# Actions, resources, and condition keys for Amazon DevOps Guru
<a name="list_devops-guru"></a>

Amazon DevOps Guru (service prefix: `devops-guru`) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:
+ Learn how to [configure this service](https://docs.aws.amazon.com/devops-guru/latest/userguide/).
+ View a list of the [API operations available for this service](https://docs.aws.amazon.com/devops-guru/latest/APIReference/).
+ Learn how to secure this service and its resources by [using IAM](https://docs.aws.amazon.com/devops-guru/latest/userguide/security-iam.html) permission policies.
+ View the [programmatic service authorization reference](https://servicereference.us-east-1.amazonaws.com/v1/devops-guru/devops-guru.json) for this service.

**Topics**
+ [API operations defined by Amazon DevOps Guru](#list_devops-guru-operations)
+ [Actions defined by Amazon DevOps Guru](#list_devops-guru-actions-as-permissions)
+ [Resource types defined by Amazon DevOps Guru](#list_devops-guru-resources-for-iam-policies)
+ [Condition keys for Amazon DevOps Guru](#list_devops-guru-policy-keys)

## API operations defined by Amazon DevOps Guru
<a name="list_devops-guru-operations"></a>

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the [Actions table](#list_devops-guru-actions-as-permissions).




- **   AddNotificationChannel  **
  - **IAM action:**  [devops-guru:AddNotificationChannel](#list_devops-guru-action-AddNotificationChannel) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Write

- **   DeleteInsight  **
  - **IAM action:**  [devops-guru:DeleteInsight](#list_devops-guru-action-DeleteInsight) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Write

- **   DescribeAccountHealth  **
  - **IAM action:**  [devops-guru:DescribeAccountHealth](#list_devops-guru-action-DescribeAccountHealth) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Read

- **   DescribeAccountOverview  **
  - **IAM action:**  [devops-guru:DescribeAccountOverview](#list_devops-guru-action-DescribeAccountOverview) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Read

- **   DescribeAnomaly  **
  - **IAM action:**  [devops-guru:DescribeAnomaly](#list_devops-guru-action-DescribeAnomaly) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Read

- **   DescribeEventSourcesConfig  **
  - **IAM action:**  [devops-guru:DescribeEventSourcesConfig](#list_devops-guru-action-DescribeEventSourcesConfig) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Read

- **   DescribeFeedback  **
  - **IAM action:**  [devops-guru:DescribeFeedback](#list_devops-guru-action-DescribeFeedback) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Read

- **   DescribeInsight  **
  - **IAM action:**  [devops-guru:DescribeInsight](#list_devops-guru-action-DescribeInsight) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Read

- **   DescribeOrganizationHealth  **
  - **IAM action:**  [devops-guru:DescribeOrganizationHealth](#list_devops-guru-action-DescribeOrganizationHealth) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Read

- **   DescribeOrganizationOverview  **
  - **IAM action:**  [devops-guru:DescribeOrganizationOverview](#list_devops-guru-action-DescribeOrganizationOverview) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Read

- **   DescribeOrganizationResourceCollectionHealth  **
  - **IAM action:**  [devops-guru:DescribeOrganizationResourceCollectionHealth](#list_devops-guru-action-DescribeOrganizationResourceCollectionHealth) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Read

- **   DescribeResourceCollectionHealth  **
  - **IAM action:**  [devops-guru:DescribeResourceCollectionHealth](#list_devops-guru-action-DescribeResourceCollectionHealth) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Read

- **   DescribeServiceIntegration  **
  - **IAM action:**  [devops-guru:DescribeServiceIntegration](#list_devops-guru-action-DescribeServiceIntegration) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Read

- **   GetCostEstimation  **
  - **IAM action:**  [devops-guru:GetCostEstimation](#list_devops-guru-action-GetCostEstimation) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Read

- **   GetResourceCollection  **
  - **IAM action:**  [devops-guru:GetResourceCollection](#list_devops-guru-action-GetResourceCollection) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Read

- **   ListAnomaliesForInsight  **
  - **IAM action:**  [devops-guru:ListAnomaliesForInsight](#list_devops-guru-action-ListAnomaliesForInsight) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** List

- **   ListAnomalousLogGroups  **
  - **IAM action:**  [devops-guru:ListAnomalousLogGroups](#list_devops-guru-action-ListAnomalousLogGroups) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** List

- **   ListEvents  **
  - **IAM action:**  [devops-guru:ListEvents](#list_devops-guru-action-ListEvents) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** List

- **   ListInsights  **
  - **IAM action:**  [devops-guru:ListInsights](#list_devops-guru-action-ListInsights) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** List

