{"columns":["action","accessLevel","plane","patterns","statements","flags"],"defaultVersion":"v10","name":"AdministratorAccess-AWSElasticBeanstalk","patterns":["acm:Describe*","acm:List*","autoscaling:*","autoscaling:Describe*","cloudformation:CancelUpdateStack","cloudformation:ContinueUpdateRollback","cloudformation:CreateStack","cloudformation:DeleteStack","cloudformation:Describe*","cloudformation:Estimate*","cloudformation:Get*","cloudformation:GetTemplate","cloudformation:List*","cloudformation:ListStackResources","cloudformation:SignalResource","cloudformation:TagResource","cloudformation:UntagResource","cloudformation:UpdateStack","cloudformation:Validate*","cloudtrail:LookupEvents","cloudwatch:DeleteAlarms","cloudwatch:DescribeAlarms","cloudwatch:GetMetricStatistics","cloudwatch:ListMetrics","cloudwatch:PutMetricAlarm","codebuild:BatchGetBuilds","codebuild:CreateProject","codebuild:DeleteProject","codebuild:StartBuild","codecommit:Get*","codecommit:UploadArchive","dynamodb:CreateTable","dynamodb:DeleteTable","dynamodb:DescribeTable","dynamodb:TagResource","ec2:AllocateAddress","ec2:AssociateAddress","ec2:AuthorizeSecurityGroup*","ec2:CreateLaunchTemplate*","ec2:CreateSecurityGroup","ec2:CreateTags","ec2:DeleteLaunchTemplate*","ec2:DeleteSecurityGroup","ec2:DeleteTags","ec2:Describe*","ec2:DisassociateAddress","ec2:RebootInstances","ec2:ReleaseAddress","ec2:RevokeSecurityGroup*","ec2:RunInstances","ec2:TerminateInstances","ecs:CreateCluster","ecs:DeRegisterTaskDefinition","ecs:DeleteCluster","ecs:Describe*","ecs:List*","ecs:RegisterTaskDefinition","ecs:TagResource","elasticbeanstalk:*","elasticloadbalancing:*","elasticloadbalancing:*Rule","elasticloadbalancing:*Tags","elasticloadbalancing:Describe*","elasticloadbalancing:SetRulePriorities","elasticloadbalancing:SetSecurityGroups","iam:AddRoleToInstanceProfile","iam:AttachRolePolicy","iam:CreateInstanceProfile","iam:CreateRole","iam:CreateServiceLinkedRole","iam:GetRole","iam:ListAttachedRolePolicies","iam:ListInstanceProfiles","iam:ListRolePolicies","iam:ListRoles","iam:ListServerCertificates","iam:PassRole","logs:CreateLogGroup","logs:DeleteLogGroup","logs:Describe*","logs:GetLogEvents","logs:PutRetentionPolicy","rds:*DBSubnetGroup","rds:AuthorizeDBSecurityGroupIngress","rds:CreateDBInstance","rds:CreateDBSecurityGroup","rds:DeleteDBInstance","rds:DeleteDBSecurityGroup","rds:Describe*","rds:ModifyDBInstance","rds:RestoreDBInstanceFromDBSnapshot","s3:CreateBucket","s3:Delete*","s3:Get*","s3:GetBucket*","s3:ListAllMyBuckets","s3:ListBucket","s3:Put*","s3:PutBucketOwnershipControls","s3:PutBucketPolicy","s3:PutBucketPublicAccessBlock","sns:CreateTopic","sns:DeleteTopic","sns:GetTopicAttributes","sns:ListSubscriptionsByTopic","sns:ListTopics","sns:Publish","sns:SetTopicAttributes","sns:Subscribe","sns:Unsubscribe","sqs:*QueueAttributes","sqs:CreateQueue","sqs:DeleteQueue","sqs:ListQueues","sqs:SendMessage","sqs:TagQueue"],"schemaVersion":1,"services":[{"prefix":"acm","rows":[["acm:DescribeAcmeAccount","Read","unclassified",[0],[0],1],["acm:DescribeAcmeDomainValidation","Read","unclassified",[0],[0],1],["acm:DescribeAcmeEndpoint","Read","unclassified",[0],[0],1],["acm:DescribeAcmeExternalAccountBinding","Read","unclassified",[0],[0],1],["acm:DescribeCertificate","Read","control",[0],[0],1],["acm:ListAcmeAccounts","List","unclassified",[1],[0],1],["acm:ListAcmeDomainValidations","List","unclassified",[1],[0],1],["acm:ListAcmeEndpoints","List","unclassified",[1],[0],1],["acm:ListAcmeExternalAccountBindings","List","unclassified",[1],[0],1],["acm:ListCertificateDomainValidations","List","control",[1],[0],1],["acm:ListCertificates","List","control",[1],[0],1],["acm:ListTagsForCertificate","Read","control",[1],[0],1],["acm:ListTagsForResource","Read","control",[1],[0],1]]},{"prefix":"autoscaling","rows":[["autoscaling:AttachInstances","Write","control",[2],[1],4],["autoscaling:AttachLoadBalancerTargetGroups","Write","control",[2],[1],4],["autoscaling:AttachLoadBalancers","Write","control",[2],[1],4],["autoscaling:AttachTrafficSources","Write","control",[2],[1],4],["autoscaling:BatchDeleteScheduledAction","Write","control",[2],[1],4],["autoscaling:BatchPutScheduledUpdateGroupAction","Write","control",[2],[1],4],["autoscaling:CancelInstanceRefresh","Write","control",[2],[1],4],["autoscaling:CompleteLifecycleAction","Write","control",[2],[1],4],["autoscaling:CreateAutoScalingGroup","Write","control",[2],[1],4],["autoscaling:CreateLaunchConfiguration","Write","control",[2],[1],4],["autoscaling:CreateOrUpdateTags","Tagging","control",[2],[1],4],["autoscaling:DeleteAutoScalingGroup","Write","control",[2],[1],4],["autoscaling:DeleteLaunchConfiguration","Write","control",[2],[1],4],["autoscaling:DeleteLifecycleHook","Write","control",[2],[1],4],["autoscaling:DeleteNotificationConfiguration","Write","control",[2],[1],4],["autoscaling:DeletePolicy","Write","control",[2],[1],4],["autoscaling:DeleteScheduledAction","Write","control",[2],[1],4],["autoscaling:DeleteTags","Tagging","control",[2],[1],4],["autoscaling:DeleteWarmPool","Write","control",[2],[1],4],["autoscaling:DescribeAccountLimits","List","control",[2,3],[0,1],1],["autoscaling:DescribeAccountSettings","List","control",[2,3],[0,1],1],["autoscaling:DescribeAdjustmentTypes","List","control",[2,3],[0,1],1],["autoscaling:DescribeAutoScalingGroups","List","control",[2,3],[0,1],1],["autoscaling:DescribeAutoScalingInstances","List","control",[2,3],[0,1],1],["autoscaling:DescribeAutoScalingNotificationTypes","List","control",[2,3],[0,1],1],["autoscaling:DescribeInstanceRefreshes","List","control",[2,3],[0,1],1],["autoscaling:DescribeLaunchConfigurations","List","control",[2,3],[0,1],1],["autoscaling:DescribeLifecycleHookTypes","List","control",[2,3],[0,1],1],["autoscaling:DescribeLifecycleHooks","List","control",[2,3],[0,1],1],["autoscaling:DescribeLoadBalancerTargetGroups","List","control",[2,3],[0,1],1],["autoscaling:DescribeLoadBalancers","List","control",[2,3],[0,1],1],["autoscaling:DescribeMetricCollectionTypes","List","control",[2,3],[0,1],1],["autoscaling:DescribeNotificationConfigurations","List","control",[2,3],[0,1],1],["autoscaling:DescribePolicies","List","control",[2,3],[0,1],1],["autoscaling:DescribeScalingActivities","List","control",[2,3],[0,1],1],["autoscaling:DescribeScalingProcessTypes","List","control",[2,3],[0,1],1],["autoscaling:DescribeScheduledActions","List","control",[2,3],[0,1],1],["autoscaling:DescribeTags","Read","control",[2,3],[0,1],1],["autoscaling:DescribeTerminationPolicyTypes","List","control",[2,3],[0,1],1],["autoscaling:DescribeTrafficSources","List","control",[2,3],[0,1],1],["autoscaling:DescribeWarmPool","List","control",[2,3],[0,1],1],["autoscaling:DetachInstances","Write","control",[2],[1],4],["autoscaling:DetachLoadBalancerTargetGroups","Write","control",[2],[1],4],["autoscaling:DetachLoadBalancers","Write","control",[2],[1],4],["autoscaling:DetachTrafficSources","Write","control",[2],[1],4],["autoscaling:DisableMetricsCollection","Write","control",[2],[1],4],["autoscaling:EnableMetricsCollection","Write","control