End User Computing: Switch between the hub and domains
End User Computing policies
Virtual desktops, application streaming and workplace collaboration.
17 AWS managed policies. 0 have reviewed guidance; the rest have authoritative permission data pending editorial review.
Loading map…
Loading map
User access (10)
- AmazonAppStreamFullAccessAdmin
Provides full access to Amazon AppStream via the AWS Management Console.
- AmazonAppStreamReadOnlyAccessReader
Provides read only access to Amazon AppStream via the AWS Management Console.
- AmazonWorkDocsFullAccessAdmin
Provides full access to Amazon WorkDocs via the AWS Management Console
- AmazonWorkDocsReadOnlyAccessReader
Provides read only access to Amazon WorkDocs via the AWS Management Console
- AmazonWorkMailMessageFlowReadOnlyAccessReader
Read only access to WorkMail messages for the GetRawMessageContent API
- AmazonWorkSpacesSecureBrowserReadOnlyReader
Provides read-only access to Amazon WorkSpaces Secure Browser and its dependencies through the AWS Management Console, SDK, and CLI.
- AmazonWorkSpacesThinClientFullAccessAdmin
Provides full access to Amazon WorkSpaces Thin Client as well as limited access to required related services
- AmazonWorkSpacesThinClientReadOnlyAccessReader
Provides read-only access to Amazon WorkSpaces Thin Client and its dependencies
- AmazonWorkSpacesWebReadOnlyReader
Provides read-only access to Amazon WorkSpaces Web and its dependencies through the AWS Management Console, SDK, and CLI.
- AWSWickrFullAccessAdmin
This policy grants full administrative permissions to the Wickr service, including the Wickr administrative functions under the AWS Management Console.
Operator and limited (6)
- AmazonNimbleStudio-StudioAdminOperator
This policy grants access to Amazon Nimble Studio resources associated with the studio admin and related studio resources in other services. Attach this policy to the Admin role associated with your studio.
- AmazonNimbleStudio-StudioUserOperator
This policy grants access to Amazon Nimble Studio resources associated with the studio user and related studio resources in other services. Attach this policy to the User role associated with your studio.
- AmazonWorkMailMessageFlowFullAccessOperator
Full access to the WorkMail Message Flow APIs
- AmazonWorkSpacesAdminOperator
Provides access to Amazon WorkSpaces administrative actions via AWS SDK and CLI.
- AmazonWorkSpacesApplicationManagerAdminAccessOperator
Provides administrator access for packaging an application in Amazon WorkSpaces Application Manager.
- AmazonWorkSpacesSelfServiceAccessOperator
Provides access to Amazon WorkSpaces backend service to perform Workspace Self Service actions
Service roles (1)
- ApplicationAutoScalingForAmazonAppStreamAccessOperator
Policy to enable Application Autoscaling for Amazon AppStream
Also relevant to End User Computing (5)
- AmazonWorkMailFullAccessAdmin
Provides full access to WorkMail, Directory Service, SES, EC2 and read access to KMS metadata.
- AmazonWorkMailReadOnlyAccessReader
Provides read only access to WorkMail and SES.
- AWSApplicationAutoscalingAppStreamFleetPolicyOperator
Policy granting permissions to Application Auto Scaling to access AppStream and CloudWatch.
- AWSApplicationAutoscalingWorkSpacesPoolPolicyOperator
Policy granting permissions to Application Auto Scaling to access Amazon WorkSpaces and Amazon CloudWatch.
- CloudWatchInternetMonitorServiceRolePolicyOperator
Allows Internet Monitor to access EC2, Workspaces, and CloudFront resources, and other required services on your behalf.