AWSSupportServiceRolePolicy
Summary
Allows AWS Support to access AWS resources to provide billing, administrative, and support services.
Permissions imported from the AWS Managed Policy Reference Guide; other sections pending editorial review.
Identity
- ARN
arn:aws:iam::aws:policy/aws-service-role/AWSSupportServiceRolePolicy- Default version
- v60
- Created
- Last edited
- Services
- access-analyzer, account, acm, acm-pca, aidevops, aiops, airflow, airflow-serverless, amplify, amplifyuibuilder, aoss, apigateway, appconfig, appflow, application-autoscaling, application-signals, applicationinsights, appmesh, apprunner, appstream, appsync, aps, arc-region-switch, arc-zonal-shift, athena, auditmanager, autoscaling, autoscaling-plans, aws-marketplace, backup, backup-gateway, backup-search, batch, bedrock, bedrock-agentcore, braket, budgets, ce, chatbot, chime, cleanrooms, cloud9, clouddirectory, cloudformation, cloudfront, cloudhsm, cloudsearch, cloudtrail, cloudwatch, codeartifact, codebuild, codecommit, codeconnections, codedeploy, codepipeline, codestar-connections, cognito-identity, cognito-idp, cognito-sync, comprehend, compute-optimizer, config, connect, connect-campaigns, controlcatalog, controltower, cost-optimization-hub, databrew, datapipeline, datasync, datazone, dax, deadline, detective, devicefarm, directconnect, dlm, dms, docdb-elastic, drs, ds, dsql, dynamodb, ebs, ec2, ecr, ecr-public, ecs, eks, elasticache, elasticbeanstalk, elasticfilesystem, elasticloadbalancing, elasticmapreduce, emr-containers, emr-serverless, entityresolution, es, events, evs, firehose, fis, fms, forecast, freetier, fsx, gamelift, geo, geo-maps, geo-places, geo-routes, glacier, globalaccelerator, glue, grafana, greengrass, guardduty, health, iam, identitystore, imagebuilder, inspector, inspector-scan, inspector2, internetmonitor, invoicing, iot, iotfleetwise, iotsitewise, iottwinmaker, iotwireless, ivs, kafka, kafkaconnect, kendra, kinesis, kinesisanalytics, kinesisvideo, kms, lakeformation, lambda, launchwizard, lex, license-manager, license-manager-linux-subscriptions, license-manager-user-subscriptions, lightsail, logs, lookoutequipment, m2, machinelearning, macie2, managedblockchain, mediaconnect, mediaconvert, medialive, mediapackage, mediastore, mediatailor, medical-imaging, memorydb, mgn, mobiletargeting, mpa, mq, network-firewall, networkflowmonitor, networkmanager, networkmonitor, notifications, notifications-contacts, oam, observabilityadmin, odb, omics, opsworks, opsworks-cm, organizations, osis, outposts, payment-cryptography, pca-connector-ad, pca-connector-scep, pcs, personalize, pipes, polly, pricing, private-networks, qbusiness, quicksight, ram, rbin, rds, redshift, redshift-data, redshift-serverless, rekognition, resiliencehub, resource-explorer-2, resource-groups, robomaker, rolesanywhere, route53, route53-recovery-cluster, route53-recovery-control-config, route53-recovery-readiness, route53domains, route53globalresolver, route53profiles, route53resolver, rtbfabric, rum, s3, s3-outposts, s3express, s3files, s3tables, s3vectors, sagemaker, savingsplans, scheduler, schemas, sdb, secretsmanager, security-ir, securityhub, securitylake, serverlessrepo, servicecatalog, servicequotas, ses, shield, signer, sms, sms-voice, snowball, sns, social-messaging, sqs, ssm, ssm-contacts, ssm-incidents, ssm-quicksetup, ssm-sap, sso, states, storagegateway, sts, supportauthz, sustainability, swf, synthetics, tax, textract, thinclient, timestream, tiros, transcribe, transfer, trustedadvisor, verifiedpermissions, vpc-lattice, waf, waf-regional, wafv2, wellarchitected, wisdom, workdocs, workmail, workspaces, workspaces-web, xray
Control-plane actions (4587)
By access level: 2043 List, 2 Permissions management, 2538 Read, 4 Write.
| Service | Granted | Access levels and limits | Granted by |
|---|---|---|---|
| Access Analyzer | 13 of 37 | 3 List, 10 Read; 0 restricted, 0 conditional | access-analyzer:getAccessPreview, access-analyzer:getAnalyzedResource, access-analyzer:getAnalyzer, access-analyzer:getArchiveRule, access-analyzer:getFinding, access-analyzer:getGeneratedPolicy, access-analyzer:listAccessPreviewFindings, access-analyzer:listAccessPreviews, access-analyzer:listAnalyzedResources, access-analyzer:listAnalyzers, access-analyzer:listArchiveRules, access-analyzer:listFindings and 1 more |
| Account | 2 of 20 | 1 List, 1 Read; 0 restricted, 0 conditional | account:getRegionOptStatus, account:listRegions |
| Certificate Manager | 15 of 42 | 7 List, 8 Read; 0 restricted, 0 conditional | acm:describeAcmeAccount, acm:describeAcmeDomainValidation, acm:describeAcmeEndpoint, acm:describeAcmeExternalAccountBinding, acm:describeCertificate, acm:getAccountConfiguration, acm:getCertificate, acm:listAcmeAccounts, acm:listAcmeDomainValidations, acm:listAcmeEndpoints, acm:listAcmeExternalAccountBindings, acm:listCertificateDomainValidations and 3 more |
| Private Certificate Authority | 7 of 23 | 1 List, 6 Read; 0 restricted, 0 conditional | acm-pca:describeCertificateAuthority, acm-pca:describeCertificateAuthorityAuditReport, acm-pca:getCertificate, acm-pca:getCertificateAuthorityCertificate, acm-pca:getCertificateAuthorityCsr, acm-pca:listCertificateAuthorities, acm-pca:listTags |
| DevOps Agent | 14 of 90 | 10 List, 4 Read; 0 restricted, 0 conditional | aidevops:describePrivateConnection, aidevops:getAccountUsage, aidevops:getBacklogTask, aidevops:getRecommendation, aidevops:listAgentSpaces, aidevops:listAssociations, aidevops:listBacklogTasks, aidevops:listChats, aidevops:listExecutions, aidevops:listGoals, aidevops:listPrivateConnections, aidevops:listRecommendations and 2 more |
| AI Operations | 3 of 33 | 1 List, 2 Read; 0 restricted, 0 conditional | aiops:getInvestigationGroup, aiops:getInvestigationGroupPolicy, aiops:listInvestigationGroups |
| MWAA | 3 of 12 | 1 List, 2 Read; 0 restricted, 0 conditional | airflow:getEnvironment, airflow:listEnvironments, airflow:listTagsForResource |
| MWAA Serverless | 7 of 16 | 4 List, 3 Read; 0 restricted, 0 conditional | airflow-serverless:getTaskInstance, airflow-serverless:getWorkflow, airflow-serverless:getWorkflowRun, airflow-serverless:listTaskInstances, airflow-serverless:listWorkflowRuns, airflow-serverless:listWorkflowVersions, airflow-serverless:listWorkflows |
| Amplify | 13 of 41 | 7 List, 6 Read; 0 restricted, 0 conditional | amplify:getApp, amplify:getBackendEnvironment, amplify:getBranch, amplify:getDomainAssociation, amplify:getJob, amplify:getWebhook, amplify:listApps, amplify:listBackendEnvironments, amplify:listBranches, amplify:listDomainAssociations, amplify:listJobs, amplify:listResourcesForWebACL and 1 more |
| Amplify UI Builder | 2 of 29 | 2 Read; 0 restricted, 0 conditional | amplifyuibuilder:exportComponents, amplifyuibuilder:exportThemes |
| OpenSearch Serverless | 19 of 57 | 8 List, 11 Read; 0 restricted, 0 conditional | aoss:batchGetCollection, aoss:batchGetCollectionGroup, aoss:batchGetEffectiveLifecyclePolicy, aoss:batchGetLifecyclePolicy, aoss:batchGetVpcEndpoint, aoss:getAccessPolicy, aoss:getAccountSettings, aoss:getIndex, aoss:getPoliciesStats, aoss:getSecurityConfig, aoss:getSecurityPolicy, aoss:listAccessPolicies and 7 more |
| API Gateway | 12 of 44 | 5 List, 7 Read; 1 restricted, 0 conditional | apigateway:GET, apigateway:getPortal, apigateway:getPortalProduct, apigateway:getPortalProductSharingPolicy, apigateway:getProductPage, apigateway:getProductRestEndpointPage, apigateway:getRoutingRule, apigateway:listPortalProducts, apigateway:listPortals, apigateway:listProductPages, apigateway:listProductRestEndpointPages, apigateway:listRoutingRules |
| AppConfig | 17 of 56 | 8 List, 9 Read; 0 restricted, 0 conditional | appconfig:getAccountSettings, appconfig:getApplication, appconfig:getConfigurationProfile, appconfig:getDeployment, appconfig:getDeploymentStrategy, appconfig:getEnvironment, appconfig:getExtension, appconfig:getExtensionAssociation, appconfig:getHostedConfigurationVersion, appconfig:listApplications, appconfig:listConfigurationProfiles, appconfig:listDeploymentStrategies and 5 more |
| AppFlow | 7 of 31 | 2 List, 5 Read; 0 restricted, 0 conditional | appflow:describeConnectorEntity, appflow:describeConnectorProfiles, appflow:describeConnectors, appflow:describeFlow, appflow:describeFlowExecutionRecords, appflow:listConnectorEntities, appflow:listFlows |
| Application Auto Scaling | 4 of 14 | 4 Read; 0 restricted, 0 conditional | application-autoscaling:describeScalableTargets, application-autoscaling:describeScalingActivities, application-autoscaling:describeScalingPolicies, application-autoscaling:describeScheduledActions |
| Application Signals | 12 of 30 | 7 List, 5 Read; 0 restricted, 0 conditional | application-signals:getService, application-signals:getServiceLevelObjective, application-signals:listAuditFindings, application-signals:listEntityEvents, application-signals:listGroupingAttributeDefinitions, application-signals:listServiceDependencies, application-signals:listServiceDependents, application-signals:listServiceLevelObjectiveExclusionWindows, application-signals:listServiceLevelObjectives, application-signals:listServiceOperations, application-signals:listServiceStates, application-signals:listServices |
| CloudWatch Application Insights | 14 of 34 | 6 List, 8 Read; 0 restricted, 0 conditional | applicationinsights:describeApplication, applicationinsights:describeComponent, applicationinsights:describeComponentConfiguration, applicationinsights:describeComponentConfigurationRecommendation, applicationinsights:describeLogPattern, applicationinsights:describeObservation, applicationinsights:describeProblem, applicationinsights:describeProblemObservations, applicationinsights:listApplications, applicationinsights:listComponents, applicationinsights:listConfigurationHistory, applicationinsights:listLogPatternSets and 2 more |
| App Mesh | 15 of 42 | 8 List, 7 Read; 0 restricted, 0 conditional | appmesh:describeGatewayRoute, appmesh:describeMesh, appmesh:describeRoute, appmesh:describeVirtualGateway, appmesh:describeVirtualNode, appmesh:describeVirtualRouter, appmesh:describeVirtualService, appmesh:listGatewayRoutes, appmesh:listMeshes, appmesh:listRoutes, appmesh:listTagsForResource, appmesh:listVirtualGateways and 3 more |
| App Runner | 16 of 42 | 8 List, 8 Read; 0 restricted, 0 conditional | apprunner:describeAutoScalingConfiguration, apprunner:describeCustomDomains, apprunner:describeObservabilityConfiguration, apprunner:describeOperation, apprunner:describeService, apprunner:describeVpcConnector, apprunner:describeVpcIngressConnection, apprunner:listAssociatedServicesForWebAcl, apprunner:listAutoScalingConfigurations, apprunner:listConnections, apprunner:listObservabilityConfigurations, apprunner:listOperations and 4 more |
| AppStream 2.0 | 20 of 90 | 16 List, 4 Read; 0 restricted, 0 conditional | appstream:describeAppBlockBuilderAppBlockAssociations, appstream:describeAppBlockBuilders, appstream:describeAppBlocks, appstream:describeApplicationFleetAssociations, appstream:describeApplications, appstream:describeDirectoryConfigs, appstream:describeEntitlements, appstream:describeFleets, appstream:describeImageBuilders, appstream:describeImagePermissions, appstream:describeImages, appstream:describeSessions and 8 more |
| AppSync | 28 of 87 | 11 List, 17 Read; 0 restricted, 0 conditional | appsync:evaluateCode, appsync:evaluateMappingTemplate, appsync:getApi, appsync:getApiAssociation, appsync:getApiCache, appsync:getChannelNamespace, appsync:getDataSource, appsync:getDataSourceIntrospection, appsync:getDomainName, appsync:getFunction, appsync:getGraphqlApi, appsync:getGraphqlApiEnvironmentVariables and 16 more |
| AMP | 7 of 61 | 3 List, 4 Read; 0 restricted, 0 conditional | aps:describeAlertManagerDefinition, aps:describeRuleGroupsNamespace, aps:describeScraper, aps:describeWorkspace, aps:listRuleGroupsNamespaces, aps:listScrapers, aps:listWorkspaces |
| ARC Region switch | 10 of 25 | 6 List, 4 Read; 0 restricted, 0 conditional | arc-region-switch:getPlan, arc-region-switch:getPlanEvaluationStatus, arc-region-switch:getPlanExecution, arc-region-switch:getPlanInRegion, arc-region-switch:listPlanExecutionEvents, arc-region-switch:listPlanExecutions, arc-region-switch:listPlans, arc-region-switch:listPlansInRegion, arc-region-switch:listRoute53HealthChecks, arc-region-switch:listRoute53HealthChecksInRegion |
| ARC Zonal Shift | 5 of 15 | 3 List, 2 Read; 0 restricted, 0 conditional | arc-zonal-shift:getAutoshiftObserverNotificationStatus, arc-zonal-shift:getManagedResource, arc-zonal-shift:listAutoshifts, arc-zonal-shift:listManagedResources, arc-zonal-shift:listZonalShifts |
| Athena | 27 of 86 | 10 List, 17 Read; 0 restricted, 0 conditional | athena:batchGetNamedQuery, athena:batchGetQueryExecution, athena:getCalculationExecution, athena:getCalculationExecutionStatus, athena:getCapacityAssignmentConfiguration, athena:getCapacityReservation, athena:getDataCatalog, athena:getNamedQuery, athena:getNotebookMetadata, athena:getQueryExecution, athena:getQueryRuntimeStatistics, athena:getSession and 15 more |
| Audit Manager | 8 of 62 | 7 List, 1 Read; 0 restricted, 0 conditional | auditmanager:getAccountStatus, auditmanager:getDelegations, auditmanager:listAssessmentFrameworks, auditmanager:listAssessmentReports, auditmanager:listAssessments, auditmanager:listControls, auditmanager:listKeywordsForDataSource, auditmanager:listNotifications |
| EC2 Auto Scaling | 22 of 68 | 21 List, 1 Read; 0 restricted, 0 conditional | autoscaling:describeAccountLimits, autoscaling:describeAdjustmentTypes, autoscaling:describeAutoScalingGroups, autoscaling:describeAutoScalingInstances, autoscaling:describeAutoScalingNotificationTypes, autoscaling:describeInstanceRefreshes, autoscaling:describeLaunchConfigurations, autoscaling:describeLifecycleHookTypes, autoscaling:describeLifecycleHooks, autoscaling:describeLoadBalancerTargetGroups, autoscaling:describeLoadBalancers, autoscaling:describeMetricCollectionTypes and 10 more |
| Auto Scaling | 3 of 6 | 3 Read; 0 restricted, 0 conditional | autoscaling-plans:describeScalingPlanResources, autoscaling-plans:describeScalingPlans, autoscaling-plans:getScalingPlanResourceForecastData |
| Marketplace | 4 of 97 | 2 List, 2 Read; 0 restricted, 0 conditional | aws-marketplace:describeAgreement, aws-marketplace:describeEntity, aws-marketplace:listEntities, aws-marketplace:searchAgreements |
| Backup | 61 of 122 | 31 List, 30 Read; 0 restricted, 0 conditional | backup:describeBackupAccessPoint, backup:describeBackupJob, backup:describeBackupVault, backup:describeCopyJob, backup:describeFramework, backup:describeGlobalSettings, backup:describeProtectedResource, backup:describeRecoveryPoint, backup:describeRegionSettings, backup:describeReportJob, backup:describeReportPlan, backup:describeRestoreJob and 49 more |
| Backup Gateway | 9 of 27 | 9 Read; 0 restricted, 0 conditional | backup-gateway:getBandwidthRateLimitSchedule, backup-gateway:getGateway, backup-gateway:getHypervisor, backup-gateway:getHypervisorPropertyMappings, backup-gateway:getVirtualMachine, backup-gateway:listGateways, backup-gateway:listHypervisors, backup-gateway:listTagsForResource, backup-gateway:listVirtualMachines |
| Backup Search | 6 of 12 | 2 List, 4 Read; 0 restricted, 0 conditional | backup-search:getSearchJob, backup-search:getSearchResultExportJob, backup-search:listSearchJobBackups, backup-search:listSearchJobs, backup-search:listSearchResultExportJobs, backup-search:listTagsForResource |
| Batch | 15 of 46 | 4 List, 11 Read; 0 restricted, 0 conditional | batch:describeComputeEnvironments, batch:describeConsumableResource, batch:describeJobDefinitions, batch:describeJobQueues, batch:describeJobs, batch:describeSchedulingPolicies, batch:describeServiceEnvironments, batch:describeServiceJob, batch:getJobQueueSnapshot, batch:listConsumableResources, batch:listJobs, batch:listJobsByConsumableResource and 3 more |
| Bedrock | 81 of 232 | 38 List, 43 Read; 0 restricted, 0 conditional | bedrock:exportAutomatedReasoningPolicyVersion, bedrock:getAgent, bedrock:getAgentActionGroup, bedrock:getAgentAlias, bedrock:getAgentCollaborator, bedrock:getAgentKnowledgeBase, bedrock:getAgentVersion, bedrock:getAutomatedReasoningPolicy, bedrock:getAutomatedReasoningPolicyAnnotations, bedrock:getAutomatedReasoningPolicyBuildWorkflow, bedrock:getAutomatedReasoningPolicyBuildWorkflowResultAssets, bedrock:getAutomatedReasoningPolicyNextScenario and 69 more |
| Bedrock-Agentcore | 60 of 197 | 27 List, 33 Read; 0 restricted, 0 conditional | bedrock-agentcore:getAgentRuntime, bedrock-agentcore:getAgentRuntimeEndpoint, bedrock-agentcore:getApiKeyCredentialProvider, bedrock-agentcore:getBrowser, bedrock-agentcore:getBrowserProfile, bedrock-agentcore:getCodeInterpreter, bedrock-agentcore:getConfigurationBundle, bedrock-agentcore:getConfigurationBundleVersion, bedrock-agentcore:getEvaluator, bedrock-agentcore:getGateway, bedrock-agentcore:getGatewayRule, bedrock-agentcore:getGatewayTarget and 48 more |
| Braket | 9 of 20 | 3 List, 6 Read; 0 restricted, 0 conditional | braket:getDevice, braket:getJob, braket:getQuantumTask, braket:getServiceLinkedRoleStatus, braket:getUserAgreementStatus, braket:searchDevices, braket:searchJobs, braket:searchQuantumTasks, braket:searchSpendingLimits |
| Budget | 1 of 13 | 1 Read; 0 restricted, 0 conditional | budgets:viewBudget |
| Cost Explorer Service | 15 of 59 | 1 List, 14 Read; 0 restricted, 0 conditional | ce:describeCostCategoryDefinition, ce:getCostAndUsage, ce:getCostAndUsageWithResources, ce:getCostForecast, ce:getDimensionValues, ce:getReservationCoverage, ce:getReservationPurchaseRecommendation, ce:getReservationUtilization, ce:getRightsizingRecommendation, ce:getSavingsPlansCoverage, ce:getSavingsPlansPurchaseRecommendation, ce:getSavingsPlansUtilization and 3 more |
| Chatbot | 8 of 39 | 8 Read; 0 restricted, 0 conditional | chatbot:describeChimeWebhookConfigurations, chatbot:describeSlackChannelConfigurations, chatbot:describeSlackUserIdentities, chatbot:describeSlackWorkspaces, chatbot:getMicrosoftTeamsChannelConfiguration, chatbot:listMicrosoftTeamsChannelConfigurations, chatbot:listMicrosoftTeamsConfiguredTeams, chatbot:listMicrosoftTeamsUserIdentities |
| Chime | 24 of 316 | 12 List, 12 Read; 0 restricted, 0 conditional | chime:describeAppInstance, chime:getAttendee, chime:getGlobalSettings, chime:getMediaCapturePipeline, chime:getMediaPipeline, chime:getMeeting, chime:getProxySession, chime:getSipMediaApplication, chime:getSipRule, chime:getVoiceConnector, chime:getVoiceConnectorGroup, chime:getVoiceConnectorLoggingConfiguration and 12 more |
| Clean Rooms | 31 of 107 | 15 List, 16 Read; 0 restricted, 0 conditional | cleanrooms:batchGetCollaborationAnalysisTemplate, cleanrooms:batchGetSchema, cleanrooms:getAnalysisTemplate, cleanrooms:getCollaboration, cleanrooms:getCollaborationAnalysisTemplate, cleanrooms:getCollaborationConfiguredAudienceModelAssociation, cleanrooms:getCollaborationPrivacyBudgetTemplate, cleanrooms:getConfiguredAudienceModelAssociation, cleanrooms:getConfiguredTable, cleanrooms:getConfiguredTableAnalysisRule, cleanrooms:getConfiguredTableAssociation, cleanrooms:getMembership and 19 more |
| Cloud9 | 3 of 29 | 3 Read; 0 restricted, 0 conditional | cloud9:describeEnvironmentMemberships, cloud9:describeEnvironments, cloud9:listEnvironments |
| Cloud Directory | 2 of 66 | 1 List, 1 Read; 0 restricted, 0 conditional | clouddirectory:getDirectory, clouddirectory:listDirectories |
| CloudFormation | 42 of 104 | 17 List, 25 Read; 0 restricted, 0 conditional | cloudformation:batchDescribeTypeConfigurations, cloudformation:describeAccountLimits, cloudformation:describeChangeSet, cloudformation:describeChangeSetHooks, cloudformation:describeEvents, cloudformation:describeGeneratedTemplate, cloudformation:describePublisher, cloudformation:describeResourceScan, cloudformation:describeStackDriftDetectionStatus, cloudformation:describeStackEvents, cloudformation:describeStackInstance, cloudformation:describeStackResource and 30 more |
| CloudFront | 73 of 173 | 35 List, 38 Read; 0 restricted, 0 conditional | cloudfront:describeConnectionFunction, cloudfront:describeFunction, cloudfront:describeKeyValueStore, cloudfront:getAnycastIpList, cloudfront:getCachePolicy, cloudfront:getCachePolicyConfig, cloudfront:getCloudFrontOriginAccessIdentity, cloudfront:getCloudFrontOriginAccessIdentityConfig, cloudfront:getConnectionFunction, cloudfront:getConnectionGroup, cloudfront:getConnectionGroupByRoutingEndpoint, cloudfront:getContinuousDeploymentPolicy and 61 more |
| CloudHSM | 2 of 18 | 2 Read; 0 restricted, 0 conditional | cloudhsm:describeBackups, cloudhsm:describeClusters |
| CloudSearch | 9 of 32 | 2 List, 7 Read; 0 restricted, 0 conditional | cloudsearch:describeAnalysisSchemes, cloudsearch:describeAvailabilityOptions, cloudsearch:describeDomains, cloudsearch:describeExpressions, cloudsearch:describeIndexFields, cloudsearch:describeScalingParameters, cloudsearch:describeServiceAccessPolicies, cloudsearch:describeSuggesters, cloudsearch:listDomainNames |
| CloudTrail | 10 of 66 | 2 List, 8 Read; 0 restricted, 0 conditional | cloudtrail:describeTrails, cloudtrail:getEventSelectors, cloudtrail:getInsightSelectors, cloudtrail:getTrail, cloudtrail:getTrailStatus, cloudtrail:listEventDataStores, cloudtrail:listPublicKeys, cloudtrail:listTags, cloudtrail:listTrails, cloudtrail:lookupEvents |
| CloudWatch | 13 of 160 | 3 List, 10 Read; 0 restricted, 0 conditional | cloudwatch:describeAlarmHistory, cloudwatch:describeAlarms, cloudwatch:describeAlarmsForMetric, cloudwatch:describeAnomalyDetectors, cloudwatch:describeInsightRules, cloudwatch:getAlarmMuteRule, cloudwatch:getDashboard, cloudwatch:getInsightRuleReport, cloudwatch:getMetricStream, cloudwatch:listAlarmMuteRules, cloudwatch:listDashboards, cloudwatch:listManagedInsightRules and 1 more |
| CodeArtifact | 12 of 51 | 6 List, 6 Read; 0 restricted, 0 conditional | codeartifact:describeDomain, codeartifact:describePackageVersion, codeartifact:describeRepository, codeartifact:getDomainPermissionsPolicy, codeartifact:getRepositoryEndpoint, codeartifact:getRepositoryPermissionsPolicy, codeartifact:listDomains, codeartifact:listPackageVersionAssets, codeartifact:listPackageVersions, codeartifact:listPackages, codeartifact:listRepositories, codeartifact:listRepositoriesInDomain |
| CodeBuild | 12 of 67 | 8 List, 4 Read; 0 restricted, 0 conditional | codebuild:batchGetBuildBatches, codebuild:batchGetBuilds, codebuild:batchGetFleets, codebuild:batchGetProjects, codebuild:listBuildBatches, codebuild:listBuildBatchesForProject, codebuild:listBuilds, codebuild:listBuildsForProject, codebuild:listCuratedEnvironmentImages, codebuild:listFleets, codebuild:listProjects, codebuild:listSourceCredentials |
| CodeCommit | 6 of 91 | 2 List, 4 Read; 0 restricted, 0 conditional | codecommit:batchGetRepositories, codecommit:getBranch, codecommit:getRepository, codecommit:getRepositoryTriggers, codecommit:listBranches, codecommit:listRepositories |
| CodeConnections | 12 of 38 | 5 List, 7 Read; 0 restricted, 0 conditional | codeconnections:getConnection, codeconnections:getHost, codeconnections:getRepositoryLink, codeconnections:getRepositorySyncStatus, codeconnections:getResourceSyncStatus, codeconnections:getSyncBlockerSummary, codeconnections:getSyncConfiguration, codeconnections:listConnections, codeconnections:listHosts, codeconnections:listRepositoryLinks, codeconnections:listRepositorySyncDefinitions, codeconnections:listSyncConfigurations |
| CodeDeploy | 24 of 48 | 16 List, 8 Read; 0 restricted, 0 conditional | codedeploy:batchGetApplicationRevisions, codedeploy:batchGetApplications, codedeploy:batchGetDeploymentGroups, codedeploy:batchGetDeploymentInstances, codedeploy:batchGetDeploymentTargets, codedeploy:batchGetDeployments, codedeploy:batchGetOnPremisesInstances, codedeploy:getApplication, codedeploy:getApplicationRevision, codedeploy:getDeployment, codedeploy:getDeploymentConfig, codedeploy:getDeploymentGroup and 12 more |
| CodePipeline | 10 of 44 | 3 List, 7 Read; 0 restricted, 0 conditional | codepipeline:getJobDetails, codepipeline:getPipeline, codepipeline:getPipelineExecution, codepipeline:getPipelineState, codepipeline:listActionExecutions, codepipeline:listActionTypes, codepipeline:listPipelineExecutions, codepipeline:listPipelines, codepipeline:listRuleExecutions, codepipeline:listWebhooks |
| CodeStar Connections | 4 of 38 | 2 List, 2 Read; 0 restricted, 0 conditional | codestar-connections:getConnection, codestar-connections:getHost, codestar-connections:listConnections, codestar-connections:listHosts |
| Cognito Identity | 9 of 21 | 2 List, 7 Read; 0 restricted, 0 conditional | cognito-identity:describeIdentity, cognito-identity:describeIdentityPool, cognito-identity:getIdentityPoolAnalytics, cognito-identity:getIdentityPoolDailyAnalytics, cognito-identity:getIdentityPoolRoles, cognito-identity:getIdentityProviderDailyAnalytics, cognito-identity:listIdentities, cognito-identity:listIdentityPools, cognito-identity:lookupDeveloperIdentity |
| Cognito User Pools | 23 of 139 | 8 List, 15 Read; 0 restricted, 0 conditional | cognito-idp:describeIdentityProvider, cognito-idp:describeManagedLoginBranding, cognito-idp:describeManagedLoginBrandingByClient, cognito-idp:describeResourceServer, cognito-idp:describeRiskConfiguration, cognito-idp:describeUserImportJob, cognito-idp:describeUserPool, cognito-idp:describeUserPoolClient, cognito-idp:describeUserPoolDomain, cognito-idp:getCSVHeader, cognito-idp:getGroup, cognito-idp:getLogDeliveryConfiguration and 11 more |
| Cognito Sync | 7 of 19 | 1 List, 6 Read; 0 restricted, 0 conditional | cognito-sync:describeDataset, cognito-sync:describeIdentityPoolUsage, cognito-sync:describeIdentityUsage, cognito-sync:getCognitoEvents, cognito-sync:getIdentityPoolConfiguration, cognito-sync:listDatasets, cognito-sync:listIdentityPoolUsage |
| Comprehend | 28 of 85 | 28 Read; 0 restricted, 0 conditional | comprehend:describeDocumentClassificationJob, comprehend:describeDocumentClassifier, comprehend:describeDominantLanguageDetectionJob, comprehend:describeEndpoint, comprehend:describeEntitiesDetectionJob, comprehend:describeEntityRecognizer, comprehend:describeEventsDetectionJob, comprehend:describeFlywheel, comprehend:describeFlywheelIteration, comprehend:describeKeyPhrasesDetectionJob, comprehend:describePiiEntitiesDetectionJob, comprehend:describeSentimentDetectionJob and 16 more |
| Compute Optimizer | 11 of 28 | 11 List; 0 restricted, 0 conditional | compute-optimizer:getAutoScalingGroupRecommendations, compute-optimizer:getEBSVolumeRecommendations, compute-optimizer:getEC2InstanceRecommendations, compute-optimizer:getEC2RecommendationProjectedMetrics, compute-optimizer:getECSServiceRecommendationProjectedMetrics, compute-optimizer:getECSServiceRecommendations, compute-optimizer:getEnrollmentStatus, compute-optimizer:getIdleRecommendations, compute-optimizer:getRDSDatabaseRecommendationProjectedMetrics, compute-optimizer:getRDSDatabaseRecommendations, compute-optimizer:getRecommendationSummaries |
| Config | 45 of 102 | 13 List, 32 Read; 0 restricted, 0 conditional | config:batchGetAggregateResourceConfig, config:batchGetResourceConfig, config:describeAggregateComplianceByConfigRules, config:describeAggregationAuthorizations, config:describeComplianceByConfigRule, config:describeComplianceByResource, config:describeConfigRuleEvaluationStatus, config:describeConfigRules, config:describeConfigurationAggregatorSourcesStatus, config:describeConfigurationAggregators, config:describeConfigurationRecorderStatus, config:describeConfigurationRecorders and 33 more |
| Connect | 34 of 388 | 18 List, 16 Read; 0 restricted, 0 conditional | connect:batchGetFlowAssociation, connect:describeContact, connect:describeContactFlow, connect:describeInstance, connect:describeInstanceAttribute, connect:describePhoneNumber, connect:describeQueue, connect:describeQuickConnect, connect:describeRoutingProfile, connect:describeUser, connect:describeUserHierarchyStructure, connect:getCurrentMetricData and 22 more |
| Connect Outbound Campaigns | 1 of 40 | 1 Read; 0 restricted, 0 conditional | connect-campaigns:describeCampaign |
| Control Catalog | 1 of 6 | 1 Read; 0 restricted, 0 conditional | controlcatalog:getControl |
| Control Tower | 26 of 65 | 12 List, 14 Read; 0 restricted, 0 conditional | controltower:describeAccountFactoryConfig, controltower:describeCoreService, controltower:describeGuardrail, controltower:describeGuardrailForTarget, controltower:describeManagedAccount, controltower:describeSingleSignOn, controltower:getAvailableUpdates, controltower:getBaselineOperation, controltower:getControlOperation, controltower:getEnabledBaseline, controltower:getEnabledControl, controltower:getHomeRegion and 14 more |
| Cost Optimization Hub | 6 of 8 | 4 List, 2 Read; 0 restricted, 0 conditional | cost-optimization-hub:getPreferences, cost-optimization-hub:getRecommendation, cost-optimization-hub:listEfficiencyMetrics, cost-optimization-hub:listEnrollmentStatuses, cost-optimization-hub:listRecommendationSummaries, cost-optimization-hub:listRecommendations |
| DataBrew | 11 of 44 | 11 Read; 0 restricted, 0 conditional | databrew:describeDataset, databrew:describeJob, databrew:describeProject, databrew:describeRecipe, databrew:listDatasets, databrew:listJobRuns, databrew:listJobs, databrew:listProjects, databrew:listRecipeVersions, databrew:listRecipes, databrew:listTagsForResource |
| Data Pipeline | 5 of 21 | 1 List, 4 Read; 0 restricted, 0 conditional | datapipeline:describeObjects, datapipeline:describePipelines, datapipeline:getPipelineDefinition, datapipeline:listPipelines, datapipeline:queryObjects |
| DataSync | 18 of 66 | 4 List, 14 Read; 0 restricted, 0 conditional | datasync:describeAgent, datasync:describeLocationAzureBlob, datasync:describeLocationEfs, datasync:describeLocationFsxLustre, datasync:describeLocationFsxOntap, datasync:describeLocationFsxOpenZfs, datasync:describeLocationFsxWindows, datasync:describeLocationHdfs, datasync:describeLocationNfs, datasync:describeLocationObjectStorage, datasync:describeLocationS3, datasync:describeLocationSmb and 6 more |
| DataZone | 53 of 278 | 27 List, 26 Read; 0 restricted, 0 conditional | datazone:getAsset, datazone:getAssetFilter, datazone:getAssetType, datazone:getDataSource, datazone:getDataSourceRun, datazone:getDomain, datazone:getDomainUnit, datazone:getEnvironment, datazone:getEnvironmentBlueprint, datazone:getEnvironmentBlueprintConfiguration, datazone:getEnvironmentProfile, datazone:getFormType and 41 more |
| DynamoDBAccelerator | 6 of 30 | 5 List, 1 Read; 0 restricted, 0 conditional | dax:describeClusters, dax:describeDefaultParameters, dax:describeEvents, dax:describeParameterGroups, dax:describeParameters, dax:describeSubnetGroups |
| Deadline Cloud | 15 of 92 | 15 List; 0 restricted, 0 conditional | deadline:listAvailableMeteredProducts, deadline:listBudgets, deadline:listFarmMembers, deadline:listFarms, deadline:listFleetMembers, deadline:listFleets, deadline:listJobMembers, deadline:listLicenseEndpoints, deadline:listMeteredProducts, deadline:listMonitors, deadline:listQueueEnvironments, deadline:listQueueFleetAssociations and 3 more |
| Detective | 4 of 36 | 3 List, 1 Read; 0 restricted, 0 conditional | detective:getMembers, detective:listGraphs, detective:listInvitations, detective:listMembers |
| Device Farm | 35 of 77 | 20 List, 15 Read; 0 restricted, 0 conditional | devicefarm:getAccountSettings, devicefarm:getDevice, devicefarm:getDevicePool, devicefarm:getDevicePoolCompatibility, devicefarm:getJob, devicefarm:getOfferingStatus, devicefarm:getProject, devicefarm:getRemoteAccessSession, devicefarm:getRun, devicefarm:getSuite, devicefarm:getTest, devicefarm:getTestGridProject and 23 more |
| Direct Connect | 18 of 73 | 1 List, 17 Read; 0 restricted, 0 conditional | directconnect:describeConnectionLoa, directconnect:describeConnections, directconnect:describeConnectionsOnInterconnect, directconnect:describeCustomerMetadata, directconnect:describeDirectConnectGatewayAssociationProposals, directconnect:describeDirectConnectGatewayAssociations, directconnect:describeDirectConnectGatewayAttachments, directconnect:describeDirectConnectGateways, directconnect:describeHostedConnections, directconnect:describeInterconnectLoa, directconnect:describeInterconnects, directconnect:describeLags and 6 more |
| Data Lifecycle Manager | 2 of 8 | 1 List, 1 Read; 0 restricted, 0 conditional | dlm:getLifecyclePolicies, dlm:getLifecyclePolicy |
| DMS | 30 of 125 | 30 Read; 0 restricted, 0 conditional | dms:describeAccountAttributes, dms:describeApplicableIndividualAssessments, dms:describeCertificates, dms:describeConnections, dms:describeEndpointSettings, dms:describeEndpointTypes, dms:describeEndpoints, dms:describeEventCategories, dms:describeEventSubscriptions, dms:describeEvents, dms:describeFleetAdvisorCollectors, dms:describeFleetAdvisorDatabases and 18 more |
| DocumentDB Elastic Clusters | 4 of 19 | 2 List, 2 Read; 0 restricted, 0 conditional | docdb-elastic:getCluster, docdb-elastic:getClusterSnapshot, docdb-elastic:listClusterSnapshots, docdb-elastic:listClusters |
| DRS | 13 of 110 | 13 Read; 0 restricted, 0 conditional | drs:describeJobLogItems, drs:describeJobs, drs:describeLaunchConfigurationTemplates, drs:describeRecoveryInstances, drs:describeRecoverySnapshots, drs:describeReplicationConfigurationTemplates, drs:describeSourceNetworks, drs:describeSourceServers, drs:getLaunchConfiguration, drs:getReplicationConfiguration, drs:listExtensibleSourceServers, drs:listLaunchActions and 1 more |
