{"columns":["action","accessLevel","plane","patterns","statements","flags"],"defaultVersion":"v15","name":"AmazonLaunchWizard_Fullaccess","patterns":["applicationinsights:*","autoscaling:AttachInstances","autoscaling:CreateAutoScalingGroup","autoscaling:CreateLaunchConfiguration","autoscaling:CreateOrUpdateTags","autoscaling:DeleteAutoScalingGroup","autoscaling:DeleteLaunchConfiguration","autoscaling:Describe*","autoscaling:UpdateAutoScalingGroup","cloudformation:CreateStack","cloudformation:DeleteStack","cloudformation:Describe*","cloudformation:DescribeAccountLimits","cloudformation:DescribeStack*","cloudformation:DescribeStackDriftDetectionStatus","cloudformation:Get*","cloudformation:GetTemplateSummary","cloudformation:List*","cloudformation:ListStacks","cloudformation:SignalResource","cloudformation:TagResource","cloudformation:ValidateTemplate","cloudwatch:DeleteAlarms","cloudwatch:Describe*","cloudwatch:DescribeAlarms","cloudwatch:Get*","cloudwatch:List*","cloudwatch:PutMetricAlarm","ds:AddIpRoutes","ds:CreateComputer","ds:CreateMicrosoftAD","ds:DeleteDirectory","ds:Describe*","ds:ListAuthorizedApplications","dynamodb:CreateTable","dynamodb:DeleteTable","dynamodb:DescribeTable","ec2:AllocateAddress","ec2:AllocateHosts","ec2:AssignPrivateIpAddresses","ec2:AssociateAddress","ec2:AssociateDhcpOptions","ec2:AssociateRouteTable","ec2:AssociateSubnetCidrBlock","ec2:AssociateVpcCidrBlock","ec2:AttachInternetGateway","ec2:AttachNetworkInterface","ec2:AttachVolume","ec2:AuthorizeSecurityGroupEgress","ec2:AuthorizeSecurityGroupIngress","ec2:CreateDhcpOptions","ec2:CreateEgressOnlyInternetGateway","ec2:CreateInternetGateway","ec2:CreateKeyPair","ec2:CreateNatGateway","ec2:CreateNetworkInterface","ec2:CreatePlacementGroup","ec2:CreateRoute","ec2:CreateRouteTable","ec2:CreateSecurityGroup","ec2:CreateSubnet","ec2:CreateTags","ec2:CreateVolume","ec2:CreateVpc","ec2:CreateVpcEndpoint","ec2:DeleteDhcpOptions","ec2:DeleteInternetGateway","ec2:DeleteKeyPair","ec2:DeleteNatGateway","ec2:DeleteNetworkAcl","ec2:DeleteNetworkInterface","ec2:DeleteNetworkInterfacePermission","ec2:DeletePlacementGroup","ec2:DeleteRoute","ec2:DeleteRouteTable","ec2:DeleteSecurityGroup","ec2:DeleteSnapshot","ec2:DeleteSubnet","ec2:DeleteTags","ec2:DeleteVolume","ec2:DeleteVpc","ec2:Describe*","ec2:DetachInternetGateway","ec2:DetachNetworkInterface","ec2:DetachVolume","ec2:DisassociateAddress","ec2:DisassociateIamInstanceProfile","ec2:DisassociateRouteTable","ec2:DisassociateSubnetCidrBlock","ec2:DisassociateVpcCidrBlock","ec2:Get*","ec2:GetConsoleOutput","ec2:GetLaunchTemplateData","ec2:GetPasswordData","ec2:ModifyInstanceAttribute","ec2:ModifyInstancePlacement","ec2:ModifyNetworkInterfaceAttribute","ec2:ModifySubnetAttribute","ec2:ModifyVolume","ec2:ModifyVolumeAttribute","ec2:ModifyVpcAttribute","ec2:ReleaseAddress","ec2:ReplaceRoute","ec2:ReplaceRouteTableAssociation","ec2:RevokeSecurityGroupEgress","ec2:RevokeSecurityGroupIngress","ec2:RunInstances","ec2:StartInstances","ec2:StopInstances","ec2:TerminateInstances","elasticfilesystem:CreateFileSystem","elasticfilesystem:CreateMountTarget","elasticfilesystem:DeleteFileSystem","elasticfilesystem:DeleteMountTarget","elasticfilesystem:DescribeFileSystems","elasticfilesystem:DescribeMountTargetSecurityGroups","elasticfilesystem:DescribeMountTargets","elasticfilesystem:TagResource","elasticfilesystem:UntagResource","fsx:CreateFileSystem","fsx:DeleteFileSystem","fsx:DescribeFileSystems","fsx:ListTagsForResource","fsx:TagResource","fsx:UntagResource","iam:AddRoleToInstanceProfile","iam:CreateInstanceProfile","iam:CreateServiceLinkedRole","iam:DeleteInstanceProfile","iam:GetInstanceProfile","iam:GetPolicy","iam:GetPolicyVersion","iam:GetRole","iam:GetRolePolicy","iam:GetUser","iam:List*","iam:PassRole","iam:RemoveRoleFromInstanceProfile","kms:ListAliases","kms:ListKeys","lambda:CreateFunction","lambda:DeleteFunction","lambda:GetFunction","lambda:GetFunctionConfiguration","lambda:InvokeFunction","launchwizard:*","logs:CreateLogGroup","logs:CreateLogStream","logs:DeleteLogGroup","logs:DeleteLogStream","logs:DescribeLog*","logs:GetLog*","logs:GetLogDelivery","logs:GetLogEvents","logs:GetLogRecord","logs:ListLogDeliveries","logs:PutLogEvents","logs:TagResource","logs:UntagResource","resource-groups:CreateGroup","resource-groups:DeleteGroup","resource-groups:Get*","resource-groups:List*","route53:ChangeResourceRecordSets","route53:GetChange","route53:ListHostedZones","route53:ListHostedZonesByName","route53:ListResourceRecordSets","s3:CreateBucket","s3:DeleteBucket","s3:GetBucketLocation","s3:GetObject","s3:ListAllMyBuckets","s3:ListBucket","s3:PutBucketVersioning","s3:PutObject","secretsmanager:CreateSecret","secretsmanager:DeleteResourcePolicy","secretsmanager:DeleteSecret","secretsmanager:GetRandomPassword","secretsmanager:GetSecretValue","secretsmanager:ListSecretVersionIds","secretsmanager:ListSecrets","secretsmanager:PutResourcePolicy","secretsmanager:TagResource","secretsmanager:UntagResource","servicecatalog:AssociatePrincipalWithPortfolio","servicecatalog:AssociateProductWithPortfolio","servicecatalog:CreateConstraint","servicecatalog:CreatePortfolio","servicecatalog:CreateProduct","servicecatalog:CreateProvisioningArtifact","servicecatalog:DescribePortfolio","servicecatalog:TagResource","servicecatalog:UntagResource","servicequotas:GetServiceQuota","servicequotas:ListServiceQuotas","sns:CreateTopic","sns:DeleteTopic","sns:ListSubscriptions","sns:ListSubscriptionsByTopic","sns:ListTopics","sns:Publish","sns:Subscribe","sns:Unsubscribe","sqs:AddPermission","sqs:CreateQueue","sqs:DeleteQueue","sqs:GetQueueAttributes","sqs:GetQueueUrl","sqs:ListQueueTags","sqs:ListQueues","sqs:SetQueueAttributes","sqs:TagQueue","ssm:AddTagsToResource","ssm:CreateAssociation","ssm:CreateDocument","ssm:CreateOpsMetadata","ssm:DeleteAssociation","ssm:DeleteDocument","ssm:DeleteOpsMetadata","ssm:DeleteParameter*","ssm:DescribeAutomation*","ssm:DescribeDocument","ssm:DescribeDocument*","ssm:DescribeInstanceInformation","ssm:DescribeParameters","ssm:GetAutomationExecution","ssm:GetCommandInvocation","ssm:GetConnectionStatus","ssm:GetDocument","ssm:GetParameter*","ssm:ListCommand*","ssm:ListDocument*","ssm:ListInstanceAssociations","ssm:ListTagsForResource","ssm:PutParameter","ssm:RemoveTagsFromResource","ssm:SendAutomationSignal","ssm:SendCommand","ssm:StartAutomationExecution","ssm:StopAutomationExecution","sts:GetCallerIdentity","tag:Get*"],"schemaVersion":1,"services":[{"prefix":"applicationinsights","rows":[["applicationinsights:AddWorkload","Write","control",[0],[0],1],["applicationinsights:CreateApplication","Write","control",[0],[0],1],["applicationinsights:CreateComponent","Write","control",[0],[0],1],["applicationinsights:CreateLogPattern","Write","control",[0],[0],1],["applicationinsights:DeleteApplication","Write","control",[0],[0],1],["applicationinsights:DeleteComponent","Write","control",[0],[0],1],["applicationinsights:DeleteLogPattern","Write","control",[0],[0],1],["applicationinsights:DescribeApplication","Read","control",[0],[0],1],["applicationinsights:DescribeComponent","Read","control",[0],[0],1],["applicationinsights:DescribeComponentConfiguration","Read","control",[0],[0],1],["applicationinsights:DescribeComponentConfigurationRecommendation","Read","control