AWSNetworkManagerReadOnlyAccess

ReaderAWS managedActivePermissions reviewedShow on map Compare

Summary

Provides read only access to Amazon NetworkManager via the AWS Management Console.

Permissions imported from the AWS Managed Policy Reference Guide; other sections pending editorial review.

Identity

ARN: arn:aws:iam::aws:policy/AWSNetworkManagerReadOnlyAccess
Default version: v1
Created: 2019-12-03
Last edited: 2019-12-03
Services: networkmanager

Control-plane actions (39)

By access level: 19 List, 20 Read.

Control-plane actions by service
Service	Granted	Access levels and limits	Granted by
Network Manager	39 of 97	19 List, 20 Read; 0 restricted, 0 conditional	networkmanager:Describe, networkmanager:Get, networkmanager:List*

Network Manager: 39 actions

networkmanager:DescribeGlobalNetworks (List)
networkmanager:GetConnectAttachment (Read)
networkmanager:GetConnectPeer (Read)
networkmanager:GetConnectPeerAssociations (Read)
networkmanager:GetConnections (List)
networkmanager:GetCoreNetwork (Read)
networkmanager:GetCoreNetworkChangeEvents (Read)
networkmanager:GetCoreNetworkChangeSet (Read)
networkmanager:GetCoreNetworkPolicy (Read)
networkmanager:GetCustomerGatewayAssociations (List)
networkmanager:GetDevices (List)
networkmanager:GetDirectConnectGatewayAttachment (Read)
networkmanager:GetLinkAssociations (List)
networkmanager:GetLinks (List)
networkmanager:GetNetworkResourceCounts (Read)
networkmanager:GetNetworkResourceRelationships (Read)
networkmanager:GetNetworkResources (Read)
networkmanager:GetNetworkRoutes (Read)
networkmanager:GetNetworkTelemetry (Read)
networkmanager:GetResourcePolicy (Read)
networkmanager:GetRouteAnalysis (Read)
networkmanager:GetSiteToSiteVpnAttachment (Read)
networkmanager:GetSites (List)
networkmanager:GetTransitGatewayConnectPeerAssociations (List)
networkmanager:GetTransitGatewayPeering (Read)
networkmanager:GetTransitGatewayRegistrations (List)
networkmanager:GetTransitGatewayRouteTableAttachment (Read)
networkmanager:GetVpcAttachment (Read)
networkmanager:ListAttachmentNatConfigurations (List)
networkmanager:ListAttachmentRoutingPolicyAssociations (List)
networkmanager:ListAttachments (List)
networkmanager:ListConnectPeers (List)
networkmanager:ListCoreNetworkPolicyVersions (List)
networkmanager:ListCoreNetworkPrefixListAssociations (List)
networkmanager:ListCoreNetworkRoutingInformation (List)
networkmanager:ListCoreNetworks (List)
networkmanager:ListOrganizationServiceAccessStatus (List)
networkmanager:ListPeerings (List)
networkmanager:ListTagsForResource (Read)

Data-plane actions (0)

By access level: none.

This policy grants no actions in this plane.

Excluded and conditional actions

No patterns are excluded by NotAction or Deny statements.

Resource scope and attachment

Resource scope across granted actions: all-resources.

Can be attached: Yes, to users, groups and roles.

Why this tier

Grants only List and Read actions.

Guidance

Pending editorial review. The permission data on this page comes straight from AWS; this section will be filled in once a reviewed guide exists.

Same service

Same domain

Frequently asked questions

Pending editorial review. The permission data on this page comes straight from AWS; this section will be filled in once a reviewed guide exists.

Policy JSON

Download policy.json

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "networkmanager:Describe*",
        "networkmanager:Get*",
        "networkmanager:List*"
      ],
      "Resource": "*"
    }
  ]
}

Version history

Current version v1, edited by AWS on 2019-12-03. Version history is recorded from 2026-11-11. Earlier versions are in the IAM console under Policy versions.

Attach snippets

AWS CLI

aws iam attach-role-policy --role-name ROLE_NAME --policy-arn arn:aws:iam::aws:policy/AWSNetworkManagerReadOnlyAccess
aws iam attach-user-policy --user-name USER_NAME --policy-arn arn:aws:iam::aws:policy/AWSNetworkManagerReadOnlyAccess
aws iam attach-group-policy --group-name GROUP_NAME --policy-arn arn:aws:iam::aws:policy/AWSNetworkManagerReadOnlyAccess

CloudFormation

Resources:
  ExampleRole:
    Type: AWS::IAM::Role
    Properties:
      AssumeRolePolicyDocument: {}  # replace with your trust policy
      ManagedPolicyArns:
        - arn:aws:iam::aws:policy/AWSNetworkManagerReadOnlyAccess

Terraform

resource "aws_iam_role_policy_attachment" "awsnetworkmanagerreadonlyaccess" {
  role       = aws_iam_role.example.name
  policy_arn = "arn:aws:iam::aws:policy/AWSNetworkManagerReadOnlyAccess"
}

CDK (TypeScript)

role.addManagedPolicy(
  iam.ManagedPolicy.fromAwsManagedPolicyName("AWSNetworkManagerReadOnlyAccess"),
);

Sources

Pending editorial review. No editorial sources are listed yet.