| Directory Service | 25 of 91 | 4 List, 21 Read; 0 restricted, 0 conditional | ds:describeADAssessment, ds:describeCAEnrollmentPolicy, ds:describeCertificate, ds:describeClientAuthenticationSettings, ds:describeConditionalForwarders, ds:describeDirectories, ds:describeDirectoryDataAccess, ds:describeDomainControllers, ds:describeEventTopics, ds:describeHybridADUpdate, ds:describeLDAPSSettings, ds:describeRegions and 13 more |
| Aurora DSQL | 3 of 30 | 1 List, 2 Read; 0 restricted, 0 conditional | dsql:getCluster, dsql:getVpcEndpointServiceName, dsql:listClusters |
| DynamoDB | 22 of 68 | 6 List, 16 Read; 0 restricted, 0 conditional | dynamodb:describeBackup, dynamodb:describeContinuousBackups, dynamodb:describeContributorInsights, dynamodb:describeExport, dynamodb:describeGlobalTable, dynamodb:describeGlobalTableSettings, dynamodb:describeImport, dynamodb:describeKinesisStreamingDestination, dynamodb:describeLimits, dynamodb:describeStream, dynamodb:describeTable, dynamodb:describeTableReplicaAutoScaling and 10 more |
| EC2 | 215 of 834 | 184 List, 31 Read; 0 restricted, 0 conditional | ec2:describeAccountAttributes, ec2:describeAddressTransfers, ec2:describeAddresses, ec2:describeAddressesAttribute, ec2:describeAggregateIdFormat, ec2:describeApplicationStatus, ec2:describeApplicationStatusCheckAssociations, ec2:describeApplicationStatusChecks, ec2:describeAvailabilityZones, ec2:describeBundleTasks, ec2:describeByoipCidrs, ec2:describeCapacityBlockOfferings and 203 more |
| Elastic Container Registry | 22 of 65 | 4 List, 18 Read; 0 restricted, 0 conditional | ecr:batchCheckLayerAvailability, ecr:batchGetImage, ecr:batchGetRepositoryScanningConfiguration, ecr:describeImageReplicationStatus, ecr:describeImageSigningStatus, ecr:describeImages, ecr:describePullThroughCacheRules, ecr:describeRegistry, ecr:describeRepositories, ecr:describeRepositoryCreationTemplates, ecr:getAccountSetting, ecr:getAuthorizationToken and 10 more |
| Elastic Container Registry Public | 8 of 23 | 3 List, 5 Read; 0 restricted, 0 conditional | ecr-public:describeImageTags, ecr-public:describeImages, ecr-public:describeRegistries, ecr-public:describeRepositories, ecr-public:getRegistryCatalogData, ecr-public:getRepositoryCatalogData, ecr-public:getRepositoryPolicy, ecr-public:listTagsForResource |
| Elastic Container Service | 27 of 92 | 11 List, 16 Read; 0 restricted, 0 conditional | ecs:describeCapacityProviders, ecs:describeClusters, ecs:describeContainerInstances, ecs:describeDaemon, ecs:describeDaemonDeployments, ecs:describeDaemonTaskDefinition, ecs:describeExpressGatewayService, ecs:describeServiceDeployments, ecs:describeServiceRevisions, ecs:describeServices, ecs:describeTaskDefinition, ecs:describeTaskSets and 15 more |
| EKS | 27 of 74 | 13 List, 14 Read; 0 restricted, 0 conditional | eks:describeAccessEntry, eks:describeAddon, eks:describeAddonConfiguration, eks:describeAddonVersions, eks:describeCapability, eks:describeCluster, eks:describeClusterVersions, eks:describeEksAnywhereSubscription, eks:describeFargateProfile, eks:describeIdentityProviderConfig, eks:describeInsight, eks:describeNodegroup and 15 more |
| ElastiCache | 21 of 77 | 20 List, 1 Read; 0 restricted, 0 conditional | elasticache:describeCacheClusters, elasticache:describeCacheEngineVersions, elasticache:describeCacheParameterGroups, elasticache:describeCacheParameters, elasticache:describeCacheSecurityGroups, elasticache:describeCacheSubnetGroups, elasticache:describeEngineDefaultParameters, elasticache:describeEvents, elasticache:describeGlobalReplicationGroups, elasticache:describeReplicationGroups, elasticache:describeReservedCacheNodes, elasticache:describeReservedCacheNodesOfferings and 9 more |
| Elastic Beanstalk | 19 of 50 | 6 List, 13 Read; 0 restricted, 0 conditional | elasticbeanstalk:checkDNSAvailability, elasticbeanstalk:describeAccountAttributes, elasticbeanstalk:describeApplicationVersions, elasticbeanstalk:describeApplications, elasticbeanstalk:describeConfigurationOptions, elasticbeanstalk:describeConfigurationSettings, elasticbeanstalk:describeEnvironmentHealth, elasticbeanstalk:describeEnvironmentManagedActionHistory, elasticbeanstalk:describeEnvironmentManagedActions, elasticbeanstalk:describeEnvironmentResources, elasticbeanstalk:describeEnvironments, elasticbeanstalk:describeEvents and 7 more |
| EFS | 10 of 38 | 3 List, 7 Read; 0 restricted, 0 conditional | elasticfilesystem:describeAccessPoints, elasticfilesystem:describeBackupPolicy, elasticfilesystem:describeFileSystemPolicy, elasticfilesystem:describeFileSystems, elasticfilesystem:describeLifecycleConfiguration, elasticfilesystem:describeMountTargetSecurityGroups, elasticfilesystem:describeMountTargets, elasticfilesystem:describeReplicationConfigurations, elasticfilesystem:describeTags, elasticfilesystem:listTagsForResource |
| ELB | 17 of 77 | 1 List, 16 Read; 0 restricted, 0 conditional | elasticloadbalancing:describeAccountLimits, elasticloadbalancing:describeInstanceHealth, elasticloadbalancing:describeListenerCertificates, elasticloadbalancing:describeListeners, elasticloadbalancing:describeLoadBalancerAttributes, elasticloadbalancing:describeLoadBalancerPolicies, elasticloadbalancing:describeLoadBalancerPolicyTypes, elasticloadbalancing:describeLoadBalancers, elasticloadbalancing:describeRules, elasticloadbalancing:describeSSLPolicies, elasticloadbalancing:describeTags, elasticloadbalancing:describeTargetGroupAttributes and 5 more |
| EMR | 23 of 88 | 7 List, 16 Read; 0 restricted, 0 conditional | elasticmapreduce:describeCluster, elasticmapreduce:describeNotebookExecution, elasticmapreduce:describePersistentAppUI, elasticmapreduce:describeReleaseLabel, elasticmapreduce:describeSecurityConfiguration, elasticmapreduce:describeStep, elasticmapreduce:describeStudio, elasticmapreduce:getAutoTerminationPolicy, elasticmapreduce:getBlockPublicAccessConfiguration, elasticmapreduce:getManagedScalingPolicy, elasticmapreduce:getStudioSessionMapping, elasticmapreduce:listBootstrapActions and 11 more |
| EMR Containers | 8 of 25 | 4 List, 4 Read; 0 restricted, 0 conditional | emr-containers:describeJobRun, emr-containers:describeJobTemplate, emr-containers:describeManagedEndpoint, emr-containers:describeVirtualCluster, emr-containers:listJobRuns, emr-containers:listJobTemplates, emr-containers:listManagedEndpoints, emr-containers:listVirtualClusters |
| EMR Serverless | 5 of 25 | 3 List, 2 Read; 0 restricted, 0 conditional | emr-serverless:getApplication, emr-serverless:getJobRun, emr-serverless:listApplications, emr-serverless:listJobRunAttempts, emr-serverless:listJobRuns |
| Entity Resolution | 12 of 40 | 6 List, 6 Read; 0 restricted, 0 conditional | entityresolution:getIdMappingJob, entityresolution:getIdMappingWorkflow, entityresolution:getMatchingJob, entityresolution:getMatchingWorkflow, entityresolution:getProviderService, entityresolution:getSchemaMapping, entityresolution:listIdMappingJobs, entityresolution:listIdMappingWorkflows, entityresolution:listMatchingJobs, entityresolution:listMatchingWorkflows, entityresolution:listProviderServices, entityresolution:listSchemaMappings |
| OpenSearch Service | 44 of 138 | 23 List, 21 Read; 0 restricted, 0 conditional | es:describeDomain, es:describeDomainAutoTunes, es:describeDomainChangeProgress, es:describeDomainConfig, es:describeDomainHealth, es:describeDomainNodes, es:describeDomains, es:describeDryRunProgress, es:describeElasticsearchDomain, es:describeElasticsearchDomainConfig, es:describeElasticsearchDomains, es:describeInboundConnections and 32 more |
| EventBridge | 22 of 71 | 12 List, 10 Read; 0 restricted, 0 conditional | events:describeApiDestination, events:describeArchive, events:describeConnection, events:describeEndpoint, events:describeEventBus, events:describeEventSource, events:describePartnerEventSource, events:describeReplay, events:describeRule, events:listApiDestinations, events:listArchives, events:listConnections and 10 more |
| EVS | 6 of 24 | 3 List, 3 Read; 0 restricted, 0 conditional | evs:getEnvironment, evs:getVersions, evs:listEnvironmentHosts, evs:listEnvironmentVlans, evs:listEnvironments, evs:listTagsForResource |
| Firehose | 2 of 10 | 1 List, 1 Read; 0 restricted, 0 conditional | firehose:describeDeliveryStream, firehose:listDeliveryStreams |
| FIS | 12 of 29 | 6 List, 6 Read; 0 restricted, 0 conditional | fis:getAction, fis:getExperiment, fis:getExperimentTargetAccountConfiguration, fis:getExperimentTemplate, fis:getSafetyLever, fis:getTargetAccountConfiguration, fis:listActions, fis:listExperimentResolvedTargets, fis:listExperimentTargetAccountConfigurations, fis:listExperimentTemplates, fis:listExperiments, fis:listTargetAccountConfigurations |
| Firewall Manager | 22 of 42 | 11 List, 11 Read; 0 restricted, 0 conditional | fms:getAdminAccount, fms:getAdminScope, fms:getAppsList, fms:getComplianceDetail, fms:getNotificationChannel, fms:getPolicy, fms:getProtectionStatus, fms:getProtocolsList, fms:getResourceSet, fms:getThirdPartyFirewallAssociationStatus, fms:getViolationDetails, fms:listAdminAccountsForOrganization and 10 more |
| Forecast | 13 of 70 | 13 Read; 0 restricted, 0 conditional | forecast:describeDataset, forecast:describeDatasetGroup, forecast:describeDatasetImportJob, forecast:describeForecast, forecast:describeForecastExportJob, forecast:describePredictor, forecast:getAccuracyMetrics, forecast:listDatasetGroups, forecast:listDatasetImportJobs, forecast:listDatasets, forecast:listForecastExportJobs, forecast:listForecasts and 1 more |
| Free Tier | 1 of 7 | 1 Read; 0 restricted, 0 conditional | freetier:getFreeTierUsage |
| FSx | 10 of 56 | 10 Read; 0 restricted, 0 conditional | fsx:describeBackups, fsx:describeDataRepositoryAssociations, fsx:describeDataRepositoryTasks, fsx:describeFileCaches, fsx:describeFileSystems, fsx:describeS3AccessPointAttachments, fsx:describeSnapshots, fsx:describeStorageVirtualMachines, fsx:describeVolumes, fsx:listTagsForResource |
| GameLift Servers | 32 of 121 | 6 List, 26 Read; 0 restricted, 0 conditional | gamelift:describeAlias, gamelift:describeBuild, gamelift:describeEC2InstanceLimits, gamelift:describeFleetAttributes, gamelift:describeFleetCapacity, gamelift:describeFleetEvents, gamelift:describeFleetLocationAttributes, gamelift:describeFleetLocationCapacity, gamelift:describeFleetLocationUtilization, gamelift:describeFleetPortSettings, gamelift:describeFleetUtilization, gamelift:describeGameServer and 20 more |
| Location | 19 of 64 | 4 List, 15 Read; 0 restricted, 0 conditional | geo:calculateRoute, geo:calculateRouteMatrix, geo:describeMap, geo:describePlaceIndex, geo:describeRouteCalculator, geo:describeTracker, geo:getMapGlyphs, geo:getMapSprites, geo:getMapStyleDescriptor, geo:getMapTile, geo:getPlace, geo:listGeofenceCollections and 7 more |
| Glacier | 9 of 33 | 3 List, 6 Read; 0 restricted, 0 conditional | glacier:describeJob, glacier:describeVault, glacier:getDataRetrievalPolicy, glacier:getVaultAccessPolicy, glacier:getVaultLock, glacier:getVaultNotifications, glacier:listJobs, glacier:listTagsForVault, glacier:listVaults |
| GlobalAccelerator | 21 of 56 | 12 List, 9 Read; 0 restricted, 0 conditional | globalaccelerator:describeAccelerator, globalaccelerator:describeAcceleratorAttributes, globalaccelerator:describeCrossAccountAttachment, globalaccelerator:describeCustomRoutingAccelerator, globalaccelerator:describeCustomRoutingAcceleratorAttributes, globalaccelerator:describeCustomRoutingEndpointGroup, globalaccelerator:describeCustomRoutingListener, globalaccelerator:describeEndpointGroup, globalaccelerator:describeListener, globalaccelerator:listAccelerators, globalaccelerator:listByoipCidrs, globalaccelerator:listCrossAccountAttachments and 9 more |
| Glue | 90 of 306 | 18 List, 71 Read, 1 Write; 0 restricted, 0 conditional | glue:batchGetBlueprints, glue:batchGetCrawlers, glue:batchGetDevEndpoints, glue:batchGetJobs, glue:batchGetPartition, glue:batchGetTableOptimizer, glue:batchGetTriggers, glue:batchGetWorkflows, glue:checkSchemaVersionValidity, glue:getBlueprint, glue:getBlueprintRun, glue:getBlueprintRuns and 78 more |
| Managed Grafana | 5 of 25 | 2 List, 3 Read; 0 restricted, 0 conditional | grafana:describeWorkspace, grafana:describeWorkspaceAuthentication, grafana:listPermissions, grafana:listVersions, grafana:listWorkspaces |
| IoT Greengrass | 42 of 112 | 21 List, 21 Read; 0 restricted, 0 conditional | greengrass:describeComponent, greengrass:getComponent, greengrass:getConnectivityInfo, greengrass:getCoreDefinition, greengrass:getCoreDefinitionVersion, greengrass:getCoreDevice, greengrass:getDeployment, greengrass:getDeploymentStatus, greengrass:getDeviceDefinition, greengrass:getDeviceDefinitionVersion, greengrass:getFunctionDefinition, greengrass:getFunctionDefinitionVersion and 30 more |
| GuardDuty | 35 of 103 | 14 List, 21 Read; 0 restricted, 0 conditional | guardduty:describeMalwareScans, guardduty:describeOrganizationConfiguration, guardduty:describePublishingDestination, guardduty:getCoverageStatistics, guardduty:getDetector, guardduty:getFilter, guardduty:getFindings, guardduty:getFindingsStatistics, guardduty:getIPSet, guardduty:getInvitationsCount, guardduty:getMalwareProtectionPlan, guardduty:getMalwareScan and 23 more |
| Health | 12 of 14 | 12 Read; 0 restricted, 0 conditional | health:describeAffectedAccountsForOrganization, health:describeAffectedEntities, health:describeAffectedEntitiesForOrganization, health:describeEntityAggregates, health:describeEntityAggregatesForOrganization, health:describeEventAggregates, health:describeEventDetails, health:describeEventDetailsForOrganization, health:describeEventTypes, health:describeEvents, health:describeEventsForOrganization, health:describeHealthServiceStatusForOrganization |
| IAM | 51 of 190 | 27 List, 23 Read, 1 Write; 1 restricted, 0 conditional | iam:DeleteRole, iam:getAccessKeyLastUsed, iam:getAccountAuthorizationDetails, iam:getAccountPasswordPolicy, iam:getAccountSummary, iam:getContextKeysForCustomPolicy, iam:getContextKeysForPrincipalPolicy, iam:getCredentialReport, iam:getGroup, iam:getGroupPolicy, iam:getInstanceProfile, iam:getLoginProfile and 39 more |
| Identity Store | 11 of 29 | 4 List, 7 Read; 0 restricted, 0 conditional | identitystore:describeGroup, identitystore:describeGroupMembership, identitystore:describeUser, identitystore:getGroupId, identitystore:getGroupMembershipId, identitystore:getUserId, identitystore:isMemberInGroups, identitystore:listGroupMemberships, identitystore:listGroupMembershipsForMember, identitystore:listGroups, identitystore:listUsers |
| EC2 Image Builder | 36 of 77 | 19 List, 17 Read; 0 restricted, 0 conditional | imagebuilder:getComponent, imagebuilder:getComponentPolicy, imagebuilder:getContainerRecipe, imagebuilder:getContainerRecipePolicy, imagebuilder:getDistributionConfiguration, imagebuilder:getImage, imagebuilder:getImagePipeline, imagebuilder:getImagePolicy, imagebuilder:getImageRecipe, imagebuilder:getImageRecipePolicy, imagebuilder:getInfrastructureConfiguration, imagebuilder:getLifecycleExecution and 24 more |
| Inspector | 14 of 37 | 6 List, 8 Read; 0 restricted, 0 conditional | inspector:describeAssessmentRuns, inspector:describeAssessmentTargets, inspector:describeAssessmentTemplates, inspector:describeCrossAccountAccessRole, inspector:describeResourceGroups, inspector:describeRulesPackages, inspector:getTelemetryMetadata, inspector:listAssessmentRunAgents, inspector:listAssessmentRuns, inspector:listAssessmentTargets, inspector:listAssessmentTemplates, inspector:listEventSubscriptions and 2 more |
| InspectorScan | All 1 actions (see the InspectorScan page) | 1 Read; 0 restricted, 0 conditional | inspector-scan:scanSbom |
| Inspector2 | 18 of 84 | 10 List, 8 Read; 0 restricted, 0 conditional | inspector2:batchGetAccountStatus, inspector2:batchGetFreeTrialInfo, inspector2:describeOrganizationConfiguration, inspector2:getConfiguration, inspector2:getDelegatedAdminAccount, inspector2:getEc2DeepInspectionConfiguration, inspector2:getMember, inspector2:getSbomExport, inspector2:listCisScanConfigurations, inspector2:listCisScanResultsAggregatedByChecks, inspector2:listCisScanResultsAggregatedByTargetResource, inspector2:listCisScans and 6 more |
| Internet Monitor | 4 of 17 | 2 List, 2 Read; 0 restricted, 0 conditional | internetmonitor:getHealthEvent, internetmonitor:getMonitor, internetmonitor:listHealthEvents, internetmonitor:listMonitors |
| Invoicing Service | 3 of 26 | 1 List, 2 Read; 0 restricted, 0 conditional | invoicing:batchGetInvoiceProfile, invoicing:listInvoiceSummaries, invoicing:listInvoiceUnits |
| IoT | 50 of 293 | 32 List, 18 Read; 0 restricted, 0 conditional | iot:describeAuthorizer, iot:describeCACertificate, iot:describeCertificate, iot:describeDefaultAuthorizer, iot:describeDomainConfiguration, iot:describeEndpoint, iot:describeIndex, iot:describeJobExecution, iot:describeThing, iot:describeThingGroup, iot:describeTunnel, iot:getEffectivePolicies and 38 more |
| IoT FleetWise | 24 of 56 | 3 List, 21 Read; 0 restricted, 0 conditional | iotfleetwise:getCampaign, iotfleetwise:getDecoderManifest, iotfleetwise:getEncryptionConfiguration, iotfleetwise:getFleet, iotfleetwise:getLoggingOptions, iotfleetwise:getModelManifest, iotfleetwise:getRegisterAccountStatus, iotfleetwise:getSignalCatalog, iotfleetwise:getStateTemplate, iotfleetwise:getVehicle, iotfleetwise:getVehicleStatus, iotfleetwise:listCampaigns and 12 more |
| IoT SiteWise | 19 of 129 | 9 List, 10 Read; 0 restricted, 0 conditional | iotsitewise:describeAccessPolicy, iotsitewise:describeAsset, iotsitewise:describeAssetModel, iotsitewise:describeAssetProperty, iotsitewise:describeDashboard, iotsitewise:describeGateway, iotsitewise:describeGatewayCapabilityConfiguration, iotsitewise:describeLoggingOptions, iotsitewise:describePortal, iotsitewise:describeProject, iotsitewise:listAccessPolicies, iotsitewise:listAssetModels and 7 more |
| IoT TwinMaker | 12 of 37 | 6 List, 6 Read; 0 restricted, 0 conditional | iottwinmaker:getComponentType, iottwinmaker:getEntity, iottwinmaker:getPricingPlan, iottwinmaker:getScene, iottwinmaker:getSyncJob, iottwinmaker:getWorkspace, iottwinmaker:listComponentTypes, iottwinmaker:listEntities, iottwinmaker:listScenes, iottwinmaker:listSyncJobs, iottwinmaker:listSyncResources, iottwinmaker:listWorkspaces |
| IoT Wireless | 21 of 113 | 21 Read; 0 restricted, 0 conditional | iotwireless:getDestination, iotwireless:getDeviceProfile, iotwireless:getPartnerAccount, iotwireless:getServiceEndpoint, iotwireless:getServiceProfile, iotwireless:getWirelessDevice, iotwireless:getWirelessDeviceStatistics, iotwireless:getWirelessGateway, iotwireless:getWirelessGatewayCertificate, iotwireless:getWirelessGatewayFirmwareInformation, iotwireless:getWirelessGatewayStatistics, iotwireless:getWirelessGatewayTask and 9 more |
| Interactive Video Service | 10 of 83 | 6 List, 4 Read; 0 restricted, 0 conditional | ivs:getChannel, ivs:getRecordingConfiguration, ivs:getStream, ivs:getStreamSession, ivs:listChannels, ivs:listPlaybackKeyPairs, ivs:listRecordingConfigurations, ivs:listStreamKeys, ivs:listStreamSessions, ivs:listStreams |
| MSK | 26 of 64 | 13 List, 13 Read; 0 restricted, 0 conditional | kafka:describeCluster, kafka:describeClusterOperation, kafka:describeClusterOperationV2, kafka:describeClusterV2, kafka:describeConfiguration, kafka:describeConfigurationRevision, kafka:describeReplicator, kafka:describeTopic, kafka:describeTopicPartitions, kafka:describeVpcConnection, kafka:getBootstrapBrokers, kafka:getClusterPolicy and 14 more |
| MSK Connect | 6 of 21 | 6 Read; 0 restricted, 0 conditional | kafkaconnect:describeConnector, kafkaconnect:describeCustomPlugin, kafkaconnect:describeWorkerConfiguration, kafkaconnect:listConnectors, kafkaconnect:listCustomPlugins, kafkaconnect:listWorkerConfigurations |
| Kendra | 21 of 66 | 11 List, 10 Read; 0 restricted, 0 conditional | kendra:describeAccessControlConfiguration, kendra:describeDataSource, kendra:describeExperience, kendra:describeFaq, kendra:describeFeaturedResultsSet, kendra:describeIndex, kendra:describePrincipalMapping, kendra:describeQuerySuggestionsBlockList, kendra:describeQuerySuggestionsConfig, kendra:describeThesaurus, kendra:listAccessControlConfigurations, kendra:listDataSourceSyncJobs and 9 more |
| Kinesis | 9 of 42 | 4 List, 5 Read; 0 restricted, 0 conditional | kinesis:describeChannel, kinesis:describeStream, kinesis:describeStreamConsumer, kinesis:describeStreamSummary, kinesis:listChannels, kinesis:listShards, kinesis:listStreamConsumers, kinesis:listStreams, kinesis:listTagsForStream |
| Kinesis Analytics | 7 of 34 | 1 List, 6 Read; 0 restricted, 0 conditional | kinesisanalytics:describeApplication, kinesisanalytics:describeApplicationOperation, kinesisanalytics:describeApplicationSnapshot, kinesisanalytics:listApplicationOperations, kinesisanalytics:listApplicationSnapshots, kinesisanalytics:listApplicationVersions, kinesisanalytics:listApplications |
| Kinesis Video Streams | 13 of 37 | 6 List, 7 Read; 0 restricted, 0 conditional | kinesisvideo:describeEdgeConfiguration, kinesisvideo:describeImageGenerationConfiguration, kinesisvideo:describeMappedResourceConfiguration, kinesisvideo:describeMediaStorageConfiguration, kinesisvideo:describeNotificationConfiguration, kinesisvideo:describeSignalingChannel, kinesisvideo:describeStream, kinesisvideo:getDataEndpoint, kinesisvideo:getIceServerConfig, kinesisvideo:getSignalingChannelEndpoint, kinesisvideo:listEdgeAgentConfigurations, kinesisvideo:listSignalingChannels and 1 more |
| KMS | 11 of 58 | 7 List, 4 Read; 0 restricted, 0 conditional | kms:describeCustomKeyStores, kms:describeKey, kms:getKeyPolicy, kms:getKeyRotationStatus, kms:listAliases, kms:listGrants, kms:listKeyPolicies, kms:listKeyRotations, kms:listKeys, kms:listResourceTags, kms:listRetirableGrants |
| Lake Formation | 18 of 68 | 3 List, 15 Read; 0 restricted, 0 conditional | lakeformation:describeLakeFormationIdentityCenterConfiguration, lakeformation:describeResource, lakeformation:describeTransaction, lakeformation:getDataLakePrincipal, lakeformation:getDataLakeSettings, lakeformation:getEffectivePermissionsForPath, lakeformation:getLFTag, lakeformation:getLFTagExpression, lakeformation:getQueryState, lakeformation:getQueryStatistics, lakeformation:getResourceLFTags, lakeformation:listLFTagExpressions and 6 more |
| Lambda | 45 of 121 | 20 List, 25 Read; 0 restricted, 0 conditional | lambda:getAccountSettings, lambda:getAlias, lambda:getCapacityProvider, lambda:getCodeSigningConfig, lambda:getDurableExecution, lambda:getDurableExecutionHistory, lambda:getEventSourceMapping, lambda:getFunction, lambda:getFunctionCodeSigningConfig, lambda:getFunctionConcurrency, lambda:getFunctionConfiguration, lambda:getFunctionEventInvokeConfig and 33 more |
| Launch Wizard | 5 of 40 | 3 List, 2 Read; 0 restricted, 0 conditional | launchwizard:describeProvisionedApp, launchwizard:describeProvisioningEvents, launchwizard:listDeploymentEvents, launchwizard:listDeployments, launchwizard:listProvisionedApps |
| Lex | 39 of 146 | 19 List, 20 Read; 0 restricted, 0 conditional | lex:describeBot, lex:describeBotAlias, lex:describeBotLocale, lex:describeBotRecommendation, lex:describeBotVersion, lex:describeCustomVocabularyMetadata, lex:describeExport, lex:describeImport, lex:describeIntent, lex:describeResourcePolicy, lex:describeSlot, lex:describeSlotType and 27 more |
| License Manager | 23 of 62 | 16 List, 7 Read; 0 restricted, 0 conditional | license-manager:getGrant, license-manager:getLicense, license-manager:getLicenseConfiguration, license-manager:getLicenseConversionTask, license-manager:getLicenseManagerReportGenerator, license-manager:getLicenseUsage, license-manager:getServiceSettings, license-manager:listAssociationsForLicenseConfiguration, license-manager:listDistributedGrants, license-manager:listFailuresForLicenseConfigurationOperations, license-manager:listLicenseConfigurations, license-manager:listLicenseConversionTasks and 11 more |
| License Manager Linux Subscriptions | 5 of 11 | 5 Read; 0 restricted, 0 conditional | license-manager-linux-subscriptions:getRegisteredSubscriptionProvider, license-manager-linux-subscriptions:getServiceSettings, license-manager-linux-subscriptions:listLinuxSubscriptionInstances, license-manager-linux-subscriptions:listLinuxSubscriptions, license-manager-linux-subscriptions:listRegisteredSubscriptionProviders |
| License Manager User Subscriptions | 5 of 17 | 5 List; 0 restricted, 0 conditional | license-manager-user-subscriptions:listIdentityProviders, license-manager-user-subscriptions:listInstances, license-manager-user-subscriptions:listLicenseServerEndpoints, license-manager-user-subscriptions:listProductSubscriptions, license-manager-user-subscriptions:listUserAssociations |
| Lightsail | 49 of 161 | 49 Read; 0 restricted, 0 conditional | lightsail:getActiveNames, lightsail:getAlarms, lightsail:getAutoSnapshots, lightsail:getBlueprints, lightsail:getBucketBundles, lightsail:getBucketMetricData, lightsail:getBuckets, lightsail:getBundles, lightsail:getCertificates, lightsail:getContainerImages, lightsail:getContainerServiceDeployments, lightsail:getContainerServiceMetricData and 37 more |
| CloudWatch Logs | 32 of 133 | 21 List, 11 Read; 0 restricted, 0 conditional | logs:describeAccountPolicies, logs:describeDeliveries, logs:describeDeliveryDestinations, logs:describeDeliverySources, logs:describeDestinations, logs:describeExportTasks, logs:describeFieldIndexes, logs:describeIndexPolicies, logs:describeLogGroups, logs:describeLogStreams, logs:describeMetricFilters, logs:describeQueries and 20 more |
| Lookout for Equipment | 9 of 49 | 4 List, 5 Read; 0 restricted, 0 conditional | lookoutequipment:describeDataIngestionJob, lookoutequipment:describeDataset, lookoutequipment:describeInferenceScheduler, lookoutequipment:describeModel, lookoutequipment:listDataIngestionJobs, lookoutequipment:listDatasets, lookoutequipment:listInferenceExecutions, lookoutequipment:listInferenceSchedulers, lookoutequipment:listModels |
| Mainframe Modernization | 16 of 37 | 2 List, 14 Read; 0 restricted, 0 conditional | m2:getApplication, m2:getApplicationVersion, m2:getBatchJobExecution, m2:getDataSetDetails, m2:getDataSetImportTask, m2:getDeployment, m2:getEnvironment, m2:listApplicationVersions, m2:listApplications, m2:listBatchJobDefinitions, m2:listBatchJobExecutions, m2:listDataSetImportHistory and 4 more |
| Machine Learning | 8 of 27 | 4 List, 4 Read; 0 restricted, 0 conditional | machinelearning:describeBatchPredictions, machinelearning:describeDataSources, machinelearning:describeEvaluations, machinelearning:describeMLModels, machinelearning:getBatchPrediction, machinelearning:getDataSource, machinelearning:getEvaluation, machinelearning:getMLModel |
| Macie | 27 of 81 | 9 List, 18 Read; 0 restricted, 0 conditional | macie2:describeBuckets, macie2:describeClassificationJob, macie2:getAdministratorAccount, macie2:getAllowList, macie2:getAutomatedDiscoveryConfiguration, macie2:getClassificationExportConfiguration, macie2:getClassificationScope, macie2:getCustomDataIdentifier, macie2:getFindingStatistics, macie2:getFindings, macie2:getFindingsFilter, macie2:getFindingsPublicationConfiguration and 15 more |
| Managed Blockchain | 6 of 34 | 3 List, 3 Read; 0 restricted, 0 conditional | managedblockchain:getMember, managedblockchain:getNetwork, managedblockchain:getNode, managedblockchain:listMembers, managedblockchain:listNetworks, managedblockchain:listNodes |
| MediaConnect | 3 of 95 | 2 List, 1 Read; 0 restricted, 0 conditional | mediaconnect:describeFlow, mediaconnect:listEntitlements, mediaconnect:listFlows |
| MediaConvert | 7 of 32 | 3 List, 4 Read; 0 restricted, 0 conditional | mediaconvert:describeEndpoints, mediaconvert:getJob, mediaconvert:getJobTemplate, mediaconvert:getPreset, mediaconvert:getQueue, mediaconvert:listJobTemplates, mediaconvert:listJobs |
| MediaLive | 25 of 125 | 12 List, 13 Read; 0 restricted, 0 conditional | medialive:describeChannel, medialive:describeInput, medialive:describeInputDevice, medialive:describeInputSecurityGroup, medialive:describeMultiplex, medialive:describeOffering, medialive:describeReservation, medialive:describeSchedule, medialive:getCloudWatchAlarmTemplate, medialive:getCloudWatchAlarmTemplateGroup, medialive:getEventBridgeRuleTemplate, medialive:getEventBridgeRuleTemplateGroup and 13 more |
| MediaPackage | 4 of 19 | 4 Read; 0 restricted, 0 conditional | mediapackage:describeChannel, mediapackage:describeOriginEndpoint, mediapackage:listChannels, mediapackage:listOriginEndpoints |
| MediaStore | 4 of 26 | 2 List, 2 Read; 0 restricted, 0 conditional | mediastore:describeContainer, mediastore:getContainerPolicy, mediastore:getCorsPolicy, mediastore:listContainers |
| MediaTailor | 2 of 44 | 1 List, 1 Read; 0 restricted, 0 conditional | mediatailor:getPlaybackConfiguration, mediatailor:listPlaybackConfigurations |
| HealthImaging | 2 of 27 | 1 List, 1 Read; 0 restricted, 0 conditional | medical-imaging:getDatastore, medical-imaging:listDatastores |
| MemoryDB | 2 of 47 | 2 Read; 0 restricted, 0 conditional | memorydb:describeReservedNodesOfferings, memorydb:listAllowedNodeTypeUpdates |
| MGN | 12 of 147 | 9 List, 3 Read; 0 restricted, 0 conditional | mgn:describeJobLogItems, mgn:describeJobs, mgn:describeLaunchConfigurationTemplates, mgn:describeReplicationConfigurationTemplates, mgn:describeSourceServers, mgn:describeVcenterClients, mgn:getLaunchConfiguration, mgn:getReplicationConfiguration, mgn:listApplications, mgn:listSourceServerActions, mgn:listTemplateActions, mgn:listWaves |
| Pinpoint | 36 of 119 | 11 List, 25 Read; 0 restricted, 0 conditional | mobiletargeting:getAdmChannel, mobiletargeting:getApnsChannel, mobiletargeting:getApnsSandboxChannel, mobiletargeting:getApnsVoipChannel, mobiletargeting:getApnsVoipSandboxChannel, mobiletargeting:getApp, mobiletargeting:getApplicationSettings, mobiletargeting:getApps, mobiletargeting:getBaiduChannel, mobiletargeting:getCampaign, mobiletargeting:getCampaignActivities, mobiletargeting:getCampaignVersion and 24 more |
| Multi-party approval | 3 of 25 | 1 List, 2 Read; 0 restricted, 0 conditional | mpa:getApprovalTeam, mpa:getSession, mpa:listApprovalTeams |
| MQ | 9 of 27 | 4 List, 5 Read; 0 restricted, 0 conditional | mq:describeBroker, mq:describeBrokerInstanceOptions, mq:describeConfiguration, mq:describeConfigurationRevision, mq:describeUser, mq:listBrokers, mq:listConfigurationRevisions, mq:listConfigurations, mq:listUsers |
| Network Firewall | 19 of 89 | 8 List, 11 Read; 0 restricted, 0 conditional | network-firewall:describeContainerAssociation, network-firewall:describeFirewall, network-firewall:describeFirewallPolicy, network-firewall:describeFlowOperation, network-firewall:describeLoggingConfiguration, network-firewall:describeResourcePolicy, network-firewall:describeRuleGroup, network-firewall:describeRuleGroupMetadata, network-firewall:describeTlsInspectionConfiguration, network-firewall:describeVpcEndpointAssociation, network-firewall:listAnalysisReports, network-firewall:listContainerAssociations and 7 more |
| Network Flow Monitor | 4 of 14 | 2 List, 2 Read; 0 restricted, 0 conditional | networkflowmonitor:getMonitor, networkflowmonitor:getScope, networkflowmonitor:listMonitors, networkflowmonitor:listScopes |
| Network Manager | 35 of 97 | 15 List, 20 Read; 0 restricted, 0 conditional | networkmanager:describeGlobalNetworks, networkmanager:getConnectAttachment, networkmanager:getConnectPeer, networkmanager:getConnectPeerAssociations, networkmanager:getConnections, networkmanager:getCoreNetwork, networkmanager:getCoreNetworkChangeEvents, networkmanager:getCoreNetworkChangeSet, networkmanager:getCoreNetworkPolicy, networkmanager:getCustomerGatewayAssociations, networkmanager:getDevices, networkmanager:getDirectConnectGatewayAttachment and 23 more |
| Network Synthetic Monitor | 3 of 12 | 1 List, 2 Read; 0 restricted, 0 conditional | networkmonitor:getMonitor, networkmonitor:getProbe, networkmonitor:listMonitors |
| User Notifications | 8 of 44 | 5 List, 3 Read; 0 restricted, 0 conditional | notifications:getEventRule, notifications:getNotificationConfiguration, notifications:getNotificationEvent, notifications:listChannels, notifications:listEventRules, notifications:listNotificationConfigurations, notifications:listNotificationEvents, notifications:listNotificationHubs |
| User Notifications Contacts | 2 of 9 | 1 List, 1 Read; 0 restricted, 0 conditional | notifications-contacts:getEmailContact, notifications-contacts:listEmailContacts |
| OAM | 6 of 15 | 6 Read; 0 restricted, 0 conditional | oam:getLink, oam:getSink, oam:getSinkPolicy, oam:listAttachedLinks, oam:listLinks, oam:listSinks |
| CloudWatch Observability Admin | 4 of 45 | 4 Read; 0 restricted, 0 conditional | observabilityadmin:getTelemetryEvaluationStatus, observabilityadmin:getTelemetryEvaluationStatusForOrganization, observabilityadmin:listResourceTelemetry, observabilityadmin:listResourceTelemetryForOrganization |
| Oracle Database@AWS | 34 of 96 | 20 List, 14 Read; 0 restricted, 0 conditional | odb:getAutonomousDatabase, odb:getAutonomousDatabaseBackup, odb:getAutonomousDatabaseWalletDetails, odb:getCloudAutonomousVmCluster, odb:getCloudExadataInfrastructure, odb:getCloudExadataInfrastructureUnallocatedResources, odb:getCloudVmCluster, odb:getDbNode, odb:getDbServer, odb:getExadbVmCluster, odb:getExascaleDbStorageVault, odb:getOciOnboardingStatus and 22 more |
| Omics | 43 of 108 | 22 List, 21 Read; 0 restricted, 0 conditional | omics:getAnnotationImportJob, omics:getAnnotationStore, omics:getAnnotationStoreVersion, omics:getReadSetActivationJob, omics:getReadSetExportJob, omics:getReadSetImportJob, omics:getReadSetMetadata, omics:getReference, omics:getReferenceImportJob, omics:getReferenceMetadata, omics:getReferenceStore, omics:getRun and 31 more |
