| # DevOps Agent IAM permissions |
|
|
| AWS DevOps Agent uses IAM actions in the `aidevops:` namespace to control access. |
|
|
| ## Agent Space management actions |
| + aidevops:GetAgentSpace - View Agent Space details |
| + aidevops:GetAssociation - View account association details |
| + aidevops:ListAssociations - List AWS account associations |
| + aidevops:CreateAgentSpace - Create new Agent Spaces |
| + aidevops:DeleteAgentSpace - Delete Agent Spaces |
| + aidevops:UpdateAgentSpace - Update Agent Space configuration |
| + aidevops:ListAgentSpaces - List all Agent Spaces |
|
|
| ## Investigation and execution actions |
| + aidevops:ListExecutions - View execution metadata |
| + aidevops:GetExecution - Get execution details |
| + aidevops:CreateTask - Create investigation tasks |
| + aidevops:ListTasks - List tasks |
| + aidevops:GetTask - Get task details |
| + aidevops:UpdateTask - Update task priority/status |
|
|
| ## Chat actions |
| + aidevops:ListChats - View chat history |
| + aidevops:CreateChat - Create new conversations |
| + aidevops:SendMessage - Send messages and receive responses |
|
|
| ## Knowledge management actions |
| + aidevops:CreateAsset - Create skills, AGENTS.md, attachments |
| + aidevops:GetAsset - Retrieve asset metadata |
| + aidevops:UpdateAsset - Update assets |
| + aidevops:DeleteAsset - Delete assets |
| + aidevops:ListAssets - List assets |
|
|
| ## Service and integration actions |
| + aidevops:RegisterService - Register third-party services |
| + aidevops:AssociateService - Associate services with Agent Spaces |
| + aidevops:EnableOperatorApp - Enable web app access |
|
|
| ## AWS managed policies |
| + **AIDevOpsAgentAccessPolicy** - Read-only permissions for agent investigations |
| + **AIDevOpsOperatorAppAccessPolicy** - Operator web app access permissions |
|
|
