Management & Governance: Admin policies

Grants full access to Amazon AI Operations service and its required permissions via AWS console. It also includes permissions to use identity-aware console sessions.

Provides full access to Amazon Inspector and access to other related services such as organizations with restrictive organizational access.

Provide full access to Amazon Keyspaces

Full access to AWS Launch wizard and other required services.

Provide full access to Amazon Managed Apache Cassandra Service

Provides full access to the AWS App Mesh APIs and Management Console.

Provides administrative access to enable or disable AWS Audit Manager, update settings, and manage assessments, controls, and frameworks

Use the AWSBillingConductorFullAccess managed policy to allow complete access to AWS Billing Conductor (ABC) console and APIs. This policy allows users to list, create and delete ABC resources.

Provides full access to AWS Budgets Actions including using Budgets Actions to control states of running AWS resources via AWS Management Console

Provides full access to AWS CodePipeline via the AWS Management Console.

This policy is for the AWS Elastic Beanstalk service role used to perform managed updates of Elastic Beanstalk environments. This policy should not be attached to other users or roles. The policy grants broad permissions to create and manag…

AWS Elastic Beanstalk Service Role policy that grants limited permissions to managed updates.

This policy is on a deprecation path. See documentation for guidance: https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/iam-servicerole.html. AWS Elastic Beanstalk Service role policy which grants permissions to create & manage resourc…

Grants full administrative access to AWS account settings management. This policy allows owners to view and modify account information, billing, payments, tax registration, identity management, organization policies, budgets, cost analysis,…

Provides full access to configure and customize the AWS Management Console

Provides the ability to subscribe and unsubscribe to AWS Marketplace software, allows users to manage Marketplace software instances from the Marketplace 'Your Software' page, and provides administrative access to EC2.

Provides full access to AWS Organizations.

Policy provides customers with Read and Write permissions to all resources associated to the Security Incident Response service.

Provide full access to CloudWatch Application Signals service and scoped access to the dependencies needed to use and operate this service.

Provides full access to IAM Access Analyzer

Provides read/write access to AWS Secrets Manager via the AWS Management Console. Note: this exludes IAM actions, so combine with IAMFullAccess if rotation configuration is required.

This policy grants permissions to troubleshoot and resolve issues in an AWS account. This policy also enables the user to contact AWS support to create and manage cases.