObject |
| AWSSetObjectACL | GetACLAsyncputACLAsync | s3:GetObjectAcl s3:PutObjectAcl s3:GetObject |
| AWSUploadMultipleObjects | UploadDirectoryAsync | s3:PutObject s3:ListBucketMultipartUploads s3:ListMultipartUploadParts s3:AbortMultipartUpload s3:GetObject |
| AWSUploadSingleObject | UploadAsync GetObjectMetadataAsync GetBucketLocationAsync GetObjectTaggingAsync ListVersionsAsync GetACLAsync_putACLAsync | s3:GetObject s3:PutObject s3:PutObjectTagging s3:PutObjectVersionTagging s3:ListBucketVersions s3:GetBucketLocation s3:GetEncryptionConfiguration s3:GetObjectTagging s3:GetObjectVersionTagging s3:GetObjectAcl s3:PutObjectAcl s3:ListBucketMultipartUploads s3:GetObjectTagging s3:GetObjectAcl s3:PutObjectAcl s3:ListBucketMultipartUploads s3:ListMultAut |
1 Necessário apenas se IncluirVersõesInfo estiver definido como True.
Atividades do Grupo IAM
| Atividade | Operações | Permissões |
|---|---|---|
| AWSAddUserToGroup | AddUserToGroupAsync | iam:AddUserToGroup |
| AWSCreateGroup | CreateGroupAsync | iam:CreateGroup |
| AWSDeleteGroup | DeleteGroupAsync GetGroupAsync RemoveUserFromGroupAsync ListGroupPoliciesAsync DeleteGroupPolicyAsync ListAtchGroupPoliciesAsync DetachGroupPolicyAsync | IAm:DeleteGroup am:GetGroup am:RemoveUserFromGroup am:ListGroupPolicies am:DeleteGroupPolicy am:ListAtchGroupPolicies am:DetachGroupPolicy |
| AWSForEachGroup | ListGroupsAsync | iam:ListGroups |
| AWSGetGroup | GetGroupAsync | iam:GetGroup |
| AWSRemoveUserFromGroup | RemoveUserFromGroupAsync | iam:RemoveUserFromGroup |
| AWSUpdateGroup | UpdateGroupAsync GetGroupAsync | ram:UpdateGroup sob:GetGroup |
Atividades da política de IAM
| Atividade | Operações | Permissões |
|---|---|---|
| AWSAddRemoveInlinePolicy | PushPolicyAsync DeleteGroupPolicyAsync ColocarRolePolicyAsync DeleteRolePolicyAsync ColoqueUserPolicyAsync DeleteUserPolicyAsync | IAm:PutGroupPolicy am:DeleteGroupPolicy am:PutRolePolicy am:DeleteRolePolicy am:PutUserPolicy am:DeleteUserPolicy |
| AWSAttachDetachManagedPolicy | AttachGroupPolicyAsync DetachGroupPolicyAsync AttachRolePolicyAsync DetachRolePolicyAsync AttachUserPolicyAsync DetachUserPolicyAsync | IAm:AttachGroupPolicy am:DetachGroupPolicy am:AttachRolePolicy am:DetachRolePolicy am:AttachUserPolicy am:DetachUserPolicy |
| AWSCreateManagedPolicy | CreatePolicyAsync GetPolicyAsync ListPolicyVersionsAsync GetPolicyVersionAsync | iam:CreatePolicy am:GetPolicy am:ListPolicyVersions IA:GetPolicyVersion |
| AWSDeleteManagedPolicy | ListEntitiesForPolicyAsync DetachGroupPolicyAsync DetachRolePolicyAsync DetachUserPolicyAsync ListPolicyVersionsAsync GetPolicyVersionAsync DeletePolicyVersionAsync DeletePolicyAsync | iam:ListEntitiesForPolicy am:DetachGroupPolicy am:DetachRolePolicy am:DetachUserPolicy am:ListPolicyVersions ram:GetPolicyVersion iam:DeletePolicyVersion iam:DeletePolicy |
| AWSForEachManagedPolicy | ListPoliciesAsync ListPolicyTagsAsync ListPolicyVersionsAsync GetPolicyVersionAsync | ram:ListPolicies im:ListPolicyTags am: ListPolicyVersions IAm;GetPolicyVersion |
| AWSGetIAMIdentityInlinePolicies | ListGroupPoliciesAsync GetGroupPolicyAsync ListRolePoliciesAsync GetRolePolicyAsync ListUserPoliciesAsync GetUserPolicyAsync | IAm:ListGroupPolicies IAm:GetGroupPolicy am:ListRolePolicies am:GetRolePolicy am:ListUserPolicies am:GetUSerPolicy |
| AWSGetIAMIdentityManagedPolicies | ListAnexarPolíticasDeGrupoAssíncrono ListaAnexadaRolePoliciesAsync ListAnexarPoliciesAsync | iam:ListAnexarGroupPolicies iam:ListAnexarRolePolicies iam:ListAnexarPoliciesDeUsuário |
| AWSGetIdentitiesAttachedToPolicy | ListEntitiesForPolicyAsync | iam:ListEntitiesForPolicy |
