tech-advisor / training /data /raw /aws-devops-agent-security-devops-agent-iam-permissions.md
aslanconfig's picture
Initial commit: Tech Advisor fine-tuned on AWS DevOps Agent docs
975da6d
|
Raw
History Blame Contribute Delete
1.68 kB

A newer version of the Gradio SDK is available: 6.20.0

Upgrade

DevOps Agent IAM permissions

AWS DevOps Agent uses IAM actions in the aidevops: namespace to control access.

Agent Space management actions

  • aidevops:GetAgentSpace - View Agent Space details
  • aidevops:GetAssociation - View account association details
  • aidevops:ListAssociations - List AWS account associations
  • aidevops:CreateAgentSpace - Create new Agent Spaces
  • aidevops:DeleteAgentSpace - Delete Agent Spaces
  • aidevops:UpdateAgentSpace - Update Agent Space configuration
  • aidevops:ListAgentSpaces - List all Agent Spaces

Investigation and execution actions

  • aidevops:ListExecutions - View execution metadata
  • aidevops:GetExecution - Get execution details
  • aidevops:CreateTask - Create investigation tasks
  • aidevops:ListTasks - List tasks
  • aidevops:GetTask - Get task details
  • aidevops:UpdateTask - Update task priority/status

Chat actions

  • aidevops:ListChats - View chat history
  • aidevops:CreateChat - Create new conversations
  • aidevops:SendMessage - Send messages and receive responses

Knowledge management actions

  • aidevops:CreateAsset - Create skills, AGENTS.md, attachments
  • aidevops:GetAsset - Retrieve asset metadata
  • aidevops:UpdateAsset - Update assets
  • aidevops:DeleteAsset - Delete assets
  • aidevops:ListAssets - List assets

Service and integration actions

  • aidevops:RegisterService - Register third-party services
  • aidevops:AssociateService - Associate services with Agent Spaces
  • aidevops:EnableOperatorApp - Enable web app access

AWS managed policies

  • AIDevOpsAgentAccessPolicy - Read-only permissions for agent investigations
  • AIDevOpsOperatorAppAccessPolicy - Operator web app access permissions