AWSResourceExplorerServiceRolePolicy

Summary

Allows Resource Explorer to view resources and CloudTrail events on your behalf to index your resources for search.

Permissions imported from the AWS Managed Policy Reference Guide; other sections pending editorial review.

Identity

ARN

arn:aws:iam::aws:policy/aws-service-role/AWSResourceExplorerServiceRolePolicyCopy ARN

Default version

v59

Created

2022-10-25

Last edited

2026-10-30

Services

access-analyzer, account, account-access, acm, acm-pca, aidevops, aiops, airflow, airflow-serverless, amplify, amplifyuibuilder, aoss, apigateway, app-integrations, appconfig, appfabric, appflow, application-autoscaling, application-signals, applicationinsights, appmesh, apprunner, appstream, appsync, apptest, aps, arc-region-switch, arc-zonal-shift, athena, auditmanager, autoscaling, autoscaling-plans, b2bi, backup, backup-gateway, backup-search, batch, bcm-dashboards, bcm-data-exports, bedrock, bedrock-agentcore, billing, billingconductor, braket, budgets, cases, cassandra, ce, chatbot, chime, cleanrooms, cleanrooms-ml, cloud9, cloudformation, cloudfront, cloudhsm, cloudtrail, cloudwatch, codeartifact, codebuild, codecommit, codeconnections, codedeploy, codeguru-profiler, codeguru-reviewer, codepipeline, codestar-connections, cognito-identity, cognito-idp, comprehend, config, connect, connect-campaigns, controltower, cur, databrew, dataexchange, datapipeline, datasync, datazone, dax, deadline, detective, devicefarm, devops-guru, directconnect, dlm, dms, docdb-elastic, drs, ds, dsql, dynamodb, ec2, ecr, ecr-public, ecs, eks, elasticache, elasticbeanstalk, elasticfilesystem, elasticloadbalancing, elasticmapreduce, elemental-inference, emr-containers, emr-serverless, entityresolution, es, events, evs, finspace, firehose, fis, fms, forecast, frauddetector, fsx, gamelift, gameliftstreams, geo, glacier, globalaccelerator, glue, grafana, greengrass, groundstation, guardduty, healthlake, iam, identitystore, imagebuilder, inspector, inspector2, interconnect, internetmonitor, invoicing, iot, iotanalytics, iotdeviceadvisor, iotfleethub, iotfleetwise, iotmanagedintegrations, iotsitewise, iottwinmaker, iotwireless, ivs, ivschat, kafka, kafkaconnect, kendra, kendra-ranking, kinesis, kinesisanalytics, kinesisvideo, kms, lakeformation, lambda, launchwizard, lex, license-manager, lightsail, logs, lookoutequipment, lookoutmetrics, lookoutvision, m2, macie2, managedblockchain, mediaconnect, mediaconvert, medialive, mediapackage, mediapackage-vod, mediapackagev2, mediastore, mediatailor, medical-imaging, memorydb, mgn, mobiletargeting, mpa, mq, neptune-graph, network-firewall, networkmanager, networkmonitor, notifications, notifications-contacts, nova-act, oam, odb, omics, organizations, osis, outposts, panorama, partnercentral, payment-cryptography, pca-connector-ad, pca-connector-scep, pcs, personalize, pi, pipes, polly, profile, proton, qbusiness, qldb, quicksight, ram, rbin, rds, redshift, redshift-serverless, refactor-spaces, rekognition, resiliencehub, resource-explorer-2, resource-groups, rolesanywhere, route53, route53-recovery-control-config, route53-recovery-readiness, route53domains, route53globalresolver, route53profiles, route53resolver, rtbfabric, rum, s3, s3-outposts, s3express, s3files, s3tables, s3vectors, sagemaker, scheduler, schemas, scn, sdb, secretsmanager, securityagent, securityhub, securitylake, servicecatalog, servicediscovery, servicequotas, ses, shield, signer, simspaceweaver, sms-voice, sns, sqs, ssm, ssm-contacts, ssm-guiconnect, ssm-incidents, ssm-quicksetup, ssm-sap, sso, sso-directory, states, storagegateway, sts, support, supportapp, supportauthz, swf, synthetics, tag, textract, timestream, timestream-influxdb, transcribe, transfer, verifiedpermissions, voiceid, vpc-lattice, waf, waf-regional, wafv2, wellarchitected, wickr, wisdom, workspaces, workspaces-web, xray

Control-plane actions (3308)

By access level: 1503 List, 4 Permissions management, 1795 Read, 6 Write.

The full action list is in actions.json.

Data-plane actions (12)

By access level: 4 List, 8 Read.

The full action list is in actions.json.

Excluded and conditional actions

No patterns are excluded by NotAction or Deny statements.

Resource scope and attachment

Resource scope across granted actions: mixed.

Can be attached: No (service-linked role policy).

Why this tier

• Grants 10 write, tagging or permissions-management actions, short of full control of any service.

Guidance

Pending editorial review. The permission data on this page comes straight from AWS; this section will be filled in once a reviewed guide exists.

Related policies

Same domain

• AmazonAthenaFullAccess
• AmazonChimeSDKMediaPipelinesServiceLinkedRolePolicy
• AmazonChimeSDKMessagingServiceRolePolicy
• AmazonDataZoneDomainExecutionRolePolicy
• AmazonDataZoneEnvironmentRolePermissionsBoundary
• AmazonDataZoneFullAccess
• AmazonDataZoneFullUserAccess
• AmazonDataZoneGlueManageAccessRolePolicy

Frequently asked questions

Pending editorial review. The permission data on this page comes straight from AWS; this section will be filled in once a reviewed guide exists.

Policy JSON

Download policy.json

This document is large, so it is shown compact here. Use the formatted policy.json to read it with indentation.

