AWS Application Migration Service 的動作、資源和條件索引鍵

AWS Application Migration Service （服務字首：mgn) 提供下列服務特有的資源、動作和條件內容索引鍵，可用於 IAM 許可政策。

參考資料：

了解如何設定此服務。
檢視可供此服務使用的 API 操作清單。
了解如何使用 IAM 許可政策來保護此服務及其資源。

主題

AWS Application Migration Service 定義的動作
AWS Application Migration Service 定義的資源類型
AWS Application Migration Service 的條件索引鍵

AWS Application Migration Service 定義的動作

您可在 IAM 政策陳述式的 Action 元素中指定以下動作。使用政策來授予在 AWS中執行操作的許可。在政策中使用動作時，通常會允許或拒絕存取相同名稱的 API 操作或 CLI 命令。不過，在某些情況下，單一動作可控制對多個操作的存取。或者，某些操作需要多種不同的動作。

動作資料表的存取層級欄說明動作的分類方式（列出、讀取、許可管理或標記）。此分類可協助您了解在政策中使用某動作時，該動作授予您的存取層級。如需存取層級的詳細資訊，請參閱政策摘要中的存取層級。

「動作」資料表的資源類型欄會指出每個動作是否支援資源層級的許可。如果此欄沒有值，您必須在政策陳述式的 Resource 元素中指定政策適用的所有資源 ("*")。如果資料欄包含資源類型，則您可以在具有該動作的陳述式中指定該類型的 ARN。如果動作具有一或多個必要資源，呼叫者必須具有對這些資源使用動作的許可。表格中的必要資源會以星號 (*) 表示。如果您使用 IAM 政策中的 Resource 元素限制資源存取，則每種必要的資源類型必須要有 ARN 或模式。某些動作支援多種資源類型。如果資源類型是選用 (未顯示為必要)，則您可以選擇使用其中一種選用資源類型。

「動作」資料表的條件索引鍵欄包含您可以在政策陳述式的 Condition 元素中指定的索引鍵。如需有關與服務資源相關聯之條件索引鍵的詳細資訊，請參閱「資源類型」資料表的條件索引鍵欄。

動作資料表的相依動作欄會顯示成功呼叫動作所需的其他許可。除了動作本身的許可之外，還可能需要這些許可。當動作指定相依動作時，這些相依性可能適用於針對該動作定義的其他資源，而不只是資料表中列出的第一個資源。

注意

資源條件索引鍵會列在資源類型資料表中。您可以在「動作」資料表的資源類型 (*必填) 欄中找到適用於動作的資源類型連結。「資源類型」資料表中的資源類型包括條件索引鍵欄，其中包含套用至「動作」資料表中動作的資源條件索引鍵。