| OpsWorks | 22 of 74 | 21 List, 1 Read; 0 restricted, 0 conditional | opsworks:describeAgentVersions, opsworks:describeApps, opsworks:describeCommands, opsworks:describeDeployments, opsworks:describeEcsClusters, opsworks:describeElasticIps, opsworks:describeElasticLoadBalancers, opsworks:describeInstances, opsworks:describeLayers, opsworks:describeLoadBasedAutoScaling, opsworks:describeMyUserProfile, opsworks:describePermissions and 10 more |
| OpsworksCM | 5 of 19 | 5 List; 0 restricted, 0 conditional | opsworks-cm:describeAccountAttributes, opsworks-cm:describeBackups, opsworks-cm:describeEvents, opsworks-cm:describeNodeAssociationStatus, opsworks-cm:describeServers |
| Organizations | 24 of 63 | 16 List, 8 Read; 0 restricted, 0 conditional | organizations:describeAccount, organizations:describeCreateAccountStatus, organizations:describeEffectivePolicy, organizations:describeHandshake, organizations:describeOrganization, organizations:describeOrganizationalUnit, organizations:describePolicy, organizations:describeResourcePolicy, organizations:listAWSServiceAccessForOrganization, organizations:listAccounts, organizations:listAccountsForParent, organizations:listChildren and 12 more |
| OpenSearch Ingestion | 6 of 23 | 2 List, 4 Read; 0 restricted, 0 conditional | osis:getPipeline, osis:getPipelineBlueprint, osis:getPipelineChangeProgress, osis:listPipelineBlueprints, osis:listPipelines, osis:validatePipeline |
| Outposts | 16 of 44 | 8 List, 8 Read; 0 restricted, 0 conditional | outposts:getCapacityTask, outposts:getCatalogItem, outposts:getConnection, outposts:getOrder, outposts:getOutpost, outposts:getOutpostInstanceTypes, outposts:getOutpostSupportedInstanceTypes, outposts:getSite, outposts:listAssetInstances, outposts:listAssets, outposts:listBlockingInstancesForCapacityTask, outposts:listCapacityTasks and 4 more |
| Payment Cryptography | 4 of 47 | 2 List, 2 Read; 0 restricted, 0 conditional | payment-cryptography:getAlias, payment-cryptography:getKey, payment-cryptography:listAliases, payment-cryptography:listKeys |
| Private CA Connector for Active Directory | 6 of 25 | 5 List, 1 Read; 0 restricted, 0 conditional | pca-connector-ad:listConnectors, pca-connector-ad:listDirectoryRegistrations, pca-connector-ad:listServicePrincipalNames, pca-connector-ad:listTagsForResource, pca-connector-ad:listTemplateGroupAccessControlEntries, pca-connector-ad:listTemplates |
| Private CA Connector for SCEP | 5 of 12 | 2 List, 3 Read; 0 restricted, 0 conditional | pca-connector-scep:getChallengeMetadata, pca-connector-scep:getConnector, pca-connector-scep:listChallengeMetadata, pca-connector-scep:listConnectors, pca-connector-scep:listTagsForResource |
| Parallel Computing Service | 6 of 20 | 3 List, 3 Read; 0 restricted, 0 conditional | pcs:getCluster, pcs:getComputeNodeGroup, pcs:getQueue, pcs:listClusters, pcs:listComputeNodeGroups, pcs:listQueues |
| Personalize | 36 of 83 | 15 List, 21 Read; 0 restricted, 0 conditional | personalize:describeAlgorithm, personalize:describeBatchInferenceJob, personalize:describeBatchSegmentJob, personalize:describeCampaign, personalize:describeDataInsightsJob, personalize:describeDataset, personalize:describeDatasetExportJob, personalize:describeDatasetGroup, personalize:describeDatasetImportJob, personalize:describeEventTracker, personalize:describeFeatureTransformation, personalize:describeFilter and 24 more |
| EventBridge Pipes | 3 of 10 | 1 List, 2 Read; 0 restricted, 0 conditional | pipes:describePipe, pipes:listPipes, pipes:listTagsForResource |
| Polly | 3 of 13 | 2 List, 1 Read; 0 restricted, 0 conditional | polly:describeVoices, polly:getLexicon, polly:listLexicons |
| Price List | 3 of 5 | 3 Read; 0 restricted, 0 conditional | pricing:describeServices, pricing:getAttributeValues, pricing:getProducts |
| Private 5G | 6 of 26 | 3 List, 3 Read; 0 restricted, 0 conditional | private-networks:getDeviceIdentifier, private-networks:getNetwork, private-networks:getNetworkResource, private-networks:listDeviceIdentifiers, private-networks:listNetworkResources, private-networks:listNetworks |
| Q Business | 10 of 67 | 5 List, 5 Read; 0 restricted, 0 conditional | qbusiness:getApplication, qbusiness:getDataSource, qbusiness:getIndex, qbusiness:getRetriever, qbusiness:getWebExperience, qbusiness:listApplications, qbusiness:listDataSources, qbusiness:listIndices, qbusiness:listRetrievers, qbusiness:listWebExperiences |
| QuickSight | 69 of 357 | 30 List, 1 Permissions management, 38 Read; 0 restricted, 0 conditional | quicksight:describeAccountCustomPermission, quicksight:describeAccountCustomization, quicksight:describeAccountSettings, quicksight:describeAccountSubscription, quicksight:describeAnalysis, quicksight:describeAnalysisPermissions, quicksight:describeCustomPermissions, quicksight:describeDashboard, quicksight:describeDashboardPermissions, quicksight:describeDataSet, quicksight:describeDataSetPermissions, quicksight:describeDataSetRefreshProperties and 57 more |
| Resource Access Manager | 8 of 39 | 3 List, 5 Read; 0 restricted, 0 conditional | ram:getPermission, ram:getResourceShareAssociations, ram:getResourceShareInvitations, ram:getResourceShares, ram:listPendingInvitationResources, ram:listPrincipals, ram:listResourceSharePermissions, ram:listResources |
| Recycle Bin | 2 of 10 | 2 Read; 0 restricted, 0 conditional | rbin:getRule, rbin:listRules |
| RDS | 47 of 173 | 46 List, 1 Read; 0 restricted, 0 conditional | rds:describeAccountAttributes, rds:describeBlueGreenDeployments, rds:describeCertificates, rds:describeDBClusterAutomatedBackups, rds:describeDBClusterBacktracks, rds:describeDBClusterEndpoints, rds:describeDBClusterParameterGroups, rds:describeDBClusterParameters, rds:describeDBClusterSnapshotAttributes, rds:describeDBClusterSnapshots, rds:describeDBClusters, rds:describeDBEngineVersions and 35 more |
| Redshift | 35 of 167 | 9 List, 26 Read; 0 restricted, 0 conditional | redshift:describeClusterDbRevisions, redshift:describeClusterParameterGroups, redshift:describeClusterParameters, redshift:describeClusterSecurityGroups, redshift:describeClusterSnapshots, redshift:describeClusterSubnetGroups, redshift:describeClusterTracks, redshift:describeClusterVersions, redshift:describeClusters, redshift:describeCustomDomainAssociations, redshift:describeDataShares, redshift:describeDataSharesForConsumer and 23 more |
| Redshift Data API | 2 of 12 | 1 List, 1 Read; 0 restricted, 0 conditional | redshift-data:describeStatement, redshift-data:listStatements |
| Redshift Serverless | 26 of 69 | 13 List, 13 Read; 0 restricted, 0 conditional | redshift-serverless:getCustomDomainAssociation, redshift-serverless:getEndpointAccess, redshift-serverless:getNamespace, redshift-serverless:getRecoveryPoint, redshift-serverless:getReservation, redshift-serverless:getReservationOffering, redshift-serverless:getResourcePolicy, redshift-serverless:getScheduledAction, redshift-serverless:getSnapshot, redshift-serverless:getTableRestoreStatus, redshift-serverless:getTrack, redshift-serverless:getUsageLimit and 14 more |
| Rekognition | 2 of 76 | 2 Read; 0 restricted, 0 conditional | rekognition:listCollections, rekognition:listFaces |
| Resilience Hub | 29 of 133 | 19 List, 10 Read; 0 restricted, 0 conditional | resiliencehub:describeApp, resiliencehub:describeAppAssessment, resiliencehub:describeAppVersion, resiliencehub:describeAppVersionAppComponent, resiliencehub:describeAppVersionResource, resiliencehub:describeAppVersionResourcesResolutionStatus, resiliencehub:describeAppVersionTemplate, resiliencehub:describeDraftAppVersionResourcesImportStatus, resiliencehub:describeResiliencyPolicy, resiliencehub:describeResourceGroupingRecommendationTask, resiliencehub:listAlarmRecommendations, resiliencehub:listAppAssessmentComplianceDrifts and 17 more |
| Resource Explorer | 6 of 37 | 2 List, 4 Read; 0 restricted, 0 conditional | resource-explorer-2:getAccountLevelServiceConfiguration, resource-explorer-2:getIndex, resource-explorer-2:getView, resource-explorer-2:listIndexes, resource-explorer-2:listViews, resource-explorer-2:search |
| Resource Groups | 6 of 29 | 3 List, 3 Read; 0 restricted, 0 conditional | resource-groups:getGroup, resource-groups:getGroupQuery, resource-groups:getTags, resource-groups:listGroupResources, resource-groups:listGroups, resource-groups:searchResources |
| RoboMaker | 13 of 59 | 6 List, 7 Read; 0 restricted, 0 conditional | robomaker:batchDescribeSimulationJob, robomaker:describeDeploymentJob, robomaker:describeFleet, robomaker:describeRobot, robomaker:describeRobotApplication, robomaker:describeSimulationApplication, robomaker:describeSimulationJob, robomaker:listDeploymentJobs, robomaker:listFleets, robomaker:listRobotApplications, robomaker:listRobots, robomaker:listSimulationApplications and 1 more |
| IAM Roles Anywhere | 4 of 30 | 2 List, 2 Read; 0 restricted, 0 conditional | rolesanywhere:getProfile, rolesanywhere:getTrustAnchor, rolesanywhere:listProfiles, rolesanywhere:listTrustAnchors |
| Route 53 | 34 of 71 | 22 List, 12 Read; 0 restricted, 0 conditional | route53:getAccountLimit, route53:getChange, route53:getCheckerIpRanges, route53:getDNSSEC, route53:getGeoLocation, route53:getHealthCheck, route53:getHealthCheckCount, route53:getHealthCheckLastFailureReason, route53:getHealthCheckStatus, route53:getHostedZone, route53:getHostedZoneCount, route53:getHostedZoneLimit and 22 more |
| Route 53 Recovery Cluster | 2 of 4 | 2 Read; 0 restricted, 0 conditional | route53-recovery-cluster:getRoutingControlState, route53-recovery-cluster:listRoutingControls |
| Route 53 Recovery Controls | 10 of 27 | 1 List, 9 Read; 0 restricted, 0 conditional | route53-recovery-control-config:describeCluster, route53-recovery-control-config:describeControlPanel, route53-recovery-control-config:describeRoutingControl, route53-recovery-control-config:describeSafetyRule, route53-recovery-control-config:getResourcePolicy, route53-recovery-control-config:listAssociatedRoute53HealthChecks, route53-recovery-control-config:listClusters, route53-recovery-control-config:listControlPanels, route53-recovery-control-config:listRoutingControls, route53-recovery-control-config:listSafetyRules |
| Route 53 Recovery Readiness | 14 of 32 | 14 Read; 0 restricted, 0 conditional | route53-recovery-readiness:getArchitectureRecommendations, route53-recovery-readiness:getCell, route53-recovery-readiness:getCellReadinessSummary, route53-recovery-readiness:getReadinessCheck, route53-recovery-readiness:getReadinessCheckResourceStatus, route53-recovery-readiness:getReadinessCheckStatus, route53-recovery-readiness:getRecoveryGroup, route53-recovery-readiness:getRecoveryGroupReadinessSummary, route53-recovery-readiness:listCells, route53-recovery-readiness:listCrossAccountAuthorizations, route53-recovery-readiness:listReadinessChecks, route53-recovery-readiness:listRecoveryGroups and 2 more |
| Route 53 Domains | 9 of 36 | 3 List, 6 Read; 0 restricted, 0 conditional | route53domains:checkDomainAvailability, route53domains:getContactReachabilityStatus, route53domains:getDomainDetail, route53domains:getOperationDetail, route53domains:listDomains, route53domains:listOperations, route53domains:listPrices, route53domains:listTagsForDomain, route53domains:viewBilling |
| Route 53 Global Resolver | 17 of 48 | 8 List, 9 Read; 0 restricted, 0 conditional | route53globalresolver:getAccessSource, route53globalresolver:getAccessToken, route53globalresolver:getDNSView, route53globalresolver:getFirewallDomainList, route53globalresolver:getFirewallRule, route53globalresolver:getGlobalResolver, route53globalresolver:getHostedZoneAssociation, route53globalresolver:getManagedFirewallDomainList, route53globalresolver:listAccessSources, route53globalresolver:listAccessTokens, route53globalresolver:listDNSViews, route53globalresolver:listFirewallDomainLists and 5 more |
| Route 53 Profiles | 7 of 19 | 4 List, 3 Read; 0 restricted, 0 conditional | route53profiles:getProfile, route53profiles:getProfileAssociation, route53profiles:getProfileResourceAssociation, route53profiles:listProfileAssociations, route53profiles:listProfileResourceAssociations, route53profiles:listProfiles, route53profiles:listTagsForResource |
| Route 53 Resolver | 31 of 70 | 15 List, 16 Read; 0 restricted, 0 conditional | route53resolver:getFirewallConfig, route53resolver:getFirewallDomainList, route53resolver:getFirewallRuleGroup, route53resolver:getFirewallRuleGroupAssociation, route53resolver:getFirewallRuleGroupPolicy, route53resolver:getOutpostResolver, route53resolver:getResolverConfig, route53resolver:getResolverDnssecConfig, route53resolver:getResolverEndpoint, route53resolver:getResolverQueryLogConfig, route53resolver:getResolverQueryLogConfigAssociation, route53resolver:getResolverQueryLogConfigPolicy and 19 more |
| RTB Fabric | 12 of 36 | 5 List, 7 Read; 0 restricted, 0 conditional | rtbfabric:getCertificateAssociation, rtbfabric:getInboundExternalLink, rtbfabric:getLink, rtbfabric:getLinkRoutingRule, rtbfabric:getOutboundExternalLink, rtbfabric:getRequesterGateway, rtbfabric:getResponderGateway, rtbfabric:listCertificateAssociations, rtbfabric:listLinkRoutingRules, rtbfabric:listLinks, rtbfabric:listRequesterGateways, rtbfabric:listResponderGateways |
| CloudWatch RUM | 5 of 19 | 1 List, 4 Read; 0 restricted, 0 conditional | rum:batchGetRumMetricDefinitions, rum:getAppMonitor, rum:getResourcePolicy, rum:listAppMonitors, rum:listRumMetricsDestinations |
| S3 | 50 of 155 | 10 List, 40 Read; 0 restricted, 0 conditional | s3:describeJob, s3:describeMultiRegionAccessPointOperation, s3:getAccelerateConfiguration, s3:getAccessGrant, s3:getAccessGrantsInstance, s3:getAccessGrantsInstanceResourcePolicy, s3:getAccessGrantsLocation, s3:getAccessPoint, s3:getAccessPointConfigurationForObjectLambda, s3:getAccessPointForObjectLambda, s3:getAccessPointPolicy, s3:getAccessPointPolicyForObjectLambda and 38 more |
| S3 Outposts | 11 of 48 | 5 List, 6 Read; 0 restricted, 0 conditional | s3-outposts:getAccessPoint, s3-outposts:getAccessPointPolicy, s3-outposts:getBucketPolicy, s3-outposts:getBucketVersioning, s3-outposts:getLifecycleConfiguration, s3-outposts:getReplicationConfiguration, s3-outposts:listAccessPoints, s3-outposts:listEndpoints, s3-outposts:listOutpostsWithS3, s3-outposts:listRegionalBuckets, s3-outposts:listSharedEndpoints |
| S3 Express | 2 of 28 | 1 List, 1 Read; 0 restricted, 0 conditional | s3express:getBucketPolicy, s3express:listAllMyDirectoryBuckets |
| S3 Files | 9 of 24 | 3 List, 6 Read; 0 restricted, 0 conditional | s3files:getAccessPoint, s3files:getFileSystem, s3files:getFileSystemPolicy, s3files:getMountTarget, s3files:getSynchronizationConfiguration, s3files:listAccessPoints, s3files:listFileSystems, s3files:listMountTargets, s3files:listTagsForResource |
| S3 Tables | 22 of 61 | 3 List, 19 Read; 0 restricted, 0 conditional | s3tables:getNamespace, s3tables:getTable, s3tables:getTableBucket, s3tables:getTableBucketEncryption, s3tables:getTableBucketMaintenanceConfiguration, s3tables:getTableBucketMetricsConfiguration, s3tables:getTableBucketPolicy, s3tables:getTableBucketReplication, s3tables:getTableBucketStorageClass, s3tables:getTableEncryption, s3tables:getTableMaintenanceConfiguration, s3tables:getTableMaintenanceJobStatus and 10 more |
| S3 Vectors | 5 of 21 | 2 List, 3 Read; 0 restricted, 0 conditional | s3vectors:getIndex, s3vectors:getVectorBucket, s3vectors:getVectorBucketPolicy, s3vectors:listIndexes, s3vectors:listVectorBuckets |
| SageMaker | 161 of 441 | 85 List, 76 Read; 0 restricted, 0 conditional | sagemaker:describeAction, sagemaker:describeAlgorithm, sagemaker:describeApp, sagemaker:describeAppImageConfig, sagemaker:describeArtifact, sagemaker:describeAutoMLJob, sagemaker:describeAutoMLJobV2, sagemaker:describeCluster, sagemaker:describeClusterEvent, sagemaker:describeClusterNode, sagemaker:describeClusterSchedulerConfig, sagemaker:describeCodeRepository and 149 more |
| Savings Plans | 4 of 10 | 4 Read; 0 restricted, 0 conditional | savingsplans:describeSavingsPlanRates, savingsplans:describeSavingsPlans, savingsplans:describeSavingsPlansOfferingRates, savingsplans:describeSavingsPlansOfferings |
| EventBridge Scheduler | 4 of 13 | 2 List, 2 Read; 0 restricted, 0 conditional | scheduler:getSchedule, scheduler:getScheduleGroup, scheduler:listScheduleGroups, scheduler:listSchedules |
| EventBridge Schemas | 11 of 31 | 4 List, 7 Read; 0 restricted, 0 conditional | schemas:describeCodeBinding, schemas:describeDiscoverer, schemas:describeRegistry, schemas:describeSchema, schemas:getCodeBindingSource, schemas:getDiscoveredSchema, schemas:getResourcePolicy, schemas:listDiscoverers, schemas:listRegistries, schemas:listSchemaVersions, schemas:listSchemas |
| SimpleDB | 2 of 13 | 1 List, 1 Read; 0 restricted, 0 conditional | sdb:domainMetadata, sdb:listDomains |
| Secrets Manager | 4 of 27 | 1 List, 3 Read; 0 restricted, 0 conditional | secretsmanager:describeSecret, secretsmanager:getResourcePolicy, secretsmanager:listSecretVersionIds, secretsmanager:listSecrets |
| Security Incident Response | 4 of 25 | 2 List, 2 Read; 0 restricted, 0 conditional | security-ir:batchGetMemberAccountDetails, security-ir:getMembership, security-ir:listCases, security-ir:listMemberships |
| SecurityHub | 31 of 141 | 12 List, 19 Read; 0 restricted, 0 conditional | securityhub:batchGetAutomationRules, securityhub:batchGetConfigurationPolicyAssociations, securityhub:describeActionTargets, securityhub:describeHub, securityhub:describeOrganizationConfiguration, securityhub:describeProductsV2, securityhub:describeSecurityHubV2, securityhub:getAggregatorV2, securityhub:getAutomationRuleV2, securityhub:getConfigurationPolicy, securityhub:getConfigurationPolicyAssociation, securityhub:getConnectorV2 and 19 more |
| SecurityLake | 8 of 31 | 4 List, 4 Read; 0 restricted, 0 conditional | securitylake:getDataLakeExceptionSubscription, securitylake:getDataLakeOrganizationConfiguration, securitylake:getDataLakeSources, securitylake:getSubscriber, securitylake:listDataLakeExceptions, securitylake:listDataLakes, securitylake:listLogSources, securitylake:listSubscribers |
| Serverless Application Repository | 6 of 15 | 3 List, 3 Read; 0 restricted, 0 conditional | serverlessrepo:getApplication, serverlessrepo:getApplicationPolicy, serverlessrepo:getCloudFormationTemplate, serverlessrepo:listApplicationDependencies, serverlessrepo:listApplicationVersions, serverlessrepo:listApplications |
| Service Catalog | 19 of 117 | 11 List, 8 Read; 0 restricted, 0 conditional | servicecatalog:describeConstraint, servicecatalog:describePortfolio, servicecatalog:describeProduct, servicecatalog:describeProductAsAdmin, servicecatalog:describeProductView, servicecatalog:describeProvisioningArtifact, servicecatalog:describeProvisioningParameters, servicecatalog:describeRecord, servicecatalog:listAcceptedPortfolioShares, servicecatalog:listConstraintsForPortfolio, servicecatalog:listLaunchPaths, servicecatalog:listPortfolioAccess and 7 more |
| Service Quotas | 11 of 26 | 11 Read; 0 restricted, 0 conditional | servicequotas:getAWSDefaultServiceQuota, servicequotas:getAssociationForServiceQuotaTemplate, servicequotas:getRequestedServiceQuotaChange, servicequotas:getServiceQuota, servicequotas:getServiceQuotaIncreaseRequestFromTemplate, servicequotas:listAWSDefaultServiceQuotas, servicequotas:listRequestedServiceQuotaChangeHistory, servicequotas:listRequestedServiceQuotaChangeHistoryByQuota, servicequotas:listServiceQuotaIncreaseRequestsInTemplate, servicequotas:listServiceQuotas, servicequotas:listServices |
| SES | 71 of 231 | 25 List, 46 Read; 0 restricted, 0 conditional | ses:batchGetMetricData, ses:describeActiveReceiptRuleSet, ses:describeConfigurationSet, ses:describeReceiptRule, ses:describeReceiptRuleSet, ses:getAccount, ses:getAccountSendingEnabled, ses:getAddonInstance, ses:getAddonSubscription, ses:getArchive, ses:getArchiveExport, ses:getArchiveSearch and 59 more |
| Shield | 10 of 40 | 3 List, 7 Read; 0 restricted, 0 conditional | shield:describeAttack, shield:describeAttackStatistics, shield:describeDRTAccess, shield:describeProtection, shield:describeProtectionGroup, shield:describeSubscription, shield:getSubscriptionState, shield:listAttacks, shield:listProtectionGroups, shield:listProtections |
| Signer | 7 of 18 | 3 List, 4 Read; 0 restricted, 0 conditional | signer:describeSigningJob, signer:getSigningPlatform, signer:getSigningProfile, signer:listProfilePermissions, signer:listSigningJobs, signer:listSigningPlatforms, signer:listSigningProfiles |
| ServerMigrationService | 4 of 37 | 4 Read; 0 restricted, 0 conditional | sms:getConnectors, sms:getReplicationJobs, sms:getReplicationRuns, sms:getServers |
| Pinpoint SMS Voice | 4 of 107 | 4 Read; 0 restricted, 0 conditional | sms-voice:describeAccountAttributes, sms-voice:describeSpendLimits, sms-voice:describeVerifiedDestinationNumbers, sms-voice:getConfigurationSetEventDestinations |
| Snowball | 6 of 27 | 3 List, 3 Read; 0 restricted, 0 conditional | snowball:describeAddress, snowball:describeAddresses, snowball:describeJob, snowball:getSnowballUsage, snowball:listJobs, snowball:listServiceVersions |
| SNS | 16 of 40 | 7 List, 9 Read; 0 restricted, 0 conditional | sns:checkIfPhoneNumberIsOptedOut, sns:getDataProtectionPolicy, sns:getEndpointAttributes, sns:getPlatformApplicationAttributes, sns:getSMSAttributes, sns:getSMSSandboxAccountStatus, sns:getSubscriptionAttributes, sns:getTopicAttributes, sns:listEndpointsByPlatformApplication, sns:listOriginationNumbers, sns:listPhoneNumbersOptedOut, sns:listPlatformApplications and 4 more |
| Social Messaging | 3 of 32 | 2 List, 1 Read; 0 restricted, 0 conditional | social-messaging:getLinkedWhatsAppBusinessAccount, social-messaging:listLinkedWhatsAppBusinessAccounts, social-messaging:listWhatsAppMessageTemplates |
| SQS | 5 of 20 | 5 Read; 0 restricted, 0 conditional | sqs:getQueueAttributes, sqs:getQueueUrl, sqs:listDeadLetterSourceQueues, sqs:listMessageMoveTasks, sqs:listQueues |
| Systems Manager | 72 of 164 | 33 List, 39 Read; 0 restricted, 0 conditional | ssm:describeActivations, ssm:describeAssociation, ssm:describeAssociationExecutionTargets, ssm:describeAssociationExecutions, ssm:describeAutomationExecutions, ssm:describeAutomationStepExecutions, ssm:describeAvailablePatches, ssm:describeDocument, ssm:describeDocumentPermission, ssm:describeEffectiveInstanceAssociations, ssm:describeEffectivePatchesForPatchBaseline, ssm:describeInstanceAssociationsStatus and 60 more |
| Incident Manager Contacts | 18 of 40 | 11 List, 7 Read; 0 restricted, 0 conditional | ssm-contacts:describeEngagement, ssm-contacts:describePage, ssm-contacts:getContact, ssm-contacts:getContactChannel, ssm-contacts:getContactPolicy, ssm-contacts:getRotation, ssm-contacts:getRotationOverride, ssm-contacts:listContactChannels, ssm-contacts:listContacts, ssm-contacts:listEngagements, ssm-contacts:listPageReceipts, ssm-contacts:listPageResolutions and 6 more |
| Incident Manager | 12 of 31 | 6 List, 6 Read; 0 restricted, 0 conditional | ssm-incidents:batchGetIncidentFindings, ssm-incidents:getIncidentRecord, ssm-incidents:getReplicationSet, ssm-incidents:getResourcePolicies, ssm-incidents:getResponsePlan, ssm-incidents:getTimelineEvent, ssm-incidents:listIncidentFindings, ssm-incidents:listIncidentRecords, ssm-incidents:listRelatedItems, ssm-incidents:listReplicationSets, ssm-incidents:listResponsePlans, ssm-incidents:listTimelineEvents |
| Systems Manager Quick Setup | 6 of 14 | 2 List, 4 Read; 0 restricted, 0 conditional | ssm-quicksetup:getConfiguration, ssm-quicksetup:getConfigurationManager, ssm-quicksetup:getServiceSettings, ssm-quicksetup:listConfigurationManagers, ssm-quicksetup:listConfigurations, ssm-quicksetup:listQuickSetupTypes |
| Systems Manager for SAP | 14 of 30 | 8 List, 1 Permissions management, 5 Read; 0 restricted, 0 conditional | ssm-sap:getApplication, ssm-sap:getComponent, ssm-sap:getConfigurationCheckOperation, ssm-sap:getDatabase, ssm-sap:getOperation, ssm-sap:getResourcePermission, ssm-sap:listApplications, ssm-sap:listComponents, ssm-sap:listConfigurationCheckDefinitions, ssm-sap:listConfigurationCheckOperations, ssm-sap:listDatabases, ssm-sap:listOperations and 2 more |
| IAM Identity Center | 44 of 126 | 21 List, 23 Read; 0 restricted, 0 conditional | sso:describeAccountAssignmentCreationStatus, sso:describeAccountAssignmentDeletionStatus, sso:describeApplication, sso:describeApplicationAssignment, sso:describeApplicationProvider, sso:describeInstance, sso:describeInstanceAccessControlAttributeConfiguration, sso:describePermissionSet, sso:describePermissionSetProvisioningStatus, sso:describeTrustedTokenIssuer, sso:getApplicationAccessScope, sso:getApplicationAssignmentConfiguration and 32 more |
| Step Functions | 13 of 37 | 6 List, 7 Read; 0 restricted, 0 conditional | states:describeActivity, states:describeExecution, states:describeMapRun, states:describeStateMachine, states:describeStateMachineAlias, states:describeStateMachineForExecution, states:getExecutionHistory, states:listActivities, states:listExecutions, states:listMapRuns, states:listStateMachineAliases, states:listStateMachineVersions and 1 more |
| Storage Gateway | 27 of 97 | 10 List, 17 Read; 0 restricted, 0 conditional | storagegateway:describeBandwidthRateLimit, storagegateway:describeCache, storagegateway:describeCachediSCSIVolumes, storagegateway:describeFileSystemAssociations, storagegateway:describeGatewayInformation, storagegateway:describeMaintenanceStartTime, storagegateway:describeNFSFileShares, storagegateway:describeSMBFileShares, storagegateway:describeSMBSettings, storagegateway:describeSnapshotSchedule, storagegateway:describeStorediSCSIVolumes, storagegateway:describeTapeArchives and 15 more |
| STS | 1 of 16 | 1 Read; 0 restricted, 0 conditional | sts:getCallerIdentity |
| Support Authorization | 5 of 12 | 3 List, 2 Read; 0 restricted, 0 conditional | supportauthz:getAction, supportauthz:getSupportPermit, supportauthz:listActions, supportauthz:listSupportPermitRequests, supportauthz:listSupportPermits |
| Sustainability | 4 of 5 | 4 Read; 0 restricted, 0 conditional | sustainability:getEstimatedCarbonEmissions, sustainability:getEstimatedCarbonEmissionsDimensionValues, sustainability:getEstimatedWaterAllocation, sustainability:getEstimatedWaterAllocationDimensionValues |
| SWF | 6 of 32 | 3 List, 3 Read; 0 restricted, 0 conditional | swf:describeActivityType, swf:describeDomain, swf:describeWorkflowType, swf:listActivityTypes, swf:listDomains, swf:listWorkflowTypes |
| CloudWatch Synthetics | 9 of 22 | 3 List, 6 Read; 0 restricted, 0 conditional | synthetics:describeCanaries, synthetics:describeCanariesLastRun, synthetics:describeRuntimeVersions, synthetics:getCanary, synthetics:getCanaryRuns, synthetics:getGroup, synthetics:listAssociatedGroups, synthetics:listGroupResources, synthetics:listGroups |
| Tax Settings | 2 of 23 | 2 Read; 0 restricted, 0 conditional | tax:getTaxInheritance, tax:getTaxRegistration |
| Textract | 3 of 25 | 3 Read; 0 restricted, 0 conditional | textract:listAdapterVersions, textract:listAdapters, textract:listTagsForResource |
| WorkSpaces Thin Client | 6 of 18 | 3 List, 3 Read; 0 restricted, 0 conditional | thinclient:getDevice, thinclient:getEnvironment, thinclient:getSoftwareSet, thinclient:listDevices, thinclient:listEnvironments, thinclient:listSoftwareSets |
| Timestream | 9 of 32 | 4 List, 5 Read; 0 restricted, 0 conditional | timestream:describeAccountSettings, timestream:describeBatchLoadTask, timestream:describeDatabase, timestream:describeScheduledQuery, timestream:describeTable, timestream:listBatchLoadTasks, timestream:listDatabases, timestream:listScheduledQueries, timestream:listTables |
| Tiros | 3 of 5 | 2 Read, 1 Write; 0 restricted, 0 conditional | tiros:createQuery, tiros:getQueryAnswer, tiros:getQueryExplanation |
| Transcribe | 16 of 52 | 8 List, 8 Read; 0 restricted, 0 conditional | transcribe:describeLanguageModel, transcribe:getCallAnalyticsCategory, transcribe:getCallAnalyticsJob, transcribe:getMedicalTranscriptionJob, transcribe:getMedicalVocabulary, transcribe:getTranscriptionJob, transcribe:getVocabulary, transcribe:getVocabularyFilter, transcribe:listCallAnalyticsCategories, transcribe:listCallAnalyticsJobs, transcribe:listLanguageModels, transcribe:listMedicalTranscriptionJobs and 4 more |
| Transfer | 22 of 72 | 4 List, 17 Read, 1 Write; 0 restricted, 0 conditional | transfer:describeAccess, transfer:describeAgreement, transfer:describeConnector, transfer:describeExecution, transfer:describeProfile, transfer:describeServer, transfer:describeUser, transfer:describeWebApp, transfer:describeWebAppCustomization, transfer:describeWorkflow, transfer:listAccesses, transfer:listAgreements and 10 more |
| Trusted Advisor | 9 of 42 | 7 List, 2 Read; 0 restricted, 0 conditional | trustedadvisor:getOrganizationRecommendation, trustedadvisor:getRecommendation, trustedadvisor:listChecks, trustedadvisor:listOrganizationRecommendationAccounts, trustedadvisor:listOrganizationRecommendationResources, trustedadvisor:listOrganizationRecommendations, trustedadvisor:listRecommendationResources, trustedadvisor:listRecommendations, trustedadvisor:listRecommendationsForResource |
| Verified Permissions | 9 of 31 | 4 List, 5 Read; 0 restricted, 0 conditional | verifiedpermissions:getIdentitySource, verifiedpermissions:getPolicy, verifiedpermissions:getPolicyStore, verifiedpermissions:getPolicyTemplate, verifiedpermissions:getSchema, verifiedpermissions:listIdentitySources, verifiedpermissions:listPolicies, verifiedpermissions:listPolicyStores, verifiedpermissions:listPolicyTemplates |
| VPC Lattice | 29 of 75 | 15 List, 14 Read; 0 restricted, 0 conditional | vpc-lattice:getAccessLogSubscription, vpc-lattice:getAuthPolicy, vpc-lattice:getDomainVerification, vpc-lattice:getListener, vpc-lattice:getResourceConfiguration, vpc-lattice:getResourceGateway, vpc-lattice:getResourcePolicy, vpc-lattice:getRule, vpc-lattice:getService, vpc-lattice:getServiceNetwork, vpc-lattice:getServiceNetworkResourceAssociation, vpc-lattice:getServiceNetworkServiceAssociation and 17 more |
| WAF | 29 of 77 | 14 List, 15 Read; 0 restricted, 0 conditional | waf:getByteMatchSet, waf:getChangeTokenStatus, waf:getGeoMatchSet, waf:getIPSet, waf:getLoggingConfiguration, waf:getRateBasedRule, waf:getRegexMatchSet, waf:getRegexPatternSet, waf:getRule, waf:getRuleGroup, waf:getSampledRequests, waf:getSizeConstraintSet and 17 more |
| WAF Regional | 26 of 81 | 13 List, 13 Read; 0 restricted, 0 conditional | waf-regional:getByteMatchSet, waf-regional:getChangeTokenStatus, waf-regional:getGeoMatchSet, waf-regional:getIPSet, waf-regional:getLoggingConfiguration, waf-regional:getRateBasedRule, waf-regional:getRegexMatchSet, waf-regional:getRegexPatternSet, waf-regional:getRule, waf-regional:getRuleGroup, waf-regional:getSqlInjectionMatchSet, waf-regional:getWebACL and 14 more |
| WAF V2 | 19 of 64 | 7 List, 12 Read; 0 restricted, 0 conditional | wafv2:checkCapacity, wafv2:describeManagedRuleGroup, wafv2:getIPSet, wafv2:getLoggingConfiguration, wafv2:getPermissionPolicy, wafv2:getRateBasedStatementManagedKeys, wafv2:getRegexPatternSet, wafv2:getRuleGroup, wafv2:getSampledRequests, wafv2:getWebACL, wafv2:getWebACLForResource, wafv2:listAvailableManagedRuleGroups and 7 more |
| Well-Architected Tool | 11 of 95 | 11 Read; 0 restricted, 0 conditional | wellarchitected:getAgentContext, wellarchitected:getAgentGoal, wellarchitected:getAgentProfile, wellarchitected:getAgentRecommendation, wellarchitected:getAgentRecommendationGeneration, wellarchitected:listAgentContexts, wellarchitected:listAgentGoals, wellarchitected:listAgentProfiles, wellarchitected:listAgentRecommendationGenerations, wellarchitected:listAgentRecommendationItems, wellarchitected:listAgentRecommendations |
| Q in Connect | 5 of 97 | 2 List, 3 Read; 0 restricted, 0 conditional | wisdom:getAIAgent, wisdom:getAIGuardrail, wisdom:getAIPrompt, wisdom:listAIAgents, wisdom:listAssistants |
| WorkDocs | 3 of 61 | 2 List, 1 Read; 0 restricted, 0 conditional | workdocs:checkAlias, workdocs:describeAvailableDirectories, workdocs:describeInstances |
| WorkMail | 12 of 126 | 12 List; 0 restricted, 0 conditional | workmail:describeGroup, workmail:describeOrganization, workmail:describeResource, workmail:describeUser, workmail:listAliases, workmail:listGroupMembers, workmail:listGroups, workmail:listMailboxPermissions, workmail:listOrganizations, workmail:listResourceDelegates, workmail:listResources, workmail:listUsers |
| WorkSpaces | 16 of 103 | 9 List, 7 Read; 0 restricted, 0 conditional | workspaces:describeAccount, workspaces:describeAccountModifications, workspaces:describeApplicationAssociations, workspaces:describeApplications, workspaces:describeCustomWorkspaceImageImport, workspaces:describeIpGroups, workspaces:describeTags, workspaces:describeWorkspaceAssociations, workspaces:describeWorkspaceBundles, workspaces:describeWorkspaceDirectories, workspaces:describeWorkspaceImages, workspaces:describeWorkspaceSnapshots and 4 more |
| WorkSpaces Secure Browser | 15 of 75 | 15 Read; 0 restricted, 0 conditional | workspaces-web:getBrowserSettings, workspaces-web:getIdentityProvider, workspaces-web:getNetworkSettings, workspaces-web:getPortal, workspaces-web:getPortalServiceProviderMetadata, workspaces-web:getTrustStoreCertificate, workspaces-web:getUserSettings, workspaces-web:listBrowserSettings, workspaces-web:listIdentityProviders, workspaces-web:listNetworkSettings, workspaces-web:listPortals, workspaces-web:listTagsForResource and 3 more |
| X-Ray | 7 of 32 | 1 List, 6 Read; 0 restricted, 0 conditional | xray:getEncryptionConfig, xray:getGroup, xray:getGroups, xray:getInsightImpactGraph, xray:getSamplingRules, xray:getSamplingStatisticSummaries, xray:listResourcePolicies |
The full action list is in actions.json.