",[0],[0],1],["applicationinsights:DescribeLogPattern","Read","control",[0],[0],1],["applicationinsights:DescribeObservation","Read","control",[0],[0],1],["applicationinsights:DescribeProblem","Read","control",[0],[0],1],["applicationinsights:DescribeProblemObservations","Read","control",[0],[0],1],["applicationinsights:DescribeWorkload","Read","control",[0],[0],1],["applicationinsights:Link","Write","unclassified",[0],[0],1],["applicationinsights:ListApplications","List","control",[0],[0],1],["applicationinsights:ListComponents","List","control",[0],[0],1],["applicationinsights:ListConfigurationHistory","List","control",[0],[0],1],["applicationinsights:ListLogPatternSets","List","control",[0],[0],1],["applicationinsights:ListLogPatterns","List","control",[0],[0],1],["applicationinsights:ListProblems","List","control",[0],[0],1],["applicationinsights:ListTagsForResource","Read","control",[0],[0],1],["applicationinsights:ListWorkloads","List","control",[0],[0],1],["applicationinsights:RemoveWorkload","Write","control",[0],[0],1],["applicationinsights:TagResource","Tagging","control",[0],[0],1],["applicationinsights:UntagResource","Tagging","control",[0],[0],1],["applicationinsights:UpdateApplication","Write","control",[0],[0],1],["applicationinsights:UpdateComponent","Write","control",[0],[0],1],["applicationinsights:UpdateComponentConfiguration","Write","control",[0],[0],1],["applicationinsights:UpdateLogPattern","Write","control",[0],[0],1],["applicationinsights:UpdateProblem","Write","control",[0],[0],1],["applicationinsights:UpdateWorkload","Write","control",[0],[0],1]]},{"prefix":"autoscaling","rows":[["autoscaling:AttachInstances","Write","control",[1],[12],4],["autoscaling:CreateAutoScalingGroup","Write","control",[2],[12],4],["autoscaling:CreateLaunchConfiguration","Write","control",[3],[12],4],["autoscaling:CreateOrUpdateTags","Tagging","control",[4],[12],4],["autoscaling:DeleteAutoScalingGroup","Write","control",[5],[12],4],["autoscaling:DeleteLaunchConfiguration","Write","control",[6],[12],4],["autoscaling:DescribeAccountLimits","List","control",[7],[16],1],["autoscaling:DescribeAccountSettings","List","control",[7],[16],1],["autoscaling:DescribeAdjustmentTypes","List","control",[7],[16],1],["autoscaling:DescribeAutoScalingGroups","List","control",[7],[16],1],["autoscaling:DescribeAutoScalingInstances","List","control",[7],[16],1],["autoscaling:DescribeAutoScalingNotificationTypes","List","control",[7],[16],1],["autoscaling:DescribeInstanceRefreshes","List","control",[7],[16],1],["autoscaling:DescribeLaunchConfigurations","List","control",[7],[16],1],["autoscaling:DescribeLifecycleHookTypes","List","control",[7],[16],1],["autoscaling:DescribeLifecycleHooks","List","control",[7],[16],1],["autoscaling:DescribeLoadBalancerTargetGroups","List","control",[7],[16],1],["autoscaling:DescribeLoadBalancers","List","control",[7],[16],1],["autoscaling:DescribeMetricCollectionTypes","List","control",[7],[16],1],["autoscaling:DescribeNotificationConfigurations","List","control",[7],[16],1],["autoscaling:DescribePolicies","List","control",[7],[16],1],["autoscaling:DescribeScalingActivities","List","control",[7],[16],1],["autoscaling:DescribeScalingProcessTypes","List","control",[7],[16],1],["autoscaling:DescribeScheduledActions","List","control",[7],[16],1],["autoscaling:DescribeTags","Read","control",[7],[16],1],["autoscaling:DescribeTerminationPolicyTypes","List","control",[7],[16],1],["autoscaling:DescribeTrafficSources","List","control",[7],[16],1],["autoscaling:DescribeWarmPool","List","control",[7],[16],1],["autoscaling:UpdateAutoScalingGroup","Write","control",[8],[12],4]]},{"prefix":"cloudformation","rows":[["cloudformation:CreateStack","Write","control",[9],[24],1],["cloudformation:DeleteStack","Write","control",[10],[8],4],["cloudformation:DescribeAccountLimits","Read","control",[11,12],[16,19],1],["cloudformation:DescribeChangeSet","Read","control",[11],[19],4],["cloudformation:DescribeChangeSetHooks","Read","control",[11],[19],4],["cloudformation:DescribeEvents","Read","control",[11],[19],4],["cloudformation:DescribeGeneratedTemplate","Read","control",[11],[19],4],["cloudformation:DescribeOrganizationsAccess","Read","control",[11],[19],4],["cloudformation:DescribePublisher","Read","control",[11],[19],4],["cloudformation:DescribeResourceScan","Read","control",[11],[19],4],["cloudformation:DescribeStackDriftDetectionStatus","Read","control",[11,13,14],[8,16,19],1],["cloudformation:DescribeStackEvents","Read","control",[11,13],[8,19],4],["cloudformation:DescribeStackInstance","Read","control",[11,13],[8,19],4],["cloudformation:DescribeStackRefactor","Read","control",[11,13],[8,19],4],["cloudformation:DescribeStackResource","Read","control",[11,13],[8,19],4],["cloudformation:DescribeStackResourceDrifts","Read","control",[11,13],[8,19],4],["cloudformation:DescribeStackResources","Read","control",[11,13],[8,19],4],["cloudformation:DescribeStackSet","Read","control",[11,13],[8,19],4],["cloudformation:DescribeStackSetOperation","Read","control",[11,13],[8,19],4],["cloudformation:DescribeStacks","List","control",[11,13],[8,19],4],["cloudformation:DescribeType","Read","control",[11],[19],4],["cloudformation:DescribeTypeRegistration","Read","control",[11],[19],4],["cloudformation:GetGeneratedTemplate","Read","control",[15],[8],4],["cloudformation:GetHookResult","Read","control",[15],[8],4],["cloudformation:GetResource","Read","control",[15],[8],4],["cloudformation:GetResourceRequestStatus","Read","control",[15],[8],4],["cloudformation:GetStackPolicy","Read","control",[15],[8],4],["cloudformation:GetTemplate","Read","control",[15],[8],4],["cloudformation:GetTemplateSummary","Read","control",[15,16],[7,8],0],["cloudformation:ListAllHookResults","List","control",[17],[16,19],1],["cloudformation:ListChangeSets","List","control",[17],[16,19],1],["cloudformation:ListExports","List","control",[17],[16,19],1],["cloudformation:ListGeneratedTemplates","List","control",[17],[16,19],1],["cloudformation:ListHookResults","List","control",[17],[16,19],1],["cloudformation:ListImports","List","control",[17],[16,19],1],["cloudformation:ListResourceRequests","Read","control",[17],[16,19],1],["cloudformation:ListResourceScanRelatedResources","List","control",[17],[16,19],1],["cloudformation:ListResourceScanResources","List","control",[17],[16,19],1],["cloudformation:ListResourceScans","List","control",[17],[16,19],1],["cloudformation:ListResources","Read","control",[17],[16,19],1],["cloudformation:ListStackInstanceResourceDrifts","List","control",[17],[16,19],1],["cloudformation:ListStackInstances","List","control",[17],[16,19],1],["cloudformation:ListStackRefactorActions","List","control",[17],[16,19],1],["cloudformation:ListStackRefactors","List","control",[17],[16,19],1],["cloudformation:ListStackResources","List","control",[17],[16,19],1],["cloudformation:ListStackSetAutoDeploymentTargets","List","control",[17],[16,19],1],["cloudformation:ListStackSetOperationResults","List","control",[17],[16,19],1],["cloudformation:ListStackSetOperations","List","control",[17],[16,19],1],["cloudformation:ListStackSets","List","control",[17],[16,19],1],["cloudformation:ListStacks","List","control",[17,18],[8,16,19],1],["cloudformation:ListTypeRegistrations","List","control",[17],[16,19],1],["