如需下表各欄的詳細資訊，請參閱動作資料表。

動作	描述	存取層級	資源類型 (*必填項目)	條件索引鍵	相依動作
ArchiveApplication	准許封存應用程式	寫入	ApplicationResource*
ArchiveWave	准許封存波次	寫入	WaveResource*
AssociateApplications	准許將應用程式與波次建立關聯	寫入	ApplicationResource*
AssociateApplications	准許將應用程式與波次建立關聯	寫入	WaveResource*
AssociateSourceServers	准許將來源伺服器與應用程式建立關聯	寫入	ApplicationResource*
AssociateSourceServers	准許將來源伺服器與應用程式建立關聯	寫入	SourceServerResource*
BatchCreateVolumeSnapshotGroupForMgn [僅限許可]	授與建立磁碟區快照群組的許可	寫入	SourceServerResource*
BatchDeleteSnapshotRequestForMgn [僅限許可]	授與批次刪除快照要求的許可	寫入
ChangeServerLifeCycleState	授與變更來源伺服器生命週期狀態的許可	寫入	SourceServerResource*
CreateApplication	准許建立應用程式	寫入		aws:RequestTag/${TagKey} aws:TagKeys
CreateConnector	准許建立連接器	寫入		aws:RequestTag/${TagKey} aws:TagKeys
CreateLaunchConfigurationTemplate	准許建立啟動組態範本	寫入		aws:RequestTag/${TagKey} aws:TagKeys
CreateNetworkMigrationDefinition	准許建立網路遷移定義	寫入		aws:RequestTag/${TagKey} aws:TagKeys
CreateReplicationConfigurationTemplate	授與建立複寫組態範本的許可	寫入		aws:RequestTag/${TagKey} aws:TagKeys
CreateVcenterClientForMgn [僅限許可]	准許建立 vCenter 用戶端	寫入		aws:RequestTag/${TagKey} aws:TagKeys
CreateWave	准許建立波次	寫入		aws:RequestTag/${TagKey} aws:TagKeys
DeleteApplication	准許刪除應用程式	寫入	ApplicationResource*
DeleteConnector	准許刪除連接器	寫入	ConnectorResource*
DeleteJob	授與刪除工作的許可	寫入	JobResource*
DeleteLaunchConfigurationTemplate	准許刪除啟動組態範本	寫入	LaunchConfigurationTemplateResource*
DeleteNetworkMigrationDefinition	准許刪除網路遷移定義	寫入	NetworkMigrationDefinitionResource*
DeleteReplicationConfigurationTemplate	授與刪除複寫組態範本的許可	寫入	ReplicationConfigurationTemplateResource*
DeleteSourceServer	授與刪除來源伺服器的許可	寫入	SourceServerResource*
DeleteVcenterClient	准許刪除 vCenter 用戶端	寫入	VcenterClientResource*
DeleteWave	准許刪除波次	寫入	WaveResource*
DescribeJobLogItems	授與描述工作日誌項目的許可	讀取	JobResource*
DescribeJobs	授與描述工作的許可	清單
DescribeLaunchConfigurationTemplates	准許描述啟動組態範本	清單
DescribeReplicationConfigurationTemplates	授與描述複寫組態範本的許可	列出
DescribeReplicationServerAssociationsForMgn [僅限許可]	授與描述複製伺服器關聯的許可	讀取
DescribeSnapshotRequestsForMgn [僅限許可]	授與描述快照要求的許可	讀取
DescribeSourceServers	授與描述來源伺服器的許可	列出
DescribeVcenterClients	准許描述 vCenter 用戶端	清單
DisassociateApplications	准許將應用程式與波次取消關聯	寫入	ApplicationResource*
DisassociateApplications	准許將應用程式與波次取消關聯	寫入	WaveResource*
DisassociateSourceServers	准許將來源伺服器與應用程式取消關聯	寫入	ApplicationResource*
DisassociateSourceServers	准許將來源伺服器與應用程式取消關聯	寫入	SourceServerResource*
DisconnectFromService	授與中斷來自服務之來源伺服器的連線許可	寫入	SourceServerResource*
FinalizeCutover	授與完成切換的許可	寫入	SourceServerResource*
GetAgentCommandForMgn [僅限許可]	授與取得代理程式命令的許可	讀取	SourceServerResource*
GetAgentConfirmedResumeInfoForMgn [僅限許可]	授與取得代理程式確認履歷資訊的許可	讀取	SourceServerResource*
GetAgentInstallationAssetsForMgn [僅限許可]	授與取得代理安裝程式資產的許可	讀取
GetAgentReplicationInfoForMgn [僅限許可]	授與取得代理程式複寫資訊的許可	讀取	SourceServerResource*
GetAgentRuntimeConfigurationForMgn [僅限許可]	授與取得代理程式執行階段組態的許可	讀取	SourceServerResource*
GetAgentSnapshotCreditsForMgn [僅限許可]	授與取得代理程式快照點數的許可	讀取	SourceServerResource*
GetChannelCommandsForMgn [僅限許可]	授與取得頻道命令的許可	讀取
GetLaunchConfiguration	授與取得啟動設定的許可	閱讀	SourceServerResource*
GetNetworkMigrationDefinition	准許取得網路遷移定義	閱讀	NetworkMigrationDefinitionResource*