Data-plane actions (74)
By access level: 22 List, 52 Read.
| Service | Granted | Access levels and limits | Granted by |
|---|---|---|---|
| DevOps Agent | All 4 actions (see the DevOps Agent page) | 4 Read; 0 restricted, 0 conditional | aidevops:getAgentSpace, aidevops:getAssociation, aidevops:getOperatorApp, aidevops:getService |
| Bedrock | 7 of 37 | 2 List, 5 Read; 0 restricted, 0 conditional | bedrock:getAgentMemory, bedrock:getAsyncInvoke, bedrock:getDataAutomationStatus, bedrock:getInvocationStep, bedrock:getSession, bedrock:listInvocationSteps, bedrock:listSessions |
| Bedrock-Agentcore | 19 of 62 | 10 List, 9 Read; 0 restricted, 0 conditional | bedrock-agentcore:getABTest, bedrock-agentcore:getAgentCard, bedrock-agentcore:getBatchEvaluation, bedrock-agentcore:getBrowserSession, bedrock-agentcore:getCodeInterpreterSession, bedrock-agentcore:getEvent, bedrock-agentcore:getMemoryRecord, bedrock-agentcore:getRecommendation, bedrock-agentcore:listABTests, bedrock-agentcore:listActors, bedrock-agentcore:listBatchEvaluations, bedrock-agentcore:listBrowserSessions and 7 more |
| CloudWatch | 4 of 5 | 1 List, 3 Read; 0 restricted, 0 conditional | cloudWatch:getMetricWidgetImage, cloudwatch:getMetricData, cloudwatch:getMetricStatistics, cloudwatch:listMetrics |
| Deadline Cloud | 2 of 29 | 2 List; 0 restricted, 0 conditional | deadline:listJobs, deadline:listWorkers |
| Elastic Block Store | 2 of 4 | 2 Read; 0 restricted, 0 conditional | ebs:listChangedBlocks, ebs:listSnapshotBlocks |
| Geo Maps | All 2 actions (see the Geo Maps page) | 2 Read; 0 restricted, 0 conditional | geo-maps:getStaticMap, geo-maps:getTile |
| Geo Places | All 7 actions (see the Geo Places page) | 7 Read; 0 restricted, 0 conditional | geo-places:autocomplete, geo-places:geocode, geo-places:getPlace, geo-places:reverseGeocode, geo-places:searchNearby, geo-places:searchText, geo-places:suggest |
| Geo Routes | All 5 actions (see the Geo Routes page) | 5 Read; 0 restricted, 0 conditional | geo-routes:calculateIsolines, geo-routes:calculateRouteMatrix, geo-routes:calculateRoutes, geo-routes:optimizeWaypoints, geo-routes:snapToRoads |
| Lambda | 1 of 14 | 1 Read; 0 restricted, 0 conditional | lambda:getDurableExecutionState |
| Q Business | 1 of 26 | 1 List; 0 restricted, 0 conditional | qbusiness:listDataSourceSyncJobs |
| S3 | 6 of 25 | 3 List, 3 Read; 0 restricted, 0 conditional | s3:getObjectAcl, s3:getObjectLegalHold, s3:getObjectRetention, s3:listBucket, s3:listBucketVersions, s3:listMultipartUploadParts |
| Signer | All 1 actions (see the Signer page) | 1 Read; 0 restricted, 0 conditional | signer:getRevocationStatus |
| SWF | 8 of 19 | 2 List, 6 Read; 0 restricted, 0 conditional | swf:countClosedWorkflowExecutions, swf:countOpenWorkflowExecutions, swf:countPendingActivityTasks, swf:countPendingDecisionTasks, swf:describeWorkflowExecution, swf:getWorkflowExecutionHistory, swf:listClosedWorkflowExecutions, swf:listOpenWorkflowExecutions |
| Timestream | 1 of 5 | 1 List; 0 restricted, 0 conditional | timestream:describeEndpoints |
| X-Ray | 4 of 12 | 4 Read; 0 restricted, 0 conditional | xray:getSamplingTargets, xray:getServiceGraph, xray:getTimeSeriesServiceStatistics, xray:getTraceGraph |
The full action list is in actions.json.
Excluded and conditional actions
No patterns are excluded by NotAction or Deny statements.
Resource scope and attachment
Resource scope across granted actions: mixed.
Can be attached: No (service-linked role policy).
Why this tier
- Grants 6 write, tagging or permissions-management actions, short of full control of any service.
Guidance
Pending editorial review. The permission data on this page comes straight from AWS; this section will be filled in once a reviewed guide exists.
Related policies
Same domain
Frequently asked questions
Pending editorial review. The permission data on this page comes straight from AWS; this section will be filled in once a reviewed guide exists.
Policy JSON
This document is large, so it is shown compact here. Use the formatted policy.json to read it with indentation.
{"Version":"2012-10-17","Statement":[{"Sid":"AWSSupportAPIGatewayAccess","Effect":"Allow","Action":["apigateway:GET"],"Resource":["arn:aws:apigateway:*::/account","arn:aws:apigateway:*::/apis","arn:aws:apigateway:*::/apis/*","arn:aws:apigateway:*::/apis/*/authorizers","arn:aws:apigateway:*::/apis/*/authorizers/*","arn:aws:apigateway:*::/apis/*/deployments","arn:aws:apigateway:*::/apis/*/deployments/*","arn:aws:apigateway:*::/apis/*/integrations","arn:aws:apigateway:*::/apis/*/integrations/*","arn:aws:apigateway:*::/apis/*/integrations/*/integrationresponses","arn:aws:apigateway:*::/apis/*/integrations/*/integrationresponses/*","arn:aws:apigateway:*::/apis/*/models","arn:aws:apigateway:*::/apis/*/models/*","arn:aws:apigateway:*::/apis/*/routes","arn:aws:apigateway:*::/apis/*/routes/*","arn:aws:apigateway:*::/apis/*/routes/*/routeresponses","arn:aws:apigateway:*::/apis/*/routes/*/routeresponses/*","arn:aws:apigateway:*::/apis/*/stages","arn:aws:apigateway:*::/apis/*/stages/*","arn:aws:apigateway:*::/clientcertificates","arn:aws:apigateway:*::/clientcertificates/*","arn:aws:apigateway:*:*:/domainnameaccessassociations","arn:aws:apigateway:*::/domainnames","arn:aws:apigateway:*::/domainnames/*","arn:aws:apigateway:*::/domainnames/*/apimappings","arn:aws:apigateway:*::/domainnames/*/apimappings/*","arn:aws:apigateway:*::/domainnames/*/basepathmappings","arn:aws:apigateway:*::/domainnames/*/basepathmappings/*","arn:aws:apigateway:*::/restapis","arn:aws:apigateway:*::/restapis/*","arn:aws:apigateway:*::/restapis/*/authorizers","arn:aws:apigateway:*::/restapis/*/authorizers/*","arn:aws:apigateway:*::/restapis/*/deployments","arn:aws:apigateway:*::/restapis/*/deployments/*","arn:aws:apigateway:*::/restapis/*/models","arn:aws:apigateway:*::/restapis/*/models/*","arn:aws:apigateway:*::/restapis/*/models/*/default_template","arn:aws:apigateway:*::/restapis/*/resources","arn:aws:apigateway:*::/restapis/*/resources/*","arn:aws:apigateway:*::/restapis/*/resources/*/methods/*/integration/responses/*","arn:aws:apigateway:*::/restapis/*/resources/*/methods/*/responses/*","arn:aws:apigateway:*::/restapis/*/stages/*/sdks/*","arn:aws:apigateway:*::/restapis/*/resources/*/methods/*","arn:aws:apigateway:*::/restapis/*/resources/*/methods/*/integration","arn:aws:apigateway:*::/restapis/*/stages","arn:aws:apigateway:*::/restapis/*/stages/*","arn:aws:apigateway:*::/usageplans","arn:aws:apigateway:*::/usageplans/*","arn:aws:apigateway:*::/vpclinks","arn:aws:apigateway:*::/vpclinks/*"]},{"Sid":"AWSSupportDeleteRoleAccess","Effect":"Allow","Action":["iam:DeleteRole"],"Resource":["arn:aws:iam::*:role/aws-service-role/support.amazonaws.com/AWSServiceRoleForSupport"]},{"Sid":"AWSSupportActionsGroup1","Effect":"Allow","Action":["access-analyzer:getAccessPreview","access-analyzer:getAnalyzedResource","access-analyzer:getAnalyzer","access-analyzer:getArchiveRule","access-analyzer:getFinding","access-analyzer:getGeneratedPolicy","access-analyzer:listAccessPreviewFindings","access-analyzer:listAccessPreviews","access-analyzer:listAnalyzedResources","access-analyzer:listAnalyzers","access-analyzer:listArchiveRules","access-analyzer:listFindings","access-analyzer:listPolicyGenerations","account:getRegionOptStatus","account:listRegions","acm-pca:describeCertificateAuthority","acm-pca:describeCertificateAuthorityAuditReport","acm-pca:getCertificate","acm-pca:getCertificateAuthorityCertificate","acm-pca:getCertificateAuthorityCsr","acm-pca:listCertificateAuthorities","acm-pca:listTags","acm:describeAcmeAccount","acm:describeAcmeDomainValidation","acm:describeAcmeEndpoint","acm:describeAcmeExternalAccountBinding","acm:describeCertificate","acm:getAccountConfiguration","acm:getCertificate","acm:listAcmeAccounts","acm:listAcmeDomainValidations","acm:listAcmeEndpoints","acm:listAcmeExternalAccountBindings","acm:listCertificateDomainValidations","acm:listCertificates","acm:listTagsForCertificate","acm:searchCertificates","aidevops:describePrivateConnection","aidevops:getAccountUsage","aidevops:getAgentSpace","aidevops:getAssociation","aidevops:getBacklogTask","aidevops:getOperatorApp","aidevops:getRecommendation","aidevops:getService","aidevops:listAgentSpaces","aidevops:listAssociations","aidevops:listBacklogTasks","aidevops:listChats","aidevops:listExecutions","aidevops:listGoals","aidevops:listPrivateConnections","aidevops:listRecommendations","aidevops:listServices","aidevops:listWebHooks","aiops:getInvestigationGroup","aiops:getInvestigationGroupPolicy","aiops:listInvestigationGroups","airflow-serverless:getTaskInstance","airflow-serverless:getWorkflow","airflow-serverless:getWorkflowRun","airflow-serverless:listTaskInstances","airflow-serverless:listWorkflowRuns","airflow-serverless:listWorkflows","airflow-serverless:listWorkflowVersions","airflow:getEnvironment","airflow:listEnvironments","airflow:listTagsForResource","amplify:getApp","amplify:getBackendEnvironment","amplify:getBranch","amplify:getDomainAssociation","amplify:getJob","amplify:getWebhook","amplify:listApps","amplify:listBackendEnvironments","amplify:listBranches","amplify:listDomainAssociations","amplify:listJobs","amplify:listResourcesForWebACL","amplify:listWebhooks","amplifyuibuilder:exportComponents","amplifyuibuilder:exportThemes","apigateway:getPortal","apigateway:getPortalProduct","apigateway:getPortalProductSharingPolicy","apigateway:getProductPage","apigateway:getProductRestEndpointPage","apigateway:getRoutingRule","apigateway:listPortalProducts","apigateway:listPortals","apigateway:listProductPages","apigateway:listProductRestEndpointPages","apigateway:listRoutingRules","aoss:batchGetCollection","aoss:batchGetCollectionGroup","aoss:batchGetEffectiveLifecyclePolicy","aoss:batchGetLifecyclePolicy","aoss:batchGetVpcEndpoint","aoss:getAccessPolicy","aoss:getAccountSettings","aoss:getIndex","aoss:getPoliciesStats","aoss:getSecurityConfig","aoss:getSecurityPolicy","aoss:listAccessPolicies","aoss:listCollectionGroups","aoss:listCollections","aoss:listLifecyclePolicies","aoss:listSecurityConfigs","aoss:listSecurityPolicies","aoss:listTagsForResource","aoss:listVpcEndpoints","appconfig:getAccountSettings","appconfig:getApplication","appconfig:getConfigurationProfile","appconfig:getDeployment","appconfig:getDeploymentStrategy","appconfig:getEnvironment","appconfig:getExtension","appconfig:getExtensionAssociation","appconfig:getHostedConfigurationVersion","appconfig:listApplications","appconfig:listConfigurationProfiles","appconfig:listDeployments","appconfig:listDeploymentStrategies","appconfig:listEnvironments","appconfig:listExtensionAssociations","appconfig:listExtensions","appconfig:listHostedConfigurationVersions","appflow:describeConnectorEntity","appflow:describeConnectorProfiles","appflow:describeConnectors","appflow:describeFlow","appflow:describeFlowExecutionRecords","appflow:listConnectorEntities","appflow:listFlows","application-autoscaling:describeScalableTargets","application-autoscaling:describeScalingActivities","application-autoscaling:describeScalingPolicies","application-autoscaling:describeScheduledActions","application-signals:getService","application-signals:getServiceLevelObjective","application-signals:listAuditFindings","application-signals:listEntityEvents","application-signals:listGroupingAttributeDefinitions","application-signals:listServiceDependencies","application-signals:listServiceDependents","application-signals:listServiceLevelObjectiveExclusionWindows","application-signals:listServiceLevelObjectives","application-signals:listServiceOperations","application-signals:listServices","application-signals:listServiceStates","applicationinsights:describeApplication","applicationinsights:describeComponent","applicationinsights:describeComponentConfiguration","applicationinsights:describeComponentConfigurationRecommendation","applicationinsights:describeLogPattern","applicationinsights:describeObservation","applicationinsights:describeProblem","applicationinsights:describeProblemObservations","applicationinsights:listApplications","applicationinsights:listComponents","applicationinsights:listConfigurationHistory","applicationinsights:listLogPatterns","applicationinsights:listLogPatternSets","applicationinsights:listProblems","appmesh:describeGatewayRoute","appmesh:describeMesh","appmesh:describeRoute","appmesh:describeVirtualGateway","appmesh:describeVirtualNode","appmesh:describeVirtualRouter","appmesh:describeVirtualService","appmesh:listGatewayRoutes","appmesh:listMeshes","appmesh:listRoutes","appmesh:listTagsForResource","appmesh:listVirtualGateways","appmesh:listVirtualNodes","appmesh:listVirtualRouters","appmesh:listVirtualServices","apprunner:describeAutoScalingConfiguration","apprunner:describeCustomDomains","apprunner:describeObservabilityConfiguration","apprunner:describeOperation","apprunner:describeService","apprunner:describeVpcConnector","apprunner:describeVpcIngressConnection","apprunner:listAutoScalingConfigurations","apprunner:listConnections","apprunner:listObservabilityConfigurations","apprunner:listOperations","apprunner:listAssociatedServicesForWebAcl","apprunner:listServices","apprunner:listTagsForResource","apprunner:listVpcConnectors","apprunner:listVpcIngressConnections","appstream:describeAppBlockBuilderAppBlockAssociations","appstream:describeAppBlockBuilders","appstream:describeAppBlocks","appstream:describeApplicationFleetAssociations","appstream:describeApplications","appstream:describeDirectoryConfigs","appstream:describeEntitlements","appstream:describeFleets","appstream:describeImageBuilders","appstream:describeImagePermissions","appstream:describeImages","appstream:describeSessions","appstream:describeStacks","appstream:describeUsageReportSubscriptions","appstream:describeUsers","appstream:describeUserStackAssociations","appstream:listAssociatedFleets","appstream:listAssociatedStacks","appstream:listEntitledApplications","appstream:listTagsForResource","appsync:evaluateCode","appsync:evaluateMappingTemplate","appsync:getApi","appsync:getApiAssociation","appsync:getApiCache","appsync:getChannelNamespace","appsync:getDataSource","appsync:getDataSourceIntrospection","appsync:getDomainName","appsync:getFunction","appsync:getGraphqlApi","appsync:getGraphqlApiEnvironmentVariables","appsync:getIntrospectionSchema","appsync:getResolver","appsync:getSchemaCreationStatus","appsync:getSourceApiAssociation","appsync:getType","appsync:listApis","appsync:listChannelNamespaces","appsync:listDataSources","appsync:listDomainNames","appsync:listFunctions","appsync:listGraphqlApis","appsync:listResolvers","appsync:listResolversByFunction","appsync:listSourceApiAssociations","appsync:listTypes","appsync:listTypesByAssociation","aps:describeAlertManagerDefinition","aps:describeRuleGroupsNamespace","aps:describeScraper","aps:describeWorkspace","aps:listRuleGroupsNamespaces","aps:listScrapers","aps:listWorkspaces","arc-region-switch:getPlan","arc-region-switch:getPlanEvaluationStatus","arc-region-switch:getPlanExecution","arc-region-switch:getPlanInRegion","arc-region-switch:listPlanExecutionEvents","arc-region-switch:listPlanExecutions","arc-region-switch:listPlans","arc-region-switch:listPlansInRegion","arc-region-switch:listRoute53HealthChecks","arc-region-switch:listRoute53HealthChecksInRegion","arc-zonal-shift:getAutoshiftObserverNotificationStatus","arc-zonal-shift:getManagedResource","arc-zonal-shift:listAutoshifts","arc-zonal-shift:listManagedResources","arc-zonal-shift:listZonalShifts","athena:batchGetNamedQuery","athena:batchGetQueryExecution","athena:getCalculationExecution","athena:getCalculationExecutionStatus","athena:getCapacityAssignmentConfiguration","athena:getCapacityReservation","athena:getDataCatalog","athena:getNamedQuery","athena:getNotebookMetadata","athena:getQueryExecution","athena:getQueryRuntimeStatistics","athena:getSession","athena:getSessionStatus","athena:getWorkGroup","athena:listApplicationDPUSizes","athena:listCalculationExecutions","athena:listCapacityReservations","athena:listDataCatalogs","athena:listEngineVersions","athena:listExecutors","athena:listNamedQueries","athena:listNotebookMetadata","athena:listNotebookSessions","athena:listQueryExecutions","athena:listSessions","athena:listTagsForResource","athena:listWorkGroups","auditmanager:getAccountStatus","auditmanager:getDelegations","auditmanager:listAssessmentFrameworks","auditmanager:listAssessmentReports","auditmanager:listAssessments","auditmanager:listControls","auditmanager:listKeywordsForDataSource","auditmanager:listNotifications","autoscaling-plans:describeScalingPlanResources","autoscaling-plans:describeScalingPlans","autoscaling-plans:getScalingPlanResourceForecastData","autoscaling:describeAccountLimits","autoscaling:describeAdjustmentTypes","autoscaling:describeAutoScalingGroups","autoscaling:describeAutoScalingInstances","autoscaling:describeAutoScalingNotificationTypes","autoscaling:describeInstanceRefreshes","autoscaling:describeLaunchConfigurations","autoscaling:describeLifecycleHooks","autoscaling:describeLifecycleHookTypes","autoscaling:describeLoadBalancers","autoscaling:describeLoadBalancerTargetGroups","autoscaling:describeMetricCollectionTypes","autoscaling:describeNotificationConfigurations","autoscaling:describePolicies","autoscaling:describeScalingActivities","autoscaling:describeScalingProcessTypes","autoscaling:describeScheduledActions","autoscaling:describeTags","autoscaling:describeTerminationPolicyTypes","autoscaling:describeTrafficSources","autoscaling:describeWarmPool","autoscaling:getPredictiveScalingForecast","aws-marketplace:describeAgreement","aws-marketplace:describeEntity","aws-marketplace:listEntities","aws-marketplace:searchAgreements","backup-gateway:getBandwidthRateLimitSchedule","backup-gateway:getGateway","backup-gateway:getHypervisor","backup-gateway:getHypervisorPropertyMappings","backup-gateway:getVirtualMachine","backup-gateway:listGateways","backup-gateway:listHypervisors","backup-gateway:listVirtualMachines","backup-gateway:listTagsForResource","backup-search:getSearchJob","backup-search:getSearchResultExportJob","backup-search:listSearchJobBackups","backup-search:listSearchJobs","backup-search:listSearchResultExportJobs","backup-search:listTagsForResource","backup:describeBackupAccessPoint","backup:describeScanJob","backup:describeBackupJob","backup:describeBackupVault","backup:describeCopyJob","backup:describeFramework","backup:describeGlobalSettings","backup:describeProtectedResource","backup:describeRecoveryPoint","backup:describeRegionSettings","backup:describeReportJob","backup:describeReportPlan","backup:describeRestoreJob","backup:getBackupPlan","backup:getBackupPlanFromJSON","backup:getBackupPlanFromTemplate","backup:getBackupSelection","backup:getBackupVaultAccessPolicy","backup:getBackupVaultNotifications","backup:getLegalHold","backup:getPITRMalwareScanResults","backup:getRecoveryPointRestoreMetadata","backup:getRecoveryPointIndexDetails","backup:getRestoreJobMetadata","backup:getRestoreTestingInferredMetadata","backup:getRestoreTestingPlan","backup:getRestoreTestingSelection","backup:getSupportedResourceTypes","backup:getTieringConfiguration","backup:listBackupAccessPoints","backup:listBackupAccessPointsByRecoveryPoint","backup:listBackupAccessPointsByResource","backup:listBackupJobs","backup:listBackupJobSummaries","backup:listBackupPlans","backup:listBackupPlanTemplates","backup:listBackupPlanVersions","backup:listBackupSelections","backup:listBackupVaults","backup:listCopyJobs","backup:listCopyJobSummaries","backup:listFrameworks","backup:listIndexedRecoveryPoints","backup:listLegalHolds","backup:listProtectedResources","backup:listProtectedResourcesByBackupVault","backup:listRecoveryPointsByBackupVault","backup:listRecoveryPointsByLegalHold","backup:listRecoveryPointsByResource","backup:listReportJobs","backup:listReportPlans","backup:listRestoreAccessBackupVaults","backup:listRestoreJobs","backup:listRestoreJobsByProtectedResource","backup:listRestoreJobSummaries","backup:listRestoreTestingPlans","backup:listRestoreTestingSelections","backup:listScanJobSummaries","backup:listScanJobs","backup:listTags","backup:listTieringConfigurations","batch:describeComputeEnvironments","batch:describeConsumableResource","batch:describeJobDefinitions","batch:describeJobQueues","batch:describeJobs","batch:describeSchedulingPolicies","batch:describeServiceEnvironments","batch:describeServiceJob","batch:getJobQueueSnapshot","batch:listConsumableResources","batch:listJobs","batch:listJobsByConsumableResource","batch:listSchedulingPolicies","batch:listServiceJobs","batch:listTagsForResource","bedrock:exportAutomatedReasoningPolicyVersion","bedrock:getAgent","bedrock:getAgentActionGroup","bedrock:getAgentAlias","bedrock:getAgentCollaborator","bedrock:getAgentKnowledgeBase","bedrock:getAgentMemory","bedrock:getAgentVersion","bedrock:getAsyncInvoke","bedrock:getAutomatedReasoningPolicy","bedrock:getAutomatedReasoningPolicyAnnotations","bedrock:getAutomatedReasoningPolicyBuildWorkflow","bedrock:getAutomatedReasoningPolicyBuildWorkflowResultAssets","bedrock:getAutomatedReasoningPolicyNextScenario","bedrock:getAutomatedReasoningPolicyTestCase","bedrock:getAutomatedReasoningPolicyTestResult","bedrock:getBlueprint","bedrock:getCustomModel","bedrock:getCustomModelDeployment","bedrock:getDataAutomationProject","bedrock:getDataAutomationStatus","bedrock:getDataSource","bedrock:getEvaluationJob","bedrock:getExecutionFlowSnapshot","bedrock:getFlow","bedrock:getFlowAlias","bedrock:getFlowExecution","bedrock:getFlowVersion","bedrock:getFoundationModel","bedrock:getFoundationModelAvailability","bedrock:getGuardrail","bedrock:getImportedModel","bedrock:getInferenceProfile","bedrock:getIngestionJob","bedrock:getInvocationStep","bedrock:getKnowledgeBase","bedrock:getMarketplaceModelEndpoint","bedrock:getModelCopyJob","bedrock:getModelCustomizationJob","bedrock:getModelImportJob","bedrock:getModelInvocationJob","bedrock:getModelInvocationLoggingConfiguration","bedrock:getPrompt","bedrock:getPromptRouter","bedrock:getProvisionedModelThroughput","bedrock:getSession","bedrock:getUseCaseForModelAccess","bedrock:listAgentActionGroups","bedrock:listAgentAliases","bedrock:listAgentCollaborators","bedrock:listAgentKnowledgeBases","bedrock:listAgents","bedrock:listAgentVersions","bedrock:listAsyncInvokes","bedrock:listAutomatedReasoningPolicies","bedrock:listAutomatedReasoningPolicyBuildWorkflows","bedrock:listAutomatedReasoningPolicyTestCases","bedrock:listAutomatedReasoningPolicyTestResults","bedrock:listBlueprints","bedrock:listCustomModelDeployments","bedrock:listCustomModels","bedrock:listDataAutomationProjects","bedrock:listDataSources","bedrock:listEnforcedGuardrailsConfiguration","bedrock:listEvaluationJobs","bedrock:listFlowAliases","bedrock:listFlowExecutionEvents","bedrock:listFlowExecutions","bedrock:listFlows","bedrock:listFlowVersions","bedrock:listFoundationModelAgreementOffers","bedrock:listFoundationModels","bedrock:listGuardrails","bedrock:listImportedModels","bedrock:listInferenceProfiles","bedrock:listIngestionJobs","bedrock:listInvocationSteps","bedrock:listKnowledgeBases","bedrock:listKnowledgeBaseDocuments","bedrock:listMarketplaceModelEndpoints","bedrock:listModelCopyJobs","bedrock:listModelCustomizationJobs","bedrock:listModelImportJobs","bedrock:listModelInvocationJobs","bedrock:listPromptRouters","bedrock:listPrompts","bedrock:listProvisionedModelThroughputs","bedrock:listSessions","bedrock-agentcore:getABTest","bedrock-agentcore:getAgentCard","bedrock-agentcore:getAgentRuntime","bedrock-agentcore:getAgentRuntimeEndpoint","bedrock-agentcore:getApiKeyCredentialProvider","bedrock-agentcore:getBatchEvaluation","bedrock-agentcore:getBrowser","bedrock-agentcore:getBrowserProfile","bedrock-agentcore:getBrowserSession","bedrock-agentcore:getCodeInterpreter","bedrock-agentcore:getCodeInterpreterSession","bedrock-agentcore:getConfigurationBundle","bedrock-agentcore:getConfigurationBundleVersion","bedrock-agentcore:getEvaluator","bedrock-agentcore:getEvent","bedrock-agentcore:getGateway","bedrock-agentcore:getGatewayRule","bedrock-agentcore:getGatewayTarget","bedrock-agentcore:getHarness","bedrock-agentcore:getMemory","bedrock-agentcore:getMemoryRecord","bedrock-agentcore:getOauth2CredentialProvider","bedrock-agentcore:getOnlineEvaluationConfig","bedrock-agentcore:getPaymentConnector","bedrock-agentcore:getPaymentCredentialProvider","bedrock-agentcore:getPaymentManager","bedrock-agentcore:getPolicy","bedrock-agentcore:getPolicyEngine","bedrock-agentcore:getPolicyEngineSummary","bedrock-agentcore:getPolicyGeneration","bedrock-agentcore:getPolicyGenerationSummary","bedrock-agentcore:getPolicySummary","bedrock-agentcore:getRecommendation","bedrock-agentcore:getRegistry","bedrock-agentcore:getRegistryRecord","bedrock-agentcore:getResourcePolicy","bedrock-agentcore:getTokenVault","bedrock-agentcore:getWorkloadIdentity","bedrock-agentcore:listABTests","bedrock-agentcore:listActors","bedrock-agentcore:listAgentRuntimeEndpoints","bedrock-agentcore:listAgentRuntimeVersions","bedrock-agentcore:listAgentRuntimes","bedrock-agentcore:listApiKeyCredentialProviders","bedrock-agentcore:listBatchEvaluations","bedrock-agentcore:listBrowserProfiles","bedrock-agentcore:listBrowserSessions","bedrock-agentcore:listBrowsers","bedrock-agentcore:listCodeInterpreterSessions","bedrock-agentcore:listCodeInterpreters","bedrock-agentcore:listConfigurationBundles","bedrock-agentcore:listConfigurationBundleVersions","bedrock-agentcore:listEvaluators","bedrock-agentcore:listEvents","bedrock-agentcore:listGatewayRules","bedrock-agentcore:listGatewayTargets","bedrock-agentcore:listGateways","bedrock-agentcore:listHarnesses","bedrock-agentcore:listMemories","bedrock-agentcore:listMemoryExtractionJobs","bedrock-agentcore:listMemoryRecords","bedrock-agentcore:listOauth2CredentialProviders","bedrock-agentcore:listOnlineEvaluationConfigs","bedrock-agentcore:listPaymentConnectors","bedrock-agentcore:listPaymentCredentialProviders","bedrock-agentcore:listPaymentManagers","bedrock-agentcore:listPolicies","bedrock-agentcore:listPolicyEngines","bedrock-agentcore:listPolicyEngineSummaries","bedrock-agentcore:listPolicyGenerationAssets","bedrock-agentcore:listPolicyGenerations","bedrock-agentcore:listPolicyGenerationSummaries","bedrock-agentcore:listPolicySummaries","bedrock-agentcore:listRecommendations","bedrock-agentcore:listRegistries","bedrock-agentcore:listRegistryRecords","bedrock-agentcore:listSessions","bedrock-agentcore:listWorkloadIdentities","bedrock-agentcore:searchRegistryRecords","braket:getDevice","braket:getJob","braket:getQuantumTask","braket:getServiceLinkedRoleStatus","braket:getUserAgreementStatus","braket:searchDevices","braket:searchJobs","braket:searchQuantumTasks","braket:searchSpendingLimits","budgets:viewBudget","ce:describeCostCategoryDefinition","ce:getCostAndUsage","ce:getCostAndUsageWithResources","ce:getCostForecast","ce:getDimensionValues","ce:getReservationCoverage","ce:getReservationPurchaseRecommendation","ce:getReservationUtilization","ce:getRightsizingRecommendation","ce:getSavingsPlansCoverage","ce:getSavingsPlansPurchaseRecommendation","ce:getSavingsPlansUtilization","ce:getSavingsPlansUtilizationDetails","ce:getTags","ce:listCostCategoryDefinitions","chatbot:describeChimeWebhookConfigurations","chatbot:describeSlackChannelConfigurations","chatbot:describeSlackUserIdentities","chatbot:describeSlackWorkspaces","chatbot:getMicrosoftTeamsChannelConfiguration","chatbot:listMicrosoftTeamsChannelConfigurations","chatbot:listMicrosoftTeamsConfiguredTeams","chatbot:listMicrosoftTeamsUserIdentities","chime:describeAppInstance","chime:getAttendee","chime:getGlobalSettings","chime:getMediaCapturePipeline","chime:getMediaPipeline","chime:getMeeting","chime:getProxySession","chime:getSipMediaApplication","chime:getSipRule","chime:getVoiceConnector","chime:getVoiceConnectorGroup","chime:getVoiceConnectorLoggingConfiguration","chime:listAppInstances","chime:listAttendees","chime:listChannelBans","chime:listChannels","chime:listChannelsModeratedByAppInstanceUser","chime:listMediaCapturePipelines","chime:listMediaPipelines","chime:listMeetings","chime:listSipMediaApplications","chime:listSipRules","chime:listVoiceConnectorGroups","chime:listVoiceConnectors","cleanrooms:batchGetCollaborationAnalysisTemplate","cleanrooms:batchGetSchema","cleanrooms:getAnalysisTemplate","cleanrooms:getCollaboration","cleanrooms:getCollaborationAnalysisTemplate","cleanrooms:getCollaborationConfiguredAudienceModelAssociation","cleanrooms:getCollaborationPrivacyBudgetTemplate","cleanrooms:getConfiguredTable","cleanrooms:getConfiguredTableAnalysisRule","cleanrooms:getConfiguredTableAssociation","cleanrooms:getConfiguredAudienceModelAssociation","cleanrooms:getMembership","cleanrooms:getPrivacyBudgetTemplate","cleanrooms:getSchema","cleanrooms:getSchemaAnalysisRule","cleanrooms:listAnalysisTemplates","cleanrooms:listCollaborationAnalysisTemplates","cleanrooms:listCollaborationConfiguredAudienceModelAssociations","cleanrooms:listCollaborationPrivacyBudgetTemplates","cleanrooms:listCollaborationPrivacyBudgets","cleanrooms:listCollaborations","cleanrooms:listConfiguredAudienceModelAssociations","cleanrooms:listConfiguredTableAssociations","cleanrooms:listConfiguredTables","cleanrooms:listMembers","cleanrooms:listMemberships","cleanrooms:listPrivacyBudgetTemplates","cleanrooms:listPrivacyBudgets","cleanrooms:listProtectedQueries","cleanrooms:listSchemas","cleanrooms:previewPrivacyImpact","cloud9:describeEnvironmentMemberships","cloud9:describeEnvironments","cloud9:listEnvironments","clouddirectory:getDirectory","clouddirectory:listDirectories","cloudformation:batchDescribeTypeConfigurations","cloudformation:describeAccountLimits","cloudformation:describeChangeSet","cloudformation:describeChangeSetHooks","cloudformation:describeEvents","cloudformation:describeGeneratedTemplate","cloudformation:describePublisher","cloudformation:describeResourceScan","cloudformation:describeStackDriftDetectionStatus","cloudformation:describeStackEvents","cloudformation:describeStackInstance","cloudformation:describeStackResource","cloudformation:describeStackResourceDrifts","cloudformation:describeStackResources","cloudformation:describeStacks","cloudformation:describeStackSet","cloudformation:describeStackSetOperation","cloudformation:describeType","cloudformation:describeTypeRegistration","cloudformation:estimateTemplateCost","cloudformation:getGeneratedTemplate","cloudformation:getResource","cloudformation:getStackPolicy","cloudformation:getTemplate","cloudformation:getTemplateSummary","cloudformation:listChangeSets","cloudformation:listExports","cloudformation:listGeneratedTemplates","cloudformation:listImports","cloudformation:listResources","cloudformation:listResourceScanRelatedResources","cloudformation:listResourceScanResources","cloudformation:listResourceScans","cloudformation:listStackInstances","cloudformation:listStackResources","cloudformation:listStacks","cloudformation:listStackSetOperationResults","cloudformation:listStackSetOperations","cloudformation:listStackSets","cloudformation:listTypeRegistrations","cloudformation:listTypes","cloudformation:listTypeVersions","cloudfront:describeConnectionFunction","cloudfront:describeFunction","cloudfront:describeKeyValueStore","cloudfront:getAnycastIpList","cloudfront:getCachePolicy","cloudfront:getCachePolicyConfig","cloudfront:getCloudFrontOriginAccessIdentity","cloudfront:getCloudFrontOriginAccessIdentityConfig","cloudfront:getConnectionFunction","cloudfront:getConnectionGroup","cloudfront:getConnectionGroupByRoutingEndpoint","cloudfront:getContinuousDeploymentPolicy","cloudfront:getContinuousDeploymentPolicyConfig","cloudfront:getDistribution","cloudfront:getDistributionConfig","cloudfront:getDistributionTenant","cloudfront:getDistributionTenantByDomain","cloudfront:getInvalidation","cloudfront:getInvalidationForDistributionTenant","cloudfront:getKeyGroup","cloudfront:getKeyGroupConfig","cloudfront:getManagedCertificateDetails","cloudfront:getMonitoringSubscription","cloudfront:getOriginAccessControl","cloudfront:getOriginAccessControlConfig","cloudfront:getOriginRequestPolicy","cloudfront:getOriginRequestPolicyConfig","cloudfront:getPublicKey","cloudfront:getPublicKeyConfig","cloudfront:getRealtimeLogConfig","cloudfront:getResourcePolicy","cloudfront:getResponseHeadersPolicy","cloudfront:getResponseHeadersPolicyConfig","cloudfront:getStreamingDistribution","cloudfront:getStreamingDistributionConfig","cloudfront:getTrustStore","cloudfront:getVpcOrigin","cloudfront:listAnycastIpLists","cloudfront:listCachePolicies","cloudfront:listCloudFrontOriginAccessIdentities","cloudfront:listConnectionFunctions","cloudfront:listConnectionGroups","cloudfront:listConflictingAliases","cloudfront:listContinuousDeploymentPolicies","cloudfront:listDistributions","cloudfront:listDistributionsByAnycastIpListId","cloudfront:listDistributionsByCachePolicyId","cloudfront:listDistributionsByConnectionFunction","cloudfront:listDistributionsByConnectionMode","cloudfront:listDistributionsByKeyGroup","cloudfront:listDistributionsByOriginRequestPolicyId","cloudfront:listDistributionsByRealtimeLogConfig","cloudfront:listDistributionsByResponseHeadersPolicyId","cloudfront:listDistributionsByTrustStore","cloudfront:listDistributionsByVpcOriginId","cloudfront:listDistributionsByWebACLId","cloudfront:listDistributionTenants","cloudfront:listDistributionTenantsByCustomization","cloudfront:listDomainConflicts","cloudfront:listFunctions","cloudfront:listInvalidations","cloudfront:listInvalidationsForDistributionTenant","cloudfront:listKeyGroups","cloudfront:listKeyValueStores","cloudfront:listOriginAccessControls","cloudfront:listOriginRequestPolicies","cloudfront:listPublicKeys","cloudfront:listRealtimeLogConfigs","cloudfront:listResponseHeadersPolicies","cloudfront:listStreamingDistributions","cloudfront:listTagsForResource","cloudfront:listTrustStores","cloudfront:listVpcOrigins","cloudhsm:describeBackups","cloudhsm:describeClusters","cloudsearch:describeAnalysisSchemes","cloudsearch:describeAvailabilityOptions","cloudsearch:describeDomains","cloudsearch:describeExpressions","cloudsearch:describeIndexFields","cloudsearch:describeScalingParameters","cloudsearch:describeServiceAccessPolicies","cloudsearch:describeSuggesters","cloudsearch:listDomainNames","cloudtrail:describeTrails","cloudtrail:getEventSelectors","cloudtrail:getInsightSelectors","cloudtrail:getTrail","cloudtrail:getTrailStatus","cloudtrail:listEventDataStores","cloudtrail:listPublicKeys","cloudtrail:listTags","cloudtrail:listTrails","cloudtrail:lookupEvents","cloudwatch:describeAlarmHistory","cloudwatch:describeAlarms","cloudwatch:describeAlarmsForMetric","cloudwatch:describeAnomalyDetectors","cloudwatch:describeInsightRules","cloudwatch:getDashboard","cloudwatch:getInsightRuleReport","cloudwatch:getMetricData","cloudwatch:getMetricStatistics","cloudwatch:getMetricStream","cloudWatch:getMetricWidgetImage","cloudwatch:listDashboards","cloudwatch:listManagedInsightRules","cloudwatch:listMetrics","cloudwatch:listMetricStreams","cloudwatch:getAlarmMuteRule","cloudwatch:listAlarmMuteRules","codeartifact:describeDomain","codeartifact:describePackageVersion","codeartifact:describeRepository","codeartifact:getDomainPermissionsPolicy","codeartifact:getRepositoryEndpoint","codeartifact:getRepositoryPermissionsPolicy","codeartifact:listDomains","codeartifact:listPackages","codeartifact:listPackageVersionAssets","codeartifact:listPackageVersions","codeartifact:listRepositories","codeartifact:listRepositoriesInDomain","codebuild:batchGetBuildBatches","codebuild:batchGetBuilds","codebuild:batchGetFleets","codebuild:batchGetProjects","codebuild:listBuildBatches","codebuild:listBuildBatchesForProject","codebuild:listBuilds","codebuild:listBuildsForProject","codebuild:listCuratedEnvironmentImages","codebuild:listFleets","codebuild:listProjects","codebuild:listSourceCredentials","codecommit:batchGetRepositories","codecommit:getBranch","codecommit:getRepository","codecommit:getRepositoryTriggers","codecommit:listBranches","codecommit:listRepositories","codeconnections:getConnection","codeconnections:getHost","codeconnections:getRepositoryLink","codeconnections:getRepositorySyncStatus","codeconnections:getResourceSyncStatus","codeconnections:getSyncBlockerSummary","codeconnections:getSyncConfiguration","codeconnections:listConnections","codeconnections:listHosts","codeconnections:listRepositoryLinks","codeconnections:listRepositorySyncDefinitions","codeconnections:listSyncConfigurations","codedeploy:batchGetApplicationRevisions","codedeploy:batchGetApplications","codedeploy:batchGetDeploymentGroups","codedeploy:batchGetDeploymentInstances","codedeploy:batchGetDeployments","codedeploy:batchGetDeploymentTargets","codedeploy:batchGetOnPremisesInstances","codedeploy:getApplication","codedeploy:getApplicationRevision","codedeploy:getDeployment","codedeploy:getDeploymentConfig","codedeploy:getDeploymentGroup","codedeploy:getDeploymentInstance","codedeploy:getDeploymentTarget","codedeploy:getOnPremisesInstance","codedeploy:listApplicationRevisions","codedeploy:listApplications","codedeploy:listDeploymentConfigs","codedeploy:listDeploymentGroups","codedeploy:listDeploymentInstances","codedeploy:listDeployments","codedeploy:listDeploymentTargets","codedeploy:listGitHubAccountTokenNames","codedeploy:listOnPremisesInstances","codepipeline:getJobDetails","codepipeline:getPipeline","codepipeline:getPipelineExecution","codepipeline:getPipelineState","codepipeline:listActionExecutions","codepipeline:listActionTypes","codepipeline:listPipelineExecutions","codepipeline:listPipelines","codepipeline:listRuleExecutions","codepipeline:listWebhooks","codestar-connections:getConnection","codestar-connections:getHost","codestar-connections:listConnections","codestar-connections:listHosts","codestar:describeProject","codestar:listProjects","codestar:listResources","codestar:listTeamMembers","codestar:listUserProfiles","cognito-identity:describeIdentity","cognito-identity:describeIdentityPool","cognito-identity:getIdentityPoolAnalytics","cognito-identity:getIdentityPoolDailyAnalytics","cognito-identity:getIdentityPoolRoles","cognito-identity:getIdentityProviderDailyAnalytics","cognito-identity:listIdentities","cognito-identity:listIdentityPools","cognito-identity:lookupDeveloperIdentity","cognito-idp:describeIdentityProvider","cognito-idp:describeManagedLoginBranding","cognito-idp:describeManagedLoginBrandingByClient","cognito-idp:describeResourceServer","cognito-idp:describeRiskConfiguration","cognito-idp:describeUserImportJob","cognito-idp:describeUserPool","cognito-idp:describeUserPoolClient","cognito-idp:describeUserPoolDomain","cognito-idp:getCSVHeader","cognito-idp:getGroup","cognito-idp:getLogDeliveryConfiguration","cognito-idp:getUICustomization","cognito-idp:getUserPoolMfaConfig","cognito-idp:getWebACLForResource","cognito-idp:listGroups","cognito-idp:listIdentityProviders","cognito-idp:listResourceServers","cognito-idp:listResourcesForWebACL","cognito-idp:listUserImportJobs","cognito-idp:listUserPoolClients","cognito-idp:listUserPoolReplicas","cognito-idp:listUserPools","cognito-sync:describeDataset","cognito-sync:describeIdentityPoolUsage","cognito-sync:describeIdentityUsage","cognito-sync:getCognitoEvents","cognito-sync:getIdentityPoolConfiguration","cognito-sync:listDatasets","cognito-sync:listIdentityPoolUsage","comprehend:describeDocumentClassificationJob","comprehend:describeDocumentClassifier","comprehend:describeDominantLanguageDetectionJob","comprehend:describeEndpoint","comprehend:describeEntitiesDetectionJob","comprehend:describeEntityRecognizer","comprehend:describeEventsDetectionJob","comprehend:describeFlywheel","comprehend:describeFlywheelIteration","comprehend:describeKeyPhrasesDetectionJob","comprehend:describePiiEntitiesDetectionJob","comprehend:describeSentimentDetectionJob","comprehend:describeTargetedSentimentDetectionJob","comprehend:describeTopicsDetectionJob","comprehend:listDocumentClassificationJobs","comprehend:listDocumentClassifiers","comprehend:listDominantLanguageDetectionJobs","comprehend:listEndpoints","comprehend:listEntitiesDetectionJobs","comprehend:listEntityRecognizers","comprehend:listEventsDetectionJobs","comprehend:listFlywheelIterationHistory","comprehend:listFlywheels","comprehend:listKeyPhrasesDetectionJobs","comprehend:listPiiEntitiesDetectionJobs","comprehend:listSentimentDetectionJobs","comprehend:listTargetedSentimentDetectionJobs","comprehend:listTopicsDetectionJobs","compute-optimizer:getAutoScalingGroupRecommendations","compute-optimizer:getEBSVolumeRecommendations","compute-optimizer:getEC2InstanceRecommendations","compute-optimizer:getEC2RecommendationProjectedMetrics","compute-optimizer:getECSServiceRecommendationProjectedMetrics","compute-optimizer:getECSServiceRecommendations","compute-optimizer:getEnrollmentStatus","compute-optimizer:getIdleRecommendations","compute-optimizer:getRDSDatabaseRecommendationProjectedMetrics","compute-optimizer:getRDSDatabaseRecommendations","compute-optimizer:getRecommendationSummaries","config:batchGetAggregateResourceConfig","config:batchGetResourceConfig","config:describeAggregateComplianceByConfigRules","config:describeAggregationAuthorizations","config:describeComplianceByConfigRule","config:describeComplianceByResource","config:describeConfigRuleEvaluationStatus","config:describeConfigRules","config:describeConfigurationAggregators","config:describeConfigurationAggregatorSourcesStatus","config:describeConfigurationRecorders","config:describeConfigurationRecorderStatus","config:describeConformancePackCompliance","config:describeConformancePacks","config:describeConformancePackStatus","config:describeDeliveryChannels","config:describeDeliveryChannelStatus","config:describeOrganizationConfigRules","config:describeOrganizationConfigRuleStatuses","config:describeOrganizationConformancePacks","config:describeOrganizationConformancePackStatuses","config:describePendingAggregationRequests","config:describeRemediationConfigurations","config:describeRemediationExceptions","config:describeRemediationExecutionStatus","config:describeRetentionConfigurations","config:getAggregateComplianceDetailsByConfigRule","config:getAggregateConfigRuleComplianceSummary","config:getAggregateDiscoveredResourceCounts","config:getAggregateResourceConfig","config:getComplianceDetailsByConfigRule","config:getComplianceDetailsByResource","config:getComplianceSummaryByConfigRule","config:getComplianceSummaryByResourceType","config:getConformancePackComplianceDetails","config:getConformancePackComplianceSummary","config:getDiscoveredResourceCounts","config:getOrganizationConfigRuleDetailedStatus","config:getOrganizationConformancePackDetailedStatus","config:getResourceConfigHistory","config:listAggregateDiscoveredResources","config:listDiscoveredResources","config:listTagsForResource","config:selectAggregateResourceConfig","config:selectResourceConfig","connect:batchGetFlowAssociation","connect:describeContact","connect:describeContactFlow","connect:describeInstance","connect:describeInstanceAttribute","connect:describePhoneNumber","connect:describeQueue","connect:describeQuickConnect","connect:describeRoutingProfile","connect:describeUser","connect:describeUserHierarchyStructure","connect:getCurrentMetricData","connect:getMetricData","connect:getMetricDataV2","connect:listContactEvaluations","connect:listEvaluationForms","connect:listEvaluationFormVersions","connect:listInstanceAttributes","connect:listInstances","connect:listInstanceStorageConfigs","connect:listPhoneNumbersV2","connect:listQueueQuickConnects","connect:listQueues","connect:listQuickConnects","connect:listRoutingProfileQueues","connect:listRoutingProfiles","connect:listSecurityProfiles","connect:listSecurityProfilePermissions","connect:listUsers","connect:listViews","connect:listViewVersions","connect:searchQueues","connect:searchRoutingProfiles","connect:searchUsers","connect-campaigns:describeCampaign","controlcatalog:getControl","controltower:describeAccountFactoryConfig","controltower:describeCoreService","controltower:describeGuardrail","controltower:describeGuardrailForTarget","controltower:describeManagedAccount","controltower:describeSingleSignOn","controltower:getAvailableUpdates","controltower:getBaselineOperation","controltower:getControlOperation","controltower:getEnabledBaseline","controltower:getEnabledControl","controltower:getHomeRegion","controltower:getLandingZone","controltower:getLandingZoneStatus","controltower:listBaselines","controltower:listDirectoryGroups","controltower:listEnabledControls","controltower:listEnabledBaselines","controltower:listGuardrailsForTarget","controltower:listGuardrailViolations","controltower:listLandingZones","controltower:listManagedAccounts","controltower:listManagedAccountsForGuardrail","controltower:listManagedAccountsForParent","controltower:listManagedOrganizationalUnits","controltower:listManagedOrganizationalUnitsForGuardrail","cost-optimization-hub:getPreferences","cost-optimization-hub:getRecommendation","cost-optimization-hub:listEfficiencyMetrics","cost-optimization-hub:listEnrollmentStatuses","cost-optimization-hub:listRecommendations","cost-optimization-hub:listRecommendationSummaries","databrew:describeDataset","databrew:describeJob","databrew:describeProject","databrew:describeRecipe","databrew:listDatasets","databrew:listJobRuns","databrew:listJobs","databrew:listProjects","databrew:listRecipes","databrew:listRecipeVersions","databrew:listTagsForResource","datapipeline:describeObjects","datapipeline:describePipelines","datapipeline:getPipelineDefinition","datapipeline:listPipelines","datapipeline:queryObjects","datasync:describeAgent","datasync:describeLocationAzureBlob","datasync:describeLocationEfs","datasync:describeLocationFsxLustre","datasync:describeLocationFsxOntap","datasync:describeLocationFsxOpenZfs","datasync:describeLocationFsxWindows","datasync:describeLocationHdfs","datasync:describeLocationNfs","datasync:describeLocationObjectStorage","datasync:describeLocationS3","datasync:describeLocationSmb","datasync:describeTask","datasync:describeTaskExecution","datasync:listAgents","datasync:listLocations","datasync:listTaskExecutions","datasync:listTasks","datazone:getAsset","datazone:getAssetType","datazone:getDataSource","datazone:getDataSourceRun","datazone:getDomain","datazone:getEnvironment","datazone:getEnvironmentBlueprint","datazone:getEnvironmentBlueprintConfiguration","datazone:getEnvironmentProfile","datazone:getFormType","datazone:getGlossary","datazone:getGlossaryTerm","datazone:getGroupProfile","datazone:getListing","datazone:getMetadataGenerationRun","datazone:getProject","datazone:getSubscription","datazone:getSubscriptionGrant","datazone:getSubscriptionRequestDetails","datazone:getSubscriptionTarget","datazone:getUserProfile","datazone:listAssetRevisions","datazone:listDataSourceRunActivities","datazone:listDataSourceRuns","datazone:listDataSources","datazone:listDomains","datazone:listEnvironmentBlueprintConfigurations","datazone:listEnvironmentBlueprints","datazone:listEnvironmentProfiles","datazone:listEnvironments","datazone:listMetadataGenerationRuns","datazone:listProjectMemberships","datazone:listProjects","datazone:listSubscriptionGrants","datazone:listSubscriptionRequests","datazone:listSubscriptions","datazone:listSubscriptionTargets","datazone:getAssetFilter","datazone:getDomainUnit","datazone:getLineageNode","datazone:getProjectProfile","datazone:getRule","datazone:listAssetFilters","datazone:listConnections","datazone:listDomainUnitsForParent","datazone:listEntityOwners","datazone:listLineageNodeHistory","datazone:listNotifications","datazone:listPolicyGrants","datazone:listProjectProfiles","datazone:listRules","datazone:searchGroupProfiles","datazone:searchUserProfiles","dax:describeClusters","dax:describeDefaultParameters","dax:describeEvents","dax:describeParameterGroups","dax:describeParameters","dax:describeSubnetGroups","deadline:listAvailableMeteredProducts","deadline:listBudgets","deadline:listFarmMembers","deadline:listFarms","deadline:listFleetMembers","deadline:listFleets","deadline:listJobMembers","deadline:listJobs","deadline:listLicenseEndpoints","deadline:listMeteredProducts","deadline:listMonitors","deadline:listQueueEnvironments","deadline:listQueueFleetAssociations","deadline:listQueueMembers","deadline:listQueues","deadline:listStorageProfiles","deadline:listWorkers","detective:getMembers","detective:listGraphs","detective:listInvitations","detective:listMembers","devicefarm:getAccountSettings","devicefarm:getDevice","devicefarm:getDevicePool","devicefarm:getDevicePoolCompatibility","devicefarm:getJob","devicefarm:getOfferingStatus","devicefarm:getProject","devicefarm:getRemoteAccessSession","devicefarm:getRun","devicefarm:getSuite","devicefarm:getTest","devicefarm:getTestGridProject","devicefarm:getTestGridSession","devicefarm:getUpload","devicefarm:getVPCEConfiguration","devicefarm:listArtifacts","devicefarm:listDevicePools","devicefarm:listDevices","devicefarm:listJobs","devicefarm:listNetworkProfiles","devicefarm:listOfferingPromotions","devicefarm:listOfferingTransactions","devicefarm:listProjects","devicefarm:listRemoteAccessSessions","devicefarm:listRuns","devicefarm:listSamples","devicefarm:listSuites","devicefarm:listTestGridProjects","devicefarm:listTestGridSessionActions","devicefarm:listTestGridSessionArtifacts","devicefarm:listTestGridSessions","devicefarm:listTests","devicefarm:listUniqueProblems","devicefarm:listUploads","devicefarm:listVPCEConfigurations","directconnect:describeConnectionLoa","directconnect:describeConnections","directconnect:describeConnectionsOnInterconnect","directconnect:describeCustomerMetadata","directconnect:describeDirectConnectGatewayAssociationProposals","directconnect:describeDirectConnectGatewayAssociations","directconnect:describeDirectConnectGatewayAttachments","directconnect:describeDirectConnectGateways","directconnect:describeHostedConnections","directconnect:describeInterconnectLoa","directconnect:describeInterconnects","directconnect:describeLags","directconnect:describeLoa","directconnect:describeLocations","directconnect:describeRouterConfiguration","directconnect:describeVirtualGateways","directconnect:describeVirtualInterfaces","directconnect:listVirtualInterfaceTestHistory","dlm:getLifecyclePolicies","dlm:getLifecyclePolicy","dms:describeAccountAttributes","dms:describeApplicableIndividualAssessments","dms:describeCertificates","dms:describeConnections","dms:describeEndpoints","dms:describeEndpointSettings","dms:describeEndpointTypes","dms:describeEventCategories","dms:describeEvents","dms:describeEventSubscriptions","dms:describeFleetAdvisorCollectors","dms:describeFleetAdvisorDatabases","dms:describeFleetAdvisorLsaAnalysis","dms:describeFleetAdvisorSchemaObjectSummary","dms:describeFleetAdvisorSchemas","dms:describeOrderableReplicationInstances","dms:describePendingMaintenanceActions","dms:describeRefreshSchemasStatus","dms:describeReplicationConfigs","dms:describeReplicationInstances","dms:describeReplicationInstanceTaskLogs","dms:describeReplications","dms:describeReplicationSubnetGroups","dms:describeReplicationTableStatistics","dms:describeReplicationTaskAssessmentResults","dms:describeReplicationTaskAssessmentRuns","dms:describeReplicationTaskIndividualAssessments","dms:describeReplicationTasks","dms:describeSchemas","dms:describeTableStatistics","docdb-elastic:getCluster","docdb-elastic:getClusterSnapshot","docdb-elastic:listClusters","docdb-elastic:listClusterSnapshots","drs:describeJobLogItems","drs:describeJobs","drs:describeLaunchConfigurationTemplates","drs:describeRecoveryInstances","drs:describeRecoverySnapshots","drs:describeReplicationConfigurationTemplates","drs:describeSourceNetworks","drs:describeSourceServers","drs:getLaunchConfiguration","drs:getReplicationConfiguration","drs:listExtensibleSourceServers","drs:listLaunchActions","drs:listStagingAccounts","ds:describeADAssessment","ds:describeCAEnrollmentPolicy","ds:describeCertificate","ds:describeClientAuthenticationSettings","ds:describeConditionalForwarders","ds:describeDirectories","ds:describeDirectoryDataAccess","ds:describeDomainControllers","ds:describeEventTopics","ds:describeHybridADUpdate","ds:describeLDAPSSettings","ds:describeRegions","ds:describeSettings","ds:describeSharedDirectories","ds:describeSnapshots","ds:describeTrusts","ds:describeUpdateDirectory","ds:getDirectoryLimits","ds:getSnapshotLimits","ds:listADAssessments","ds:listCertificates","ds:listIpRoutes","ds:listLogSubscriptions","ds:listSchemaExtensions","ds:listTagsForResource","dsql:getCluster","dsql:getVpcEndpointServiceName","dsql:listClusters","dynamodb:describeBackup","dynamodb:describeContinuousBackups","dynamodb:describeContributorInsights","dynamodb:describeExport","dynamodb:describeGlobalTable","dynamodb:describeGlobalTableSettings","dynamodb:describeImport","dynamodb:describeKinesisStreamingDestination","dynamodb:describeLimits","dynamodb:describeStream","dynamodb:describeTable","dynamodb:describeTableReplicaAutoScaling","dynamodb:describeTimeToLive","dynamodb:getResourcePolicy","dynamodb:listBackups","dynamodb:listContributorInsights","dynamodb:listExports","dynamodb:listGlobalTables","dynamodb:listImports","dynamodb:listStreams","dynamodb:listTables","dynamodb:listTagsOfResource","ebs:listChangedBlocks","ebs:listSnapshotBlocks","ec2:describeAccountAttributes","ec2:describeAddresses","ec2:describeAddressesAttribute","ec2:describeAddressTransfers","ec2:describeAggregateIdFormat","ec2:describeApplicationStatus","ec2:describeApplicationStatusChecks","ec2:describeApplicationStatusCheckAssociations","ec2:describeAvailabilityZones","ec2:describeBundleTasks","ec2:describeByoipCidrs","ec2:describeCapacityBlockOfferings","ec2:describeCapacityBlocks","ec2:describeCapacityBlockStatus","ec2:describeCapacityManagerDataExports","ec2:describeCapacityReservationFleets","ec2:describeCapacityReservations","ec2:describeCapacityReservationTopology","ec2:describeCarrierGateways","ec2:describeClassicLinkInstances","ec2:describeClientVpnAuthorizationRules","ec2:describeClientVpnConnections","ec2:describeClientVpnEndpoints","ec2:describeClientVpnRoutes","ec2:describeClientVpnTargetNetworks","ec2:describeCoipPools","ec2:describeConversionTasks","ec2:describeCustomerGateways","ec2:describeDhcpOptions","ec2:describeEgressOnlyInternetGateways","ec2:describeExportImageTasks","ec2:describeExportTasks","ec2:describeFastLaunchImages","ec2:describeFastSnapshotRestores","ec2:describeFleetHistory","ec2:describeFleetInstances","ec2:describeFleets","ec2:describeFlowLogs","ec2:describeFpgaImageAttribute","ec2:describeFpgaImages","ec2:describeHostReservationOfferings","ec2:describeHostReservations","ec2:describeHosts","ec2:describeIamInstanceProfileAssociations","ec2:describeIdentityIdFormat","ec2:describeIdFormat","ec2:describeImageAttribute","ec2:describeImages","ec2:describeImportImageTasks","ec2:describeImportSnapshotTasks","ec2:describeInstanceAttribute","ec2:describeInstanceConnectEndpoints","ec2:describeInstanceCreditSpecifications","ec2:describeInstanceEventNotificationAttributes","ec2:describeInstanceEventWindows","ec2:describeInstances","ec2:describeInstanceStatus","ec2:describeInstanceTypeOfferings","ec2:describeInstanceTypes","ec2:describeInstanceTopology","ec2:describeInternetGateways","ec2:describeIpamByoasn","ec2:describeIpamExternalResourceVerificationTokens","ec2:describeIpamPools","ec2:describeIpamResourceDiscoveries","ec2:describeIpamResourceDiscoveryAssociations","ec2:describeIpams","ec2:describeIpamScopes","ec2:describeIpv6Pools","ec2:describeKeyPairs","ec2:describeLaunchTemplates","ec2:describeLaunchTemplateVersions","ec2:describeLocalGatewayRouteTables","ec2:describeLocalGatewayRouteTableVirtualInterfaceGroupAssociations","ec2:describeLocalGatewayRouteTableVpcAssociations","ec2:describeLocalGateways","ec2:describeLocalGatewayVirtualInterfaceGroups","ec2:describeLocalGatewayVirtualInterfaces","ec2:describeManagedPrefixLists","ec2:describeMovingAddresses","ec2:describeNatGateways","ec2:describeNetworkAcls","ec2:describeNetworkInsightsAccessScopeAnalyses","ec2:describeNetworkInsightsAccessScopes","ec2:describeNetworkInsightsAnalyses","ec2:describeNetworkInsightsPaths","ec2:describeNetworkInterfaceAttribute","ec2:describeNetworkInterfaces","ec2:describeOutpostLags","ec2:describePlacementGroups","ec2:describePrefixLists","ec2:describePrincipalIdFormat","ec2:describePublicIpv4Pools","ec2:describeRegions","ec2:describeReplaceRootVolumeTasks","ec2:describeReservedInstances","ec2:describeReservedInstancesListings","ec2:describeReservedInstancesModifications","ec2:describeReservedInstancesOfferings","ec2:describeRouteServerEndpoints","ec2:describeRouteServerPeers","ec2:describeRouteServers","ec2:describeRouteTables","ec2:describeScheduledInstanceAvailability","ec2:describeScheduledInstances","ec2:describeSecurityGroupReferences","ec2:describeSecurityGroupRules","ec2:describeSecurityGroups","ec2:describeServiceLinkVirtualInterfaces","ec2:describeSnapshotAttribute","ec2:describeSnapshots","ec2:describeSnapshotTierStatus","ec2:describeSpotDatafeedSubscription","ec2:describeSpotFleetInstances","ec2:describeSpotFleetRequestHistory","ec2:describeSpotFleetRequests","ec2:describeSpotInstanceRequests","ec2:describeSpotPriceHistory","ec2:describeStaleSecurityGroups","ec2:describeStoreImageTasks","ec2:describeSubnets","ec2:describeTags","ec2:describeTrafficMirrorFilterRules","ec2:describeTrafficMirrorFilters","ec2:describeTrafficMirrorSessions","ec2:describeTrafficMirrorTargets","ec2:describeTransitGatewayAttachments","ec2:describeTransitGatewayConnectPeers","ec2:describeTransitGatewayConnects","ec2:describeTransitGatewayMeteringPolicies","ec2:describeTransitGatewayMulticastDomains","ec2:describeTransitGatewayPeeringAttachments","ec2:describeTransitGatewayPolicyTables","ec2:describeTransitGatewayRouteTableAnnouncements","ec2:describeTransitGatewayRouteTables","ec2:describeTransitGateways","ec2:describeTransitGatewayVpcAttachments","ec2:describeVerifiedAccessEndpoints","ec2:describeVerifiedAccessGroups","ec2:describeVerifiedAccessInstanceLoggingConfigurations","ec2:describeVerifiedAccessInstances","ec2:describeVerifiedAccessInstanceWebAclAssociations","ec2:describeVerifiedAccessTrustProviders","ec2:describeVolumeAttribute","ec2:describeVolumes","ec2:describeVolumesModifications","ec2:describeVolumeStatus","ec2:describeVpcAttribute"],"Resource":["*"]},{"Sid":"AWSSupportActionsGroup2","Effect":"Allow","Action":["ec2:describeVpcBlockPublicAccessExclusions","ec2:describeVpcBlockPublicAccessOptions","ec2:describeVpcClassicLink","ec2:describeVpcClassicLinkDnsSupport","ec2:describeVpcEndpointAssociations","ec2:describeVpcEndpointConnectionNotifications","ec2:describeVpcEndpointConnections","ec2:describeVpcEndpoints","ec2:describeVpcEndpointServiceConfigurations","ec2:describeVpcEndpointServicePermissions","ec2:describeVpcEndpointServices","ec2:describeVpcEncryptionControls","ec2:describeVpcPeeringConnections","ec2:describeVpcs","ec2:describeVpnConnections","ec2:describeVpnGateways","ec2:getAssociatedEnclaveCertificateIamRoles","ec2:getAssociatedIpv6PoolCidrs","ec2:getCapacityManagerAttributes","ec2:getCapacityManagerMetricData","ec2:getCapacityManagerMetricDimensions","ec2:getCapacityReservationUsage","ec2:getCoipPoolUsage","ec2:getConsoleOutput","ec2:getConsoleScreenshot","ec2:getDefaultCreditSpecification","ec2:getEbsDefaultKmsKeyId","ec2:getEbsEncryptionByDefault","ec2:getGroupsForCapacityReservation","ec2:getHostReservationPurchasePreview","ec2:getImageBlockPublicAccessState","ec2:getInstanceTypesFromInstanceRequirements","ec2:getIpamAddressHistory","ec2:getIpamDiscoveredAccounts","ec2:getIpamDiscoveredPublicAddresses","ec2:getIpamDiscoveredResourceCidrs","ec2:getIpamPoolAllocations","ec2:getIpamPoolCidrs","ec2:getIpamResourceCidrs","ec2:getLaunchTemplateData","ec2:getManagedPrefixListAssociations","ec2:getManagedPrefixListEntries","ec2:getNetworkInsightsAccessScopeContent","ec2:getReservedInstancesExchangeQuote","ec2:getRouteServerAssociations","ec2:getRouteServerPropagations","ec2:getRouteServerRoutingDatabase","ec2:getSerialConsoleAccessStatus","ec2:getSpotPlacementScores","ec2:getSubnetCidrReservations","ec2:getTransitGatewayAttachmentPropagations","ec2:getTransitGatewayMulticastDomainAssociations","ec2:getTransitGatewayPolicyTableAssociations","ec2:getTransitGatewayPolicyTableEntries","ec2:getTransitGatewayPrefixListReferences","ec2:getTransitGatewayRouteTableAssociations","ec2:getTransitGatewayRouteTablePropagations","ec2:getVerifiedAccessEndpointPolicy","ec2:getVerifiedAccessGroupPolicy","ec2:getVpcResourcesBlockingEncryptionEnforcement","ec2:getVpnTunnelReplacementStatus","ec2:listImagesInRecycleBin","ec2:listSnapshotsInRecycleBin","ec2:listVolumesInRecycleBin","ec2:searchLocalGatewayRoutes","ec2:searchTransitGatewayMulticastGroups","ec2:searchTransitGatewayRoutes","ecr-public:describeImages","ecr-public:describeImageTags","ecr-public:describeRegistries","ecr-public:describeRepositories","ecr-public:getRegistryCatalogData","ecr-public:getRepositoryCatalogData","ecr-public:getRepositoryPolicy","ecr-public:listTagsForResource","ecr:batchCheckLayerAvailability","ecr:batchGetImage","ecr:batchGetRepositoryScanningConfiguration","ecr:describeImageReplicationStatus","ecr:describeImages","ecr:describeImageSigningStatus","ecr:describePullThroughCacheRules","ecr:describeRegistry","ecr:describeRepositories","ecr:describeRepositoryCreationTemplates","ecr:getAccountSetting","ecr:getAuthorizationToken","ecr:getDownloadUrlForLayer","ecr:getLifecyclePolicy","ecr:getLifecyclePolicyPreview","ecr:getRegistryPolicy","ecr:getRegistryScanningConfiguration","ecr:getRepositoryPolicy","ecr:getSigningConfiguration","ecr:listImages","ecr:listPullTimeUpdateExclusions","ecr:listTagsForResource","ecs:describeCapacityProviders","ecs:describeClusters","ecs:describeContainerInstances","ecs:describeDaemon","ecs:describeDaemonDeployments","ecs:describeDaemonTaskDefinition","ecs:describeExpressGatewayService","ecs:describeServiceDeployments","ecs:describeServiceRevisions","ecs:describeServices","ecs:describeTaskDefinition","ecs:describeTasks","ecs:describeTaskSets","ecs:getTaskProtection","ecs:listAccountSettings","ecs:listAttributes","ecs:listClusters","ecs:listContainerInstances","ecs:listDaemons","ecs:listDaemonTaskDefinitions","ecs:listServiceDeployments","ecs:listServices","ecs:listServicesByNamespace","ecs:listTagsForResource","ecs:listTaskDefinitionFamilies","ecs:listTaskDefinitions","ecs:listTasks","eks:describeAccessEntry","eks:describeAddon","eks:describeAddonConfiguration","eks:describeAddonVersions","eks:describeCapability","eks:describeCluster","eks:describeClusterVersions","eks:describeEksAnywhereSubscription","eks:describeFargateProfile","eks:describeIdentityProviderConfig","eks:describeInsight","eks:describeNodegroup","eks:describePodIdentityAssociation","eks:describeUpdate","eks:listAccessEntries","eks:listAccessPolicies","eks:listAddons","eks:listAssociatedAccessPolicies","eks:listCapabilities","eks:listClusters","eks:listEksAnywhereSubscriptions","eks:listFargateProfiles","eks:listIdentityProviderConfigs","eks:listInsights","eks:listNodegroups","eks:listPodIdentityAssociations","eks:listUpdates","elasticache:describeCacheClusters","elasticache:describeCacheEngineVersions","elasticache:describeCacheParameterGroups","elasticache:describeCacheParameters","elasticache:describeCacheSecurityGroups","elasticache:describeCacheSubnetGroups","elasticache:describeEngineDefaultParameters","elasticache:describeEvents","elasticache:describeGlobalReplicationGroups","elasticache:describeReplicationGroups","elasticache:describeReservedCacheNodes","elasticache:describeReservedCacheNodesOfferings","elasticache:describeServerlessCaches","elasticache:describeServerlessCacheSnapshots","elasticache:describeServiceUpdates","elasticache:describeSnapshots","elasticache:describeUpdateActions","elasticache:describeUserGroups","elasticache:describeUsers","elasticache:listAllowedNodeTypeModifications","elasticache:listTagsForResource","elasticbeanstalk:checkDNSAvailability","elasticbeanstalk:describeAccountAttributes","elasticbeanstalk:describeApplications","elasticbeanstalk:describeApplicationVersions","elasticbeanstalk:describeConfigurationOptions","elasticbeanstalk:describeEnvironmentHealth","elasticbeanstalk:describeEnvironmentManagedActionHistory","elasticbeanstalk:describeEnvironmentManagedActions","elasticbeanstalk:describeEnvironmentResources","elasticbeanstalk:describeEnvironments","elasticbeanstalk:describeEvents","elasticbeanstalk:describeInstancesHealth","elasticbeanstalk:describePlatformVersion","elasticbeanstalk:listAvailableSolutionStacks","elasticbeanstalk:listPlatformBranches","elasticbeanstalk:listPlatformVersions","elasticbeanstalk:listTagsForResource","elasticbeanstalk:describeConfigurationSettings","elasticbeanstalk:validateConfigurationSettings","elasticfilesystem:describeAccessPoints","elasticfilesystem:describeBackupPolicy","elasticfilesystem:describeFileSystemPolicy","elasticfilesystem:describeFileSystems","elasticfilesystem:describeLifecycleConfiguration","elasticfilesystem:describeMountTargets","elasticfilesystem:describeMountTargetSecurityGroups","elasticfilesystem:describeReplicationConfigurations","elasticfilesystem:describeTags","elasticfilesystem:listTagsForResource","elasticloadbalancing:describeAccountLimits","elasticloadbalancing:describeInstanceHealth","elasticloadbalancing:describeListenerCertificates","elasticloadbalancing:describeListeners","elasticloadbalancing:describeLoadBalancerAttributes","elasticloadbalancing:describeLoadBalancerPolicies","elasticloadbalancing:describeLoadBalancerPolicyTypes","elasticloadbalancing:describeLoadBalancers","elasticloadbalancing:describeRules","elasticloadbalancing:describeSSLPolicies","elasticloadbalancing:describeTags","elasticloadbalancing:describeTargetGroupAttributes","elasticloadbalancing:describeTargetGroups","elasticloadbalancing:describeTargetHealth","elasticloadbalancing:describeTrustStoreAssociations","elasticloadbalancing:describeTrustStoreRevocations","elasticloadbalancing:describeTrustStores","elasticmapreduce:describeCluster","elasticmapreduce:describeNotebookExecution","elasticmapreduce:describePersistentAppUI","elasticmapreduce:describeReleaseLabel","elasticmapreduce:describeSecurityConfiguration","elasticmapreduce:describeStep","elasticmapreduce:describeStudio","elasticmapreduce:getAutoTerminationPolicy","elasticmapreduce:getBlockPublicAccessConfiguration","elasticmapreduce:getManagedScalingPolicy","elasticmapreduce:getStudioSessionMapping","elasticmapreduce:listBootstrapActions","elasticmapreduce:listClusters","elasticmapreduce:listInstanceFleets","elasticmapreduce:listInstanceGroups","elasticmapreduce:listInstances","elasticmapreduce:listNotebookExecutions","elasticmapreduce:listReleaseLabels","elasticmapreduce:listSecurityConfigurations","elasticmapreduce:listSteps","elasticmapreduce:listStudios","elasticmapreduce:listStudioSessionMappings","elasticmapreduce:listSupportedInstanceTypes","emr-containers:describeJobRun","emr-containers:describeJobTemplate","emr-containers:describeManagedEndpoint","emr-containers:describeVirtualCluster","emr-containers:listJobRuns","emr-containers:listJobTemplates","emr-containers:listManagedEndpoints","emr-containers:listVirtualClusters","emr-serverless:getApplication","emr-serverless:getJobRun","emr-serverless:listApplications","emr-serverless:listJobRunAttempts","emr-serverless:listJobRuns","entityresolution:getIdMappingJob","entityresolution:getIdMappingWorkflow","entityresolution:getMatchingJob","entityresolution:getMatchingWorkflow","entityresolution:getProviderService","entityresolution:getSchemaMapping","entityresolution:listIdMappingJobs","entityresolution:listIdMappingWorkflows","entityresolution:listMatchingJobs","entityresolution:listMatchingWorkflows","entityresolution:listProviderServices","entityresolution:listSchemaMappings","es:describeDomain","es:describeDomainAutoTunes","es:describeDomainChangeProgress","es:describeDomainConfig","es:describeDomainHealth","es:describeDomainNodes","es:describeDomains","es:describeDryRunProgress","es:describeElasticsearchDomain","es:describeElasticsearchDomainConfig","es:describeElasticsearchDomains","es:getApplication","es:getCapability","es:getDataSource","es:getDefaultApplicationSetting","es:getDirectQueryDataSource","es:getDomainMaintenanceStatus","es:describeInboundConnections","es:describeInstanceTypeLimits","es:describeInsightDetails","es:describeOutboundConnections","es:describePackages","es:describeReservedInstanceOfferings","es:describeReservedInstances","es:describeVpcEndpoints","es:getCompatibleVersions","es:getPackageVersionHistory","es:getUpgradeHistory","es:getUpgradeStatus","es:listApplications","es:listDataSources","es:listDirectQueryDataSources","es:listDomainMaintenances","es:listDomainNames","es:listDomainsForPackage","es:listInstanceTypeDetails","es:listInsights","es:listPackagesForDomain","es:listScheduledActions","es:listTags","es:listVersions","es:listVpcEndpointAccess","es:listVpcEndpoints","es:listVpcEndpointsForDomain","events:describeApiDestination","events:describeArchive","events:describeConnection","events:describeEndpoint","events:describeEventBus","events:describeEventSource","events:describePartnerEventSource","events:describeReplay","events:describeRule","events:listApiDestinations","events:listArchives","events:listConnections","events:listEndpoints","events:listEventBuses","events:listEventSources","events:listPartnerEventSourceAccounts","events:listPartnerEventSources","events:listReplays","events:listRuleNamesByTarget","events:listRules","events:listTargetsByRule","events:testEventPattern","evs:getEnvironment","evs:getVersions","evs:listEnvironmentHosts","evs:listEnvironments","evs:listEnvironmentVlans","evs:listTagsForResource","firehose:describeDeliveryStream","firehose:listDeliveryStreams","fis:getAction","fis:getExperiment","fis:getExperimentTargetAccountConfiguration","fis:getExperimentTemplate","fis:getSafetyLever","fis:getTargetAccountConfiguration","fis:listActions","fis:listExperimentResolvedTargets","fis:listExperimentTargetAccountConfigurations","fis:listExperiments","fis:listExperimentTemplates","fis:listTargetAccountConfigurations","fms:getAdminAccount","fms:getAdminScope","fms:getAppsList","fms:getComplianceDetail","fms:getNotificationChannel","fms:getProtocolsList","fms:getPolicy","fms:getProtectionStatus","fms:getResourceSet","fms:getThirdPartyFirewallAssociationStatus","fms:getViolationDetails","fms:listAdminAccountsForOrganization","fms:listAdminsManagingAccount","fms:listAppsLists","fms:listComplianceStatus","fms:listDiscoveredResources","fms:listMemberAccounts","fms:listProtocolsLists","fms:listPolicies","fms:listResourceSetResources","fms:listResourceSets","fms:listThirdPartyFirewallFirewallPolicies","forecast:describeDataset","forecast:describeDatasetGroup","forecast:describeDatasetImportJob","forecast:describeForecast","forecast:describeForecastExportJob","forecast:describePredictor","forecast:getAccuracyMetrics","forecast:listDatasetGroups","forecast:listDatasetImportJobs","forecast:listDatasets","forecast:listForecastExportJobs","forecast:listForecasts","forecast:listPredictors","freetier:getFreeTierUsage","fsx:describeBackups","fsx:describeDataRepositoryAssociations","fsx:describeDataRepositoryTasks","fsx:describeFileCaches","fsx:describeFileSystems","fsx:describeS3AccessPointAttachments","fsx:describeSnapshots","fsx:describeStorageVirtualMachines","fsx:describeVolumes","fsx:listTagsForResource","gamelift:describeAlias","gamelift:describeBuild","gamelift:describeEC2InstanceLimits","gamelift:describeFleetAttributes","gamelift:describeFleetCapacity","gamelift:describeFleetEvents","gamelift:describeFleetLocationAttributes","gamelift:describeFleetLocationCapacity","gamelift:describeFleetLocationUtilization","gamelift:describeFleetPortSettings","gamelift:describeFleetUtilization","gamelift:describeGameServer","gamelift:describeGameServerGroup","gamelift:describeGameSessionDetails","gamelift:describeGameSessionPlacement","gamelift:describeGameSessionQueues","gamelift:describeGameSessions","gamelift:describeInstances","gamelift:describeMatchmaking","gamelift:describeMatchmakingConfigurations","gamelift:describeMatchmakingRuleSets","gamelift:describePlayerSessions","gamelift:describeRuntimeConfiguration","gamelift:describeScalingPolicies","gamelift:describeScript","gamelift:listAliases","gamelift:listBuilds","gamelift:listFleets","gamelift:listGameServerGroups","gamelift:listGameServers","gamelift:listScripts","gamelift:resolveAlias","geo:calculateRoute","geo:calculateRouteMatrix","geo:describeMap","geo:describePlaceIndex","geo:describeRouteCalculator","geo:describeTracker","geo:getMapGlyphs","geo:getMapSprites","geo:getMapStyleDescriptor","geo:getMapTile","geo:getPlace","geo:listGeofenceCollections","geo:listMaps","geo:listPlaceIndexes","geo:listRouteCalculators","geo:listTrackerConsumers","geo:searchPlaceIndexForPosition","geo:searchPlaceIndexForSuggestions","geo:searchPlaceIndexForText","geo-maps:getStaticMap","geo-maps:getTile","geo-places:autocomplete","geo-places:geocode","geo-places:getPlace","geo-places:reverseGeocode","geo-places:searchNearby","geo-places:searchText","geo-places:suggest","geo-routes:calculateIsolines","geo-routes:calculateRouteMatrix","geo-routes:calculateRoutes","geo-routes:optimizeWaypoints","geo-routes:snapToRoads","glacier:describeJob","glacier:describeVault","glacier:getDataRetrievalPolicy","glacier:getVaultAccessPolicy","glacier:getVaultLock","glacier:getVaultNotifications","glacier:listJobs","glacier:listTagsForVault","glacier:listVaults","globalaccelerator:describeAccelerator","globalaccelerator:describeAcceleratorAttributes","globalaccelerator:describeCrossAccountAttachment","globalaccelerator:describeCustomRoutingAccelerator","globalaccelerator:describeCustomRoutingAcceleratorAttributes","globalaccelerator:describeCustomRoutingEndpointGroup","globalaccelerator:describeCustomRoutingListener","globalaccelerator:describeEndpointGroup","globalaccelerator:describeListener","globalaccelerator:listAccelerators","globalaccelerator:listByoipCidrs","globalaccelerator:listCrossAccountAttachments","globalaccelerator:listCrossAccountResourceAccounts","globalaccelerator:listCrossAccountResources","globalaccelerator:listCustomRoutingAccelerators","globalaccelerator:listCustomRoutingEndpointGroups","globalaccelerator:listCustomRoutingListeners","globalaccelerator:listCustomRoutingPortMappings","globalaccelerator:listCustomRoutingPortMappingsByDestination","globalaccelerator:listEndpointGroups","globalaccelerator:listListeners","glue:batchGetBlueprints","glue:batchGetCrawlers","glue:batchGetDevEndpoints","glue:batchGetJobs","glue:batchGetPartition","glue:batchGetTriggers","glue:batchGetWorkflows","glue:checkSchemaVersionValidity","glue:batchGetTableOptimizer","glue:getBlueprint","glue:getBlueprintRun","glue:getBlueprintRuns","glue:getCatalog","glue:getCatalogImportStatus","glue:getCatalogs","glue:getClassifier","glue:getClassifiers","glue:getColumnStatisticsForPartition","glue:getColumnStatisticsForTable","glue:getColumnStatisticsTaskRun","glue:getColumnStatisticsTaskRuns","glue:getCompletion","glue:getCrawler","glue:getCrawlerMetrics","glue:getCrawlers","glue:getCustomEntityType","glue:getDatabase","glue:getDatabases","glue:getDataCatalogEncryptionSettings","glue:getDataflowGraph","glue:getDataQualityResult","glue:getDataQualityRuleRecommendationRun","glue:getDataQualityRuleset","glue:getDataQualityRulesetEvaluationRun","glue:getDevEndpoint","glue:getDevEndpoints","glue:getJob","glue:getJobBookmark","glue:getJobRun","glue:getJobRuns","glue:getJobs","glue:getMapping","glue:getMLTaskRun","glue:getMLTaskRuns","glue:getMLTransform","glue:getMLTransforms","glue:getPartition","glue:getPartitionIndexes","glue:getPartitions","glue:getRegistry","glue:getResourcePolicies","glue:getResourcePolicy","glue:getSchema","glue:getSchemaByDefinition","glue:getSchemaVersion","glue:getSchemaVersionsDiff","glue:getSecurityConfiguration","glue:getSecurityConfigurations","glue:getSession","glue:getStatement","glue:getTable","glue:getTableOptimizer","glue:getTableVersion","glue:getTables","glue:getTableVersions","glue:getTrigger","glue:getTriggers","glue:getUserDefinedFunction","glue:getUserDefinedFunctions","glue:getWorkflow","glue:getWorkflowRun","glue:getWorkflowRuns","glue:listColumnStatisticsTaskRuns","glue:listCrawlers","glue:listCrawls","glue:listDataQualityResults","glue:listDataQualityRuleRecommendationRuns","glue:listDataQualityRulesetEvaluationRuns","glue:listDataQualityRulesets","glue:listDevEndpoints","glue:listMLTransforms","glue:listRegistries","glue:listSchemas","glue:listSchemaVersions","glue:listSessions","glue:listStatements","glue:listTableOptimizerRuns","glue:listTriggers","glue:querySchemaVersionMetadata","glue:startCompletion","grafana:describeWorkspace","grafana:describeWorkspaceAuthentication","grafana:listPermissions","grafana:listVersions","grafana:listWorkspaces","greengrass:describeComponent","greengrass:getComponent","greengrass:getConnectivityInfo","greengrass:getCoreDefinition","greengrass:getCoreDefinitionVersion","greengrass:getCoreDevice","greengrass:getDeployment","greengrass:getDeploymentStatus","greengrass:getDeviceDefinition","greengrass:getDeviceDefinitionVersion","greengrass:getFunctionDefinition","greengrass:getFunctionDefinitionVersion","greengrass:getGroup","greengrass:getGroupCertificateAuthority","greengrass:getGroupVersion","greengrass:getLoggerDefinition","greengrass:getLoggerDefinitionVersion","greengrass:getResourceDefinitionVersion","greengrass:getServiceRoleForAccount","greengrass:getSubscriptionDefinition","greengrass:getSubscriptionDefinitionVersion","greengrass:listClientDevicesAssociatedWithCoreDevice","greengrass:listComponents","greengrass:listComponentVersions","greengrass:listCoreDefinitions","greengrass:listCoreDefinitionVersions","greengrass:listCoreDevices","greengrass:listDeployments","greengrass:listEffectiveDeployments","greengrass:listInstalledComponents","greengrass:listDeviceDefinitions","greengrass:listDeviceDefinitionVersions","greengrass:listFunctionDefinitions","greengrass:listFunctionDefinitionVersions","greengrass:listGroups","greengrass:listGroupVersions","greengrass:listLoggerDefinitions","greengrass:listLoggerDefinitionVersions","greengrass:listResourceDefinitions","greengrass:listResourceDefinitionVersions","greengrass:listSubscriptionDefinitions","greengrass:listSubscriptionDefinitionVersions","guardduty:describeMalwareScans","guardduty:describeOrganizationConfiguration","guardduty:describePublishingDestination","guardduty:getCoverageStatistics","guardduty:getDetector","guardduty:getFilter","guardduty:getFindings","guardduty:getFindingsStatistics","guardduty:getInvitationsCount","guardduty:getIPSet","guardduty:getMalwareProtectionPlan","guardduty:getMalwareScan","guardduty:getMalwareScanSettings","guardduty:getMasterAccount","guardduty:getMemberDetectors","guardduty:getMembers","guardduty:getOrganizationStatistics","guardduty:getRemainingFreeTrialDays","guardduty:getThreatEntitySet","guardduty:getThreatIntelSet","guardduty:getTrustedEntitySet","guardduty:listCoverage","guardduty:listDetectors","guardduty:listFilters","guardduty:listFindings","guardduty:listInvitations","guardduty:listIPSets","guardduty:listMalwareProtectionPlans","guardduty:listMalwareScans","guardduty:listMembers","guardduty:listOrganizationAdminAccounts","guardduty:listPublishingDestinations","guardduty:listThreatEntitySets","guardduty:listThreatIntelSets","guardduty:listTrustedEntitySets","health:describeAffectedAccountsForOrganization","health:describeAffectedEntities","health:describeAffectedEntitiesForOrganization","health:describeEntityAggregates","health:describeEntityAggregatesForOrganization","health:describeEventAggregates","health:describeEventDetails","health:describeEventDetailsForOrganization","health:describeEvents","health:describeEventsForOrganization","health:describeEventTypes","health:describeHealthServiceStatusForOrganization","iam:getAccessKeyLastUsed","iam:getAccountAuthorizationDetails","iam:getAccountPasswordPolicy","iam:getAccountSummary","iam:getContextKeysForCustomPolicy","iam:getContextKeysForPrincipalPolicy","iam:getCredentialReport","iam:getGroup","iam:getGroupPolicy","iam:getInstanceProfile","iam:getLoginProfile","iam:getMFADevice","iam:getOpenIDConnectProvider","iam:getPolicy","iam:getPolicyVersion","iam:getRole","iam:getRolePolicy","iam:getSAMLProvider","iam:getServerCertificate","iam:getServiceLinkedRoleDeletionStatus","iam:getSSHPublicKey","iam:getUser","iam:getUserPolicy","iam:listAccessKeys","iam:listAccountAliases","iam:listAttachedGroupPolicies","iam:listAttachedRolePolicies","iam:listAttachedUserPolicies","iam:listEntitiesForPolicy","iam:listGroupPolicies","iam:listGroups","iam:listGroupsForUser","iam:listInstanceProfiles","iam:listInstanceProfilesForRole","iam:listMFADevices","iam:listOpenIDConnectProviders","iam:listPolicies","iam:listPolicyVersions","iam:listRolePolicies","iam:listRoles","iam:listSAMLProviders","iam:listServerCertificates","iam:listServiceSpecificCredentials","iam:listSigningCertificates","iam:listSSHPublicKeys","iam:listUserPolicies","iam:listUsers","iam:listVirtualMFADevices","iam:simulateCustomPolicy","iam:simulatePrincipalPolicy","identitystore:describeGroup","identitystore:describeGroupMembership","identitystore:describeUser","identitystore:getGroupId","identitystore:getGroupMembershipId","identitystore:getUserId","identitystore:isMemberInGroups","identitystore:listGroupMemberships","identitystore:listGroupMembershipsForMember","identitystore:listGroups","identitystore:listUsers","imagebuilder:getComponent","imagebuilder:getComponentPolicy","imagebuilder:getContainerRecipe","imagebuilder:getContainerRecipePolicy","imagebuilder:getDistributionConfiguration","imagebuilder:getImage","imagebuilder:getImagePipeline","imagebuilder:getImagePolicy","imagebuilder:getImageRecipe","imagebuilder:getImageRecipePolicy","imagebuilder:getInfrastructureConfiguration","imagebuilder:getLifecycleExecution","imagebuilder:getLifecyclePolicy","imagebuilder:getWorkflow","imagebuilder:getWorkflowExecution","imagebuilder:getWorkflowStepExecution","imagebuilder:listComponentBuildVersions","imagebuilder:listComponents","imagebuilder:listContainerRecipes","imagebuilder:listDistributionConfigurations","imagebuilder:listImageBuildVersions","imagebuilder:listImagePipelineImages","imagebuilder:listImagePipelines","imagebuilder:listImageRecipes","imagebuilder:listImages","imagebuilder:listImageScanFindingAggregations","imagebuilder:listInfrastructureConfigurations","imagebuilder:listLifecycleExecutionResources","imagebuilder:listLifecycleExecutions","imagebuilder:listLifecyclePolicies","imagebuilder:listTagsForResource","imagebuilder:listWorkflowBuildVersions","imagebuilder:listWorkflowExecutions","imagebuilder:listWorkflows","imagebuilder:listWaitingWorkflowSteps","imagebuilder:listWorkflowStepExecutions","inspector-scan:scanSbom","inspector:describeAssessmentRuns","inspector:describeAssessmentTargets","inspector:describeAssessmentTemplates","inspector:describeCrossAccountAccessRole","inspector:describeResourceGroups","inspector:describeRulesPackages","inspector:getTelemetryMetadata","inspector:listAssessmentRunAgents","inspector:listAssessmentRuns","inspector:listAssessmentTargets","inspector:listAssessmentTemplates","inspector:listEventSubscriptions","inspector:listRulesPackages","inspector:listTagsForResource","inspector2:batchGetAccountStatus","inspector2:batchGetFreeTrialInfo","inspector2:describeOrganizationConfiguration","inspector2:getConfiguration","inspector2:getDelegatedAdminAccount","inspector2:getEc2DeepInspectionConfiguration","inspector2:getMember","inspector2:getSbomExport","inspector2:listCisScanConfigurations","inspector2:listCisScanResultsAggregatedByChecks","inspector2:listCisScanResultsAggregatedByTargetResource","inspector2:listCisScans","inspector2:listCoverage","inspector2:listDelegatedAdminAccounts","inspector2:listFilters","inspector2:listFindings","inspector2:listMembers","inspector2:listUsageTotals","internetmonitor:getHealthEvent","internetmonitor:getMonitor","internetmonitor:listHealthEvents","internetmonitor:listMonitors","invoicing:batchGetInvoiceProfile","invoicing:listInvoiceSummaries","invoicing:listInvoiceUnits","iot:describeAuthorizer","iot:describeCACertificate","iot:describeCertificate","iot:describeDefaultAuthorizer","iot:describeDomainConfiguration","iot:describeEndpoint","iot:describeIndex","iot:describeJobExecution","iot:describeThing","iot:describeThingGroup","iot:describeTunnel","iot:getEffectivePolicies","iot:getIndexingConfiguration","iot:getLoggingOptions","iot:getPolicy","iot:getPolicyVersion","iot:getTopicRule","iot:getV2LoggingOptions","iot:listAttachedPolicies","iot:listAuthorizers","iot:listCACertificates","iot:listCertificates","iot:listCertificatesByCA","iot:listCommandExecutions","iot:listCommands","iot:listDomainConfigurations","iot:listJobExecutionsForJob","iot:listJobExecutionsForThing","iot:listJobs","iot:listNamedShadowsForThing","iot:listOutgoingCertificates","iot:listPackages","iot:listPackageVersions","iot:listPolicies","iot:listPolicyPrincipals","iot:listPolicyVersions","iot:listPrincipalPolicies","iot:listPrincipalThings","iot:listRoleAliases","iot:listTargetsForPolicy","iot:listThingGroups","iot:listThingGroupsForThing","iot:listThingPrincipals","iot:listThingRegistrationTasks","iot:listThings","iot:listThingsInThingGroup","iot:listThingTypes","iot:listTopicRules","iot:listTunnels","iot:listV2LoggingLevels","iotevents:describeDetector","iotevents:describeDetectorModel","iotevents:describeInput","iotevents:describeLoggingOptions","iotevents:listDetectorModels","iotevents:listDetectorModelVersions","iotevents:listDetectors","iotevents:listInputs","iotfleetwise:getCampaign","iotfleetwise:getDecoderManifest","iotfleetwise:getEncryptionConfiguration","iotfleetwise:getFleet","iotfleetwise:getLoggingOptions","iotfleetwise:getModelManifest","iotfleetwise:getRegisterAccountStatus","iotfleetwise:getSignalCatalog","iotfleetwise:getStateTemplate","iotfleetwise:getVehicle","iotfleetwise:getVehicleStatus","iotfleetwise:listCampaigns","iotfleetwise:listDecoderManifestNetworkInterfaces","iotfleetwise:listDecoderManifests","iotfleetwise:listDecoderManifestSignals","iotfleetwise:listFleets","iotfleetwise:listFleetsForVehicle","iotfleetwise:listModelManifestNodes","iotfleetwise:listModelManifests","iotfleetwise:listSignalCatalogNodes","iotfleetwise:listSignalCatalogs","iotfleetwise:listStateTemplates","iotfleetwise:listVehicles","iotfleetwise:listVehiclesInFleet","iotsitewise:describeAccessPolicy","iotsitewise:describeAsset","iotsitewise:describeAssetModel","iotsitewise:describeAssetProperty","iotsitewise:describeDashboard","iotsitewise:describeGateway","iotsitewise:describeGatewayCapabilityConfiguration","iotsitewise:describeLoggingOptions","iotsitewise:describePortal","iotsitewise:describeProject","iotsitewise:listAccessPolicies","iotsitewise:listAssetModels","iotsitewise:listAssets","iotsitewise:listAssociatedAssets","iotsitewise:listDashboards","iotsitewise:listGateways","iotsitewise:listPortals","iotsitewise:listProjectAssets","iotsitewise:listProjects","iottwinmaker:getComponentType","iottwinmaker:getEntity","iottwinmaker:getPricingPlan","iottwinmaker:getScene","iottwinmaker:getSyncJob","iottwinmaker:getWorkspace","iottwinmaker:listComponentTypes","iottwinmaker:listEntities","iottwinmaker:listScenes","iottwinmaker:listSyncJobs","iottwinmaker:listSyncResources","iottwinmaker:listWorkspaces","iotwireless:getDestination","iotwireless:getDeviceProfile","iotwireless:getPartnerAccount","iotwireless:getServiceEndpoint","iotwireless:getServiceProfile","iotwireless:getWirelessDevice","iotwireless:getWirelessDeviceStatistics","iotwireless:getWirelessGateway","iotwireless:getWirelessGatewayCertificate","iotwireless:getWirelessGatewayFirmwareInformation","iotwireless:getWirelessGatewayStatistics","iotwireless:getWirelessGatewayTask","iotwireless:getWirelessGatewayTaskDefinition","iotwireless:listDestinations","iotwireless:listDeviceProfiles","iotwireless:listPartnerAccounts","iotwireless:listServiceProfiles","iotwireless:listTagsForResource","iotwireless:listWirelessDevices","iotwireless:listWirelessGateways","iotwireless:listWirelessGatewayTaskDefinitions","ivs:getChannel","ivs:getRecordingConfiguration","ivs:getStream","ivs:getStreamSession","ivs:listChannels","ivs:listPlaybackKeyPairs","ivs:listRecordingConfigurations","ivs:listStreamKeys","ivs:listStreams","ivs:listStreamSessions","kafka:describeCluster","kafka:describeClusterOperation","kafka:describeClusterOperationV2","kafka:describeClusterV2","kafka:describeConfiguration","kafka:describeConfigurationRevision","kafka:describeReplicator","kafka:describeTopic","kafka:describeTopicPartitions","kafka:describeVpcConnection","kafka:getBootstrapBrokers","kafka:getClusterPolicy","kafka:getCompatibleKafkaVersions","kafka:listClientVpcConnections","kafka:listClusterOperations","kafka:listClusterOperationsV2","kafka:listClusters","kafka:listClustersV2","kafka:listConfigurationRevisions","kafka:listConfigurations","kafka:listNodes","kafka:listReplicators","kafka:listScramSecrets","kafka:listTagsForResource","kafka:listTopics","kafka:listVpcConnections","kafkaconnect:describeConnector","kafkaconnect:describeCustomPlugin","kafkaconnect:describeWorkerConfiguration","kafkaconnect:listConnectors","kafkaconnect:listCustomPlugins","kafkaconnect:listWorkerConfigurations","kendra:describeAccessControlConfiguration","kendra:describeDataSource","kendra:describeExperience","kendra:describeFaq","kendra:describeFeaturedResultsSet","kendra:describeIndex","kendra:describePrincipalMapping","kendra:describeQuerySuggestionsBlockList","kendra:describeQuerySuggestionsConfig","kendra:describeThesaurus","kendra:listAccessControlConfigurations","kendra:listDataSourceSyncJobs","kendra:listDataSources","kendra:listEntityPersonas","kendra:listExperienceEntities","kendra:listExperiences","kendra:listFaqs","kendra:listFeaturedResultsSets","kendra:listIndices","kendra:listQuerySuggestionsBlockLists","kendra:listThesauri","kinesis:describeChannel","kinesis:describeStream","kinesis:describeStreamConsumer","kinesis:describeStreamSummary","kinesis:listChannels","kinesis:listShards","kinesis:listStreamConsumers","kinesis:listStreams","kinesis:listTagsForStream","kinesisanalytics:describeApplication","kinesisanalytics:describeApplicationOperation","kinesisanalytics:describeApplicationSnapshot","kinesisanalytics:listApplicationOperations","kinesisanalytics:listApplications","kinesisanalytics:listApplicationSnapshots","kinesisanalytics:listApplicationVersions","kinesisvideo:describeImageGenerationConfiguration","kinesisvideo:describeEdgeConfiguration","kinesisvideo:describeMappedResourceConfiguration","kinesisvideo:describeMediaStorageConfiguration","kinesisvideo:describeNotificationConfiguration","kinesisvideo:describeSignalingChannel","kinesisvideo:describeStream