Compute: Reader policies
Virtual servers, scaling, batch and high-performance computing.
17 AWS managed policies. 3 have reviewed guidance; the rest have authoritative permission data pending editorial review. 6 are service-linked role policies, shown with permission data only.
User access (10)
EC2 (4)
- AmazonEC2ImageReferencesAccessPolicyReader
Provides read-only access to scan all supported resource types for relevant data when using DescribeImageReferences.
- AmazonEC2ReadOnlyAccessReader
Provides read only access to Amazon EC2 via the AWS Management Console.
- AmazonVPCReadOnlyAccessReader
Provides read only access to Amazon VPC via the AWS Management Console.
- AmazonZocaloReadOnlyAccessReader
Provides read only access to Amazon Zocalo
Auto Scaling (2)
- AutoScalingConsoleReadOnlyAccessReader
Provides read-only access to Auto Scaling via the AWS Management Console.
- AutoScalingReadOnlyAccessReader
Provides read-only access to Auto Scaling.
EC2 Image Builder (1)
- AWSImageBuilderReadOnlyAccessReader
Provides read only access to all AWS Image Builder actions.
Elastic Beanstalk (1)
- AWSElasticBeanstalkReadOnlyReader
Grants read-only permissions. Explicitly allows operators to gain direct access to retrieve information about resources related to AWS Elastic Beanstalk applications.
Other services (2)
- AmazonEKSWorkerNodePolicyReader
This policy allows Amazon EKS worker nodes to connect to Amazon EKS Clusters.
- AmazonNimbleStudio-LaunchProfileWorkerReader
This policy grants access to resources needed by Nimble Studio Launch Profile workers. Attach this policy to EC2 instances created by Nimble Studio Builder.
Service roles (1)
Other services (1)
- AWSElasticDisasterRecoveryNetworkReplicationPolicyReader
This policy allows AWS Elastic Disaster Recovery (DRS) to support network replication.
Service-linked roles (6)
EC2 (2)
- AWSEnhancedClassicNetworkingMangementPolicyReader
Policy to enable enhanced classic networking management feature.
- DeclarativePoliciesEC2ReportReader
Provides access to read-only APIs needed to run EC2 Declarative Policies Account Status Report.
Inspector (1)
- AmazonInspectorServiceRolePolicyReader
Grants Amazon Inspector access to AWS services needed to perform security assessments
Network Manager (1)
- AWSNetworkManagerServiceRolePolicyReader
Allow NetworkManager to access resources associated with your Global Networks
Other services (2)
- AWSServiceRoleForGroundStationDataflowEndpointGroupPolicyReader
AWS GroundStation uses this service-linked role to invoke EC2 to find public IPv4 addresses
- AWSTrustedAdvisorServiceRolePolicyReader
Access for the AWS Trusted Advisor Service to help reduce cost, increase performance, and improve security of your AWS environment.
Also relevant to Compute (29)
- AmazonDocDBReadOnlyAccessReader
Provides read-only access to Amazon DocumentDB with MongoDB compatibility. Note that this policy also grants access to Amazon RDS and Amazon Neptune resources.
- AmazonElasticFileSystemReadOnlyAccessReader
Provides read only access to Amazon EFS via the AWS Management Console.
- AmazonFSxConsoleReadOnlyAccessReader
Provides read only access to Amazon FSx and access to related AWS services via the AWS Management Console.
- AmazonKeyspacesReadOnlyAccess_v2Reader
Provide read only access to Amazon Keyspaces and related AWS services.
- AmazonMQApiReadOnlyAccessReader
Provides read only access to AmazonMQ via our API/SDK.
- AmazonMQReadOnlyAccessReader
Provides read only access to AmazonMQ via the AWS Management Console.
- AmazonMSKReadOnlyAccessReader
Provide readonly access to Amazon MSK
- AmazonRDSReadOnlyAccessReader
Provides read only access to Amazon RDS via the AWS Management Console.
- AmazonRoute53ResolverReadOnlyAccessReader
Read only policy for Route 53 Resolver
- AmazonS3FilesReadOnlyAccessReader
Provides read only access to all S3 Files via the AWS Management Console.
- AmazonS3OutpostsReadOnlyAccessReader
Provides read only access to Amazon S3 on Outposts via the AWS Management Console.
- AmazonWorkDocsReadOnlyAccessReader
Provides read only access to Amazon WorkDocs via the AWS Management Console
- AmazonWorkSpacesSecureBrowserReadOnlyReader
Provides read-only access to Amazon WorkSpaces Secure Browser and its dependencies through the AWS Management Console, SDK, and CLI.
- AmazonWorkSpacesWebReadOnlyReader
Provides read-only access to Amazon WorkSpaces Web and its dependencies through the AWS Management Console, SDK, and CLI.
- AWSApplicationMigrationReadOnlyAccessReader
This policy provides permissions to all read-only public APIs of Application Migration Service (MGN), as well as some read-only APIs of other AWS services that are required in order to make full read-only use of the MGN console. Attach this…
- AWSCodeStarFullAccessReader
Provides full access to AWS CodeStar via the AWS Management Console.
- AWSElasticDisasterRecoveryReadOnlyAccessReader
You can attach the AWSElasticDisasterRecoveryReadOnlyAccess policy to your IAM identities. This policy provides permissions to all read-only public APIs of Elastic Disaster Recovery (DRS), as well as some read-only APIs of other AWS service…
- AWSIncidentManagerIncidentAccessServiceRolePolicyReader
Grants Incident Manager permissions to call other AWS services as a part of managing an incident.
- AWSManagedServices_ContactsServiceRolePolicyReader
Allows AWS Managed Services to read the values of the tags on AWS resources
- AWSMarketplaceRead-onlyReader
Provides the ability to review AWS Marketplace subscriptions
- AWSMarketplaceSellerProductsReadOnlyReader
Provide sellers read-only access to AWS Marketplace Management Products page.
- AWSResourceGroupsReadOnlyAccessReader
This is the read only policy for AWS Resource Groups
- CloudWatchAutomaticDashboardsAccessReader
Provides access to the non-CloudWatch APIs used to display CloudWatch Automatic Dashboards, including the contents of objects such as Lambda functions
- ComputeOptimizerReadOnlyAccessReader
Provides read only access to ComputeOptimizer.
- ElasticLoadBalancingReadOnlyReader
Provides read only access to Amazon ElasticLoadBalancing and dependent services
- NeptuneGraphReadOnlyAccessReader
Provides read only access to all Amazon Neptune Analytics resources along with read only permissions for dependent services.
- NeptuneReadOnlyAccessReader
Provides read only access to Amazon Neptune. Note that this policy also grants access to Amazon RDS resources. For more information, see https://aws.amazon.com/neptune/faqs/.
- ROSAWorkerInstancePolicyReader
Allows Red Hat OpenShift Service on AWS (ROSA) worker nodes in your account read-only access to Amazon EC2 instances and AWS Regions for compute node lifecycle management.
- VPCLatticeReadOnlyAccessReader
Provides read-only access to Amazon VPC Lattice via the AWS Management Console, and limited access to dependency services.