Skip to main content
IAM Policy Map

Privileged: Operator policies

Policies that carry the High privilege flag. Assigned by rule from tier-rules.yaml, not by service share.

9 AWS managed policies. 4 have reviewed guidance; the rest have authoritative permission data pending editorial review. 1 are service-linked role policies, shown with permission data only.

Operator and limited (4)

  • AmazonDataZoneProjectDeploymentPermissionsBoundaryHigh privilegeOperator

    Amazon DataZone creates IAM roles that it uses for deploying data analytics projects. DataZone uses this policy when creating these roles to define the boundary of their permissions.

  • AmazonSecurityLakePermissionsBoundaryHigh privilegeOperator

    Amazon Security Lake creates IAM roles for third-party custom sources to write data to a data lake and for third-party subscribers to consume data from a data lake, and uses this policy when creating these roles to define the boundary of th…

  • AWSManagedControlPolicyManagementAccessHigh privilegeOperator

    Grants AWS permission to manage organization control policies for AWS managed accounts

  • ConsoleFullAccessFromVercelHigh privilegeOperator

    For use with accounts created through the Vercel Marketplace integration with AWS. Provides access to manage all resources for the services that are integrated with the Vercel Marketplace.

Service roles (4)

  • AmazonEC2RoleforSSMHigh privilegeOperator

    This policy will soon be deprecated. Please use AmazonSSMManagedInstanceCore policy to enable AWS Systems Manager service core functionality on EC2 instances. For more information see https://docs.aws.amazon.com/systems-manager/latest/userg…

  • AmazonElasticMapReduceRoleHigh privilegeOperator

    This policy is on a deprecation path. See documentation for guidance: https://docs.aws.amazon.com/emr/latest/ManagementGuide/emr-managed-iam-policies.html. Default policy for the Amazon Elastic MapReduce service role.

  • AmazonElasticTranscoderRoleHigh privilegeOperator

    Default policy for the Amazon Elastic Transcoder service role.

  • AWSIoTRuleActionsHigh privilegeOperator

    Allows access to all AWS services supported in AWS IoT Rule Actions

Service-linked roles (1)

IAM Policy MapCreated by Mavrick HardingUnofficial community resource. Not affiliated with, endorsed by or sponsored by Amazon Web Services.