AWSConfigServiceRolePolicy

Summary

Allows Config to call AWS services and collect resource configurations on your behalf.

Permissions imported from the AWS Managed Policy Reference Guide; other sections pending editorial review.

Identity

ARN

arn:aws:iam::aws:policy/aws-service-role/AWSConfigServiceRolePolicyCopy ARN

Default version

v97

Created

2018-05-30

Last edited

2026-10-28

Services

access-analyzer, account, account-access, acm, acm-pca, aidevops, aiops, airflow, amplify, amplifyuibuilder, aoss, apigateway, app-integrations, appconfig, appflow, application-autoscaling, application-signals, applicationinsights, appmesh, apprunner, appstream, appsync, apptest, aps, arc-region-switch, arc-zonal-shift, athena, auditmanager, autoscaling, autoscaling-plans, b2bi, backup, backup-gateway, batch, bcm-dashboards, bcm-data-exports, bedrock, bedrock-agentcore, billing, billingconductor, braket, budgets, cases, cassandra, ce, chime, cleanrooms, cleanrooms-ml, cloud9, cloudformation, cloudfront, cloudtrail, cloudwatch, codeartifact, codebuild, codecommit, codeconnections, codedeploy, codeguru-profiler, codeguru-reviewer, codepipeline, codestar-connections, cognito-identity, cognito-idp, comprehend, config, connect, connect-campaigns, controltower, cur, databrew, datasync, datazone, dax, deadline, detective, devicefarm, devops-guru, directconnect, dms, docdb-elastic, ds, dsql, dynamodb, ec2, ecr, ecr-public, ecs, eks, elasticache, elasticbeanstalk, elasticfilesystem, elasticloadbalancing, elasticmapreduce, elemental-inference, emr-containers, emr-serverless, entityresolution, es, events, finspace, firehose, fis, fms, forecast, frauddetector, fsx, gamelift, gameliftstreams, geo, globalaccelerator, glue, grafana, greengrass, groundstation, guardduty, healthlake, iam, identitystore, imagebuilder, inspector2, internetmonitor, invoicing, iot, iotanalytics, iotdeviceadvisor, iotfleethub, iotfleetwise, iotsitewise, iottwinmaker, iotwireless, ivs, ivschat, kafka, kafkaconnect, kendra, kendra-ranking, kinesis, kinesisanalytics, kinesisvideo, kms, lakeformation, lambda, launchwizard, lex, license-manager, lightsail, logs, lookoutequipment, lookoutmetrics, lookoutvision, m2, macie2, managedblockchain, mediaconnect, medialive, mediapackage-vod, mediapackagev2, mediatailor, medical-imaging, memorydb, mobiletargeting, mpa, mq, neptune-graph, network-firewall, networkmanager, nimble, notifications, notifications-contacts, nova-act, oam, odb, omics, opsworks, organizations, osis, outposts, panorama, payment-cryptography, pca-connector-ad, pca-connector-scep, pcs, personalize, pipes, profile, qbusiness, quicksight, ram, rds, redshift, redshift-serverless, refactor-spaces, rekognition, resiliencehub, resource-explorer-2, resource-groups, robomaker, rolesanywhere, route53, route53-recovery-control-config, route53-recovery-readiness, route53profiles, route53resolver, rtbfabric, rum, s3, s3-outposts, s3express, s3files, s3tables, s3vectors, sagemaker, scheduler, schemas, sdb, secretsmanager, securityagent, securityhub, securitylake, servicecatalog, servicediscovery, ses, shield, signer, sms-voice, sns, sqs, ssm, ssm-contacts, ssm-guiconnect, ssm-incidents, ssm-quicksetup, ssm-sap, sso, states, storagegateway, sts, support, synthetics, tag, textract, timestream, timestream-influxdb, transcribe, transfer, verifiedpermissions, voiceid, vpc-lattice, waf, waf-regional, wafv2, wisdom, workspaces, workspaces-web, xray

Control-plane actions (2847)

By access level: 1270 List, 2 Permissions management, 1554 Read, 21 Write.

The full action list is in actions.json.

Data-plane actions (8)

By access level: 3 List, 5 Read.

The full action list is in actions.json.

Excluded and conditional actions

No patterns are excluded by NotAction or Deny statements.

Resource scope and attachment

Resource scope across granted actions: mixed.

Can be attached: No (service-linked role policy).

Why this tier

• Grants 23 write, tagging or permissions-management actions, short of full control of any service.

Guidance

Pending editorial review. The permission data on this page comes straight from AWS; this section will be filled in once a reviewed guide exists.

Related policies

Same domain

• AdministratorAccess-AWSElasticBeanstalk
• AIDevOpsReleaseManagementVPCPolicy
• AmazonAppStreamServiceAccess
• AmazonBioDiscoveryServiceLinkedRolePolicy
• AmazonBraketJobsExecutionPolicy
• AmazonDMSVPCManagementRole
• AmazonDRSVPCManagement
• AmazonEBSCSIDriverEKSClusterScopedPolicy

Frequently asked questions

Pending editorial review. The permission data on this page comes straight from AWS; this section will be filled in once a reviewed guide exists.

Policy JSON

Download policy.json

This document is large, so it is shown compact here. Use the formatted policy.json to read it with indentation.

