Skip to main content
IAM Policy Map

Storage: Admin policies

Object, block, file and archive storage, plus backup.

11 AWS managed policies. 3 have reviewed guidance; the rest have authoritative permission data pending editorial review.

User access (11)

S3 (2)

FSx (2)

  • AmazonFSxConsoleFullAccessAdmin

    Provides full access to Amazon FSx and access to related AWS services via the AWS Management Console.

  • AmazonFSxFullAccessAdmin

    Provides full access to Amazon FSx and access to related AWS services.

EFS (1)

S3 Files (1)

Glacier (1)

S3 Outposts (1)

Storage Gateway (1)

Other services (2)

  • AmazonSecurityLakeAdministratorAdmin

    Provides full access to Amazon Security Lake and related services needed to administer Security Lake.

  • AWSBackupFullAccessAdmin

    This policy is for backup administrators, granting full access to AWS Backup operations, including creating or editing backup plans, assigning AWS resources to backup plans, deleting backups, and restoring backups.

Also relevant to Storage (20)
  • AdministratorAccess-AWSElasticBeanstalkAdmin

    Grants account administrative permissions. Explicitly allows developers and administrators to gain direct access to resources they need to manage AWS Elastic Beanstalk applications

  • AmazonAppFlowFullAccessAdmin

    Provides full access to Amazon AppFlow and access to AWS services supported as flow source or destination (S3 and Redshift). Also provides access to KMS for encryption

  • AmazonDynamoDBFullAccesswithDataPipelineHigh privilegeAdmin

    This policy is on a deprecation path. See documentation for guidance: https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/DynamoDBPipeline.html. Provides full access to Amazon DynamoDB including Export/Import using AWS Data Pip…

  • AmazonEC2RoleforDataPipelineRoleHigh privilegeAdmin

    Default policy for the Amazon EC2 Role for Data Pipeline service role.

  • AmazonElasticMapReduceforEC2RoleHigh privilegeAdmin

    Default policy for the Amazon Elastic MapReduce for EC2 service role.

  • AmazonElasticMapReduceFullAccessHigh privilegeAdmin

    This policy is on a deprecation path. See documentation for guidance: https://docs.aws.amazon.com/emr/latest/ManagementGuide/emr-managed-iam-policies.html. Provides full access to Amazon Elastic MapReduce and underlying services that it req…

  • AmazonLookoutVisionConsoleFullAccessAdmin

    Provides full access to Amazon Lookout for Vision and scoped access to required service and console dependencies.

  • AmazonS3FullAccessHigh privilegeAdmin

    Provides full access to all buckets via the AWS Management Console.

  • AWSAgentlessDiscoveryServiceAdmin

    Provides access for the Discovery Agentless Connector to register with AWS Application Discovery Service.

  • AWSCodeStarServiceRoleAdmin

    DO NOT USE - AWS CodeStar Service Role Policy which grants administrative privileges in order for CodeStar to manage IAM and other service resources on behalf of the customer.

  • AWSDataPipeline_FullAccessAdmin

    Provides full access to Data Pipeline, list access for S3, DynamoDB, Redshift, RDS, SNS, and IAM roles, and passRole access for default Roles.

  • AWSDataPipeline_PowerUserAdmin

    Provides full access to Data Pipeline, list access for S3, DynamoDB, Redshift, RDS, SNS, and IAM roles, and passRole access for default Roles.

  • AWSDataSyncFullAccessAdmin

    Provides full access to AWS DataSync and minimal access to its dependencies

  • AWSElasticBeanstalkServiceHigh privilegeAdmin

    This policy is on a deprecation path. See documentation for guidance: https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/iam-servicerole.html. AWS Elastic Beanstalk Service role policy which grants permissions to create & manage resourc…

  • AWSLambdaFullAccessHigh privilegeAdmin

    This policy is on a deprecation path. See documentation for guidance: https://docs.aws.amazon.com/lambda/latest/dg/access-control-identity-based.html. Provides full access to Lambda, S3, DynamoDB, CloudWatch Metrics and Logs.

  • AWSMigrationHubOrchestratorConsoleFullAccessAdmin

    Provides limited access to AWS Migration Hub, AWS Application Discovery Service, Amazon Simple Storage Service and AWS Secrets Manager. This policy also grants full access to AWS Migration Hub Orchestrator service.

  • AWSMigrationHubStrategyConsoleFullAccessAdmin

    Grants full access to the AWS Migration Hub Strategy Recommendations service and access to related AWS services through the AWS Management Console.

  • AWSPanoramaGreengrassGroupRolePolicyAdmin

    Allows an AWS Lambda function on an AWS Panorama Appliance to manage resources in Panorama, upload logs and metrics to Amazon CloudWatch, and to manage objects in buckets created for use with Panorama.

  • DatabaseAdministratorHigh privilegeAdmin

    Grants full access permissions to AWS services and actions required to set up and configure AWS database services.

  • TranslateFullAccessAdmin

    Provides full access to Amazon Translate.

IAM Policy MapCreated by Mavrick HardingUnofficial community resource. Not affiliated with, endorsed by or sponsored by Amazon Web Services.