AWS Fundamentals Logo
AWS Fundamentals
workmail:*

AWS Amazon WorkMail IAM Actions

126 IAM actions for workmail:*

Actions

126 actions available. Filter by access level or search by name.

Filter:
ActionAccess Level
workmail:AllowVendedLogDeliveryForResource
Read
workmail:AssociateDelegateToResource
Write
workmail:AssociateMemberToGroup
Write
workmail:AssumeImpersonationRole
Permissions
workmail:CancelMailboxExportJob
Write
workmail:CreateAlias
Write
workmail:CreateAvailabilityConfiguration
Write
workmail:CreateGroup
Write
workmail:CreateIdentityCenterApplication
Write
workmail:CreateImpersonationRole
Permissions
workmail:CreateInboundMailFlowRule
Write
workmail:CreateMailDomain
Write
workmail:CreateMobileDeviceAccessRule
Write
workmail:CreateOrganization
Write
workmail:CreateOutboundMailFlowRule
Write
workmail:CreateResource
Write
workmail:CreateSmtpGateway
Write
workmail:CreateUser
Write
workmail:DeleteAccessControlRule
Write
workmail:DeleteAlias
Write
workmail:DeleteAvailabilityConfiguration
Write
workmail:DeleteEmailMonitoringConfiguration
Write
workmail:DeleteGroup
Write
workmail:DeleteIdentityCenterApplication
Write
workmail:DeleteIdentityProviderConfiguration
Write
workmail:DeleteImpersonationRole
Permissions
workmail:DeleteInboundMailFlowRule
Write
workmail:DeleteMailboxPermissions
Permissions
workmail:DeleteMailDomain
Write
workmail:DeleteMobileDevice
Write
workmail:DeleteMobileDeviceAccessOverride
Write
workmail:DeleteMobileDeviceAccessRule
Write
workmail:DeleteOrganization
Write
workmail:DeleteOutboundMailFlowRule
Write
workmail:DeletePersonalAccessToken
Write
workmail:DeleteResource
Write
workmail:DeleteRetentionPolicy
Permissions
workmail:DeleteSmtpGateway
Write
workmail:DeleteUser
Write
workmail:DeliverToMailbox
Read
workmail:DeregisterFromWorkMail
Write
workmail:DeregisterMailDomain
Write
workmail:DescribeEmailMonitoringConfiguration
Read
workmail:DescribeEntity
Read
workmail:DescribeGroup
Read
workmail:DescribeIdentityProviderConfiguration
Read
workmail:DescribeInboundDmarcSettings
Read
workmail:DescribeInboundMailFlowRule
Read
workmail:DescribeMailboxExportJob
Read
workmail:DescribeMailDomains
Read
workmail:DescribeOrganization
Read
workmail:DescribeOutboundMailFlowRule
Read
workmail:DescribeResource
Read
workmail:DescribeSmtpGateway
Read
workmail:DescribeUser
Read
workmail:DisassociateDelegateFromResource
Write
workmail:DisassociateMemberFromGroup
Write
workmail:EnableMailDomain
Write
workmail:GetAccessControlEffect
Permissions
workmail:GetDefaultRetentionPolicy
Permissions
workmail:GetImpersonationRole
Permissions
workmail:GetImpersonationRoleEffect
Permissions
workmail:GetJournalingRules
Read
workmail:GetMailboxDetails
Read
workmail:GetMailDomain
Read
workmail:GetMailDomainDetails
Read
workmail:GetMobileDeviceAccessEffect
Read
workmail:GetMobileDeviceAccessOverride
Read
workmail:GetMobileDeviceDetails
Read
workmail:GetMobileDevicesForUser
Read
workmail:GetMobilePolicyDetails
Permissions
workmail:GetPersonalAccessTokenMetadata
Read
workmail:ListAccessControlRules
List
workmail:ListAliases
List
workmail:ListAvailabilityConfigurations
List
workmail:ListGroupMembers
List
workmail:ListGroups
List
workmail:ListGroupsForEntity
List
workmail:ListImpersonationRoles
Permissions
workmail:ListInboundMailFlowRules
List
workmail:ListMailboxExportJobs
List
workmail:ListMailboxPermissions
Permissions
workmail:ListMailDomains
List
workmail:ListMobileDeviceAccessOverrides
List
workmail:ListMobileDeviceAccessRules
List
workmail:ListOrganizations
List
workmail:ListOutboundMailFlowRules
List
workmail:ListPersonalAccessTokens
List
workmail:ListResourceDelegates
List
workmail:ListResources
List
workmail:ListSmtpGateways
List
workmail:ListTagsForResource
Tagging
workmail:ListUsers
List
workmail:PutAccessControlRule
Write
workmail:PutEmailMonitoringConfiguration
Write
workmail:PutIdentityProviderConfiguration
Write
workmail:PutInboundDmarcSettings
Write
workmail:PutMailboxPermissions
Permissions
workmail:PutMobileDeviceAccessOverride
Write
workmail:PutRetentionPolicy
Permissions
workmail:RegisterMailDomain
Write
workmail:RegisterToWorkMail
Write
workmail:ResetPassword
Write
workmail:SearchMembers
List
workmail:SetDefaultMailDomain
Write
workmail:SetJournalingRules
Write
workmail:SetMobilePolicyDetails
Permissions
workmail:StartMailboxExportJob
Write
workmail:TagResource
Tagging
workmail:TestAvailabilityConfiguration
Read
workmail:TestInboundMailFlowRules
Read
workmail:TestOutboundMailFlowRules
Read
workmail:UntagResource
Tagging
workmail:UpdateAvailabilityConfiguration
Write
workmail:UpdateDefaultMailDomain
Write
workmail:UpdateGroup
Write
workmail:UpdateImpersonationRole
Permissions
workmail:UpdateInboundMailFlowRule
Write
workmail:UpdateMailboxQuota
Write
workmail:UpdateMobileDeviceAccessRule
Write
workmail:UpdateOutboundMailFlowRule
Write
workmail:UpdatePrimaryEmailAddress
Write
workmail:UpdateResource
Write
workmail:UpdateSmtpGateway
Write
workmail:UpdateUser
Write
workmail:WipeMobileDevice
Read

Resource Types

ARN patterns for resources in this service.

ResourceARN Pattern
${ResourceType}arn:aws:workmail:${Region}:${Account}:${ResourceType}/${ResourceId}

Condition Keys

Condition keys you can use in IAM policy conditions for this service.

aws:RequestTag/${TagKey}aws:ResourceTag/${TagKey}aws:TagKeysworkmail:ImpersonationRoleId

Learn AWS the Practical Way

Our bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.

Subscribe to Newsletter

Learn AWS the Practical Way

Our bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.

Subscribe to Newsletter

Quick Facts

Total Actions126
Prefixworkmail
Resource Types1
Condition Keys4

Access Level Breakdown

Read
28
Write
60
List
19
Permissions
16
Tagging
3