cloudformation:ListTypeVersions","List","control",[17],[16,19],1],["cloudformation:ListTypes","List","control",[17],[16,19],1],["cloudformation:SignalResource","Write","control",[19],[8],4],["cloudformation:TagResource","Tagging","control",[20],[26],2],["cloudformation:ValidateTemplate","Read","control",[21],[16],1]]},{"prefix":"cloudwatch","rows":[["cloudwatch:DeleteAlarms","Write","control",[22],[23],4],["cloudwatch:DescribeAlarmHistory","Read","control",[23],[5],1],["cloudwatch:DescribeAlarms","Read","control",[23,24],[5,23],1],["cloudwatch:DescribeAlarmsForMetric","Read","control",[23],[5],1],["cloudwatch:DescribeAnomalyDetectors","Read","control",[23],[5],1],["cloudwatch:DescribeInsightRules","Read","control",[23],[5],1],["cloudwatch:GetAccessGrant","Read","control",[25],[5],1],["cloudwatch:GetAccessProfile","Read","control",[25],[5],1],["cloudwatch:GetAgentGraph","Read","unclassified",[25],[5],1],["cloudwatch:GetAlarmMuteRule","Read","control",[25],[5],1],["cloudwatch:GetAlert","Read","control",[25],[5],1],["cloudwatch:GetContextGraph","Read","control",[25],[5],1],["cloudwatch:GetDashboard","Read","control",[25],[5],1],["cloudwatch:GetDataset","Read","control",[25],[5],1],["cloudwatch:GetDomain","Read","control",[25],[5],1],["cloudwatch:GetDomainAccessGrantForOrganization","Read","control",[25],[5],1],["cloudwatch:GetDomainForOrganization","Read","control",[25],[5],1],["cloudwatch:GetIngestionEndpoint","Read","unclassified",[25],[5],1],["cloudwatch:GetInsightRuleReport","Read","control",[25],[5],1],["cloudwatch:GetIntegration","Read","control",[25],[5],1],["cloudwatch:GetIntelligenceConfiguration","Read","control",[25],[5],1],["cloudwatch:GetMetricData","Read","data",[25],[5],1],["cloudwatch:GetMetricDataQueryDefinition","Read","control",[25],[5],1],["cloudwatch:GetMetricStatistics","Read","data",[25],[5],1],["cloudwatch:GetMetricStream","Read","control",[25],[5],1],["cloudwatch:GetMetricWidgetImage","Read","data",[25],[5],1],["cloudwatch:GetOTelEnrichment","Read","control",[25],[5],1],["cloudwatch:GetOmniDashboard","Read","control",[25],[5],1],["cloudwatch:GetOmniThread","Read","unclassified",[25],[5],1],["cloudwatch:GetPreferences","Read","unclassified",[25],[5],1],["cloudwatch:GetProfileRecords","Read","unclassified",[25],[5],1],["cloudwatch:GetRecords","Read","control",[25],[5],1],["cloudwatch:GetResourceMetricsConfiguration","Read","control",[25],[5],1],["cloudwatch:GetService","Read","unclassified",[25],[5],1],["cloudwatch:GetServiceData","Read","unclassified",[25],[5],1],["cloudwatch:GetServiceLevelObjective","Read","unclassified",[25],[5],1],["cloudwatch:GetSpace","Read","control",[25],[5],1],["cloudwatch:GetSpaceCredentials","Read","unclassified",[25],[5],1],["cloudwatch:GetSpaceCredentialsForOrganization","Read","control",[25],[5],1],["cloudwatch:GetSpaceDataAccess","Read","control",[25],[5],1],["cloudwatch:GetTelemetryQueryResults","Read","control",[25],[5],1],["cloudwatch:GetTopologyDiscoveryStatus","Read","unclassified",[25],[5],1],["cloudwatch:GetTopologyMap","Read","unclassified",[25],[5],1],["cloudwatch:GetView","Read","control",[25],[5],1],["cloudwatch:ListAccessGrants","List","control",[26],[5],1],["cloudwatch:ListAccessProfiles","List","control",[26],[5],1],["cloudwatch:ListAlarmMuteRules","List","control",[26],[5],1],["cloudwatch:ListAlertContributors","List","unclassified",[26],[5],1],["cloudwatch:ListAlerts","List","control",[26],[5],1],["cloudwatch:ListDashboards","List","control",[26],[5],1],["cloudwatch:ListDomainAccessGrantsForOrganization","List","control",[26],[5],1],["cloudwatch:ListDomains","List","control",[26],[5],1],["cloudwatch:ListEntitiesForMetric","List","unclassified",[26],[5],1],["cloudwatch:ListIngestionEndpoints","List","unclassified",[26],[5],1],["cloudwatch:ListIntegrations","List","control",[26],[5],1],["cloudwatch:ListManagedInsightRules","Read","control",[26],[5],1],["cloudwatch:ListMetricDataQueryDefinitions","List","control",[26],[5],1],["cloudwatch:ListMetricStreams","List","control",[26],[5],1],["cloudwatch:ListMetrics","List","data",[26],[5],1],["cloudwatch:ListOmniDashboards","List","control",[26],[5],1],["cloudwatch:ListOmniThreads","List","unclassified",[26],[5],1],["cloudwatch:ListServiceLevelObjectives","List","unclassified",[26],[5],1],["cloudwatch:ListServices","List","unclassified",[26],[5],1],["cloudwatch:ListSpaceAccess","List","unclassified",[26],[5],1],["cloudwatch:ListSpaces","List","control",[26],[5],1],["cloudwatch:ListSpacesForOrganization","List","control",[26],[5],1],["cloudwatch:ListTagsForResource","List","control",[26],[5],1],["cloudwatch:ListTelemetryFields","List","control",[26],[5],1],["cloudwatch:ListTelemetryQuerySessions","List","control",[26],[5],1],["cloudwatch:ListViews","List","control",[26],[5],1],["cloudwatch:PutMetricAlarm","Write","control",[27],[23],4]]},{"prefix":"ds","rows":[["ds:AddIpRoutes","Write","control",[28],[7],2],["ds:CreateComputer","Write","control",[29],[7],2],["ds:CreateMicrosoftAD","Write","control",[30],[7],2],["ds:DeleteDirectory","Write","control",[31],[7],2],["ds:DescribeADAssessment","Read","control",[32],[16],1],["ds:DescribeCAEnrollmentPolicy","Read","control",[32],[16],1],["ds:DescribeCertificate","Read","control",[32],[16],1],["ds:DescribeClientAuthenticationSettings","Read","control",[32],[16],1],["ds:DescribeConditionalForwarders","Read","control",[32],[16],1],["ds:DescribeDirectories","List","control",[32],[16],1],["ds:DescribeDirectoryDataAccess","Read","control",[32],[16],1],["ds:DescribeDomainControllers","Read","control",[32],[16],1],["ds:DescribeEventTopics","Read","control",[32],[16],1],["ds:DescribeHybridADUpdate","Read","control",[32],[16],1],["ds:DescribeLDAPSSettings","Read","control",[32],[16],1],["ds:DescribeRegions","Read","control",[32],[16],1],["ds:DescribeSettings","Read","control",[32],[16],1],["ds:DescribeSharedDirectories","Read","control",[32],[16],1],["ds:DescribeSnapshots","Read","control",[32],[16],1],["ds:DescribeTrusts","Read","control",[32],[16],1],["ds:DescribeUpdateDirectory","Read","control",[32],[16],1],["ds:ListAuthorizedApplications","Read","unclassified",[33],[16],1]]},{"prefix":"dynamodb","rows":[["dynamodb:CreateTable","Write","control",[34],[28],4],["dynamodb:DeleteTable","Write","control",[35],[28],4],["dynamodb:DescribeTable","Read","control",[36],[28],4]]},{"prefix":"ec2","rows":[["ec2:AllocateAddress","Write","control",[37],[7],2],["ec2:AllocateHosts","Write","control",[38],[7],2],["ec2:AssignPrivateIpAddresses","Write","control",[39],[7],2],["ec2:AssociateAddress","Write","control",[40],[7],2],["ec2:AssociateDhcpOptions","Write","control",[41],[7],2],["ec2:AssociateRouteTable","Write","control",[42],[7],2],["ec2:AssociateSubnetCidrBlock","Write","control",[43],[7],2],["ec2:AssociateVpcCidrBlock","Write","control",[44],[7],2],["ec2:AttachInternetGateway","Write","control",[45],[7],2],["ec2:AttachNetworkInterface","Write","control",[46],[7],2],["ec2:AttachVolume","Write","control",[47],[7],2],["ec2:AuthorizeSecurityGroupEgress","Write","control",[48],[7],2],["ec2:AuthorizeSecurityGroupIngress","Write","control",[49],[24],1],["ec2:CreateDhcpOptions","Write","control",[50],[7],2],["ec2:CreateEgressOnlyInternetGateway","Write","control",[51],[7],2],["ec2:CreateInternetGateway","Write","control",[52],[6],1],["ec2:CreateKeyPair","Write","control",[53],[6],1],["ec2:CreateNatGateway","Write","control",[54],[6],1],["ec2:CreateNetworkInterface","Write","control",[55],[7],2],["ec2:CreatePlacementGroup","Write","control",[56],[7],2],["ec2:CreateRoute","Write","control",[57],[6],1],["ec2:CreateRouteTable","Write","control",[58],[6],1],["ec2:CreateSecurityGroup","Write","control",[59],[24],1],["ec2:CreateSubnet","Write","control",[60],[6],1],["ec2:CreateTags","Tagging","control",[61],[7],2],["ec2:CreateVolume","Write","control",[62],[7],2],["ec2:CreateVpc","Write","control",[63],[6],1],["ec2:CreateVpcEndpoint","Write","control",[64],[7],2],["ec2:DeleteDhcpOptions","Write","control",[65],[7],2],["ec2:DeleteInternetGateway","Write","control",[66],[7],2],["ec2:DeleteKeyPair","Write","control",[67],[7],2],["ec2:DeleteNatGateway","Write","control",[68],[7],2],["ec2:DeleteNetworkAcl","Write","control",[69],[7],2],["ec2:DeleteNetworkInterface","Write","control",[70],[7],2],["ec2:DeleteNetworkInterfacePermission","Permissions