{"Version":"2012-10-17","Statement":[{"Sid":"AWSConfigServiceRolePolicyStatementID1","Effect":"Allow","Action":["access-analyzer:CheckNoPublicAccess","access-analyzer:GetAnalyzer","access-analyzer:GetArchiveRule","access-analyzer:ListAnalyzers","access-analyzer:ListArchiveRules","access-analyzer:ListTagsForResource","access-analyzer:ValidatePolicy","account-access:GetEntitlement","account-access:ListEntitlements","account:GetAlternateContact","acm-pca:DescribeCertificateAuthority","acm-pca:GetCertificateAuthorityCertificate","acm-pca:GetCertificateAuthorityCsr","acm-pca:ListCertificateAuthorities","acm-pca:ListTags","acm:DescribeCertificate","acm:GetAccountConfiguration","acm:ListCertificates","acm:ListTagsForCertificate","aidevops:DescribePrivateConnection","aidevops:GetAgentSpace","aidevops:GetOperatorApp","aidevops:GetService","aidevops:GetTrigger","aidevops:ListAgentSpaces","aidevops:ListPrivateConnections","aidevops:ListServices","aidevops:ListTagsForResource","aidevops:ListTriggers","aiops:GetInvestigationGroup","aiops:GetInvestigationGroupPolicy","aiops:ListInvestigationGroups","aiops:ListTagsForResource","airflow:GetEnvironment","airflow:ListEnvironments","airflow:ListTagsForResource","amplify:GetApp","amplify:GetBranch","amplify:GetDomainAssociation","amplify:ListApps","amplify:ListBranches","amplify:ListDomainAssociations","amplify:ListTagsForResource","amplifyuibuilder:ExportThemes","amplifyuibuilder:GetTheme","amplifyuibuilder:ListForms","amplifyuibuilder:ListThemes","aoss:BatchGetCollection","aoss:BatchGetCollectionGroup","aoss:BatchGetLifecyclePolicy","aoss:BatchGetVpcEndpoint","aoss:GetAccessPolicy","aoss:GetSecurityConfig","aoss:GetSecurityPolicy","aoss:ListAccessPolicies","aoss:ListCollectionGroups","aoss:ListCollections","aoss:ListLifecyclePolicies","aoss:ListSecurityConfigs","aoss:ListSecurityPolicies","aoss:ListTagsForResource","aoss:ListVpcEndpoints","app-integrations:GetApplication","app-integrations:GetDataIntegration","app-integrations:GetEventIntegration","app-integrations:ListApplications","app-integrations:ListDataIntegrations","app-integrations:ListEventIntegrationAssociations","app-integrations:ListEventIntegrations","app-integrations:ListTagsForResource","appconfig:GetApplication","appconfig:GetConfigurationProfile","appconfig:GetDeployment","appconfig:GetDeploymentStrategy","appconfig:GetEnvironment","appconfig:GetExperimentDefinition","appconfig:GetExtension","appconfig:GetExtensionAssociation","appconfig:GetHostedConfigurationVersion","appconfig:ListApplications","appconfig:ListConfigurationProfiles","appconfig:ListDeployments","appconfig:ListDeploymentStrategies","appconfig:ListEnvironments","appconfig:ListExperimentDefinitions","appconfig:ListExtensionAssociations","appconfig:ListExtensions","appconfig:ListHostedConfigurationVersions","appconfig:ListTagsForResource","appflow:DescribeConnectorProfiles","appflow:DescribeFlow","appflow:ListFlows","appflow:ListTagsForResource","application-autoscaling:DescribeScalableTargets","application-autoscaling:DescribeScalingPolicies","application-autoscaling:DescribeScheduledActions","application-signals:GetServiceLevelObjective","application-signals:ListServiceLevelObjectiveExclusionWindows","application-signals:ListServiceLevelObjectives","application-signals:ListServices","application-signals:ListTagsForResource","applicationinsights:DescribeApplication","applicationinsights:DescribeComponent","applicationinsights:DescribeLogPattern","applicationinsights:ListApplications","applicationinsights:ListComponents","applicationinsights:ListLogPatterns","applicationinsights:ListLogPatternSets","applicationinsights:ListTagsForResource","appmesh:DescribeGatewayRoute","appmesh:DescribeMesh","appmesh:DescribeRoute","appmesh:DescribeVirtualGateway","appmesh:DescribeVirtualNode","appmesh:DescribeVirtualRouter","appmesh:DescribeVirtualService","appmesh:ListGatewayRoutes","appmesh:ListMeshes","appmesh:ListRoutes","appmesh:ListTagsForResource","appmesh:ListVirtualGateways","appmesh:ListVirtualNodes","appmesh:ListVirtualRouters","appmesh:ListVirtualServices","apprunner:DescribeAutoScalingConfiguration","apprunner:DescribeObservabilityConfiguration","apprunner:DescribeService","apprunner:DescribeVpcConnector","apprunner:DescribeVpcIngressConnection","apprunner:ListAutoScalingConfigurations","apprunner:ListObservabilityConfigurations","apprunner:ListServices","apprunner:ListTagsForResource","apprunner:ListVpcConnectors","apprunner:ListVpcIngressConnections","appstream:DescribeAppBlockBuilders","appstream:DescribeAppBlocks","appstream:DescribeApplications","appstream:DescribeDirectoryConfigs","appstream:DescribeFleets","appstream:DescribeImageBuilders","appstream:DescribeStacks","appstream:ListAssociatedFleets","appstream:ListAssociatedStacks","appstream:ListTagsForResource","appsync:GetApi","appsync:GetApiAssociation","appsync:GetApiCache","appsync:GetChannelNamespace","appsync:GetDataSource","appsync:GetDomainName","appsync:GetGraphqlApi","appsync:GetResolver","appsync:GetSourceApiAssociation","appsync:ListApis","appsync:ListChannelNamespaces","appsync:ListDataSources","appsync:ListDomainNames","appsync:ListGraphqlApis","appsync:ListResolvers","appsync:ListSourceApiAssociations","appsync:ListTagsForResource","appsync:ListTypes","apptest:GetTestCase","apptest:ListTagsForResource","apptest:ListTestCases","aps:DescribeAlertManagerDefinition","aps:DescribeAnomalyDetector","aps:DescribeLoggingConfiguration","aps:DescribeQueryLoggingConfiguration","aps:DescribeResourcePolicy","aps:DescribeRuleGroupsNamespace","aps:DescribeScraper","aps:DescribeScraperLoggingConfiguration","aps:DescribeWorkspace","aps:DescribeWorkspaceConfiguration","aps:ListAnomalyDetectors","aps:ListRuleGroupsNamespaces","aps:ListScrapers","aps:ListTagsForResource","aps:ListWorkspaces","arc-region-switch:GetPlan","arc-region-switch:ListPlans","arc-region-switch:ListRoute53HealthChecks","arc-region-switch:ListTagsForResource","arc-zonal-shift:GetAutoshiftObserverNotificationStatus","athena:GetDataCatalog","athena:GetPreparedStatement","athena:GetWorkGroup","athena:ListDataCatalogs","athena:ListPreparedStatements","athena:ListTagsForResource","athena:ListWorkGroups","auditmanager:GetAccountStatus","auditmanager:GetAssessment","auditmanager:GetAssessmentFramework","auditmanager:GetControl","auditmanager:ListAssessmentFrameworks","auditmanager:ListAssessments","auditmanager:ListControls","autoscaling-plans:DescribeScalingPlanResources","autoscaling-plans:DescribeScalingPlans","autoscaling-plans:GetScalingPlanResourceForecastData","autoscaling:DescribeAutoScalingGroups","autoscaling:DescribeLaunchConfigurations","autoscaling:DescribeLifecycleHooks","autoscaling:DescribePolicies","autoscaling:DescribeScheduledActions","autoscaling:DescribeTags","autoscaling:DescribeWarmPool","b2bi:GetCapability","b2bi:GetPartnership","b2bi:GetProfile","b2bi:GetTransformer","b2bi:ListCapabilities","b2bi:ListPartnerships","b2bi:ListProfiles","b2bi:ListTagsForResource","b2bi:ListTransformers","backup-gateway:GetHypervisor","backup-gateway:ListHypervisors","backup-gateway:ListTagsForResource","backup-gateway:ListVirtualMachines","backup:DescribeBackupVault","backup:DescribeFramework","backup:DescribeProtectedResource","backup:DescribeRecoveryPoint","backup:DescribeReportPlan","backup:GetBackupPlan","backup:GetBackupSelection","backup:GetBackupVaultAccessPolicy","backup:GetBackupVaultNotifications","backup:GetRestoreTestingPlan","backup:GetRestoreTestingSelection","backup:GetTieringConfiguration","backup:ListBackupPlans","backup:ListBackupSelections","backup:ListBackupVaults","backup:ListFrameworks","backup:ListRecoveryPointsByBackupVault","backup:ListReportPlans","backup:ListRestoreTestingPlans","backup:ListRestoreTestingSelections","backup:ListTags","backup:ListTieringConfigurations","batch:DescribeComputeEnvironments","batch:DescribeConsumableResource","batch:DescribeJobDefinitions","batch:DescribeJobQueues","batch:DescribeQuotaShare","batch:DescribeSchedulingPolicies","batch:DescribeServiceEnvironments","batch:ListConsumableResources","batch:ListQuotaShares","batch:ListSchedulingPolicies","batch:ListTagsForResource","bcm-dashboards:GetDashboard","bcm-dashboards:ListDashboards","bcm-dashboards:ListTagsForResource","bcm-data-exports:GetExport","bcm-data-exports:ListExports","bcm-data-exports:ListTagsForResource","bedrock-agentcore:GetAgentRuntime","bedrock-agentcore:GetAgentRuntimeEndpoint","bedrock-agentcore:GetApiKeyCredentialProvider","bedrock-agentcore:GetBrowser","bedrock-agentcore:GetBrowserProfile","bedrock-agentcore:GetCodeInterpreter","bedrock-agentcore:GetConfigurationBundle","bedrock-agentcore:GetEvaluator","bedrock-agentcore:GetGateway","bedrock-agentcore:GetGatewayTarget","bedrock-agentcore:GetMemory","bedrock-agentcore:GetOauth2CredentialProvider","bedrock-agentcore:GetOnlineEvaluationConfig","bedrock-agentcore:GetPaymentConnector","bedrock-agentcore:GetPaymentCredentialProvider","bedrock-agentcore:GetPaymentManager","bedrock-agentcore:GetPolicy","bedrock-agentcore:GetPolicyEngine","bedrock-agentcore:GetPolicyEngineSummary","bedrock-agentcore:GetPolicyGeneration","bedrock-agentcore:GetPolicyGenerationSummary","bedrock-agentcore:GetPolicySummary","bedrock-agentcore:GetResourcePolicy","bedrock-agentcore:GetTokenVault","bedrock-agentcore:GetWorkloadIdentity","bedrock-agentcore:ListAgentRuntimeEndpoints","bedrock-agentcore:ListAgentRuntimes","bedrock-agentcore:ListApiKeyCredentialProviders","bedrock-agentcore:ListBrowserProfiles","bedrock-agentcore:ListBrowsers","bedrock-agentcore:ListCodeInterpreters","bedrock-agentcore:ListConfigurationBundles","bedrock-agentcore:ListEvaluators","bedrock-agentcore:ListGateways","bedrock-agentcore:ListGatewayTargets","bedrock-agentcore:ListMemories","bedrock-agentcore:ListOauth2CredentialProviders","bedrock-agentcore:ListOnlineEvaluationConfigs","bedrock-agentcore:ListPaymentConnectors","bedrock-agentcore:ListPaymentCredentialProviders","bedrock-agentcore:ListPaymentManagers","bedrock-agentcore:ListPolicies","bedrock-agentcore:ListPolicyEngines","bedrock-agentcore:ListPolicyEngineSummaries","bedrock-agentcore:ListPolicyGenerations","bedrock-agentcore:ListPolicyGenerationSummaries","bedrock-agentcore:ListPolicySummaries","bedrock-agentcore:ListTagsForResource","bedrock-agentcore:ListWorkloadIdentities","bedrock:GetAgent","bedrock:GetAgentActionGroup","bedrock:GetAgentAlias","bedrock:GetAgentCollaborator","bedrock:GetAgentKnowledgeBase","bedrock:GetAutomatedReasoningPolicy","bedrock:GetBlueprint","bedrock:GetDataAutomationProject","bedrock:GetDataSource","bedrock:GetEvaluationJob","bedrock:GetFlow","bedrock:GetFlowAlias","bedrock:GetFlowVersion","bedrock:GetFoundationModel","bedrock:GetGuardrail","bedrock:GetInferenceProfile","bedrock:GetKnowledgeBase","bedrock:GetModelInvocationLoggingConfiguration","bedrock:GetPromptRouter","bedrock:ListAgentActionGroups","bedrock:ListAgentAliases","bedrock:ListAgentCollaborators","bedrock:ListAgentKnowledgeBases","bedrock:ListAgents","bedrock:ListAutomatedReasoningPolicies","bedrock:ListBlueprints","bedrock:ListDataAutomationProjects","bedrock:ListDataSources","bedrock:ListEnforcedGuardrailsConfiguration","bedrock:ListEvaluationJobs","bedrock:ListFlowAliases","bedrock:ListFlows","bedrock:ListFlowVersions","bedrock:ListFoundationModels","bedrock:ListGuardrails","bedrock:ListInferenceProfiles","bedrock:ListKnowledgeBases","bedrock:ListPromptRouters","bedrock:ListPrompts","bedrock:ListTagsForResource","billing:GetBillingView","billing:ListBillingViews","billing:ListSourceViewsForBillingView","billing:ListTagsForResource","billingconductor:ListAccountAssociations","billingconductor:ListBillingGroups","billingconductor:ListCustomLineItems","billingconductor:ListPricingPlans","billingconductor:ListPricingRules","billingconductor:ListPricingRulesAssociatedToPricingPlan","billingconductor:ListTagsForResource","braket:ListTagsForResource","braket:SearchSpendingLimits","budgets:DescribeBudgetAction","budgets:DescribeBudgetActionsForAccount","budgets:DescribeBudgetActionsForBudget","budgets:ViewBudget","cases:BatchGetCaseRule","cases:BatchGetField","cases:GetDomain","cases:GetLayout","cases:GetTemplate","cases:ListCaseRules","cases:ListDomains","cases:ListFields","cases:ListLayouts","cases:ListTemplates","cassandra:GetStream","cassandra:ListStreams","cassandra:Select","cassandra:SelectMultiRegionResource","ce:DescribeCostCategoryDefinition","ce:GetAnomalyMonitors","ce:GetAnomalySubscriptions","ce:ListCostCategoryDefinitions","ce:ListTagsForResource","chime:DescribeAppInstance","chime:DescribeAppInstanceBot","chime:DescribeAppInstanceUser","chime:DescribeChannelFlow","chime:ListAppInstanceBots","chime:ListAppInstances","chime:ListChannelFlows","chime:ListTagsForResource","cleanrooms-ml:GetConfiguredModelAlgorithm","cleanrooms-ml:GetTrainingDataset","cleanrooms-ml:ListConfiguredModelAlgorithms","cleanrooms-ml:ListTrainingDatasets","cleanrooms:GetAnalysisTemplate","cleanrooms:GetCollaboration","cleanrooms:GetConfiguredAudienceModelAssociation","cleanrooms:GetConfiguredTable","cleanrooms:GetConfiguredTableAnalysisRule","cleanrooms:GetIdMappingTable","cleanrooms:GetIdNamespaceAssociation","cleanrooms:GetMembership","cleanrooms:GetPrivacyBudgetTemplate","cleanrooms:ListAnalysisTemplates","cleanrooms:ListCollaborations","cleanrooms:ListConfiguredTables","cleanrooms:ListIdMappingTables","cleanrooms:ListIdNamespaceAssociations","cleanrooms:ListMembers","cleanrooms:ListMemberships","cleanrooms:ListPrivacyBudgetTemplates","cleanrooms:ListTagsForResource","cloud9:DescribeEnvironmentMemberships","cloud9:DescribeEnvironments","cloud9:ListEnvironments","cloud9:ListTagsForResource","cloudformation:BatchDescribeTypeConfigurations","cloudformation:DescribeChangeSet","cloudformation:DescribePublisher","cloudformation:DescribeStackInstance","cloudformation:DescribeStacks","cloudformation:DescribeStackSet","cloudformation:DescribeType","cloudformation:GetResource","cloudformation:GetStackPolicy","cloudformation:GetTemplate","cloudformation:ListChangeSets","cloudformation:ListResources","cloudformation:ListStackInstances","cloudformation:ListStackResources","cloudformation:ListStacks","cloudformation:ListStackSets","cloudformation:ListTypes","cloudfront:DescribeFunction","cloudfront:DescribeKeyValueStore","cloudfront:GetAnycastIpList","cloudfront:GetCachePolicy","cloudfront:GetCloudFrontOriginAccessIdentity","cloudfront:GetConnectionGroup","cloudfront:GetContinuousDeploymentPolicy","cloudfront:GetDistributionTenant","cloudfront:GetFunction","cloudfront:GetKeyGroup","cloudfront:GetMonitoringSubscription","cloudfront:GetOriginAccessControl","cloudfront:GetOriginRequestPolicy","cloudfront:GetPublicKey","cloudfront:GetRealtimeLogConfig","cloudfront:GetResponseHeadersPolicy","cloudfront:GetVpcOrigin","cloudfront:ListAnycastIpLists","cloudfront:ListCachePolicies","cloudfront:ListCloudFrontOriginAccessIdentities","cloudfront:ListConnectionGroups","cloudfront:ListContinuousDeploymentPolicies","cloudfront:ListDistributions","cloudfront:ListDistributionTenants","cloudfront:ListFunctions","cloudfront:ListKeyGroups","cloudfront:ListKeyValueStores","cloudfront:ListOriginAccessControls","cloudfront:ListOriginRequestPolicies","cloudfront:ListPublicKeys","cloudfront:ListRealtimeLogConfigs","cloudfront:ListResponseHeadersPolicies","cloudfront:ListTagsForResource","cloudfront:ListVpcOrigins","cloudtrail:DescribeTrails","cloudTrail:GetChannel","cloudtrail:GetDashboard","cloudtrail:GetEventConfiguration","cloudtrail:GetEventDataStore","cloudtrail:GetEventSelectors","cloudtrail:GetInsightSelectors","cloudtrail:GetResourcePolicy","cloudtrail:GetTrail","cloudtrail:GetTrailStatus","cloudTrail:ListChannels","cloudtrail:ListDashboards","cloudtrail:ListEventDataStores","cloudtrail:ListTags","cloudtrail:ListTrails","cloudwatch:DescribeAlarms","cloudwatch:DescribeAlarmsForMetric","cloudwatch:DescribeAnomalyDetectors","cloudwatch:DescribeInsightRules","cloudwatch:GetAlarmMuteRule","cloudwatch:GetDashboard","cloudwatch:GetMetricStream","cloudwatch:ListAlarmMuteRules","cloudwatch:ListDashboards","cloudwatch:ListManagedInsightRules","cloudwatch:ListMetricStreams","cloudwatch:ListTagsForResource","codeartifact:DescribeDomain","codeartifact:DescribePackageGroup","codeartifact:DescribeRepository","codeartifact:GetDomainPermissionsPolicy","codeartifact:GetRepositoryPermissionsPolicy","codeartifact:ListAllowedRepositoriesForGroup","codeartifact:ListDomains","codeartifact:ListPackageGroups","codeartifact:ListPackages","codeartifact:ListPackageVersions","codeartifact:ListRepositories","codeartifact:ListTagsForResource","codebuild:BatchGetFleets","codebuild:BatchGetReportGroups","codebuild:ListFleets","codebuild:ListReportGroups","codebuild:ListSourceCredentials","codecommit:GetRepository","codecommit:GetRepositoryTriggers","codecommit:ListRepositories","codecommit:ListTagsForResource","codeconnections:GetConnection","codeconnections:ListConnections","codeconnections:ListTagsForResource","codedeploy:GetDeploymentConfig","codeguru-profiler:DescribeProfilingGroup","codeguru-profiler:GetNotificationConfiguration","codeguru-profiler:GetPolicy","codeguru-profiler:ListProfilingGroups","codeguru-reviewer:DescribeRepositoryAssociation","codeguru-reviewer:ListRepositoryAssociations","codepipeline:GetPipeline","codepipeline:GetPipelineState","codepipeline:ListActionTypes","codepipeline:ListPipelines","codepipeline:ListTagsForResource","codepipeline:ListWebhooks","codestar-connections:GetConnection","codestar-connections:GetRepositoryLink","codestar-connections:ListConnections","codestar-connections:ListRepositoryLinks","codestar-connections:ListTagsForResource","cognito-identity:DescribeIdentityPool","cognito-identity:GetIdentityPoolRoles","cognito-identity:GetPrincipalTagAttributeMap","cognito-identity:ListIdentityPools","cognito-identity:ListTagsForResource","cognito-idp:AdminGetUser","cognito-idp:AdminListGroupsForUser","cognito-idp:DescribeIdentityProvider","cognito-idp:DescribeManagedLoginBranding","cognito-idp:DescribeResourceServer","cognito-idp:DescribeTerms","cognito-idp:DescribeUserPool","cognito-idp:DescribeUserPoolClient","cognito-idp:DescribeUserPoolDomain","cognito-idp:GetGroup","cognito-idp:GetLogDeliveryConfiguration","cognito-idp:GetUICustomization","cognito-idp:GetUserPoolMfaConfig","cognito-idp:ListGroups","cognito-idp:ListIdentityProviders","cognito-idp:ListResourceServers","cognito-idp:ListTagsForResource","cognito-idp:ListTerms","cognito-idp:ListUserPoolClients","cognito-idp:ListUserPools","comprehend:DescribeFlywheel","comprehend:ListFlywheels","comprehend:ListTagsForResource","config:BatchGet*","config:Describe*","config:Get*","config:List*","config:Put*","config:Select*","connect-campaigns:DescribeCampaign","connect-campaigns:ListCampaigns","connect:DescribeAgentStatus","connect:DescribeDataTable","connect:DescribeEmailAddress","connect:DescribeEvaluationForm","connect:DescribeHoursOfOperation","connect:DescribeInstance","connect:DescribeInstanceStorageConfig","connect:DescribeMetric","connect:DescribeNotification","connect:DescribePhoneNumber","connect:DescribePredefinedAttribute","connect:DescribePrompt","connect:DescribeQueue","connect:DescribeQuickConnect","connect:DescribeRoutingProfile","connect:DescribeRule","connect:DescribeSecurityProfile","connect:DescribeTrafficDistributionGroup","connect:DescribeUser","connect:DescribeUserHierarchyGroup","connect:DescribeUserHierarchyStructure","connect:DescribeView","connect:DescribeWorkspace","connect:GetTaskTemplate","connect:ListAgentStatuses","connect:ListApprovedOrigins","connect:ListDataTables","connect:ListEvaluationForms","connect:ListEvaluationFormVersions","connect:ListHoursOfOperationOverrides","connect:ListHoursOfOperations","connect:ListInstanceAttributes","connect:ListInstances","connect:ListInstanceStorageConfigs","connect:ListIntegrationAssociations","connect:ListMetrics","connect:ListNotifications","connect:ListPhoneNumbers","connect:ListPhoneNumbersV2","connect:ListPredefinedAttributes","connect:ListPrompts","connect:ListQueueEmailAddresses","connect:ListQueueQuickConnects","connect:ListQueues","connect:ListQuickConnects","connect:ListRoutingProfileManualAssignmentQueues","connect:ListRoutingProfileQueues","connect:ListRoutingProfiles","connect:ListRules","connect:ListSecurityKeys","connect:ListSecurityProfileAIAgents","connect:ListSecurityProfileApplications","connect:ListSecurityProfileFlowModules","connect:ListSecurityProfilePermissions","connect:ListSecurityProfiles","connect:ListTagsForResource","connect:ListTaskTemplates","connect:ListTrafficDistributionGroups","connect:ListUserHierarchyGroups","connect:ListUsers","connect:ListViews","connect:ListViewVersions","connect:ListWorkspaceMedia","connect:ListWorkspacePages","connect:ListWorkspaces","connect:SearchAvailablePhoneNumbers","connect:SearchWorkspaceAssociations","controltower:GetLandingZone","controltower:ListLandingZones","cur:DescribeReportDefinitions","cur:ListTagsForResource","databrew:DescribeDataset","databrew:DescribeJob","databrew:DescribeProject","databrew:DescribeRecipe","databrew:DescribeRuleset","databrew:DescribeSchedule","databrew:ListDatasets","databrew:ListJobs","databrew:ListProjects","databrew:ListRecipes","databrew:ListRecipeVersions","databrew:ListRulesets","databrew:ListSchedules","databrew:ListTagsForResource","datasync:DescribeAgent","datasync:DescribeLocationAzureBlob","datasync:DescribeLocationEfs","datasync:DescribeLocationFsxLustre","datasync:DescribeLocationFsxOntap","datasync:DescribeLocationFsxOpenZfs","datasync:DescribeLocationFsxWindows","datasync:DescribeLocationHdfs","datasync:DescribeLocationNfs","datasync:DescribeLocationObjectStorage","datasync:DescribeLocationS3","datasync:DescribeLocationSmb","datasync:DescribeTask","datasync:ListAgents","datasync:ListLocations","datasync:ListTagsForResource","datasync:ListTasks","datazone:GetDomain","datazone:GetDomainUnit","datazone:GetEnvironmentAction","datazone:GetEnvironmentBlueprintConfiguration","datazone:GetEnvironmentProfile","datazone:GetGroupProfile","datazone:GetSubscriptionTarget","datazone:GetUserProfile","datazone:ListDomains","datazone:ListDomainUnitsForParent","datazone:ListEntityOwners","datazone:ListEnvironmentActions","datazone:ListEnvironmentBlueprintConfigurations","datazone:ListEnvironmentProfiles","datazone:ListPolicyGrants","datazone:ListProjectMemberships","datazone:ListSubscriptionTargets","datazone:SearchGroupProfiles","datazone:SearchUserProfiles","dax:DescribeClusters","dax:DescribeParameterGroups","dax:DescribeParameters","dax:DescribeSubnetGroups","dax:ListTags","deadline:GetBudget","deadline:GetFarm","deadline:GetFleet","deadline:GetJob","deadline:GetLicenseEndpoint","deadline:GetMonitor","deadline:GetQueue","deadline:GetQueueEnvironment","deadline:GetQueueFleetAssociation","deadline:GetQueueLimitAssociation","deadline:GetStorageProfile","deadline:ListBudgets","deadline:ListFarms","deadline:ListFleets","deadline:ListJobs","deadline:ListLicenseEndpoints","deadline:ListMonitors","deadline:ListQueueEnvironments","deadline:ListQueueFleetAssociations","deadline:ListQueueLimitAssociations","deadline:ListQueues","deadline:ListStorageProfiles","deadline:ListTagsForResource","deadline:SearchJobs","detective:ListGraphs","detective:ListOrganizationAdminAccount","detective:ListTagsForResource","devicefarm:GetInstanceProfile","devicefarm:GetNetworkProfile","devicefarm:GetProject","devicefarm:GetTestGridProject","devicefarm:ListInstanceProfiles","devicefarm:ListNetworkProfiles","devicefarm:ListProjects","devicefarm:ListTagsForResource","devicefarm:ListTestGridProjects","devops-guru:GetResourceCollection","devops-guru:ListNotificationChannels","directconnect:DescribeConnections","dms:DescribeCertificates","dms:DescribeDataMigrations","dms:DescribeEndpoints","dms:DescribeEventSubscriptions","dms:DescribeReplicationConfigs","dms:DescribeReplicationInstances","dms:DescribeReplicationSubnetGroups","dms:DescribeReplicationTaskAssessmentRuns","dms:DescribeReplicationTasks","dms:ListDataProviders","dms:ListInstanceProfiles","dms:ListMigrationProjects","dms:ListTagsForResource","docdb-elastic:GetCluster","docdb-elastic:ListClusters","docdb-elastic:ListTagsForResource","ds:DescribeDirectories","ds:DescribeDomainControllers","ds:DescribeEventTopics","ds:ListLogSubscriptions","ds:ListTagsForResource","dsql:GetCluster","dsql:GetClusterPolicy","dsql:GetVpcEndpointServiceName","dsql:ListClusters","dsql:ListTagsForResource","dynamodb:DescribeContinuousBackups","dynamodb:DescribeContributorInsights","dynamodb:DescribeGlobalTable","dynamodb:DescribeGlobalTableSettings","dynamodb:DescribeKinesisStreamingDestination","dynamodb:DescribeLimits","dynamodb:DescribeTable","dynamodb:DescribeTableReplicaAutoScaling","dynamodb:DescribeTimeToLive","dynamodb:GetResourcePolicy","dynamodb:ListTables","dynamodb:ListTagsOfResource","ec2:Describe*","ec2:DescribeNetworkAcls","ec2:DescribeTransitGatewayMeteringPolicies","ec2:GetAllowedImagesSettings","ec2:GetEbsEncryptionByDefault","ec2:GetInstanceTypesFromInstanceRequirements","ec2:GetIpamPoolAllocations","ec2:GetIpamPoolCidrs","ec2:GetManagedPrefixListEntries","ec2:GetNetworkInsightsAccessScopeAnalysisFindings","ec2:GetNetworkInsightsAccessScopeContent","ec2:GetRouteServerAssociations","ec2:GetRouteServerPropagations","ec2:GetSnapshotBlockPublicAccessState","ec2:GetTransitGatewayRouteTablePropagations","ec2:GetVerifiedAccessEndpointPolicy","ec2:GetVerifiedAccessGroupPolicy","ec2:SearchLocalGatewayRoutes","ec2:SearchTransitGatewayMulticastGroups","ec2:SearchTransitGatewayRoutes","ecr-public:DescribeRepositories","ecr-public:GetRepositoryCatalogData","ecr-public:GetRepositoryPolicy","ecr-public:ListTagsForResource","ecr:BatchGetRepositoryScanningConfiguration","ecr:DescribePullThroughCacheRules","ecr:DescribeRegistry","ecr:DescribeRepositories","ecr:DescribeRepositoryCreationTemplates","ecr:GetLifecyclePolicy","ecr:GetRegistryPolicy","ecr:GetRegistryScanningConfiguration","ecr:GetRepositoryPolicy","ecr:ListTagsForResource","ecs:DescribeCapacityProviders","ecs:DescribeClusters","ecs:DescribeExpressGatewayService","ecs:DescribeServices","ecs:DescribeTaskDefinition","ecs:DescribeTaskSets","ecs:ListClusters","ecs:ListServices","ecs:ListTagsForResource","ecs:ListTaskDefinitionFamilies","ecs:ListTaskDefinitions","eks:DescribeAccessEntry","eks:DescribeAddon","eks:DescribeCapability","eks:DescribeCluster","eks:DescribeFargateProfile","eks:DescribeIdentityProviderConfig","eks:DescribeNodegroup","eks:DescribePodIdentityAssociation","eks:ListAccessEntries","eks:ListAddons","eks:ListAssociatedAccessPolicies","eks:ListCapabilities","eks:ListClusters","eks:ListFargateProfiles","eks:ListIdentityProviderConfigs","eks:ListNodegroups","eks:ListPodIdentityAssociations","eks:ListTagsForResource","elasticache:DescribeCacheClusters","elasticache:DescribeCacheParameterGroups","elasticache:DescribeCacheParameters","elasticache:DescribeCacheSecurityGroups","elasticache:DescribeCacheSubnetGroups","elasticache:DescribeGlobalReplicationGroups","elasticache:DescribeReplicationGroups","elasticache:DescribeSnapshots","elasticache:DescribeUserGroups","elasticache:DescribeUsers","elasticache:ListTagsForResource","elasticbeanstalk:DescribeConfigurationSettings","elasticbeanstalk:DescribeEnvironments","elasticfilesystem:DescribeAccessPoints","elasticfilesystem:DescribeBackupPolicy","elasticfilesystem:DescribeFileSystemPolicy","elasticfilesystem:DescribeFileSystems","elasticfilesystem:DescribeLifecycleConfiguration","elasticfilesystem:DescribeMountTargets","elasticfilesystem:DescribeMountTargetSecurityGroups","elasticfilesystem:DescribeTags","elasticloadbalancing:DescribeCapacityReservation","elasticloadbalancing:DescribeListenerAttributes","elasticloadbalancing:DescribeListenerCertificates","elasticloadbalancing:DescribeListeners","elasticloadbalancing:DescribeLoadBalancerAttributes","elasticloadbalancing:DescribeLoadBalancerPolicies","elasticloadbalancing:DescribeLoadBalancers","elasticloadbalancing:DescribeRules","elasticloadbalancing:DescribeTags","elasticloadbalancing:DescribeTargetGroupAttributes","elasticloadbalancing:DescribeTargetGroups","elasticloadbalancing:DescribeTargetHealth","elasticmapreduce:DescribeCluster","elasticmapreduce:DescribeSecurityConfiguration","elasticmapreduce:DescribeStep","elasticmapreduce:DescribeStudio","elasticmapreduce:GetAutoTerminationPolicy","elasticmapreduce:GetBlockPublicAccessConfiguration","elasticmapreduce:GetManagedScalingPolicy","elasticmapreduce:GetStudioSessionMapping","elasticmapreduce:ListBootstrapActions","elasticmapreduce:ListClusters","elasticmapreduce:ListInstanceFleets","elasticmapreduce:ListInstanceGroups","elasticmapreduce:ListInstances","elasticmapreduce:ListSecurityConfigurations","elasticmapreduce:ListSteps","elasticmapreduce:ListStudios","elasticmapreduce:ListStudioSessionMappings","elemental-inference:GetFeed","elemental-inference:ListFeeds","elemental-inference:ListTagsForResource","emr-containers:DescribeJobRun","emr-containers:DescribeManagedEndpoint","emr-containers:DescribeVirtualCluster","emr-containers:ListJobRuns","emr-containers:ListManagedEndpoints","emr-containers:ListTagsForResource","emr-containers:ListVirtualClusters","emr-serverless:GetApplication","emr-serverless:GetJobRun","emr-serverless:ListApplications","emr-serverless:ListJobRuns","entityresolution:GetIdMappingWorkflow","entityresolution:GetIdNamespace","entityresolution:GetMatchingWorkflow","entityresolution:GetSchemaMapping","entityresolution:ListIdMappingWorkflows","entityresolution:ListIdNamespaces","entityresolution:ListMatchingWorkflows","entityresolution:ListSchemaMappings","entityresolution:ListTagsForResource","es:DescribeDomain","es:DescribeDomains","es:DescribeElasticsearchDomain","es:DescribeElasticsearchDomains","es:GetCompatibleElasticsearchVersions","es:GetCompatibleVersions","es:ListDomainNames","es:ListTags","events:DescribeApiDestination","events:DescribeArchive","events:DescribeConnection","events:DescribeEndpoint","events:DescribeEventBus","events:DescribeRule","events:ListApiDestinations","events:ListArchives","events:ListConnections","events:ListEndpoints","events:ListEventBuses","events:ListRules","events:ListTagsForResource","events:ListTargetsByRule","evidently:GetLaunch","evidently:GetProject","evidently:GetSegment","evidently:ListLaunches","evidently:ListProjects","evidently:ListSegments","evidently:ListTagsForResource","finspace:GetEnvironment","finspace:ListEnvironments","firehose:DescribeDeliveryStream","firehose:ListDeliveryStreams","firehose:ListTagsForDeliveryStream","fis:GetExperimentTemplate","fis:GetTargetAccountConfiguration","fis:ListExperimentTemplates","fis:ListTagsForResource","fis:ListTargetAccountConfigurations","fms:GetNotificationChannel","fms:GetPolicy","fms:ListPolicies","fms:ListTagsForResource","forecast:DescribeDataset","forecast:DescribeDatasetGroup","forecast:ListDatasetGroups","forecast:ListDatasets","forecast:ListTagsForResource","frauddetector:GetDetectors","frauddetector:GetDetectorVersion","frauddetector:GetEntityTypes","frauddetector:GetEventTypes","frauddetector:GetExternalModels","frauddetector:GetLabels","frauddetector:GetListElements","frauddetector:GetListsMetadata","frauddetector:GetModels","frauddetector:GetOutcomes","frauddetector:GetRules","frauddetector:GetVariables","frauddetector:ListTagsForResource","fsx:DescribeBackups","fsx:DescribeDataRepositoryAssociations","fsx:DescribeFileSystems","fsx:DescribeS3AccessPointAttachments","fsx:DescribeSnapshots","fsx:DescribeStorageVirtualMachines","fsx:DescribeVolumes","fsx:ListTagsForResource","gamelift:DescribeAlias","gamelift:DescribeBuild","gamelift:DescribeContainerFleet","gamelift:DescribeContainerGroupDefinition","gamelift:DescribeFleetAttributes","gamelift:DescribeFleetCapacity","gamelift:DescribeFleetLocationAttributes","gamelift:DescribeFleetLocationCapacity","gamelift:DescribeFleetPortSettings","gamelift:DescribeGameServerGroup","gamelift:DescribeGameSessionQueues","gamelift:DescribeMatchmakingConfigurations","gamelift:DescribeMatchmakingRuleSets","gamelift:DescribeRuntimeConfiguration","gamelift:DescribeScalingPolicies","gamelift:DescribeScript","gamelift:DescribeVpcPeeringAuthorizations","gamelift:DescribeVpcPeeringConnections","gamelift:ListAliases","gamelift:ListBuilds","gamelift:ListContainerFleets","gamelift:ListContainerGroupDefinitions","gamelift:ListFleets","gamelift:ListGameServerGroups","gamelift:ListLocations","gamelift:ListScripts","gamelift:ListTagsForResource","gamelift:ValidateMatchmakingRuleSet","gameliftstreams:GetApplication","gameliftstreams:GetStreamGroup","gameliftstreams:ListApplications","gameliftstreams:ListStreamGroups","gameliftstreams:ListTagsForResource","geo:DescribeGeofenceCollection","geo:DescribeKey","geo:DescribeMap","geo:DescribePlaceIndex","geo:DescribeRouteCalculator","geo:DescribeTracker","geo:ListGeofenceCollections","geo:ListKeys","geo:ListMaps","geo:ListPlaceIndexes","geo:ListRouteCalculators","geo:ListTrackerConsumers","geo:ListTrackers","globalaccelerator:DescribeAccelerator","globalaccelerator:DescribeAcceleratorAttributes","globalaccelerator:DescribeCrossAccountAttachment","globalaccelerator:DescribeEndpointGroup","globalaccelerator:DescribeListener","globalaccelerator:ListAccelerators","globalaccelerator:ListCrossAccountAttachments","globalaccelerator:ListEndpointGroups","globalaccelerator:ListListeners","globalaccelerator:ListTagsForResource","glue:BatchGetDevEndpoints","glue:BatchGetJobs","glue:BatchGetWorkflows","glue:DescribeIntegrations","glue:GetBlueprint","glue:GetCatalog","glue:GetCatalogs","glue:GetClassifier","glue:GetClassifiers","glue:GetCrawler","glue:GetCrawlers","glue:GetDatabase","glue:GetDatabases","glue:GetDataCatalogEncryptionSettings","glue:GetDevEndpoint","glue:GetDevEndpoints","glue:GetJob","glue:GetJobs","glue:GetMLTransform","glue:GetMLTransforms","glue:GetPartition","glue:GetPartitions","glue:GetRegistry","glue:GetSecurityConfiguration","glue:GetSecurityConfigurations","glue:GetSession","glue:GetTable","glue:GetTags","glue:GetTrigger","glue:GetWorkflow","glue:ListBlueprints","glue:ListCrawlers","glue:ListDevEndpoints","glue:ListJobs","glue:ListMLTransforms","glue:ListRegistries","glue:ListSessions","glue:ListTriggers","glue:ListWorkflows","grafana:DescribeWorkspace","grafana:DescribeWorkspaceAuthentication","grafana:DescribeWorkspaceConfiguration","grafana:ListWorkspaces","greengrass:DescribeComponent","greengrass:GetComponent","greengrass:GetDeployment","greengrass:ListComponents","greengrass:ListComponentVersions","greengrass:ListDeployments","groundstation:GetConfig","groundstation:GetDataflowEndpointGroup","groundstation:GetMissionProfile","groundstation:ListConfigs","groundstation:ListDataflowEndpointGroups","groundstation:ListMissionProfiles","groundstation:ListTagsForResource","guardduty:DescribePublishingDestination","guardduty:GetAdministratorAccount","guardduty:GetDetector","guardduty:GetFilter","guardduty:GetFindings","guardduty:GetIPSet","guardduty:GetMalwareProtectionPlan","guardduty:GetMasterAccount","guardduty:GetMemberDetectors","guardduty:GetMembers","guardduty:GetThreatEntitySet","guardduty:GetThreatIntelSet","guardduty:GetTrustedEntitySet","guardduty:ListDetectors","guardduty:ListFilters","guardduty:ListFindings","guardduty:ListIPSets","guardduty:ListMalwareProtectionPlans","guardduty:ListMembers","guardduty:ListOrganizationAdminAccounts","guardduty:ListPublishingDestinations","guardduty:ListTagsForResource","guardduty:ListThreatEntitySets","guardduty:ListThreatIntelSets","guardduty:ListTrustedEntitySets","healthlake:DescribeFHIRDatastore","healthlake:GetDataTransformationProfile","healthlake:ListDataTransformationProfiles","healthlake:ListFHIRDatastores","healthlake:ListTagsForResource","iam:GenerateCredentialReport","iam:GetAccountAuthorizationDetails","iam:GetAccountPasswordPolicy","iam:GetAccountSummary","iam:GetCredentialReport","iam:GetGroup","iam:GetGroupPolicy","iam:GetInstanceProfile","iam:GetOpenIDConnectProvider","iam:GetPolicy","iam:GetPolicyVersion","iam:GetRole","iam:GetRolePolicy","