IoT & Edge: Operator policies
Connected devices, edge runtimes, robotics and satellite ground stations.
23 AWS managed policies. 0 have reviewed guidance; the rest have authoritative permission data pending editorial review. 5 are service-linked role policies, shown with permission data only.
Operator and limited (8)
- AWSGroundStationAgentInstancePolicyOperator
Provides the Dataflow Endpoint Instance permissions to use the AWS Ground Station Agent
- AWSIoTConfigAccessOperator
This policy gives full access to the AWS IoT configuration actions
- AWSIoTDataAccessOperator
This policy gives full access to the AWS IoT messaging actions
- AWSIoTDeviceTesterForFreeRTOSFullAccessOperator
Allows AWS IoT Device Tester to run the FreeRTOS qualification suite by allowing access to services including IoT, S3, and IAM
- AWSIoTWirelessDataAccessOperator
Allows the associated identity data access to AWS IoT Wireless devices.
- AWSIoTWirelessFullPublishAccessOperator
Provides IoT Wireless full access to publish to IoT Rules Engine on your behalf.
- AWSIoTWirelessGatewayCertManagerOperator
Allows the associated identity access to create, list and describe IoT Certificates
- AWSRoboMakerServiceRolePolicyOperator
RoboMaker service policy
Service roles (10)
IoT (5)
- AWSIoTDeviceDefenderAddThingsToThingGroupMitigationActionOperator
Provides write access to IoT thing groups and read access to IoT Certificates for execution of ADD\_THINGS\_TO\_THING\_GROUP mitigation action
- AWSIoTDeviceDefenderReplaceDefaultPolicyMitigationActionOperator
Provides write access to IoT policies for execution of REPLACE\_DEFAULT\_POLICY\_VERSION mitigation action
- AWSIoTDeviceDefenderUpdateCACertMitigationActionOperator
Provides write access to IoT CA certificates for execution of UPDATE\_CA\_CERTIFICATE mitigation action
- AWSIoTDeviceDefenderUpdateDeviceCertMitigationActionOperator
Provides write access to IoT certificates for execution of UPDATE\_DEVICE\_CERTIFICATE mitigation action
- AWSIoTThingsRegistrationOperator
This policy allows users to register things at bulk using AWS IoT StartThingRegistrationTask API
IoT Greengrass (1)
- AWSDeepLensServiceRolePolicyOperator
Grants AWS DeepLens access to AWS services, resources and roles needed by DeepLens and its dependencies including IoT, S3, GreenGrass and AWS Lambda.
Panorama (1)
- AWSPanoramaServiceRolePolicyOperator
Allows AWS Panorama to manage resources in Amazon S3, AWS IoT, AWS IoT GreenGrass, AWS Lambda, Amazon SageMaker, and Amazon CloudWatch Logs, and to pass service roles to AWS IoT, AWS IoT GreenGrass, and Amazon SageMaker.
Other services (3)
- AmazonSageMakerEdgeDeviceFleetPolicyOperator
Provides permissions necessary for SageMaker Edge to create and manage a device fleet for the customer using the default cloud connection.
- AWSIoTFleetHubFederationAccessOperator
Federation access for IoT Fleet Hub applications
- AWSIoTSiteWiseMonitorPortalAccessOperator
This policy grants permissions to access AWS IoT SiteWise assets and asset data, create AWS IoT SiteWise Monitor resources, and list AWS SSO users.
Service-linked roles (5)
- AWSIoTSiteWiseMonitorServiceRolePolicyOperator
This role grants AWS IoT SiteWise monitor permissions to access your AWS IoT SiteWise assets & asset properties, and create AWS IoT Sitewise projects, dashboards & access policies through AWS IoT SiteWise portals.
- AWSIoTTwinMakerServiceRolePolicyOperator
Allows AWS IoT TwinMaker to call other AWS services and to sync their resources on your behalf.
- AWSPanoramaServiceLinkedRolePolicyOperator
Allows AWS Panorama to manage resources in AWS IoT, AWS Secrets Manager and AWS Panorama.
- AWSRoboMakerServicePolicyOperator
RoboMaker service policy
- AWSServiceRoleForIoTSiteWiseOperator
Allows AWS IoT SiteWise to provision and manage gateways as well as query data. The policy includes required AWS Greengrass permissions for deploying to groups, AWS Lambda permissions for creating and updating service-prefixed functions, an…
Also relevant to IoT & Edge (4)
- AmazonFreeRTOSOTAUpdateOperator
Allows user to access Amazon FreeRTOS OTA Update
- AWSIoTDeviceDefenderEnableIoTLoggingMitigationActionOperator
Provides access for enabling IoT logging for execution of ENABLE\_IOT\_LOGGING mitigation action
- AWSIoTOTAUpdateOperator
Allows access to create AWS IoT Job and describe the AWS code signer job
- AWSIoTRuleActionsHigh privilegeOperator
Allows access to all AWS services supported in AWS IoT Rule Actions