management","control",[71],[7],2],["ec2:DeletePlacementGroup","Write","control",[72],[7],2],["ec2:DeleteRoute","Write","control",[73],[7],2],["ec2:DeleteRouteTable","Write","control",[74],[7],2],["ec2:DeleteSecurityGroup","Write","control",[75],[7],2],["ec2:DeleteSnapshot","Write","control",[76],[7],2],["ec2:DeleteSubnet","Write","control",[77],[7],2],["ec2:DeleteTags","Tagging","control",[78],[7],2],["ec2:DeleteVolume","Write","control",[79],[7],2],["ec2:DeleteVpc","Write","control",[80],[7],2],["ec2:DescribeAccountAttributes","List","control",[81],[16],1],["ec2:DescribeAccountVpcEncryptionControl","List","control",[81],[16],1],["ec2:DescribeAddressTransfers","List","control",[81],[16],1],["ec2:DescribeAddresses","List","control",[81],[16],1],["ec2:DescribeAddressesAttribute","List","control",[81],[16],1],["ec2:DescribeAggregateIdFormat","List","control",[81],[16],1],["ec2:DescribeApplicationStatus","List","control",[81],[16],1],["ec2:DescribeApplicationStatusCheckAssociations","List","control",[81],[16],1],["ec2:DescribeApplicationStatusChecks","List","control",[81],[16],1],["ec2:DescribeAvailabilityZones","List","control",[81],[16],1],["ec2:DescribeAwsNetworkPerformanceMetricSubscriptions","List","control",[81],[16],1],["ec2:DescribeBundleTasks","List","control",[81],[16],1],["ec2:DescribeByoipCidrs","List","control",[81],[16],1],["ec2:DescribeCapacityBlockExtensionHistory","List","control",[81],[16],1],["ec2:DescribeCapacityBlockExtensionOfferings","List","control",[81],[16],1],["ec2:DescribeCapacityBlockOfferings","List","control",[81],[16],1],["ec2:DescribeCapacityBlockStatus","List","control",[81],[16],1],["ec2:DescribeCapacityBlocks","List","control",[81],[16],1],["ec2:DescribeCapacityManagerDataExports","List","control",[81],[16],1],["ec2:DescribeCapacityReservationBillingRequests","List","control",[81],[16],1],["ec2:DescribeCapacityReservationCancellationQuotes","List","control",[81],[16],1],["ec2:DescribeCapacityReservationDateChangeQuotes","List","control",[81],[16],1],["ec2:DescribeCapacityReservationFleets","List","control",[81],[16],1],["ec2:DescribeCapacityReservationTopology","List","control",[81],[16],1],["ec2:DescribeCapacityReservations","List","control",[81],[16],1],["ec2:DescribeCarrierGateways","List","control",[81],[16],1],["ec2:DescribeClassicLinkInstances","List","control",[81],[16],1],["ec2:DescribeClientVpnAuthorizationRules","List","control",[81],[16],1],["ec2:DescribeClientVpnConnections","List","control",[81],[16],1],["ec2:DescribeClientVpnEndpoints","List","control",[81],[16],1],["ec2:DescribeClientVpnRoutes","List","control",[81],[16],1],["ec2:DescribeClientVpnTargetNetworks","List","control",[81],[16],1],["ec2:DescribeCoipPools","List","control",[81],[16],1],["ec2:DescribeConversionTasks","List","control",[81],[16],1],["ec2:DescribeCustomerGateways","List","control",[81],[16],1],["ec2:DescribeDeclarativePoliciesReports","List","control",[81],[16],1],["ec2:DescribeDhcpOptions","List","control",[81],[16],1],["ec2:DescribeEgressOnlyInternetGateways","List","control",[81],[16],1],["ec2:DescribeElasticGpus","List","control",[81],[16],1],["ec2:DescribeExportImageTasks","List","control",[81],[16],1],["ec2:DescribeExportTasks","List","control",[81],[16],1],["ec2:DescribeFastLaunchImages","List","control",[81],[16],1],["ec2:DescribeFastSnapshotRestores","List","control",[81],[16],1],["ec2:DescribeFleetHistory","List","control",[81],[16],1],["ec2:DescribeFleetInstances","List","control",[81],[16],1],["ec2:DescribeFleets","List","control",[81],[16],1],["ec2:DescribeFlowLogs","List","control",[81],[16],1],["ec2:DescribeFpgaImageAttribute","List","control",[81],[16],1],["ec2:DescribeFpgaImages","List","control",[81],[16],1],["ec2:DescribeHostReservationOfferings","List","control",[81],[16],1],["ec2:DescribeHostReservations","List","control",[81],[16],1],["ec2:DescribeHosts","List","control",[81],[16],1],["ec2:DescribeIamInstanceProfileAssociations","List","control",[81],[16],1],["ec2:DescribeIdFormat","List","control",[81],[16],1],["ec2:DescribeIdentityIdFormat","List","control",[81],[16],1],["ec2:DescribeImageAttribute","List","control",[81],[16],1],["ec2:DescribeImageReferences","List","control",[81],[16],1],["ec2:DescribeImageUsageReportEntries","List","control",[81],[16],1],["ec2:DescribeImageUsageReports","List","control",[81],[16],1],["ec2:DescribeImages","List","control",[81],[16],1],["ec2:DescribeImportImageTasks","List","control",[81],[16],1],["ec2:DescribeImportSnapshotTasks","List","control",[81],[16],1],["ec2:DescribeInstanceAttribute","List","control",[81],[16],1],["ec2:DescribeInstanceConnectEndpoints","List","control",[81],[16],1],["ec2:DescribeInstanceCreditSpecifications","List","control",[81],[16],1],["ec2:DescribeInstanceEventNotificationAttributes","List","control",[81],[16],1],["ec2:DescribeInstanceEventWindows","List","control",[81],[16],1],["ec2:DescribeInstanceImageMetadata","List","control",[81],[16],1],["ec2:DescribeInstanceSqlHaHistoryStates","List","control",[81],[16],1],["ec2:DescribeInstanceSqlHaStates","List","control",[81],[16],1],["ec2:DescribeInstanceStatus","List","control",[81],[16],1],["ec2:DescribeInstanceTopology","List","control",[81],[16],1],["ec2:DescribeInstanceTypeOfferings","List","control",[81],[16],1],["ec2:DescribeInstanceTypes","List","control",[81],[16],1],["ec2:DescribeInstances","List","control",[81],[16],1],["ec2:DescribeInternetGateways","List","control",[81],[16],1],["ec2:DescribeIpamByoasn","List","control",[81],[16],1],["ec2:DescribeIpamExternalResourceVerificationTokens","List","control",[81],[16],1],["ec2:DescribeIpamInternetRegistryAssociations","List","control",[81],[16],1],["ec2:DescribeIpamPolicies","List","control",[81],[16],1],["ec2:DescribeIpamPoolAllocations","List","control",[81],[16],1],["ec2:DescribeIpamPools","List","control",[81],[16],1],["ec2:DescribeIpamPrefixListResolverTargets","List","control",[81],[16],1],["ec2:DescribeIpamPrefixListResolvers","List","control",[81],[16],1],["ec2:DescribeIpamResourceDiscoveries","List","control",[81],[16],1],["ec2:DescribeIpamResourceDiscoveryAssociations","List","control",[81],[16],1],["ec2:DescribeIpamScopes","List","control",[81],[16],1],["ec2:DescribeIpams","List","control",[81],[16],1],["ec2:DescribeIpv6Pools","List","control",