{"Version":"2012-10-17","Statement":[{"Sid":"ResourceExplorerAndOrganizationsAccess","Effect":"Allow","Action":["resource-explorer-2:UpdateIndexType","resource-explorer-2:CreateIndex","resource-explorer-2:CreateView","resource-explorer-2:AssociateDefaultView","resource-explorer-2:DeleteIndex","organizations:DescribeAccount","organizations:DescribeOrganization","organizations:ListAWSServiceAccessForOrganization","organizations:ListAccounts","organizations:ListDelegatedAdministrators","organizations:ListOrganizationalUnitsForParent","organizations:ListRoots","autoscaling:DescribeNotificationConfigurations","neptune-graph:GetExportTask","neptune-graph:ListExportTasks","neptune-graph:ListGraphs","quicksight:DescribeAgent","quicksight:DescribeAgentPermissions","quicksight:DescribeBrand","quicksight:DescribeIngestion","quicksight:DescribeNamespace","quicksight:ListIngestions","quicksight:ListNamespaces"],"Resource":"*"},{"Sid":"CloudTrailEventsAccess","Effect":"Allow","Action":["cloudtrail:CreateServiceLinkedChannel","cloudtrail:GetServiceLinkedChannel"],"Resource":"arn:aws:cloudtrail:*:*:channel/aws-service-channel/resource-explorer-2/*"},{"Sid":"ApiGatewayAccess","Effect":"Allow","Action":"apigateway:GET","Resource":["arn:aws:apigateway:*::/restapis","arn:aws:apigateway:*::/restapis/*","arn:aws:apigateway:*::/restapis/*/deployments","arn:aws:apigateway:*::/restapis/*/deployments/*","arn:aws:apigateway:*::/restapis/*/resources","arn:aws:apigateway:*::/restapis/*/resources/*","arn:aws:apigateway:*::/restapis/*/resources/*/methods/*","arn:aws:apigateway:*::/restapis/*/stages","arn:aws:apigateway:*::/restapis/*/stages/*","arn:aws:apigateway:*::/vpclinks","arn:aws:apigateway:*::/apis","arn:aws:apigateway:*::/apis/*/routes","arn:aws:apigateway:*::/apis/*/stages","arn:aws:apigateway:*::/apis/*","arn:aws:apigateway:*::/apis/*/routes/*","arn:aws:apigateway:*::/apis/*/stages/*","arn:aws:apigateway:*::/apis/*/integrations","arn:aws:apigateway:*::/apis/*/integrations/*"]},{"Sid":"ResourceInventoryAccess","Effect":"Allow","Action":["access-analyzer:CheckNoPublicAccess","access-analyzer:GetAnalyzer","access-analyzer:ListAnalyzers","access-analyzer:ListArchiveRules","access-analyzer:ValidatePolicy","acm-pca:DescribeCertificateAuthority","acm-pca:GetCertificateAuthorityCertificate","acm-pca:GetCertificateAuthorityCsr","acm-pca:ListCertificateAuthorities","acm-pca:ListPermissions","acm-pca:ListTags","acm:DescribeCertificate","acm:GetAccountConfiguration","acm:ListCertificates","acm:ListTagsForCertificate","aidevops:DescribePrivateConnection","aidevops:GetAgentSpace","aidevops:GetOperatorApp","aidevops:GetService","aidevops:GetTrigger","aidevops:ListAgentSpaces","aidevops:ListPrivateConnections","aidevops:ListServices","aidevops:ListTagsForResource","aidevops:ListTriggers","aiops:GetInvestigationGroup","aiops:ListInvestigationGroups","aiops:ListTagsForResource","airflow-serverless:GetWorkflow","airflow-serverless:ListWorkflows","airflow:ListEnvironments","amplify:GetDomainAssociation","amplify:GetJob","amplify:GetWebhook","amplify:ListApps","amplify:ListBranches","amplify:ListDomainAssociations","amplify:ListJobs","amplify:ListTagsForResource","amplify:ListWebhooks","amplifyuibuilder:GetCodegenJob","amplifyuibuilder:GetComponent","amplifyuibuilder:GetForm","amplifyuibuilder:ListCodegenJobs","amplifyuibuilder:ListComponents","amplifyuibuilder:ListForms","aoss:BatchGetCollection","aoss:BatchGetCollectionGroup","aoss:BatchGetLifecyclePolicy","aoss:BatchGetVpcEndpoint","aoss:GetAccessPolicy","aoss:GetSecurityConfig","aoss:GetSecurityPolicy","aoss:ListAccessPolicies","aoss:ListCollectionGroups","aoss:ListCollections","aoss:ListLifecyclePolicies","aoss:ListSecurityConfigs","aoss:ListSecurityPolicies","aoss:ListTagsForResource","aoss:ListVpcEndpoints","app-integrations:GetApplication","app-integrations:GetDataIntegration","app-integrations:GetEventIntegration","app-integrations:ListApplications","app-integrations:ListDataIntegrations","app-integrations:ListEventIntegrations","app-integrations:ListTagsForResource","appconfig:GetExperimentRun","appconfig:GetExtension","appconfig:GetHostedConfigurationVersion","appconfig:ListApplications","appconfig:ListDeploymentStrategies","appconfig:ListEnvironments","appconfig:ListExperimentRuns","appconfig:ListExtensionAssociations","appconfig:ListExtensions","appfabric:GetAppAuthorization","appfabric:GetAppBundle","appfabric:GetIngestion","appfabric:ListAppAuthorizations","appfabric:ListAppBundles","appfabric:ListIngestions","appfabric:ListTagsForResource","appflow:DescribeConnector","appflow:DescribeFlow","appflow:ListConnectors","appflow:ListFlows","appflow:ListTagsForResource","application-autoscaling:DescribeScalableTargets","application-autoscaling:DescribeScheduledActions","application-signals:GetServiceLevelObjective","application-signals:ListServiceLevelObjectiveExclusionWindows","application-signals:ListServiceLevelObjectives","application-signals:ListServices","application-signals:ListTagsForResource","applicationinsights:DescribeApplication","applicationinsights:DescribeComponent","applicationinsights:DescribeLogPattern","applicationinsights:ListApplications","applicationinsights:ListComponents","applicationinsights:ListLogPatternSets","applicationinsights:ListLogPatterns","applicationinsights:ListTagsForResource","appmesh:ListGatewayRoutes","appmesh:ListMeshes","appmesh:ListRoutes","appmesh:ListVirtualGateways","appmesh:ListVirtualNodes","appmesh:ListVirtualRouters","appmesh:ListVirtualServices","apprunner:DescribeAutoScalingConfiguration","apprunner:DescribeObservabilityConfiguration","apprunner:DescribeService","apprunner:DescribeVpcConnector","apprunner:DescribeVpcIngressConnection","apprunner:ListAutoScalingConfigurations","apprunner:ListConnections","apprunner:ListObservabilityConfigurations","apprunner:ListServices","apprunner:ListVpcConnectors","apprunner:ListVpcIngressConnections","appstream:DescribeAppBlockBuilders","appstream:DescribeAppBlocks","appstream:DescribeApplications","appstream:DescribeFleets","appstream:DescribeImageBuilders","appstream:DescribeImages","appstream:DescribeStacks","appstream:ListAssociatedFleets","appstream:ListAssociatedStacks","appstream:ListTagsForResource","appsync:GetApi","appsync:GetApiAssociation","appsync:GetApiCache","appsync:GetChannelNamespace","appsync:GetDataSource","appsync:GetDomainName","appsync:GetGraphqlApi","appsync:GetGraphqlApiEnvironmentVariables","appsync:GetResolver","appsync:GetSourceApiAssociation","appsync:GetType","appsync:ListApis","appsync:ListChannelNamespaces","appsync:ListDataSources","appsync:ListDomainNames","appsync:ListGraphqlApis","appsync:ListResolvers","appsync:ListSourceApiAssociations","appsync:ListTagsForResource","appsync:ListTypes","apptest:GetTestCase","apptest:ListTagsForResource","apptest:ListTestCases","aps:DescribeAnomalyDetector","aps:DescribeQueryLoggingConfiguration","aps:DescribeResourcePolicy","aps:DescribeRuleGroupsNamespace","aps:DescribeScraper","aps:DescribeScraperLoggingConfiguration","aps:DescribeWorkspaceConfiguration","aps:ListAnomalyDetectors","aps:ListRuleGroupsNamespaces","aps:ListScrapers","aps:ListTagsForResource","aps:ListWorkspaces","arc-region-switch:GetPlan","arc-region-switch:ListPlans","arc-region-switch:ListRoute53HealthChecks","arc-region-switch:ListTagsForResource","arc-zonal-shift:GetAutoshiftObserverNotificationStatus","arc-zonal-shift:GetManagedResource","arc-zonal-shift:ListManagedResources","athena:GetCapacityAssignmentConfiguration","athena:GetCapacityReservation","athena:GetNamedQuery","athena:GetSession","athena:ListCapacityReservations","athena:ListDataCatalogs","athena:ListNamedQueries","athena:ListSessions","athena:ListWorkGroups","auditmanager:GetAccountStatus","auditmanager:GetAssessment","auditmanager:GetAssessmentFramework","auditmanager:GetControl","auditmanager:ListAssessmentFrameworks","auditmanager:ListAssessments","auditmanager:ListControls","auditmanager:ListTagsForResource","autoscaling:DescribeAutoScalingGroups","autoscaling:DescribePolicies","autoscaling:DescribeScheduledActions","b2bi:GetCapability","b2bi:GetPartnership","b2bi:GetProfile","b2bi:ListCapabilities","b2bi:ListPartnerships","b2bi:ListProfiles","b2bi:ListTagsForResource","backup-gateway:GetGateway","backup-gateway:GetHypervisor","backup-gateway:GetVirtualMachine","backup-gateway:ListGateways","backup-gateway:ListHypervisors","backup-gateway:ListTagsForResource","backup-search:GetSearchJob","backup-search:ListSearchJobs","backup:GetLegalHold","backup:GetRestoreTestingPlan","backup:GetRestoreTestingSelection","backup:ListBackupPlans","backup:ListBackupVaults","backup:ListLegalHolds","backup:ListRecoveryPointsByBackupVault","backup:ListReportPlans","backup:ListRestoreTestingPlans","backup:ListRestoreTestingSelections","batch:DescribeComputeEnvironments","batch:DescribeConsumableResource","batch:DescribeJobDefinitions","batch:DescribeJobQueues","batch:DescribeJobs","batch:DescribeQuotaShare","batch:DescribeServiceEnvironments","batch:DescribeServiceJob","batch:ListConsumableResources","batch:ListJobs","batch:ListQuotaShares","batch:ListSchedulingPolicies","batch:ListServiceJobs","bcm-dashboards:GetDashboard","bcm-dashboards:ListDashboards","bcm-dashboards:ListTagsForResource","bcm-data-exports:GetExport","bcm-data-exports:ListExports","bcm-data-exports:ListTagsForResource","bedrock-agentcore:GetAgentRuntimeEndpoint","bedrock-agentcore:GetApiKeyCredentialProvider","bedrock-agentcore:GetBrowser","bedrock-agentcore:GetCapacityProvider","bedrock-agentcore:GetCodeInterpreter","bedrock-agentcore:GetConfigurationBundle","bedrock-agentcore:GetDataset","bedrock-agentcore:GetEvaluator","bedrock-agentcore:GetGateway","bedrock-agentcore:GetGatewayTarget","bedrock-agentcore:GetHarness","bedrock-agentcore:GetHarnessEndpoint","bedrock-agentcore:GetMemory","bedrock-agentcore:GetOauth2CredentialProvider","bedrock-agentcore:GetOnlineEvaluationConfig","bedrock-agentcore:GetPaymentConnector","bedrock-agentcore:GetPaymentManager","bedrock-agentcore:GetPolicy","bedrock-agentcore:GetPolicyEngine","bedrock-agentcore:GetPolicyEngineSummary","bedrock-agentcore:GetPolicyGeneration","bedrock-agentcore:GetPolicySummary","bedrock-agentcore:GetResourcePolicy","bedrock-agentcore:GetTokenVault","bedrock-agentcore:GetWorkloadIdentity","bedrock-agentcore:ListAgentRuntimeEndpoints","bedrock-agentcore:ListAgentRuntimes","bedrock-agentcore:ListApiKeyCredentialProviders","bedrock-agentcore:ListBrowsers","bedrock-agentcore:ListCapacityProviders","bedrock-agentcore:ListCodeInterpreters","bedrock-agentcore:ListConfigurationBundles","bedrock-agentcore:ListDatasets","bedrock-agentcore:ListEvaluators","bedrock-agentcore:ListGatewayTargets","bedrock-agentcore:ListGateways","bedrock-agentcore:ListHarnessEndpoints","bedrock-agentcore:ListHarnesses","bedrock-agentcore:ListMemories","bedrock-agentcore:ListOauth2CredentialProviders","bedrock-agentcore:ListOnlineEvaluationConfigs","bedrock-agentcore:ListPaymentConnectors","bedrock-agentcore:ListPaymentManagers","bedrock-agentcore:ListPolicies","bedrock-agentcore:ListPolicyEngineSummaries","bedrock-agentcore:ListPolicyEngines","bedrock-agentcore:ListPolicyGenerations","bedrock-agentcore:ListPolicySummaries","bedrock-agentcore:ListWorkloadIdentities","bedrock:GetAgentAlias","bedrock:GetAsyncInvoke","bedrock:GetAutomatedReasoningPolicy","bedrock:GetBlueprint","bedrock:GetDataAutomationProject","bedrock:GetDataAutomationStatus","bedrock:GetDataSource","bedrock:GetEvaluationJob","bedrock:GetFlow","bedrock:GetFlowAlias","bedrock:GetFlowVersion","bedrock:GetFoundationModel","bedrock:GetImportedModel","bedrock:GetInferenceProfile","bedrock:GetModelImportJob","bedrock:GetModelInvocationJob","bedrock:GetModelInvocationLoggingConfiguration","bedrock:ListAgentAliases","bedrock:ListAgents","bedrock:ListAutomatedReasoningPolicies","bedrock:ListBlueprints","bedrock:ListCustomModels","bedrock:ListDataAutomationProjects","bedrock:ListDataSources","bedrock:ListEnforcedGuardrailsConfiguration","bedrock:ListEvaluationJobs","bedrock:ListFlowAliases","bedrock:ListFlowVersions","bedrock:ListFlows","bedrock:ListFoundationModels","bedrock:ListGuardrails","bedrock:ListInferenceProfiles","bedrock:ListKnowledgeBases","bedrock:ListPromptRouters","bedrock:ListPrompts","bedrock:ListTagsForResource","billing:GetBillingView","billing:ListBillingViews","billing:ListSourceViewsForBillingView","billing:ListTagsForResource","billingconductor:ListCustomLineItemVersions","billingconductor:ListResourcesAssociatedToCustomLineItem","braket:GetJob","braket:GetQuantumTask","braket:SearchJobs","braket:SearchQuantumTasks","budgets:DescribeBudgetActionsForAccount","budgets:ViewBudget","cases:GetCase","cases:ListTagsForResource","cases:SearchCases","cases:SearchRelatedItems","cassandra:GetStream","cassandra:ListStreams","cassandra:SelectMultiRegionResource","ce:DescribeCostCategoryDefinition","ce:GetAnomalyMonitors","ce:GetAnomalySubscriptions","ce:ListCostCategoryDefinitions","ce:ListTagsForResource","chatbot:DescribeSlackChannelConfigurations","chatbot:GetCustomAction","chatbot:GetMicrosoftTeamsChannelConfiguration","chatbot:ListAssociations","chatbot:ListCustomActions","chatbot:ListMicrosoftTeamsChannelConfigurations","chatbot:ListTagsForResource","chime:DescribeAppInstance","chime:ListAppInstanceBots","chime:ListAppInstanceUsers","chime:ListAppInstances","chime:ListMediaInsightsPipelineConfigurations","chime:ListMediaPipelineKinesisVideoStreamPools","chime:ListMediaPipelines","chime:ListSipMediaApplications","chime:ListTagsForResource","chime:ListVoiceConnectors","cleanrooms-ml:GetAudienceModel","cleanrooms-ml:GetConfiguredModelAlgorithm","cleanrooms-ml:GetMLInputChannel","cleanrooms-ml:GetTrainedModel","cleanrooms-ml:GetTrainingDataset","cleanrooms-ml:ListAudienceModels","cleanrooms-ml:ListTrainedModels","cleanrooms-ml:ListTrainingDatasets","cleanrooms:GetCollaboration","cleanrooms:GetConfiguredTable","cleanrooms:GetConfiguredTableAnalysisRule","cleanrooms:GetConfiguredTableAssociation","cleanrooms:GetConfiguredTableAssociationAnalysisRule","cleanrooms:GetIdMappingTable","cleanrooms:GetIdNamespaceAssociation","cleanrooms:GetIntermediateTable","cleanrooms:GetMembership","cleanrooms:GetPrivacyBudgetTemplate","cleanrooms:ListAnalysisTemplates","cleanrooms:ListCollaborations","cleanrooms:ListConfiguredTableAssociations","cleanrooms:ListConfiguredTables","cleanrooms:ListIdMappingTables","cleanrooms:ListIdNamespaceAssociations","cleanrooms:ListMembers","cleanrooms:ListMemberships","cleanrooms:ListPrivacyBudgetTemplates","cleanrooms:ListTagsForResource","cloud9:ListEnvironments","cloudformation:BatchDescribeTypeConfigurations","cloudformation:DescribePublisher","cloudformation:DescribeStackInstance","cloudformation:DescribeStackSet","cloudformation:DescribeStacks","cloudformation:DescribeType","cloudformation:GetStackPolicy","cloudformation:GetTemplate","cloudformation:ListResources","cloudformation:ListStackInstances","cloudformation:ListStackSets","cloudformation:ListStacks","cloudformation:ListTypes","cloudfront:DescribeConnectionFunction","cloudfront:DescribeFunction","cloudfront:DescribeKeyValueStore","cloudfront:GetAnycastIpList","cloudfront:GetCachePolicy","cloudfront:GetCloudFrontOriginAccessIdentity","cloudfront:GetConnectionFunction","cloudfront:GetConnectionGroup","cloudfront:GetContinuousDeploymentPolicy","cloudfront