- **   ListMonitoredResources  **
  - **IAM action:**  [devops-guru:ListMonitoredResources](#list_devops-guru-action-ListMonitoredResources) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** List

- **   ListNotificationChannels  **
  - **IAM action:**  [devops-guru:ListNotificationChannels](#list_devops-guru-action-ListNotificationChannels) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** List

- **   ListOrganizationInsights  **
  - **IAM action:**  [devops-guru:ListOrganizationInsights](#list_devops-guru-action-ListOrganizationInsights) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** List

- **   ListRecommendations  **
  - **IAM action:**  [devops-guru:ListRecommendations](#list_devops-guru-action-ListRecommendations) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** List

- **   PutFeedback  **
  - **IAM action:**  [devops-guru:PutFeedback](#list_devops-guru-action-PutFeedback) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Write

- **   RemoveNotificationChannel  **
  - **IAM action:**  [devops-guru:RemoveNotificationChannel](#list_devops-guru-action-RemoveNotificationChannel) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Write

- **   SearchInsights  **
  - **IAM action:**  [devops-guru:SearchInsights](#list_devops-guru-action-SearchInsights) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** List

- **   SearchOrganizationInsights  **
  - **IAM action:**  [devops-guru:SearchOrganizationInsights](#list_devops-guru-action-SearchOrganizationInsights) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** List

- **   StartCostEstimation  **
  - **IAM action:**  [devops-guru:StartCostEstimation](#list_devops-guru-action-StartCostEstimation) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Read

- **   UpdateEventSourcesConfig  **
  - **IAM action:**  [devops-guru:UpdateEventSourcesConfig](#list_devops-guru-action-UpdateEventSourcesConfig) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Write

- **   UpdateResourceCollection  **
  - **IAM action:**  [devops-guru:UpdateResourceCollection](#list_devops-guru-action-UpdateResourceCollection) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Write

- **   UpdateServiceIntegration  **
  - **IAM action:**  [devops-guru:UpdateServiceIntegration](#list_devops-guru-action-UpdateServiceIntegration) 
  - **Condition key:** 
  - **Possible value(s):** 
  - **Access level:** Write



## Actions defined by Amazon DevOps Guru
<a name="list_devops-guru-actions-as-permissions"></a>

You can specify the following actions in the `Action` element of an IAM policy statement. For each action, the table lists the resource types and condition keys supported by that action. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.




- **   [AddNotificationChannel](https://docs.aws.amazon.com/devops-guru/latest/APIReference/API_AddNotificationChannel.html)  **
  - **Description:** Grants permission to add a notification channel to DevOps Guru
  - **Resource types (\*required):** [topic\*](#list_devops-guru-resource-topic)
  - **Condition keys:**  
  - **Access level:** Write

- **   [DeleteInsight](https://docs.aws.amazon.com/devops-guru/latest/APIReference/API_DeleteInsight.html)  **
  - **Description:** Grants permission to delete specified insight in your account
  - **Resource types (\*required):** 
  - **Condition keys:**  
  - **Access level:** Write

- **   [DescribeAccountHealth](https://docs.aws.amazon.com/devops-guru/latest/APIReference/API_DescribeAccountHealth.html)  **
  - **Description:** Grants permission to view the health of operations in your AWS account
  - **Resource types (\*required):** 
  - **Condition keys:**  
  - **Access level:** Read

- **   [DescribeAccountOverview](https://docs.aws.amazon.com/devops-guru/latest/APIReference/API_DescribeAccountOverview.html)  **
  - **Description:** Grants permission to view the health of operations within a time range in your AWS account
  - **Resource types (\*required):** 
  - **Condition keys:**  
  - **Access level:** Read

- **   [DescribeAnomaly](https://docs.aws.amazon.com/devops-guru/latest/APIReference/API_DescribeAnomaly.html)  **
  - **Description:** Grants permission to list the details of a specified anomaly
  - **Resource types (\*required):** 
  - **Condition keys:**  
  - **Access level:** Read

- **   [DescribeEventSourcesConfig](https://docs.aws.amazon.com/devops-guru/latest/APIReference/API_DescribeEventSourcesConfig.html)  **
  - **Description:** Grants permission to retrieve details about event sources for DevOps Guru
  - **Resource types (\*required):** 
  - **Condition keys:**  
  - **Access level:** Read

- **   [DescribeFeedback](https://docs.aws.amazon.com/devops-guru/latest/APIReference/API_DescribeFeedback.html)  **
  - **Description:** Grants permission to view the feedback details of a specified insight
  - **Resource types (\*required):** 
  - **Condition keys:**  
  - **Access level:** Read