[81],[16],1],["ec2:DescribeKeyPairs","List","control",[81],[16],1],["ec2:DescribeLaunchTemplateVersions","List","control",[81],[16],1],["ec2:DescribeLaunchTemplates","List","control",[81],[16],1],["ec2:DescribeLocalGatewayRouteTablePermissions","List","unclassified",[81],[16],1],["ec2:DescribeLocalGatewayRouteTableVirtualInterfaceGroupAssociations","List","control",[81],[16],1],["ec2:DescribeLocalGatewayRouteTableVpcAssociations","List","control",[81],[16],1],["ec2:DescribeLocalGatewayRouteTables","List","control",[81],[16],1],["ec2:DescribeLocalGatewayVirtualInterfaceGroups","List","control",[81],[16],1],["ec2:DescribeLocalGatewayVirtualInterfaces","List","control",[81],[16],1],["ec2:DescribeLocalGateways","List","control",[81],[16],1],["ec2:DescribeLockedSnapshots","List","control",[81],[16],1],["ec2:DescribeMacHosts","List","control",[81],[16],1],["ec2:DescribeMacModificationTasks","List","control",[81],[16],1],["ec2:DescribeManagedPrefixLists","List","control",[81],[16],1],["ec2:DescribeMovingAddresses","List","unclassified",[81],[16],1],["ec2:DescribeNatGateways","List","control",[81],[16],1],["ec2:DescribeNetworkAcls","List","control",[81],[16],1],["ec2:DescribeNetworkInsightsAccessScopeAnalyses","List","control",[81],[16],1],["ec2:DescribeNetworkInsightsAccessScopes","List","control",[81],[16],1],["ec2:DescribeNetworkInsightsAnalyses","List","control",[81],[16],1],["ec2:DescribeNetworkInsightsPaths","List","control",[81],[16],1],["ec2:DescribeNetworkInterfaceAttribute","List","control",[81],[16],1],["ec2:DescribeNetworkInterfacePermissions","List","control",[81],[16],1],["ec2:DescribeNetworkInterfaces","List","control",[81],[16],1],["ec2:DescribeOutpostLags","List","control",[81],[16],1],["ec2:DescribePlacementGroups","List","control",[81],[16],1],["ec2:DescribePrefixLists","List","control",[81],[16],1],["ec2:DescribePrincipalIdFormat","List","control",[81],[16],1],["ec2:DescribePublicIpv4Pools","List","control",[81],[16],1],["ec2:DescribeRegions","List","control",[81],[16],1],["ec2:DescribeReplaceRootVolumeTasks","List","control",[81],[16],1],["ec2:DescribeReservedInstances","List","control",[81],[16],1],["ec2:DescribeReservedInstancesListings","List","control",[81],[16],1],["ec2:DescribeReservedInstancesModifications","List","control",[81],[16],1],["ec2:DescribeReservedInstancesOfferings","List","control",[81],[16],1],["ec2:DescribeRouteServerEndpoints","List","control",[81],[16],1],["ec2:DescribeRouteServerPeers","List","control",[81],[16],1],["ec2:DescribeRouteServers","List","control",[81],[16],1],["ec2:DescribeRouteTables","List","control",[81],[16],1],["ec2:DescribeScheduledInstanceAvailability","List","control",[81],[16],1],["ec2:DescribeScheduledInstances","List","control",[81],[16],1],["ec2:DescribeSecondaryInterfaces","List","control",[81],[16],1],["ec2:DescribeSecondaryNetworks","List","control",[81],[16],1],["ec2:DescribeSecondarySubnets","List","control",[81],[16],1],["ec2:DescribeSecurityGroupReferences","List","control",[81],[16],1],["ec2:DescribeSecurityGroupRules","List","control",[81],[16],1],["ec2:DescribeSecurityGroupVpcAssociations","List","control",[81],[16],1],["ec2:DescribeSecurityGroups","List","control",[81],[16],1],["ec2:DescribeServiceLinkVirtualInterfaces","List","control",[81],[16],1],["ec2:DescribeSnapshotAttribute","List","control",[81],[16],1],["ec2:DescribeSnapshotTierStatus","List","control",[81],[16],1],["ec2:DescribeSnapshots","List","control",[81],[16],1],["ec2:DescribeSpotDatafeedSubscription","List","control",[81],[16],1],["ec2:DescribeSpotFleetInstances","List","control",[81],[16],1],["ec2:DescribeSpotFleetRequestHistory","List","control",[81],[16],1],["ec2:DescribeSpotFleetRequests","List","control",[81],[16],1],["ec2:DescribeSpotInstanceRequests","List","control",[81],[16],1],["ec2:DescribeSpotPriceHistory","List","control",[81],[16],1],["ec2:DescribeStaleSecurityGroups","List","control",[81],[16],1],["ec2:DescribeStoreImageTasks","List","control",[81],[16],1],["ec2:DescribeSubnets","List","control",[81],[16],1],["ec2:DescribeTags","List","control",[81],[16],1],["ec2:DescribeTrafficMirrorFilterRules","List","control",[81],[16],1],["ec2:DescribeTrafficMirrorFilters","List","control",[81],[16],1],["ec2:DescribeTrafficMirrorSessions","List","control",[81],[16],1],["ec2:DescribeTrafficMirrorTargets","List","control",[81],[16],1],["ec2:DescribeTransitGatewayAttachments","List","control",[81],[16],1],["ec2:DescribeTransitGatewayConnectPeers","List","control",[81],[16],1],["ec2:DescribeTransitGatewayConnects","List","control",[81],[16],1],["ec2:DescribeTransitGatewayMeteringPolicies","List","control",[81],[16],1],["ec2:DescribeTransitGatewayMulticastDomains","List","control",[81],[16],1],["ec2:DescribeTransitGatewayPeeringAttachments","List","control",[81],[16],1],["ec2:DescribeTransitGatewayPolicyTables","List","control",[81],[16],1],["ec2:DescribeTransitGatewayRouteTableAnnouncements","List","control",[81],[16],1],["ec2:DescribeTransitGatewayRouteTables","List","control",[81],[16],1],["ec2:DescribeTransitGatewayVpcAttachments","List","control",[81],[16],1],["ec2:DescribeTransitGateways","List","control",[81],[16],1],["ec2:DescribeTrunkInterfaceAssociations","List","control",[81],[16],1],["ec2:DescribeVerifiedAccessEndpoints","List","control",[81],[16],1],["ec2:DescribeVerifiedAccessGroups","List","control",[81],[16],1],["ec2:DescribeVerifiedAccessInstanceLoggingConfigurations","List","control",[81],[16],1],["ec2:DescribeVerifiedAccessInstanceWebAclAssociations","List","unclassified",[81],[16],1],["ec2:DescribeVerifiedAccessInstances","List","control",[81],[16],1],["ec2:DescribeVerifiedAccessTrustProviders","List","control",[81],[16],1],["ec2:DescribeVolumeAttribute","List","control",[81],[16],1],["ec2:DescribeVolumeStatus","List","control",[81],[16],1],["ec2:DescribeVolumes","List","control",[81],[16],1],["ec2:DescribeVolumesModifications","List","control",[81],[16],1],["ec2:DescribeVpcAttribute","List","control",[81],[16],1],["ec2:DescribeVpcBlockPublicAccessExclusions","List","control",[81],[16],1],["ec2:DescribeVpcBlockPublicAccessOptions","List","control",[81],[16],1],["ec2:DescribeVpcClassicLink","List","control",[81],[16],1],["ec2:DescribeVpcClassicLinkDnsSupport","List","control",[81],[16],1],["ec2:DescribeVpcEncryptionControls","List","control",[81],[16],1],["ec2:DescribeVpcEndpointAssociations","List","control",[81],[16],1],["ec2:DescribeVpcEndpointConnectionNotifications","List","control",[81],[16],1],["ec2:DescribeVpcEndpointConnections","List","control",[81],[16],1],["ec2:DescribeVpcEndpointServiceConfigurations","List","control",[81],[16],1],["ec2:DescribeVpcEndpointServicePermissions","List","control",[81],[16],1],["ec2:DescribeVpcEndpointServices","List","control",[81],[16],1],["ec2:DescribeVpcEndpoints","List","control",[81],[16],1],["ec2:DescribeVpcPeeringConnections","List","control",[81],[16],1],["ec2:DescribeVpcs","List","control",[81],[16],1],["ec2:DescribeVpnConcentrators","List","control",[81],[16],1],["ec2:DescribeVpnConnections","List","control",[81],[16],1],["ec2:DescribeVpnGateways","List","control",[81],[16],1],["ec2:DetachInternetGateway","Write","control",[82],[7],2],["ec2:DetachNetworkInterface","Write","control",[83],[7],2],["ec2:DetachVolume","Write","control",[84],[7],2],["ec2:DisassociateAddress","Write","control",[85],[7],2],["ec2:DisassociateIamInstanceProfile","Write","control",[86],[7],2],["ec2:DisassociateRouteTable","Write","control",[87],[7],2],["ec2:DisassociateSubnetCidrBlock","Write","control",[88],[7],2],["ec2:DisassociateVpcCidrBlock","Write","control",[89],[7],2],["ec2:GetActiveVpnTunnelStatus","Read","control",[90],[16],1],["ec2:GetAllowedImagesSettings","Read","control",[90],[16],1],["ec2:GetAssociatedEnclaveCertificateIamRoles","Read","control",[90],[16],1],["ec2:GetAssociatedIpv6PoolCidrs","Read","control",[90],[16],1],["ec2:GetAwsNetworkPerformanceData","Read","control",[90],[16],1],["ec2:GetCapacityManagerAttributes","Read","control",[90],[16],1],["ec2:GetCapacityManagerMetricData","Read","control",[90],[16],1],["ec2:GetCapacityManagerMetricDimensions","Read","control",[90],[16],1],["ec2:GetCapacityManagerMonitoredTagKeys","List","control",[90],[16],1],["ec2:GetCapacityReservationUsage","Read","control",[90],[16],1],["ec2:GetClientVpnEndpointAuthorizationPolicy","Read","control",[90],[16],1],["ec2:GetCoipPoolUsage","Read","control",[90],[16],1],["ec2:GetConsoleOutput","Read","control",[90,91],[7,16],1],["ec2:GetConsoleScreenshot","Read","control",[90],[16],1],["ec2:GetDeclarativePoliciesReportSummary","Read","control",[90],[16],1],["ec2:GetDefaultCreditSpecification","Read","control",[90],[16],1],["ec2:GetEbsDefaultKmsKeyId","Read","control",[90],[16],1],["ec2:GetEbsEncryptionByDefault","Read","control",[90],[16],1],["ec2:GetEnabledIpamPolicy","Read","control",[90],[16],1],["ec2:GetFlowLogsIntegrationTemplate","Read","control",[90],[16],1],["ec2:GetGroupsForCapacityReservation","List","control",[90],[16],1],["ec2:GetHostReservationPurchasePreview","Read","control",[90],[16],1],["ec2:GetImageAncestry","Read","control",[90],[16],1],["ec2:GetImageBlockPublicAccessState","Read","control",[90],[16],1],["ec2:GetImageFindings","Read","control",[90],[16],1],["ec2:GetInstanceMetadataDefaults","List","control",[90],[16],1],["ec2:GetInstanceTpmEkPub","Read","control",[90],[16],1],["ec2:GetInstanceTypesFromInstanceRequirements","List","control",[90],[16],1],["ec2:GetInstanceUefiData","Read","control",[90],[16],1],["ec2:GetIpamAddressHistory","Read","control",[90],[16],1],["ec2:GetIpamDiscoveredAccounts","Read","control",[90],[16],1],["ec2:GetIpamDiscoveredPublicAddresses","Read","control",[90],[16],1],["ec2:GetIpamDiscoveredResourceCidrs","Read","control",[90],[16],1],["ec2:GetIpamDiscoveredRoutes","Read","control",[90],[16],1],["ec2:GetIpamInternetRegistryAssociationAsns","Read","control",[90],[16],1],["ec2:GetIpamInternetRegistryAssociationCidrs","Read","control",[90],[16],1],["ec2:GetIpamPolicyAllocationRules","List","control",[90],[16],1],["ec2:GetIpamPolicyOrganizationTargets","List","control",[90],[16],1],["ec2:GetIpamPoolAllocations","List","control",[90],[16],1],["ec2:GetIpamPoolCidrs","Read","control",[90],[16],1],["ec2:GetIpamPrefixListResolverRules","Read","control",[90],[16],1],["ec2:GetIpamPrefixListResolverVersionEntries","Read","control",[90],[16],1],["ec2:GetIpamPrefixListResolverVersions","Read","control",[90],[16],1],["ec2:GetIpamResourceCidrs","Read","control",[90],[16],1],["ec2:GetIpamRouteOriginAuthorizations","Read","control",[90],[16],1],["ec2:GetIpamRouteProtectionFindings","Read","control",[90],[16],1],["ec2:GetIpamRoutingPolicyRegistrationDeltas","Read","control",[90],[16],1],["ec2:GetIpamRoutingPolicyRegistrations","Read","control",[90],[16],1],["ec2:GetLaunchTemplateData","Read","control",[90,92],[7,16],1],["ec2:GetManagedPrefixListAssociations","Read","control",[90],[16],1],["ec2:GetManagedPrefixListEntries","Read","control",[90],[16],1],["ec2:GetManagedResourceVisibility","List","control",[90],[16],1],["ec2:GetNetworkInsightsAccessScopeAnalysisFindings","Read","control",[90],[16],1],["ec2:GetNetworkInsightsAccessScopeContent","Read","control",[90],[16],1],["ec2:GetPasswordData","Read","control",[90,93],[7,16],1],["ec2:GetReservedInstancesExchangeQuote","Read","control",[90],[16],1],["ec2:GetResourcePolicy","Read","unclassified",[90],[16],1],["ec2:GetRouteServerAssociations","Read","control",[90],[16],1],["ec2:GetRouteServerPropagations","Read","control",[90],[16],1],["ec2:GetRouteServerRoutingDatabase","Read","control",[90],[16],1],["ec2:GetSecurityGroupsForVpc","Read","control",[90],[16],1],["ec2:GetSerialConsoleAccessStatus","Read","control",[90],[16],1],["ec2:GetSnapshotBlockPublicAccessState","Read","control",[90],[16],1],["ec2:GetSpotPlacementScores","Read","control",[90],[16],1],["ec2:GetSubnetCidrReservations","Read","control",[90],[16],1],["ec2:GetTransitGatewayAttachmentNatConfiguration","Read","control",[90],[16],1],["ec2:GetTransitGatewayAttachmentPropagations","List","control",[90],[16],1],["ec2:GetTransitGatewayMeteringPolicyEntries","List","control",[90],[16],1],["ec2:GetTransitGatewayMulticastDomainAssociations","List","control",[90],[16],1],["ec2:GetTransitGatewayPolicyTableAssociations","List","control",[90],[16],1],["ec2:GetTransitGatewayPolicyTableEntries","List","control",[90],[16],1],["ec2:GetTransitGatewayPrefixListReferences","List","control",[90],[16],1],["ec2:GetTransitGatewayRouteTableAssociations","List","control",[90],[16],1],["ec2:GetTransitGatewayRouteTablePropagations","List","control",[90],[16],1],["ec2:GetVerifiedAccessEndpointPolicy","List","control",[90],[16],1],["ec2:GetVerifiedAccessEndpointTargets","List","control",[90],[16],1],["ec2:GetVerifiedAccessGroupPolicy","List","control",[90],[16],1],["ec2:GetVerifiedAccessInstanceWebAcl","List","unclassified",[90],[16],1],["ec2:GetVpcResourcesBlockingEncryptionEnforcement","List","control",[90],[16],1],["ec2:GetVpnConnectionDeviceSampleConfiguration","List","control",[90],[16],1],["ec2:GetVpnConnectionDeviceTypes","List","control",[90],[16],1],["ec2:GetVpnTunnelReplacementStatus","List","control",[90],[16],1],["ec2:ModifyInstanceAttribute","Write","control",[94],[7],2],["ec2:ModifyInstancePlacement","Write","control",[95],[7],2],["ec2:ModifyNetworkInterfaceAttribute","Write","control",[96],[7],2],["ec2:ModifySubnetAttribute","Write","control",[97],[7],2],["ec2:ModifyVolume","Write","control",[98],[7],2],["ec2:ModifyVolumeAttribute","Write","control",[99],[7],2],["ec2:ModifyVpcAttribute","Write","control",[100],[7],2],["ec2:ReleaseAddress","Write","control",[101],[7],2],["ec2:ReplaceRoute","Write","control",[102],[7],2],["ec2:ReplaceRouteTableAssociation","Write","control",[103],[7],2],["ec2:RevokeSecurityGroupEgress","Write","control",[104],[7],2],["ec2:RevokeSecurityGroupIngress","Write","control",[105],[7],2],["ec2:RunInstances","Write","control",[106],[7],2],["ec2:StartInstances","Write","control",[107],[7],2],["ec2:StopInstances","Write","control",[108],[9],2],["ec2:TerminateInstances","Write","control",[109],[9],2]]},{"prefix":"elasticfilesystem","rows":[["elasticfilesystem:CreateFileSystem","Write","control",[110],[24],1],["elasticfilesystem:CreateMountTarget","Write","control",[111],[24],1],["elasticfilesystem:DeleteFileSystem","Write","control",[112],[7],2],["elasticfilesystem:DeleteMountTarget","Write","control",[113],[7],2],["elasticfilesystem:DescribeFileSystems","List","control",[114],[24],1],["elasticfilesystem:DescribeMountTargetSecurityGroups","Read","control",[115],[24],1],["elasticfilesystem:DescribeMountTargets","Read","control",[116],[24],1],["elasticfilesystem:TagResource","Tagging","control",[117],[39],6],["elasticfilesystem:UntagResource","Tagging","control",[118],[39],6]]},{"prefix":"fsx","rows":[["fsx:CreateFileSystem","Write","control",[119],[35],2],["fsx:DeleteFileSystem","Write","control",[120],[34],2],["fsx:DescribeFileSystems","Read","control",[121],[36],1],["fsx:ListTagsForResource","Read","control",[122],[34],2],["fsx:TagResource","Tagging","control",[123],[34],2],["fsx:UntagResource","Tagging","control",[124],[34],2]]},{"prefix":"iam","rows":[["iam:AddRoleToInstanceProfile","Write","control",[125],[10],4],["iam:CreateInstanceProfile","Write","control",[126],[10],4],["iam:CreateServiceLinkedRole","Write","control",[127],[20],2],["iam:DeleteInstanceProfile","Write","control",[128],[10],4],["iam:GetInstanceProfile","Read","control",[129],[23],4],["iam:GetPolicy","Read","control",[130],[16],1],["iam:GetPolicyVersion","Read","control",[131],[16],1],["iam:GetRole","Read","control",[132],[16],1],["iam:GetRolePolicy","Read","control",[133],[16],1],["iam:GetUser","Read","control",[134],[16],1],["iam:ListAccessKeys","List","control",[135],[16],1],["iam:ListAccountAliases","List","control",[135],[16],1],["iam:ListAttachedGroupPolicies","List","control",[135],[16],1],["iam:ListAttachedRolePolicies","List","control",[135],[16],1],["iam:ListAttachedUserPolicies","List","control",[135],[16],1],["iam:ListCloudFrontPublicKeys","List","unclassified",[135],[16],1],["iam:ListDelegationRequests","List","control",[135],[16],1],["iam:ListEntitiesForPolicy","List","control",[135],[16],1],["iam:ListGroupPolicies","List","control",[135],[16],1],["iam:ListGroups","List","control",[135],[16],1],["iam:ListGroupsForUser","List","control",[135],[16],1],["iam:ListInstanceProfileTags","List","control",[135],[16],1],["iam:ListInstanceProfiles","List","control",[135],[16],1],["iam:ListInstanceProfilesForRole","List","control",[135],[16],1],["iam:ListMFADeviceTags","List","control",[135],[16],1],["iam:ListMFADevices","List","control",[135],[16],1],["iam:ListOpenIDConnectProviderTags","List","control",[135],[16],1],["iam:ListOpenIDConnectProviders","List","control",[135],[16],1],["iam:ListOrganizationsFeatures","List","unclassified",[135],[16],1],["iam:ListPolicies","List","control",[135],[16],1],["iam:ListPoliciesGrantingServiceAccess","List","control",[135],[16],1],["iam:ListPolicyTags","List","control",[135],[16],1],["iam:ListPolicyVersions","List","control",[135],[16],1],["iam:ListRolePolicies","List","control",[135],[16],1],["iam:ListRoleTags","List","control",[135],[16],1],["iam:ListRoles","List","control",[135],[16],1],["iam:ListSAMLProviderTags","List","control",[135],[16],1],["iam:ListSAMLProviders","List","control",[135],[16],1],["iam:ListSSHPublicKeys","List","control",[135],[16],1],["iam:ListSTSRegionalEndpointsStatus","List","unclassified",[135],[16],1],["iam:ListServerCertificateTags","List","control",[135],[16],1],["iam:ListServerCertificates","List","control",[135],[16],1],["iam:ListServiceSpecificCredentials","List","control",[135],[16],1],["iam:ListSigningCertificates","List","control",[135],[16],1],["iam:ListUserPolicies","List","control",[135],[16],1],["iam:ListUserTags","List","control",[135],[16],1],["iam:ListUsers","List","control",[135],[16],1],["iam:ListVirtualMFADevices","List","control",[135],[16],1],["iam:PassRole","Write","control",[136],[11],6],["iam:RemoveRoleFromInstanceProfile","Write","control",[137],[10],4]]},{"prefix":"kms","rows":[["kms:ListAliases","List","control",[138],[4],1],["kms:ListKeys","List","control",[139],[4],1]]},{"prefix":"lambda","rows":[["lambda:CreateFunction","Write","control",[140],[27],4],["lambda:DeleteFunction","Write","control",[141],[27],4],["lambda:GetFunction","Read","control",[142],[27],4],["lambda:GetFunctionConfiguration","Read","control",[143],[27],4],["lambda:InvokeFunction","Write","data",[144],[27],4]]},{"prefix":"launchwizard","rows":[["launchwizard:CreateAdditionalNode","Write","unclassified",[145],[21],1],["launchwizard:CreateDeployment","Write","control",[145],[21],1],["launchwizard:CreateSettingsSet","Write","unclassified",[145],[21],1],["launchwizard:DeleteAdditionalNode","Write","unclassified",[145],[21],1],["launchwizard:DeleteApp","Write","unclassified",[145],[21],1],["launchwizard:DeleteDeployment","Write","control",[145],[21],1],["launchwizard:DeleteSettingsSet","Write","unclassified",[145],[21],1],["launchwizard:DescribeAdditionalNode","Read","unclassified",[145],[21],1],["launchwizard:DescribeProvisionedApp","Read","unclassified",[145],[21],1],["launchwizard:DescribeProvisioningEvents","Read","unclassified",[145],[21],1],["launchwizard:DescribeSettingsSet","Read","unclassified",[145],[21],1],["launchwizard:GetDeployment","Read","control",[145],[21],1],["launchwizard:GetDeploymentPatternVersion","Read","control",[145],[21],1],["launchwizard:GetInfrastructureSuggestion","Read","unclassified",[145],[21],1],["launchwizard:GetIpAddress","Read","unclassified",[145],[21],1],["launchwizard:GetResourceCostEstimate","Read","unclassified",[145],[21],1],["launchwizard:GetResourceRecommendation","Read","unclassified",[145],[21],1],["launchwizard:GetSettingsSet","Read","unclassified",[145],[21],1],["launchwizard:GetWorkload","Read","control",[145],[21],1],["launchwizard:GetWorkloadAsset","Read","unclassified",[145],[21],1],["launchwizard:GetWorkloadAssets","Read","unclassified",[145],[21],1],["launchwizard:GetWorkloadDeploymentPattern","Read","control",[145],[21],1],["launchwizard:ListAdditionalNodes","List","unclassified",[145],[21],1],["launchwizard:ListAllowedResources","List","unclassified",[145],[21],1],["launchwizard:ListDeploymentEvents","List","control",[145],[21],1],["launchwizard:ListDeploymentPatternVersions","List","control",[145],[21],1],["launchwizard:ListDeployments","List","control",[145],[21],1],["launchwizard:ListProvisionedApps","List","unclassified",[145],[21],1],["launchwizard:ListResourceCostEstimates","List","unclassified",[145],[21],1],["launchwizard:ListSettingsSets","List","unclassified",[145],[21],1],["launchwizard:ListTagsForResource","Read","control",[145],[21],1],["launchwizard:ListWorkloadDeploymentOptions","List","unclassified",[145],[21],1],["launchwizard:ListWorkloadDeploymentPatterns","List","control",[145],[21],1],["launchwizard:ListWorkloads","List","control",[145],[21],1],["launchwizard:PutSettingsSet","Write","unclassified",[145],[21],1],["launchwizard:StartProvisioning","Write","unclassified",[145],[21],1],["launchwizard:TagResource","Tagging","control",[145],[21],1],["launchwizard:UntagResource","Tagging","control",[145],[21],1],["launchwizard:UpdateDeployment","Write","control",[145],[21],1],["launchwizard:UpdateSettingsSet","Write","unclassified",[145],[21],1]]},{"prefix":"logs","rows":[["logs:CreateLogGroup","Write","control",[146],[16],1],["logs:CreateLogStream","Write","control",[147],[12],4],["logs:DeleteLogGroup","Write","control",[148],[12],4],["logs:DeleteLogStream","Write","control",[149],[12,15],4],["logs:DescribeLogGroups","List","control",[150],[12],4],["logs:DescribeLogStreams","List","control",[150],[12],4],["logs:GetLogAnomalyDetector","Read","control",[151],[18],4],["logs:GetLogDelivery","Read","unclassified",[151,152],[16,18],1],["logs:GetLogEvents","Read","control