",[2],[1],4],["autoscaling:EnterStandby","Write","control",[2],[1],4],["autoscaling:ExecutePolicy","Write","control",[2],[1],4],["autoscaling:ExitStandby","Write","control",[2],[1],4],["autoscaling:GetPredictiveScalingForecast","List","control",[2],[1],4],["autoscaling:LaunchInstances","Write","control",[2],[1],4],["autoscaling:PutAccountSetting","Write","control",[2],[1],4],["autoscaling:PutLifecycleHook","Write","control",[2],[1],4],["autoscaling:PutNotificationConfiguration","Write","control",[2],[1],4],["autoscaling:PutScalingPolicy","Write","control",[2],[1],4],["autoscaling:PutScheduledUpdateGroupAction","Write","control",[2],[1],4],["autoscaling:PutWarmPool","Write","control",[2],[1],4],["autoscaling:RecordLifecycleActionHeartbeat","Write","control",[2],[1],4],["autoscaling:ResumeProcesses","Write","control",[2],[1],4],["autoscaling:RollbackInstanceRefresh","Write","control",[2],[1],4],["autoscaling:SetDesiredCapacity","Write","control",[2],[1],4],["autoscaling:SetInstanceHealth","Write","control",[2],[1],4],["autoscaling:SetInstanceProtection","Write","control",[2],[1],4],["autoscaling:StartInstanceRefresh","Write","control",[2],[1],4],["autoscaling:SuspendProcesses","Write","control",[2],[1],4],["autoscaling:TerminateInstanceInAutoScalingGroup","Write","control",[2],[1],4],["autoscaling:UpdateAutoScalingGroup","Write","control",[2],[1],4]]},{"prefix":"cloudformation","rows":[["cloudformation:CancelUpdateStack","Write","control",[4],[2],4],["cloudformation:ContinueUpdateRollback","Write","control",[5],[2],4],["cloudformation:CreateStack","Write","control",[6],[2],4],["cloudformation:DeleteStack","Write","control",[7],[2],4],["cloudformation:DescribeAccountLimits","Read","control",[8],[0],1],["cloudformation:DescribeChangeSet","Read","control",[8],[0],1],["cloudformation:DescribeChangeSetHooks","Read","control",[8],[0],1],["cloudformation:DescribeEvents","Read","control",[8],[0],1],["cloudformation:DescribeGeneratedTemplate","Read","control",[8],[0],1],["cloudformation:DescribeOrganizationsAccess","Read","control",[8],[0],1],["cloudformation:DescribePublisher","Read","control",[8],[0],1],["cloudformation:DescribeResourceScan","Read","control",[8],[0],1],["cloudformation:DescribeStackDriftDetectionStatus","Read","control",[8],[0],1],["cloudformation:DescribeStackEvents","Read","control",[8],[0],1],["cloudformation:DescribeStackInstance","Read","control",[8],[0],1],["cloudformation:DescribeStackRefactor","Read","control",[8],[0],1],["cloudformation:DescribeStackResource","Read","control",[8],[0],1],["cloudformation:DescribeStackResourceDrifts","Read","control",[8],[0],1],["cloudformation:DescribeStackResources","Read","control",[8],[0],1],["cloudformation:DescribeStackSet","Read","control",[8],[0],1],["cloudformation:DescribeStackSetOperation","Read","control",[8],[0],1],["cloudformation:DescribeStacks","List","control",[8],[0],1],["cloudformation:DescribeType","Read","control",[8],[0],1],["cloudformation:DescribeTypeRegistration","Read","control",[8],[0],1],["cloudformation:EstimateTemplateCost","Read","control",[9],[0],1],["cloudformation:GetGeneratedTemplate","Read","control",[10],[0],1],["cloudformation:GetHookResult","Read","control",[10],[0],1],["cloudformation:GetResource","Read","control",[10],[0],1],["cloudformation:GetResourceRequestStatus","Read","control",[10],[0],1],["cloudformation:GetStackPolicy","Read","control",[10],[0],1],["cloudformation:GetTemplate","Read","control",[10,11],[0,2],1],["cloudformation:GetTemplateSummary","Read","control",[10],[0],1],["cloudformation:ListAllHookResults","List","control",[12],[0],1],["cloudformation:ListChangeSets","List","control",[12],[0],1],["cloudformation:ListExports","List","control",[12],[0],1],["cloudformation:ListGeneratedTemplates","List","control",[12],[0],1],["cloudformation:ListHookResults","List","control",[12],[0],1],["cloudformation:ListImports","List","control",[12],[0],1],["cloudformation:ListResourceRequests","Read","control",[12],[0],1],["cloudformation:ListResourceScanRelatedResources","List","control",[12],[0],1],["cloudformation:ListResourceScanResources","List","control",[12],[0],1],["cloudformation:ListResourceScans","List","control",[12],[0],1],["cloudformation:ListResources","Read","control",[12],[0],1],["cloudformation:ListStackInstanceResourceDrifts","List","control",[12],[0],1],["cloudformation:ListStackInstances","List","control",[12],[0],1],["cloudformation:ListStackRefactorActions","List","control",[12],[0],1],["cloudformation:ListStackRefactors","List","control",[12],[0],1],["cloudformation:ListStackResources","List","control",[12,13],[0,2],1],["cloudformation:ListStackSetAutoDeploymentTargets","List","control",[12],[0],1],["cloudformation:ListStackSetOperationResults","List","control",[12],[0],1],["cloudformation:ListStackSetOperations","List","control",[12],[0],1],["cloudformation:ListStackSets","List","control",[12],[0],1],["cloudformation:ListStacks","List","control",[12],[0],1],["cloudformation:ListTypeRegistrations","List","control",[12],[0],1],["cloudformation:ListTypeVersions","List","control",[12],[0],1],["cloudformation:ListTypes","List","control",[12],[0],1],["cloudformation:SignalResource","Write","control",[14],[2],4],["cloudformation:TagResource","Tagging","control",[15],[2],4],["cloudformation:UntagResource","Tagging","control",[16],[2],4],["cloudformation:UpdateStack","Write","control",[17],[2],4],["cloudformation:ValidateTemplate","Read","control",[18],[0],1]]},{"prefix":"cloudtrail","rows":[["cloudtrail:LookupEvents","Read","control",[19],[0],1]]},{"prefix":"cloudwatch","rows":[["cloudwatch:DeleteAlarms","Write","control",[20],[3],4],["cloudwatch:DescribeAlarms","Read","control",[21],[0],1],["cloudwatch:GetMetricStatistics","Read","data",[22],[0],1],["cloudwatch:ListMetrics","List","data",[23],[0],1],["cloudwatch:PutMetricAlarm","Write","control",[24],[3],4]]},{"prefix":"codebuild","rows":[["codebuild:BatchGetBuilds","Read","control",[25],[4],4],["codebuild:CreateProject","Write","control",[26],[4],4],["codebuild:DeleteProject","Write","control",[27],[4],4],["codebuild:StartBuild","Write","control",[28],[4],4]]},{"prefix":"codecommit","rows":[["codecommit:GetApprovalRuleTemplate","Read","control",[29],[0],1],["codecommit:GetBlob","Read","control",[29],[0],1],["codecommit:GetBlobDifferences","Read","control",[29],[0],1],["codecommit:GetBranch","Read","control",[29],[0],1],["codecommit:GetComment","Read","control",[29],[0],1],["codecommit:GetCommentReactions","Read","control",[29],[0],1],["codecommit:GetCommentsForComparedCommit","Read","control",[29],[0],1],["codecommit:GetCommentsForPullRequest","Read","control",[29],[0],1],["codecommit:GetCommit","Read","control",[29],[0],1],["codecommit:GetCommitHistory","Read","unclassified",[29],[0],1],["codecommit:GetCommitsFromMergeBase","Read","unclassified",[29],[0],1],["codecommit:GetDifferences","Read","control",[29],[0],1],["codecommit:GetFile","Read","control",[29],[0],1],["codecommit:GetFolder","Read","control",[29],[0],1],["codecommit:GetMergeCommit","Read","control",[29],[0],1],["codecommit