- **   [DescribeInsight](https://docs.aws.amazon.com/devops-guru/latest/APIReference/API_DescribeInsight.html)  **
  - **Description:** Grants permission to list the details of a specified insight
  - **Resource types (\*required):** 
  - **Condition keys:**  
  - **Access level:** Read

- **   [DescribeOrganizationHealth](https://docs.aws.amazon.com/devops-guru/latest/APIReference/API_DescribeOrganizationHealth.html)  **
  - **Description:** Grants permission to view the health of operations in your organization
  - **Resource types (\*required):** 
  - **Condition keys:**  
  - **Access level:** Read

- **   [DescribeOrganizationOverview](https://docs.aws.amazon.com/devops-guru/latest/APIReference/API_DescribeOrganizationOverview.html)  **
  - **Description:** Grants permission to view the health of operations within a time range in your organization
  - **Resource types (\*required):** 
  - **Condition keys:**  
  - **Access level:** Read

- **   [DescribeOrganizationResourceCollectionHealth](https://docs.aws.amazon.com/devops-guru/latest/APIReference/API_DescribeOrganizationResourceCollectionHealth.html)  **
  - **Description:** Grants permission to view the health of operations for each AWS CloudFormation stack or AWS Services or accounts specified in DevOps Guru in your organization
  - **Resource types (\*required):** 
  - **Condition keys:**  
  - **Access level:** Read

- **   [DescribeResourceCollectionHealth](https://docs.aws.amazon.com/devops-guru/latest/APIReference/API_DescribeResourceCollectionHealth.html)  **
  - **Description:** Grants permission to view the health of operations for each AWS CloudFormation stack specified in DevOps Guru
  - **Resource types (\*required):** 
  - **Condition keys:**  
  - **Access level:** Read

- **   [DescribeServiceIntegration](https://docs.aws.amazon.com/devops-guru/latest/APIReference/API_DescribeServiceIntegration.html)  **
  - **Description:** Grants permission to view the integration status of services that can be integrated with DevOps Guru
  - **Resource types (\*required):** 
  - **Condition keys:**  
  - **Access level:** Read

- **   [GetCostEstimation](https://docs.aws.amazon.com/devops-guru/latest/APIReference/API_GetCostEstimation.html)  **
  - **Description:** Grants permission to list service resource cost estimates
  - **Resource types (\*required):** 
  - **Condition keys:**  
  - **Access level:** Read

- **   [GetResourceCollection](https://docs.aws.amazon.com/devops-guru/latest/APIReference/API_GetResourceCollection.html)  **
  - **Description:** Grants permission to list AWS CloudFormation stacks that DevOps Guru is configured to use
  - **Resource types (\*required):** 
  - **Condition keys:**  
  - **Access level:** Read

- **   [ListAnomaliesForInsight](https://docs.aws.amazon.com/devops-guru/latest/APIReference/API_ListAnomaliesForInsight.html)  **
  - **Description:** Grants permission to list anomalies of a given insight in your account
  - **Resource types (\*required):** 
  - **Condition keys:** [devops-guru:ServiceNames](#list_devops-guru-devops-guru_ServiceNames)
  - **Access level:** List

- **   [ListAnomalousLogGroups](https://docs.aws.amazon.com/devops-guru/latest/APIReference/API_ListAnomalousLogGroups.html)  **
  - **Description:** Grants permission to list log anomalies of a given insight in your account
  - **Resource types (\*required):** 
  - **Condition keys:**  
  - **Access level:** List

- **   [ListEvents](https://docs.aws.amazon.com/devops-guru/latest/APIReference/API_ListEvents.html)  **
  - **Description:** Grants permission to list resource events that are evaluated by DevOps Guru
  - **Resource types (\*required):** 
  - **Condition keys:**  
  - **Access level:** List

- **   [ListInsights](https://docs.aws.amazon.com/devops-guru/latest/APIReference/API_ListInsights.html)  **
  - **Description:** Grants permission to list insights in your account
  - **Resource types (\*required):** 
  - **Condition keys:**  
  - **Access level:** List

- **   [ListMonitoredResources](https://docs.aws.amazon.com/devops-guru/latest/APIReference/API_ListMonitoredResources.html)  **
  - **Description:** Grants permission to list resource monitored by DevOps Guru in your account
  - **Resource types (\*required):** 
  - **Condition keys:**  
  - **Access level:** List