",[151,153],[15,18],4],["logs:GetLogFields","Read","control",[151],[18],4],["logs:GetLogGroupFields","Read","control",[151],[18],4],["logs:GetLogRecord","Read","control",[151,154],[16,18],1],["logs:ListLogDeliveries","List","unclassified",[155],[16],1],["logs:PutLogEvents","Write","unclassified",[156],[12,15],4],["logs:TagResource","Tagging","control",[157],[40],6],["logs:UntagResource","Tagging","control",[158],[40],6]]},{"prefix":"resource-groups","rows":[["resource-groups:CreateGroup","Write","control",[159],[12],4],["resource-groups:DeleteGroup","Write","control",[160],[12],4],["resource-groups:GetAccountSettings","Read","control",[161],[16],1],["resource-groups:GetGroup","Read","control",[161],[16],1],["resource-groups:GetGroupConfiguration","Read","control",[161],[16],1],["resource-groups:GetGroupPolicy","Read","unclassified",[161],[16],1],["resource-groups:GetGroupQuery","Read","control",[161],[16],1],["resource-groups:GetTagSyncTask","Read","control",[161],[16],1],["resource-groups:GetTags","Read","control",[161],[16],1],["resource-groups:ListGroupResources","List","control",[162],[1,16],1],["resource-groups:ListGroupingStatuses","List","control",[162],[1,16],1],["resource-groups:ListGroups","List","control",[162],[1,16],1],["resource-groups:ListResourceTypes","List","unclassified",[162],[1,16],1],["resource-groups:ListTagSyncTasks","List","control",[162],[1,16],1]]},{"prefix":"route53","rows":[["route53:ChangeResourceRecordSets","Write","control",[163],[2],1],["route53:GetChange","List","control",[164],[2],1],["route53:ListHostedZones","List","control",[165],[2,24],1],["route53:ListHostedZonesByName","List","control",[166],[2],1],["route53:ListResourceRecordSets","List","control",[167],[2],1]]},{"prefix":"s3","rows":[["s3:CreateBucket","Write","control",[168],[27],4],["s3:DeleteBucket","Write","control",[169],[27],4],["s3:GetBucketLocation","Read","control",[170],[3],1],["s3:GetObject","Read","data",[171],[25],4],["s3:ListAllMyBuckets","List","control",[172],[3],1],["s3:ListBucket","List","data",[173],[3],1],["s3:PutBucketVersioning","Write","control",[174],[27],4],["s3:PutObject","Write","data",[175],[25],4]]},{"prefix":"secretsmanager","rows":[["secretsmanager:CreateSecret","Write","control",[176],[29],4],["secretsmanager:DeleteResourcePolicy","Permissions management","control",[177],[29],4],["secretsmanager:DeleteSecret","Write","control",[178],[29],4],["secretsmanager:GetRandomPassword","Read","control",[179],[30],1],["secretsmanager:GetSecretValue","Read","control",[180],[29],4],["secretsmanager:ListSecretVersionIds","Read","control",[181],[29],4],["secretsmanager:ListSecrets","List","control",[182],[30],1],["secretsmanager:PutResourcePolicy","Permissions management","control",[183],[29],4],["secretsmanager:TagResource","Tagging","control",[184],[29],4],["secretsmanager:UntagResource","Tagging","control",[185],[29],4]]},{"prefix":"servicecatalog","rows":[["servicecatalog:AssociatePrincipalWithPortfolio","Write","control",[186],[37],6],["servicecatalog:AssociateProductWithPortfolio","Write","control",[187],[7],2],["servicecatalog:CreateConstraint","Write","control",[188],[37],6],["servicecatalog:CreatePortfolio","Write","control",[189],[37],6],["servicecatalog:CreateProduct","Write","control",[190],[37],6],["servicecatalog:CreateProvisioningArtifact","Write","control",[191],[37],6],["servicecatalog:DescribePortfolio","Read","control",[192],[37],6],["servicecatalog:TagResource","Tagging","control",[193],[37],6],["servicecatalog:UntagResource","Tagging","control",[194],[37],6]]},{"prefix":"servicequotas","rows":[["servicequotas:GetServiceQuota","Read","control",[195],[16],1],["servicequotas:ListServiceQuotas","Read","control",[196],[16],1]]},{"prefix":"sns","rows":[["sns:CreateTopic","Write","control",[197],[33],4],["sns:DeleteTopic","Write","control",[198],[33],4],["sns:ListSubscriptions","List","control",[199],[16],1],["sns:ListSubscriptionsByTopic","List","control",[200],[12],4],["sns:ListTopics","List","control",[201],[16],1],["sns:Publish","Write","data",[202],[12],4],["sns:Subscribe","Write","control",[203],[33],4],["sns:Unsubscribe","Write","control",[204],[33],4]]},{"prefix":"sqs","rows":[["sqs:AddPermission","Permissions management","unclassified",[205],[22],4],["sqs:CreateQueue","Write","unclassified",[206],[22],4],["sqs:DeleteQueue","Write","unclassified",[207],[22],4],["sqs:GetQueueAttributes","Read","unclassified",[208],[22],4],["sqs:GetQueueUrl","Read","unclassified",[209],[22],4],["sqs:ListQueueTags","Read","unclassified",[210],[22],4],["sqs:ListQueues","Read","unclassified",[211],[22],4],["sqs:SetQueueAttributes","Permissions management","unclassified",[212],[22],4],["sqs:TagQueue","Tagging","unclassified",[213],[22],4]]},{"prefix":"ssm","rows":[["ssm:AddTagsToResource","Tagging","control",[214],[15],4],["ssm:CreateAssociation","Write","control",[215],[38],6],["ssm:CreateDocument","Write","control",[216],[16],1],["ssm:CreateOpsMetadata","Write","control",[217],[31],1],["ssm:DeleteAssociation","Write","control",[218],[38],6],["ssm:DeleteDocument","Write","control",[219],[12],4],["ssm:DeleteOpsMetadata","Write","control",[220],[32],4],["ssm:DeleteParameter","Write","control",[221],[12],4],["ssm:DeleteParameters","Write","control",[221],[12],4],["ssm:DescribeAutomationExecutions","Read","control",[222],[16],1],["ssm:DescribeAutomationStepExecutions","Read","control",[222],[16],1],["ssm:DescribeDocument","Read","control",[223,224],[12,15],4],["ssm:DescribeDocumentParameters","Read","unclassified",[224],[12],4],["ssm:DescribeDocumentPermission","Read","control",[224],[12],4],["ssm:DescribeInstanceInformation","Read","control",[225],[16],1],["ssm:DescribeParameters","List","control",[226],[16],1],["ssm:GetAutomationExecution","Read","control",[227],[16],1],["ssm:GetCommandInvocation","Read","control",[228],[16],1],["ssm:GetConnectionStatus","Read","control",[229],[16],1],["ssm:GetDocument","Read","control",[230],[12,13,15],4],["ssm:GetParameter","Read","control",[231],[16],1],["ssm:GetParameterHistory","Read","control",[231],[16],1],["ssm:GetParameters","Read","control",[231],[16],1],["ssm:GetParametersByPath","Read","control",[231],[16],1],["ssm:ListCommandInvocations","List","control",[232],[16],1],["ssm:ListCommands","List","control",[232],[16],1],["ssm:ListDocumentMetadataHistory","List","control",[233],[16],1],["ssm:ListDocumentVersions","List","control",[233],[16],1],["ssm:ListDocuments","List","control",[233],[16],1],["ssm:ListInstanceAssociations","List","unclassified",[234],[16],1],["ssm:ListTagsForResource","List","control",[235],[15],4],["ssm:PutParameter","Write","control",[236],[12],4],["ssm:RemoveTagsFromResource","Tagging","control",[237],[15],4],["ssm:SendAutomationSignal","Write","control",[238],[16],1],["ssm:SendCommand","Write","control",[239],[13,14],4],["ssm:StartAutomationExecution","Write","control",[240],[17],6],["ssm:StopAutomationExecution","Write","control",[241],[17],6]]},{"prefix":"sts","rows":[["sts:GetCallerIdentity","Read","control",[242],[7],2]]},{"prefix":"tag","rows":[["tag:GetComplianceSummary","Read","control",[243],[16],1],["tag:GetResources","Read","control",[243],[16],1],["tag:GetTagKeys","Read","control",[243],[16],1],["tag:GetTagValues","Read","control",[243],[16],1]]}],"snapshot":"2026-11-13"}