AWSElementalMediaConnectCreateFlow

Last Modified

Mar 31, 2026

March 31, 2026 at 08:44 AM UTC

Version

v1

Total Versions

1

Created

Mar 19, 2026

Actions

8

Subscribe to updates

Risk

no risk signal

Read from this policy document alone: trust policies, boundaries and SCPs in your account still decide what actually succeeds. How this is assessed

IAM Access Analyzer (1)

  • Suggestion / REDUNDANT_RESOURCE

    The 3 resource ARN(s) are redundant because they reference the same resource. Review the use of wildcards (*), or remove the resource arn:aws:mediaconnect:*:*:flow:*:*/vpcInterface/* to remove the redundancy. AWS docs

Policy Document

View on GitHub
{
  "PolicyVersion": {
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": "iam:PassRole",
          "Resource": "arn:aws:iam::*:role/*",
          "Condition": {
            "StringEquals": {
              "iam:PassedToService": "mediaconnect.amazonaws.com"
            }
          }
        },
        {
          "Effect": "Allow",
          "Action": [
            "mediaconnect:CreateFlow",
            "mediaconnect:AddFlowSources",
            "mediaconnect:AddFlowOutputs",
            "mediaconnect:GrantFlowEntitlements",
            "mediaconnect:AddFlowMediaStreams",
            "mediaconnect:AddFlowVpcInterfaces",
            "mediaconnect:TagResource"
          ],
          "Resource": [
            "arn:aws:mediaconnect:*:*:flow:*:*",
            "arn:aws:mediaconnect:*:*:source:*:*",
            "arn:aws:mediaconnect:*:*:output:*:*",
            "arn:aws:mediaconnect:*:*:entitlement:*:*",
            "arn:aws:mediaconnect:*:*:flow:*:*/vpcInterface/*",
            "arn:aws:mediaconnect:*:*:flow:*:*/mediaStream/*"
          ]
        }
      ]
    },
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "CreateDate": "2026-03-19T16:57:07+00:00"
  }
}

Version History (1 recorded)

Raw history
v1new policy

8 actions added

ef7789e
6 never-before-seen actions: mediaconnect:AddFlowMediaStreams, mediaconnect:AddFlowOutputs, mediaconnect:AddFlowSources, mediaconnect:AddFlowVpcInterfaces, mediaconnect:CreateFlow, mediaconnect:GrantFlowEntitlements
Permissions management: iam:PassRole: iam:PassRole