AmazonLexReadOnly

ReaderAWS managedActivePermissions reviewedShow on map Compare

Summary

Provides read-only access to Amazon Lex.

Permissions imported from the AWS Managed Policy Reference Guide; other sections pending editorial review.

Identity

ARN: arn:aws:iam::aws:policy/AmazonLexReadOnly
Default version: v5
Created: 2017-04-11
Last edited: 2024-05-13
Services: lex

Control-plane actions (50)

By access level: 28 List, 22 Read.

Control-plane actions by service
Service	Granted	Access levels and limits	Granted by
Lex	50 of 146	28 List, 22 Read; 0 restricted, 0 conditional	lex:DescribeBot, lex:DescribeBotAlias, lex:DescribeBotChannel, lex:DescribeBotLocale, lex:DescribeBotRecommendation, lex:DescribeBotReplica, lex:DescribeBotVersion, lex:DescribeExport, lex:DescribeImport, lex:DescribeIntent, lex:DescribeResourcePolicy, lex:DescribeSlot and 38 more

Lex: 50 actions

lex:DescribeBot (Read)
lex:DescribeBotAlias (Read)
lex:DescribeBotChannel (Read)
lex:DescribeBotLocale (Read)
lex:DescribeBotRecommendation (Read)
lex:DescribeBotReplica (Read)
lex:DescribeBotVersion (Read)
lex:DescribeExport (Read)
lex:DescribeImport (Read)
lex:DescribeIntent (Read)
lex:DescribeResourcePolicy (Read)
lex:DescribeSlot (Read)
lex:DescribeSlotType (Read)
lex:GetBot (Read)
lex:GetBotAlias (Read)
lex:GetBotAliases (List)
lex:GetBotChannelAssociation (Read)
lex:GetBotChannelAssociations (List)
lex:GetBotVersions (List)
lex:GetBots (List)
lex:GetBuiltinIntent (Read)
lex:GetBuiltinIntents (Read)
lex:GetBuiltinSlotTypes (Read)
lex:GetIntent (Read)
lex:GetIntentVersions (List)
lex:GetIntents (List)
lex:GetSlotType (Read)
lex:GetSlotTypeVersions (List)
lex:GetSlotTypes (List)
lex:GetUtterancesView (List)
lex:ListBotAliasReplicas (List)
lex:ListBotAliases (List)
lex:ListBotChannels (List)
lex:ListBotLocales (List)
lex:ListBotRecommendations (List)
lex:ListBotReplicas (List)
lex:ListBotVersionReplicas (List)
lex:ListBotVersions (List)
lex:ListBots (List)
lex:ListBuiltInIntents (List)
lex:ListBuiltInSlotTypes (List)
lex:ListCustomVocabularyItems (List)
lex:ListExports (List)
lex:ListImports (List)
lex:ListIntents (List)
lex:ListRecommendedIntents (List)
lex:ListSlotTypes (List)
lex:ListSlots (List)
lex:ListTagsForResource (Read)
lex:SearchAssociatedTranscripts (List)

Data-plane actions (0)

By access level: none.

This policy grants no actions in this plane.

Excluded and conditional actions

No patterns are excluded by NotAction or Deny statements.

Resource scope and attachment

Resource scope across granted actions: all-resources.

Can be attached: Yes, to users, groups and roles.

Why this tier

Grants only List and Read actions.

Guidance

Pending editorial review. The permission data on this page comes straight from AWS; this section will be filled in once a reviewed guide exists.

Same service

Same domain

Frequently asked questions

Pending editorial review. The permission data on this page comes straight from AWS; this section will be filled in once a reviewed guide exists.

Policy JSON

Download policy.json

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AmazonLexReadOnlyStatement1",
      "Effect": "Allow",
      "Action": [
        "lex:GetBot",
        "lex:GetBotAlias",
        "lex:GetBotAliases",
        "lex:GetBots",
        "lex:GetBotChannelAssociation",
        "lex:GetBotChannelAssociations",
        "lex:GetBotVersions",
        "lex:GetBuiltinIntent",
        "lex:GetBuiltinIntents",
        "lex:GetBuiltinSlotTypes",
        "lex:GetIntent",
        "lex:GetIntents",
        "lex:GetIntentVersions",
        "lex:GetSlotType",
        "lex:GetSlotTypes",
        "lex:GetSlotTypeVersions",
        "lex:GetUtterancesView",
        "lex:DescribeBot",
        "lex:DescribeBotAlias",
        "lex:DescribeBotChannel",
        "lex:DescribeBotLocale",
        "lex:DescribeBotRecommendation",
        "lex:DescribeBotReplica",
        "lex:DescribeBotVersion",
        "lex:DescribeExport",
        "lex:DescribeImport",
        "lex:DescribeIntent",
        "lex:DescribeResourcePolicy",
        "lex:DescribeSlot",
        "lex:DescribeSlotType",
        "lex:ListBots",
        "lex:ListBotLocales",
        "lex:ListBotAliases",
        "lex:ListBotAliasReplicas",
        "lex:ListBotChannels",
        "lex:ListBotRecommendations",
        "lex:ListBotReplicas",
        "lex:ListBotVersions",
        "lex:ListBotVersionReplicas",
        "lex:ListBuiltInIntents",
        "lex:ListBuiltInSlotTypes",
        "lex:ListExports",
        "lex:ListImports",
        "lex:ListIntents",
        "lex:ListRecommendedIntents",
        "lex:ListSlots",
        "lex:ListSlotTypes",
        "lex:ListTagsForResource",
        "lex:SearchAssociatedTranscripts",
        "lex:ListCustomVocabularyItems"
      ],
      "Resource": "*"
    }
  ]
}

Version history

Current version v5, edited by AWS on 2024-05-13. Version history is recorded from 2026-11-11. Earlier versions are in the IAM console under Policy versions.

Attach snippets

AWS CLI

aws iam attach-role-policy --role-name ROLE_NAME --policy-arn arn:aws:iam::aws:policy/AmazonLexReadOnly
aws iam attach-user-policy --user-name USER_NAME --policy-arn arn:aws:iam::aws:policy/AmazonLexReadOnly
aws iam attach-group-policy --group-name GROUP_NAME --policy-arn arn:aws:iam::aws:policy/AmazonLexReadOnly

CloudFormation

Resources:
  ExampleRole:
    Type: AWS::IAM::Role
    Properties:
      AssumeRolePolicyDocument: {}  # replace with your trust policy
      ManagedPolicyArns:
        - arn:aws:iam::aws:policy/AmazonLexReadOnly

Terraform

resource "aws_iam_role_policy_attachment" "amazonlexreadonly" {
  role       = aws_iam_role.example.name
  policy_arn = "arn:aws:iam::aws:policy/AmazonLexReadOnly"
}

CDK (TypeScript)

role.addManagedPolicy(
  iam.ManagedPolicy.fromAwsManagedPolicyName("AmazonLexReadOnly"),
);

Sources

Pending editorial review. No editorial sources are listed yet.