GetNetworkMigrationMapperSegmentConstruct	准許取得網路遷移映射器區段建構	閱讀	NetworkMigrationDefinitionResource*
GetReplicationConfiguration	授與取得複寫組態的許可	閱讀	SourceServerResource*
GetVcenterClientCommandsForMgn [僅限許可]	准許取得 vCenter 用戶端命令	閱讀	VcenterClientResource*
InitializeService	授與初始化服務的許可	寫入			iam:AddRoleToInstanceProfile iam:CreateInstanceProfile iam:CreateServiceLinkedRole iam:GetInstanceProfile
IssueClientCertificateForMgn [僅限許可]	准許核發用戶端憑證	寫入	SourceServerResource
ListApplications	准許列出應用程式摘要	清單
ListConnectors	准許列出連接器	閱讀
ListExportErrors	准許列出匯出任務的錯誤	清單	ExportResource*
ListExports	准許列出匯出任務	清單
ListImportErrors	准許列出匯入任務的錯誤	清單	ImportResource*
ListImports	准許列出匯入任務	清單
ListManagedAccounts	准許列出受管帳戶	清單
ListNetworkMigrationAnalyses	准許列出網路遷移分析	清單	NetworkMigrationDefinitionResource*
ListNetworkMigrationAnalysisResults	准許列出網路遷移分析結果	清單	NetworkMigrationDefinitionResource*
ListNetworkMigrationCodeGenerationSegments	准許列出網路遷移程式碼產生區段	清單	NetworkMigrationDefinitionResource*
ListNetworkMigrationCodeGenerations	准許列出網路遷移程式碼產生	清單	NetworkMigrationDefinitionResource*
ListNetworkMigrationDefinitions	准許列出網路遷移定義	清單
ListNetworkMigrationDeployedStacks	准許列出網路遷移部署的堆疊	清單	NetworkMigrationDefinitionResource*
ListNetworkMigrationDeployedStacksDeletions	准許列出網路遷移部署的堆疊刪除	清單	NetworkMigrationDefinitionResource*
ListNetworkMigrationDeployments	准許列出網路遷移部署	清單	NetworkMigrationDefinitionResource*
ListNetworkMigrationExecutions	准許列出網路遷移執行	清單	NetworkMigrationDefinitionResource*
ListNetworkMigrationMapperSegmentConstructs	准許列出網路遷移映射器區段建構	清單	NetworkMigrationDefinitionResource*
ListNetworkMigrationMapperSegments	准許列出網路遷移映射器區段	清單	NetworkMigrationDefinitionResource*
ListNetworkMigrationMappings	准許列出網路遷移映射	清單	NetworkMigrationDefinitionResource*
ListSourceServerActions	准許列出來源伺服器動作文件	清單	SourceServerResource*
ListTagsForResource	准許列出資源的標籤	閱讀
ListTemplateActions	准許列出啟動組態範本動作文件	清單	LaunchConfigurationTemplateResource*
ListWaves	准許列出波次摘要	清單
MarkAsArchived	授與將來源伺服器標示為封存的許可	寫入	SourceServerResource*
NotifyAgentAuthenticationForMgn [僅限許可]	授與通知代理程式驗證的許可	寫入	SourceServerResource*
NotifyAgentConnectedForMgn [僅限許可]	授與通知代理程式已連線的許可	寫入	SourceServerResource*
NotifyAgentDisconnectedForMgn [僅限許可]	授與通知代理程式已中斷連線的許可	寫入	SourceServerResource*
NotifyAgentReplicationProgressForMgn [僅限許可]	授與通知代理程式複寫進度的許可	寫入	SourceServerResource*
NotifyVcenterClientStartedForMgn [僅限許可]	准許通知 vCenter 用戶端已啟動	寫入	VcenterClientResource*
PauseReplication	准許暫停複寫	寫入	SourceServerResource*
PutSourceServerAction	准許放置來源伺服器動作文件	寫入	SourceServerResource*
PutTemplateAction	准許放置啟動組態範本動作文件	寫入	LaunchConfigurationTemplateResource*
RegisterAgentForMgn [僅限許可]	授與註冊代理程式的許可	寫入		aws:RequestTag/${TagKey} aws:TagKeys
RemoveSourceServerAction	准許移除來源伺服器動作文件	寫入	SourceServerResource*
RemoveTemplateAction	准許移除啟動組態範本動作文件	寫入	LaunchConfigurationTemplateResource*
ResumeReplication	准許繼續複寫	寫入	SourceServerResource*
RetryDataReplication	授與重試複寫的許可	寫入	SourceServerResource*
SendAgentLogsForMgn [僅限許可]	授與傳送代理程式記錄的許可	寫入	SourceServerResource*
SendAgentMetricsForMgn [僅限許可]	授與傳送代理程式指標的許可	寫入	SourceServerResource*
SendChannelCommandResultForMgn [僅限許可]	授與傳送頻道命令結果的許可	寫入
SendClientLogsForMgn [僅限許可]	授與傳送用戶端記錄的許可	寫入
SendClientMetricsForMgn [僅限許可]	授與傳送用戶端指標的許可	寫入