:GetMergeConflicts","Read","control",[29],[0],1],["codecommit:GetMergeOptions","Read","control",[29],[0],1],["codecommit:GetObjectIdentifier","Read","unclassified",[29],[0],1],["codecommit:GetPullRequest","Read","control",[29],[0],1],["codecommit:GetPullRequestApprovalStates","Read","control",[29],[0],1],["codecommit:GetPullRequestOverrideState","Read","control",[29],[0],1],["codecommit:GetReferences","Read","unclassified",[29],[0],1],["codecommit:GetRepository","Read","control",[29],[0],1],["codecommit:GetRepositoryTriggers","Read","control",[29],[0],1],["codecommit:GetTree","Read","unclassified",[29],[0],1],["codecommit:GetUploadArchiveStatus","Read","unclassified",[29],[0],1],["codecommit:UploadArchive","Write","unclassified",[30],[0],1]]},{"prefix":"dynamodb","rows":[["dynamodb:CreateTable","Write","control",[31],[5],4],["dynamodb:DeleteTable","Write","control",[32],[5],4],["dynamodb:DescribeTable","Read","control",[33],[5],4],["dynamodb:TagResource","Tagging","control",[34],[5],4]]},{"prefix":"ec2","rows":[["ec2:AllocateAddress","Write","control",[35],[0],1],["ec2:AssociateAddress","Write","control",[36],[0],1],["ec2:AuthorizeSecurityGroupEgress","Write","control",[37],[0],1],["ec2:AuthorizeSecurityGroupIngress","Write","control",[37],[0],1],["ec2:CreateLaunchTemplate","Write","control",[38],[0],1],["ec2:CreateLaunchTemplateVersion","Write","control",[38],[0],1],["ec2:CreateSecurityGroup","Write","control",[39],[0],1],["ec2:CreateTags","Tagging","control",[40],[0],1],["ec2:DeleteLaunchTemplate","Write","control",[41],[0],1],["ec2:DeleteLaunchTemplateVersions","Write","control",[41],[0],1],["ec2:DeleteSecurityGroup","Write","control",[42],[0],1],["ec2:DeleteTags","Tagging","control",[43],[0],1],["ec2:DescribeAccountAttributes","List","control",[44],[0],1],["ec2:DescribeAccountVpcEncryptionControl","List","control",[44],[0],1],["ec2:DescribeAddressTransfers","List","control",[44],[0],1],["ec2:DescribeAddresses","List","control",[44],[0],1],["ec2:DescribeAddressesAttribute","List","control",[44],[0],1],["ec2:DescribeAggregateIdFormat","List","control",[44],[0],1],["ec2:DescribeApplicationStatus","List","control",[44],[0],1],["ec2:DescribeApplicationStatusCheckAssociations","List","control",[44],[0],1],["ec2:DescribeApplicationStatusChecks","List","control",[44],[0],1],["ec2:DescribeAvailabilityZones","List","control",[44],[0],1],["ec2:DescribeAwsNetworkPerformanceMetricSubscriptions","List","control",[44],[0],1],["ec2:DescribeBundleTasks","List","control",[44],[0],1],["ec2:DescribeByoipCidrs","List","control",[44],[0],1],["ec2:DescribeCapacityBlockExtensionHistory","List","control",[44],[0],1],["ec2:DescribeCapacityBlockExtensionOfferings","List","control",[44],[0],1],["ec2:DescribeCapacityBlockOfferings","List","control",[44],[0],1],["ec2:DescribeCapacityBlockStatus","List","control",[44],[0],1],["ec2:DescribeCapacityBlocks","List","control",[44],[0],1],["ec2:DescribeCapacityManagerDataExports","List","control",[44],[0],1],["ec2:DescribeCapacityReservationBillingRequests","List","control",[44],[0],1],["ec2:DescribeCapacityReservationCancellationQuotes","List","control",[44],[0],1],["ec2:DescribeCapacityReservationDateChangeQuotes","List","control",[44],[0],1],["ec2:DescribeCapacityReservationFleets","List","control",[44],[0],1],["ec2:DescribeCapacityReservationTopology","List","control",[44],[0],1],["ec2:DescribeCapacityReservations","List","control",[44],[0],1],["ec2:DescribeCarrierGateways","List","control",[44],[0],1],["ec2:DescribeClassicLinkInstances","List","control",[44],[0],1],["ec2:DescribeClientVpnAuthorizationRules","List","control",[44],[0],1],["ec2:DescribeClientVpnConnections","List","control",[44],[0],1],["ec2:DescribeClientVpnEndpoints","List","control",[44],[0],1],["ec2:DescribeClientVpnRoutes","List","control",[44],[0],1],["ec2:DescribeClientVpnTargetNetworks","List","control",[44],[0],1],["ec2:DescribeCoipPools","List","control",[44],[0],1],["ec2:DescribeConversionTasks","List","control",[44],[0],1],["ec2:DescribeCustomerGateways","List","control",[44],[0],1],["ec2:DescribeDeclarativePoliciesReports","List","control",[44],[0],1],["ec2:DescribeDhcpOptions","List","control",[44],[0],1],["ec2:DescribeEgressOnlyInternetGateways","List","control",[44],[0],1],["ec2:DescribeElasticGpus","List","control",[44],[0],1],["ec2:DescribeExportImageTasks","List","control",[44],[0],1],["ec2:DescribeExportTasks","List","control",[44],[0],1],["ec2:DescribeFastLaunchImages","List","control",[44],[0],1],["ec2:DescribeFastSnapshotRestores","List","control",[44],[0],1],["ec2:DescribeFleetHistory","List","control",[44],[0],1],["ec2:DescribeFleetInstances","List","control",[44],[0],1],["ec2:DescribeFleets","List","control",[44],[0],1],["ec2:DescribeFlowLogs","List","control",[44],[0],1],["ec2:DescribeFpgaImageAttribute","List","control",[44],[0],1],["ec2:DescribeFpgaImages","List","control",[44],[0],1],["ec2:DescribeHostReservationOfferings","List","control",[44],[0],1],["ec2:DescribeHostReservations","List","control",[44],[0],1],["ec2:DescribeHosts","List","control",[44],[0],1],["ec2:DescribeIamInstanceProfileAssociations","List","control",[44],[0],1],["ec2:DescribeIdFormat","List","control",[44],[0],1],["ec2:DescribeIdentityIdFormat","List","control",[44],[0],1],["ec2:DescribeImageAttribute","List","control",[44],[0],1],["ec2:DescribeImageReferences","List","control",[44],[0],1],["ec2:DescribeImageUsageReportEntries","List","control",[44],[0],1],["ec2:DescribeImageUsageReports","List","control",[44],[0],1],["ec2:DescribeImages","List","control",[44],[0],1],["ec2:DescribeImportImageTasks","List","control",[44],[0],1],["ec2:DescribeImportSnapshotTasks","List","control",[44],[0],1],["ec2:DescribeInstanceAttribute","List","control",[44],[0],1],["ec2:DescribeInstanceConnectEndpoints","List","control",[44],[0],1],["ec2:DescribeInstanceCreditSpecifications","List","control",[44],[0],1],["ec2:DescribeInstanceEventNotificationAttributes","List","control",[44],[0],1],["ec2:DescribeInstanceEventWindows","List","control",[44],[0],1],["ec2:DescribeInstanceImageMetadata","List","control",[44],[0],1],["ec2:DescribeInstanceSqlHaHistoryStates","List","control",[44],[0],1],["ec2:DescribeInstanceSqlHaStates","List","control",[44],[0],1],["ec2:DescribeInstanceStatus","List","control",[44],[0],1],["ec2:DescribeInstanceTopology","List","control",[44],[0],1],["ec2:DescribeInstanceTypeOfferings","List","control",[44],[0],1],["ec2:DescribeInstanceTypes","List","control",[44],[0],1],["ec2:DescribeInstances","List","control",[44],[0],1],["ec2:DescribeInternetGateways","List","control",[44],[0],1],["ec2:DescribeIpamByoasn","List","control",[44],[0],1],["ec2:DescribeIpamExternalResourceVerificationTokens","List","control",[44],[0],1],["ec2:DescribeIpamInternetRegistryAssociations","List","control",[44],[0],1],["ec2:DescribeIpamPolicies","List","control",[44],[0],1],["ec2:DescribeIpamPoolAllocations","List","control",[44],[0],1],["ec2:DescribeIpamPools","List","control",[44],[0],1],["ec2:DescribeIpamPrefixListResolverTargets","List","control",[44],[0],1],["ec2:DescribeIpamPrefixListResolvers","List","control",[44],[0],1],["ec2:DescribeIpamResourceDiscoveries","List","control",[44],[0],1],["ec2:DescribeIpamResourceDiscoveryAssociations","List","control",[44],[0],1],["ec2:DescribeIpamScopes","List","control",[44],[0],1],["ec2:DescribeIpams","List","control",[44],[0],1],["ec2:DescribeIpv6Pools","List","control",[44],[0],1],["ec2:DescribeKeyPairs","List","control",[44],[0],1],["ec2:DescribeLaunchTemplateVersions","List","control",[44],[0],1],["ec2:DescribeLaunchTemplates","List","control",[44],[0],1],["ec2:DescribeLocalGatewayRouteTablePermissions","List","unclassified",[44],[0],1],["ec2:DescribeLocalGatewayRouteTableVirtualInterfaceGroupAssociations","List","control",[44],[0],1],["ec2:DescribeLocalGatewayRouteTableVpcAssociations","List","control",[44],[0],1],["ec2:DescribeLocalGatewayRouteTables","List","control",[44],[0],1],["ec2:DescribeLocalGatewayVirtualInterfaceGroups","List","control",[44],[0],1],["ec2:DescribeLocalGatewayVirtualInterfaces","List","control",[44],[0],1],["ec2:DescribeLocalGateways","List","control",[44],[0],1],["ec2:DescribeLockedSnapshots","List","control",[44],[0],1],["ec2:DescribeMacHosts","List","control",[44],[0],1],["ec2:DescribeMacModificationTasks","List","control",[44],[0],1],["ec2:DescribeManagedPrefixLists","List","control",[44],[0],1],["ec2:DescribeMovingAddresses","List","unclassified",[44],[0],1],["ec2:DescribeNatGateways","List","control",[44],[0],1],["ec2:DescribeNetworkAcls","List","control",[44],[0],1],["ec2:DescribeNetworkInsightsAccessScopeAnalyses","List","control",[44],[0],1],["ec2:DescribeNetworkInsightsAccessScopes","List","control",[44],[0],1],["ec2:DescribeNetworkInsightsAnalyses","List","control",[44],[0],1],["ec2:DescribeNetworkInsightsPaths","List","control",[44],[0],1],["ec2:DescribeNetworkInterfaceAttribute","List","control",[44],[0],1],["ec2:DescribeNetworkInterfacePermissions","List","control",[44],[0],1],["ec2:DescribeNetworkInterfaces","List","control",[44],[0],1],["ec2:DescribeOutpostLags","List","control",[44],[0],1],["ec2:DescribePlacementGroups","List","control",[44],[0],1],["ec2:DescribePrefixLists","List","control",[44],[0],1],["ec2:DescribePrincipalIdFormat","List","control",[44],[0],1],["ec2:DescribePublicIpv4Pools","List","control",[44],[0],1],["ec2:DescribeRegions","List","control",[44],[0],1],["ec2:DescribeReplaceRootVolumeTasks","List","control",[44],[0],1],["ec2:DescribeReservedInstances","List","control",[44],[0],1],["ec2:DescribeReservedInstancesListings","List","control",[44],[0],1],["ec2:DescribeReservedInstancesModifications","List","control",[44],[0],1],["ec2:DescribeReservedInstancesOfferings","List","control",[44],[0],1],["ec2:DescribeRouteServerEndpoints","List","control",[44],[0],1],["ec2:DescribeRouteServerPeers","List","control",[44],[0],1],["ec2:DescribeRouteServers","List","control",[44],[0],1],["ec2:DescribeRouteTables","List","control",[44],[0],1],["ec2:DescribeScheduledInstanceAvailability","List","control",[44],[0],1],["ec2:DescribeScheduledInstances","List","control",[44],[0],1],["ec2:DescribeSecondaryInterfaces","List","control",[44],[0],1],["ec2:DescribeSecondaryNetworks","List","control",[44],[0],1],["ec2:DescribeSecondarySubnets","List","control",[44],[0],1],["ec2:DescribeSecurityGroupReferences","List","control",[44],[0],1],["ec2:DescribeSecurityGroupRules","List","control",[44],[0],1],["ec2:DescribeSecurityGroupVpcAssociations","List","control",[44],[0],1],["ec2:DescribeSecurityGroups","List","control",[44],[0],1],["ec2:DescribeServiceLinkVirtualInterfaces","List","control",[44],[0],1],["ec2:DescribeSnapshotAttribute","List","control",[44],[0],1],["ec2:DescribeSnapshotTierStatus","List","control",[44],[0],1],["ec2:DescribeSnapshots","List","control",[44],[0],1],["ec2:DescribeSpotDatafeedSubscription","List","control",[44],[0],1],["ec2:DescribeSpotFleetInstances","List","control",[44],[0],1],["ec2:DescribeSpotFleetRequestHistory","List","control",[44],[0],1],["ec2:DescribeSpotFleetRequests","List","control",[44],[0],1],["ec2:DescribeSpotInstanceRequests","List","control",[44],[0],1],["ec2:DescribeSpotPriceHistory","List","control",[44],[0],1],["ec2:DescribeStaleSecurityGroups","List","control",[44],[0],1],["ec2:DescribeStoreImageTasks","List","control",[44],[0],1],["ec2:DescribeSubnets","List","control",[44],[0],1],["ec2:DescribeTags","List","control",[44],[0],1],["ec2:DescribeTrafficMirrorFilterRules","List","control",[44],[0],1],["ec2:DescribeTrafficMirrorFilters","List","control",[44],[0],1],["ec2:DescribeTrafficMirrorSessions","List","control",[44],[0],1],["ec2:DescribeTrafficMirrorTargets","List","control",[44],[0],1],["ec2:DescribeTransitGatewayAttachments","List","control",[44],[0],1],["ec2:DescribeTransitGatewayConnectPeers","List","control",[44],[0],1],["ec2:DescribeTransitGatewayConnects","List","control",[44],[0],1],["ec2:DescribeTransitGatewayMeteringPolicies","List","control",[44],[0],1],["ec2:DescribeTransitGatewayMulticastDomains","List","control",[44],[0],1],["ec2:DescribeTransitGatewayPeeringAttachments","List","control",[44],[0],1],["ec2:DescribeTransitGatewayPolicyTables","List","control",[44],[0],1],["ec2:DescribeTransitGatewayRouteTableAnnouncements","List","control",[44],[0],1],["ec2:DescribeTransitGatewayRouteTables","List","control",[44],[0],1],["ec2:DescribeTransitGatewayVpcAttachments","List","control",[44],[0],1],["ec2:DescribeTransitGateways","List","control",[44],[0],1],["ec2:DescribeTrunkInterfaceAssociations","List","control",[44],[0],1],["ec2:DescribeVerifiedAccessEndpoints","List","control",[44],[0],1],["ec2:DescribeVerifiedAccessGroups","List","control",[44],[0],1],["ec2:DescribeVerifiedAccessInstanceLoggingConfigurations","List","control",[44],[0],1],["ec2:DescribeVerifiedAccessInstanceWebAclAssociations","List","unclassified",[44],[0],1],["ec2:DescribeVerifiedAccessInstances","List","control",[44],[0],1],["ec2:DescribeVerifiedAccessTrustProviders","List","control",[44],[0],1],["ec2:DescribeVolumeAttribute","List","control",[44],[0],1],["ec2:DescribeVolumeStatus","List","control",[44],[0],1],["ec2:DescribeVolumes","List","control",[44],[0],1],["ec2:DescribeVolumesModifications","List","control",[44],[0],1],["ec2:DescribeVpcAttribute","List","control",[44],[0],1],["ec2:DescribeVpcBlockPublicAccessExclusions","List","control",[44],[0],1],["ec2:DescribeVpcBlockPublicAccessOptions","List","control",[44],[0],1],["ec2:DescribeVpcClassicLink","List","control",[44],[0],1],["ec2:DescribeVpcClassicLinkDnsSupport","List","control",[44],[0],1],["ec2:DescribeVpcEncryptionControls","List","control",[44],[0],1],["ec2:DescribeVpcEndpointAssociations","List","control",[44],[0],1],["ec2:DescribeVpcEndpointConnectionNotifications","List","control",[44],[0],1],["ec2:DescribeVpcEndpointConnections","List","control",[44],[0],1],["ec2:DescribeVpcEndpointServiceConfigurations","List","control",[44],[0],1],["ec2:DescribeVpcEndpointServicePermissions","List","control",[44],[0],1],["ec2:DescribeVpcEndpointServices","List","control",[44],[0],1],["ec2:DescribeVpcEndpoints","List","control",[44],[0],1],["ec2:DescribeVpcPeeringConnections","List","control",[44],[0],1],["ec2:DescribeVpcs","List","control",[44],[0],1],["ec2:DescribeVpnConcentrators","List","control",[44],[0],1],["ec2:DescribeVpnConnections","List","control",[44],[0],1],["ec2:DescribeVpnGateways","List","control",[44],[0],1],["ec2:DisassociateAddress","Write","control",[45],[0],1],["ec2:RebootInstances","Write","control",[46],[6],6],["ec2:ReleaseAddress","Write","control",[47],[0],1],["ec2:RevokeSecurityGroupEgress","Write","control",[48],[0],1],["ec2:RevokeSecurityGroupIngress","Write","control",[48],[0],1],["ec2:RunInstances","Write","control",[49],[7],2],["ec2:TerminateInstances","Write","control",[50],[6],6]]},{"prefix":"ecs","rows":[["ecs:CreateCluster","Write","control",[51],[0],1],["ecs:DeleteCluster","Write","control",[53],[8],4],["ecs:DeregisterTaskDefinition","Write","control",[52],[0],1],["ecs:DescribeCapacityProviders","Read","control",[54],[0],1],["ecs:DescribeClusters","Read","control",[54],[0],1],["ecs:DescribeContainerInstances","Read","control",[54],[0],1],["ecs:DescribeDaemon","Read","control",[54],[0],1],["ecs:DescribeDaemonDeployments","Read","control",[54],[0],1],["ecs:DescribeDaemonRevisions","Read","control",[54],[0],1],["ecs:DescribeDaemonTaskDefinition","Read","control",[54],[0],1],["ecs:DescribeExpressGatewayService","Read","control",[54],[0],1],["ecs:DescribeGateway","Read","control",[54],[0],1],["ecs:DescribeGatewayResources","Read","control",[54],[0],1],["ecs:DescribeGatewayRoute","Read","control",[54],[0],1],["ecs:DescribeServiceDeployments","Read","control",[54],[0],1],["ecs:DescribeServiceRevisions","Read","control",[54],[0],1],["ecs:DescribeServices","Read","control",[54],[0],1],["ecs:DescribeTaskDefinition","Read","control",[54],[0],1],["ecs:DescribeTaskSets","Read","control",[54],[0],1],["ecs:DescribeTasks","Read","control",[54],[0],1],["ecs:ListAccountSettings","Read","control",[55],[0],1],["ecs:ListAttributes","List","control",[55],[0],1],["ecs:ListClusters","List","control",[55],[0],1],["ecs:ListContainerInstances","List","control",[55],[0],1],["ecs:ListDaemonDeployments","List","control",[55],[0],1],["ecs:ListDaemonTaskDefinitions","List","control",[55],[0],1],["ecs:ListDaemons","List","control",[55],[0],1],["ecs:ListGatewayClusterAssociations","List","control",[55],[0],1],["ecs:ListGatewayRoutes","List","control",[55],[0],1],["ecs:ListGateways","List","control",[55],[0],1],["ecs:ListServiceDeployments","List","control",[55],[0],1],["ecs:ListServices","List","control",[55],[0],1],["ecs:ListServicesByNamespace","List","control",[55],[0],1],["ecs:ListTagsForResource","Read","control",[55],[0],1],["ecs:ListTaskDefinitionFamilies","List","control",[55],[0],1],["ecs:ListTaskDefinitions","List","control",[55],[0],1],["ecs:ListTasks","List","control",[55],[0],1],["ecs:RegisterTaskDefinition","Write","control",[56],[0],1],["ecs:TagResource","Tagging","control",[57],[22],2]]},{"prefix":"elasticbeanstalk","rows":[["elasticbeanstalk:AbortEnvironmentUpdate","Write","unclassified",[58],[0],1],["elasticbeanstalk:AddTags","Tagging","unclassified",[58],[0],1],["elasticbeanstalk:ApplyEnvironmentManagedAction","Write","unclassified",[58],[0],1],["elasticbeanstalk:AssociateEnvironmentOperationsRole","Write","unclassified",[58],[0],1],["elasticbeanstalk:CheckDNSAvailability","Read","unclassified",[58],[0],1],["elasticbeanstalk:ComposeEnvironments","Write","unclassified",[58],[0],1],["elasticbeanstalk:CreateApplication","Write","unclassified",[58],[0],1],["elasticbeanstalk:CreateApplicationVersion","Write","unclassified",[58],[0],1],["elasticbeanstalk:CreateConfigurationTemplate","Write","unclassified",[58],[0],1],["elasticbeanstalk:CreateEnvironment","Write","unclassified",[58],[0],1],["elasticbeanstalk:CreatePlatformVersion","Write","unclassified",[58],[0],1],["elasticbeanstalk:CreateStorageLocation","Write","unclassified",[58],[0],1],["elasticbeanstalk:DeleteApplication","Write","unclassified",[58],[0],1],["elasticbeanstalk:DeleteApplicationVersion","Write","unclassified",[58],[0],1],["elasticbeanstalk:DeleteConfigurationTemplate","Write","unclassified",[58],[0],1],["elasticbeanstalk:DeleteEnvironmentConfiguration","Write","unclassified",[58],[0],1],["elasticbeanstalk:DeletePlatformVersion","Write","unclassified",[58],[0],1],["elasticbeanstalk:DescribeAccountAttributes","Read","unclassified",[58],[0],1],["elasticbeanstalk:DescribeApplicationVersions","List","unclassified",[58],[0],1],["elasticbeanstalk:DescribeApplications","List","unclassified",[58],[0],1],["elasticbeanstalk:DescribeConfigurationOptions","Read","unclassified",[58],[0],1],["elasticbeanstalk:DescribeConfigurationSettings","Read","unclassified",[58],[0],1],["elasticbeanstalk:DescribeEnvironmentHealth","Read","unclassified",[58],[0],1],["elasticbeanstalk:DescribeEnvironmentManagedActionHistory","Read","unclassified",[58],[0],1],["elasticbeanstalk:DescribeEnvironmentManagedActions","Read","unclassified",[58],[0],1],["elasticbeanstalk:DescribeEnvironmentResources","Read","unclassified",[58],[0],1],["elasticbeanstalk:DescribeEnvironments","List","control",[58],[0],1],["elasticbeanstalk:DescribeEvents","Read","unclassified",[58],[0],1],["elasticbeanstalk:DescribeInstancesHealth","Read","unclassified",[58],[0],1],["elasticbeanstalk:DescribePlatformVersion","Read","unclassified",[58],[0],1],["elasticbeanstalk:DisassociateEnvironmentOperationsRole","Write","unclassified",[58],[0],1],["elasticbeanstalk:ListAvailableSolutionStacks","List","unclassified",[58],[0],1],["elasticbeanstalk:ListPlatformBranches","List","unclassified",[58],[0],1],["elasticbeanstalk:ListPlatformVersions","List","unclassified",[58],[0],1],["elasticbeanstalk:ListTagsForResource","Read","unclassified",[58],[0],1],["elasticbeanstalk:PutInstanceStatistics","Write","unclassified",[58],[0],1],["elasticbeanstalk:RebuildEnvironment","Write","unclassified",[58],[0],1],["elasticbeanstalk:RemoveTags","Tagging","unclassified",[58],[0],1],["elasticbeanstalk:RequestEnvironmentInfo","Read","unclassified",[58],[0],1],["elasticbeanstalk:RestartAppServer","Write","unclassified",[58],[0],1],["elasticbeanstalk:RetrieveEnvironmentInfo","Read","unclassified",[58],[0],1],["elasticbeanstalk:SwapEnvironmentCNAMEs","Write","unclassified",[58],[0],1],["elasticbeanstalk:TerminateEnvironment","Write","unclassified",[58],[0],1],["elasticbeanstalk:UpdateApplication","Write","unclassified",[58],[0],1],["elasticbeanstalk:UpdateApplicationResourceLifecycle","Write","unclassified",[58],[0],1],["elasticbeanstalk:UpdateApplicationVersion","Write","unclassified",[58],[0],1],["elasticbeanstalk:UpdateConfigurationTemplate","Write","unclassified",[58],[0],1],["elasticbeanstalk:UpdateEnvironment","Write","unclassified",[58],[0],1],["elasticbeanstalk:UpdateTagsForResource","Tagging","unclassified",[58],[0],1],["elasticbeanstalk:ValidateConfigurationSettings","Read","unclassified",[58],[0],1]]},{"prefix":"elasticloadbalancing","rows":[["elasticloadbalancing:AddListenerCertificates","Write","control",[59],[10],4],["elasticloadbalancing:AddTags","Tagging","control",[59,61],[9,10],4],["elasticloadbalancing:AddTrustStoreRevocations","Write","control",[59],[10],4],["elasticloadbalancing:AllowVendedLogDeliveryForResource","Permissions