Analytics: Reader policies
Data lakes, warehouses, streaming, search and business intelligence.
22 AWS managed policies. 4 have reviewed guidance; the rest have authoritative permission data pending editorial review. 1 are service-linked role policies, shown with permission data only.
User access (20)
OpenSearch (3)
- AmazonESReadOnlyAccessReader
Provides read-only access to the Amazon ES configuration service.
- AmazonOpenSearchIngestionReadOnlyAccessReader
Provides read only access to the Amazon OpenSearch Ingestion Service
- AmazonOpenSearchServiceReadOnlyAccessReader
Provides read-only access to the Amazon OpenSearch Service configuration service.
Kinesis (2)
- AmazonKinesisReadOnlyAccessReader
Provides read only access to all streams via the AWS Management Console.
- AmazonKinesisVideoStreamsReadOnlyAccessReader
Provides read only access to AWS Kinesis Video Streams via the AWS Management Console.
MSK (2)
- AmazonMSKConnectReadOnlyAccessReader
Provide readonly access to Amazon MSK Connect
- AmazonMSKReadOnlyAccessReader
Provide readonly access to Amazon MSK
Clean Rooms ML (1)
- AWSCleanRoomsMLReadOnlyAccessReader
Allows read-only access to AWS Clean Rooms ML resources and read-only access to related AWS Clean Rooms resources
CloudSearch (1)
- CloudSearchReadOnlyAccessReader
Provides read only access to the Amazon CloudSearch configuration service.
Data Exchange (1)
- AWSDataExchangeReadOnlyReader
Grants read-only access to AWS Data Exchange and AWS Marketplace actions using the AWS Management Console and SDK.
Data Firehose (1)
- AmazonKinesisFirehoseReadOnlyAccessReader
Provides read only access to all Amazon Kinesis Firehose Delivery Streams.
EMR (2)
- AmazonElasticMapReduceReadOnlyAccessReader
Provides read only access to Amazon Elastic MapReduce via the AWS Management Console.
- AmazonEMRReadOnlyAccessPolicy_v2Reader
Provides read only access to Amazon EMR and the associated CloudWatch Metrics.
Entity Resolution (1)
- AWSEntityResolutionConsoleReadOnlyAccessReader
Provides read-only access to AWS Entity Resolution via the AWS Management Console.
Glue (1)
- AWSGlueSchemaRegistryReadonlyAccessReader
Provides readonly access to the AWS Glue Schema Registry Service
HealthImaging (1)
- AWSHealthImagingReadOnlyAccessReader
Provides read only access to AWS Health Imaging service.
HealthLake (1)
- AmazonHealthLakeReadOnlyAccessReader
Provides read only access to Amazon HealthLake service.
Kinesis Analytics (1)
- AmazonKinesisAnalyticsReadOnlyReader
Provides read-only access to Amazon Kinesis Analytics via the AWS Management Console.
Omics (1)
- AmazonOmicsReadOnlyAccessReader
Provide read only access to Amazon Omics
Other services (1)
- QBusinessQuicksightPluginPolicyReader
Grants permissions to QBusiness to call QuickSight APIs for the QuickSight plugin
Service roles (1)
QuickSight (1)
- AWSQuickSightDescribeRedshiftReader
Allow QuickSight to describe Redshift resources
Service-linked roles (1)
- EMRDescribeClusterPolicyForEMRWALReader
This policy grants read-only permissions that allow the WAL service for Amazon EMR to find and return the status of a cluster
Also relevant to Analytics (3)
- AmazonDynamoDBReadOnlyAccessReader
Provides read only access to Amazon DynamoDB via the AWS Management Console.
- AmazonRedshiftReadOnlyAccessReader
Provides read only access to Amazon Redshift via the AWS Management Console.
- AWSResourceGroupsReadOnlyAccessReader
This is the read only policy for AWS Resource Groups