:GetDistributionTenant","cloudfront:GetKeyGroup","cloudfront:GetMonitoringSubscription","cloudfront:GetOriginAccessControl","cloudfront:GetOriginRequestPolicy","cloudfront:GetPublicKey","cloudfront:GetRealtimeLogConfig","cloudfront:GetTrustStore","cloudfront:GetVpcOrigin","cloudfront:ListAnycastIpLists","cloudfront:ListCachePolicies","cloudfront:ListCloudFrontOriginAccessIdentities","cloudfront:ListConnectionFunctions","cloudfront:ListConnectionGroups","cloudfront:ListContinuousDeploymentPolicies","cloudfront:ListDistributionTenants","cloudfront:ListDistributions","cloudfront:ListFieldLevelEncryptionConfigs","cloudfront:ListFieldLevelEncryptionProfiles","cloudfront:ListFunctions","cloudfront:ListKeyGroups","cloudfront:ListKeyValueStores","cloudfront:ListOriginAccessControls","cloudfront:ListOriginRequestPolicies","cloudfront:ListPublicKeys","cloudfront:ListRealtimeLogConfigs","cloudfront:ListResponseHeadersPolicies","cloudfront:ListTagsForResource","cloudfront:ListTrustStores","cloudfront:ListVpcOrigins","cloudhsm:DescribeBackups","cloudhsm:DescribeClusters","cloudhsm:ListTags","cloudtrail:GetDashboard","cloudtrail:GetResourcePolicy","cloudtrail:ListChannels","cloudtrail:ListDashboards","cloudtrail:ListEventDataStores","cloudtrail:ListTags","cloudtrail:ListTrails","cloudwatch:DescribeAlarms","cloudwatch:DescribeInsightRules","cloudwatch:GetDataset","cloudwatch:ListAlarmMuteRules","cloudwatch:ListDashboards","cloudwatch:ListManagedInsightRules","cloudwatch:ListMetricStreams","codeartifact:DescribeDomain","codeartifact:DescribePackageGroup","codeartifact:DescribeRepository","codeartifact:GetDomainPermissionsPolicy","codeartifact:GetRepositoryPermissionsPolicy","codeartifact:ListAllowedRepositoriesForGroup","codeartifact:ListDomains","codeartifact:ListPackageGroups","codeartifact:ListRepositories","codeartifact:ListTagsForResource","codebuild:BatchGetBuilds","codebuild:BatchGetFleets","codebuild:ListBuilds","codebuild:ListFleets","codebuild:ListProjects","codecommit:ListRepositories","codeconnections:GetConnection","codeconnections:GetHost","codeconnections:ListConnections","codeconnections:ListHosts","codedeploy:GetApplication","codedeploy:GetDeploymentConfig","codedeploy:ListApplications","codedeploy:ListDeploymentConfigs","codedeploy:ListTagsForResource","codeguru-profiler:DescribeProfilingGroup","codeguru-profiler:GetNotificationConfiguration","codeguru-profiler:GetPolicy","codeguru-profiler:ListProfilingGroups","codeguru-profiler:ListTagsForResource","codeguru-reviewer:DescribeRepositoryAssociation","codeguru-reviewer:ListRepositoryAssociations","codeguru-reviewer:ListTagsForResource","codepipeline:ListActionTypes","codepipeline:ListPipelines","codepipeline:ListTagsForResource","codepipeline:ListWebhooks","codestar-connections:GetConnection","codestar-connections:GetRepositoryLink","codestar-connections:GetSyncConfiguration","codestar-connections:ListConnections","codestar-connections:ListHosts","codestar-connections:ListRepositoryLinks","codestar-connections:ListSyncConfigurations","cognito-identity:DescribeIdentityPool","cognito-identity:ListIdentityPools","cognito-idp:AdminGetUser","cognito-idp:AdminListGroupsForUser","cognito-idp:DescribeManagedLoginBranding","cognito-idp:DescribeTerms","cognito-idp:DescribeUserPool","cognito-idp:DescribeUserPoolClient","cognito-idp:GetLogDeliveryConfiguration","cognito-idp:GetUICustomization","cognito-idp:GetUserPoolMfaConfig","cognito-idp:ListTerms","cognito-idp:ListUserPools","comprehend:DescribeDataset","comprehend:DescribeDocumentClassifier","comprehend:DescribeEndpoint","comprehend:DescribeFlywheel","comprehend:DescribeResourcePolicy","comprehend:ListDatasets","comprehend:ListDocumentClassifiers","comprehend:ListEndpoints","comprehend:ListEntityRecognizers","comprehend:ListFlywheels","comprehend:ListTagsForResource","config:BatchGetResourceConfig","config:DescribeConfigRules","config:DescribeConformancePacks","config:DescribeDeliveryChannels","config:DescribeOrganizationConformancePacks","config:GetConnector","config:GetCustomRulePolicy","config:GetResourceConfigHistory","config:GetStoredQuery","config:ListConfigurationRecorders","config:ListConnectors","config:ListDiscoveredResources","config:ListResourceEvaluations","config:ListStoredQueries","config:ListTagsForResource","config:SelectResourceConfig","connect-campaigns:DescribeCampaign","connect-campaigns:ListCampaigns","connect:DescribeAgentStatus","connect:DescribeContactFlow","connect:DescribeContactFlowModule","connect:DescribeEmailAddress","connect:DescribeEvaluationForm","connect:DescribeInstance","connect:DescribeInstanceStorageConfig","connect:DescribePhoneNumber","connect:DescribePredefinedAttribute","connect:DescribePrompt","connect:DescribeQuickConnect","connect:DescribeRoutingProfile","connect:DescribeRule","connect:DescribeSecurityProfile","connect:DescribeTrafficDistributionGroup","connect:DescribeUser","connect:DescribeUserHierarchyGroup","connect:DescribeUserHierarchyStructure","connect:DescribeView","connect:DescribeVocabulary","connect:GetTaskTemplate","connect:ListAgentStatuses","connect:ListApprovedOrigins","connect:ListBots","connect:ListContactFlowModules","connect:ListContactFlows","connect:ListEvaluationFormVersions","connect:ListEvaluationForms","connect:ListHoursOfOperations","connect:ListInstanceAttributes","connect:ListInstanceStorageConfigs","connect:ListInstances","connect:ListIntegrationAssociations","connect:ListLambdaFunctions","connect:ListPhoneNumbers","connect:ListPhoneNumbersV2","connect:ListPredefinedAttributes","connect:ListPrompts","connect:ListQueueEmailAddresses","connect:ListQueueQuickConnects","connect:ListQueues","connect:ListQuickConnects","connect:ListRoutingProfileManualAssignmentQueues","connect:ListRoutingProfileQueues","connect:ListRoutingProfiles","connect:ListRules","connect:ListSecurityKeys","connect:ListSecurityProfileApplications","connect:ListSecurityProfileFlowModules","connect:ListSecurityProfilePermissions","connect:ListSecurityProfiles","connect:ListTagsForResource","connect:ListTaskTemplates","connect:ListTrafficDistributionGroups","connect:ListUseCases","connect:ListUserHierarchyGroups","connect:ListUsers","connect:ListViewVersions","connect:ListViews","connect:SearchAvailablePhoneNumbers","connect:SearchEmailAddresses","connect:SearchVocabularies","controltower:GetEnabledBaseline","controltower:GetEnabledControl","controltower:GetLandingZone","controltower:ListEnabledBaselines","controltower:ListEnabledControls","controltower:ListLandingZones","controltower:ListTagsForResource","cur:DescribeReportDefinitions","cur:ListTagsForResource","databrew:ListDatasets","databrew:ListJobs","databrew:ListProjects","databrew:ListRecipes","databrew:ListRulesets","databrew:ListSchedules","dataexchange:GetAsset","dataexchange:GetDataSet","dataexchange:GetEventAction","dataexchange:ListDataSetRevisions","dataexchange:ListDataSets","dataexchange:ListEventActions","dataexchange:ListRevisionAssets","datapipeline:ListPipelines","datasync:DescribeLocationAzureBlob","datasync:DescribeLocationFsxOntap","datasync:DescribeLocationFsxOpenZfs","datasync:DescribeTaskExecution","datasync:ListLocations","datasync:ListTaskExecutions","datasync:ListTasks","datazone:GetDataSource","datazone:GetDomain","datazone:GetDomainUnit","datazone:GetEnvironment","datazone:GetEnvironmentAction","datazone:GetEnvironmentBlueprintConfiguration","datazone:GetEnvironmentProfile","datazone:GetGroupProfile","datazone:GetSubscriptionTarget","datazone:GetUserProfile","datazone:ListDataSources","datazone:ListDomainUnitsForParent","datazone:ListDomains","datazone:ListEntityOwners","datazone:ListEnvironmentActions","datazone:ListEnvironmentBlueprintConfigurations","datazone:ListEnvironmentProfiles","datazone:ListEnvironments","datazone:ListPolicyGrants","datazone:ListProjectMemberships","datazone:ListSubscriptionTargets","datazone:SearchGroupProfiles","datazone:SearchUserProfiles","dax:DescribeClusters","deadline:GetFarm","deadline:GetFleet","deadline:GetLicenseEndpoint","deadline:GetMonitor","deadline:GetQueue","deadline:GetQueueEnvironment","deadline:GetQueueFleetAssociation","deadline:GetQueueLimitAssociation","deadline:GetStorageProfile","deadline:GetWorker","deadline:ListFarms","deadline:ListFleets","deadline:ListLicenseEndpoints","deadline:ListMonitors","deadline:ListQueueEnvironments","deadline:ListQueueFleetAssociations","deadline:ListQueueLimitAssociations","deadline:ListQueues","deadline:ListStorageProfiles","deadline:ListTagsForResource","deadline:ListWorkers","detective:GetMembers","detective:ListGraphs","detective:ListMembers","detective:ListOrganizationAdminAccount","devicefarm:GetDevice","devicefarm:GetDeviceInstance","devicefarm:GetDevicePool","devicefarm:GetRemoteAccessSession","devicefarm:GetRun","devicefarm:GetVPCEConfiguration","devicefarm:ListDeviceInstances","devicefarm:ListDevicePools","devicefarm:ListDevices","devicefarm:ListInstanceProfiles","devicefarm:ListProjects","devicefarm:ListRuns","devicefarm:ListTestGridProjects","devicefarm:ListVPCEConfigurations","devops-guru:DescribeServiceIntegration","devops-guru:ListNotificationChannels","directconnect:DescribeConnections","directconnect:DescribeDirectConnectGateways","directconnect:DescribeVirtualInterfaces","dlm:GetLifecyclePolicies","dms:DescribeCertificates","dms:DescribeDataMigrations","dms:DescribeEndpoints","dms:DescribeEventSubscriptions","dms:DescribeReplicationConfigs","dms:DescribeReplicationInstances","dms:DescribeReplicationSubnetGroups","dms:DescribeReplicationTasks","dms:ListDataProviders","dms:ListInstanceProfiles","dms:ListMigrationProjects","dms:ListTagsForResource","docdb-elastic:GetCluster","docdb-elastic:GetClusterSnapshot","docdb-elastic:ListClusters","docdb-elastic:ListTagsForResource","drs:DescribeJobs","drs:DescribeLaunchConfigurationTemplates","drs:DescribeRecoveryInstances","drs:DescribeSourceNetworks","drs:DescribeSourceServers","drs:GetRecoveryPlan","drs:GetRecoveryPlanExecution","drs:ListRecoveryPlanExecutions","drs:ListRecoveryPlans","drs:ListTagsForResource","ds:DescribeDirectories","dsql:GetCluster","dsql:GetClusterPolicy","dsql:GetStream","dsql:GetVpcEndpointServiceName","dsql:ListClusters","dsql:ListStreams","dsql:ListTagsForResource","dynamodb:DescribeBackup","dynamodb:DescribeGlobalTable","dynamodb:DescribeStream","dynamodb:ListBackups","dynamodb:ListStreams","dynamodb:ListTables","ec2:DescribeAccountAttributes","ec2:DescribeAccountVpcEncryptionControl","ec2:DescribeAddressTransfers","ec2:DescribeAddresses","ec2:DescribeAddressesAttribute","ec2:DescribeAggregateIdFormat","ec2:DescribeApplicationStatus","ec2:DescribeApplicationStatusCheckAssociations","ec2:DescribeApplicationStatusChecks","ec2:DescribeAwsNetworkPerformanceMetricSubscriptions","ec2:DescribeBundleTasks","ec2:DescribeByoipCidrs","ec2:DescribeCapacityBlockExtensionHistory","ec2:DescribeCapacityBlockExtensionOfferings","ec2:DescribeCapacityBlockOfferings","ec2:DescribeCapacityBlockStatus","ec2:DescribeCapacityBlocks","ec2:DescribeCapacityManagerDataExports","ec2:DescribeCapacityReservationBillingRequests","ec2:DescribeCapacityReservationCancellationQuotes","ec2:DescribeCapacityReservationFleets","ec2:DescribeCapacityReservationTopology","ec2:DescribeCapacityReservations","ec2:DescribeCarrierGateways","ec2:DescribeClassicLinkInstances","ec2:DescribeClientVpnAuthorizationRules","ec2:DescribeClientVpnConnections","ec2:DescribeClientVpnEndpoints","ec2:DescribeClientVpnRoutes","ec2:DescribeCoipPools","ec2:DescribeConversionTasks","ec2:DescribeCustomerGateways","ec2:DescribeDeclarativePoliciesReports","ec2:DescribeDhcpOptions","ec2:DescribeEgressOnlyInternetGateways","ec2:DescribeElasticGpus","ec2:DescribeExportImageTasks","ec2:DescribeExportTasks","ec2:DescribeFastLaunchImages","ec2:DescribeFastSnapshotRestores","ec2:DescribeFleetHistory","ec2:DescribeFleetInstances","ec2:DescribeFleets","ec2:DescribeFlowLogs","ec2:DescribeFpgaImageAttribute","ec2:DescribeFpgaImages","ec2:DescribeHostReservationOfferings","ec2:DescribeHostReservations","ec2:DescribeHosts","ec2:DescribeIamInstanceProfileAssociations","ec2:DescribeIdFormat","ec2:DescribeIdentityIdFormat","ec2:DescribeImageAttribute","ec2:DescribeImageReferences","ec2:DescribeImageUsageReportEntries","ec2:DescribeImageUsageReports","ec2:DescribeImages","ec2:DescribeImportImageTasks","ec2:DescribeImportSnapshotTasks","ec2:DescribeInstanceConnectEndpoints","ec2:DescribeInstanceEventNotificationAttributes","ec2:DescribeInstanceEventWindows","ec2:DescribeInstanceImageMetadata","ec2:DescribeInstanceSqlHaHistoryStates","ec2:DescribeInstanceSqlHaStates","ec2:DescribeInstanceStatus","ec2:DescribeInstanceTopology","ec2:DescribeInstanceTypeOfferings","ec2:DescribeInstanceTypes","ec2:DescribeInstances","ec2:DescribeInternetGateways","ec2:DescribeIpamByoasn","ec2:DescribeIpamExternalResourceVerificationTokens","ec2:DescribeIpamInternetRegistryAssociations","ec2:DescribeIpamPolicies","ec2:DescribeIpamPoolAllocations","ec2:DescribeIpamPools","ec2:DescribeIpamPrefixListResolverTargets","ec2:DescribeIpamPrefixListResolvers","ec2:DescribeIpamResourceDiscoveries","ec2:DescribeIpamResourceDiscoveryAssociations","ec2:DescribeIpamScopes","ec2:DescribeIpams","ec2:DescribeIpv6Pools","ec2:DescribeKeyPairs","ec2:DescribeLaunchTemplates","ec2:DescribeLocalGatewayRouteTableVirtualInterfaceGroupAssociations","ec2:DescribeLocalGatewayRouteTableVpcAssociations","ec2:DescribeLocalGatewayRouteTables","ec2:DescribeLocalGatewayVirtualInterfaceGroups","ec2:DescribeLocalGatewayVirtualInterfaces","ec2:DescribeLocalGateways","ec2:DescribeLockedSnapshots","ec2:DescribeMacHosts","ec2:DescribeMacModificationTasks","ec2:DescribeManagedPrefixLists","ec2:DescribeMovingAddresses","ec2:DescribeNatGateways","ec2:DescribeNetworkAcls","ec2:DescribeNetworkInsightsAccessScopeAnalyses","ec2:DescribeNetworkInsightsAccessScopes","ec2:DescribeNetworkInsightsAnalyses","ec2:DescribeNetworkInsightsPaths","ec2:DescribeNetworkInterfaceAttribute","ec2:DescribeNetworkInterfacePermissions","ec2:DescribeNetworkInterfaces","ec2:DescribeOutpostLags","ec2:DescribePlacementGroups","ec2:DescribePrefixLists","ec2:DescribePrincipalIdFormat","ec2:DescribePublicIpv4Pools","ec2:DescribeRegions","ec2:DescribeReplaceRootVolumeTasks","ec2:DescribeReservedInstances","ec2:DescribeReservedInstancesListings","ec2:DescribeReservedInstancesModifications","ec2:DescribeReservedInstancesOfferings","ec2:DescribeRouteTables","ec2:DescribeScheduledInstanceAvailability","ec2:DescribeScheduledInstances","ec2:DescribeSecondaryInterfaces","ec2:DescribeSecondaryNetworks","ec2:DescribeSecondarySubnets","ec2:DescribeSecurityGroupReferences","ec2:DescribeSecurityGroupRules","ec2:DescribeSecurityGroupVpcAssociations","ec2:DescribeSecurityGroups","ec2:DescribeServiceLinkVirtualInterfaces","ec2:DescribeSnapshotAttribute","ec2:DescribeSnapshotTierStatus","ec2:DescribeSnapshots","ec2:DescribeSpotDatafeedSubscription","ec2:DescribeSpotFleetInstances","ec2:DescribeSpotFleetRequestHistory","ec2:DescribeSpotFleetRequests","ec2:DescribeSpotInstanceRequests","ec2:DescribeSpotPriceHistory","ec2:DescribeStaleSecurityGroups","ec2:DescribeStoreImageTasks","ec2:DescribeSubnets","ec2:DescribeTags","ec2:DescribeTrafficMirrorFilterRules","ec2:DescribeTrafficMirrorFilters","ec2:DescribeTrafficMirrorSessions","ec2:DescribeTrafficMirrorTargets","ec2:DescribeTransitGatewayAttachments","ec2:DescribeTransitGatewayConnectPeers","ec2:DescribeTransitGatewayMeteringPolicies","ec2:DescribeTransitGatewayMulticastDomains","ec2:DescribeTransitGatewayPeeringAttachments","ec2:DescribeTransitGatewayPolicyTables","ec2:DescribeTransitGatewayRouteTableAnnouncements","ec2:DescribeTransitGatewayRouteTables","ec2:DescribeTransitGatewayVpcAttachments","ec2:DescribeTransitGateways","ec2:DescribeTrunkInterfaceAssociations","ec2:DescribeVerifiedAccessEndpoints","ec2:DescribeVerifiedAccessGroups","ec2:DescribeVerifiedAccessInstanceLoggingConfigurations","ec2:DescribeVerifiedAccessInstances","ec2:DescribeVerifiedAccessTrustProviders","ec2:DescribeVolumeStatus","ec2:DescribeVolumes","ec2:DescribeVolumesModifications","ec2:DescribeVpcAttribute","ec2:DescribeVpcBlockPublicAccessExclusions","ec2:DescribeVpcBlockPublicAccessOptions","ec2:DescribeVpcClassicLink","ec2:DescribeVpcClassicLinkDnsSupport","ec2:DescribeVpcEncryptionControls","ec2:DescribeVpcEndpointAssociations","ec2:DescribeVpcEndpointConnectionNotifications","ec2:DescribeVpcEndpointConnections","ec2:DescribeVpcEndpointServiceConfigurations","ec2:DescribeVpcEndpointServicePermissions","ec2:DescribeVpcEndpointServices","ec2:DescribeVpcEndpoints","ec2:DescribeVpcPeeringConnections","ec2:DescribeVpcs","ec2:DescribeVpnConcentrators","ec2:DescribeVpnConnections","ec2:DescribeVpnGateways","ec2:GetAllowedImagesSettings","ec2:GetAssociatedEnclaveCertificateIamRoles","ec2:GetCoipPoolUsage","ec2:GetIpamPrefixListResolverRules","ec2:GetRouteServerAssociations","ec2:GetRouteServerPropagations","ec2:GetSnapshotBlockPublicAccessState","ec2:GetSubnetCidrReservations","ec2:GetTransitGatewayMulticastDomainAssociations","ec2:GetTransitGatewayRouteTableAssociations","ec2:GetTransitGatewayRouteTablePropagations","ec2:GetVerifiedAccessEndpointPolicy","ec2:GetVerifiedAccessGroupPolicy","ec2:SearchLocalGatewayRoutes","ec2:SearchTransitGatewayMulticastGroups","ec2:SearchTransitGatewayRoutes","ecr-public:DescribeRegistries","ecr-public:DescribeRepositories","ecr-public:GetRegistryCatalogData","ecr:DescribeRepositories","ecr:DescribeRepositoryCreationTemplates","ecr:GetRegistryScanningConfiguration","ecs:DescribeCapacityProviders","ecs:DescribeContainerInstances","ecs:DescribeDaemon","ecs:DescribeDaemonTaskDefinition","ecs:DescribeServiceDeployments","ecs:DescribeServiceRevisions","ecs:DescribeServices","ecs:DescribeTasks","ecs:ListClusters","ecs:ListContainerInstances","ecs:ListDaemonTaskDefinitions","ecs:ListDaemons","ecs:ListServiceDeployments","ecs:ListServices","ecs:ListTaskDefinitions","ecs:ListTasks","eks:DescribeAccessEntry","eks:DescribeAddon","eks:DescribeCapability","eks:DescribeFargateProfile","eks:DescribeIdentityProviderConfig","eks:DescribeNodegroup","eks:DescribePodIdentityAssociation","eks:ListAccessEntries","eks:ListAddons","eks:ListAssociatedAccessPolicies","eks:ListClusters","eks:ListEksAnywhereSubscriptions","eks:ListFargateProfiles","eks:ListIdentityProviderConfigs","eks:ListNodegroups","eks:ListPodIdentityAssociations","elasticache:DescribeCacheClusters","elasticache:DescribeCacheParameterGroups","elasticache:DescribeCacheParameters","elasticache:DescribeCacheSubnetGroups","elasticache:DescribeGlobalReplicationGroups","elasticache:DescribeReplicationGroups","elasticache:DescribeReservedCacheNodes","elasticache:DescribeServerlessCacheSnapshots","elasticache:DescribeServerlessCaches","elasticache:DescribeSnapshots","elasticache:DescribeUserGroups","elasticache:DescribeUsers","elasticache:ListTagsForResource","elasticbeanstalk:DescribeApplicationVersions","elasticbeanstalk:DescribeApplications","elasticbeanstalk:DescribeEnvironments","elasticfilesystem:DescribeAccessPoints","elasticfilesystem:DescribeFileSystems","elasticloadbalancing:DescribeListenerAttributes","elasticloadbalancing:DescribeListenerCertificates","elasticloadbalancing:DescribeListeners","elasticloadbalancing:DescribeLoadBalancers","elasticloadbalancing:DescribeRules","elasticloadbalancing:DescribeTargetGroups","elasticloadbalancing:DescribeTrustStoreRevocations","elasticloadbalancing:DescribeTrustStores","elasticmapreduce:DescribeCluster","elasticmapreduce:DescribeStep","elasticmapreduce:GetAutoTerminationPolicy","elasticmapreduce:GetSession","elasticmapreduce:ListBootstrapActions","elasticmapreduce:ListClusters","elasticmapreduce:ListSessions","elasticmapreduce:ListSteps","elemental-inference:GetDictionary","elemental-inference:GetFeed","elemental-inference:ListFeeds","emr-containers:DescribeJobRun","emr-containers:DescribeManagedEndpoint","emr-containers:DescribeSecurityConfiguration","emr-containers:ListJobRuns","emr-containers:ListJobTemplates","emr-containers:ListManagedEndpoints","emr-containers:ListSecurityConfigurations","emr-containers:ListTagsForResource","emr-containers:ListVirtualClusters","emr-serverless:ListApplications","entityresolution:GetIdMappingWorkflow","entityresolution:GetIdNamespace","entityresolution:GetMatchingWorkflow","entityresolution:GetPolicy","entityresolution:GetSchemaMapping","entityresolution:ListIdMappingWorkflows","entityresolution:ListIdNamespaces","entityresolution:ListMatchingWorkflows","entityresolution:ListSchemaMappings","entityresolution:ListTagsForResource","es:GetApplication","es:GetDataSource","es:ListApplications","es:ListDataSources","es:ListDomainNames","events:ListApiDestinations","events:ListArchives","events:ListConnections","events:ListEndpoints","events:ListEventBuses","events:ListRules","evidently:ListExperiments","evidently:ListFeatures","evidently:ListLaunches","evidently:ListProjects","evs:GetEnvironment","evs:ListEnvironments","evs:ListTagsForResource","finspace:GetEnvironment","finspace:ListEnvironments","firehose:DescribeDeliveryStream","firehose:ListDeliveryStreams","fis:GetAction","fis:GetSafetyLever","fis:GetTargetAccountConfiguration","fis:ListActions","fis:ListExperimentTemplates","fis:ListExperiments","fis:ListTargetAccountConfigurations","fms:GetAppsList","fms:GetProtocolsList","fms:GetResourceSet","fms:ListAppsLists","fms:ListPolicies","fms:ListProtocolsLists","fms:ListResourceSetResources","fms:ListResourceSets","forecast:ListDatasetGroups","forecast:ListDatasetImportJobs","forecast:ListDatasets","forecast:ListForecastExportJobs","forecast:ListForecasts","forecast:ListPredictorBacktestExportJobs","forecast:ListPredictors","frauddetector:GetDetectors","frauddetector:GetEntityTypes","frauddetector:GetEventTypes","frauddetector:GetExternalModels","frauddetector:GetLabels","frauddetector:GetModels","frauddetector:GetOutcomes","frauddetector:GetVariables","fsx:DescribeBackups","fsx:DescribeDataRepositoryTasks","fsx:DescribeFileCaches","fsx:DescribeFileSystems","fsx:DescribeVolumes","fsx:ListTagsForResource","gamelift:DescribeContainerFleet","gamelift:DescribeGameSessionQueues","gamelift:DescribeMatchmakingConfigurations","gamelift:DescribeMatchmakingRuleSets","gamelift:DescribeScalingPolicies","gamelift:ListAliases","gamelift:ListBuilds","gamelift:ListContainerFleets","gamelift:ListFleets","gamelift:ListGameServerGroups","gamelift:ListLocations","gamelift:ListScripts","gameliftstreams:GetApplication","gameliftstreams:GetStreamGroup","gameliftstreams:ListApplications","gameliftstreams:ListStreamGroups","gameliftstreams:ListTagsForResource","geo:DescribeKey","geo:GetJob","geo:ListJobs","geo:ListKeys","geo:ListMaps","geo:ListPlaceIndexes","geo:ListTagsForResource","geo:ListTrackers","glacier:ListVaults","globalaccelerator:DescribeCrossAccountAttachment","globalaccelerator:ListAccelerators","globalaccelerator:ListCrossAccountAttachments","globalaccelerator:ListEndpointGroups","globalaccelerator:ListListeners","glue:DescribeConnectionType","glue:GetBlueprint","glue:GetCrawlers","glue:GetCustomEntityType","glue:GetDataQualityRuleset","glue:GetDatabases","glue:GetIntegrationResourceProperty","glue:GetJobs","glue:GetRegistry","glue:GetSchema","glue:GetSchemaVersion","glue:GetSession","glue:GetTableVersion","glue:GetTableVersions","glue:GetTables","glue:GetTags","glue:GetTrigger","glue:GetTriggers","glue:GetUsageProfile","glue:GetUserDefinedFunction","glue:GetUserDefinedFunctions","glue:ListConnectionTypes","glue:ListCustomEntityTypes","glue:ListDataQualityRulesets","glue:ListIntegrationResourceProperties","glue:ListMLTransforms","glue:ListRegistries","glue:ListSchemaVersions","glue:ListSchemas","glue:ListSessions","glue:ListTriggers","glue:ListUsageProfiles","glue:querySchemaVersionMetadata","grafana:ListWorkspaces","greengrass:GetComponent","greengrass:GetCoreDevice","greengrass:GetDeployment","greengrass:ListComponentVersions","greengrass:ListComponents","greengrass:ListConnectorDefinitions","greengrass:ListCoreDefinitions","greengrass:ListCoreDevices","greengrass:ListDeployments","greengrass:ListDeviceDefinitions","greengrass:ListFunctionDefinitions","greengrass:ListGroups","greengrass:ListLoggerDefinitions","greengrass:ListResourceDefinitions","greengrass:ListSubscriptionDefinitions","groundstation:DescribeContact","groundstation:GetSatellite","groundstation:ListConfigs","groundstation:ListContacts","groundstation:ListDataflowEndpointGroups","groundstation:ListMissionProfiles","groundstation:ListSatellites","guardduty:GetMalwareProtectionPlan","guardduty:GetThreatEntitySet","guardduty:GetTrustedEntitySet","guardduty:ListDetectors","guardduty:ListFilters","guardduty:ListIPSets","guardduty:ListMalwareProtectionPlans","guardduty:ListPublishingDestinations","guardduty:ListThreatEntitySets","guardduty:ListThreatIntelSets","guardduty:ListTrustedEntitySets","healthlake:GetDataTransformationProfile","healthlake:ListFHIRDatastores","iam:GetCredentialReport","iam:GetGroup","iam:GetGroupPolicy","iam:GetUser","iam:GetUserPolicy","iam:ListAccessKeys","iam:ListAttachedGroupPolicies","iam:ListAttachedUserPolicies","iam:ListGroupPolicies","iam:ListGroups","iam:ListInstanceProfiles","iam:ListMFADevices","iam:ListOpenIDConnectProviders","iam:ListPolicies","iam:ListRoles","iam:ListSAMLProviders","iam:ListServerCertificates","iam:ListUserPolicies","iam:ListUsers","iam:ListVirtualMFADevices","identitystore:DescribeGroup","identitystore:DescribeGroupMembership","identitystore:ListGroupMemberships","identitystore:ListGroupMembershipsForMember","identitystore:ListGroups","imagebuilder:GetLifecyclePolicy","imagebuilder:GetWorkflow","imagebuilder:ListComponentBuildVersions","imagebuilder:ListComponents","imagebuilder:ListContainerRecipes","imagebuilder:ListDistributionConfigurations","imagebuilder:ListImageBuildVersions","imagebuilder:ListImagePipelines","imagebuilder:ListImageRecipes","imagebuilder:ListImages","imagebuilder:ListInfrastructureConfigurations","imagebuilder:ListLifecyclePolicies","imagebuilder:ListTagsForResource","imagebuilder:ListWorkflowBuildVersions","imagebuilder:ListWorkflows","inspector2:GetCodeSecurityScanConfiguration","inspector2:ListCisScanConfigurations","inspector2:ListCodeSecurityScanConfigurations","inspector2:ListFilters","inspector2:ListTagsForResource","inspector:ListAssessmentTemplates","interconnect:GetConnection","interconnect:ListConnections","interconnect:ListTagsForResource","internetmonitor:ListTagsForResource","invoicing:GetInvoiceUnit","invoicing:ListInvoiceUnits","iot:DescribeCertificateProvider","iot:DescribeThingGroup","iot:DescribeThingType","iot:DescribeTunnel","iot:GetCommand","iot:GetOTAUpdate","iot:GetPackage","iot:GetPackageVersion","iot:GetV2LoggingOptions","iot:ListAuthorizers","iot:ListBillingGroups","iot:ListCACertificates","iot:ListCertificateProviders","iot:ListCertificates","iot:ListCommands","iot:ListCustomMetrics","iot:ListDimensions","iot:ListFleetMetrics","iot:ListJobTemplates","iot:ListJobs","iot:ListMitigationActions","iot:ListOTAUpdates","iot:ListPackageVersions","iot:ListPackages","iot:ListPolicies","iot:ListProvisioningTemplates","iot:ListRoleAliases","iot:ListScheduledAudits","iot:ListSecurityProfiles","iot:ListStreams","iot:ListThingGroups","iot:ListThingTypes","iot:ListThings","iot:ListTopicRuleDestinations","iot:ListTopicRules","iot:ListTunnels","iotanalytics:ListChannels","iotanalytics:ListDatasets","iotanalytics:ListDatastores","iotanalytics:ListPipelines","iotdeviceadvisor:GetSuiteDefinition","iotdeviceadvisor:GetSuiteRun","iotdeviceadvisor:ListSuiteDefinitions","iotdeviceadvisor:ListSuiteRuns","iotevents:DescribeAlarmModel","iotevents:DescribeDetectorModel","iotevents:DescribeInput","iotevents:ListAlarmModels","iotevents:ListDetectorModels","iotevents:ListInputs","iotevents:ListTagsForResource","iotfleethub:DescribeApplication","iotfleethub:ListApplications","iotfleetwise:GetDecoderManifest","iotfleetwise:GetFleet","iotfleetwise:GetSignalCatalog","iotfleetwise:GetStateTemplate","iotfleetwise:GetVehicle","iotfleetwise:ListDecoderManifestNetworkInterfaces","iotfleetwise:ListDecoderManifestSignals","iotfleetwise:ListDecoderManifests","iotfleetwise:ListModelManifests","iotfleetwise:ListSignalCatalogNodes","iotfleetwise:ListSignalCatalogs","iotfleetwise:ListStateTemplates","iotfleetwise:ListVehicles","iotmanagedintegrations:GetOtaTask","iotsitewise:DescribeComputationModel","iotsitewise:DescribeDataset","iotsitewise:DescribePipeline","iotsitewise:DescribeTask","iotsitewise:DescribeTimeSeries","iotsitewise:DescribeWorkspace","iotsitewise:ListAccessPolicies","iotsitewise:ListAssetModels","iotsitewise:ListAssets","iotsitewise:ListComputationModels","iotsitewise:ListDashboards","iotsitewise:ListDatasets","iotsitewise:ListGateways","iotsitewise:ListPipelines","iotsitewise:ListPortals","iotsitewise:ListProjects","iotsitewise:ListTasks","iotsitewise:ListTimeSeries","iotsitewise:ListWorkspaces","iottwinmaker:ListComponentTypes","iottwinmaker:ListEntities","iottwinmaker:ListSyncJobs","iottwinmaker:ListWorkspaces","iotwireless:GetPartnerAccount","iotwireless:GetWirelessDeviceImportTask","iotwireless:ListDestinations","iotwireless:ListDeviceProfiles","iotwireless:ListDevicesForWirelessDeviceImportTask","iotwireless:ListFuotaTasks","iotwireless:ListMulticastGroups","iotwireless:ListPartnerAccounts","iotwireless:ListServiceProfiles","iotwireless:ListTagsForResource","iotwireless:ListWirelessDeviceImportTasks","iotwireless:ListWirelessDevices","iotwireless:ListWirelessGatewayTaskDefinitions","iotwireless:ListWirelessGateways","ivs:GetChannel","ivs:GetEncoderConfiguration","ivs:GetPlaybackRestrictionPolicy","ivs:GetStage","ivs:GetStorageConfiguration","ivs:GetStreamKey","ivs:ListChannels","ivs:ListEncoderConfigurations","ivs:ListIngestConfigurations","ivs:ListPlaybackKeyPairs","ivs:ListPlaybackRestrictionPolicies","ivs:ListPublicKeys","ivs:ListRecordingConfigurations","ivs:ListStages","ivs:ListStorageConfigurations","ivs:ListStreamKeys","ivschat:GetLoggingConfiguration","ivschat:GetRoom","ivschat:ListLoggingConfigurations","ivschat:ListRooms","ivschat:ListTagsForResource","kafka:DescribeReplicator","kafka:ListClusters","kafka:ListConfigurations","kafka:ListReplicators","kafkaconnect:ListWorkerConfigurations","kendra-ranking:ListRescoreExecutionPlans","kendra:ListAccessControlConfigurations","kendra:ListDataSources","kendra:ListExperiences","kendra:ListFaqs","kendra:ListFeaturedResultsSets","kendra:ListIndices","kendra:ListQuerySuggestionsBlockLists","kendra:ListThesauri","kinesis:ListStreams","kinesisanalytics:ListApplications","kinesisvideo:ListSignalingChannels","kinesisvideo:ListStreams","kms:ListKeys","lakeformation:ListDataCellsFilter","lambda:GetDurableExecution","lambda:ListCapacityProviders","lambda:ListCodeSigningConfigs","lambda:ListEventSourceMappings","lambda:ListFunctions","lambda:ListLayerVersions","lambda:ListLayers","lambda:ListVersionsByFunction","launchwizard:ListDeploymentEvents","launchwizard:ListDeployments","launchwizard:ListTagsForResource","lex:ListBotAliases","lex:ListBots","license-manager:ListDistributedGrants","license-manager:ListTagsForResource","lightsail:GetAlarms","lightsail:GetBuckets","lightsail:GetCertificates","lightsail:GetContainerServices","lightsail:GetDiskSnapshot","lightsail:GetDiskSnapshots","lightsail:GetDisks","lightsail:GetInstanceSnapshot","logs:DescribeDestinations","logs:DescribeLogGroups","logs:ListTagsForResource","lookoutmetrics:ListAlerts","lookoutmetrics:ListAnomalyDetectors","lookoutvision:ListProjects","m2:ListEnvironments","macie2:ListAllowLists","macie2:ListCustomDataIdentifiers","macie2:ListFindingsFilters","macie2:ListMembers","managedblockchain:ListAccessors","mediaconnect:ListFlows","mediaconnect:ListGateways","mediapackage-vod:ListAssets","mediapackage-vod:ListPackagingConfigurations","mediapackage-vod:ListPackagingGroups","mediapackage:ListChannels","mediapackage:ListOriginEndpoints","mediastore:ListContainers","mediatailor:ListChannels","mediatailor:ListLiveSources","mediatailor:ListPlaybackConfigurations","mediatailor:ListSourceLocations","mediatailor:ListVodSources","memorydb:DescribeACLs","memorydb:DescribeClusters","memorydb:DescribeParameterGroups","memorydb:DescribeSnapshots","memorydb:DescribeSubnetGroups","memorydb:DescribeUsers","mobiletargeting:GetApps","mobiletargeting:GetCampaigns","mobiletargeting:GetSegments","mobiletargeting:ListTemplates","mq:ListBrokers","mq:ListConfigurations","network-firewall:ListFirewallPolicies","network-firewall:ListFirewalls","network-firewall:ListRuleGroups","networkmanager:DescribeGlobalNetworks","networkmanager:GetDevices","networkmanager:GetLinks","networkmanager:ListAttachments","networkmanager:ListCoreNetworks","oam:ListSinks","omics:ListReferenceStores","omics:ListRunGroups","omics:ListWorkflows","organizations:DescribeResourcePolicy","organizations:ListPolicies","outposts:ListSites","panorama:ListDevices","panorama:ListPackages","partnercentral:ListBenefitApplications","partnercentral:ListEngagementInvitations","partnercentral:ListEngagements","partnercentral:ListOpportunities","partnercentral:ListResourceSnapshotJobs","partnercentral:ListResourceSnapshots","personalize:ListDatasetGroups","personalize:ListDatasets","personalize:ListSchemas","personalize:ListSolutions","pipes:ListPipes","profile:ListDomains","profile:ListIntegrations","profile:ListProfileObjectTypes","proton:ListEnvironmentAccountConnections","proton:ListEnvironmentTemplates","proton:ListServiceTemplates","qldb:ListJournalKinesisStreamsForLedger","qldb:ListLedgers","quicksight:DescribeAccountSubscription","quicksight:ListDataSets","quicksight:ListDataSources","quicksight:ListFolders","quicksight:ListTemplates","quicksight:ListThemes","ram:GetResourceShares","ram:ListPermissions","rbin:ListRules","rbin:ListTagsForResource","rds:DescribeBlueGreenDeployments","rds:DescribeDBClusterEndpoints","rds:DescribeDBClusterParameterGroups","rds:DescribeDBClusterSnapshots","rds:DescribeDBClusters","rds:DescribeDBEngineVersions","rds:DescribeDBInstanceAutomatedBackups","rds:DescribeDBInstances","rds:DescribeDBParameterGroups","rds:DescribeDBProxies","rds:DescribeDBProxyEndpoints","rds:DescribeDBSecurityGroups","rds:DescribeDBSnapshots","rds:DescribeDBSubnetGroups","rds:DescribeEventSubscriptions","rds:DescribeGlobalClusters","rds:DescribeOptionGroups","rds:DescribeReservedDBInstances","redshift:DescribeClusterParameterGroups","redshift:DescribeClusterSnapshots","redshift:DescribeClusterSubnetGroups","redshift:DescribeClusters","redshift:DescribeEventSubscriptions","redshift:DescribeHsmClientCertificates","redshift:DescribeSnapshotCopyGrants","redshift:DescribeSnapshotSchedules","redshift:DescribeUsageLimits","refactor-spaces:ListApplications","refactor-spaces:ListEnvironments","refactor-spaces:ListRoutes","refactor-spaces:ListServices","rekognition:DescribeProjects","rekognition:ListCollections","resiliencehub:ListAppAssessments","resiliencehub:ListApps","resiliencehub:ListResiliencyPolicies","resource-explorer-2:GetIndex","resource-explorer-2:ListIndexes","resource-explorer-2:ListViews","resource-groups:ListGroups","route53-recovery-control-config:ListClusters","route53-recovery-control-config:ListControlPanels","route53-recovery-control-config:ListRoutingControls","route53-recovery-control-config:ListSafetyRules","route53-recovery-readiness:ListCells","route53-recovery-readiness:ListReadinessChecks","route53-recovery-readiness:ListRecoveryGroups","route53-recovery-readiness:ListResourceSets","route53:ListHealthChecks","route53:ListHostedZones","route53domains:ListDomains","route53resolver:ListFirewallDomainLists","route53resolver:ListFirewallRuleGroupAssociations","route53resolver:ListFirewallRuleGroups","route53resolver:ListResolverEndpoints","route53resolver:ListResolverQueryLogConfigs","route53resolver:ListResolverRules","rum:ListAppMonitors","s3:GetBucketLocation","s3:ListAccessPoints","s3:ListAllMyBuckets","s3:ListBucket","s3:ListMultiRegionAccessPoints","s3:ListStorageLensConfigurations","s3:ListStorageLensGroups","s3express:ListAllMyDirectoryBuckets","s3vectors:ListIndexes","s3vectors:ListVectorBuckets","sagemaker:DescribeInferenceComponent","sagemaker:ListActions","sagemaker:ListAlgorithms","sagemaker:ListAppImageConfigs","sagemaker:ListApps","sagemaker:ListArtifacts","sagemaker:ListClusters","sagemaker:ListCodeRepositories","sagemaker:ListContexts","sagemaker:ListDomains","sagemaker:ListEndpointConfigs","sagemaker:ListEndpoints","sagemaker:ListExperiments","sagemaker:ListFeatureGroups","sagemaker:ListFlowDefinitions","sagemaker:ListHubContents","sagemaker:ListHubs","sagemaker:ListHumanLoops","sagemaker:ListHumanTaskUis","sagemaker:ListImageVersions","sagemaker:ListImages","sagemaker:ListInferenceComponents","sagemaker:ListInferenceExperiments","sagemaker:ListMlflowTrackingServers","sagemaker:ListModelCardVersions","sagemaker:ListModelCards","sagemaker:ListModelPackageGroups","sagemaker:ListModelPackages","sagemaker:ListModels","sagemaker:ListMonitoringSchedules","sagemaker:ListNotebookInstanceLifecycleConfigs","sagemaker:ListNotebookInstances","sagemaker:ListPartnerApps","sagemaker:ListPipelines","sagemaker:ListProjects","sagemaker:ListSpaces","sagemaker:ListStudioLifecycleConfigs","sagemaker:ListTrialComponents","sagemaker:ListTrials","sagemaker:ListUserProfiles","sagemaker:ListWorkforces","sagemaker:ListWorkteams","scheduler:ListScheduleGroups","schemas:ListDiscoverers","secretsmanager:ListSecrets","servicecatalog:ListApplications","servicecatalog:ListAttributeGroups","servicediscovery:ListServices","ses:ListConfigurationSets","ses:ListContactLists","ses:ListDedicatedIpPools","ses:ListEmailIdentities","ses:ListEmailTemplates","shield:ListProtectionGroups","shield:ListProtections","signer:ListSigningProfiles","sns:ListTopics","sqs:ListQueues","ssm-incidents:ListResponsePlans","ssm:DescribeInstanceInformation","ssm:DescribeMaintenanceWindowTargets","ssm:DescribeMaintenanceWindowTasks","ssm:DescribeMaintenanceWindows","ssm:DescribeParameters","ssm:DescribeSessions","ssm:ListAssociations","ssm:ListDocuments","ssm:ListResourceDataSync","states:ListActivities","states:ListStateMachines","storagegateway:ListFileShares","storagegateway:ListGateways","swf:ListDomains","synthetics:DescribeCanaries","synthetics:ListGroups","transfer:ListAgreements","transfer:ListCertificates","transfer:ListConnectors","transfer:ListProfiles","transfer:ListServers","transfer:ListUsers","transfer:ListWorkflows","verifiedpermissions:ListPolicyStores","vpc-lattice:ListAccessLogSubscriptions","vpc-lattice:ListListeners","vpc-lattice:ListRules","vpc-lattice:ListServiceNetworkServiceAssociations","vpc-lattice:ListServiceNetworks","vpc-lattice:ListServices","vpc-lattice:ListTagsForResource","vpc-lattice:ListTargetGroups","wafv2:ListIPSets","wafv2:ListRegexPatternSets","wafv2:ListRuleGroups","wafv2:ListWebACLs","wellarchitected:ListWorkloads","wisdom:ListAssistantAssociations","wisdom:ListAssistants","wisdom:ListContents","wisdom:ListKnowledgeBases","workspaces-web:ListPortals","workspaces:DescribeConnectionAliases","workspaces:DescribeWorkspaces","xray:GetSamplingRules"],"Resource":"*"},{"Sid":"PermissionsForReadGetResources","Effect":"Allow","Action":["access-analyzer:GetArchiveRule","access-analyzer:ListTagsForResource","account-access:GetEntitlement","account-access:ListEntitlements","account:GetAlternateContact","airflow:GetEnvironment","airflow:ListTagsForResource","amplify:GetApp","amplify:GetBranch","amplifyuibuilder:ExportThemes","amplifyuibuilder:GetTheme","amplifyuibuilder:ListThemes","app-integrations:ListEventIntegrationAssociations","appconfig:GetApplication","appconfig:GetConfigurationProfile","appconfig:GetDeployment","appconfig:GetDeploymentStrategy","appconfig:GetEnvironment","appconfig:GetExperimentDefinition","appconfig:GetExtensionAssociation","appconfig:ListConfigurationProfiles","appconfig:ListDeployments","appconfig:ListExperimentDefinitions","appconfig:ListHostedConfigurationVersions","appconfig:ListTagsForResource","appflow:DescribeConnectorProfiles","application-autoscaling:DescribeScalingPolicies","apprunner:ListTagsForResource","appstream:DescribeDirectoryConfigs","aps:DescribeAlertManagerDefinition","aps:DescribeLoggingConfiguration","aps:DescribeWorkspace","athena:GetDataCatalog","athena:GetPreparedStatement","athena:GetWorkGroup","athena:ListPreparedStatements","athena:ListTagsForResource","autoscaling-plans:DescribeScalingPlanResources","autoscaling-plans:DescribeScalingPlans","autoscaling-plans:GetScalingPlanResourceForecastData","autoscaling:DescribeLaunchConfigurations","autoscaling:DescribeLifecycleHooks","autoscaling:DescribeTags","autoscaling:DescribeWarmPool","b2bi:GetTransformer","b2bi:ListTransformers","backup-gateway:ListVirtualMachines","backup:DescribeBackupVault","backup:DescribeFramework","backup:DescribeProtectedResource","backup:DescribeRecoveryPoint","backup:DescribeReportPlan","backup:GetBackupPlan","backup:GetBackupSelection","backup:GetBackupVaultAccessPolicy","backup:GetBackupVaultNotifications","backup:GetTieringConfiguration","backup:ListBackupSelections","backup:ListFrameworks","backup:ListTags","backup:ListTieringConfigurations","batch:DescribeSchedulingPolicies","batch:ListTagsForResource","bedrock-agentcore:GetAgentRuntime","bedrock-agentcore:GetBrowserProfile","bedrock-agentcore:GetPaymentCredentialProvider","bedrock-agentcore:GetPolicyGenerationSummary","bedrock-agentcore:ListBrowserProfiles","bedrock-agentcore:ListPaymentCredentialProviders","bedrock-agentcore:ListPolicyGenerationSummaries","bedrock-agentcore:ListTagsForResource","bedrock:GetAgent","bedrock:GetAgentActionGroup","bedrock:GetAgentCollaborator","bedrock:GetAgentKnowledgeBase","bedrock:GetFlowAlias","bedrock:GetGuardrail","bedrock:GetKnowledgeBase","bedrock:GetPromptRouter","bedrock:ListAgentActionGroups","bedrock:ListAgentCollaborators","bedrock:ListAgentKnowledgeBases","bedrock:ListTagsForResource","billingconductor:ListAccountAssociations","billingconductor:ListBillingGroups","billingconductor:ListCustomLineItems","billingconductor:ListPricingPlans","billingconductor:ListPricingRules","billingconductor:ListPricingRulesAssociatedToPricingPlan","billingconductor:ListTagsForResource","braket:ListTagsForResource","braket:SearchSpendingLimits","budgets:DescribeBudgetAction","budgets:DescribeBudgetActionsForBudget","cases:BatchGetCaseRule","cases:BatchGetField","cases:GetDomain","cases:GetLayout","cases:GetTemplate","cases:ListCaseRules","cases:ListDomains","cases:ListFields","cases:ListLayouts","cases:ListTemplates","cassandra:Select","chime:DescribeAppInstanceBot","chime:DescribeAppInstanceUser","chime:DescribeChannelFlow","chime:ListChannelFlows","cleanrooms-ml:ListConfiguredModelAlgorithms","cleanrooms:GetAnalysisTemplate","cleanrooms:GetCollaboration","cleanrooms:GetConfiguredAudienceModelAssociation","cleanrooms:ListMembers","cleanrooms:ListTagsForResource","cloud9:DescribeEnvironmentMemberships","cloud9:DescribeEnvironments","cloud9:ListTagsForResource","cloudformation:DescribeChangeSet","cloudformation:GetResource","cloudformation:ListChangeSets","cloudformation:ListStackResources","cloudfront:GetDistribution","cloudfront:GetDistributionConfig","cloudfront:GetFunction","cloudfront:GetResponseHeadersPolicy","cloudtrail:DescribeTrails","cloudtrail:GetChannel","cloudtrail:GetEventConfiguration","cloudtrail:GetEventDataStore","cloudtrail:GetEventSelectors","cloudtrail:GetInsightSelectors","cloudtrail:GetTrail","cloudtrail:GetTrailStatus","cloudwatch:DescribeAlarmsForMetric","cloudwatch:DescribeAnomalyDetectors","cloudwatch:GetAlarmMuteRule","cloudwatch:GetDashboard","cloudwatch:GetMetricStream","cloudwatch:ListTagsForResource","codeartifact:ListPackages","codeartifact:ListPackageVersions","codebuild:BatchGetReportGroups","codebuild:ListReportGroups","codebuild:ListSourceCredentials","codecommit:GetRepository","codecommit:GetRepositoryTriggers","codecommit:ListTagsForResource","codeconnections:ListTagsForResource","codedeploy:GetDeployment","codedeploy:GetDeploymentGroup","codedeploy:ListDeploymentGroups","codedeploy:ListDeployments","codepipeline:GetPipeline","codepipeline:GetPipelineState","codestar-connections:ListTagsForResource","cognito-identity:GetIdentityPoolRoles","cognito-identity:GetPrincipalTagAttributeMap","cognito-identity:ListTagsForResource","cognito-idp:DescribeIdentityProvider","cognito-idp:DescribeResourceServer","cognito-idp:DescribeUserPoolDomain","cognito-idp:GetGroup","cognito-idp:ListGroups","cognito-idp:ListIdentityProviders","cognito-idp:ListResourceServers","cognito-idp:ListTagsForResource","cognito-idp:ListUserPoolClients","config:DescribeAggregationAuthorizations","connect:DescribeDataTable","connect:DescribeHoursOfOperation","connect:DescribeMetric","connect:DescribeNotification","connect:DescribeQueue","connect:DescribeWorkspace","connect:ListDataTables","connect:ListHoursOfOperationOverrides","connect:ListInstances","connect:ListMetrics","connect:ListNotifications","connect:ListQuickConnects","connect:ListSecurityProfileAIAgents","connect:ListUserProficiencies","connect:ListUsers","connect:ListWorkspaceMedia","connect:ListWorkspacePages","connect:ListWorkspaces","connect:SearchWorkspaceAssociations","databrew:DescribeDataset","databrew:DescribeJob","databrew:DescribeProject","databrew:DescribeRecipe","databrew:DescribeRuleset","databrew:DescribeSchedule","databrew:ListJobs","databrew:ListProjects","databrew:ListRecipeVersions","databrew:ListSchedules","databrew:ListTagsForResource","dataexchange:GetRevision","dataexchange:ListTagsForResource","datasync:DescribeAgent","datasync:DescribeLocationEfs","datasync:DescribeLocationFsxLustre","datasync:DescribeLocationFsxWindows","datasync:DescribeLocationHdfs","datasync:DescribeLocationNfs","datasync:DescribeLocationS3","datasync:DescribeLocationSmb","datasync:DescribeTask","datasync:ListAgents","datasync:ListTagsForResource","datasync:ListTasks","dax:DescribeParameterGroups","dax:DescribeParameters","dax:DescribeSubnetGroups","dax:ListTags","deadline:GetBudget","deadline:GetJob","deadline:ListBudgets","deadline:ListJobs","deadline:SearchJobs","detective:DescribeOrganizationConfiguration","detective:ListTagsForResource","devicefarm:GetInstanceProfile","devicefarm:GetNetworkProfile","devicefarm:GetProject","devicefarm:GetTestGridProject","devicefarm:ListNetworkProfiles","devicefarm:ListTagsForResource","devops-guru:GetResourceCollection","directconnect:DescribeLags","dlm:GetLifecyclePolicy","dlm:ListTagsForResource","dms:DescribeReplicationTaskAssessmentRuns","ds:DescribeDirectories","ds:DescribeDomainControllers","ds:DescribeEventTopics","ds:ListLogSubscriptions","ds:ListTagsForResource","dynamodb:DescribeContinuousBackups","dynamodb:DescribeContributorInsights","dynamodb:DescribeGlobalTableSettings","dynamodb:DescribeKinesisStreamingDestination","dynamodb:DescribeLimits","dynamodb:DescribeTable","dynamodb:DescribeTableReplicaAutoScaling","dynamodb:DescribeTimeToLive","dynamodb:GetResourcePolicy","dynamodb:ListTagsOfResource","ec2:DescribeAvailabilityZones","ec2:DescribeClientVpnTargetNetworks","ec2:DescribeInstanceAttribute","ec2:DescribeInstanceCreditSpecifications","ec2:DescribeLaunchTemplateVersions","ec2:DescribeRouteServerEndpoints","ec2:DescribeRouteServerPeers","ec2:DescribeRouteServers","ec2:DescribeTransitGatewayConnects","ec2:DescribeVolumeAttribute","ec2:GetEbsEncryptionByDefault","ec2:GetInstanceTypesFromInstanceRequirements","ec2:GetIpamPoolAllocations","ec2:GetIpamPoolCidrs","ec2:GetManagedPrefixListEntries","ec2:GetNetworkInsightsAccessScopeAnalysisFindings","ec2:GetNetworkInsightsAccessScopeContent","ecr-public:GetRepositoryCatalogData","ecr-public:GetRepositoryPolicy","ecr-public:ListTagsForResource","ecr:BatchGetRepositoryScanningConfiguration","ecr:DescribePullThroughCacheRules","ecr:DescribeRegistry","ecr:GetLifecyclePolicy","ecr:GetRegistryPolicy","ecr:GetRepositoryPolicy","ecr:ListTagsForResource","ecs:DescribeClusters","ecs:DescribeExpressGatewayService","ecs:DescribeTaskDefinition","ecs:DescribeTaskSets","ecs:ListTagsForResource","ecs:ListTaskDefinitionFamilies","eks:DescribeCluster","eks:ListCapabilities","eks:ListTagsForResource","elasticache:DescribeCacheSecurityGroups","elasticbeanstalk:DescribeConfigurationSettings","elasticbeanstalk:ListTagsForResource","elasticfilesystem:DescribeBackupPolicy","elasticfilesystem:DescribeFileSystemPolicy","elasticfilesystem:DescribeLifecycleConfiguration","elasticfilesystem:DescribeMountTargets","elasticfilesystem:DescribeMountTargetSecurityGroups","elasticfilesystem:DescribeReplicationConfigurations","elasticfilesystem:DescribeTags","elasticloadbalancing:DescribeCapacityReservation","elasticloadbalancing:DescribeLoadBalancerAttributes","elasticloadbalancing:DescribeLoadBalancerPolicies","elasticloadbalancing:DescribeLoadBalancerPolicyTypes","elasticloadbalancing:DescribeTags","elasticloadbalancing:DescribeTargetGroupAttributes","elasticloadbalancing:DescribeTargetHealth","elasticmapreduce:DescribeSecurityConfiguration","elasticmapreduce:DescribeStudio","elasticmapreduce:GetBlockPublicAccessConfiguration","elasticmapreduce:GetManagedScalingPolicy","elasticmapreduce:GetStudioSessionMapping","elasticmapreduce:ListInstanceFleets","elasticmapreduce:ListInstanceGroups","elasticmapreduce:ListInstances","elasticmapreduce:ListSecurityConfigurations","elasticmapreduce:ListStudios","elasticmapreduce:ListStudioSessionMappings","elemental-inference:ListTagsForResource","emr-containers:DescribeVirtualCluster","emr-containers:ListVirtualClusters","emr-serverless:GetApplication","emr-serverless:GetJobRun","emr-serverless:ListJobRuns","es:DescribeDomain","es:DescribeDomains","es:DescribeElasticsearchDomain","es:DescribeElasticsearchDomains","es:GetCompatibleElasticsearchVersions","es:GetCompatibleVersions","es:ListDomainsForPackage","es:ListTags","es:ListVpcEndpointsForDomain","events:DescribeApiDestination","events:DescribeArchive","events:DescribeConnection","events:DescribeEndpoint","events:DescribeEventBus","events:DescribeRule","events:ListTagsForResource","events:ListTargetsByRule","firehose:ListTagsForDeliveryStream","fis:GetExperiment","fis:GetExperimentTemplate","fis:ListTagsForResource","fms:GetNotificationChannel","fms:GetPolicy","fms:ListTagsForResource","forecast:DescribeDataset","forecast:DescribeDatasetGroup","forecast:ListTagsForResource","frauddetector:GetListElements","fsx:DescribeDataRepositoryAssociations","fsx:DescribeS3AccessPointAttachments","fsx:DescribeSnapshots","fsx:DescribeStorageVirtualMachines","gamelift:DescribeAlias","gamelift:DescribeBuild","gamelift:DescribeContainerGroupDefinition","gamelift:DescribeFleetAttributes","gamelift:DescribeFleetCapacity","gamelift:DescribeFleetLocationAttributes","gamelift:DescribeFleetLocationCapacity","gamelift:DescribeFleetPortSettings","gamelift:DescribeGameServerGroup","gamelift:DescribeGameSessionQueues","gamelift:DescribeMatchmakingConfigurations","gamelift:DescribeMatchmakingRuleSets","gamelift:DescribeRuntimeConfiguration","gamelift:DescribeScript","gamelift:DescribeVpcPeeringAuthorizations","gamelift:DescribeVpcPeeringConnections","gamelift:ListBuilds","gamelift:ListContainerGroupDefinitions","gamelift:ListLocations","gamelift:ListScripts","gamelift:ListTagsForResource","gamelift:ValidateMatchmakingRuleSet","geo:DescribeGeofenceCollection","geo:DescribeMap","geo:DescribePlaceIndex","geo:DescribeRouteCalculator","geo:DescribeTracker","geo:ListGeofenceCollections","geo:ListRouteCalculators","geo:ListTrackerConsumers","globalaccelerator:DescribeAccelerator","globalaccelerator:DescribeAcceleratorAttributes","globalaccelerator:DescribeEndpointGroup","globalaccelerator:DescribeListener","globalaccelerator:ListTagsForResource","glue:BatchGetDevEndpoints","glue:BatchGetJobs","glue:BatchGetWorkflows","glue:DescribeIntegrations","glue:GetCatalog","glue:GetCatalogs","glue:GetClassifier","glue:GetClassifiers","glue:GetCrawler","glue:GetDatabase","glue:GetDataCatalogEncryptionSettings","glue:GetDevEndpoint","glue:GetDevEndpoints","glue:GetMLTransform","glue:GetMLTransforms","glue:GetPartition","glue:GetPartitions","glue:GetSecurityConfiguration","glue:GetSecurityConfigurations","glue:GetTable","glue:GetWorkflow","glue:ListBlueprints","glue:ListCrawlers","glue:ListDevEndpoints","glue:ListJobs","glue:ListWorkflows","grafana:DescribeWorkspace","grafana:DescribeWorkspaceAuthentication","grafana:DescribeWorkspaceConfiguration","grafana:ListTagsForResource","greengrass:DescribeComponent","greengrass:ListTagsForResource","groundstation:GetConfig","groundstation:GetDataflowEndpointGroup","groundstation:GetMissionProfile","groundstation:ListConfigs","groundstation:ListMissionProfiles","groundstation:ListTagsForResource","guardduty:DescribePublishingDestination","guardduty:GetAdministratorAccount","guardduty:GetDetector","guardduty:GetFilter","guardduty:GetFindings","guardduty:GetIPSet","guardduty:GetMasterAccount","guardduty:GetMemberDetectors","guardduty:GetMembers","guardduty:GetThreatIntelSet","guardduty:ListFindings","guardduty:ListMembers","guardduty:ListOrganizationAdminAccounts","guardduty:ListTagsForResource","healthlake:DescribeFHIRDatastore","healthlake:ListDataTransformationProfiles","healthlake:ListTagsForResource","iam:GenerateCredentialReport","iam:GetAccountAuthorizationDetails","iam:GetAccountPasswordPolicy","iam:GetAccountSummary","iam:GetInstanceProfile","iam:GetOpenIDConnectProvider","iam:GetPolicy","iam:GetPolicyVersion","iam:GetRole","iam:GetRolePolicy","iam:GetSAMLProvider","iam:GetServerCertificate","iam:ListAttachedRolePolicies","iam:ListEntitiesForPolicy","iam:ListGroupsForUser","iam:ListInstanceProfilesForRole","iam:ListInstanceProfileTags","iam:ListMFADeviceTags","iam:ListPolicyVersions","iam:ListRolePolicies","imagebuilder:GetComponent","imagebuilder:GetContainerRecipe","imagebuilder:GetDistributionConfiguration","imagebuilder:GetImage","imagebuilder:GetImagePipeline","imagebuilder:GetImageRecipe","imagebuilder:GetInfrastructureConfiguration","inspector2:BatchGetAccountStatus","inspector2:GetDelegatedAdminAccount","inspector2:ListMembers","internetmonitor:GetMonitor","internetmonitor:ListMonitors","invoicing:ListProcurementPortalPreferences","invoicing:ListTagsForResource","iot:DescribeAccountAuditConfiguration","iot:DescribeAuthorizer","iot:DescribeBillingGroup","iot:DescribeCACertificate","iot:DescribeCertificate","iot:DescribeCustomMetric","iot:DescribeDimension","iot:DescribeDomainConfiguration","iot:DescribeFleetMetric","iot:DescribeJob","iot:DescribeJobTemplate","iot:DescribeMitigationAction","iot:DescribeProvisioningTemplate","iot:DescribeRoleAlias","iot:DescribeScheduledAudit","iot:DescribeSecurityProfile","iot:DescribeStream","iot:DescribeThing","iot:GetPolicy","iot:GetTopicRuleDestination","iot:ListDomainConfigurations","iot:ListSecurityProfilesForTarget","iot:ListTagsForResource","iot:ListTargetsForSecurityProfile","iot:ListV2LoggingLevels","iot:ValidateSecurityProfileBehaviors","iotfleetwise:GetCampaign","iotfleetwise:GetModelManifest","iotfleetwise:ListCampaigns","iotfleetwise:ListFleets","iotfleetwise:ListModelManifestNodes","iotfleetwise:ListTagsForResource","iotsitewise:DescribeAccessPolicy","iotsitewise:DescribeAsset","iotsitewise:DescribeAssetModel","iotsitewise:DescribeDashboard","iotsitewise:DescribeGateway","iotsitewise:DescribePortal","iotsitewise:DescribeProject","iotsitewise:ListAssetModelCompositeModels","iotsitewise:ListAssetModelProperties","iotsitewise:ListAssetProperties","iotsitewise:ListAssociatedAssets","iotsitewise:ListProjectAssets","iotsitewise:ListTagsForResource","iottwinmaker:GetComponentType","iottwinmaker:GetEntity","iottwinmaker:GetScene","iottwinmaker:GetSyncJob","iottwinmaker:GetWorkspace","iottwinmaker:ListScenes","iottwinmaker:ListTagsForResource","iotwireless:GetDestination","iotwireless:GetDeviceProfile","iotwireless:GetFuotaTask","iotwireless:GetMulticastGroup","iotwireless:GetNetworkAnalyzerConfiguration","iotwireless:GetServiceProfile","iotwireless:GetWirelessDevice","iotwireless:GetWirelessGateway","iotwireless:GetWirelessGatewayTaskDefinition","iotwireless:ListNetworkAnalyzerConfigurations","ivs:GetComposition","ivs:GetPlaybackKeyPair","ivs:GetRecordingConfiguration","ivs:ListCompositions","ivs:ListPlaybackKeyPairs","ivs:ListTagsForResource","kafka:DescribeCluster","kafka:DescribeClusterV2","kafka:DescribeConfiguration","kafka:DescribeConfigurationRevision","kafka:DescribeVpcConnection","kafka:GetClusterPolicy","kafka:ListClustersV2","kafka:ListScramSecrets","kafka:ListTagsForResource","kafka:ListVpcConnections","kafkaconnect:DescribeConnector","kafkaconnect:DescribeCustomPlugin","kafkaconnect:DescribeWorkerConfiguration","kafkaconnect:ListConnectors","kafkaconnect:ListCustomPlugins","kafkaconnect:ListTagsForResource","kendra-ranking:DescribeRescoreExecutionPlan","kendra-ranking:ListTagsForResource","kendra:DescribeIndex","kendra:ListTagsForResource","kinesis:DescribeStreamConsumer","kinesis:DescribeStreamSummary","kinesis:GetResourcePolicy","kinesis:ListStreamConsumers","kinesis:ListTagsForResource","kinesis:ListTagsForStream","kinesisanalytics:DescribeApplication","kinesisanalytics:ListTagsForResource","kinesisvideo:DescribeSignalingChannel","kinesisvideo:DescribeStream","kinesisvideo:ListTagsForResource","kinesisvideo:ListTagsForStream","kms:DescribeKey","kms:GetKeyPolicy","kms:GetKeyRotationStatus","kms:ListAliases","kms:ListResourceTags","lakeformation:DescribeLakeFormationIdentityCenterConfiguration","lakeformation:DescribeResource","lakeformation:GetDataLakeSettings","lakeformation:ListPermissions","lakeformation:ListResources","lambda:GetAlias","lambda:GetCodeSigningConfig","lambda:GetEventSourceMapping","lambda:GetFunction","lambda:GetFunctionCodeSigningConfig","lambda:GetFunctionConfiguration","lambda:GetFunctionEventInvokeConfig","lambda:GetFunctionRecursionConfig","lambda:GetFunctionScalingConfig","lambda:GetFunctionUrlConfig","lambda:GetLayerVersion","lambda:GetLayerVersionPolicy","lambda:GetPolicy","lambda:GetProvisionedConcurrencyConfig","lambda:GetRuntimeManagementConfig","lambda:ListAliases","lambda:ListFunctionEventInvokeConfigs","lambda:ListFunctionUrlConfigs","lambda:ListTags","launchwizard:GetDeployment","lex:DescribeBot","lex:DescribeBotAlias","lex:DescribeBotVersion","lex:DescribeResourcePolicy","lex:ListBotLocales","lex:ListBotVersions","lex:ListTagsForResource","license-manager:GetGrant","license-manager:GetLicense","license-manager:GetLicenseAssetRuleset","license-manager:ListLicenseAssetRulesets","license-manager:ListLicenses","license-manager:ListReceivedGrants","lightsail:GetActiveNames","lightsail:GetDisk","lightsail:GetDistributions","lightsail:GetDomain","lightsail:GetDomains","lightsail:GetInstance","lightsail:GetInstanceSnapshots","lightsail:GetInstances","lightsail:GetKeyPair","lightsail:GetKeyPairs","lightsail:GetLoadBalancer","lightsail:GetLoadBalancerTlsCertificates","lightsail:GetLoadBalancers","lightsail:GetOperations","lightsail:GetRelationalDatabase","lightsail:GetRelationalDatabaseParameters","lightsail:GetRelationalDatabases","lightsail:GetRelationalDatabaseSnapshot","lightsail:GetRelationalDatabaseSnapshots","lightsail:GetStaticIp","lightsail:GetStaticIps","logs:DescribeAccountPolicies","logs:DescribeDeliveries","logs:DescribeDeliveryDestinations","logs:DescribeDeliverySources","logs:DescribeIndexPolicies","logs:DescribeLogStreams","logs:DescribeMetricFilters","logs:DescribeQueryDefinitions","logs:DescribeResourcePolicies","logs:GetDataProtectionPolicy","logs:GetDelivery","logs:GetDeliveryDestination","logs:GetDeliveryDestinationPolicy","logs:GetDeliverySource","logs:GetIntegration","logs:GetLogAnomalyDetector","logs:GetLogDelivery","logs:GetScheduledQuery","logs:ListIntegrations","logs:ListLogAnomalyDetectors","logs:ListLogDeliveries","logs:ListTagsLogGroup","lookoutequipment:DescribeInferenceScheduler","lookoutequipment:ListTagsForResource","lookoutmetrics:DescribeMetricSet","m2:GetApplication","m2:GetEnvironment","m2:ListApplications","m2:ListTagsForResource","macie2:DescribeOrganizationConfiguration","macie2:GetAllowList","macie2:GetAutomatedDiscoveryConfiguration","macie2:GetClassificationExportConfiguration","macie2:GetCustomDataIdentifier","macie2:GetFindingsFilter","macie2:GetFindingsPublicationConfiguration","macie2:GetMacieSession","macie2:GetMember","macie2:ListAutomatedDiscoveryAccounts","macie2:ListTagsForResource","managedblockchain:GetMember","managedblockchain:GetNetwork","managedblockchain:GetNode","managedblockchain:ListInvitations","managedblockchain:ListMembers","managedblockchain:ListNodes","mediaconnect:DescribeBridge","mediaconnect:DescribeFlow","mediaconnect:DescribeGateway","mediaconnect:GetRouterInput","mediaconnect:GetRouterNetworkInterface","mediaconnect:ListBridges","mediaconnect:ListRouterInputs","mediaconnect:ListRouterNetworkInterfaces","mediaconnect:ListRouterOutputs","mediaconnect:ListTagsForResource","mediaconvert:GetPreset","mediaconvert:GetQueue","medialive:DescribeChannelPlacementGroup","medialive:DescribeInput","medialive:DescribeMultiplex","medialive:DescribeMultiplexProgram","medialive:DescribeNode","medialive:DescribeSdiSource","medialive:GetCloudWatchAlarmTemplate","medialive:GetCloudWatchAlarmTemplateGroup","medialive:GetEventBridgeRuleTemplate","medialive:GetEventBridgeRuleTemplateGroup","medialive:GetSignalMap","medialive:ListChannelPlacementGroups","medialive:ListChannels","medialive:ListCloudWatchAlarmTemplateGroups","medialive:ListCloudWatchAlarmTemplates