Analytics: Admin policies

Provides full access to the Amazon ES configuration service.

Provides full access to the Amazon OpenSearch Service configuration service.

The AmazonDataZoneSageMakerEnvironmentRolePermissionsBoundary policy is the list of permissions that are permitted on an execution role created in a SageMaker environment provisioned by Amazon DataZone.

Provides full access to AWS Glue via the AWS Management Console and access to sagemaker notebook instances.

Provides initial administrative and individual setup privileges for Amazon SageMaker Unified Studio via the AWS Management Console and SDK. Allows launching of SageMaker Unified Studio Portal.

This policy provides full access to Amazon SageMaker Unified Studio via the Amazon SageMaker management console.

Amazon SageMaker creates IAM roles for Projects users to perform data analytics, artificial intelligence, and machine learning actions, and uses this policy when creating these roles to define the boundary of their permissions.

Provides full access to all streams via the AWS Management Console.

Provides full access to Amazon Kinesis Video Streams via the AWS Management Console.

Amazon DataZone creates IAM roles for Environments to perform data analytics actions, and uses this policy when creating these roles to define the boundary of their permissions.

Provides full access to Amazon DataZone via the AWS Management Console as well as limited access to related services that are required by it.

Amazon DataZone creates IAM roles for projects to perform data analytics actions, and uses this policy when creating these roles to define the boundary of their permissions.

Provide full access to Amazon MSK and other required permissions for its dependencies.

Allows full access to AWS Clean Rooms resources and access to related AWS services.

Allows full access to AWS Clean Rooms ML resources and access to related AWS services.

Provides full access to the Amazon CloudSearch configuration service.

Grants full access to AWS Data Exchange and AWS Marketplace actions using the AWS Management Console and SDK. It also provides select access to related services needed to take full advantage of AWS Data Exchange.

Provides full access to all Amazon Kinesis Firehose Delivery Streams.

Provides full access to Data Pipeline, list access for S3, DynamoDB, Redshift, RDS, SNS, and IAM roles, and passRole access for default Roles.

Provides full access to Data Pipeline, list access for S3, DynamoDB, Redshift, RDS, SNS, and IAM roles, and passRole access for default Roles.

Provides console full access to AWS Entity Resolution and related services.

Provides full access to AWS Glue via the AWS Management Console

Provides full access to AWS Health Imaging service.

Provides full access to Amazon HealthLake service.

Provides full access to Amazon Kinesis Analytics via the AWS Management Console.

Provides full access to Amazon Omics and other required AWS services. This policy allows the user to view and accept RAM share invitations to access resources outside of the user's AWS account.

Provide full access to Amazon Athena and scoped access to the dependencies needed to enable querying, writing results, and data management.

Provides full access to Amazon Redshift via the AWS Management Console.

Provides full access to AWS Glue DataBrew via the AWS Management Console. Also provides select access to related services (e.g., S3, KMS, Glue).

Grants administrative access to AWS Lake Formation and related services, such as AWS Glue, to manage data lakes

Policy for AWS Glue service role which allows access to related services including EC2, S3, and Cloudwatch Logs

Provides permissions for Amazon Quick Suite to manage its IAM Identity Center application, identity store users and groups, user subscriptions, and QuickSight resources on your behalf.