SendVcenterClientCommandResultForMgn [僅限許可]	准許傳送 vCenter 用戶端命令結果	寫入	VcenterClientResource*
SendVcenterClientLogsForMgn [僅限許可]	准許傳送 vCenter 用戶端記錄	寫入	VcenterClientResource*
SendVcenterClientMetricsForMgn [僅限許可]	准許傳送 vCenter 用戶端指標	寫入	VcenterClientResource*
StartCutover	授與啟動切換的許可	寫入	SourceServerResource*		ec2:AttachVolume ec2:AuthorizeSecurityGroupEgress ec2:AuthorizeSecurityGroupIngress ec2:CreateLaunchTemplate ec2:CreateLaunchTemplateVersion ec2:CreateSecurityGroup ec2:CreateSnapshot ec2:CreateTags ec2:CreateVolume ec2:DeleteLaunchTemplateVersions ec2:DeleteSnapshot ec2:DeleteVolume ec2:DescribeAccountAttributes ec2:DescribeAvailabilityZones ec2:DescribeImages ec2:DescribeInstanceAttribute ec2:DescribeInstanceStatus ec2:DescribeInstanceTypes ec2:DescribeInstances ec2:DescribeLaunchTemplateVersions ec2:DescribeLaunchTemplates ec2:DescribeSecurityGroups ec2:DescribeSnapshots ec2:DescribeSubnets ec2:DescribeVolumes ec2:DetachVolume ec2:ModifyInstanceAttribute ec2:ModifyLaunchTemplate ec2:ReportInstanceStatus ec2:RevokeSecurityGroupEgress ec2:RunInstances ec2:StartInstances ec2:StopInstances ec2:TerminateInstances iam:PassRole mgn:ListTagsForResource
StartCutover	授與啟動切換的許可	寫入		aws:RequestTag/${TagKey} aws:TagKeys
StartExport	准許開始匯出任務	寫入		aws:RequestTag/${TagKey} aws:TagKeys	ec2:DescribeLaunchTemplateVersions mgn:DescribeSourceServers mgn:GetLaunchConfiguration mgn:ListApplications mgn:ListWaves s3:PutObject
StartImport	准許建立匯入任務	寫入			ec2:CreateLaunchTemplateVersion ec2:DescribeLaunchTemplateVersions ec2:ModifyLaunchTemplate mgn:DescribeSourceServers mgn:GetLaunchConfiguration mgn:ListApplications mgn:ListWaves mgn:TagResource mgn:UpdateLaunchConfiguration s3:PutObject
StartNetworkMigrationAnalysis	准許啟動網路遷移分析	寫入	NetworkMigrationDefinitionResource*		directconnect:DescribeConnections directconnect:DescribeDirectConnectGatewayAssociations directconnect:DescribeDirectConnectGatewayAttachments directconnect:DescribeDirectConnectGateways directconnect:DescribeVirtualGateways directconnect:DescribeVirtualInterfaces ec2:AuthorizeSecurityGroupIngress ec2:CreateNetworkInsightsPath ec2:CreateNetworkInterface ec2:CreateSecurityGroup ec2:CreateTags ec2:DeleteNetworkInsightsAnalysis ec2:DeleteNetworkInsightsPath ec2:DeleteNetworkInterface ec2:DeleteSecurityGroup ec2:DeleteTags ec2:DescribeAvailabilityZones ec2:DescribeCustomerGateways ec2:DescribeInstances ec2:DescribeInternetGateways ec2:DescribeManagedPrefixLists ec2:DescribeNatGateways ec2:DescribeNetworkAcls ec2:DescribeNetworkInsightsAnalyses ec2:DescribeNetworkInsightsPaths ec2:DescribeNetworkInterfaces ec2:DescribePrefixLists ec2:DescribeRegions ec2:DescribeRouteTables ec2:DescribeSecurityGroups ec2:DescribeSubnets ec2:DescribeTransitGatewayAttachments ec2:DescribeTransitGatewayConnects ec2:DescribeTransitGatewayPeeringAttachments ec2:DescribeTransitGatewayRouteTables ec2:DescribeTransitGatewayVpcAttachments ec2:DescribeTransitGateways ec2:DescribeVpcEndpointServiceConfigurations ec2:DescribeVpcEndpoints ec2:DescribeVpcPeeringConnections ec2:DescribeVpcs ec2:DescribeVpnConnections ec2:DescribeVpnGateways