Application Integration: Admin policies
Messaging, eventing, workflows and API integration between applications.
15 AWS managed policies. 3 have reviewed guidance; the rest have authoritative permission data pending editorial review.
User access (15)
EventBridge (4)
- AmazonEventBridgeFullAccessAdmin
Provides full access to Amazon EventBridge.
- AmazonEventBridgePipesFullAccessAdmin
Provides full access to Amazon EventBridge Pipes.
- AmazonEventBridgeSchedulerFullAccessAdmin
The AmazonEventBridgeSchedulerFullAccess managed policy grants permissions to use all EventBridge Scheduler actions for schedules, and schedule groups.
- AmazonEventBridgeSchemasFullAccessAdmin
Provides full access to Amazon EventBridge Schemas.
MQ (2)
- AmazonMQApiFullAccessAdmin
Provides full access to AmazonMQ via our API/SDK.
- AmazonMQFullAccessAdmin
Provides full access to AmazonMQ via the AWS Management Console.
Step Functions (2)
- AWSStepFunctionsConsoleFullAccessAdmin
An access policy for providing a user/role/etc access to the AWS StepFunctions console. For a full console experience, in addition to this policy, a user may need iam:PassRole permission on other IAM roles that can be assumed by the service…
- AWSStepFunctionsFullAccessAdmin
An access policy for providing a user/role/etc access to the AWS StepFunctions API. For full access, in addition to this policy, a user MUST have iam:PassRole permission on at least one IAM role that can be assumed by the service.
AppFabric (1)
- AWSAppFabricFullAccessAdmin
Provides full access to the AWS AppFabric service and read only access to dependent services such as S3, Kinesis, KMS.
AppFlow (1)
- AmazonAppFlowFullAccessAdmin
Provides full access to Amazon AppFlow and access to AWS services supported as flow source or destination (S3 and Redshift). Also provides access to KMS for encryption
CloudWatch (1)
- CloudWatchEventsFullAccessAdmin
Provides full access to Amazon CloudWatch Events.
SNS (1)
- AmazonSNSFullAccessAdmin
Provides full access to Amazon SNS via the AWS Management Console.
SQS (1)
- AmazonSQSFullAccessAdmin
Provides full access to Amazon SQS via the AWS Management Console.
Other services (2)
- AWSAppSyncAdministratorAdmin
Provides administrative access to the AppSync service, though not enough to access via the console.
- SimpleWorkflowFullAccessAdmin
Provides full access to the Simple Workflow configuration service.
Also relevant to Application Integration (9)
- AmazonDevOpsGuruConsoleFullAccessAdmin
The policy grants full-access to the DevOps Guru console.
- AmazonDevOpsGuruFullAccessAdmin
Provides full access to Amazon DevOps Guru.
- AmazonS3FilesFullAccessAdmin
Provides full access to all S3 Files via the AWS Management Console.
- AmazonSecurityLakeAdministratorAdmin
Provides full access to Amazon Security Lake and related services needed to administer Security Lake.
- AWSCodeBuildAdminAccessAdmin
Provides full access to AWS CodeBuild via the AWS Management Console. Also attach AmazonS3ReadOnlyAccess to provide access to download build artifacts, and attach IAMFullAccess to create and manage the service role for CodeBuild.
- AWSCodeCommitFullAccessAdmin
Provides full access to AWS CodeCommit via the AWS Management Console.
- AWSCodePipeline_FullAccessAdmin
Provides full access to AWS CodePipeline via the AWS Management Console.
- AWSLambdaFullAccessHigh privilegeAdmin
This policy is on a deprecation path. See documentation for guidance: https://docs.aws.amazon.com/lambda/latest/dg/access-control-identity-based.html. Provides full access to Lambda, S3, DynamoDB, CloudWatch Metrics and Logs.
- CloudWatchFullAccessAdmin
Provides full access to CloudWatch.