- **   [ListNotificationChannels](https://docs.aws.amazon.com/devops-guru/latest/APIReference/API_ListNotificationChannels.html)  **
  - **Description:** Grants permission to list notification channels configured for DevOps Guru in your account
  - **Resource types (\*required):** 
  - **Condition keys:**  
  - **Access level:** List

- **   [ListOrganizationInsights](https://docs.aws.amazon.com/devops-guru/latest/APIReference/API_ListOrganizationInsights.html)  **
  - **Description:** Grants permission to list insights in your organization
  - **Resource types (\*required):** 
  - **Condition keys:**  
  - **Access level:** List

- **   [ListRecommendations](https://docs.aws.amazon.com/devops-guru/latest/APIReference/API_ListRecommendations.html)  **
  - **Description:** Grants permission to list a specified insight's recommendations
  - **Resource types (\*required):** 
  - **Condition keys:**  
  - **Access level:** List

- **   [PutFeedback](https://docs.aws.amazon.com/devops-guru/latest/APIReference/API_PutFeedback.html)  **
  - **Description:** Grants permission to submit a feedback to DevOps Guru
  - **Resource types (\*required):** 
  - **Condition keys:**  
  - **Access level:** Write

- **   [RemoveNotificationChannel](https://docs.aws.amazon.com/devops-guru/latest/APIReference/API_RemoveNotificationChannel.html)  **
  - **Description:** Grants permission to remove a notification channel from DevOps Guru
  - **Resource types (\*required):** [topic\*](#list_devops-guru-resource-topic)
  - **Condition keys:**  
  - **Access level:** Write

- **   [SearchInsights](https://docs.aws.amazon.com/devops-guru/latest/APIReference/API_SearchInsights.html)  **
  - **Description:** Grants permission to search insights in your account
  - **Resource types (\*required):** 
  - **Condition keys:** [devops-guru:ServiceNames](#list_devops-guru-devops-guru_ServiceNames)
  - **Access level:** List

- **   [SearchOrganizationInsights](https://docs.aws.amazon.com/devops-guru/latest/APIReference/API_SearchOrganizationInsights.html)  **
  - **Description:** Grants permission to search insights in your organization
  - **Resource types (\*required):** 
  - **Condition keys:**  
  - **Access level:** List

- **   [StartCostEstimation](https://docs.aws.amazon.com/devops-guru/latest/APIReference/API_StartCostEstimation.html)  **
  - **Description:** Grants permission to start the creation of an estimate of the monthly cost
  - **Resource types (\*required):** 
  - **Condition keys:**  
  - **Access level:** Read

- **   [UpdateEventSourcesConfig](https://docs.aws.amazon.com/devops-guru/latest/APIReference/API_UpdateEventSourcesConfig.html)  **
  - **Description:** Grants permission to update an event source for DevOps Guru
  - **Resource types (\*required):** 
  - **Condition keys:**  
  - **Access level:** Write

- **   [UpdateResourceCollection](https://docs.aws.amazon.com/devops-guru/latest/APIReference/API_UpdateResourceCollection.html)  **
  - **Description:** Grants permission to update the list of AWS CloudFormation stacks that are used to specify which AWS resources in your account are analyzed by DevOps Guru
  - **Resource types (\*required):** 
  - **Condition keys:**  
  - **Access level:** Write

- **   [UpdateServiceIntegration](https://docs.aws.amazon.com/devops-guru/latest/APIReference/API_UpdateServiceIntegration.html)  **
  - **Description:** Grants permission to enable or disable a service that integrates with DevOps Guru
  - **Resource types (\*required):** 
  - **Condition keys:**  
  - **Access level:** Write



## Resource types defined by Amazon DevOps Guru
<a name="list_devops-guru-resources-for-iam-policies"></a>

The following resource types are defined by this service and can be used in the `Resource` element of IAM permission policy statements.



| Resource types | ARN | Condition keys | 
| --- | --- | --- | 
|  [topic](https://docs.aws.amazon.com/devops-guru/latest/userguide/setting-up.html#setting-up-notifications)  | arn:${Partition}:sns:${Region}:${Account}:${TopicName} |   | 

## Condition keys for Amazon DevOps Guru
<a name="list_devops-guru-policy-keys"></a>

Amazon DevOps Guru defines the following condition keys that can be used in the `Condition` element of an IAM policy.



| Condition keys | Description | Type | 
| --- | --- | --- | 
|   [devops-guru:ServiceNames](https://docs.aws.amazon.com/devops-guru/latest/APIReference/API_ServiceCollection.html)  | Filters access by API to restrict access to given AWS service names | ArrayOfString |