AWSIoTSiteWiseReadOnlyAccess

ReaderAWS managedActivePermissions reviewedShow on map Compare

Summary

Provides read only access to IoT SiteWise.

Permissions imported from the AWS Managed Policy Reference Guide; other sections pending editorial review.

Identity

ARN: arn:aws:iam::aws:policy/AWSIoTSiteWiseReadOnlyAccess
Default version: v5
Created: 2018-12-04
Last edited: 2026-02-12
Services: iotsitewise

Control-plane actions (47)

By access level: 23 List, 24 Read.

Control-plane actions by service
Service	Granted	Access levels and limits	Granted by
IoT SiteWise	47 of 129	23 List, 24 Read; 0 restricted, 0 conditional	iotsitewise:DescribeAccessPolicy, iotsitewise:DescribeAction, iotsitewise:DescribeAsset, iotsitewise:DescribeAssetCompositeModel, iotsitewise:DescribeAssetModel, iotsitewise:DescribeAssetModelCompositeModel, iotsitewise:DescribeAssetModelInterfaceRelationship, iotsitewise:DescribeAssetProperty, iotsitewise:DescribeBulkImportJob, iotsitewise:DescribeComputationModel, iotsitewise:DescribeComputationModelExecutionSummary, iotsitewise:DescribeDashboard and 35 more

IoT SiteWise: 47 actions

iotsitewise:DescribeAccessPolicy (Read)
iotsitewise:DescribeAction (Read)
iotsitewise:DescribeAsset (Read)
iotsitewise:DescribeAssetCompositeModel (Read)
iotsitewise:DescribeAssetModel (Read)
iotsitewise:DescribeAssetModelCompositeModel (Read)
iotsitewise:DescribeAssetModelInterfaceRelationship (Read)
iotsitewise:DescribeAssetProperty (Read)
iotsitewise:DescribeBulkImportJob (Read)
iotsitewise:DescribeComputationModel (Read)
iotsitewise:DescribeComputationModelExecutionSummary (Read)
iotsitewise:DescribeDashboard (Read)
iotsitewise:DescribeDataset (Read)
iotsitewise:DescribeDefaultEncryptionConfiguration (Read)
iotsitewise:DescribeExecution (Read)
iotsitewise:DescribeGateway (Read)
iotsitewise:DescribeGatewayCapabilityConfiguration (Read)
iotsitewise:DescribeLoggingOptions (Read)
iotsitewise:DescribePortal (Read)
iotsitewise:DescribeProject (Read)
iotsitewise:DescribeStorageConfiguration (Read)
iotsitewise:DescribeTimeSeries (Read)
iotsitewise:ExecuteQuery (Read)
iotsitewise:ListAccessPolicies (List)
iotsitewise:ListActions (List)
iotsitewise:ListAssetModelCompositeModels (List)
iotsitewise:ListAssetModelProperties (List)
iotsitewise:ListAssetModels (List)
iotsitewise:ListAssetProperties (List)
iotsitewise:ListAssetRelationships (List)
iotsitewise:ListAssets (List)
iotsitewise:ListAssociatedAssets (List)
iotsitewise:ListBulkImportJobs (List)
iotsitewise:ListCompositionRelationships (List)
iotsitewise:ListComputationModelDataBindingUsages (List)
iotsitewise:ListComputationModelResolveToResources (List)
iotsitewise:ListComputationModels (List)
iotsitewise:ListDashboards (List)
iotsitewise:ListDatasets (List)
iotsitewise:ListExecutions (List)
iotsitewise:ListGateways (List)
iotsitewise:ListInterfaceRelationships (List)
iotsitewise:ListPortals (List)
iotsitewise:ListProjectAssets (List)
iotsitewise:ListProjects (List)
iotsitewise:ListTagsForResource (Read)
iotsitewise:ListTimeSeries (List)

Data-plane actions (7)

By access level: 7 Read.

Data-plane actions by service
Service	Granted	Access levels and limits	Granted by
IoT SiteWise	7 of 22	7 Read; 0 restricted, 0 conditional	iotsitewise:BatchGetAssetPropertyAggregates, iotsitewise:BatchGetAssetPropertyValue, iotsitewise:BatchGetAssetPropertyValueHistory, iotsitewise:GetAssetPropertyAggregates, iotsitewise:GetAssetPropertyValue, iotsitewise:GetAssetPropertyValueHistory, iotsitewise:GetInterpolatedAssetPropertyValues

IoT SiteWise: 7 actions

iotsitewise:BatchGetAssetPropertyAggregates (Read)
iotsitewise:BatchGetAssetPropertyValue (Read)
iotsitewise:BatchGetAssetPropertyValueHistory (Read)
iotsitewise:GetAssetPropertyAggregates (Read)
iotsitewise:GetAssetPropertyValue (Read)
iotsitewise:GetAssetPropertyValueHistory (Read)
iotsitewise:GetInterpolatedAssetPropertyValues (Read)

Excluded and conditional actions

No patterns are excluded by NotAction or Deny statements.