ec2:GetManagedPrefixListEntries ec2:GetTransitGatewayRouteTablePropagations ec2:SearchTransitGatewayRoutes ec2:StartNetworkInsightsAnalysis elasticloadbalancing:DescribeListeners elasticloadbalancing:DescribeLoadBalancerAttributes elasticloadbalancing:DescribeLoadBalancers elasticloadbalancing:DescribeRules elasticloadbalancing:DescribeTags elasticloadbalancing:DescribeTargetGroupAttributes elasticloadbalancing:DescribeTargetGroups elasticloadbalancing:DescribeTargetHealth globalaccelerator:ListAccelerators globalaccelerator:ListCustomRoutingAccelerators globalaccelerator:ListCustomRoutingEndpointGroups globalaccelerator:ListCustomRoutingListeners globalaccelerator:ListCustomRoutingPortMappings globalaccelerator:ListEndpointGroups globalaccelerator:ListListeners network-firewall:DescribeFirewall network-firewall:DescribeFirewallPolicy network-firewall:DescribeResourcePolicy network-firewall:DescribeRuleGroup network-firewall:ListFirewallPolicies network-firewall:ListFirewalls network-firewall:ListRuleGroups tiros:CreateQuery tiros:ExtendQuery tiros:GetQueryAnswer tiros:GetQueryExplanation tiros:GetQueryExtensionAccounts
StartNetworkMigrationCodeGeneration	准許開始產生網路遷移程式碼	寫入	NetworkMigrationDefinitionResource*
StartNetworkMigrationDeployedStacksDeletion	准許開始刪除部署的網路遷移堆疊	寫入	NetworkMigrationDefinitionResource*		ec2:AcceptTransitGatewayVpcAttachment ec2:AssociateNatGatewayAddress ec2:AssociateRouteTable ec2:AssociateSubnetCidrBlock ec2:AssociateTransitGatewayRouteTable ec2:AssociateVpcCidrBlock ec2:AttachInternetGateway ec2:AttachVolume ec2:AuthorizeSecurityGroupEgress ec2:AuthorizeSecurityGroupIngress ec2:DeleteInternetGateway ec2:DeleteLaunchTemplate ec2:DeleteLaunchTemplateVersions ec2:DeleteNatGateway ec2:DeleteNetworkAcl ec2:DeleteNetworkAclEntry ec2:DeleteNetworkInsightsAnalysis ec2:DeleteNetworkInsightsPath ec2:DeleteNetworkInterface ec2:DeleteRoute ec2:DeleteRouteTable ec2:DeleteSecurityGroup ec2:DeleteSnapshot ec2:DeleteSubnet ec2:DeleteTransitGateway ec2:DeleteTransitGatewayRoute ec2:DeleteTransitGatewayRouteTable ec2:DeleteTransitGatewayVpcAttachment ec2:DeleteVolume ec2:DeleteVpc ec2:DetachInternetGateway ec2:DetachVolume ec2:DisableTransitGatewayRouteTablePropagation ec2:DisassociateNatGatewayAddress ec2:DisassociateRouteTable ec2:DisassociateTransitGatewayRouteTable ec2:EnableTransitGatewayRouteTablePropagation ec2:ModifyInstanceAttribute ec2:ModifyLaunchTemplate ec2:ModifySubnetAttribute ec2:ModifyTransitGateway ec2:ModifyTransitGatewayVpcAttachment ec2:ModifyVolume ec2:ModifyVpcAttribute ec2:RejectTransitGatewayVpcAttachment ec2:ReleaseAddress ec2:ReplaceNetworkAclAssociation ec2:ReplaceNetworkAclEntry ec2:ReplaceRoute ec2:ReplaceTransitGatewayRoute ec2:RevokeSecurityGroupEgress ec2:RevokeSecurityGroupIngress ec2:SearchTransitGatewayRoutes