iam:GetSAMLProvider","iam:GetServerCertificate","iam:GetUser","iam:GetUserPolicy","iam:ListAccessKeys","iam:ListAttachedGroupPolicies","iam:ListAttachedRolePolicies","iam:ListAttachedUserPolicies","iam:ListEntitiesForPolicy","iam:ListGroupPolicies","iam:ListGroups","iam:ListGroupsForUser","iam:ListInstanceProfiles","iam:ListInstanceProfilesForRole","iam:ListInstanceProfileTags","iam:ListMFADevices","iam:ListMFADeviceTags","iam:ListOpenIDConnectProviders","iam:ListPolicies","iam:ListPolicyVersions","iam:ListRolePolicies","iam:ListRoles","iam:ListSAMLProviders","iam:ListServerCertificates","iam:ListUserPolicies","iam:ListUsers","iam:ListVirtualMFADevices","identitystore:DescribeGroup","identitystore:DescribeGroupMembership","identitystore:ListGroupMemberships","identitystore:ListGroupMembershipsForMember","identitystore:ListGroups","imagebuilder:GetComponent","imagebuilder:GetContainerRecipe","imagebuilder:GetDistributionConfiguration","imagebuilder:GetImage","imagebuilder:GetImagePipeline","imagebuilder:GetImageRecipe","imagebuilder:GetInfrastructureConfiguration","imagebuilder:GetLifecyclePolicy","imagebuilder:GetWorkflow","imagebuilder:ListComponentBuildVersions","imagebuilder:ListComponents","imagebuilder:ListContainerRecipes","imagebuilder:ListDistributionConfigurations","imagebuilder:ListImageBuildVersions","imagebuilder:ListImagePipelines","imagebuilder:ListImageRecipes","imagebuilder:ListImages","imagebuilder:ListInfrastructureConfigurations","imagebuilder:ListLifecyclePolicies","imagebuilder:ListWorkflowBuildVersions","imagebuilder:ListWorkflows","inspector2:BatchGetAccountStatus","inspector2:GetCodeSecurityScanConfiguration","inspector2:GetDelegatedAdminAccount","inspector2:ListCodeSecurityScanConfigurations","inspector2:ListFilters","inspector2:ListMembers","inspector2:ListTagsForResource","internetmonitor:GetMonitor","internetmonitor:ListMonitors","internetmonitor:ListTagsForResource","invoicing:ListProcurementPortalPreferences","invoicing:ListTagsForResource","iot:DescribeAccountAuditConfiguration","iot:DescribeAuthorizer","iot:DescribeBillingGroup","iot:DescribeCACertificate","iot:DescribeCertificate","iot:DescribeCertificateProvider","iot:DescribeCustomMetric","iot:DescribeDimension","iot:DescribeDomainConfiguration","iot:DescribeFleetMetric","iot:DescribeJob","iot:DescribeJobTemplate","iot:DescribeMitigationAction","iot:DescribeProvisioningTemplate","iot:DescribeRoleAlias","iot:DescribeScheduledAudit","iot:DescribeSecurityProfile","iot:DescribeStream","iot:DescribeThing","iot:DescribeThingGroup","iot:DescribeThingType","iot:GetCommand","iot:GetPackage","iot:GetPackageVersion","iot:GetPolicy","iot:GetTopicRule","iot:GetTopicRuleDestination","iot:GetV2LoggingOptions","iot:ListAuthorizers","iot:ListBillingGroups","iot:ListCACertificates","iot:ListCertificateProviders","iot:ListCertificates","iot:ListCommands","iot:ListCustomMetrics","iot:ListDimensions","iot:ListDomainConfigurations","iot:ListFleetMetrics","iot:ListJobTemplates","iot:ListMitigationActions","iot:ListPackages","iot:ListPackageVersions","iot:ListPolicies","iot:ListProvisioningTemplates","iot:ListRoleAliases","iot:ListScheduledAudits","iot:ListSecurityProfiles","iot:ListSecurityProfilesForTarget","iot:ListTagsForResource","iot:ListTargetsForSecurityProfile","iot:ListThingGroups","iot:ListThingTypes","iot:ListTopicRuleDestinations","iot:ListTopicRules","iot:ListV2LoggingLevels","iot:ValidateSecurityProfileBehaviors","iotanalytics:DescribeChannel","iotanalytics:DescribeDataset","iotanalytics:DescribeDatastore","iotanalytics:DescribePipeline","iotanalytics:ListChannels","iotanalytics:ListDatasets","iotanalytics:ListDatastores","iotanalytics:ListPipelines","iotanalytics:ListTagsForResource","iotdeviceadvisor:GetSuiteDefinition","iotdeviceadvisor:ListSuiteDefinitions","iotevents:DescribeAlarmModel","iotevents:DescribeDetectorModel","iotevents:DescribeInput","iotevents:ListAlarmModels","iotevents:ListDetectorModels","iotevents:ListInputs","iotevents:ListTagsForResource","iotfleethub:DescribeApplication","iotfleethub:ListApplications","iotfleetwise:GetCampaign","iotfleetwise:GetDecoderManifest","iotfleetwise:GetFleet","iotfleetwise:GetModelManifest","iotfleetwise:GetSignalCatalog","iotfleetwise:GetStateTemplate","iotfleetwise:GetVehicle","iotfleetwise:ListCampaigns"],"Resource":"*"},{"Sid":"AWSConfigServiceRolePolicyStatementID2","Effect":"Allow","Action":["iotfleetwise:ListDecoderManifestNetworkInterfaces","iotfleetwise:ListDecoderManifests","iotfleetwise:ListDecoderManifestSignals","iotfleetwise:ListFleets","iotfleetwise:ListModelManifestNodes","iotfleetwise:ListModelManifests","iotfleetwise:ListSignalCatalogNodes","iotfleetwise:ListSignalCatalogs","iotfleetwise:ListStateTemplates","iotfleetwise:ListTagsForResource","iotfleetwise:ListVehicles","iotsitewise:DescribeAccessPolicy","iotsitewise:DescribeAsset","iotsitewise:DescribeAssetModel","iotsitewise:DescribeComputationModel","iotsitewise:DescribeDashboard","iotsitewise:DescribeDataset","iotsitewise:DescribeGateway","iotsitewise:DescribePortal","iotsitewise:DescribeProject","iotsitewise:ListAccessPolicies","iotsitewise:ListAssetModelCompositeModels","iotsitewise:ListAssetModelProperties","iotsitewise:ListAssetModels","iotsitewise:ListAssetProperties","iotsitewise:ListAssets","iotsitewise:ListAssociatedAssets","iotsitewise:ListComputationModels","iotsitewise:ListDashboards","iotsitewise:ListDatasets","iotsitewise:ListGateways","iotsitewise:ListPortals","iotsitewise:ListProjectAssets","iotsitewise:ListProjects","iotsitewise:ListTagsForResource","iottwinmaker:GetComponentType","iottwinmaker:GetEntity","iottwinmaker:GetScene","iottwinmaker:GetSyncJob","iottwinmaker:GetWorkspace","iottwinmaker:ListComponentTypes","iottwinmaker:ListEntities","iottwinmaker:ListScenes","iottwinmaker:ListSyncJobs","iottwinmaker:ListTagsForResource","iottwinmaker:ListWorkspaces","iotwireless:GetDestination","iotwireless:GetDeviceProfile","iotwireless:GetFuotaTask","iotwireless:GetMulticastGroup","iotwireless:GetNetworkAnalyzerConfiguration","iotwireless:GetServiceProfile","iotwireless:GetWirelessDevice","iotwireless:GetWirelessDeviceImportTask","iotwireless:GetWirelessGateway","iotwireless:GetWirelessGatewayTaskDefinition","iotwireless:ListDestinations","iotwireless:ListDeviceProfiles","iotwireless:ListDevicesForWirelessDeviceImportTask","iotwireless:ListFuotaTasks","iotwireless:ListMulticastGroups","iotwireless:ListNetworkAnalyzerConfigurations","iotwireless:ListServiceProfiles","iotwireless:ListTagsForResource","iotwireless:ListWirelessDeviceImportTasks","iotwireless:ListWirelessDevices","iotwireless:ListWirelessGateways","iotwireless:ListWirelessGatewayTaskDefinitions","ivs:GetChannel","ivs:GetComposition","ivs:GetEncoderConfiguration","ivs:GetPlaybackKeyPair","ivs:GetPlaybackRestrictionPolicy","ivs:GetRecordingConfiguration","ivs:GetStage","ivs:GetStorageConfiguration","ivs:GetStreamKey","ivs:ListChannels","ivs:ListCompositions","ivs:ListEncoderConfigurations","ivs:ListIngestConfigurations","ivs:ListPlaybackKeyPairs","ivs:ListPlaybackRestrictionPolicies","ivs:ListPublicKeys","ivs:ListRecordingConfigurations","ivs:ListStages","ivs:ListStorageConfigurations","ivs:ListStreamKeys","ivs:ListTagsForResource","ivschat:GetLoggingConfiguration","ivschat:GetRoom","ivschat:ListLoggingConfigurations","ivschat:ListRooms","ivschat:ListTagsForResource","kafka:DescribeCluster","kafka:DescribeClusterV2","kafka:DescribeConfiguration","kafka:DescribeConfigurationRevision","kafka:DescribeVpcConnection","kafka:GetClusterPolicy","kafka:ListClusters","kafka:ListClustersV2","kafka:ListConfigurations","kafka:ListScramSecrets","kafka:ListTagsForResource","kafka:ListVpcConnections","kafkaconnect:DescribeConnector","kafkaconnect:DescribeCustomPlugin","kafkaconnect:DescribeWorkerConfiguration","kafkaconnect:ListConnectors","kafkaconnect:ListCustomPlugins","kafkaconnect:ListTagsForResource","kafkaconnect:ListWorkerConfigurations","kendra-ranking:DescribeRescoreExecutionPlan","kendra-ranking:ListRescoreExecutionPlans","kendra-ranking:ListTagsForResource","kendra:DescribeIndex","kendra:ListDataSources","kendra:ListIndices","kendra:ListTagsForResource","kinesis:DescribeStreamConsumer","kinesis:DescribeStreamSummary","kinesis:GetResourcePolicy","kinesis:ListStreamConsumers","kinesis:ListStreams","kinesis:ListTagsForStream","kinesisanalytics:DescribeApplication","kinesisanalytics:ListApplications","kinesisanalytics:ListTagsForResource","kinesisvideo:DescribeSignalingChannel","kinesisvideo:DescribeStream","kinesisvideo:ListSignalingChannels","kinesisvideo:ListStreams","kinesisvideo:ListTagsForResource","kinesisvideo:ListTagsForStream","kms:DescribeKey","kms:GetKeyPolicy","kms:GetKeyRotationStatus","kms:ListAliases","kms:ListKeys","kms:ListResourceTags","lakeformation:DescribeLakeFormationIdentityCenterConfiguration","lakeformation:DescribeResource","lakeformation:GetDataLakeSettings","lakeformation:ListDataCellsFilter","lakeformation:ListPermissions","lakeformation:ListResources","lambda:GetAlias","lambda:GetCodeSigningConfig","lambda:GetEventSourceMapping","lambda:GetFunction","lambda:GetFunctionCodeSigningConfig","lambda:GetFunctionConfiguration","lambda:GetFunctionEventInvokeConfig","lambda:GetFunctionRecursionConfig","lambda:GetFunctionScalingConfig","lambda:GetFunctionUrlConfig","lambda:GetLayerVersion","lambda:GetPolicy","lambda:GetProvisionedConcurrencyConfig","lambda:GetRuntimeManagementConfig","lambda:ListAliases","lambda:ListCapacityProviders","lambda:ListCodeSigningConfigs","lambda:ListEventSourceMappings","lambda:ListFunctionEventInvokeConfigs","lambda:ListFunctions","lambda:ListFunctionUrlConfigs","lambda:ListLayers","lambda:ListLayerVersions","lambda:ListTags","lambda:ListVersionsByFunction","launchwizard:GetDeployment","launchwizard:ListDeploymentEvents","launchwizard:ListDeployments","launchwizard:ListTagsForResource","lex:DescribeBot","lex:DescribeBotAlias","lex:DescribeBotVersion","lex:DescribeResourcePolicy","lex:ListBotAliases","lex:ListBotLocales","lex:ListBots","lex:ListBotVersions","lex:ListTagsForResource","license-manager:GetGrant","license-manager:GetLicense","license-manager:ListDistributedGrants","license-manager:ListLicenses","license-manager:ListReceivedGrants","license-manager:ListTagsForResource","lightsail:GetActiveNames","lightsail:GetAlarms","lightsail:GetBuckets","lightsail:GetCertificates","lightsail:GetContainerServices","lightsail:GetDisk","lightsail:GetDisks","lightsail:GetDiskSnapshot","lightsail:GetDiskSnapshots","lightsail:GetDistributions","lightsail:GetDomain","lightsail:GetDomains","lightsail:GetInstance","lightsail:GetInstances","lightsail:GetInstanceSnapshot","lightsail:GetInstanceSnapshots","lightsail:GetKeyPair","lightsail:GetLoadBalancer","lightsail:GetLoadBalancers","lightsail:GetLoadBalancerTlsCertificates","lightsail:GetOperations","lightsail:GetRelationalDatabase","lightsail:GetRelationalDatabaseParameters","lightsail:GetRelationalDatabases","lightsail:GetRelationalDatabaseSnapshot","lightsail:GetRelationalDatabaseSnapshots","lightsail:GetStaticIp","lightsail:GetStaticIps","logs:DescribeAccountPolicies","logs:DescribeDeliveries","logs:DescribeDeliveryDestinations","logs:DescribeDeliverySources","logs:DescribeDestinations","logs:DescribeIndexPolicies","logs:DescribeLogGroups","logs:DescribeLogStreams","logs:DescribeMetricFilters","logs:DescribeQueryDefinitions","logs:DescribeResourcePolicies","logs:GetDataProtectionPolicy","logs:GetDelivery","logs:GetDeliveryDestination","logs:GetDeliveryDestinationPolicy","logs:GetDeliverySource","logs:GetIntegration","logs:GetLogAnomalyDetector","logs:GetLogDelivery","logs:ListIntegrations","logs:ListLogAnomalyDetectors","logs:ListLogDeliveries","logs:ListTagsForResource","logs:ListTagsLogGroup","lookoutequipment:DescribeInferenceScheduler","lookoutequipment:ListTagsForResource","lookoutmetrics:DescribeAlert","lookoutmetrics:DescribeAnomalyDetector","lookoutmetrics:ListAlerts","lookoutmetrics:ListAnomalyDetectors","lookoutmetrics:ListMetricSets","lookoutmetrics:ListTagsForResource","lookoutvision:DescribeProject","lookoutvision:ListProjects","m2:GetEnvironment","m2:ListEnvironments","m2:ListTagsForResource","macie2:DescribeOrganizationConfiguration","macie2:GetAllowList","macie2:GetAutomatedDiscoveryConfiguration","macie2:GetClassificationExportConfiguration","macie2:GetCustomDataIdentifier","macie2:GetFindingsFilter","macie2:GetFindingsPublicationConfiguration","macie2:GetMacieSession","macie2:ListAllowLists","macie2:ListAutomatedDiscoveryAccounts","macie2:ListCustomDataIdentifiers","macie2:ListFindingsFilters","macie2:ListTagsForResource","managedblockchain:GetAccessor","managedblockchain:GetMember","managedblockchain:GetNetwork","managedblockchain:GetNode","managedblockchain:ListAccessors","managedblockchain:ListInvitations","managedblockchain:ListMembers","managedblockchain:ListNodes","mediaconnect:DescribeBridge","mediaconnect:DescribeFlow","mediaconnect:DescribeGateway","mediaconnect:GetRouterInput","mediaconnect:GetRouterNetworkInterface","mediaconnect:ListBridges","mediaconnect:ListFlows","mediaconnect:ListGateways","mediaconnect:ListRouterInputs","mediaconnect:ListRouterNetworkInterfaces","mediaconnect:ListRouterOutputs","mediaconnect:ListTagsForResource","medialive:DescribeChannelPlacementGroup","medialive:DescribeMultiplex","medialive:DescribeMultiplexProgram","medialive:DescribeNode","medialive:DescribeSdiSource","medialive:GetCloudWatchAlarmTemplate","medialive:GetCloudWatchAlarmTemplateGroup","medialive:GetEventBridgeRuleTemplate","medialive:GetEventBridgeRuleTemplateGroup","medialive:GetSignalMap","medialive:ListChannelPlacementGroups","medialive:ListCloudWatchAlarmTemplateGroups","medialive:ListCloudWatchAlarmTemplates","medialive:ListEventBridgeRuleTemplateGroups","medialive:ListEventBridgeRuleTemplates","medialive:ListMultiplexes","medialive:ListMultiplexPrograms","medialive:ListNodes","medialive:ListSdiSources","medialive:ListSignalMaps","medialive:ListTagsForResource","mediapackage-vod:DescribeAsset","mediapackage-vod:DescribePackagingConfiguration","mediapackage-vod:DescribePackagingGroup","mediapackage-vod:ListAssets","mediapackage-vod:ListPackagingConfigurations","mediapackage-vod:ListPackagingGroups","mediapackage-vod:ListTagsForResource","mediapackagev2:GetChannel","mediapackagev2:GetChannelGroup","mediapackagev2:GetChannelPolicy","mediapackagev2:GetOriginEndpoint","mediapackagev2:GetOriginEndpointPolicy","mediapackagev2:ListChannelGroups","mediapackagev2:ListChannels","mediapackagev2:ListOriginEndpoints","mediatailor:DescribeChannel","mediatailor:DescribeLiveSource","mediatailor:DescribeSourceLocation","mediatailor:DescribeVodSource","mediatailor:GetChannelPolicy","mediatailor:GetPlaybackConfiguration","mediatailor:ListChannels","mediatailor:ListLiveSources","mediatailor:ListPlaybackConfigurations","mediatailor:ListSourceLocations","mediatailor:ListVodSources","medical-imaging:GetDatastore","medical-imaging:ListDatastores","medical-imaging:ListTagsForResource","memorydb:DescribeAcls","memorydb:DescribeClusters","memorydb:DescribeParameterGroups","memorydb:DescribeParameters","memorydb:DescribeSubnetGroups","memorydb:DescribeUsers","memorydb:ListTags","mobiletargeting:GetApp","mobiletargeting:GetApplicationSettings","mobiletargeting:GetApps","mobiletargeting:GetCampaign","mobiletargeting:GetCampaigns","mobiletargeting:GetEmailChannel","mobiletargeting:GetEmailTemplate","mobiletargeting:GetEventStream","mobiletargeting:GetInAppTemplate","mobiletargeting:GetSegment","mobiletargeting:GetSegments","mobiletargeting:ListTagsForResource","mobiletargeting:ListTemplates","mpa:GetIdentitySource","mpa:ListIdentitySources","mpa:ListTagsForResource","mq:DescribeBroker","mq:DescribeConfiguration","mq:ListBrokers","mq:ListConfigurations","mq:ListTags","neptune-graph:GetExportTask","neptune-graph:GetGraph","neptune-graph:GetGraphSnapshot","neptune-graph:ListExportTasks","neptune-graph:ListGraphs","neptune-graph:ListGraphSnapshots","neptune-graph:ListTagsForResource","network-firewall:DescribeLoggingConfiguration","network-firewall:ListFirewalls","networkmanager:DescribeGlobalNetworks","networkmanager:GetConnectAttachment","networkmanager:GetConnectPeer","networkmanager:GetCoreNetwork","networkmanager:GetCoreNetworkPolicy","networkmanager:GetCustomerGatewayAssociations","networkmanager:GetDevices","networkmanager:GetDirectConnectGatewayAttachment","networkmanager:GetLinkAssociations","networkmanager:GetLinks","networkmanager:GetSites","networkmanager:GetSiteToSiteVpnAttachment","networkmanager:GetTransitGatewayPeering","networkmanager:GetTransitGatewayRegistrations","networkmanager:ListAttachments","networkmanager:ListConnectPeers","networkmanager:ListCoreNetworks","networkmanager:ListPeerings","networkmanager:ListTagsForResource","nimble:GetLaunchProfile","nimble:GetLaunchProfileDetails","nimble:GetStreamingImage","nimble:GetStudio","nimble:GetStudioComponent","nimble:ListLaunchProfiles","nimble:ListStreamingImages","nimble:ListStudioComponents","nimble:ListStudios","notifications-contacts:GetEmailContact","notifications-contacts:ListEmailContacts","notifications-contacts:ListTagsForResource","notifications:GetEventRule","notifications:ListEventRules","notifications:ListManagedNotificationChannelAssociations","notifications:ListNotificationConfigurations","notifications:ListNotificationHubs","notifications:ListOrganizationalUnits","notifications:ListTagsForResource","nova-act:GetWorkflowDefinition","nova-act:ListWorkflowDefinitions","oam:GetLink","oam:GetSink","oam:GetSinkPolicy","oam:ListLinks","oam:ListSinks","oam:ListTagsForResource","odb:GetAutonomousDatabase","odb:GetCloudAutonomousVmCluster","odb:GetCloudExadataInfrastructure","odb:GetCloudVmCluster","odb:GetDbNode","odb:GetOdbNetwork","odb:GetOdbPeeringConnection","odb:ListAutonomousDatabases","odb:ListCloudAutonomousVmClusters","odb:ListCloudExadataInfrastructures","odb:ListCloudVmClusters","odb:ListDbNodes","odb:ListDbServers","odb:ListOdbNetworks","odb:ListOdbPeeringConnections","odb:ListTagsForResource","omics:GetAnnotationStore","omics:GetConfiguration","omics:GetReferenceStore","omics:GetRun","omics:GetRunCache","omics:GetRunGroup","omics:GetS3AccessPolicy","omics:GetSequenceStore","omics:GetVariantStore","omics:GetWorkflow","omics:GetWorkflowVersion","omics:ListAnnotationStores","omics:ListConfigurations","omics:ListReferenceStores","omics:ListRunCaches","omics:ListRunGroups","omics:ListRuns","omics:ListSequenceStores","omics:ListTagsForResource","omics:ListVariantStores","omics:ListWorkflows","omics:ListWorkflowVersions","opsworks:DescribeInstances","opsworks:DescribeLayers","opsworks:DescribeTimeBasedAutoScaling","opsworks:DescribeVolumes","opsworks:ListTags","organizations:DescribeAccount","organizations:DescribeEffectivePolicy","organizations:DescribeOrganization","organizations:DescribeOrganizationalUnit","organizations:DescribePolicy","organizations:DescribeResourcePolicy","organizations:ListAccounts","organizations:ListAccountsForParent","organizations:ListAWSServiceAccessForOrganization","organizations:ListDelegatedAdministrators","organizations:ListDelegatedServicesForAccount","organizations:ListOrganizationalUnitsForParent","organizations:ListParents","organizations:ListPolicies","organizations:ListPoliciesForTarget","organizations:ListRoots","organizations:ListTagsForResource","organizations:ListTargetsForPolicy","osis:GetPipeline","osis:GetResourcePolicy","osis:ListPipelines","osis:ListTagsForResource","outposts:GetSite","outposts:ListSites","panorama:DescribeApplicationInstance","panorama:DescribeApplicationInstanceDetails","panorama:DescribePackage","panorama:DescribePackageVersion","panorama:ListApplicationInstances","panorama:ListNodes","panorama:ListPackages","payment-cryptography:GetAlias","payment-cryptography:GetKey","payment-cryptography:ListAliases","payment-cryptography:ListKeys","payment-cryptography:ListTagsForResource","pca-connector-ad:GetConnector","pca-connector-ad:GetDirectoryRegistration","pca-connector-ad:GetServicePrincipalName","pca-connector-ad:GetTemplate","pca-connector-ad:GetTemplateGroupAccessControlEntry","pca-connector-ad:ListConnectors","pca-connector-ad:ListDirectoryRegistrations","pca-connector-ad:ListServicePrincipalNames","pca-connector-ad:ListTagsForResource","pca-connector-ad:ListTemplateGroupAccessControlEntries","pca-connector-ad:ListTemplates","pca-connector-scep:GetChallengeMetadata","pca-connector-scep:GetConnector","pca-connector-scep:ListChallengeMetadata","pca-connector-scep:ListConnectors","pca-connector-scep:ListTagsForResource","pcs:GetCluster","pcs:GetComputeNodeGroup","pcs:GetQueue","pcs:ListClusters","pcs:ListComputeNodeGroups","pcs:ListQueues","pcs:ListTagsForResource","personalize:DescribeDataset","personalize:DescribeDatasetGroup","personalize:DescribeSchema","personalize:DescribeSolution","personalize:ListDatasetGroups","personalize:ListDatasetImportJobs","personalize:ListDatasets","personalize:ListSchemas","personalize:ListSolutions","personalize:ListTagsForResource","pipes:DescribePipe","pipes:ListPipes","profile:GetDomain","profile:GetIntegration","profile:GetProfileObjectType","profile:ListDomains","profile:ListIntegrations","profile:ListProfileObjectTypes","profile:ListTagsForResource","qbusiness:GetApplication","qbusiness:GetDataSource","qbusiness:GetIndex","qbusiness:GetPlugin","qbusiness:GetPolicy","qbusiness:GetRetriever","qbusiness:GetWebExperience","qbusiness:ListApplications","qbusiness:ListDataSources","qbusiness:ListIndices","qbusiness:ListPlugins","qbusiness:ListRetrievers","qbusiness:ListTagsForResource","qbusiness:ListWebExperiences","quicksight:DescribeAccountSubscription","quicksight:DescribeActionConnector","quicksight:DescribeActionConnectorPermissions","quicksight:DescribeAgent","quicksight:DescribeAgentPermissions","quicksight:DescribeAnalysis","quicksight:DescribeAnalysisPermissions","quicksight:DescribeBrand","quicksight:DescribeCustomPermissions","quicksight:DescribeDashboard","quicksight:DescribeDashboardPermissions","quicksight:DescribeDataSet","quicksight:DescribeDataSetPermissions","quicksight:DescribeDataSetRefreshProperties","quicksight:DescribeDataSource","quicksight:DescribeDataSourcePermissions","quicksight:DescribeDlpSetting","quicksight:DescribeFlow","quicksight:DescribeFolder","quicksight:DescribeFolderPermissions","quicksight:DescribeIngestion","quicksight:DescribeKnowledgeBase","quicksight:DescribeKnowledgeBasePermissions","quicksight:DescribeNamespace","quicksight:DescribeOAuthClientApplication","quicksight:DescribeRefreshSchedule","quicksight:DescribeSpace","quicksight:DescribeSpacePermissions","quicksight:DescribeTemplate","quicksight:DescribeTemplatePermissions","quicksight:DescribeTheme","quicksight:DescribeThemePermissions","quicksight:DescribeTopic","quicksight:DescribeUser","quicksight:DescribeVPCConnection","quicksight:GetFlowPermissions","quicksight:ListActionConnectors","quicksight:ListAgents","quicksight:ListAnalyses","quicksight:ListBrands","quicksight:ListCustomPermissions","quicksight:ListDashboards","quicksight:ListDataSets","quicksight:ListDataSources","quicksight:ListDlpSettings","quicksight:ListFlows","quicksight:ListFolders","quicksight:ListIngestions","quicksight:ListKnowledgeBases","quicksight:ListNamespaces","quicksight:ListOAuthClientApplications","quicksight:ListRefreshSchedules","quicksight:ListSpaceResources","quicksight:ListSpaces","quicksight:ListTagsForResource","quicksight:ListTemplates","quicksight:ListThemes","quicksight:ListTopics","quicksight:ListUsers","quicksight:ListVPCConnections","ram:GetPermission","ram:GetResourceShareAssociations","ram:GetResourceShares","ram:ListPermissionAssociations","ram:ListPermissions","ram:ListPermissionVersions","ram:ListResources","ram:ListResourceSharePermissions","rds:DescribeDBClusterAutomatedBackups","rds:DescribeDBClusterParameterGroups","rds:DescribeDBClusterParameters","rds:DescribeDBClusters","rds:DescribeDBClusterSnapshotAttributes","rds:DescribeDBClusterSnapshots","rds:DescribeDBEngineVersions","rds:DescribeDBInstances","rds:DescribeDBParameterGroups","rds:DescribeDBParameters","rds:DescribeDBProxies","rds:DescribeDBProxyEndpoints","rds:DescribeDBProxyTargetGroups","rds:DescribeDBProxyTargets","rds:DescribeDBSecurityGroups","rds:DescribeDBShardGroups","rds:DescribeDBSnapshotAttributes","rds:DescribeDBSnapshots","rds:DescribeDBSnapshotTenantDatabases","rds:DescribeDBSubnetGroups","rds:DescribeEngineDefaultClusterParameters","rds:DescribeEngineDefaultParameters","rds:DescribeEventSubscriptions","rds:DescribeGlobalClusters","rds:DescribeIntegrations","rds:DescribeOptionGroups","rds:DescribeTenantDatabases","rds:ListTagsForResource","redshift-serverless:GetNamespace","redshift-serverless:GetWorkgroup","redshift-serverless:ListNamespaces","redshift-serverless:ListSnapshotCopyConfigurations","redshift-serverless:ListTagsForResource","redshift-serverless:ListWorkgroups","redshift:DescribeClusterDbRevisions","redshift:DescribeClusterParameterGroups","redshift:DescribeClusterParameters","redshift:DescribeClusters","redshift:DescribeClusterSecurityGroups","redshift:DescribeClusterSnapshots","redshift:DescribeClusterSubnetGroups","redshift:DescribeDataShares","redshift:DescribeEndpointAccess","redshift:DescribeEndpointAuthorization","redshift:DescribeEventSubscriptions","redshift:DescribeIntegrations","redshift:DescribeLoggingStatus","redshift:DescribeScheduledActions","redshift:DescribeSnapshotCopyGrants","redshift:DescribeTags","redshift:GetResourcePolicy","refactor-spaces:GetApplication","refactor-spaces:GetEnvironment","refactor-spaces:GetRoute","refactor-spaces:GetService","refactor-spaces:ListApplications","refactor-spaces:ListEnvironments","refactor-spaces:ListRoutes","refactor-spaces:ListServices","refactor-spaces:ListTagsForResource","rekognition:DescribeCollection","rekognition:DescribeProjects","rekognition:DescribeStreamProcessor","rekognition:ListCollections","rekognition:ListStreamProcessors","rekognition:ListTagsForResource","resiliencehub:DescribeApp","resiliencehub:DescribeAppVersionTemplate","resiliencehub:DescribeResiliencyPolicy","resiliencehub:ListApps","resiliencehub:ListAppVersionResourceMappings","resiliencehub:ListResiliencyPolicies","resiliencehub:ListTagsForResource","resource-explorer-2:GetDefaultView","resource-explorer-2:GetIndex","resource-explorer-2:GetView","resource-explorer-2:ListIndexes","resource-explorer-2:ListTagsForResource","resource-explorer-2:ListViews","resource-groups:GetGroup","resource-groups:GetGroupConfiguration","resource-groups:GetGroupQuery","resource-groups:GetTags","resource-groups:ListGroupResources","resource-groups:ListGroups","robomaker:DescribeRobotApplication","robomaker:DescribeSimulationApplication","robomaker:ListRobotApplications","robomaker:ListSimulationApplications","rolesanywhere:GetCrl","rolesanywhere:GetProfile","rolesanywhere:GetTrustAnchor","rolesanywhere:ListCrls","rolesanywhere:ListProfiles","rolesanywhere:ListTagsForResource","rolesanywhere:ListTrustAnchors","route53-recovery-control-config:DescribeCluster","route53-recovery-control-config:DescribeControlPanel","route53-recovery-control-config:DescribeRoutingControl","route53-recovery-control-config:DescribeSafetyRule","route53-recovery-control-config:ListClusters","route53-recovery-control-config:ListControlPanels","route53-recovery-control-config:ListRoutingControls","route53-recovery-control-config:ListSafetyRules","route53-recovery-control-config:ListTagsForResource","route53-recovery-readiness:GetCell","route53-recovery-readiness:GetReadinessCheck","route53-recovery-readiness:GetRecoveryGroup","route53-recovery-readiness:GetResourceSet","route53-recovery-readiness:ListCells","route53-recovery-readiness:ListReadinessChecks","route53-recovery-readiness:ListRecoveryGroups","route53-recovery-readiness:ListResourceSets","route53:GetChange","route53:GetDNSSEC","route53:GetHealthCheck","route53:GetHostedZone","route53:ListCidrBlocks","route53:ListCidrCollections","route53:ListCidrLocations","route53:ListHealthChecks","route53:ListHostedZones","route53:ListHostedZonesByName","route53:ListQueryLoggingConfigs","route53:ListResourceRecordSets","route53:ListTagsForResource","route53profiles:GetProfile","route53profiles:GetProfileAssociation","route53profiles:GetProfileResourceAssociation","route53profiles:ListProfileAssociations","route53profiles:ListProfileResourceAssociations","route53profiles:ListProfiles","route53profiles:ListTagsForResource","route53resolver:GetFirewallDomainList","route53resolver:GetFirewallRuleGroup","route53resolver:GetFirewallRuleGroupAssociation","route53resolver:GetOutpostResolver","route53resolver:GetResolverDnssecConfig","route53resolver:GetResolverEndpoint","route53resolver:GetResolverQueryLogConfig","route53resolver:GetResolverQueryLogConfigAssociation","route53resolver:GetResolverRule","route53resolver:GetResolverRuleAssociation","route53resolver:ListFirewallDomainLists","route53resolver:ListFirewallDomains","route53resolver:ListFirewallRuleGroupAssociations","route53resolver:ListFirewallRuleGroups","route53resolver:ListFirewallRules","route53resolver:ListOutpostResolvers","route53resolver:ListResolverDnssecConfigs","route53resolver:ListResolverEndpointIpAddresses","route53resolver:ListResolverEndpoints","route53resolver:ListResolverQueryLogConfigAssociations","route53resolver:ListResolverQueryLogConfigs","route53resolver:ListResolverRuleAssociations","route53resolver:ListResolverRules","route53resolver:ListTagsForResource","rtbfabric:GetCertificateAssociation","rtbfabric:GetInboundExternalLink","rtbfabric:GetLink","rtbfabric:GetLinkRoutingRule","rtbfabric:GetOutboundExternalLink","rtbfabric:GetRequesterGateway","rtbfabric:GetResponderGateway","rtbfabric:ListCertificateAssociations","rtbfabric:ListLinkRoutingRules","rtbfabric:ListLinks","rtbfabric:ListRequesterGateways","rtbfabric:ListResponderGateways","rtbfabric:ListTagsForResource","rum:GetAppMonitor","rum:GetAppMonitorData","rum:ListAppMonitors","rum:ListTagsForResource","s3-outposts:GetAccessPoint","s3-outposts:GetAccessPointPolicy","s3-outposts:GetBucket","s3-outposts:GetBucketPolicy","s3-outposts:GetBucketTagging","s3-outposts:GetLifecycleConfiguration","s3-outposts:ListAccessPoints","s3-outposts:ListEndpoints","s3-outposts:ListRegionalBuckets","s3:GetAccelerateConfiguration","s3:GetAccessGrant","s3:GetAccessGrantsInstance","s3:GetAccessGrantsLocation","s3:GetAccessPoint","s3:GetAccessPointForObjectLambda","s3:GetAccessPointPolicy","s3:GetAccessPointPolicyForObjectLambda","s3:GetAccessPointPolicyStatus","s3:GetAccessPointPolicyStatusForObjectLambda","s3:GetAccountPublicAccessBlock","s3:GetBucketAbac","s3:GetBucketAcl","s3:GetBucketCORS","s3:GetBucketLocation","s3:GetBucketLogging","s3:GetBucketMetadataTableConfiguration","s3:GetBucketNotification","s3:GetBucketObjectLockConfiguration","s3:GetBucketOwnershipControls","s3:GetBucketPolicy","s3:GetBucketPolicyStatus","s3:GetBucketPublicAccessBlock","s3:GetBucketRequestPayment","s3:GetBucketTagging","s3:GetBucketVersioning","s3:GetBucketWebsite","s3:GetEncryptionConfiguration","s3:GetLifecycleConfiguration","s3:GetMultiRegionAccessPoint","s3:GetMultiRegionAccessPointPolicy","s3:GetMultiRegionAccessPointPolicyStatus","s3:GetReplicationConfiguration","s3:GetStorageLensConfiguration","s3:GetStorageLensConfigurationTagging","s3:GetStorageLensGroup","s3:ListAccessGrants","s3:ListAccessGrantsInstances","s3:ListAccessGrantsLocations","s3:ListAccessPoints","s3:ListAccessPointsForObjectLambda","s3:ListAllMyBuckets","s3:ListBucket","s3:ListMultiRegionAccessPoints","s3:ListStorageLensConfigurations","s3:ListStorageLensGroups","s3:ListTagsForResource","s3express:GetAccessPoint","s3express:GetAccessPointPolicy","s3express:GetAccessPointScope","s3express:GetBucketPolicy","s3express:GetEncryptionConfiguration","s3express:GetLifecycleConfiguration","s3express:GetMetricsConfiguration","s3express:ListAccessPointsForDirectoryBuckets","s3express:ListAllMyDirectoryBuckets","s3express:ListTagsForResource","s3files:GetAccessPoint","s3files:GetFileSystem","s3files:GetFileSystemPolicy","s3files:GetMountTarget","s3files:GetSynchronizationConfiguration","s3files:ListAccessPoints","s3files:ListFileSystems","s3files:ListMountTargets","s3files:ListTagsForResource","s3tables:GetTableBucket","s3tables:GetTableBucketEncryption","s3tables:GetTableBucketMaintenanceConfiguration","s3tables:GetTableBucketMetricsConfiguration","s3tables:GetTableBucketPolicy","s3tables:GetTableBucketReplication","s3tables:GetTableBucketStorageClass","s3tables:ListTableBuckets","s3tables:ListTagsForResource","s3vectors:GetIndex","s3vectors:GetVectorBucket","s3vectors:GetVectorBucketPolicy","s3vectors:ListIndexes","s3vectors:ListTagsForResource","s3vectors:ListVectorBuckets","sagemaker:DescribeAction","sagemaker:DescribeAlgorithm","sagemaker:DescribeApp","sagemaker:DescribeAppImageConfig","sagemaker:DescribeArtifact","sagemaker:DescribeAutoMLJob","sagemaker:DescribeAutoMLJobV2","sagemaker:DescribeCluster","sagemaker:DescribeClusterSchedulerConfig","sagemaker:DescribeCodeRepository","sagemaker:DescribeComputeQuota","sagemaker:DescribeContext","sagemaker:DescribeDataQualityJobDefinition","sagemaker:DescribeDeviceFleet","sagemaker:DescribeDomain","sagemaker:DescribeEndpoint","sagemaker:DescribeEndpointConfig","sagemaker:DescribeExperiment","sagemaker:DescribeFeatureGroup","sagemaker:DescribeFlowDefinition","sagemaker:DescribeHub","sagemaker:DescribeHumanTaskUi","sagemaker:DescribeHyperParameterTuningJob","sagemaker:DescribeImage","sagemaker:DescribeImageVersion","sagemaker:DescribeInferenceComponent","sagemaker:DescribeInferenceExperiment","sagemaker:DescribeLabelingJob","sagemaker:DescribeMlflowApp","sagemaker:DescribeMlflowTrackingServer","sagemaker:DescribeModel","sagemaker:DescribeModelBiasJobDefinition","sagemaker:DescribeModelCard","sagemaker:DescribeModelCardExportJob","sagemaker:DescribeModelExplainabilityJobDefinition","sagemaker:DescribeModelPackage","sagemaker:DescribeModelPackageGroup","sagemaker:DescribeModelQualityJobDefinition","sagemaker:DescribeMonitoringSchedule","sagemaker:DescribeNotebookInstance","sagemaker:DescribeNotebookInstanceLifecycleConfig","sagemaker:DescribeOptimizationJob","sagemaker:DescribePartnerApp","sagemaker:DescribePipeline","sagemaker:DescribePipelineExecution","sagemaker:DescribeProcessingJob","sagemaker:DescribeProject","sagemaker:DescribeSpace","sagemaker:DescribeStudioLifecycleConfig","sagemaker:DescribeTrainingJob","sagemaker:DescribeTrainingPlan","sagemaker:DescribeTrial","sagemaker:DescribeTrialComponent","sagemaker:DescribeUserProfile","sagemaker:DescribeWorkforce","sagemaker:DescribeWorkteam","sagemaker:GetModelPackageGroupPolicy","sagemaker:ListActions","sagemaker:ListAlgorithms","sagemaker:ListAppImageConfigs","sagemaker:ListApps","sagemaker:ListArtifacts","sagemaker:ListAutoMLJobs","sagemaker:ListClusters","sagemaker:ListClusterSchedulerConfigs","sagemaker:ListCodeRepositories","sagemaker:ListComputeQuotas","sagemaker:ListContexts","sagemaker:ListDataQualityJobDefinitions","sagemaker:ListDeviceFleets","sagemaker:ListDomains","sagemaker:ListEndpointConfigs","sagemaker:ListEndpoints","sagemaker:ListExperiments","sagemaker:ListFeatureGroups","sagemaker:ListFlowDefinitions","sagemaker:ListHubs","sagemaker:ListHumanTaskUis","sagemaker:ListHyperParameterTuningJobs","sagemaker:ListImages","sagemaker:ListImageVersions","sagemaker:ListInferenceComponents","sagemaker:ListInferenceExperiments","sagemaker:ListLabelingJobs","sagemaker:ListMlflowApps","sagemaker:ListMlflowTrackingServers","sagemaker:ListModelBiasJobDefinitions","sagemaker:ListModelCardExportJobs","sagemaker:ListModelCards","sagemaker:ListModelCardVersions","sagemaker:ListModelExplainabilityJobDefinitions","sagemaker:ListModelPackageGroups","sagemaker:ListModelPackages","sagemaker:ListModelQualityJobDefinitions","sagemaker:ListModels","sagemaker:ListMonitoringAlerts","sagemaker:ListMonitoringSchedules","sagemaker:ListNotebookInstanceLifecycleConfigs","sagemaker:ListNotebookInstances","sagemaker:ListOptimizationJobs","sagemaker:ListPartnerApps","sagemaker:ListPipelineExecutions","sagemaker:ListPipelines","sagemaker:ListProcessingJobs","sagemaker:ListProjects","sagemaker:ListSpaces","sagemaker:ListStudioLifecycleConfigs","sagemaker:ListTags","sagemaker:ListTrainingJobs","sagemaker:ListTrainingPlans","sagemaker:ListTrialComponents","sagemaker:ListTrials","sagemaker:ListUserProfiles","sagemaker:ListWorkforces","sagemaker:ListWorkteams","scheduler:GetSchedule","scheduler:GetScheduleGroup","scheduler:ListScheduleGroups","scheduler:ListSchedules","scheduler:ListTagsForResource","schemas:DescribeDiscoverer","schemas:DescribeRegistry","schemas:DescribeSchema","schemas:GetResourcePolicy","schemas:ListDiscoverers","schemas:ListRegistries","schemas:ListSchemas","sdb:GetAttributes","sdb:ListDomains","secretsmanager:DescribeSecret","secretsmanager:GetResourcePolicy","secretsmanager:ListSecrets","secretsmanager:ListSecretVersionIds","securityagent:BatchGetPentests","securityagent:BatchGetTargetDomains","securityagent:GetApplication","securityagent:ListApplications","securityagent:ListPentests","securityagent:ListTagsForResource","securityagent:ListTargetDomains","securityhub:DescribeHub","securityhub:DescribeOrganizationConfiguration","securityhub:DescribeStandardsControls","securityhub:GetAggregatorV2","securityhub:GetAutomationRuleV2","securityhub:GetConfigurationPolicy","securityhub:GetConfigurationPolicyAssociation","securityhub:GetEnabledStandards","securityhub:GetFindingAggregator","securityhub:ListAggregatorsV2","securityhub:ListAutomationRulesV2","securityhub:ListConfigurationPolicies","securityhub:ListConfigurationPolicyAssociations","securityhub:ListEnabledProductsForImport","securityhub:ListFindingAggregators","securityhub:ListTagsForResource","securitylake:GetSubscriber","securitylake:ListDataLakeExceptions","securitylake:ListDataLakes","securitylake:ListLogSources","securitylake:ListSubscribers","securitylake:ListTagsForResource","serviceCatalog:DescribePortfolioShares","servicecatalog:DescribeServiceAction","servicecatalog:DescribeTagOption","servicecatalog:GetApplication","servicecatalog:GetAttributeGroup","servicecatalog:ListApplications","servicecatalog:ListAssociatedResources","servicecatalog:ListAttributeGroups","servicecatalog:ListServiceActions","servicecatalog:ListServiceActionsForProvisioningArtifact","servicecatalog:ListTagOptions","servicediscovery:GetInstance","servicediscovery:GetNamespace","servicediscovery:GetService","servicediscovery:ListInstances","servicediscovery:ListNamespaces","servicediscovery:ListServices","servicediscovery:ListTagsForResource","ses:DescribeReceiptRule","ses:DescribeReceiptRuleSet","ses:GetAddonInstance","ses:GetAddonSubscription","ses:GetAddressList","ses:GetArchive","ses:GetConfigurationSet","ses:GetConfigurationSetEventDestinations","ses:GetContactList","ses:GetDedicatedIpPool","ses:GetDedicatedIps","ses:GetEmailTemplate","ses:GetIngressPoint","ses:GetRelay","ses:GetRuleSet","ses:GetTemplate","ses:GetTrafficPolicy","ses:ListAddonInstances","ses:ListAddonSubscriptions","ses:ListAddressLists","ses:ListArchives","ses:ListConfigurationSets","ses:ListContactLists","ses:ListDedicatedIpPools","ses:ListEmailTemplates","ses:ListIngressPoints","ses:ListReceiptFilters","ses:ListReceiptRuleSets","ses:ListRelays","ses:ListRuleSets","ses:ListTagsForResource","ses:ListTemplates","ses:ListTrafficPolicies","shield:DescribeDRTAccess","shield:DescribeProtection","shield:DescribeProtectionGroup","shield:DescribeSubscription","shield:ListProtectionGroups","shield:ListTagsForResource","signer:GetSigningProfile","signer:ListProfilePermissions","signer:ListSigningProfiles","sms-voice:DescribeConfigurationSets","sms-voice:DescribeKeywords","sms-voice:DescribeOptOutLists","sms-voice:DescribePhoneNumbers","sms-voice:DescribePools","sms-voice:DescribeProtectConfigurations","sms-voice:DescribeSenderIds","sms-voice:GetProtectConfigurationCountryRuleSet","sms-voice:GetResourcePolicy","sms-voice:ListPoolOriginationIdentities","sms-voice:ListTagsForResource","sns:GetDataProtectionPolicy","sns:GetSMSSandboxAccountStatus","sns:GetSubscriptionAttributes","sns:GetTopicAttributes","sns:ListSubscriptions","sns:ListSubscriptionsByTopic","sns:ListTagsForResource","sns:ListTopics","sqs:GetQueueAttributes","sqs:ListQueues","sqs:ListQueueTags","ssm-contacts:GetContact","ssm-contacts:GetContactChannel","ssm-contacts:GetRotation","ssm-contacts:ListContactChannels","ssm-contacts:ListContacts","ssm-contacts:ListRotations","ssm-contacts:ListTagsForResource","ssm-guiconnect:GetConnectionRecordingPreferences","ssm-incidents:GetReplicationSet","ssm-incidents:GetResponsePlan","ssm-incidents:ListReplicationSets","ssm-incidents:ListResponsePlans","ssm-incidents:ListTagsForResource","ssm-quicksetup:GetConfigurationManager","ssm-quicksetup:ListConfigurationManagers","ssm-sap:ListTagsForResource","ssm:DescribeAssociation","ssm:DescribeAutomationExecutions","ssm:DescribeDocument","ssm:DescribeDocumentPermission","ssm:DescribeInstanceInformation","ssm:DescribeMaintenanceWindows","ssm:DescribeParameters","ssm:DescribePatchBaselines","ssm:GetAutomationExecution","ssm:GetDefaultPatchBaseline","ssm:GetDocument","ssm:GetMaintenanceWindow","ssm:GetPatchBaseline","ssm:GetResourcePolicies","ssm:GetServiceSetting","ssm:ListAssociations","ssm:ListDocuments","ssm:ListResourceDataSync","ssm:ListTagsForResource","sso:DescribeApplication","sso:DescribeInstanceAccessControlAttributeConfiguration","sso:DescribePermissionSet","sso:GetInlinePolicyForPermissionSet","sso:GetPermissionsBoundaryForPermissionSet","sso:ListApplications","sso:ListCustomerManagedPolicyReferencesInPermissionSet","sso:ListManagedPoliciesInPermissionSet","sso:ListPermissionSets","sso:ListTagsForResource","states:DescribeActivity","states:DescribeStateMachine","states:DescribeStateMachineAlias","states:ListActivities","states:ListStateMachineAliases","states:ListStateMachines","states:ListStateMachineVersions","states:ListTagsForResource","storagegateway:ListGateways","storagegateway:ListTagsForResource","storagegateway:ListVolumes","sts:GetCallerIdentity","support:DescribeCases","synthetics:DescribeCanaries","synthetics:DescribeCanariesLastRun","synthetics:DescribeRuntimeVersions","synthetics:GetCanary","synthetics:GetCanaryRuns","synthetics:GetGroup","synthetics:ListAssociatedGroups","synthetics:ListGroupResources","synthetics:ListGroups","synthetics:ListTagsForResource","tag:GetResources","textract:GetAdapter","textract:ListAdapters","textract:ListTagsForResource","timestream-influxdb:GetDbCluster","timestream-influxdb:GetDbInstance","timestream-influxdb:ListDbClusters","timestream-influxdb:ListDbInstances","timestream-influxdb:ListTagsForResource","timestream:DescribeDatabase","timestream:DescribeEndpoints","timestream:DescribeTable","timestream:ListDatabases","timestream:ListTables","timestream:ListTagsForResource","transcribe:GetCallAnalyticsJob","transcribe:GetVocabularyFilter","transcribe:ListCallAnalyticsJobs","transcribe:ListTagsForResource","transcribe:ListVocabularyFilters","transfer:DescribeAgreement","transfer:DescribeCertificate","transfer:DescribeConnector","transfer:DescribeProfile","transfer:DescribeServer","transfer:DescribeUser","transfer:DescribeWebApp","transfer:DescribeWebAppCustomization","transfer:DescribeWorkflow","transfer:ListAgreements","transfer:ListCertificates","transfer:ListConnectors","transfer:ListProfiles","transfer:ListServers","transfer:ListTagsForResource","transfer:ListUsers","transfer:ListWebApps","transfer:ListWorkflows","verifiedpermissions:GetIdentitySource","verifiedpermissions:GetPolicyStore","verifiedpermissions:GetPolicyTemplate","verifiedpermissions:GetSchema","verifiedpermissions:ListIdentitySources","verifiedpermissions:ListPolicyStores","verifiedpermissions:ListPolicyTemplates","verifiedpermissions:ListTagsForResource","voiceid:DescribeDomain","voiceid:ListTagsForResource","vpc-lattice:GetAccessLogSubscription","vpc-lattice:GetListener","vpc-lattice:GetResourceConfiguration","vpc-lattice:GetResourceGateway","vpc-lattice:GetRule","vpc-lattice:GetService","vpc-lattice:GetServiceNetwork","vpc-lattice:GetServiceNetworkResourceAssociation","vpc-lattice:GetServiceNetworkServiceAssociation","vpc-lattice:GetServiceNetworkVpcAssociation","vpc-lattice:GetTargetGroup","vpc-lattice:ListAccessLogSubscriptions","vpc-lattice:ListListeners","vpc-lattice:ListResourceConfigurations","vpc-lattice:ListResourceGateways","vpc-lattice:ListRules","vpc-lattice:ListServiceNetworkResourceAssociations","vpc-lattice:ListServiceNetworks","vpc-lattice:ListServiceNetworkServiceAssociations","vpc-lattice:ListServiceNetworkVpcAssociations","vpc-lattice:ListServices","vpc-lattice:ListTagsForResource","vpc-lattice:ListTargetGroups","vpc-lattice:ListTargets","waf-regional:GetLoggingConfiguration","waf-regional:GetWebACL","waf-regional:GetWebACLForResource","waf-regional:ListLoggingConfigurations","waf:GetLoggingConfiguration","waf:GetWebACL","wafv2:GetLoggingConfiguration","wafv2:GetRuleGroup","wafv2:ListLoggingConfigurations","wafv2:ListRuleGroups","wafv2:ListTagsForResource","wisdom:GetAIAgent","wisdom:GetAIGuardrail","wisdom:GetAIPrompt","wisdom:GetAssistant","wisdom:ListAIAgentVersions","wisdom:ListAIGuardrails","wisdom:ListAIGuardrailVersions","wisdom:ListAIPromptVersions","wisdom:ListAssistants","workspaces-web:GetNetworkSettings","workspaces-web:GetTrustStore","workspaces-web:GetTrustStoreCertificate","workspaces-web:GetUserAccessLoggingSettings","workspaces-web:ListBrowserSettings","workspaces-web:ListIpAccessSettings","workspaces-web:ListNetworkSettings","workspaces-web:ListTagsForResource","workspaces-web:ListTrustStoreCertificates","workspaces-web:ListTrustStores","workspaces-web:ListUserAccessLoggingSettings","workspaces-web:ListUserSettings","workspaces:DescribeConnectionAliases","workspaces:DescribeTags","workspaces:DescribeWorkspaces","xray:GetGroup","xray:GetGroups","xray:GetIndexingRules","xray:GetSamplingRules","xray:GetTraceSegmentDestination","xray:ListResourcePolicies","xray:ListTagsForResource"],"Resource":"*"},{"Sid":"AWSConfigSLRLogStatementID","Effect":"Allow","Action":["logs:CreateLogStream","logs:CreateLogGroup"],"Resource":"arn:aws:logs:*:*:log-group:/aws/config/*"},{"Sid":"AWSConfigSLRLogEventStatementID","Effect":"Allow","Action":"logs:PutLogEvents","Resource":"arn:aws:logs:*:*:log-group:/aws/config/*:log-stream:config-rule-evaluation/*"},{"Sid":"AWSConfigSLRApiGatewayStatementID","Effect":"Allow","Action":["apigateway:GET"],"Resource":["arn:aws:apigateway:*::/account","arn:aws:apigateway:*::/apis","arn:aws:apigateway:*::/apis/*","arn:aws:apigateway:*::/apis/*/integrations","arn:aws:apigateway:*::/apis/*/integrations/*","arn:aws:apigateway:*::/domainnames","arn:aws:apigateway:*::/domainnames/*","arn:aws:apigateway:*::/clientcertificates","arn:aws:apigateway:*::/clientcertificates/*","arn:aws:apigateway:*::/restapis","arn:aws:apigateway:*::/restapis/*/resources/*/methods/*","arn:aws:apigateway:*::/restapis/*","arn:aws:apigateway:*::/restapis/*/stages/*","arn:aws:apigateway:*::/restapis/*/stages","arn:aws:apigateway:*::/restapis/*/resources","arn:aws:apigateway:*::/restapis/*/resources/*/methods/*/integration","arn:aws:apigateway:*::/restapis/*/resources/*","arn:aws:apigateway:*::/usageplans","arn:aws:apigateway:*::/usageplans/*","arn:aws:apigateway:*::/apis/*/routes/*","arn:aws:apigateway:*::/apis/*/routes","arn:aws:apigateway:*::/v2/apis/*/routes","arn:aws:apigateway:*::/v2/apis/*/routes/*","arn:aws:apigateway:*::/v2/apis","arn:aws:apigateway:*::/v2/apis/*","arn:aws:apigateway:*::/v2/apis/*/integrations","arn:aws:apigateway:*::/v2/apis/*/integrations/*"]}]}

Version history

Current version v97, edited by AWS on 2026-10-28. Version history is recorded from 2026-11-11. Earlier versions are in the IAM console under Policy versions.

Attach snippets

This policy cannot be attached to users, groups or roles, so there are no attach snippets.

Sources

Pending editorial review. No editorial sources are listed yet.

• Official AWS reference for AWSConfigServiceRolePolicy
• Report a data issue