management","unclassified",[59],[10],4],["elasticloadbalancing:ApplySecurityGroupsToLoadBalancer","Write","control",[59],[10],4],["elasticloadbalancing:AttachLoadBalancerToSubnets","Write","control",[59],[10],4],["elasticloadbalancing:ConfigureHealthCheck","Write","control",[59],[10],4],["elasticloadbalancing:CreateAppCookieStickinessPolicy","Write","control",[59],[10],4],["elasticloadbalancing:CreateLBCookieStickinessPolicy","Write","control",[59],[10],4],["elasticloadbalancing:CreateListener","Write","control",[59],[10],4],["elasticloadbalancing:CreateLoadBalancer","Write","control",[59],[10],4],["elasticloadbalancing:CreateLoadBalancerListeners","Write","control",[59],[10],4],["elasticloadbalancing:CreateLoadBalancerPolicy","Write","control",[59],[10],4],["elasticloadbalancing:CreateRule","Write","control",[59,60],[9,10],4],["elasticloadbalancing:CreateTargetGroup","Write","control",[59],[10],4],["elasticloadbalancing:CreateTrustStore","Write","control",[59],[10],4],["elasticloadbalancing:CreateWebACLAssociation","Write","unclassified",[59],[10],4],["elasticloadbalancing:DeleteListener","Write","control",[59],[10],4],["elasticloadbalancing:DeleteLoadBalancer","Write","control",[59],[10],4],["elasticloadbalancing:DeleteLoadBalancerListeners","Write","control",[59],[10],4],["elasticloadbalancing:DeleteLoadBalancerPolicy","Write","control",[59],[10],4],["elasticloadbalancing:DeleteRule","Write","control",[59,60],[9,10],4],["elasticloadbalancing:DeleteSharedTrustStoreAssociation","Write","control",[59],[10],4],["elasticloadbalancing:DeleteTargetGroup","Write","control",[59],[10],4],["elasticloadbalancing:DeleteTrustStore","Write","control",[59],[10],4],["elasticloadbalancing:DeleteWebACLAssociation","Write","unclassified",[59],[10],4],["elasticloadbalancing:DeregisterInstancesFromLoadBalancer","Write","control",[59],[10],4],["elasticloadbalancing:DeregisterTargets","Write","control",[59],[10],4],["elasticloadbalancing:DescribeAccountLimits","Read","control",[59,62],[0,10],1],["elasticloadbalancing:DescribeCapacityReservation","Read","control",[59,62],[0,10],1],["elasticloadbalancing:DescribeInstanceHealth","Read","control",[59,62],[0,10],1],["elasticloadbalancing:DescribeListenerAttributes","Read","control",[59,62],[0,10],1],["elasticloadbalancing:DescribeListenerCertificates","Read","control",[59,62],[0,10],1],["elasticloadbalancing:DescribeListeners","Read","control",[59,62],[0,10],1],["elasticloadbalancing:DescribeLoadBalancerAttributes","Read","control",[59,62],[0,10],1],["elasticloadbalancing:DescribeLoadBalancerPolicies","Read","control",[59,62],[0,10],1],["elasticloadbalancing:DescribeLoadBalancerPolicyTypes","Read","control",[59,62],[0,10],1],["elasticloadbalancing:DescribeLoadBalancers","List","control",[59,62],[0,10],1],["elasticloadbalancing:DescribeRules","Read","control",[59,62],[0,10],1],["elasticloadbalancing:DescribeSSLPolicies","Read","control",[59,62],[0,10],1],["elasticloadbalancing:DescribeTags","Read","control",[59,61,62],[0,9,10],1],["elasticloadbalancing:DescribeTargetGroupAttributes","Read","control",[59,62],[0,10],1],["elasticloadbalancing:DescribeTargetGroups","Read","control",[59,62],[0,10],1],["elasticloadbalancing:DescribeTargetHealth","Read","control",[59,62],[0,10],1],["elasticloadbalancing:DescribeTrustStoreAssociations","Read","control",[59,62],[0,10],1],["elasticloadbalancing:DescribeTrustStoreRevocations","Read","control",[59,62],[0,10],1],["elasticloadbalancing:DescribeTrustStores","Read","control",[59,62],[0,10],1],["elasticloadbalancing:DescribeWebACLAssociation","List","unclassified",[59,62],[0,10],1],["elasticloadbalancing:DetachLoadBalancerFromSubnets","Write","control",[59],[10],4],["elasticloadbalancing:DisableAvailabilityZonesForLoadBalancer","Write","control",[59],[10],4],["elasticloadbalancing:EnableAvailabilityZonesForLoadBalancer","Write","control",[59],[10],4],["elasticloadbalancing:GetLoadBalancerWebACL","Read","unclassified",[59],[10],4],["elasticloadbalancing:GetResourcePolicy","Read","control",[59],[10],4],["elasticloadbalancing:GetTrustStoreCaCertificatesBundle","Read","control",[59],[10],4],["elasticloadbalancing:GetTrustStoreRevocationContent","Read","control",[59],[10],4],["elasticloadbalancing:ModifyCapacityReservation","Write","control",[59],[10],4],["elasticloadbalancing:ModifyIpPools","Write","control",[59],[10],4],["elasticloadbalancing:ModifyListener","Write","control",[59],[10],4],["elasticloadbalancing:ModifyListenerAttributes","Write","control",[59],[10],4],["elasticloadbalancing:ModifyLoadBalancerAttributes","Write","control",[59],[10],4],["elasticloadbalancing:ModifyRule","Write","control",[59,60],[9,10],4],["elasticloadbalancing:ModifyTargetGroup","Write","control",[59],[10],4],["elasticloadbalancing:ModifyTargetGroupAttributes","Write","control",[59],[10],4],["elasticloadbalancing:ModifyTrustStore","Write","control",[59],[10],4],["elasticloadbalancing:RegisterInstancesWithLoadBalancer","Write","control",[59],[10],4],["elasticloadbalancing:RegisterTargets","Write","control",[59],[10],4],["elasticloadbalancing:RemoveListenerCertificates","Write","control",[59],[10],4],["elasticloadbalancing:RemoveTags","Tagging","control",[59,61],[9,10],4],["elasticloadbalancing:RemoveTrustStoreRevocations","Write","control",[59],[10],4],["elasticloadbalancing:SetIpAddressType","Write","control",[59],[10],4],["elasticloadbalancing:SetLoadBalancerListenerSSLCertificate","Write","control",[59],[10],4],["elasticloadbalancing:SetLoadBalancerPoliciesForBackendServer","Write","control",[59],[10],4],["elasticloadbalancing:SetLoadBalancerPoliciesOfListener","Write","control",[59],[10],4],["elasticloadbalancing:SetRulePriorities","Write","control",[59,63],[9,10],4],["elasticloadbalancing:SetSecurityGroups","Write","control",[59,64],[9,10],4],["elasticloadbalancing:SetSubnets","Write","control",[59],[10],4],["elasticloadbalancing:SetWebAcl","Write","unclassified",[59],[10],4]]},{"prefix":"iam","rows":[["iam:AddRoleToInstanceProfile","Write","control",[65],[11],4],["iam:AttachRolePolicy","Permissions