StartNetworkMigrationDeployment	准許啟動網路遷移部署	寫入	NetworkMigrationDefinitionResource*		ec2:AcceptTransitGatewayVpcAttachment ec2:AssociateNatGatewayAddress ec2:AssociateRouteTable ec2:AssociateSubnetCidrBlock ec2:AssociateTransitGatewayRouteTable ec2:AssociateVpcCidrBlock ec2:AttachInternetGateway ec2:AttachVolume ec2:AuthorizeSecurityGroupEgress ec2:AuthorizeSecurityGroupIngress ec2:CreateNatGateway ec2:CreateNetworkAcl ec2:CreateNetworkAclEntry ec2:CreateNetworkInsightsPath ec2:CreateNetworkInterface ec2:CreateRoute ec2:CreateRouteTable ec2:CreateSecurityGroup ec2:CreateSubnet ec2:CreateTags ec2:CreateTransitGatewayRoute ec2:CreateTransitGatewayRouteTable ec2:CreateTransitGatewayVpcAttachment ec2:DeleteInternetGateway ec2:DeleteLaunchTemplate ec2:DeleteLaunchTemplateVersions ec2:DeleteNatGateway ec2:DeleteNetworkAcl ec2:DeleteNetworkAclEntry ec2:DeleteNetworkInsightsAnalysis ec2:DeleteNetworkInsightsPath ec2:DeleteNetworkInterface ec2:DeleteRoute ec2:DeleteRouteTable ec2:DeleteSecurityGroup ec2:DeleteSnapshot ec2:DeleteSubnet ec2:DeleteTransitGateway ec2:DeleteTransitGatewayRoute ec2:DeleteTransitGatewayRouteTable ec2:DeleteTransitGatewayVpcAttachment ec2:DeleteVolume ec2:DeleteVpc ec2:DescribeAccountAttributes ec2:DescribeAddresses ec2:DescribeAvailabilityZones ec2:DescribeCustomerGateways ec2:DescribeEgressOnlyInternetGateways ec2:DescribeHosts ec2:DescribeImages ec2:DescribeInstanceAttribute ec2:DescribeInstanceStatus ec2:DescribeInstanceTypes ec2:DescribeInstances ec2:DescribeInternetGateways ec2:DescribeLaunchTemplateVersions ec2:DescribeLaunchTemplates ec2:DescribeManagedPrefixLists ec2:DescribeNatGateways ec2:DescribeNetworkAcls ec2:DescribeNetworkInsightsAnalyses ec2:DescribeNetworkInsightsPaths ec2:DescribeNetworkInterfaces ec2:DescribePrefixLists ec2:DescribeRegions ec2:DescribeRouteTables ec2:DescribeSecurityGroupRules ec2:DescribeSecurityGroups ec2:DescribeSnapshots ec2:DescribeSubnets ec2:DescribeTransitGatewayAttachments ec2:DescribeTransitGatewayConnects ec2:DescribeTransitGatewayPeeringAttachments ec2:DescribeTransitGatewayRouteTables ec2:DescribeTransitGatewayVpcAttachments ec2:DescribeTransitGateways ec2:DescribeVolumes ec2:DescribeVpcEndpointServiceConfigurations ec2:DescribeVpcEndpoints ec2:DescribeVpcPeeringConnections ec2:DescribeVpcs ec2:DescribeVpnConnections ec2:DescribeVpnGateways ec2:DetachInternetGateway ec2:DetachVolume ec2:DisableTransitGatewayRouteTablePropagation ec2:DisassociateNatGatewayAddress ec2:DisassociateRouteTable ec2:DisassociateTransitGatewayRouteTable ec2:EnableTransitGatewayRouteTablePropagation ec2:GetEbsDefaultKmsKeyId ec2:GetEbsEncryptionByDefault ec2:GetManagedPrefixListEntries ec2:GetTransitGatewayRouteTableAssociations ec2:GetTransitGatewayRouteTablePropagations ec2:ModifyInstanceAttribute ec2:ModifyLaunchTemplate ec2:ModifySubnetAttribute ec2:ModifyTransitGateway ec2:ModifyTransitGatewayVpcAttachment ec2:ModifyVolume ec2:ModifyVpcAttribute ec2:RejectTransitGatewayVpcAttachment ec2:ReleaseAddress ec2:ReplaceNetworkAclAssociation ec2:ReplaceNetworkAclEntry ec2:ReplaceRoute ec2:ReplaceTransitGatewayRoute ec2:RevokeSecurityGroupEgress ec2:RevokeSecurityGroupIngress ec2:SearchTransitGatewayRoutes ec2:StartNetworkInsightsAnalysis
StartNetworkMigrationMapping	准許啟動網路遷移映射	寫入	NetworkMigrationDefinitionResource*
StartReplication	准許啟動複寫	寫入	SourceServerResource*