","medialive:ListEventBridgeRuleTemplateGroups","medialive:ListEventBridgeRuleTemplates","medialive:ListInputs","medialive:ListMultiplexPrograms","medialive:ListMultiplexes","medialive:ListNetworks","medialive:ListNodes","medialive:ListSdiSources","medialive:ListSignalMaps","medialive:ListTagsForResource","mediapackage-vod:DescribeAsset","mediapackage-vod:DescribePackagingConfiguration","mediapackage-vod:DescribePackagingGroup","mediapackage-vod:ListTagsForResource","mediapackagev2:GetChannel","mediapackagev2:GetChannelGroup","mediapackagev2:GetChannelPolicy","mediapackagev2:GetOriginEndpoint","mediapackagev2:GetOriginEndpointPolicy","mediapackagev2:ListChannelGroups","mediapackagev2:ListChannels","mediapackagev2:ListOriginEndpoints","mediatailor:DescribeChannel","mediatailor:DescribeLiveSource","mediatailor:DescribeSourceLocation","mediatailor:DescribeVodSource","mediatailor:GetChannelPolicy","mediatailor:GetPlaybackConfiguration","medical-imaging:GetDatastore","medical-imaging:ListDatastores","medical-imaging:ListTagsForResource","memorydb:DescribeMultiRegionClusters","memorydb:DescribeParameters","memorydb:ListTags","mgn:DescribeJobs","mgn:GetNetworkMigrationDefinition","mgn:ListApplications","mgn:ListConnectors","mgn:ListExports","mgn:ListImports","mgn:ListNetworkMigrationDefinitions","mgn:ListTagsForResource","mgn:ListWaves","mobiletargeting:GetApp","mobiletargeting:GetApplicationSettings","mobiletargeting:GetCampaign","mobiletargeting:GetEmailChannel","mobiletargeting:GetEmailTemplate","mobiletargeting:GetEventStream","mobiletargeting:GetInAppTemplate","mobiletargeting:GetSegment","mobiletargeting:ListTagsForResource","mpa:GetApprovalTeam","mpa:GetIdentitySource","mpa:ListApprovalTeams","mpa:ListIdentitySources","mpa:ListTagsForResource","mq:DescribeBroker","mq:DescribeConfiguration","mq:ListTags","neptune-graph:GetGraph","neptune-graph:GetGraphSnapshot","neptune-graph:GetPrivateGraphEndpoint","neptune-graph:ListGraphSnapshots","neptune-graph:ListPrivateGraphEndpoints","neptune-graph:ListTagsForResource","network-firewall:DescribeFirewall","network-firewall:DescribeFirewallPolicy","network-firewall:DescribeLoggingConfiguration","network-firewall:DescribeRuleGroup","network-firewall:DescribeTLSInspectionConfiguration","network-firewall:DescribeVpcEndpointAssociation","network-firewall:ListTagsForResource","network-firewall:ListTLSInspectionConfigurations","network-firewall:ListVpcEndpointAssociations","networkmanager:GetConnectAttachment","networkmanager:GetConnectPeer","networkmanager:GetCoreNetwork","networkmanager:GetCoreNetworkPolicy","networkmanager:GetCustomerGatewayAssociations","networkmanager:GetDirectConnectGatewayAttachment","networkmanager:GetLinkAssociations","networkmanager:GetSiteToSiteVpnAttachment","networkmanager:GetSites","networkmanager:GetTransitGatewayPeering","networkmanager:GetTransitGatewayRegistrations","networkmanager:GetTransitGatewayRouteTableAttachment","networkmanager:GetVpcAttachment","networkmanager:ListConnectPeers","networkmanager:ListPeerings","networkmanager:ListTagsForResource","networkmonitor:GetProbe","notifications-contacts:GetEmailContact","notifications-contacts:ListEmailContacts","notifications-contacts:ListTagsForResource","notifications:GetEventRule","notifications:GetNotificationConfiguration","notifications:ListEventRules","notifications:ListManagedNotificationChannelAssociations","notifications:ListNotificationConfigurations","notifications:ListNotificationHubs","notifications:ListOrganizationalUnits","notifications:ListTagsForResource","nova-act:GetWorkflowDefinition","nova-act:ListWorkflowDefinitions","oam:GetLink","oam:GetSink","oam:GetSinkPolicy","oam:ListLinks","oam:ListTagsForResource","odb:GetAutonomousDatabase","odb:GetCloudAutonomousVmCluster","odb:GetCloudExadataInfrastructure","odb:GetCloudVmCluster","odb:GetDbNode","odb:GetOdbNetwork","odb:GetOdbPeeringConnection","odb:ListAutonomousDatabases","odb:ListCloudAutonomousVmClusters","odb:ListCloudExadataInfrastructures","odb:ListCloudVmClusters","odb:ListDbNodes","odb:ListDbServers","odb:ListOdbNetworks","odb:ListOdbPeeringConnections","odb:ListTagsForResource","omics:GetAnnotationStore","omics:GetConfiguration","omics:GetReferenceStore","omics:GetRun","omics:GetRunCache","omics:GetRunGroup","omics:GetS3AccessPolicy","omics:GetSequenceStore","omics:GetVariantStore","omics:GetWorkflow","omics:GetWorkflowVersion","omics:ListAnnotationStores","omics:ListConfigurations","omics:ListReadSets","omics:ListReferences","omics:ListRunCaches","omics:ListRuns","omics:ListSequenceStores","omics:ListTagsForResource","omics:ListVariantStores","omics:ListWorkflowVersions","organizations:DescribeEffectivePolicy","organizations:DescribeOrganization","organizations:DescribeOrganizationalUnit","organizations:DescribePolicy","organizations:ListAccountsForParent","organizations:ListDelegatedServicesForAccount","organizations:ListParents","organizations:ListPoliciesForTarget","organizations:ListTagsForResource","organizations:ListTargetsForPolicy","osis:GetPipeline","osis:GetResourcePolicy","osis:ListPipelines","osis:ListTagsForResource","outposts:GetOutpost","outposts:GetSite","outposts:ListOutposts","panorama:DescribeApplicationInstance","panorama:DescribeDevice","panorama:DescribePackageVersion","panorama:ListApplicationInstances","panorama:ListNodes","panorama:ListTagsForResource","partnercentral:GetBenefitApplication","partnercentral:ListTagsForResource","payment-cryptography:GetAlias","payment-cryptography:GetKey","payment-cryptography:ListAliases","payment-cryptography:ListKeys","payment-cryptography:ListTagsForResource","pca-connector-ad:GetConnector","pca-connector-ad:GetDirectoryRegistration","pca-connector-ad:GetServicePrincipalName","pca-connector-ad:GetTemplate","pca-connector-ad:GetTemplateGroupAccessControlEntry","pca-connector-ad:ListConnectors","pca-connector-ad:ListDirectoryRegistrations","pca-connector-ad:ListServicePrincipalNames","pca-connector-ad:ListTagsForResource","pca-connector-ad:ListTemplateGroupAccessControlEntries","pca-connector-ad:ListTemplates","pca-connector-scep:GetChallengeMetadata","pca-connector-scep:GetConnector","pca-connector-scep:ListChallengeMetadata","pca-connector-scep:ListConnectors","pca-connector-scep:ListTagsForResource","pcs:GetCluster","pcs:GetComputeNodeGroup","pcs:GetQueue","pcs:ListClusters","pcs:ListComputeNodeGroups","pcs:ListQueues","pcs:ListTagsForResource","personalize:DescribeDataset","personalize:DescribeDatasetGroup","personalize:DescribeSchema","personalize:DescribeSolution","personalize:ListDatasetImportJobs","personalize:ListFilters","personalize:ListTagsForResource","pi:ListTagsForResource","pipes:DescribePipe","polly:GetLexicon","polly:ListLexicons","profile:GetCalculatedAttributeDefinition","profile:GetDomain","profile:GetDomainObjectType","profile:GetEventStream","profile:GetIntegration","profile:GetProfileObjectType","profile:GetRecommender","profile:ListCalculatedAttributeDefinitions","profile:ListDomainObjectTypes","profile:ListDomains","profile:ListEventStreams","profile:ListProfileObjectTypes","profile:ListRecommenders","profile:ListTagsForResource","qbusiness:GetApplication","qbusiness:GetDataSource","qbusiness:GetIndex","qbusiness:GetPlugin","qbusiness:GetPolicy","qbusiness:GetRetriever","qbusiness:GetWebExperience","qbusiness:ListApplications","qbusiness:ListDataSources","qbusiness:ListIndices","qbusiness:ListPlugins","qbusiness:ListRetrievers","qbusiness:ListTagsForResource","qbusiness:ListWebExperiences","quicksight:DescribeActionConnector","quicksight:DescribeActionConnectorPermissions","quicksight:DescribeAnalysis","quicksight:DescribeAnalysisPermissions","quicksight:DescribeCustomPermissions","quicksight:DescribeDashboard","quicksight:DescribeDashboardPermissions","quicksight:DescribeDataSet","quicksight:DescribeDataSetPermissions","quicksight:DescribeDataSetRefreshProperties","quicksight:DescribeDataSource","quicksight:DescribeDataSourcePermissions","quicksight:DescribeDlpSetting","quicksight:DescribeFlow","quicksight:DescribeFolder","quicksight:DescribeFolderPermissions","quicksight:DescribeKnowledgeBase","quicksight:DescribeKnowledgeBasePermissions","quicksight:DescribeOAuthClientApplication","quicksight:DescribeRefreshSchedule","quicksight:DescribeSpace","quicksight:DescribeSpacePermissions","quicksight:DescribeTemplate","quicksight:DescribeTemplatePermissions","quicksight:DescribeTheme","quicksight:DescribeThemePermissions","quicksight:DescribeTopic","quicksight:DescribeUser","quicksight:DescribeVPCConnection","quicksight:GetFlowPermissions","quicksight:ListActionConnectors","quicksight:ListAgents","quicksight:ListAnalyses","quicksight:ListBrands","quicksight:ListCustomPermissions","quicksight:ListDashboards","quicksight:ListDlpSettings","quicksight:ListFlows","quicksight:ListKnowledgeBases","quicksight:ListOAuthClientApplications","quicksight:ListRefreshSchedules","quicksight:ListSpaceResources","quicksight:ListSpaces","quicksight:ListTagsForResource","quicksight:ListTopics","quicksight:ListUsers","quicksight:ListVPCConnections","ram:GetPermission","ram:GetResourceShareAssociations","ram:ListPermissionAssociations","ram:ListPermissionVersions","ram:ListResources","ram:ListResourceSharePermissions","rbin:GetRule","rds:DescribeDBClusterAutomatedBackups","rds:DescribeDBClusterParameters","rds:DescribeDBClusterSnapshotAttributes","rds:DescribeDBParameters","rds:DescribeDBProxyTargetGroups","rds:DescribeDBProxyTargets","rds:DescribeDBShardGroups","rds:DescribeDBSnapshotAttributes","rds:DescribeDBSnapshotTenantDatabases","rds:DescribeEngineDefaultClusterParameters","rds:DescribeEngineDefaultParameters","rds:DescribeIntegrations","rds:DescribeTenantDatabases","rds:ListTagsForResource","redshift-serverless:GetNamespace","redshift-serverless:GetSnapshot","redshift-serverless:GetWorkgroup","redshift-serverless:ListNamespaces","redshift-serverless:ListSnapshotCopyConfigurations","redshift-serverless:ListSnapshots","redshift-serverless:ListTagsForResource","redshift-serverless:ListWorkgroups","redshift:DescribeClusterDbRevisions","redshift:DescribeClusterParameters","redshift:DescribeClusterSecurityGroups","redshift:DescribeDataShares","redshift:DescribeEndpointAccess","redshift:DescribeEndpointAuthorization","redshift:DescribeIntegrations","redshift:DescribeLoggingStatus","redshift:DescribeScheduledActions","redshift:DescribeTags","redshift:GetResourcePolicy","refactor-spaces:GetApplication","refactor-spaces:GetEnvironment","refactor-spaces:GetRoute","refactor-spaces:GetService","refactor-spaces:ListTagsForResource","rekognition:DescribeCollection","rekognition:DescribeDataset","rekognition:DescribeStreamProcessor","rekognition:ListStreamProcessors","rekognition:ListTagsForResource","resiliencehub:DescribeApp","resiliencehub:DescribeAppVersionTemplate","resiliencehub:DescribeResiliencyPolicy","resiliencehub:ListAppVersionResourceMappings","resiliencehub:ListTagsForResource","resource-explorer-2:GetDefaultView","resource-explorer-2:GetView","resource-explorer-2:ListTagsForResource","resource-groups:GetGroup","resource-groups:GetGroupConfiguration","resource-groups:GetGroupQuery","resource-groups:GetTags","resource-groups:ListGroupResources","rolesanywhere:GetCrl","rolesanywhere:GetProfile","rolesanywhere:GetTrustAnchor","rolesanywhere:ListCrls","rolesanywhere:ListProfiles","rolesanywhere:ListTagsForResource","rolesanywhere:ListTrustAnchors","route53-recovery-control-config:DescribeCluster","route53-recovery-control-config:DescribeControlPanel","route53-recovery-control-config:DescribeRoutingControl","route53-recovery-control-config:DescribeSafetyRule","route53-recovery-control-config:ListTagsForResource","route53-recovery-readiness:GetCell","route53-recovery-readiness:GetReadinessCheck","route53-recovery-readiness:GetRecoveryGroup","route53-recovery-readiness:GetResourceSet","route53:GetChange","route53:GetDNSSEC","route53:GetHealthCheck","route53:GetHostedZone","route53:ListCidrBlocks","route53:ListCidrCollections","route53:ListCidrLocations","route53:ListHostedZonesByName","route53:ListQueryLoggingConfigs","route53:ListResourceRecordSets","route53:ListTagsForResource","route53globalresolver:GetAccessSource","route53globalresolver:GetAccessToken","route53globalresolver:GetDNSView","route53globalresolver:ListAccessSources","route53globalresolver:ListAccessTokens","route53globalresolver:ListDNSViews","route53profiles:GetProfile","route53profiles:GetProfileAssociation","route53profiles:GetProfileResourceAssociation","route53profiles:ListProfileAssociations","route53profiles:ListProfileResourceAssociations","route53profiles:ListProfiles","route53profiles:ListTagsForResource","route53resolver:GetFirewallDomainList","route53resolver:GetFirewallRuleGroup","route53resolver:GetFirewallRuleGroupAssociation","route53resolver:GetOutpostResolver","route53resolver:GetResolverConfig","route53resolver:GetResolverDnssecConfig","route53resolver:GetResolverEndpoint","route53resolver:GetResolverQueryLogConfig","route53resolver:GetResolverQueryLogConfigAssociation","route53resolver:GetResolverRule","route53resolver:GetResolverRuleAssociation","route53resolver:ListFirewallDomains","route53resolver:ListFirewallRules","route53resolver:ListOutpostResolvers","route53resolver:ListResolverConfigs","route53resolver:ListResolverDnssecConfigs","route53resolver:ListResolverEndpointIpAddresses","route53resolver:ListResolverQueryLogConfigAssociations","route53resolver:ListResolverRuleAssociations","route53resolver:ListTagsForResource","rtbfabric:GetCertificateAssociation","rtbfabric:GetInboundExternalLink","rtbfabric:GetLink","rtbfabric:GetLinkRoutingRule","rtbfabric:GetOutboundExternalLink","rtbfabric:GetRequesterGateway","rtbfabric:GetResponderGateway","rtbfabric:ListCertificateAssociations","rtbfabric:ListLinkRoutingRules","rtbfabric:ListLinks","rtbfabric:ListRequesterGateways","rtbfabric:ListResponderGateways","rtbfabric:ListTagsForResource","rum:GetAppMonitor","rum:GetAppMonitorData","rum:ListTagsForResource","s3-outposts:GetAccessPoint","s3-outposts:GetAccessPointPolicy","s3-outposts:GetBucket","s3-outposts:GetBucketPolicy","s3-outposts:GetBucketTagging","s3-outposts:GetLifecycleConfiguration","s3-outposts:ListAccessPoints","s3-outposts:ListEndpoints","s3-outposts:ListRegionalBuckets","s3:DescribeJob","s3:GetAccelerateConfiguration","s3:GetAccessGrant","s3:GetAccessGrantsInstance","s3:GetAccessGrantsLocation","s3:GetAccessPoint","s3:GetAccessPointForObjectLambda","s3:GetAccessPointPolicy","s3:GetAccessPointPolicyForObjectLambda","s3:GetAccessPointPolicyStatus","s3:GetAccessPointPolicyStatusForObjectLambda","s3:GetAccountPublicAccessBlock","s3:GetAnalyticsConfiguration","s3:GetBucketAbac","s3:GetBucketAcl","s3:GetBucketCORS","s3:GetBucketLogging","s3:GetBucketMetadataTableConfiguration","s3:GetBucketNotification","s3:GetBucketObjectLockConfiguration","s3:GetBucketOwnershipControls","s3:GetBucketPolicy","s3:GetBucketPolicyStatus","s3:GetBucketPublicAccessBlock","s3:GetBucketRequestPayment","s3:GetBucketTagging","s3:GetBucketVersioning","s3:GetBucketWebsite","s3:GetEncryptionConfiguration","s3:GetIntelligentTieringConfiguration","s3:GetInventoryConfiguration","s3:GetJobTagging","s3:GetLifecycleConfiguration","s3:GetMetricsConfiguration","s3:GetMultiRegionAccessPoint","s3:GetMultiRegionAccessPointPolicy","s3:GetMultiRegionAccessPointPolicyStatus","s3:GetReplicationConfiguration","s3:GetStorageLensConfiguration","s3:GetStorageLensConfigurationTagging","s3:GetStorageLensGroup","s3:ListAccessGrants","s3:ListAccessGrantsInstances","s3:ListAccessGrantsLocations","s3:ListAccessPointsForObjectLambda","s3:ListJobs","s3:ListTagsForResource","s3express:GetAccessPoint","s3express:GetAccessPointPolicy","s3express:GetAccessPointScope","s3express:GetBucketPolicy","s3express:GetEncryptionConfiguration","s3express:GetInventoryConfiguration","s3express:GetLifecycleConfiguration","s3express:GetMetricsConfiguration","s3express:ListAccessPointsForDirectoryBuckets","s3express:ListTagsForResource","s3files:GetAccessPoint","s3files:GetFileSystem","s3files:GetFileSystemPolicy","s3files:GetMountTarget","s3files:GetSynchronizationConfiguration","s3files:ListAccessPoints","s3files:ListFileSystems","s3files:ListMountTargets","s3files:ListTagsForResource","s3tables:GetTable","s3tables:GetTableBucket","s3tables:GetTableBucketEncryption","s3tables:GetTableBucketMaintenanceConfiguration","s3tables:GetTableBucketMetricsConfiguration","s3tables:GetTableBucketPolicy","s3tables:GetTableBucketReplication","s3tables:GetTableBucketStorageClass","s3tables:GetTableMaintenanceConfiguration","s3tables:GetTableStorageClass","s3tables:ListNamespaces","s3tables:ListTableBuckets","s3tables:ListTables","s3tables:ListTagsForResource","s3vectors:GetIndex","s3vectors:GetVectorBucket","s3vectors:GetVectorBucketPolicy","s3vectors:ListTagsForResource","sagemaker:DescribeAction","sagemaker:DescribeAlgorithm","sagemaker:DescribeApp","sagemaker:DescribeAppImageConfig","sagemaker:DescribeArtifact","sagemaker:DescribeAutoMLJob","sagemaker:DescribeAutoMLJobV2","sagemaker:DescribeCluster","sagemaker:DescribeClusterSchedulerConfig","sagemaker:DescribeCodeRepository","sagemaker:DescribeComputeQuota","sagemaker:DescribeContext","sagemaker:DescribeDataQualityJobDefinition","sagemaker:DescribeDevice","sagemaker:DescribeDeviceFleet","sagemaker:DescribeDomain","sagemaker:DescribeEndpoint","sagemaker:DescribeEndpointConfig","sagemaker:DescribeExperiment","sagemaker:DescribeFeatureGroup","sagemaker:DescribeFlowDefinition","sagemaker:DescribeHub","sagemaker:DescribeHumanTaskUi","sagemaker:DescribeHyperParameterTuningJob","sagemaker:DescribeImage","sagemaker:DescribeImageVersion","sagemaker:DescribeInferenceExperiment","sagemaker:DescribeLabelingJob","sagemaker:DescribeMlflowApp","sagemaker:DescribeMlflowTrackingServer","sagemaker:DescribeModel","sagemaker:DescribeModelBiasJobDefinition","sagemaker:DescribeModelCard","sagemaker:DescribeModelCardExportJob","sagemaker:DescribeModelExplainabilityJobDefinition","sagemaker:DescribeModelPackage","sagemaker:DescribeModelPackageGroup","sagemaker:DescribeModelQualityJobDefinition","sagemaker:DescribeMonitoringSchedule","sagemaker:DescribeNotebookInstance","sagemaker:DescribeNotebookInstanceLifecycleConfig","sagemaker:DescribeOptimizationJob","sagemaker:DescribePartnerApp","sagemaker:DescribePipeline","sagemaker:DescribePipelineExecution","sagemaker:DescribeProcessingJob","sagemaker:DescribeProject","sagemaker:DescribeSpace","sagemaker:DescribeStudioLifecycleConfig","sagemaker:DescribeTrainingJob","sagemaker:DescribeTrainingPlan","sagemaker:DescribeTrial","sagemaker:DescribeTrialComponent","sagemaker:DescribeUserProfile","sagemaker:DescribeWorkforce","sagemaker:DescribeWorkteam","sagemaker:GetModelPackageGroupPolicy","sagemaker:ListAutoMLJobs","sagemaker:ListClusterSchedulerConfigs","sagemaker:ListComputeQuotas","sagemaker:ListDataQualityJobDefinitions","sagemaker:ListDeviceFleets","sagemaker:ListHyperParameterTuningJobs","sagemaker:ListLabelingJobs","sagemaker:ListMlflowApps","sagemaker:ListModelBiasJobDefinitions","sagemaker:ListModelCardExportJobs","sagemaker:ListModelExplainabilityJobDefinitions","sagemaker:ListModelQualityJobDefinitions","sagemaker:ListMonitoringAlerts","sagemaker:ListOptimizationJobs","sagemaker:ListPipelineExecutions","sagemaker:ListProcessingJobs","sagemaker:ListTags","sagemaker:ListTrainingJobs","sagemaker:ListTrainingPlans","scheduler:GetSchedule","scheduler:GetScheduleGroup","scheduler:ListSchedules","scheduler:ListTagsForResource","schemas:DescribeDiscoverer","schemas:DescribeRegistry","schemas:DescribeSchema","schemas:GetResourcePolicy","schemas:ListDiscoverers","schemas:ListRegistries","schemas:ListSchemas","scn:GetInstance","scn:ListInstances","scn:ListTagsForResource","sdb:GetAttributes","sdb:ListDomains","secretsmanager:DescribeSecret","secretsmanager:GetResourcePolicy","secretsmanager:ListSecretVersionIds","securityagent:BatchGetAgentSpaces","securityagent:BatchGetPentests","securityagent:BatchGetSecurityRequirements","securityagent:BatchGetTargetDomains","securityagent:GetApplication","securityagent:GetSecurityRequirementPack","securityagent:ListAgentSpaces","securityagent:ListApplications","securityagent:ListIntegratedResources","securityagent:ListPentests","securityagent:ListSecurityRequirementPacks","securityagent:ListSecurityRequirements","securityagent:ListTagsForResource","securityagent:ListTargetDomains","securityhub:DescribeHub","securityhub:DescribeOrganizationConfiguration","securityhub:DescribeStandardsControls","securityhub:GetAggregatorV2","securityhub:GetAutomationRuleV2","securityhub:GetConfigurationPolicy","securityhub:GetConfigurationPolicyAssociation","securityhub:GetEnabledStandards","securityhub:GetFindingAggregator","securityhub:ListAggregatorsV2","securityhub:ListAutomationRulesV2","securityhub:ListConfigurationPolicies","securityhub:ListConfigurationPolicyAssociations","securityhub:ListEnabledProductsForImport","securityhub:ListFindingAggregators","securityhub:ListTagsForResource","securitylake:GetSubscriber","securitylake:ListDataLakeExceptions","securitylake:ListDataLakes","securitylake:ListLogSources","securitylake:ListSubscribers","securitylake:ListTagsForResource","servicecatalog:DescribePortfolio","servicecatalog:DescribePortfolioShares","servicecatalog:DescribeProductAsAdmin","servicecatalog:DescribeProvisionedProduct","servicecatalog:DescribeProvisioningArtifact","servicecatalog:DescribeServiceAction","servicecatalog:DescribeTagOption","servicecatalog:GetApplication","servicecatalog:GetAttributeGroup","servicecatalog:ListAssociatedResources","servicecatalog:ListPortfolios","servicecatalog:ListProvisioningArtifacts","servicecatalog:ListServiceActions","servicecatalog:ListServiceActionsForProvisioningArtifact","servicecatalog:ListTagOptions","servicecatalog:SearchProductsAsAdmin","servicediscovery:GetInstance","servicediscovery:GetNamespace","servicediscovery:GetService","servicediscovery:ListInstances","servicediscovery:ListNamespaces","servicediscovery:ListTagsForResource","servicequotas:GetServiceQuota","servicequotas:ListServiceQuotas","servicequotas:ListTagsForResource","ses:DescribeReceiptRule","ses:DescribeReceiptRuleSet","ses:GetAddonInstance","ses:GetAddonSubscription","ses:GetAddressList","ses:GetArchive","ses:GetConfigurationSet","ses:GetConfigurationSetEventDestinations","ses:GetContactList","ses:GetCustomVerificationEmailTemplate","ses:GetDedicatedIpPool","ses:GetDedicatedIps","ses:GetEmailIdentity","ses:GetEmailTemplate","ses:GetIngressPoint","ses:GetRelay","ses:GetRuleSet","ses:GetTemplate","ses:GetTenant","ses:GetTrafficPolicy","ses:ListAddonInstances","ses:ListAddonSubscriptions","ses:ListAddressLists","ses:ListArchives","ses:ListCustomVerificationEmailTemplates","ses:ListIngressPoints","ses:ListReceiptFilters","ses:ListReceiptRuleSets","ses:ListRelays","ses:ListRuleSets","ses:ListTagsForResource","ses:ListTemplates","ses:ListTenantResources","ses:ListTenants","ses:ListTrafficPolicies","shield:DescribeDRTAccess","shield:DescribeProtection","shield:DescribeProtectionGroup","shield:DescribeSubscription","shield:ListTagsForResource","signer:GetSigningProfile","signer:ListProfilePermissions","simspaceweaver:DescribeSimulation","simspaceweaver:ListSimulations","sms-voice:DescribeConfigurationSets","sms-voice:DescribeKeywords","sms-voice:DescribeOptOutLists","sms-voice:DescribePhoneNumbers","sms-voice:DescribePools","sms-voice:DescribeProtectConfigurations","sms-voice:DescribeSenderIds","sms-voice:GetProtectConfigurationCountryRuleSet","sms-voice:GetResourcePolicy","sms-voice:ListPoolOriginationIdentities","sms-voice:ListTagsForResource","sns:GetDataProtectionPolicy","sns:GetSMSSandboxAccountStatus","sns:GetSubscriptionAttributes","sns:GetTopicAttributes","sns:ListSubscriptions","sns:ListSubscriptionsByTopic","sns:ListTagsForResource","sqs:GetQueueAttributes","sqs:ListQueueTags","ssm-contacts:GetContact","ssm-contacts:GetContactChannel","ssm-contacts:GetRotation","ssm-contacts:ListContactChannels","ssm-contacts:ListContacts","ssm-contacts:ListRotations","ssm-contacts:ListTagsForResource","ssm-guiconnect:GetConnectionRecordingPreferences","ssm-incidents:GetReplicationSet","ssm-incidents:GetResponsePlan","ssm-incidents:ListReplicationSets","ssm-incidents:ListTagsForResource","ssm-quicksetup:GetConfigurationManager","ssm-quicksetup:ListConfigurationManagers","ssm-sap:GetApplication","ssm-sap:GetComponent","ssm-sap:GetDatabase","ssm-sap:ListApplications","ssm-sap:ListComponents","ssm-sap:ListDatabases","ssm-sap:ListTagsForResource","ssm:DescribeAssociation","ssm:DescribeAutomationExecutions","ssm:DescribeDocument","ssm:DescribeDocumentPermission","ssm:DescribeOpsItems","ssm:DescribePatchBaselines","ssm:GetAutomationExecution","ssm:GetCloudConnector","ssm:GetDefaultPatchBaseline","ssm:GetDocument","ssm:GetMaintenanceWindow","ssm:GetOpsItem","ssm:GetOpsMetadata","ssm:GetPatchBaseline","ssm:GetResourcePolicies","ssm:GetServiceSetting","ssm:ListCloudConnectors","ssm:ListOpsMetadata","ssm:ListTagsForResource","sso-directory:DescribeGroup","sso-directory:DescribeUser","sso:DescribeApplication","sso:DescribeInstance","sso:DescribeInstanceAccessControlAttributeConfiguration","sso:DescribePermissionSet","sso:GetApplicationGrant","sso:GetInlinePolicyForPermissionSet","sso:GetPermissionsBoundaryForPermissionSet","sso:ListApplications","sso:ListCustomerManagedPolicyReferencesInPermissionSet","sso:ListInstances","sso:ListManagedPoliciesInPermissionSet","sso:ListPermissionSets","sso:ListTagsForResource","states:DescribeActivity","states:DescribeExecution","states:DescribeStateMachine","states:DescribeStateMachineAlias","states:ListExecutions","states:ListStateMachineAliases","states:ListStateMachineVersions","states:ListTagsForResource","storagegateway:ListTagsForResource","storagegateway:ListVolumes","sts:GetCallerIdentity","support:DescribeCases","supportapp:ListSlackChannelConfigurations","supportapp:ListSlackWorkspaceConfigurations","supportauthz:ListTagsForResource","swf:DescribeDomain","swf:ListTagsForResource","synthetics:DescribeCanariesLastRun","synthetics:DescribeRuntimeVersions","synthetics:GetCanary","synthetics:GetCanaryRuns","synthetics:GetGroup","synthetics:ListAssociatedGroups","synthetics:ListGroupResources","synthetics:ListTagsForResource","tag:GetResources","textract:GetAdapter","textract:ListAdapters","textract:ListTagsForResource","timestream-influxdb:GetDbCluster","timestream-influxdb:GetDbInstance","timestream-influxdb:ListDbClusters","timestream-influxdb:ListDbInstances","timestream-influxdb:ListTagsForResource","timestream:DescribeDatabase","timestream:DescribeEndpoints","timestream:DescribeScheduledQuery","timestream:DescribeTable","timestream:ListDatabases","timestream:ListScheduledQueries","timestream:ListTables","timestream:ListTagsForResource","transcribe:GetCallAnalyticsJob","transcribe:GetVocabularyFilter","transcribe:ListCallAnalyticsJobs","transcribe:ListTagsForResource","transcribe:ListVocabularyFilters","transfer:DescribeAgreement","transfer:DescribeCertificate","transfer:DescribeConnector","transfer:DescribeHostKey","transfer:DescribeProfile","transfer:DescribeServer","transfer:DescribeUser","transfer:DescribeWebApp","transfer:DescribeWebAppCustomization","transfer:DescribeWorkflow","transfer:ListHostKeys","transfer:ListTagsForResource","transfer:ListWebApps","verifiedpermissions:GetIdentitySource","verifiedpermissions:GetPolicyStore","verifiedpermissions:GetPolicyTemplate","verifiedpermissions:GetSchema","verifiedpermissions:ListIdentitySources","verifiedpermissions:ListPolicyTemplates","verifiedpermissions:ListTagsForResource","voiceid:DescribeDomain","voiceid:ListTagsForResource","vpc-lattice:GetAccessLogSubscription","vpc-lattice:GetListener","vpc-lattice:GetResourceConfiguration","vpc-lattice:GetResourceGateway","vpc-lattice:GetResourcePolicy","vpc-lattice:GetRule","vpc-lattice:GetService","vpc-lattice:GetServiceNetwork","vpc-lattice:GetServiceNetworkResourceAssociation","vpc-lattice:GetServiceNetworkServiceAssociation","vpc-lattice:GetServiceNetworkVpcAssociation","vpc-lattice:GetTargetGroup","vpc-lattice:ListResourceConfigurations","vpc-lattice:ListResourceGateways","vpc-lattice:ListServiceNetworkResourceAssociations","vpc-lattice:ListServiceNetworkVpcAssociations","vpc-lattice:ListTargets","waf-regional:GetLoggingConfiguration","waf-regional:GetWebACL","waf-regional:GetWebACLForResource","waf-regional:ListLoggingConfigurations","waf:GetLoggingConfiguration","waf:GetWebACL","wafv2:GetIPSet","wafv2:GetLoggingConfiguration","wafv2:GetRegexPatternSet","wafv2:GetRuleGroup","wafv2:GetWebACL","wafv2:ListLoggingConfigurations","wafv2:ListTagsForResource","wellarchitected:GetLens","wellarchitected:GetProfile","wellarchitected:GetReviewTemplate","wellarchitected:ListLenses","wellarchitected:ListProfiles","wellarchitected:ListReviewTemplates","wickr:GetNetwork","wickr:ListNetworks","wisdom:GetAIAgent","wisdom:GetAIGuardrail","wisdom:GetAIPrompt","wisdom:GetAssistant","wisdom:GetContent","wisdom:GetKnowledgeBase","wisdom:GetQuickResponse","wisdom:GetSession","wisdom:ListAIAgentVersions","wisdom:ListAIAgents","wisdom:ListAIGuardrails","wisdom:ListAIGuardrailVersions","wisdom:ListAIPrompts","wisdom:ListAIPromptVersions","wisdom:ListQuickResponses","wisdom:SearchSessions","workspaces-web:GetBrowserSettings","workspaces-web:GetDataProtectionSettings","workspaces-web:GetIpAccessSettings","workspaces-web:GetNetworkSettings","workspaces-web:GetSessionLogger","workspaces-web:GetTrustStore","workspaces-web:GetTrustStoreCertificate","workspaces-web:GetUserAccessLoggingSettings","workspaces-web:GetUserSettings","workspaces-web:ListBrowserSettings","workspaces-web:ListDataProtectionSettings","workspaces-web:ListIdentityProviders","workspaces-web:ListIpAccessSettings","workspaces-web:ListNetworkSettings","workspaces-web:ListSessionLoggers","workspaces-web:ListTagsForResource","workspaces-web:ListTrustStoreCertificates","workspaces-web:ListTrustStores","workspaces-web:ListUserAccessLoggingSettings","workspaces-web:ListUserSettings","workspaces:DescribeTags","workspaces:DescribeWorkspacesPools","xray:GetGroup","xray:GetGroups","xray:GetIndexingRules","xray:GetTraceSegmentDestination","xray:ListResourcePolicies","xray:ListTagsForResource"],"Resource":"*"}]}

Version history

Current version v59, edited by AWS on 2026-10-30. Version history is recorded from 2026-11-11. Earlier versions are in the IAM console under Policy versions.

Attach snippets

This policy cannot be attached to users, groups or roles, so there are no attach snippets.

Sources

Pending editorial review. No editorial sources are listed yet.

• Official AWS reference for AWSResourceExplorerServiceRolePolicy
• Report a data issue