Skip to main content
IAM Policy Map

Compute: Admin policies

Virtual servers, scaling, batch and high-performance computing.

12 AWS managed policies. 3 have reviewed guidance; the rest have authoritative permission data pending editorial review. 1 are service-linked role policies, shown with permission data only.

User access (10)

EC2 (2)

  • AdministratorAccess-AWSElasticBeanstalkAdmin

    Grants account administrative permissions. Explicitly allows developers and administrators to gain direct access to resources they need to manage AWS Elastic Beanstalk applications

  • AmazonEC2FullAccessAdmin

    Provides full access to Amazon EC2 via the AWS Management Console.

Auto Scaling (2)

EC2 Image Builder (1)

  • AWSImageBuilderFullAccessAdmin

    Provides full access to all AWS Image Builder actions and resource scoped access to related AWS services.

Elastic Beanstalk (1)

  • AWSElasticBeanstalkManagedUpdatesCustomerRolePolicyAdmin

    This policy is for the AWS Elastic Beanstalk service role used to perform managed updates of Elastic Beanstalk environments. This policy should not be attached to other users or roles. The policy grants broad permissions to create and manag…

Other services (4)

  • AmazonECS_FullAccessAdmin

    Provides administrative access to Amazon ECS resources and enables ECS features through access to other AWS service resources, including VPCs, Auto Scaling groups, and CloudFormation stacks.

  • AmazonLaunchWizard_FullaccessAdmin

    Full access to AWS Launch wizard and other required services.

  • AWSBatchFullAccessAdmin

    Provides full access for AWS Batch resources.

  • AWSMigrationHubRefactorSpacesFullAccessAdmin

    Grants full access to AWS MigrationHub Refactor Spaces, AWS MigrationHub Refactor Spaces console features and other related AWS services except permissions required for AWS Lambda and AWS Resource Access Manager as they can be scoped down b…

Service roles (1)

EC2 (1)

  • AWSCodeStarServiceRoleAdmin

    DO NOT USE - AWS CodeStar Service Role Policy which grants administrative privileges in order for CodeStar to manage IAM and other service resources on behalf of the customer.

Service-linked roles (1)

Other services (1)

Also relevant to Compute (33)
  • AmazonBraketFullAccessAdmin

    Provides full access to Amazon Braket via the AWS Management Console and SDK. Also provides access to related services (e.g., S3, logs).

  • AmazonDataZoneEnvironmentRolePermissionsBoundaryAdmin

    Amazon DataZone creates IAM roles for Environments to perform data analytics actions, and uses this policy when creating these roles to define the boundary of their permissions.

  • AmazonDataZoneProjectRolePermissionsBoundaryAdmin

    Amazon DataZone creates IAM roles for projects to perform data analytics actions, and uses this policy when creating these roles to define the boundary of their permissions.

  • AmazonDocDBConsoleFullAccessAdmin

    Provides full access to manage Amazon DocumentDB with MongoDB compatibility using the AWS Management Console. Note this policy also grants full access to publish on all SNS topics within the account, permissions to create and edit Amazon EC…

  • AmazonDocDBElasticFullAccessAdmin

    Provides full access to Amazon DocumentDB Elastic Clusters and other required permissions for its dependencies including EC2, KMS, SecretsManager, CloudWatch and IAM.

  • AmazonEC2RoleforDataPipelineRoleHigh privilegeAdmin

    Default policy for the Amazon EC2 Role for Data Pipeline service role.

  • AmazonElasticFileSystemFullAccessAdmin

    Provides full access to Amazon EFS via the AWS Management Console.

  • AmazonElasticMapReduceforEC2RoleHigh privilegeAdmin

    Default policy for the Amazon Elastic MapReduce for EC2 service role.

  • AmazonFSxConsoleFullAccessAdmin

    Provides full access to Amazon FSx and access to related AWS services via the AWS Management Console.

  • AmazonLaunchWizardFullAccessV2Admin

    Full access to AWS Launch wizard and other required services.