StartTest	授與啟動測試的許可	寫入	SourceServerResource*		ec2:AttachVolume ec2:AuthorizeSecurityGroupEgress ec2:AuthorizeSecurityGroupIngress ec2:CreateLaunchTemplate ec2:CreateLaunchTemplateVersion ec2:CreateSecurityGroup ec2:CreateSnapshot ec2:CreateTags ec2:CreateVolume ec2:DeleteLaunchTemplateVersions ec2:DeleteSnapshot ec2:DeleteVolume ec2:DescribeAccountAttributes ec2:DescribeAvailabilityZones ec2:DescribeImages ec2:DescribeInstanceAttribute ec2:DescribeInstanceStatus ec2:DescribeInstanceTypes ec2:DescribeInstances ec2:DescribeLaunchTemplateVersions ec2:DescribeLaunchTemplates ec2:DescribeSecurityGroups ec2:DescribeSnapshots ec2:DescribeSubnets ec2:DescribeVolumes ec2:DetachVolume ec2:ModifyInstanceAttribute ec2:ModifyLaunchTemplate ec2:ReportInstanceStatus ec2:RevokeSecurityGroupEgress ec2:RunInstances ec2:StartInstances ec2:StopInstances ec2:TerminateInstances iam:PassRole mgn:ListTagsForResource
StartTest	授與啟動測試的許可	寫入		aws:RequestTag/${TagKey} aws:TagKeys
StopReplication	准許停止複寫	寫入	SourceServerResource*
TagResource	准許指派資源標籤	標記	ApplicationResource
			ConnectorResource
			ExportResource
			ImportResource
			JobResource
			LaunchConfigurationTemplateResource
			ReplicationConfigurationTemplateResource
			SourceServerResource
			VcenterClientResource
			WaveResource
				aws:RequestTag/${TagKey} mgn:CreateAction aws:TagKeys
TerminateTargetInstances	授與終止目標執行個體的許可	寫入	SourceServerResource*		ec2:DeleteVolume ec2:DescribeInstances ec2:DescribeVolumes ec2:TerminateInstances
TerminateTargetInstances	授與終止目標執行個體的許可	寫入		aws:RequestTag/${TagKey} aws:TagKeys
UnarchiveApplication	准許解除封存應用程式	寫入	ApplicationResource*
UnarchiveWave	准許解除封存波次	寫入	WaveResource*
UntagResource	准許取消標記資源	標記	ApplicationResource
			ConnectorResource
			JobResource
			LaunchConfigurationTemplateResource
			ReplicationConfigurationTemplateResource
			SourceServerResource
			VcenterClientResource
			WaveResource
				aws:TagKeys
UpdateAgentBacklogForMgn [僅限許可]	授與更新代理程式待處理項目的許可	寫入	SourceServerResource*
UpdateAgentConversionInfoForMgn [僅限許可]	授與更新代理程式轉換資訊的許可	寫入	SourceServerResource*
UpdateAgentReplicationInfoForMgn [僅限許可]	授與更新代理程式複寫資訊的許可	寫入	SourceServerResource*
UpdateAgentReplicationProcessStateForMgn [僅限許可]	授與更新代理程式複寫程序狀態的許可	寫入	SourceServerResource*
UpdateAgentSourcePropertiesForMgn [僅限許可]	授與更新代理程式來源屬性的許可	寫入	SourceServerResource*
UpdateApplication	准許更新應用程式	寫入	ApplicationResource*
UpdateConnector	准許更新連接器	寫入	ConnectorResource*
UpdateLaunchConfiguration	授與更新啟動組態的許可	寫入	SourceServerResource*
UpdateLaunchConfigurationTemplate	授與更新啟動組態的許可	寫入	LaunchConfigurationTemplateResource*
UpdateNetworkMigrationDefinition	准許更新網路遷移定義	寫入	NetworkMigrationDefinitionResource*
UpdateNetworkMigrationMapperSegment	准許更新網路遷移映射器區段	寫入	NetworkMigrationDefinitionResource*
UpdateNetworkMigrationMapperSegmentConstruct	准許更新網路遷移映射器區段建構	寫入	NetworkMigrationDefinitionResource*
UpdateReplicationConfiguration	授與更新複寫組態的許可	寫入	SourceServerResource*
UpdateReplicationConfigurationTemplate	授與更新複寫組態範本的許可	寫入	ReplicationConfigurationTemplateResource*
UpdateSourceServer	准許更新來源伺服器	寫入	SourceServerResource*
UpdateSourceServerReplicationType	准許更新來源伺服器複寫類型	寫入	SourceServerResource*
UpdateWave	准許更新波次	寫入	WaveResource*
VerifyClientRoleForMgn [僅限許可]	准許驗證用戶端角色	閱讀

