AWS Managed Policies Explorer

Home About

AWS Managed Policies. A maze of twisty passages all alike. Explore them here. If it looks like a button, it's clickable. Always up to date.

Service: Amazon FSx

Short Name:

fsx

ARN Format:arn:aws:fsx:${Region}:${Account}:${ResourceType}/${ResourcePath}

ARN Regex:^arn:aws:fsx:.+

ReadOnlyAccess

…

AWSConfigRole

Action	Reference	Description
fsx:BypassSnaplockEnterpriseRetention	Docs	Grants permission to allow deletion of an FSx for ONTAP SnapLock Enterprise volume that contains WORM (write once, read many) files with active retention periods
fsx:DeleteResourcePolicy	Docs	Required to manage cross-account sharing of FSx volumes through AWS Resource Access Manager (RAM). PutResourcePolicy and GetResourcePolicy are also required
fsx:GetResourcePolicy	Docs	Required to manage cross-account sharing of FSx volumes through AWS Resource Access Manager (RAM). PutResourcePolicy and DeleteResourcePolicy are also required
fsx:ManageBackupPrincipalAssociations	Docs	Grants permission to manage backup principal associations through AWS Backup
fsx:PutResourcePolicy	Docs	Required to manage cross-account sharing of FSx volumes through AWS Resource Access Manager (RAM). DeleteResourcePolicy and GetResourcePolicy are also required
fsx:DescribeAssociatedFileGateways	Docs	Grants permission to describe the File Gateway instances associated with an Amazon FSx for Windows File Server file system
fsx:DescribeBackups	Docs	Grants permission to return the descriptions of all backups owned by your AWS account in the AWS Region of the endpoint that you're calling
fsx:DescribeDataRepositoryAssociations	Docs	Grants permission to return the descriptions of all data repository associations owned by your AWS account in the AWS Region of the endpoint that you're calling
fsx:DescribeDataRepositoryTasks	Docs	Grants permission to return the descriptions of all data repository tasks owned by your AWS account in the AWS Region of the endpoint that you're calling
fsx:DescribeFileCaches	Docs	Grants permission to return the descriptions of all file caches owned by your AWS account in the AWS Region of the endpoint that you're calling
fsx:DescribeFileSystemAliases	Docs	Grants permission to return the description of all DNS aliases owned by your Amazon FSx for Windows File Server file system
fsx:DescribeFileSystems	Docs	Grants permission to return the descriptions of all file systems owned by your AWS account in the AWS Region of the endpoint that you're calling
fsx:DescribeSharedVpcConfiguration	Docs	Grants permission to return the descriptions of whether FSx route table updates from participant accounts are allowed in your account
fsx:DescribeSnapshots	Docs	Grants permission to return the descriptions of all snapshots owned by your AWS account in the AWS Region of the endpoint you're calling
fsx:DescribeStorageVirtualMachines	Docs	Grants permission to return the descriptions of all storage virtual machines owned by your AWS account in the AWS Region of the endpoint that you're calling
fsx:DescribeVolumes	Docs	Grants permission to return the descriptions of all volumes owned by your AWS account in the AWS Region of the endpoint that you're calling
fsx:ListTagsForResource	Docs	Grants permission to list tags for an Amazon FSx resource
fsx:TagResource	Docs	Grants permission to tag an Amazon FSx resource
fsx:UntagResource	Docs	Grants permission to remove a tag from an Amazon FSx resource
fsx:AssociateFileGateway	Docs	Grants permission to associate a File Gateway instance with an Amazon FSx for Windows File Server file system
fsx:AssociateFileSystemAliases	Docs	Grants permission to associate DNS aliases with an Amazon FSx for Windows File Server file system
fsx:CancelDataRepositoryTask	Docs	Grants permission to cancel a data repository task
fsx:CopyBackup	Docs	Grants permission to copy a backup
fsx:CopySnapshotAndUpdateVolume	Docs	Grants permission to update an existing volume by using a snapshot from another Amazon FSx for OpenZFS file system
fsx:CreateBackup	Docs	Grants permission to create a new backup of an Amazon FSx file system or an Amazon FSx volume
fsx:CreateDataRepositoryAssociation	Docs	Grants permission to create a new data respository association for an Amazon FSx for Lustre file system
fsx:CreateDataRepositoryTask	Docs	Grants permission to create a new data respository task for an Amazon FSx for Lustre file system
fsx:CreateFileCache	Docs	Grants permission to create a new, empty, Amazon file cache
fsx:CreateFileSystem	Docs	Grants permission to create a new, empty, Amazon FSx file system
fsx:CreateFileSystemFromBackup	Docs	Grants permission to create a new Amazon FSx file system from an existing backup
fsx:CreateSnapshot	Docs	Grants permission to create a new snapshot on a volume
fsx:CreateStorageVirtualMachine	Docs	Grants permission to create a new storage virtual machine in an Amazon FSx for Ontap file system
fsx:CreateVolume	Docs	Grants permission to create a new volume
fsx:CreateVolumeFromBackup	Docs	Grants permission to create a new volume from backup
fsx:DeleteBackup	Docs	Grants permission to delete a backup, deleting its contents. After deletion, the backup no longer exists, and its data is no longer available
fsx:DeleteDataRepositoryAssociation	Docs	Grants permission to delete a data repository association
fsx:DeleteFileCache	Docs	Grants permission to delete a file cache, deleting its contents
fsx:DeleteFileSystem	Docs	Grants permission to delete a file system, deleting its contents and any existing automatic backups of the file system
fsx:DeleteSnapshot	Docs	Grants permission to delete a snapshot on a volume
fsx:DeleteStorageVirtualMachine	Docs	Grants permission to delete a storage virtual machine, deleting its contents
fsx:DeleteVolume	Docs	Grants permission to delete a volume, deleting its contents and any existing automatic backups of the volume
fsx:DisassociateFileGateway	Docs	Grants permission to disassociate a File Gateway instance from an Amazon FSx for Windows File Server file system
fsx:DisassociateFileSystemAliases	Docs	Grants permission to disassociate file system aliases with an Amazon FSx for Windows File Server file system
fsx:ReleaseFileSystemNfsV3Locks	Docs	Grants permission to release file system NFS V3 locks
fsx:RestoreVolumeFromSnapshot	Docs	Grants permission to restore volume state from a snapshot
fsx:StartMisconfiguredStateRecovery	Docs	Grants permission to start misconfigured state recovery
fsx:UpdateDataRepositoryAssociation	Docs	Grants permission to update data repository association configuration
fsx:UpdateFileCache	Docs	Grants permission to update file cache configuration
fsx:UpdateFileSystem	Docs	Grants permission to update file system configuration
fsx:UpdateSharedVpcConfiguration	Docs	Grants permission to enable or disable FSx route table updates from participant accounts in your account
fsx:UpdateSnapshot	Docs	Grants permission to update snapshot configuration
fsx:UpdateStorageVirtualMachine	Docs	Grants permission to update storage virtual machine configuration
fsx:UpdateVolume	Docs	Grants permission to update volume configuration

aws:RequestTag/${TagKey}aws:ResourceTag/${TagKey}aws:TagKeysfsx:IsBackupCopyDestinationfsx:IsBackupCopySourcefsx:NfsDataRepositoryAuthenticationEnabledfsx:NfsDataRepositoryEncryptionInTransitEnabledfsx:ParentVolumeIdfsx:StorageVirtualMachineId