本文為英文版的機器翻譯版本，如內容有任何歧義或不一致之處，概以英文版為準。

# AWS Serverless Application Repository API 許可：動作和資源參考
<a name="serverlessrepo-api-permissions-ref"></a>

當您設定[存取控制](security-iam.md#security_iam_access-manage)及撰寫可連接到 IAM 身分的許可政策 (以身分為基礎的政策) 時，可參考下表。資料表包含每個 AWS Serverless Application Repository API 操作、您可以授予執行動作許可的對應動作，以及您可以授予許可 AWS 的資源。您在政策的 `Action` 欄位中指定動作，然後在政策的 `Resource` 欄位中指定資源值。

若要指定動作，請使用後接 API 操作名稱的 `serverlessrepo:` 字首 (例如，`serverlessrepo:ListApplications`)。


| 作業 | URI | Method | AWS 資源 ARNs) | 
| --- | --- | --- | --- | 
| **操作：**ListApplications<br />**必要許可：**serverlessrepo:ListApplications | /applications | GET | \* | 
| **操作：**CreateApplication<br />**必要許可：**serverlessrepo:CreateApplication | /applications | POST | \* | 
| **操作：**GetApplication<br />**必要許可：**serverlessrepo:GetApplication | /applications/{{application-id}} | GET | arn:aws:serverlessrepo:{{region}}:{{account-id}}:applications/{{application-name}} | 
| **操作：**DeleteApplication<br />**必要許可：**serverlessrepo:DeleteApplication | /applications/{{application-id}} | DELETE | arn:aws:serverlessrepo:{{region}}:{{account-id}}:applications/{{application-name}} | 
| **操作：**UpdateApplication<br />**必要許可：**serverlessrepo:UpdateApplication | /applications/{{application-id}} | PATCH | arn:aws:serverlessrepo:{{region}}:{{account-id}}:applications/{{application-name}} | 
| **操作：**CreateCloudFormationChangeSet<br />**必要許可：**serverlessrepo:CreateCloudFormationChangeSet | /applications/{{application-id}}/changesets | POST | arn:aws:serverlessrepo:{{region}}:{{account-id}}:applications/{{application-name}} | 
| **操作：**GetApplicationPolicy<br />**必要許可：**serverlessrepo:GetApplicationPolicy | /applications/{{application-id}}/policy | GET | arn:aws:serverlessrepo:{{region}}:{{account-id}}:applications/{{application-name}} | 
| **操作：**PutApplicationPolicy<br />**必要許可：**serverlessrepo:PutApplicationPolicy | /applications/{{application-id}}/policy | PUT | arn:aws:serverlessrepo:{{region}}:{{account-id}}:applications/{{application-name}} | 
| **操作：**ListApplicationVersions<br />**必要許可：**serverlessrepo:ListApplicationVersions | /applications/{{application-id}}/versions | GET | arn:aws:serverlessrepo:{{region}}:{{account-id}}:applications/{{application-name}} | 
| **操作：**CreateApplicationVersion<br />**必要許可：**serverlessrepo:CreateApplicationVersion | /applications/{{application-id}}/versions/{{semantic-version}} | PUT | arn:aws:serverlessrepo:{{region}}:{{account-id}}:applications/{{application-name}} | 
| **操作：**ListApplicationDependencies<br />**必要許可：**serverlessrepo:ListApplicationDependencies | /applications/{{application-id}}/dependencies | GET | arn:aws:serverlessrepo:{{region}}:{{account-id}}:applications/{{application-name}} | 
| **操作：**SearchApplications<br />**必要許可：**serverlessrepo:SearchApplications | N/A | 無 | \* |