Resource scope and attachment

Resource scope across granted actions: all-resources.

Can be attached: Yes, to users, groups and roles.

Why this tier

Grants only List and Read actions.

Guidance

Pending editorial review. The permission data on this page comes straight from AWS; this section will be filled in once a reviewed guide exists.

Same service

Same domain

Frequently asked questions

Pending editorial review. The permission data on this page comes straight from AWS; this section will be filled in once a reviewed guide exists.

Policy JSON

Download policy.json

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "iotsitewise:BatchGetAssetPropertyAggregates",
        "iotsitewise:BatchGetAssetPropertyValue",
        "iotsitewise:BatchGetAssetPropertyValueHistory",
        "iotsitewise:DescribeAccessPolicy",
        "iotsitewise:DescribeAction",
        "iotsitewise:DescribeAsset",
        "iotsitewise:DescribeAssetCompositeModel",
        "iotsitewise:DescribeAssetModel",
        "iotsitewise:DescribeAssetModelCompositeModel",
        "iotsitewise:DescribeAssetModelInterfaceRelationship",
        "iotsitewise:DescribeAssetProperty",
        "iotsitewise:DescribeBulkImportJob",
        "iotsitewise:DescribeComputationModel",
        "iotsitewise:DescribeComputationModelExecutionSummary",
        "iotsitewise:DescribeDashboard",
        "iotsitewise:DescribeDataset",
        "iotsitewise:DescribeDefaultEncryptionConfiguration",
        "iotsitewise:DescribeExecution",
        "iotsitewise:DescribeGateway",
        "iotsitewise:DescribeGatewayCapabilityConfiguration",
        "iotsitewise:DescribeLoggingOptions",
        "iotsitewise:DescribePortal",
        "iotsitewise:DescribeProject",
        "iotsitewise:DescribeStorageConfiguration",
        "iotsitewise:DescribeTimeSeries",
        "iotsitewise:ExecuteQuery",
        "iotsitewise:GetAssetPropertyAggregates",
        "iotsitewise:GetAssetPropertyValue",
        "iotsitewise:GetAssetPropertyValueHistory",
        "iotsitewise:GetInterpolatedAssetPropertyValues",
        "iotsitewise:ListAccessPolicies",
        "iotsitewise:ListActions",
        "iotsitewise:ListAssetModelCompositeModels",
        "iotsitewise:ListAssetModelProperties",
        "iotsitewise:ListAssetModels",
        "iotsitewise:ListAssetProperties",
        "iotsitewise:ListAssetRelationships",
        "iotsitewise:ListAssets",
        "iotsitewise:ListAssociatedAssets",
        "iotsitewise:ListBulkImportJobs",
        "iotsitewise:ListCompositionRelationships",
        "iotsitewise:ListComputationModelDataBindingUsages",
        "iotsitewise:ListComputationModelResolveToResources",
        "iotsitewise:ListComputationModels",
        "iotsitewise:ListDashboards",
        "iotsitewise:ListDatasets",
        "iotsitewise:ListExecutions",
        "iotsitewise:ListGateways",
        "iotsitewise:ListInterfaceRelationships",
        "iotsitewise:ListPortals",
        "iotsitewise:ListProjectAssets",
        "iotsitewise:ListProjects",
        "iotsitewise:ListTagsForResource",
        "iotsitewise:ListTimeSeries"
      ],
      "Resource": "*"
    }
  ]
}

Version history

Current version v5, edited by AWS on 2026-02-12. Version history is recorded from 2026-11-11. Earlier versions are in the IAM console under Policy versions.

Attach snippets

AWS CLI

aws iam attach-role-policy --role-name ROLE_NAME --policy-arn arn:aws:iam::aws:policy/AWSIoTSiteWiseReadOnlyAccess
aws iam attach-user-policy --user-name USER_NAME --policy-arn arn:aws:iam::aws:policy/AWSIoTSiteWiseReadOnlyAccess
aws iam attach-group-policy --group-name GROUP_NAME --policy-arn arn:aws:iam::aws:policy/AWSIoTSiteWiseReadOnlyAccess

CloudFormation

Resources:
  ExampleRole:
    Type: AWS::IAM::Role
    Properties:
      AssumeRolePolicyDocument: {}  # replace with your trust policy
      ManagedPolicyArns:
        - arn:aws:iam::aws:policy/AWSIoTSiteWiseReadOnlyAccess

Terraform

resource "aws_iam_role_policy_attachment" "awsiotsitewisereadonlyaccess" {
  role       = aws_iam_role.example.name
  policy_arn = "arn:aws:iam::aws:policy/AWSIoTSiteWiseReadOnlyAccess"
}

CDK (TypeScript)

role.addManagedPolicy(
  iam.ManagedPolicy.fromAwsManagedPolicyName("AWSIoTSiteWiseReadOnlyAccess"),
);

Sources

Pending editorial review. No editorial sources are listed yet.