| AWSGetManagedPolicy | GetPolicyAsync ListPolicyVersionsAsync GetPolicyVersionAsync | iam:GetPolicy am:ListPolicyVersions iam:GetPolicyVersion |
| AWSUpdateManagedPolicy | UntagPolicyAsync TagPolicyAsync CreatePolicyVersionAsync SetDefaultPolicyVersionAsync DeletePolicyVersionAsync GetPolicyAsync ListPolicyVersionsAsync GetPolicyVersionAsync | ram:UntagPolicy am:TagPolicy am:CreatePolicyVersion iam:SetDefaultPolicyVersion iam:DeletePolicyVersion iam:GetPolicy am:ListPolicyVersions iam:GetPolicyVersion |
Atividades de função do IAM
| Atividade | Operações | Permissões |
|---|---|---|
| AWSAddRoleToInstanceProfile | AddRoleToInstanceProfileAsync GetInstanceProfileAsync RemoveRoleFromInstanceProfileAsync | iam:AddRoleToInstanceProfile am:GetInstanceProfile am:RemoveRoleFromInstanceProfile |
| AWSRemoveRoleFromInstanceProfile | RemoveRoleFromInstanceProfileAsync | iam:RemoveRoleFromInstanceProfile |
| AWSCreateRole | CriarFunçãoAsync GetRoleAsync | iam:CriarFunção iam:GetRole |
| AWSDeleteRole | DeleteRoleAsync ListInstanceProfilesForRoleAsync RemoveRoleFromInstanceProfileAsync ListRolePoliciesAsync DeleteRolePolicyAsync ListAnexarRolePoliciesAsync DetachRolePolicyAsync GetInstanceProfileAsync DeleteInstanceProfileAsync | IAm:DeleteRole am:ListInstanceProfilesForRole am:RemoveRoleFromInstanceProfile am:ListRolePolicies am:DeleteRolePolicy am:ListAnexarRolePolicies am:DetachRolePolicy am:GetInstanceProfile am:DeleteInstanceProfile |
| AWSGetRole | GetRoleAsync | iam:GetRole |
| AWSUpdateRole | UpdateRoleAsync DeleteRolePermissionsBoundaryAsyncputRolePermissionsBoundaryAsync UntagRoleAsync TagRoleAsync GetRoleAsync | iam:UpdateRole iam:DeleteRolePermissionsBoundary am:PutRolePermissionsBoundary am:UntagRole am:TagRole am:GetRole |
| AWSForEachRole | ListRolesAsync ListRoleTagsAsync | iam:ListRole am:ListRoleTags |
Atividades do usuário do IAM
| Atividade | Operações | Permissões |
|---|---|---|
| AWSChangeUserPassword | UpdateLoginProfileAsync AttachUserPolicyAsync | iam:UpdateLoginProfile am:AttachUserPolicy |
| AWSCreateUser | CreateUserAsync CreateLoginProfileAsync AttachUserPolicyAsync CreateAccessKeyAsync | iam:CreateUser am:CreateLoginProfile am:AttachUserPolicy im:CreateAccessKey |
| AWSGetUser | GetUserAsync | iam:GetUser |
| AWSDeleteUser | DeleteUserAsync DeleteLoginProfileAsync ListAccessKeysAsync DeleteAccessKeyAsync ListSigningCertificatesAsync DeleteSigningCertificateAsync ListSSHPublicKeysAsync DeleteSSHPublicKeyAsync ListServiceSpecificCredentialsAsync DeleteServiceSpecificCredentialAsync ListVirtualMFADevicesAsync DeactivateMFADeviceAsync DeleteVirtualMFADeviceAsync ListUserPoliciesAsync DeleteUserPolicyAsync ListAttachedUserPoliciesAsync DetachUserPolicyAsync ListGroupsForUserAsync RemoveUserFromGroupAsync | iam:DeleteUser iam:DeleteLoginProfile iam:ListAccessKeys iam:DeleteAccessKey iam:ListSigningCertificates iam:DeleteSigningCertificate iam:ListSSHPublicKeys iam:DeleteSSHPublicKey iam:ListServiceSpecificCredentials iam:DeleteServiceSpecificCredential iam:ListVirtualMFADevices iam:DeactivateMFADevice iam:DeleteVirtualMFADevice iam:ListUserPolicies iam:DeleteUserPolicy iam:ListAttachedUserPolicies iam: DetachUserPolicy im:ListGroupsForUser iam:RemoveUserFromGroup |
| AWSUpdateUser | UpdateUserAsync DeleteUserPermissionsBoundaryAsync ColoqueUserPermissionsLimiteAsync UntagUserAsync TagUserAsync GetUserAsync | iam:UpdateUser iam:DeleteUserPermissionsBoundary am:PutUserPermissionsBoundary am:UntagUser am:TagUser iam:GetUser |
| AWSForEachUser | ListUsersAsync ListUserTagsAsync | iam:ListUsers iam:ListUserTags |
| AWSForEachUserGroup | ListGroupsForUserAsync | iam:ListGroupsForUser |
| AWSForEachUserInGroup | GetGroupAsync ListUserTagsAsync | ram:GetGroup im:ListUserTags |