  • AmazonManagedBlockchainConsoleFullAccessAdmin

    Provides full access to Amazon Managed Blockchain via the AWS Management Console

  • AmazonMQApiFullAccessAdmin

    Provides full access to AmazonMQ via our API/SDK.

  • AmazonMQFullAccessAdmin

    Provides full access to AmazonMQ via the AWS Management Console.

  • AmazonMSKFullAccessAdmin

    Provide full access to Amazon MSK and other required permissions for its dependencies.

  • AmazonRoute53ResolverFullAccessAdmin

    Full access policy for Route 53 Resolver

  • AmazonS3FilesFullAccessAdmin

    Provides full access to all S3 Files via the AWS Management Console.

  • AmazonZocaloFullAccessAdmin

    Provides full access to Amazon Zocalo.

  • AWSApplicationMigrationFullAccessAdmin

    This policy provides permissions to all public APIs of AWS Application Migration Service (MGN), as well as permissions to read KMS key information. Attach this policy to your IAM users or roles.

  • AWSCloud9AdministratorAdmin

    Provides administrator access to AWS Cloud9.

  • AWSDeepRacerCloudFormationAccessPolicyAdmin

    Allows CloudFormation to create and manage AWS stacks and resources on your behalf.

  • AWSDirectoryServiceFullAccessAdmin

    Provides full access to AWS Directory Service.

  • AWSElasticBeanstalkServiceHigh privilegeAdmin

    This policy is on a deprecation path. See documentation for guidance: https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/iam-servicerole.html. AWS Elastic Beanstalk Service role policy which grants permissions to create & manage resourc…

  • AWSElasticDisasterRecoveryConsoleFullAccessAdmin

    This policy provides full access to all public APIs of AWS Elastic Disaster Recovery (DRS), as well as permissions to read KMS key, License Manager, Resource Groups, Elastic Load Balancing, IAM, and EC2 information. Attach this policy to yo…

  • AWSElasticDisasterRecoveryConsoleFullAccess_v2Admin

    This policy provides full access to all public APIs of AWS Elastic Disaster Recovery (AWS DRS), as well as all public APIs in other AWS services used by AWS DRS Console. Attach this policy to your users or roles.

  • AWSMarketplaceFullAccessAdmin

    Provides the ability to subscribe and unsubscribe to AWS Marketplace software, allows users to manage Marketplace software instances from the Marketplace 'Your Software' page, and provides administrative access to EC2.

  • AWSMigrationHubRefactorSpaces-EnvironmentsWithoutBridgesFullAccessAdmin

    Grants full access to AWS Migration Hub Refactor Spaces and other AWS related services except AWS Transit Gateway and EC2 security groups not required when using environments without a network bridge. This policy also excludes permissions r…

  • ComputeOptimizerServiceRolePolicyAdmin

    Allows ComputeOptimizer to call AWS services and collect workload details on your behalf.

  • DataScientistHigh privilegeAdmin

    Grants permissions to AWS data analytics services.

  • ElasticLoadBalancingFullAccessAdmin

    Provides full access to Amazon ElasticLoadBalancing, and limited access to other services necessary to provide ElasticLoadBalancing features.

  • NetworkAdministratorAdmin

    Grants full access permissions to AWS services and actions required to set up and configure AWS network resources.

  • SageMakerStudioAdminIAMConsolePolicyAdmin

    Provides initial administrative and individual setup privileges for Amazon SageMaker Unified Studio via the AWS Management Console and SDK. Allows launching of SageMaker Unified Studio Portal.

  • SupportUserAdmin

    This policy grants permissions to troubleshoot and resolve issues in an AWS account. This policy also enables the user to contact AWS support to create and manage cases.

  • SystemAdministratorHigh privilegeAdmin

    Grants full access permissions necessary for resources required for application and development operations.

IAM Policy MapCreated by Mavrick HardingUnofficial community resource. Not affiliated with, endorsed by or sponsored by Amazon Web Services.