Amazon Cloud Directory is no longer be open to new customers. For alternatives to Cloud Directory, explore [Amazon DynamoDB](https://aws.amazon.com/dynamodb/) and [Amazon Neptune](https://aws.amazon.com/neptune/). If you need help choosing the right alternative for your use case, or for any other questions, contact [AWS Support](https://aws.amazon.com/support/). 

# Amazon Cloud Directory API Permissions: Actions, Resources, and Conditions Reference
Amazon Cloud Directory API Permissions Reference

When you are setting up [Access Control](iam_auth_access.md#iam_auth_access_accesscontrol) and writing permissions policies that you can attach to an IAM identity (identity-based policies), you can use the following table as a reference. The table lists each Amazon Cloud Directory API operation, the corresponding actions for which you can grant permissions to perform the action, the AWS resource for which you can grant the permissions. You specify the actions in the policy's `Action` field and the resource value in the policy's `Resource` field. 

You can use AWS-wide condition keys in your Amazon Cloud Directory policies to express conditions. For a complete list of AWS-wide keys, see [Available Global Condition Keys](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#AvailableKeys) in the *IAM User Guide*. 

**Note**  
To specify an action, use the `clouddirectory:` prefix followed by the API operation name (for example, `clouddirectory:CreateDirectory`).


**Amazon Cloud Directory API and Required Permissions for Actions**  

| Amazon Cloud Directory API Operations | Required Permissions (API Actions) | Resources | 
| --- | --- | --- | 
| [AddFacetToObject](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_AddFacetToObject.html) |  `clouddirectory:AddFacetToObject`  | \$1 | 
| [ApplySchema](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_ApplySchema.html) | clouddirectory:ApplySchema | \$1 | 
| [AttachObject](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_AttachObject.html)  | clouddirectory:AttachObject | \$1 | 
|   [AttachPolicy](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_AttachPolicy.html)   |  `clouddirectory:AttachPolicy`  |  \$1  | 
|   [AttachToIndex](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_AttachToIndex.html)   |  `clouddirectory:AttachToIndex`  |  \$1  | 
|   [AttachTypedLink](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_AttachTypedLink.html)   |  `clouddirectory:AttachTypedLink`  |  \$1  | 
|   [BatchRead](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_BatchRead.html)   |  `clouddirectory:BatchRead`  |  \$1  | 
|   [BatchWrite](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_BatchWrite.html)   |  `clouddirectory:BatchWrite`  |  \$1  | 
|   [CreateDirectory](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_CreateDirectory.html)   |  `clouddirectory:CreateDirectory`  |  \$1  | 
|   [CreateFacet](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_CreateFacet.html)   |  `clouddirectory:CreateFacet`  |  \$1  | 
|   [CreateIndex](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_CreateIndex.html)   |  `clouddirectory:CreateIndex`  |  \$1  | 
|   [CreateObject](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_CreateObject.html)   |  `clouddirectory:CreateObject`  |  \$1  | 
|   [CreateSchema](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_CreateSchema.html)   |  `clouddirectory:CreateSchema`  |  \$1  | 
|   [CreateTypedLinkFacet](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_CreateTypedLinkFacet.html)   |  `clouddirectory:CreateTypedLinkFacet`  |  \$1  | 
|   [DeleteDirectory](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_DeleteDirectory.html)   |  `clouddirectory:DeleteDirectory`  |  \$1  | 
|   [DeleteFacet](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_DeleteFacet.html)   |  `clouddirectory:DeleteFacet`  |  \$1  | 
|   [DeleteObject](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_DeleteObject.html)   |  `clouddirectory:DeleteObject`  |  \$1  | 
|   [DeleteSchema](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_DeleteSchema.html)   |  `clouddirectory:DeleteSchema`  |  \$1  | 
|   [DeleteTypedLinkFacet](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_DeleteTypedLinkFacet.html)   |  `clouddirectory:DeleteTypedLinkFacet`  |  \$1  | 
|   [DetachFromIndex](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_DetachFromIndex.html)   |  `clouddirectory:DetachFromIndex`  |  \$1  | 
|   [DetachObject](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_DetachObject.html)   |  `clouddirectory:DetachObject`  |  \$1  | 
|   [DetachPolicy](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_DetachPolicy.html)   |  `clouddirectory:DetachPolicy`  |  \$1  | 
|   [DetachedTypedLink](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_DetachTypedLink.html)   |  `clouddirectory:DetachTypedLink`  |  \$1  | 
|   [DisableDirectory](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_DisableDirectory.html)   |  `clouddirectory:DisableDirectory`  |  \$1  | 
|   [EnableDirectory](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_EnableDirectory.html)   |  `clouddirectory:EnableDirectory`  |  \$1  | 
|   [GetAppliedSchemaVersion](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_GetAppliedSchemaVersion.html)   |  `clouddirectory:GetAppliedSchemaVersion`  |  \$1  | 
|   [GetDirectory](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_GetDirectory.html)   |  `clouddirectory:GetDirectory`  |  \$1  | 
|   [GetFacet](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_GetFacet.html)   |  `clouddirectory:GetFacet`  |  \$1  | 