management","control",[66],[12],6],["iam:CreateInstanceProfile","Write","control",[67],[11],4],["iam:CreateRole","Write","control",[68],[11],4],["iam:CreateServiceLinkedRole","Write","control",[69],[14],6],["iam:GetRole","Read","control",[70],[0],1],["iam:ListAttachedRolePolicies","List","control",[71],[0],1],["iam:ListInstanceProfiles","List","control",[72],[0],1],["iam:ListRolePolicies","List","control",[73],[0],1],["iam:ListRoles","List","control",[74],[0],1],["iam:ListServerCertificates","List","control",[75],[0],1],["iam:PassRole","Write","control",[76],[13],6]]},{"prefix":"logs","rows":[["logs:CreateLogGroup","Write","control",[77],[15],4],["logs:DeleteLogGroup","Write","control",[78],[15],4],["logs:DescribeAccountPolicies","List","control",[79],[0],1],["logs:DescribeConfigurationTemplates","List","control",[79],[0],1],["logs:DescribeDeliveries","List","control",[79],[0],1],["logs:DescribeDeliveryDestinations","List","control",[79],[0],1],["logs:DescribeDeliverySources","List","control",[79],[0],1],["logs:DescribeDestinations","List","control",[79],[0],1],["logs:DescribeExportTasks","List","control",[79],[0],1],["logs:DescribeFieldIndexes","List","control",[79],[0],1],["logs:DescribeImportTaskBatches","List","control",[79],[0],1],["logs:DescribeImportTasks","List","control",[79],[0],1],["logs:DescribeIndexPolicies","List","control",[79],[0],1],["logs:DescribeLogGroups","List","control",[79],[0],1],["logs:DescribeLogStreams","List","control",[79],[0],1],["logs:DescribeLookupTables","List","control",[79],[0],1],["logs:DescribeMetricFilters","List","control",[79],[0],1],["logs:DescribeQueries","List","control",[79],[0],1],["logs:DescribeQueryDefinitions","List","control",[79],[0],1],["logs:DescribeResourcePolicies","List","control",[79],[0],1],["logs:DescribeSubscriptionFilters","List","control",[79],[0],1],["logs:GetLogEvents","Read","control",[80],[16],4],["logs:PutRetentionPolicy","Write","control",[81],[15],4]]},{"prefix":"rds","rows":[["rds:AuthorizeDBSecurityGroupIngress","Permissions management","control",[83],[17],4],["rds:CreateDBInstance","Write","control",[84],[17],4],["rds:CreateDBSecurityGroup","Write","control",[85],[17],4],["rds:CreateDBSubnetGroup","Write","control",[82],[17],4],["rds:DeleteDBInstance","Write","control",[86],[17],4],["rds:DeleteDBSecurityGroup","Write","control",[87],[17],4],["rds:DeleteDBSubnetGroup","Write","control",[82],[17],4],["rds:DescribeAccountAttributes","List","control",[88],[0],1],["rds:DescribeBlueGreenDeployments","List","control",[88],[0],1],["rds:DescribeCertificates","List","control",[88],[0],1],["rds:DescribeDBCapacityReservations","List","control",[88],[0],1],["rds:DescribeDBClusterAutomatedBackups","List","control",[88],[0],1],["rds:DescribeDBClusterBacktracks","List","control",[88],[0],1],["rds:DescribeDBClusterEndpoints","List","control",[88],[0],1],["rds:DescribeDBClusterParameterGroups","List","control",[88],[0],1],["rds:DescribeDBClusterParameters","List","control",[88],[0],1],["rds:DescribeDBClusterSnapshotAttributes","List","control",[88],[0],1],["rds:DescribeDBClusterSnapshots","List","control",[88],[0],1],["rds:DescribeDBClusters","List","control",[88],[0],1],["rds:DescribeDBEngineVersions","List","control",[88],[0],1],["rds:DescribeDBInstanceAutomatedBackups","List","control",[88],[0],1],["rds:DescribeDBInstances","List","control",[88],[0],1],["rds:DescribeDBLogFiles","List","control",[88],[0],1],["rds:DescribeDBMajorEngineVersions","List","control",[88],[0],1],["rds:DescribeDBParameterGroups","List","control",[88],[0],1],["rds:DescribeDBParameters","List","control",[88],[0],1],["rds:DescribeDBProxies","List","control",[88],[0],1],["rds:DescribeDBProxyEndpoints","List","control",[88],[0],1],["rds:DescribeDBProxyTargetGroups","List","control",[88],[0],1],["rds:DescribeDBProxyTargets","List","control",[88],[0],1],["rds:DescribeDBRecommendations","List","control",[88],[0],1],["rds:DescribeDBSecurityGroups","List","control",[88],[0],1],["rds:DescribeDBShardGroups","List","control",[88],[0],1],["rds:DescribeDBSnapshotAttributes","List","control",[88],[0],1],["rds:DescribeDBSnapshotTenantDatabases","List","control",[88],[0],1],["rds:DescribeDBSnapshots","List","control",[88],[0],1],["rds:DescribeDBSubnetGroups","List","control",[88],[0],1],["rds:DescribeEngineDefaultClusterParameters","List","control",[88],[0],1],["rds:DescribeEngineDefaultParameters","List","control",[88],[0],1],["rds:DescribeEventCategories","List","control",[88],[0],1],["rds:DescribeEventSubscriptions","List","control",[88],[0],1],["rds:DescribeEvents","List","control",[88],[0],1],["rds:DescribeExportTasks","List","control",[88],[0],1],["rds:DescribeGlobalClusters","List","control",[88],[0],1],["rds:DescribeIntegrations","List","control",[88],[0],1],["rds:DescribeOptionGroupOptions","List","control",[88],[0],1],["rds:DescribeOptionGroups","List","control",[88],[0],1],["rds:DescribeOrderableDBInstanceOptions","List","control",[88],[0],1],["rds:DescribePendingMaintenanceActions","List","control",[88],[0],1],["rds:DescribeRecommendationGroups","Read","unclassified",[88],[0],1],["rds:DescribeRecommendations","Read","unclassified",[88],[0],1],["rds:DescribeReservedDBInstances","List","control",[88],[0],1],["rds:DescribeReservedDBInstancesOfferings","List","control",[88],[0],1],["rds:DescribeSourceRegions","List","control",[88],[0],1],["rds:DescribeTenantDatabases","List","control",[88],[0],1],["rds:DescribeValidDBInstanceModifications","List","control",[88],[0],1],["rds:ModifyDBInstance","Write","control",[89],[17],4],["rds:ModifyDBSubnetGroup","Write","control",[82],[17],4],["rds:RestoreDBInstanceFromDBSnapshot","Write","control",[90],[17],4]]},{"prefix":"s3","rows":[["s3:CreateBucket","Write","control",[91],[19],4],["s3:DeleteAccessGrant","Permissions management","control",[92],[18],4],["s3:DeleteAccessGrantsInstance","Permissions management","control",[92],[18],4],["s3:DeleteAccessGrantsInstanceResourcePolicy","Permissions management","control",[92],[18],4],["s3:DeleteAccessGrantsLocation","Permissions management","control",[92],[18],4],["s3:DeleteAccessPoint","Write","control",[92],[18],4],["s3:DeleteAccessPointForObjectLambda","Write","control",[92],[18],4],["s3:DeleteAccessPointPolicy","Permissions management","control",[92],[18],4],["s3:DeleteAccessPointPolicyForObjectLambda","Permissions management","control",[92],[18],4],["s3:DeleteBucket","Write","control",[92],[18],4],["s3:DeleteBucketMetadataTableConfiguration","Write","control",[92],[18],4],["s3:DeleteBucketPolicy","Permissions management","control",[92],[18],4],["s3:DeleteBucketWebsite","Write","control",[92],[18],4],["s3:DeleteJobTagging","Tagging","control",[92],[18],4],["s3:DeleteMultiRegionAccessPoint","Write","control",[92],[18],4],["s3:DeleteObject","Write","data",[92],[18],4],["s3:DeleteObjectAnnotation","Write","unclassified",[92],[18],4],["s3:DeleteObjectTagging","Tagging","data",[92],[18],4],["s3:DeleteObjectVersion","Write","data",[92],[18],4],["s3:DeleteObjectVersionAnnotation","Write","unclassified",[92],[18],4],["s3:DeleteObjectVersionTagging","Tagging","data",[92],[18],4],["s3:DeleteStorageLensConfiguration","Write","control",[92],[18],4],["s3:DeleteStorageLensConfigurationTagging","Tagging","control",[92],[18],4],["s3:DeleteStorageLensGroup","Write","control",[92],[18],4],["s3:GetAccelerateConfiguration","Read","unclassified",[93],[18],4],["s3:GetAccessGrant","Read","control",[93],[18],4],["s3:GetAccessGrantsInstance","Read","control",[93],[18],4],["s3:GetAccessGrantsInstanceForPrefix","Read","control",[93],[18],4],["s3:GetAccessGrantsInstanceResourcePolicy","Read","control",[93],[18],4],["s3:GetAccessGrantsLocation","Read","control",[93],[18],4],["s3:GetAccessPoint","Read","control",[93],[18],4],["s3:GetAccessPointConfigurationForObjectLambda","Read","control",[93],[18],4],["s3:GetAccessPointForObjectLambda","Read","control",[93],[18],4],["s3:GetAccessPointPolicy","Read","control",[93],[18],4],["s3:GetAccessPointPolicyForObjectLambda","Read","control",[93],[18],4],["s3:GetAccessPointPolicyStatus","Read","control",[93],[18],4],["s3:GetAccessPointPolicyStatusForObjectLambda","Read","control",[93],[18],4],["s3:GetAccountPublicAccessBlock","Read","unclassified",[93],[18],4],["s3:GetAnalyticsConfiguration","Read","control",[93],[18],4],["s3:GetBucketAbac","Read","unclassified",[93,94],[18,19],4],["s3:GetBucketAcl","Read","control",[93,94],[18,19],4],["s3:GetBucketCORS","Read","control",[93,94],[18,19],4],["s3:GetBucketLocation","Read","control",[93,94],[18,19],4],["s3:GetBucketLogging","Read","control",[93,94],[18,19],4],["s3:GetBucketMetadataTableConfiguration","Read","control",[93,94],[18,19],4],["s3:GetBucketNotification","Read","control",[93,94],[18,19],4],["s3:GetBucketObjectLockConfiguration","Read","unclassified",[93,94],[18,19],4],["s3:GetBucketOwnershipControls","Read","control",[93,94],[18,19],4],["s3:GetBucketPolicy","Read","control",[93,94],[18,19],4],["s3:GetBucketPolicyStatus","Read","control",[93,94],[18,19],4],["s3:GetBucketPublicAccessBlock","Read","unclassified",[93,94],[18,19],4],["s3:GetBucketRequestPayment","Read","control",[93,94],[18,19],4],["s3:GetBucketTagging","Read","control",[93,94],[18,19],4],["s3:GetBucketVersioning","Read","control",[93,94],[18,19],4],["s3:GetBucketWebsite","Read","control",[93,94],[18,19],4],["s3:GetDataAccess","Read","control",[93],[18],4],["s3:GetEncryptionConfiguration","Read","control",[93],[18],4],["s3:GetIntelligentTieringConfiguration","Read","control",[93],[18],4],["s3:GetInventoryConfiguration","Read","control",[93],[18],4],["s3:GetJobTagging","Read","control",[93],[18],4],["s3:GetLifecycleConfiguration","Read","control",[93],[18],4],["s3:GetMetricsConfiguration","Read","control",[93],[18],4],["s3:GetMultiRegionAccessPoint","Read","control",[93],[18],4],["s3:GetMultiRegionAccessPointPolicy","Read","control",[93],[18],4],["s3:GetMultiRegionAccessPointPolicyStatus","Read","control",[93],[18],4],["s3:GetMultiRegionAccessPointRoutes","Read","control",[93],[18],4],["s3:GetObject","Read","data",[93],[18],4],["s3:GetObjectAcl","Read","data",[93],[18],4],["s3:GetObjectAnnotation","Read","unclassified",[93],[18],4],["s3:GetObjectAttributes","Read","unclassified",[93],[18],4],["s3:GetObjectLegalHold","Read","data",[93],[18],4],["s3:GetObjectRetention","Read","data",[93],[18],4],["s3:GetObjectTagging","Read","data",[93],[18],4],["s3:GetObjectTorrent","Read","unclassified",[93],[18],4],["s3:GetObjectVersion","Read","data",[93],[18],4],["s3:GetObjectVersionAcl","Read","data",[93],[18],4],["s3:GetObjectVersionAnnotation","Read","unclassified",[93],[18],4],["s3:GetObjectVersionAnnotationForReplication","Read","unclassified",[93],[18],4],["s3:GetObjectVersionAttributes","Read","unclassified",[93],[18],4],["s3:GetObjectVersionForReplication","Read","unclassified",[93],[18],4],["s3:GetObjectVersionTagging","Read","data",[93],[18],4],["s3:GetObjectVersionTorrent","Read","unclassified",[93],[18],4],["s3:GetReplicationConfiguration","Read","control",[93],[18],4],["s3:GetStorageLensConfiguration","Read","control",[93],[18],4],["s3:GetStorageLensConfigurationTagging","Read","control",[93],[18],4],["s3:GetStorageLensDashboard","Read","unclassified",[93],[18],4],["s3:GetStorageLensGroup","Read","control",[93],[18],4],["s3:ListAllMyBuckets","List","control",[95],[0],1],["s3:ListBucket","List","data",[96],[19],4],["s3:PutAccelerateConfiguration","Write","unclassified",[97],[18],4],["s3:PutAccessGrantsInstanceResourcePolicy","Permissions management","control",[97],[18],4],["s3:PutAccessPointConfigurationForObjectLambda","Write","control",[97],[18],4],["s3:PutAccessPointPolicy","Permissions management","control",[97],[18],4],["s3:PutAccessPointPolicyForObjectLambda","Permissions management","control",[97],[18],4],["s3:PutAccessPointPublicAccessBlock","Permissions management","unclassified",[97],[18],4],["s3:PutAccountPublicAccessBlock","Permissions management","unclassified",[97],[18],4],["s3:PutAnalyticsConfiguration","Write","control",[97],[18],4],["s3:PutBucketAbac","Write","unclassified",[97],[18],4],["s3:PutBucketAcl","Permissions management","control",[97],[18],4],["s3:PutBucketCORS","Write","control",[97],[18],4],["s3:PutBucketLogging","Write","control",[97],[18],4],["s3:PutBucketNotification","Write","unclassified",[97],[18],4],["s3:PutBucketObjectLockConfiguration","Write","control",[97],[18],4],["s3:PutBucketOwnershipControls","Permissions management","control",[97,98],[18,19],4],["s3:PutBucketPolicy","Permissions management","control",[97,99],[18,19],4],["s3:PutBucketPublicAccessBlock","Permissions management","unclassified",[97,100],[18,19],4],["s3:PutBucketRequestPayment","Write","control",[97],[18],4],["s3:PutBucketTagging","Tagging","control",[97],[18],4],["s3:PutBucketVersioning","Write","control",[97],[18],4],["s3:PutBucketWebsite","Write","control",[97],[18],4],["s3:PutEncryptionConfiguration","Write","control",[97],[18],4],["s3:PutIntelligentTieringConfiguration","Write","control",[97],[18],4],["s3:PutInventoryConfiguration","Write","control",[97],[18],4],["s3:PutJobTagging","Tagging","control",[97],[18],4],["s3:PutLifecycleConfiguration","Write","control",[97],[18],4],["s3:PutMetricsConfiguration","Write","control",[97],[18],4],["s3:PutMultiRegionAccessPointPolicy","Permissions management","control",[97],[18],4],["s3:PutObject","Write","data",[97],[18],4],["s3:PutObjectAcl","Permissions management","data",[97],[18],4],["s3:PutObjectAnnotation","Write","unclassified",[97],[18],4],["s3:PutObjectLegalHold","Write","data",[97],[18],4],["s3:PutObjectRetention","Write","data",[97],[18],4],["s3:PutObjectTagging","Tagging","data",[97],[18],4],["s3:PutObjectVersionAcl","Permissions management","data",[97],[18],4],["s3:PutObjectVersionAnnotation","Write","unclassified",[97],[18],4],["s3:PutObjectVersionTagging","Tagging","data",[97],[18],4],["s3:PutReplicationConfiguration","Write","control",[97],[18],4],["s3:PutStorageLensConfiguration","Write","control",[97],[18],4],["s3:PutStorageLensConfigurationTagging","Tagging","control",[97],[18],4]]},{"prefix":"sns","rows":[["sns:CreateTopic","Write","control",[101],[20],4],["sns:DeleteTopic","Write","control",[102],[20],4],["sns:GetTopicAttributes","Read","control",[103],[20],4],["sns:ListSubscriptionsByTopic","List","control",[104],[0],1],["sns:ListTopics","List","control",[105],[0],1],["sns:Publish","Write","data",[106],[20],4],["sns:SetTopicAttributes","Permissions management","control",[107],[20],4],["sns:Subscribe","Write","control",[108],[20],4],["sns:Unsubscribe","Write","control",[109],[20],4]]},{"prefix":"sqs","rows":[["sqs:CreateQueue","Write","unclassified",[111],[21],4],["sqs:DeleteQueue","Write","unclassified",[112],[21],4],["sqs:GetQueueAttributes","Read","unclassified",[110],[21],4],["sqs:ListQueues","Read","unclassified",[113],[0],1],["sqs:SendMessage","Write","unclassified",[114],[21],4],["sqs:SetQueueAttributes","Permissions management","unclassified",[110],[21],4],["sqs:TagQueue","Tagging","unclassified",[115],[21],4]]}],"snapshot":"2026-11-13"}