AWS Application Migration Service 定義的資源類型

此服務會定義下列資源類型，並可用在 IAM 許可政策陳述式的 Resource 元素中。動作表格中的每個動作都代表可使用該動作指定的資源類型。資源類型也能定義您可以在政策中包含哪些條件索引鍵。這些索引鍵都會顯示在「資源類型」資料表的最後一欄。如需下表各欄的詳細資訊，請參閱資源類型資料表。

資源類型	ARN	條件索引鍵
JobResource	`arn:${Partition}:mgn:${Region}:${Account}:job/${JobID}`	aws:ResourceTag/${TagKey}
ReplicationConfigurationTemplateResource	`arn:${Partition}:mgn:${Region}:${Account}:replication-configuration-template/${ReplicationConfigurationTemplateID}`	aws:ResourceTag/${TagKey}
LaunchConfigurationTemplateResource	`arn:${Partition}:mgn:${Region}:${Account}:launch-configuration-template/${LaunchConfigurationTemplateID}`	aws:ResourceTag/${TagKey}
VcenterClientResource	`arn:${Partition}:mgn:${Region}:${Account}:vcenter-client/${VcenterClientID}`	aws:ResourceTag/${TagKey}
SourceServerResource	`arn:${Partition}:mgn:${Region}:${Account}:source-server/${SourceServerID}`	aws:ResourceTag/${TagKey}
ApplicationResource	`arn:${Partition}:mgn:${Region}:${Account}:application/${ApplicationID}`	aws:ResourceTag/${TagKey}
WaveResource	`arn:${Partition}:mgn:${Region}:${Account}:wave/${WaveID}`	aws:ResourceTag/${TagKey}
ImportResource	`arn:${Partition}:mgn:${Region}:${Account}:import/${ImportID}`	aws:ResourceTag/${TagKey}
ExportResource	`arn:${Partition}:mgn:${Region}:${Account}:export/${ExportID}`	aws:ResourceTag/${TagKey}
ConnectorResource	`arn:${Partition}:mgn:${Region}:${Account}:connector/${ConnectorID}`	aws:ResourceTag/${TagKey}
NetworkMigrationDefinitionResource	`arn:${Partition}:mgn:${Region}:${Account}:network-migration-definition/${NetworkMigrationDefinitionID}`	aws:ResourceTag/${TagKey}

AWS Application Migration Service 的條件索引鍵

AWS Application Migration Service 定義下列條件索引鍵，可用於 IAM 政策的 Condition元素。您可以使用這些索引鍵來縮小套用政策陳述式的條件。如需下表各欄的詳細資訊，請參閱條件索引鍵表。

若要檢視所有服務可用的全域條件索引鍵，請參閱AWS 全域條件內容索引鍵。

條件索引鍵	描述	類型
aws:RequestTag/${TagKey}	依請求中的標籤鍵值對是否存在篩選存取權	字串
aws:ResourceTag/${TagKey}	依連接到資源的標籤鍵值對篩選存取權	字串
aws:TagKeys	依請求中的標籤索引鍵是否存在篩選存取權	ArrayOfString
mgn:CreateAction	依資源建立 API 動作的名稱篩選存取	String

您的瀏覽器已停用或無法使用 Javascript。

您必須啟用 Javascript，才能使用 AWS 文件。請參閱您的瀏覽器說明頁以取得說明。

文件慣用形式

AWS 應用程式探索服務

Amazon Application Recovery Controller - 區域轉移