|   [GetObjectAttributes](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_GetObjectAttributes.html)   |  `clouddirectory:GetObjectAttributes`  |  \$1  | 
|   [GetObjectInformation](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_GetObjectInformation.html)   |  `clouddirectory:GetObjectInformation`  |  \$1  | 
|   [GetSchemaAsJson](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_GetSchemaAsJson.html)   |  `clouddirectory:GetSchemaAsJson`  |  \$1  | 
|   [GetTypedLinkFacetInformation](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_GetTypedLinkFacetInformation.html)   |  `clouddirectory:GetTypedLinkFacetInformation`  |  \$1  | 
|   [ListAppliedSchemaArns](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_ListAppliedSchemaArns.html)   |  `clouddirectory:ListAppliedSchemaArns`  |  \$1  | 
|  [ListAttachedIndices](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_ListAttachedIndices.html)  |  `clouddirectory:ListAttachedIndices`  |  \$1  | 
|  [ListDevelopmentSchemaArns](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_ListDevelopmentSchemaArns.html)  |  `clouddirectory:ListDevelopmentSchemaArns`  |  \$1  | 
|  [ListDirectories](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_ListDirectories.html)  |  `clouddirectory:ListDirectories`  |  \$1  | 
|   [ListFacetAttributes](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_ListFacetAttributes.html)   |  `clouddirectory:ListFacetAttributes`  |  \$1  | 
|  [ListFacetNames](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_ListFacetNames.html)  |  `clouddirectory:ListFacetNames`  |  \$1  | 
|   [ListIncomingTypedLinks](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_ListIncomingTypedLinks.html)   |  `clouddirectory:ListIncomingTypedLinks`  |  \$1  | 
|  [ListIndex](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_ListIndex.html)  |  `clouddirectory:ListIndex`  |  \$1  | 
|   [ListObjectAttributes](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_ListObjectAttributes.html)   |  `clouddirectory:ListObjectAttributes`  |  \$1  | 
|  [ListObjectChildren](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_ListObjectChildren.html)  |  `clouddirectory:ListObjectChildren`  |  \$1  | 
|   [ListObjectParentPaths](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_ListObjectParentPaths.html)   |  `clouddirectory:ListObjectParentPaths`  |  \$1  | 
|   [ListObjectParents](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_ListObjectParents.html)   |  `clouddirectory:ListObjectParents`  |  \$1  | 
|   [ListObjectPolicies](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_ListObjectPolicies.html)   |  `clouddirectory:ListObjectPolicies`  |  \$1  | 
|   [ListOutgoingTypedLinks](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_ListOutgoingTypedLinks.html)   |  `clouddirectory:ListOutgoingTypedLinks`  |  \$1  | 
|   [ListPolicyAttachments](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_ListPolicyAttachments.html)   |  `clouddirectory:ListPolicyAttachments`  |  \$1  | 
|   [ListPublishedSchemaArns](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_ListPublishedSchemaArns.html)   |  `clouddirectory:ListPublishedSchemaArns`  |  \$1  | 
|   [ListTagsForResource](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_ListTagsForResource.html)   |  `clouddirectory:ListTagsForResource`  |  \$1  | 
|   [ListTypedLinkFacetAttributes](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_ListTypedLinkFacetAttributes.html)   |  `clouddirectory:ListTypedLinkFacetAttributes`  |  \$1  | 
|   [ListTypedLinkFacetNames](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_ListTypedLinkFacetNames.html)   |  `clouddirectory:ListTypedLinkFacetNames`  |  \$1  | 
|   [LookupPolicy](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_LookupPolicy.html)   |  `clouddirectory:LookupPolicy`  |  \$1  | 
|   [PublishSchema](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_PublishSchema.html)   |  `clouddirectory:PublishSchema`  |  \$1  | 
|   [PutSchemaFromJson](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_PutSchemaFromJson.html)   |  `clouddirectory:PutSchemaFromJson`  |  \$1  | 
|   [RemoveFacetFromObject](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_RemoveFacetFromObject.html)   |  `clouddirectory:RemoveFacetFromObject`  |  \$1  | 
|   [TagResource](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_TagResource.html)   |  `clouddirectory:TagResource`  |  \$1  | 
|   [UntagResource](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_UntagResource.html)   |  `clouddirectory:UntagResource`  |  \$1  | 
|   [UpdateFacet](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_UpdateFacet.html)   |  `clouddirectory:UpdateFacet`  |  \$1  | 
|   [UpdateObjectAttributes](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_UpdateObjectAttributes.html)   |  `clouddirectory:UpdateObjectAttributes`  |  \$1  | 
|   [UpdateSchema](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_UpdateSchema.html)   |  `clouddirectory:UpdateSchema`  |  \$1  | 
|   [UpdateTypedLinkFacet](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_UpdateTypedLinkFacet.html)   |  `clouddirectory:UpdateTypedLinkFacet`  |  \$1  | 
|   [UpgradeAppliedSchema](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_UpgradeAppliedSchema.html)   |  `clouddirectory:UpgradeAppliedSchema`  |  \$1  | 
|   [UpgradePublishedSchema](http://docs.aws.amazon.com/clouddirectory/latest/APIReference/API_UpgradePublishedSchema.html)   |  `clouddirectory:UpgradePublishedSchema`  |  \$1  |