Skip to main content
IAM Policy Map

Business Applications: Admin policies

Contact centre, customer engagement, messaging, location, marketplace and partner services.

14 AWS managed policies. 2 have reviewed guidance; the rest have authoritative permission data pending editorial review. 1 are service-linked role policies, shown with permission data only.

User access (13)

Marketplace (2)

  • AWSMarketplaceFullAccessAdmin

    Provides the ability to subscribe and unsubscribe to AWS Marketplace software, allows users to manage Marketplace software instances from the Marketplace 'Your Software' page, and provides administrative access to EC2.

  • AWSMarketplaceSellerFullAccessAdmin

    Provides full access to all seller operations on the AWS Marketplace and other AWS services such as AMI management.

Honeycode (1)

Alexa for Business (1)

Chime (1)

  • AmazonChimeFullAccessAdmin

    Provides full access to Amazon Chime Admin Console via the AWS Management Console.

Connect (1)

  • AmazonConnect_FullAccessAdmin

    The purpose of this policy is to grant permissions to AWS Connect users required to use Connect resources. This policy provides full access to AWS Connect resources via the Connect Console and public APIs

Managed Blockchain (2)

MechanicalTurk (1)

One (1)

  • AmazonOneEnterpriseFullAccessAdmin

    This policy grants administrative permissions that allow access to all Amazon One Enterprise resources and operations.

SES (1)

WorkMail (1)

  • AmazonWorkMailFullAccessAdmin

    Provides full access to WorkMail, Directory Service, SES, EC2 and read access to KMS metadata.

Other services (1)

Service-linked roles (1)

Also relevant to Business Applications (11)
  • AdministratorAccessHigh privilegeAdmin

    Provides full access to AWS services and resources.

  • AdministratorAccess-AmplifyHigh privilegeAdmin

    Grants account administrative permissions while explicitly allowing direct access to resources needed by Amplify applications.

  • AIDevOpsAgentActionsPolicyHigh privilegeAdmin

    Provides elevated permissions required by the AWS DevOps Agent to perform operator-approved mutations or elevated actions on customer AWS resources during operational events.

  • AmazonCognitoUnAuthedIdentitiesSessionPolicyAdmin

    This policy defines the set of permissions allowed for unauthenticated identities for Cognito Identity Pools. This policy is not intended to be used as a stand alone permission policy. It is used as a guardrail against overly permissive pol…

  • AmazonSNSFullAccessAdmin

    Provides full access to Amazon SNS via the AWS Management Console.

  • AmazonTimestreamConsoleFullAccessHigh privilegeAdmin

    Provides full access to manage Amazon Timestream using the AWS Management Console. Note that this policy also grants permissions for certain KMS operations, and operations to manage your saved queries. If using Customer managed CMK, please …

  • AWSCODAPermissionsBoundaryHigh privilegeAdmin

    AWS CODA creates IAM roles for delegations, and uses this policy when creating these roles to define the boundary of their permissions.

  • AWSDataExchangeFullAccessAdmin

    Grants full access to AWS Data Exchange and AWS Marketplace actions using the AWS Management Console and SDK. It also provides select access to related services needed to take full advantage of AWS Data Exchange.

  • AWSVendorInsightsVendorFullAccessAdmin

    Provides full access for creating and managing the Vendor Insights resources

  • PowerUserAccessHigh privilegeAdmin

    Provides full access to AWS services and resources, but does not allow management of Users and groups.

  • SystemAdministratorHigh privilegeAdmin

    Grants full access permissions necessary for resources required for application and development operations.

IAM Policy MapCreated by Mavrick HardingUnofficial community resource. Not affiliated with, endorsed by or sponsored by Amazon Web Services.