","kinesisvideo:getDataEndpoint","kinesisvideo:getIceServerConfig","kinesisvideo:getSignalingChannelEndpoint","kinesisvideo:listSignalingChannels","kinesisvideo:listEdgeAgentConfigurations","kinesisvideo:listStreams","kms:describeCustomKeyStores","kms:describeKey","kms:getKeyPolicy","kms:getKeyRotationStatus","kms:listAliases","kms:listGrants","kms:listKeyPolicies","kms:listKeyRotations","kms:listKeys","kms:listResourceTags","kms:listRetirableGrants","lakeformation:describeLakeFormationIdentityCenterConfiguration","lakeformation:describeResource","lakeformation:describeTransaction","lakeformation:getDataLakePrincipal","lakeformation:getDataLakeSettings","lakeformation:getEffectivePermissionsForPath","lakeformation:getLFTag","lakeformation:getLFTagExpression","lakeformation:getQueryState","lakeformation:getQueryStatistics","lakeformation:getResourceLFTags","lakeformation:listLFTagExpressions","lakeformation:listLFTags","lakeformation:listLakeFormationOptIns","lakeformation:listPermissions","lakeformation:listResources","lakeformation:searchDatabasesByLFTags","lakeformation:searchTablesByLFTags","lambda:getAccountSettings","lambda:getAlias","lambda:getCodeSigningConfig","lambda:getDurableExecution","lambda:getDurableExecutionHistory","lambda:getDurableExecutionState","lambda:getEventSourceMapping","lambda:getFunction","lambda:getFunctionCodeSigningConfig","lambda:getFunctionConcurrency","lambda:getFunctionConfiguration","lambda:getFunctionEventInvokeConfig","lambda:getFunctionRecursionConfig","lambda:getFunctionScalingConfig","lambda:getFunctionUrlConfig","lambda:getLayerVersion","lambda:getLayerVersionPolicy","lambda:getMicrovm","lambda:getMicrovmImage","lambda:getMicrovmImageBuild","lambda:getMicrovmImageVersion","lambda:getPolicy","lambda:getCapacityProvider","lambda:getProvisionedConcurrencyConfig","lambda:getRuntimeManagementConfig","lambda:listAliases","lambda:listCapacityProviders","lambda:listCodeSigningConfigs","lambda:listDurableExecutionsByFunction","lambda:listEventSourceMappings","lambda:listFunctionEventInvokeConfigs","lambda:listFunctions","lambda:listFunctionsByCodeSigningConfig","lambda:listFunctionUrlConfigs","lambda:listFunctionVersionsByCapacityProvider","lambda:listLayers","lambda:listLayerVersions","lambda:listManagedMicrovmImages","lambda:listManagedMicrovmImageVersions","lambda:listMicrovmImageBuilds","lambda:listMicrovmImages","lambda:listMicrovmImageVersions","lambda:listMicrovms","lambda:listProvisionedConcurrencyConfigs","lambda:listTags","lambda:listVersionsByFunction","launchwizard:describeProvisionedApp","launchwizard:describeProvisioningEvents","launchwizard:listDeploymentEvents","launchwizard:listDeployments","launchwizard:listProvisionedApps","lex:describeBot","lex:describeBotAlias","lex:describeBotLocale","lex:describeBotRecommendation","lex:describeBotVersion","lex:describeCustomVocabularyMetadata","lex:describeExport","lex:describeImport","lex:describeIntent","lex:describeResourcePolicy","lex:describeSlot","lex:describeSlotType","lex:getBot","lex:getBotAlias","lex:getBotAliases","lex:getBotChannelAssociation","lex:getBotChannelAssociations","lex:getBots","lex:getBotVersions","lex:getBuiltinIntent","lex:getBuiltinIntents","lex:getBuiltinSlotTypes","lex:getIntent","lex:getIntents","lex:getIntentVersions","lex:getSlotType","lex:getSlotTypes","lex:getSlotTypeVersions","lex:listBotAliases","lex:listBotLocales","lex:listBotRecommendations","lex:listBots","lex:listBotVersions","lex:listExports","lex:listImports","lex:listIntents","lex:listRecommendedIntents","lex:listSlots","lex:listSlotTypes","license-manager:getGrant","license-manager:getLicense","license-manager:getLicenseConfiguration","license-manager:getLicenseConversionTask","license-manager:getLicenseManagerReportGenerator","license-manager:getLicenseUsage","license-manager:getServiceSettings","license-manager:listAssociationsForLicenseConfiguration","license-manager:listDistributedGrants","license-manager:listFailuresForLicenseConfigurationOperations","license-manager:listLicenseConfigurations","license-manager:listLicenseConversionTasks","license-manager:listLicenseManagerReportGenerators","license-manager:listLicenses","license-manager:listLicenseSpecificationsForResource","license-manager:listLicenseVersions","license-manager:listReceivedGrants","license-manager:listReceivedGrantsForOrganization","license-manager:listReceivedLicenses","license-manager:listReceivedLicensesForOrganization","license-manager:listResourceInventory","license-manager:listTokens","license-manager:listUsageForLicenseConfiguration","license-manager-linux-subscriptions:getRegisteredSubscriptionProvider","license-manager-linux-subscriptions:getServiceSettings","license-manager-linux-subscriptions:listLinuxSubscriptionInstances","license-manager-linux-subscriptions:listLinuxSubscriptions","license-manager-linux-subscriptions:listRegisteredSubscriptionProviders","license-manager-user-subscriptions:listIdentityProviders","license-manager-user-subscriptions:listInstances","license-manager-user-subscriptions:listLicenseServerEndpoints","license-manager-user-subscriptions:listProductSubscriptions","license-manager-user-subscriptions:listUserAssociations","lightsail:getActiveNames","lightsail:getAlarms","lightsail:getAutoSnapshots","lightsail:getBlueprints","lightsail:getBucketBundles","lightsail:getBucketMetricData","lightsail:getBuckets","lightsail:getBundles","lightsail:getCertificates","lightsail:getContainerImages","lightsail:getContainerServiceDeployments","lightsail:getContainerServiceMetricData","lightsail:getContainerServicePowers","lightsail:getContainerServices","lightsail:getDisk","lightsail:getDisks","lightsail:getDiskSnapshot","lightsail:getDiskSnapshots","lightsail:getDistributionBundles","lightsail:getDistributionMetricData","lightsail:getDistributions","lightsail:getDomain","lightsail:getDomains","lightsail:getExportSnapshotRecords","lightsail:getInstance","lightsail:getInstanceMetricData","lightsail:getInstancePortStates","lightsail:getInstances","lightsail:getInstanceSnapshot","lightsail:getInstanceSnapshots","lightsail:getInstanceState","lightsail:getKeyPair","lightsail:getKeyPairs","lightsail:getLoadBalancer","lightsail:getLoadBalancerMetricData","lightsail:getLoadBalancers","lightsail:getLoadBalancerTlsCertificates","lightsail:getOperation","lightsail:getOperations","lightsail:getOperationsForResource","lightsail:getRegions","lightsail:getRelationalDatabase","lightsail:getRelationalDatabaseMetricData","lightsail:getRelationalDatabases","lightsail:getRelationalDatabaseSnapshot","lightsail:getRelationalDatabaseSnapshots","lightsail:getStaticIp","lightsail:getStaticIps","lightsail:isVpcPeered","logs:describeAccountPolicies","logs:describeDeliveries","logs:describeDeliveryDestinations","logs:describeDeliverySources","logs:describeDestinations","logs:describeExportTasks","logs:describeFieldIndexes","logs:describeIndexPolicies","logs:describeLogGroups","logs:describeLogStreams","logs:describeMetricFilters","logs:describeQueries","logs:describeQueryDefinitions","logs:describeResourcePolicies","logs:describeSubscriptionFilters","logs:getDataProtectionPolicy","logs:getDelivery","logs:getDeliveryDestination","logs:getDeliveryDestinationPolicy","logs:getDeliverySource","logs:getIntegration","logs:getLogAnomalyDetector","logs:getLogDelivery","logs:getLogGroupFields","logs:getTransformer","logs:listAnomalies","logs:listIntegrations","logs:listLogAnomalyDetectors","logs:listLogDeliveries","logs:listLogGroups","logs:listLogGroupsForQuery","logs:testMetricFilter","lookoutequipment:describeDataIngestionJob","lookoutequipment:describeDataset","lookoutequipment:describeInferenceScheduler","lookoutequipment:describeModel","lookoutequipment:listDataIngestionJobs","lookoutequipment:listDatasets","lookoutequipment:listInferenceExecutions","lookoutequipment:listInferenceSchedulers","lookoutequipment:listModels","m2:getApplication","m2:getApplicationVersion","m2:getBatchJobExecution","m2:getDataSetDetails","m2:getDataSetImportTask","m2:getDeployment","m2:getEnvironment","m2:listApplications","m2:listApplicationVersions","m2:listBatchJobDefinitions","m2:listBatchJobExecutions","m2:listDataSetImportHistory","m2:listDataSets","m2:listDeployments","m2:listEngineVersions","m2:listEnvironments","machinelearning:describeBatchPredictions","machinelearning:describeDataSources","machinelearning:describeEvaluations","machinelearning:describeMLModels","machinelearning:getBatchPrediction","machinelearning:getDataSource","machinelearning:getEvaluation","machinelearning:getMLModel","macie2:describeBuckets","macie2:describeClassificationJob","macie2:getAdministratorAccount","macie2:getAllowList","macie2:getAutomatedDiscoveryConfiguration","macie2:getClassificationExportConfiguration","macie2:getClassificationScope","macie2:getCustomDataIdentifier","macie2:getFindings","macie2:getFindingsFilter","macie2:getFindingsPublicationConfiguration","macie2:getFindingStatistics","macie2:getMacieSession","macie2:getMember","macie2:getResourceProfile","macie2:getRevealConfiguration","macie2:getSensitivityInspectionTemplate","macie2:getUsageStatistics","macie2:listAllowLists","macie2:listAutomatedDiscoveryAccounts","macie2:listClassificationJobs","macie2:listClassificationScopes","macie2:listCustomDataIdentifiers","macie2:listFindings","macie2:listFindingsFilters","macie2:listMembers","macie2:listSensitivityInspectionTemplates","managedblockchain:getMember","managedblockchain:getNetwork","managedblockchain:getNode","managedblockchain:listMembers","managedblockchain:listNetworks","managedblockchain:listNodes","mediaconnect:describeFlow","mediaconnect:listEntitlements","mediaconnect:listFlows","mediaconvert:describeEndpoints","mediaconvert:getJob","mediaconvert:getJobTemplate","mediaconvert:getPreset","mediaconvert:getQueue","mediaconvert:listJobs","mediaconvert:listJobTemplates","medialive:describeChannel","medialive:describeInput","medialive:describeInputDevice","medialive:describeInputSecurityGroup","medialive:describeMultiplex","medialive:describeOffering","medialive:describeReservation","medialive:describeSchedule","medialive:getCloudWatchAlarmTemplate","medialive:getCloudWatchAlarmTemplateGroup","medialive:getEventBridgeRuleTemplate","medialive:getEventBridgeRuleTemplateGroup","medialive:getSignalMap","medialive:listChannels","medialive:listCloudWatchAlarmTemplateGroups","medialive:listCloudWatchAlarmTemplates","medialive:listEventBridgeRuleTemplateGroups","medialive:listEventBridgeRuleTemplates","medialive:listInputDevices","medialive:listInputs","medialive:listInputSecurityGroups","medialive:listMultiplexes","medialive:listOfferings","medialive:listReservations","medialive:listSignalMaps","mediapackage:describeChannel","mediapackage:describeOriginEndpoint","mediapackage:listChannels","mediapackage:listOriginEndpoints","mediastore:describeContainer","mediastore:getContainerPolicy","mediastore:getCorsPolicy","mediastore:listContainers","mediatailor:getPlaybackConfiguration","mediatailor:listPlaybackConfigurations","medical-imaging:getDatastore","medical-imaging:listDatastores","memorydb:describeReservedNodesOfferings","memorydb:listAllowedNodeTypeUpdates","mgn:describeJobLogItems","mgn:describeJobs","mgn:describeLaunchConfigurationTemplates","mgn:describeReplicationConfigurationTemplates","mgn:describeSourceServers","mgn:describeVcenterClients","mgn:getLaunchConfiguration","mgn:getReplicationConfiguration","mgn:listApplications","mgn:listSourceServerActions","mgn:listTemplateActions","mgn:listWaves","mobiletargeting:getAdmChannel","mobiletargeting:getApnsChannel","mobiletargeting:getApnsSandboxChannel","mobiletargeting:getApnsVoipChannel","mobiletargeting:getApnsVoipSandboxChannel","mobiletargeting:getApp","mobiletargeting:getApplicationSettings","mobiletargeting:getApps","mobiletargeting:getBaiduChannel","mobiletargeting:getCampaign","mobiletargeting:getCampaignActivities","mobiletargeting:getCampaigns","mobiletargeting:getCampaignVersion","mobiletargeting:getCampaignVersions","mobiletargeting:getEmailChannel","mobiletargeting:getEndpoint","mobiletargeting:getEventStream","mobiletargeting:getExportJob","mobiletargeting:getExportJobs","mobiletargeting:getGcmChannel","mobiletargeting:getImportJob","mobiletargeting:getImportJobs","mobiletargeting:getJourney","mobiletargeting:getJourneyExecutionActivityMetrics","mobiletargeting:getJourneyExecutionMetrics","mobiletargeting:getJourneyRunExecutionActivityMetrics","mobiletargeting:getJourneyRunExecutionMetrics","mobiletargeting:getJourneyRuns","mobiletargeting:getSegment","mobiletargeting:getSegmentImportJobs","mobiletargeting:getSegments","mobiletargeting:getSegmentVersion","mobiletargeting:getSegmentVersions","mobiletargeting:getSmsChannel","mobiletargeting:listJourneys","mobiletargeting:phoneNumberValidate","mpa:getApprovalTeam","mpa:getSession","mpa:listApprovalTeams","mq:describeBrokerInstanceOptions","mq:describeBroker","mq:describeConfiguration","mq:describeConfigurationRevision","mq:describeUser","mq:listBrokers","mq:listConfigurationRevisions","mq:listConfigurations","mq:listUsers","network-firewall:describeContainerAssociation","network-firewall:describeFirewall","network-firewall:describeFirewallPolicy","network-firewall:describeFlowOperation","network-firewall:describeLoggingConfiguration","network-firewall:describeResourcePolicy","network-firewall:describeRuleGroup","network-firewall:describeRuleGroupMetadata","network-firewall:describeTlsInspectionConfiguration","network-firewall:describeVpcEndpointAssociation","network-firewall:listAnalysisReports","network-firewall:listContainerAssociations","network-firewall:listFirewallPolicies","network-firewall:listFirewalls","network-firewall:listFlowOperationResults","network-firewall:listFlowOperations","network-firewall:listRuleGroups","network-firewall:listTlsInspectionConfigurations","network-firewall:listVpcEndpointAssociations","networkflowmonitor:getMonitor","networkflowmonitor:getScope","networkflowmonitor:listMonitors","networkflowmonitor:listScopes","networkmanager:describeGlobalNetworks","networkmanager:getConnectAttachment","networkmanager:getConnections","networkmanager:getConnectPeer","networkmanager:getConnectPeerAssociations","networkmanager:getCoreNetwork","networkmanager:getCoreNetworkChangeEvents","networkmanager:getCoreNetworkChangeSet","networkmanager:getCoreNetworkPolicy","networkmanager:getCustomerGatewayAssociations","networkmanager:getDevices","networkmanager:getDirectConnectGatewayAttachment","networkmanager:getLinkAssociations","networkmanager:getLinks","networkmanager:getNetworkResourceCounts","networkmanager:getNetworkResourceRelationships","networkmanager:getNetworkResources","networkmanager:getNetworkRoutes","networkmanager:getNetworkTelemetry","networkmanager:getResourcePolicy","networkmanager:getRouteAnalysis","networkmanager:getSites","networkmanager:getSiteToSiteVpnAttachment","networkmanager:getTransitGatewayConnectPeerAssociations","networkmanager:getTransitGatewayPeering","networkmanager:getTransitGatewayRegistrations","networkmanager:getTransitGatewayRouteTableAttachment","networkmanager:getVpcAttachment","networkmanager:listAttachments","networkmanager:listConnectPeers","networkmanager:listCoreNetworkPolicyVersions","networkmanager:listCoreNetworks","networkmanager:listOrganizationServiceAccessStatus","networkmanager:listPeerings","networkmanager:listTagsForResource","networkmonitor:getMonitor","networkmonitor:getProbe","networkmonitor:listMonitors","notifications-contacts:getEmailContact","notifications-contacts:listEmailContacts","notifications:getEventRule","notifications:getNotificationConfiguration","notifications:getNotificationEvent","notifications:listChannels","notifications:listEventRules","notifications:listNotificationConfigurations","notifications:listNotificationEvents","notifications:listNotificationHubs","oam:getLink","oam:getSink","oam:getSinkPolicy","oam:listAttachedLinks","oam:listLinks","oam:listSinks","observabilityadmin:getTelemetryEvaluationStatus","observabilityadmin:getTelemetryEvaluationStatusForOrganization","observabilityadmin:listResourceTelemetry","observabilityadmin:listResourceTelemetryForOrganization","odb:getAutonomousDatabase","odb:getAutonomousDatabaseBackup","odb:getAutonomousDatabaseWalletDetails","odb:getCloudAutonomousVmCluster","odb:getCloudExadataInfrastructure","odb:getCloudExadataInfrastructureUnallocatedResources","odb:getCloudVmCluster","odb:getDbNode","odb:getDbServer","odb:getExadbVmCluster","odb:getExascaleDbStorageVault","odb:getOciOnboardingStatus","odb:getOdbNetwork","odb:getOdbPeeringConnection","odb:listAutonomousDatabaseBackups","odb:listAutonomousDatabaseCharacterSets","odb:listAutonomousDatabaseClones","odb:listAutonomousDatabasePeers","odb:listAutonomousDatabases","odb:listAutonomousDatabaseVersions","odb:listAutonomousVirtualMachines","odb:listCloudAutonomousVmClusters","odb:listCloudExadataInfrastructures","odb:listCloudVmClusters","odb:listDbNodes","odb:listDbServers","odb:listDbSystemShapes","odb:listExadbVmClusters","odb:listExascaleDbStorageVaults","odb:listGiMinorVersions","odb:listGiVersions","odb:listOdbNetworks","odb:listOdbPeeringConnections","odb:listSystemVersions","omics:getAnnotationImportJob","omics:getAnnotationStore","omics:getAnnotationStoreVersion","omics:getReadSetActivationJob","omics:getReadSetExportJob","omics:getReadSetImportJob","omics:getReadSetMetadata","omics:getReference","omics:getReferenceImportJob","omics:getReferenceMetadata","omics:getReferenceStore","omics:getRun","omics:getRunCache","omics:getRunGroup","omics:getRunTask","omics:getSequenceStore","omics:getShare","omics:getVariantImportJob","omics:getVariantStore","omics:getWorkflow","omics:getWorkflowVersion","omics:listAnnotationImportJobs","omics:listAnnotationStores","omics:listAnnotationStoreVersions","omics:listMultipartReadSetUploads","omics:listReadSetActivationJobs","omics:listReadSetExportJobs","omics:listReadSetImportJobs","omics:listReadSets","omics:listReadSetUploadParts","omics:listReferenceImportJobs","omics:listReferences","omics:listReferenceStores","omics:listRunCaches","omics:listRunGroups","omics:listRuns","omics:listRunTasks","omics:listSequenceStores","omics:listShares","omics:listVariantImportJobs","omics:listVariantStores","omics:listWorkflows","omics:listWorkflowVersions","opsworks-cm:describeAccountAttributes","opsworks-cm:describeBackups","opsworks-cm:describeEvents","opsworks-cm:describeNodeAssociationStatus","opsworks-cm:describeServers","opsworks:describeAgentVersions","opsworks:describeApps","opsworks:describeCommands","opsworks:describeDeployments","opsworks:describeEcsClusters","opsworks:describeElasticIps","opsworks:describeElasticLoadBalancers","opsworks:describeInstances"],"Resource":["*"]},{"Sid":"AWSSupportActionsGroup3","Effect":"Allow","Action":["opsworks:describeLayers","opsworks:describeLoadBasedAutoScaling","opsworks:describeMyUserProfile","opsworks:describePermissions","opsworks:describeRaidArrays","opsworks:describeRdsDbInstances","opsworks:describeServiceErrors","opsworks:describeStackProvisioningParameters","opsworks:describeStacks","opsworks:describeStackSummary","opsworks:describeTimeBasedAutoScaling","opsworks:describeUserProfiles","opsworks:describeVolumes","opsworks:getHostnameSuggestion","organizations:describeAccount","organizations:describeCreateAccountStatus","organizations:describeEffectivePolicy","organizations:describeHandshake","organizations:describeOrganization","organizations:describeOrganizationalUnit","organizations:describePolicy","organizations:describeResourcePolicy","organizations:listAccounts","organizations:listAccountsForParent","organizations:listAWSServiceAccessForOrganization","organizations:listChildren","organizations:listCreateAccountStatus","organizations:listDelegatedAdministrators","organizations:listDelegatedServicesForAccount","organizations:listHandshakesForAccount","organizations:listHandshakesForOrganization","organizations:listOrganizationalUnitsForParent","organizations:listParents","organizations:listPolicies","organizations:listPoliciesForTarget","organizations:listRoots","organizations:listTagsForResource","organizations:listTargetsForPolicy","osis:getPipeline","osis:getPipelineBlueprint","osis:getPipelineChangeProgress","osis:listPipelineBlueprints","osis:listPipelines","osis:validatePipeline","outposts:getCapacityTask","outposts:getCatalogItem","outposts:getConnection","outposts:getOrder","outposts:getOutpost","outposts:getOutpostInstanceTypes","outposts:getOutpostSupportedInstanceTypes","outposts:getSite","outposts:listAssets","outposts:listAssetInstances","outposts:listBlockingInstancesForCapacityTask","outposts:listCapacityTasks","outposts:listCatalogItems","outposts:listOrders","outposts:listOutposts","outposts:listSites","payment-cryptography:getAlias","payment-cryptography:getKey","payment-cryptography:listAliases","payment-cryptography:listKeys","pca-connector-ad:listConnectors","pca-connector-ad:listDirectoryRegistrations","pca-connector-ad:listServicePrincipalNames","pca-connector-ad:listTagsForResource","pca-connector-ad:listTemplateGroupAccessControlEntries","pca-connector-ad:listTemplates","pca-connector-scep:getChallengeMetadata","pca-connector-scep:getConnector","pca-connector-scep:listChallengeMetadata","pca-connector-scep:listConnectors","pca-connector-scep:listTagsForResource","pcs:getCluster","pcs:getComputeNodeGroup","pcs:getQueue","pcs:listClusters","pcs:listComputeNodeGroups","pcs:listQueues","personalize:describeAlgorithm","personalize:describeBatchInferenceJob","personalize:describeBatchSegmentJob","personalize:describeCampaign","personalize:describeDataInsightsJob","personalize:describeDataset","personalize:describeDatasetExportJob","personalize:describeDatasetGroup","personalize:describeDatasetImportJob","personalize:describeEventTracker","personalize:describeFeatureTransformation","personalize:describeFilter","personalize:describeMetricAttribution","personalize:describeRecipe","personalize:describeRecommender","personalize:describeSchema","personalize:describeSolution","personalize:describeSolutionVersion","personalize:getPersonalizedRanking","personalize:getRecommendations","personalize:getSolutionMetrics","personalize:listBatchInferenceJobs","personalize:listBatchSegmentJobs","personalize:listCampaigns","personalize:listDataInsightsJobs","personalize:listDatasetExportJobs","personalize:listDatasetGroups","personalize:listDatasetImportJobs","personalize:listDatasets","personalize:listEventTrackers","personalize:listMetricAttributions","personalize:listRecipes","personalize:listRecommenders","personalize:listSchemas","personalize:listSolutions","personalize:listSolutionVersions","pipes:describePipe","pipes:listPipes","pipes:listTagsForResource","polly:describeVoices","polly:getLexicon","polly:listLexicons","pricing:describeServices","pricing:getAttributeValues","pricing:getProducts","private-networks:getDeviceIdentifier","private-networks:getNetwork","private-networks:getNetworkResource","private-networks:listDeviceIdentifiers","private-networks:listNetworkResources","private-networks:listNetworks","qbusiness:getApplication","qbusiness:getDataSource","qbusiness:getIndex","qbusiness:getRetriever","qbusiness:getWebExperience","qbusiness:listApplications","qbusiness:listDataSources","qbusiness:listDataSourceSyncJobs","qbusiness:listIndices","qbusiness:listRetrievers","qbusiness:listWebExperiences","quicksight:describeAccountCustomization","quicksight:describeAccountCustomPermission","quicksight:describeAccountSettings","quicksight:describeAccountSubscription","quicksight:describeAnalysis","quicksight:describeAnalysisPermissions","quicksight:describeCustomPermissions","quicksight:describeDashboard","quicksight:describeDashboardPermissions","quicksight:describeDataSet","quicksight:describeDataSetPermissions","quicksight:describeDataSetRefreshProperties","quicksight:describeDataSource","quicksight:describeDataSourcePermissions","quicksight:describeFolder","quicksight:describeFolderPermissions","quicksight:describeFolderResolvedPermissions","quicksight:describeGroup","quicksight:describeGroupMembership","quicksight:describeIAMPolicyAssignment","quicksight:describeIngestion","quicksight:describeIpRestriction","quicksight:describeNamespace","quicksight:describeRefreshSchedule","quicksight:describeRoleCustomPermission","quicksight:describeTemplate","quicksight:describeTemplateAlias","quicksight:describeTemplatePermissions","quicksight:describeTheme","quicksight:describeThemeAlias","quicksight:describeThemePermissions","quicksight:describeTopic","quicksight:describeTopicPermissions","quicksight:describeTopicRefresh","quicksight:describeTopicRefreshSchedule","quicksight:describeUser","quicksight:describeVPCConnection","quicksight:listAnalyses","quicksight:listCustomPermissions","quicksight:listDashboards","quicksight:listDashboardVersions","quicksight:listDataSets","quicksight:listDataSources","quicksight:listFolderMembers","quicksight:listFolders","quicksight:listGroupMemberships","quicksight:listGroups","quicksight:listIAMPolicyAssignments","quicksight:listIAMPolicyAssignmentsForUser","quicksight:listIngestions","quicksight:listNamespaces","quicksight:listRefreshSchedules","quicksight:listTemplateAliases","quicksight:listTemplates","quicksight:listTemplateVersions","quicksight:listThemeAliases","quicksight:listThemes","quicksight:listThemeVersions","quicksight:listTopicRefreshSchedules","quicksight:listTopics","quicksight:listUserGroups","quicksight:listUsers","quicksight:listVPCConnections","quicksight:searchAnalyses","quicksight:searchDashboards","quicksight:searchDataSets","quicksight:searchDataSources","quicksight:searchFolders","quicksight:searchGroups","ram:getPermission","ram:getResourceShareAssociations","ram:getResourceShareInvitations","ram:getResourceShares","ram:listPendingInvitationResources","ram:listPrincipals","ram:listResources","ram:listResourceSharePermissions","rbin:getRule","rbin:listRules","rds:describeAccountAttributes","rds:describeBlueGreenDeployments","rds:describeCertificates","rds:describeDBClusterAutomatedBackups","rds:describeDBClusterBacktracks","rds:describeDBClusterEndpoints","rds:describeDBClusterParameterGroups","rds:describeDBClusterParameters","rds:describeDBClusters","rds:describeDBClusterSnapshots","rds:describeDBClusterSnapshotAttributes","rds:describeDBEngineVersions","rds:describeDBInstanceAutomatedBackups","rds:describeDBInstances","rds:describeDBLogFiles","rds:describeDBMajorEngineVersions","rds:describeDBParameterGroups","rds:describeDBParameters","rds:describeDBProxies","rds:describeDBProxyEndpoints","rds:describeDBProxyTargetGroups","rds:describeDBProxyTargets","rds:describeDBRecommendations","rds:describeDBSecurityGroups","rds:describeDBShardGroups","rds:describeDBSnapshotAttributes","rds:describeDBSnapshots","rds:describeDBSnapshotTenantDatabases","rds:describeDBSubnetGroups","rds:describeEngineDefaultClusterParameters","rds:describeEngineDefaultParameters","rds:describeEventCategories","rds:describeEvents","rds:describeEventSubscriptions","rds:describeExportTasks","rds:describeGlobalClusters","rds:describeIntegrations","rds:describeOptionGroupOptions","rds:describeOptionGroups","rds:describeOrderableDBInstanceOptions","rds:describePendingMaintenanceActions","rds:describeReservedDBInstances","rds:describeReservedDBInstancesOfferings","rds:describeSourceRegions","rds:describeTenantDatabases","rds:describeValidDBInstanceModifications","rds:listTagsForResource","redshift-data:describeStatement","redshift-data:listStatements","redshift-serverless:getCustomDomainAssociation","redshift-serverless:getEndpointAccess","redshift-serverless:getNamespace","redshift-serverless:getRecoveryPoint","redshift-serverless:getReservation","redshift-serverless:getReservationOffering","redshift-serverless:getResourcePolicy","redshift-serverless:getScheduledAction","redshift-serverless:getSnapshot","redshift-serverless:getTableRestoreStatus","redshift-serverless:getTrack","redshift-serverless:getUsageLimit","redshift-serverless:getWorkgroup","redshift-serverless:listCustomDomainAssociations","redshift-serverless:listEndpointAccess","redshift-serverless:listManagedWorkgroups","redshift-serverless:listNamespaces","redshift-serverless:listRecoveryPoints","redshift-serverless:listReservationOfferings","redshift-serverless:listReservations","redshift-serverless:listScheduledActions","redshift-serverless:listSnapshotCopyConfigurations","redshift-serverless:listSnapshots","redshift-serverless:listTableRestoreStatus","redshift-serverless:listUsageLimits","redshift-serverless:listWorkgroups","redshift:describeClusterDbRevisions","redshift:describeClusterParameterGroups","redshift:describeClusterParameters","redshift:describeClusters","redshift:describeClusterSecurityGroups","redshift:describeClusterSnapshots","redshift:describeClusterSubnetGroups","redshift:describeClusterTracks","redshift:describeClusterVersions","redshift:describeCustomDomainAssociations","redshift:describeDataShares","redshift:describeDataSharesForConsumer","redshift:describeDataSharesForProducer","redshift:describeDefaultClusterParameters","redshift:describeEndpointAccess","redshift:describeEndpointAuthorization","redshift:describeEventCategories","redshift:describeEvents","redshift:describeEventSubscriptions","redshift:describeHsmClientCertificates","redshift:describeHsmConfigurations","redshift:describeInboundIntegrations","redshift:describeLoggingStatus","redshift:describeNodeConfigurationOptions","redshift:describeOrderableClusterOptions","redshift:describeRedshiftIdcApplications","redshift:describeReservedNodeOfferings","redshift:describeReservedNodes","redshift:describeResize","redshift:describeSnapshotCopyGrants","redshift:describeSnapshotSchedules","redshift:describeStorage","redshift:describeTableRestoreStatus","redshift:describeTags","redshift:describeUsageLimits","rekognition:listCollections","rekognition:listFaces","resiliencehub:describeApp","resiliencehub:describeAppAssessment","resiliencehub:describeAppVersion","resiliencehub:describeAppVersionAppComponent","resiliencehub:describeAppVersionResource","resiliencehub:describeAppVersionResourcesResolutionStatus","resiliencehub:describeAppVersionTemplate","resiliencehub:describeDraftAppVersionResourcesImportStatus","resiliencehub:describeResiliencyPolicy","resiliencehub:describeResourceGroupingRecommendationTask","resiliencehub:listAlarmRecommendations","resiliencehub:listAppAssessmentComplianceDrifts","resiliencehub:listAppAssessmentResourceDrifts","resiliencehub:listAppAssessments","resiliencehub:listAppComponentCompliances","resiliencehub:listAppComponentRecommendations","resiliencehub:listAppInputSources","resiliencehub:listApps","resiliencehub:listAppVersionAppComponents","resiliencehub:listAppVersionResourceMappings","resiliencehub:listAppVersionResources","resiliencehub:listAppVersions","resiliencehub:listRecommendationTemplates","resiliencehub:listResiliencyPolicies","resiliencehub:listResourceGroupingRecommendations","resiliencehub:listSopRecommendations","resiliencehub:listSuggestedResiliencyPolicies","resiliencehub:listTestRecommendations","resiliencehub:listUnsupportedAppVersionResources","resource-explorer-2:getAccountLevelServiceConfiguration","resource-explorer-2:getIndex","resource-explorer-2:getView","resource-explorer-2:listIndexes","resource-explorer-2:listViews","resource-explorer-2:search","resource-groups:getGroup","resource-groups:getGroupQuery","resource-groups:getTags","resource-groups:listGroupResources","resource-groups:listGroups","resource-groups:searchResources","robomaker:batchDescribeSimulationJob","robomaker:describeDeploymentJob","robomaker:describeFleet","robomaker:describeRobot","robomaker:describeRobotApplication","robomaker:describeSimulationApplication","robomaker:describeSimulationJob","robomaker:listDeploymentJobs","robomaker:listFleets","robomaker:listRobotApplications","robomaker:listRobots","robomaker:listSimulationApplications","robomaker:listSimulationJobs","rolesanywhere:getProfile","rolesanywhere:getTrustAnchor","rolesanywhere:listProfiles","rolesanywhere:listTrustAnchors","route53-recovery-cluster:getRoutingControlState","route53-recovery-cluster:listRoutingControls","route53-recovery-control-config:describeCluster","route53-recovery-control-config:describeControlPanel","route53-recovery-control-config:describeRoutingControl","route53-recovery-control-config:describeSafetyRule","route53-recovery-control-config:getResourcePolicy","route53-recovery-control-config:listAssociatedRoute53HealthChecks","route53-recovery-control-config:listClusters","route53-recovery-control-config:listControlPanels","route53-recovery-control-config:listRoutingControls","route53-recovery-control-config:listSafetyRules","route53-recovery-readiness:getArchitectureRecommendations","route53-recovery-readiness:getCell","route53-recovery-readiness:getCellReadinessSummary","route53-recovery-readiness:getReadinessCheck","route53-recovery-readiness:getReadinessCheckResourceStatus","route53-recovery-readiness:getReadinessCheckStatus","route53-recovery-readiness:getRecoveryGroup","route53-recovery-readiness:getRecoveryGroupReadinessSummary","route53-recovery-readiness:listCells","route53-recovery-readiness:listReadinessChecks","route53-recovery-readiness:listCrossAccountAuthorizations","route53-recovery-readiness:listRecoveryGroups","route53-recovery-readiness:listResourceSets","route53-recovery-readiness:listRules","route53:getAccountLimit","route53:getChange","route53:getCheckerIpRanges","route53:getDNSSEC","route53:getGeoLocation","route53:getHealthCheck","route53:getHealthCheckCount","route53:getHealthCheckLastFailureReason","route53:getHealthCheckStatus","route53:getHostedZone","route53:getHostedZoneCount","route53:getHostedZoneLimit","route53:getQueryLoggingConfig","route53:getReusableDelegationSet","route53:getTrafficPolicy","route53:getTrafficPolicyInstance","route53:getTrafficPolicyInstanceCount","route53:listCidrBlocks","route53:listCidrCollections","route53:listCidrLocations","route53:listGeoLocations","route53:listHealthChecks","route53:listHostedZones","route53:listHostedZonesByName","route53:listHostedZonesByVpc","route53:listQueryLoggingConfigs","route53:listResourceRecordSets","route53:listReusableDelegationSets","route53:listTrafficPolicies","route53:listTrafficPolicyInstances","route53:listTrafficPolicyInstancesByHostedZone","route53:listTrafficPolicyInstancesByPolicy","route53:listTrafficPolicyVersions","route53:listVPCAssociationAuthorizations","route53domains:checkDomainAvailability","route53domains:getContactReachabilityStatus","route53domains:getDomainDetail","route53domains:getOperationDetail","route53domains:listDomains","route53domains:listOperations","route53domains:listPrices","route53domains:listTagsForDomain","route53domains:viewBilling","route53profiles:getProfile","route53profiles:getProfileAssociation","route53profiles:getProfileResourceAssociation","route53profiles:listProfileAssociations","route53profiles:listProfileResourceAssociations","route53profiles:listProfiles","route53profiles:listTagsForResource","route53resolver:getFirewallConfig","route53resolver:getFirewallDomainList","route53resolver:getFirewallRuleGroup","route53resolver:getFirewallRuleGroupAssociation","route53resolver:getFirewallRuleGroupPolicy","route53resolver:getOutpostResolver","route53resolver:getResolverConfig","route53resolver:getResolverDnssecConfig","route53resolver:getResolverEndpoint","route53resolver:getResolverQueryLogConfig","route53resolver:getResolverQueryLogConfigAssociation","route53resolver:getResolverQueryLogConfigPolicy","route53resolver:getResolverRule","route53resolver:getResolverRuleAssociation","route53resolver:getResolverRulePolicy","route53resolver:listFirewallConfigs","route53resolver:listFirewallDomainLists","route53resolver:listFirewallDomains","route53resolver:listFirewallRuleGroupAssociations","route53resolver:listFirewallRuleGroups","route53resolver:listFirewallRules","route53resolver:listOutpostResolvers","route53resolver:listResolverConfigs","route53resolver:listResolverDnssecConfigs","route53resolver:listResolverEndpointIpAddresses","route53resolver:listResolverEndpoints","route53resolver:listResolverQueryLogConfigAssociations","route53resolver:listResolverQueryLogConfigs","route53resolver:listResolverRuleAssociations","route53resolver:listResolverRules","route53resolver:listTagsForResource","route53globalresolver:getAccessSource","route53globalresolver:getAccessToken","route53globalresolver:getDNSView","route53globalresolver:getFirewallDomainList","route53globalresolver:getFirewallRule","route53globalresolver:getGlobalResolver","route53globalresolver:getHostedZoneAssociation","route53globalresolver:getManagedFirewallDomainList","route53globalresolver:listAccessSources","route53globalresolver:listAccessTokens","route53globalresolver:listDNSViews","route53globalresolver:listFirewallDomainLists","route53globalresolver:listFirewallDomains","route53globalresolver:listFirewallRules","route53globalresolver:listGlobalResolvers","route53globalresolver:listHostedZoneAssociations","route53globalresolver:listManagedFirewallDomainLists","rtbfabric:getCertificateAssociation","rtbfabric:getInboundExternalLink","rtbfabric:getLink","rtbfabric:getLinkRoutingRule","rtbfabric:getOutboundExternalLink","rtbfabric:getRequesterGateway","rtbfabric:getResponderGateway","rtbfabric:listCertificateAssociations","rtbfabric:listLinkRoutingRules","rtbfabric:listLinks","rtbfabric:listRequesterGateways","rtbfabric:listResponderGateways","rum:batchGetRumMetricDefinitions","rum:getAppMonitor","rum:listAppMonitors","rum:listRumMetricsDestinations","rum:getResourcePolicy","s3-outposts:getLifecycleConfiguration","s3-outposts:getAccessPoint","s3-outposts:getAccessPointPolicy","s3-outposts:getBucketPolicy","s3-outposts:getBucketVersioning","s3-outposts:getReplicationConfiguration","s3-outposts:listAccessPoints","s3-outposts:listEndpoints","s3-outposts:listOutpostsWithS3","s3-outposts:listRegionalBuckets","s3-outposts:listSharedEndpoints","s3:describeJob","s3:describeMultiRegionAccessPointOperation","s3:getAccelerateConfiguration","s3:getAccessGrant","s3:getAccessGrantsInstance","s3:getAccessGrantsInstanceResourcePolicy","s3:getAccessGrantsLocation","s3:getAccessPoint","s3:getAccessPointConfigurationForObjectLambda","s3:getAccessPointForObjectLambda","s3:getAccessPointPolicy","s3:getAccessPointPolicyForObjectLambda","s3:getAccessPointPolicyStatus","s3:getAccessPointPolicyStatusForObjectLambda","s3:getAccountPublicAccessBlock","s3:getAnalyticsConfiguration","s3:getBucketAcl","s3:getBucketCORS","s3:getBucketLocation","s3:getBucketLogging","s3:getBucketNotification","s3:getBucketObjectLockConfiguration","s3:getBucketOwnershipControls","s3:getBucketPolicy","s3:getBucketPolicyStatus","s3:getBucketPublicAccessBlock","s3:getBucketRequestPayment","s3:getBucketVersioning","s3:getBucketWebsite","s3:getEncryptionConfiguration","s3:getIntelligentTieringConfiguration","s3:getInventoryConfiguration","s3:getLifecycleConfiguration","s3:getMetricsConfiguration","s3:getMultiRegionAccessPoint","s3:getMultiRegionAccessPointPolicy","s3:getMultiRegionAccessPointPolicyStatus","s3:getMultiRegionAccessPointRoutes","s3:getObjectAcl","s3:getObjectLegalHold","s3:getObjectRetention","s3:getReplicationConfiguration","s3:getStorageLensConfiguration","s3:listAccessGrants","s3:listAccessGrantsInstances","s3:listAccessGrantsLocations","s3:listAccessPoints","s3:listAccessPointsForObjectLambda","s3:listAllMyBuckets","s3:listBucket","s3:listBucketMultipartUploads","s3:listBucketVersions","s3:listJobs","s3:listMultipartUploadParts","s3:listMultiRegionAccessPoints","s3:listStorageLensConfigurations","s3express:getBucketPolicy","s3express:listAllMyDirectoryBuckets","s3files:getAccessPoint","s3files:getFileSystem","s3files:getFileSystemPolicy","s3files:getMountTarget","s3files:getSynchronizationConfiguration","s3files:listAccessPoints","s3files:listFileSystems","s3files:listMountTargets","s3files:listTagsForResource","s3tables:getNamespace","s3tables:getTable","s3tables:getTableBucket","s3tables:getTableBucketEncryption","s3tables:getTableBucketMaintenanceConfiguration","s3tables:getTableBucketMetricsConfiguration","s3tables:getTableBucketPolicy","s3tables:getTableBucketReplication","s3tables:getTableBucketStorageClass","s3tables:getTableEncryption","s3tables:getTableMaintenanceConfiguration","s3tables:getTableMaintenanceJobStatus","s3tables:getTableMetadataLocation","s3tables:getTablePolicy","s3tables:getTableRecordExpirationConfiguration","s3tables:getTableRecordExpirationJobStatus","s3tables:getTableReplication","s3tables:getTableReplicationStatus","s3tables:getTableStorageClass","s3tables:listNamespaces","s3tables:listTableBuckets","s3tables:listTables","s3vectors:getIndex","s3vectors:getVectorBucket","s3vectors:getVectorBucketPolicy","s3vectors:listIndexes","s3vectors:listVectorBuckets","sagemaker:describeAction","sagemaker:describeAlgorithm","sagemaker:describeApp","sagemaker:describeAppImageConfig","sagemaker:describeArtifact","sagemaker:describeAutoMLJob","sagemaker:describeAutoMLJobV2","sagemaker:describeCluster","sagemaker:describeClusterNode","sagemaker:describeClusterEvent","sagemaker:describeClusterSchedulerConfig","sagemaker:describeCodeRepository","sagemaker:describeCompilationJob","sagemaker:describeComputeQuota","sagemaker:describeContext","sagemaker:describeDataQualityJobDefinition","sagemaker:describeDevice","sagemaker:describeDeviceFleet","sagemaker:describeDomain","sagemaker:describeEdgeDeploymentPlan","sagemaker:describeEdgePackagingJob","sagemaker:describeEndpoint","sagemaker:describeEndpointConfig","sagemaker:describeExperiment","sagemaker:describeFeatureGroup","sagemaker:describeFeatureMetadata","sagemaker:describeFlowDefinition","sagemaker:describeHub","sagemaker:describeHubContent","sagemaker:describeHumanTaskUi","sagemaker:describeHyperParameterTuningJob","sagemaker:describeImage","sagemaker:describeImageVersion","sagemaker:describeInferenceComponent","sagemaker:describeInferenceExperiment","sagemaker:describeInferenceRecommendationsJob","sagemaker:describeLabelingJob","sagemaker:describeLineageGroup","sagemaker:describeMlflowApp","sagemaker:describeMlflowTrackingServer","sagemaker:describeModel","sagemaker:describeModelBiasJobDefinition","sagemaker:describeModelCard","sagemaker:describeModelCardExportJob","sagemaker:describeModelExplainabilityJobDefinition","sagemaker:describeModelPackage","sagemaker:describeModelPackageGroup","sagemaker:describeModelQualityJobDefinition","sagemaker:describeMonitoringSchedule","sagemaker:describeNotebookInstance","sagemaker:describeNotebookInstanceLifecycleConfig","sagemaker:describeOptimizationJob","sagemaker:describePipeline","sagemaker:describePipelineDefinitionForExecution","sagemaker:describePipelineExecution","sagemaker:describePartnerApp","sagemaker:describeProcessingJob","sagemaker:describeProject","sagemaker:describeReservedCapacity","sagemaker:describeSpace","sagemaker:describeStudioLifecycleConfig","sagemaker:describeSubscribedWorkteam","sagemaker:describeTrainingJob","sagemaker:describeTrainingPlan","sagemaker:describeTrainingPlanExtensionHistory","sagemaker:describeTransformJob","sagemaker:describeTrial","sagemaker:describeTrialComponent","sagemaker:describeUserProfile","sagemaker:describeWorkforce","sagemaker:describeWorkteam","sagemaker:getDeviceFleetReport","sagemaker:getModelPackageGroupPolicy","sagemaker:getLineageGroupPolicy","sagemaker:getSagemakerServicecatalogPortfolioStatus","sagemaker:listActions","sagemaker:listAlgorithms","sagemaker:listAliases","sagemaker:listAppImageConfigs","sagemaker:listApps","sagemaker:listArtifacts","sagemaker:listAssociations","sagemaker:listAutoMLJobs","sagemaker:listCandidatesForAutoMLJob","sagemaker:listClusterNodes","sagemaker:listClusters","sagemaker:listClusterEvents","sagemaker:listClusterSchedulerConfigs","sagemaker:listCodeRepositories","sagemaker:listCompilationJobs","sagemaker:listComputeQuotas","sagemaker:listContexts","sagemaker:listDataQualityJobDefinitions","sagemaker:listDeviceFleets","sagemaker:listDevices","sagemaker:listDomains","sagemaker:listEdgeDeploymentPlans","sagemaker:listEdgePackagingJobs","sagemaker:listEndpointConfigs","sagemaker:listEndpoints","sagemaker:listExperiments","sagemaker:listFeatureGroups","sagemaker:listFlowDefinitions","sagemaker:listHubContents","sagemaker:listHubContentVersions","sagemaker:listHubs","sagemaker:listHumanTaskUis","sagemaker:listHyperParameterTuningJobs","sagemaker:listImages","sagemaker:listImageVersions","sagemaker:listInferenceComponents","sagemaker:listInferenceExperiments","sagemaker:listInferenceRecommendationsJobs","sagemaker:listInferenceRecommendationsJobSteps","sagemaker:listLabelingJobs","sagemaker:listLabelingJobsForWorkteam","sagemaker:listLineageGroups","sagemaker:listMlflowApps","sagemaker:listMlflowTrackingServers","sagemaker:listModelBiasJobDefinitions","sagemaker:listModelCardExportJobs","sagemaker:listModelCards","sagemaker:listModelCardVersions","sagemaker:listModelExplainabilityJobDefinitions","sagemaker:listModelMetadata","sagemaker:listModelPackageGroups","sagemaker:listModelPackages","sagemaker:listModelQualityJobDefinitions","sagemaker:listModels","sagemaker:listMonitoringAlertHistory","sagemaker:listMonitoringAlerts","sagemaker:listMonitoringExecutions","sagemaker:listMonitoringSchedules","sagemaker:listNotebookInstanceLifecycleConfigs","sagemaker:listNotebookInstances","sagemaker:listOptimizationJobs","sagemaker:listPartnerApps","sagemaker:listPipelineExecutions","sagemaker:listPipelineExecutionSteps","sagemaker:listPipelineParametersForExecution","sagemaker:listPipelines","sagemaker:listPipelineVersions","sagemaker:listProcessingJobs","sagemaker:listProjects","sagemaker:listResourceCatalogs","sagemaker:listSpaces","sagemaker:listStageDevices","sagemaker:listStudioLifecycleConfigs","sagemaker:listSubscribedWorkteams","sagemaker:listTags","sagemaker:listTrainingJobs","sagemaker:listTrainingJobsForHyperParameterTuningJob","sagemaker:listTrainingPlans","sagemaker:listTransformJobs","sagemaker:listTrialComponents","sagemaker:listTrials","sagemaker:listUserProfiles","sagemaker:listUltraServersByReservedCapacity","sagemaker:listWorkforces","sagemaker:listWorkteams","sagemaker:search","savingsplans:describeSavingsPlanRates","savingsplans:describeSavingsPlans","savingsplans:describeSavingsPlansOfferingRates","savingsplans:describeSavingsPlansOfferings","scheduler:getSchedule","scheduler:getScheduleGroup","scheduler:listScheduleGroups","scheduler:listSchedules","schemas:describeCodeBinding","schemas:describeDiscoverer","schemas:describeRegistry","schemas:describeSchema","schemas:getCodeBindingSource","schemas:getDiscoveredSchema","schemas:getResourcePolicy","schemas:listDiscoverers","schemas:listRegistries","schemas:listSchemas","schemas:listSchemaVersions","sdb:domainMetadata","sdb:listDomains","secretsmanager:describeSecret","secretsmanager:getResourcePolicy","secretsmanager:listSecrets","secretsmanager:listSecretVersionIds","security-ir:batchGetMemberAccountDetails","security-ir:getMembership","security-ir:listCases","security-ir:listMemberships","securityhub:batchGetAutomationRules","securityhub:batchGetConfigurationPolicyAssociations","securityhub:describeActionTargets","securityhub:describeHub","securityhub:describeOrganizationConfiguration","securityhub:describeProductsV2","securityhub:describeSecurityHubV2","securityhub:getConfigurationPolicy","securityhub:getConfigurationPolicyAssociation","securityhub:getEnabledStandards","securityhub:getFindingAggregator","securityhub:getFindingHistory","securityhub:getFindings","securityhub:getInsightResults","securityhub:getInsights","securityhub:getMasterAccount","securityhub:getMembers","securityhub:getAggregatorV2","securityhub:getAutomationRuleV2","securityhub:getConnectorV2","securityhub:getResourcesV2","securityhub:listAutomationRules","securityhub:listConfigurationPolicies","securityhub:listConfigurationPolicyAssociations","securityhub:listEnabledProductsForImport","securityhub:listFindingAggregators","securityhub:listInvitations","securityhub:listMembers","securityhub:listAggregatorsV2","securityhub:listAutomationRulesV2","securityhub:listConnectorsV2","securitylake:getDataLakeExceptionSubscription","securitylake:getDataLakeOrganizationConfiguration","securitylake:getDataLakeSources","securitylake:getSubscriber","securitylake:listDataLakeExceptions","securitylake:listDataLakes","securitylake:listLogSources","securitylake:listSubscribers","serverlessrepo:getApplication","serverlessrepo:getApplicationPolicy","serverlessrepo:getCloudFormationTemplate","serverlessrepo:listApplicationDependencies","serverlessrepo:listApplications","serverlessrepo:listApplicationVersions","servicecatalog:describeConstraint","servicecatalog:describePortfolio","servicecatalog:describeProduct","servicecatalog:describeProductAsAdmin","servicecatalog:describeProductView","servicecatalog:describeProvisioningArtifact","servicecatalog:describeProvisioningParameters","servicecatalog:describeRecord","servicecatalog:listAcceptedPortfolioShares","servicecatalog:listConstraintsForPortfolio","servicecatalog:listLaunchPaths","servicecatalog:listPortfolioAccess","servicecatalog:listPortfolios","servicecatalog:listPortfoliosForProduct","servicecatalog:listPrincipalsForPortfolio","servicecatalog:listProvisioningArtifacts","servicecatalog:listRecordHistory","servicecatalog:scanProvisionedProducts","servicecatalog:searchProducts","servicequotas:getAssociationForServiceQuotaTemplate","servicequotas:getAWSDefaultServiceQuota","servicequotas:getRequestedServiceQuotaChange","servicequotas:getServiceQuota","servicequotas:getServiceQuotaIncreaseRequestFromTemplate","servicequotas:listAWSDefaultServiceQuotas","servicequotas:listRequestedServiceQuotaChangeHistory","servicequotas:listRequestedServiceQuotaChangeHistoryByQuota","servicequotas:listServiceQuotaIncreaseRequestsInTemplate","servicequotas:listServiceQuotas","servicequotas:listServices","ses:batchGetMetricData","ses:describeActiveReceiptRuleSet","ses:describeConfigurationSet","ses:describeReceiptRule","ses:describeReceiptRuleSet","ses:getAccount","ses:getAccountSendingEnabled","ses:getAddonInstance","ses:getAddonSubscription","ses:getArchive","ses:getArchiveExport","ses:getArchiveSearch","ses:getArchiveSearchResults","ses:getBlacklistReports","ses:getConfigurationSet","ses:getConfigurationSetEventDestinations","ses:getContactList","ses:getDedicatedIp","ses:getDedicatedIpPool","ses:getDedicatedIps","ses:getDeliverabilityDashboardOptions","ses:getDeliverabilityTestReport","ses:getDomainDeliverabilityCampaign","ses:getDomainStatisticsReport","ses:getEmailIdentity","ses:getIdentityDkimAttributes","ses:getIdentityMailFromDomainAttributes","ses:getIdentityNotificationAttributes","ses:getIdentityPolicies","ses:getIdentityVerificationAttributes","ses:getImportJob","ses:getIngressPoint","ses:getMessageInsights","ses:getMultiRegionEndpoint","ses:getTenant","ses:getRelay","ses:getRuleSet","ses:getTrafficPolicy","ses:getSendQuota","ses:getSendStatistics","ses:listConfigurationSets","ses:listAddonInstances","ses:listAddonSubscriptions","ses:listArchiveExports","ses:listArchives","ses:listArchiveSearches","ses:listContactLists","ses:listContacts","ses:listCustomVerificationEmailTemplates","ses:listDedicatedIpPools","ses:listDeliverabilityTestReports","ses:listDomainDeliverabilityCampaigns","ses:listEmailIdentities","ses:listEmailTemplates","ses:listIdentities","ses:listIdentityPolicies","ses:listImportJobs","ses:listIngressPoints","ses:listReceiptFilters","ses:listReceiptRuleSets","ses:listRelays","ses:listRuleSets","ses:listRecommendations","ses:listMultiRegionEndpoints","ses:listResourceTenants","ses:listTenantResources","ses:listTenants","ses:listTagsForResource","ses:listTemplates","ses:listTrafficPolicies","ses:listVerifiedEmailAddresses","shield:describeAttack","shield:describeAttackStatistics","shield:describeDRTAccess","shield:describeProtection","shield:describeProtectionGroup","shield:describeSubscription","shield:getSubscriptionState","shield:listAttacks","shield:listProtectionGroups","shield:listProtections","signer:describeSigningJob","signer:getRevocationStatus","signer:getSigningPlatform","signer:getSigningProfile","signer:listProfilePermissions","signer:listSigningJobs","signer:listSigningPlatforms","signer:listSigningProfiles","sms-voice:describeAccountAttributes","sms-voice:describeSpendLimits","sms-voice:describeVerifiedDestinationNumbers","sms-voice:getConfigurationSetEventDestinations","sms:getConnectors","sms:getReplicationJobs","sms:getReplicationRuns","sms:getServers","snowball:describeAddress","snowball:describeAddresses","snowball:describeJob","snowball:getSnowballUsage","snowball:listJobs","snowball:listServiceVersions","sns:checkIfPhoneNumberIsOptedOut","sns:getDataProtectionPolicy","sns:getEndpointAttributes","sns:getPlatformApplicationAttributes","sns:getSMSAttributes","sns:getSMSSandboxAccountStatus","sns:getSubscriptionAttributes","sns:getTopicAttributes","sns:listEndpointsByPlatformApplication","sns:listOriginationNumbers","sns:listPhoneNumbersOptedOut","sns:listPlatformApplications","sns:listSMSSandboxPhoneNumbers","sns:listSubscriptions","sns:listSubscriptionsByTopic","sns:listTopics","social-messaging:getLinkedWhatsAppBusinessAccount","social-messaging:listLinkedWhatsAppBusinessAccounts","social-messaging:listWhatsAppMessageTemplates","sqs:getQueueAttributes","sqs:getQueueUrl","sqs:listDeadLetterSourceQueues","sqs:listMessageMoveTasks","sqs:listQueues","ssm-contacts:describeEngagement","ssm-contacts:describePage","ssm-contacts:getContact","ssm-contacts:getContactChannel","ssm-contacts:getContactPolicy","ssm-contacts:getRotation","ssm-contacts:getRotationOverride","ssm-contacts:listContactChannels","ssm-contacts:listContacts","ssm-contacts:listEngagements","ssm-contacts:listPageReceipts","ssm-contacts:listPageResolutions","ssm-contacts:listPagesByContact","ssm-contacts:listPagesByEngagement","ssm-contacts:listPreviewRotationShifts","ssm-contacts:listRotationOverrides","ssm-contacts:listRotations","ssm-contacts:listRotationShifts","ssm-incidents:batchGetIncidentFindings","ssm-incidents:getIncidentRecord","ssm-incidents:getReplicationSet","ssm-incidents:getResourcePolicies","ssm-incidents:getResponsePlan","ssm-incidents:getTimelineEvent","ssm-incidents:listIncidentFindings","ssm-incidents:listIncidentRecords","ssm-incidents:listRelatedItems","ssm-incidents:listReplicationSets","ssm-incidents:listResponsePlans","ssm-incidents:listTimelineEvents","ssm-quicksetup:getConfiguration","ssm-quicksetup:getConfigurationManager","ssm-quicksetup:getServiceSettings","ssm-quicksetup:listConfigurationManagers","ssm-quicksetup:listConfigurations","ssm-quicksetup:listQuickSetupTypes","ssm-sap:getApplication","ssm-sap:getComponent","ssm-sap:getConfigurationCheckOperation","ssm-sap:getDatabase","ssm-sap:getOperation","ssm-sap:getResourcePermission","ssm-sap:listApplications","ssm-sap:listComponents","ssm-sap:listConfigurationCheckDefinitions","ssm-sap:listConfigurationCheckOperations","ssm-sap:listDatabases","ssm-sap:listOperations","ssm-sap:listSubCheckResults","ssm-sap:listSubCheckRuleResults","ssm:describeActivations","ssm:describeAssociation","ssm:describeAssociationExecutions","ssm:describeAssociationExecutionTargets","ssm:describeAutomationExecutions","ssm:describeAutomationStepExecutions","ssm:describeAvailablePatches","ssm:describeDocument","ssm:describeDocumentPermission","ssm:describeEffectiveInstanceAssociations","ssm:describeEffectivePatchesForPatchBaseline","ssm:describeInstanceAssociationsStatus","ssm:describeInstanceInformation","ssm:describeInstancePatches","ssm:describeInstancePatchStates","ssm:describeInstancePatchStatesForPatchGroup","ssm:describeInstanceProperties","ssm:describeInventoryDeletions","ssm:describeMaintenanceWindowExecutions","ssm:describeMaintenanceWindowExecutionTaskInvocations","ssm:describeMaintenanceWindowExecutionTasks","ssm:describeMaintenanceWindows","ssm:describeMaintenanceWindowSchedule","ssm:describeMaintenanceWindowsForTarget","ssm:describeMaintenanceWindowTargets","ssm:describeMaintenanceWindowTasks","ssm:describeOpsItems","ssm:describeParameters","ssm:describePatchBaselines","ssm:describePatchGroups","ssm:describePatchGroupState","ssm:describePatchProperties","ssm:describeSessions","ssm:getAutomationExecution","ssm:getCalendarState","ssm:getCloudConnector","ssm:getCommandInvocation","ssm:getConnectionStatus","ssm:getDefaultPatchBaseline","ssm:getDeployablePatchSnapshotForInstance","ssm:getInventorySchema","ssm:getMaintenanceWindow","ssm:getMaintenanceWindowExecution","ssm:getMaintenanceWindowExecutionTask","ssm:getMaintenanceWindowExecutionTaskInvocation","ssm:getMaintenanceWindowTask","ssm:getOpsItem","ssm:getOpsMetadata","ssm:getOpsSummary","ssm:getPatchBaseline","ssm:getPatchBaselineForPatchGroup","ssm:getResourcePolicies","ssm:getServiceSetting","ssm:listAssociations","ssm:listAssociationVersions","ssm:listCloudConnectors","ssm:listCommandInvocations","ssm:listCommands","ssm:listComplianceItems","ssm:listComplianceSummaries","ssm:listDocumentMetadataHistory","ssm:listDocuments","ssm:listDocumentVersions","ssm:listNodes","ssm:listNodesSummary","ssm:listOpsItemEvents","ssm:listOpsItemRelatedItems","ssm:listOpsMetadata","ssm:listResourceComplianceSummaries","ssm:listResourceDataSync","ssm:listTagsForResource","ssm:validateCloudConnector","sso:describeApplication","sso:describeApplicationAssignment","sso:describeApplicationProvider","sso:describeAccountAssignmentCreationStatus","sso:describeAccountAssignmentDeletionStatus","sso:describeInstance","sso:describeInstanceAccessControlAttributeConfiguration","sso:describePermissionSet","sso:describePermissionSetProvisioningStatus","sso:describeTrustedTokenIssuer","sso:getApplicationAccessScope","sso:getApplicationAssignmentConfiguration","sso:getApplicationAuthenticationMethod","sso:getApplicationGrant","sso:getApplicationInstance","sso:getApplicationSessionConfiguration","sso:getApplicationTemplate","sso:getInlinePolicyForPermissionSet","sso:getManagedApplicationInstance","sso:getPermissionsBoundaryForPermissionSet","sso:getSharedSsoConfiguration","sso:listApplicationAccessScopes","sso:listApplicationAssignments","sso:listApplicationAuthenticationMethods","sso:listApplicationGrants","sso:listApplicationInstances","sso:listApplicationProviders","sso:listApplications","sso:listApplicationTemplates","sso:listAccountAssignmentCreationStatus","sso:listAccountAssignmentDeletionStatus","sso:listAccountAssignments","sso:listAccountAssignmentsForPrincipal","sso:listAccountsForProvisionedPermissionSet","sso:listApplicationAssignmentsForPrincipal","sso:listCustomerManagedPolicyReferencesInPermissionSet","sso:listDirectoryAssociations","sso:listInstances","sso:listManagedPoliciesInPermissionSet","sso:listPermissionSetProvisioningStatus","sso:listPermissionSets","sso:listPermissionSetsProvisionedToAccount","sso:listProfileAssociations","sso:listTrustedTokenIssuers","states:describeActivity","states:describeExecution","states:describeMapRun","states:describeStateMachine","states:describeStateMachineAlias","states:describeStateMachineForExecution","states:getExecutionHistory","states:listActivities","states:listExecutions","states:listMapRuns","states:listStateMachineAliases","states:listStateMachines","states:listStateMachineVersions","storagegateway:describeBandwidthRateLimit","storagegateway:describeCache","storagegateway:describeCachediSCSIVolumes","storagegateway:describeFileSystemAssociations","storagegateway:describeGatewayInformation","storagegateway:describeMaintenanceStartTime","storagegateway:describeNFSFileShares","storagegateway:describeSMBFileShares","storagegateway:describeSMBSettings","storagegateway:describeSnapshotSchedule","storagegateway:describeStorediSCSIVolumes","storagegateway:describeTapeArchives","storagegateway:describeTapeRecoveryPoints","storagegateway:describeTapes","storagegateway:describeUploadBuffer","storagegateway:describeVTLDevices","storagegateway:describeWorkingStorage","storagegateway:listAutomaticTapeCreationPolicies","storagegateway:listFileShares","storagegateway:listFileSystemAssociations","storagegateway:listGateways","storagegateway:listLocalDisks","storagegateway:listTagsForResource","storagegateway:listTapes","storagegateway:listVolumeInitiators","storagegateway:listVolumeRecoveryPoints","storagegateway:listVolumes","sts:getCallerIdentity","supportauthz:getAction","supportauthz:getSupportPermit","supportauthz:listActions","supportauthz:listSupportPermitRequests","supportauthz:listSupportPermits","swf:countClosedWorkflowExecutions","swf:countOpenWorkflowExecutions","swf:countPendingActivityTasks","swf:countPendingDecisionTasks","swf:describeActivityType","swf:describeDomain","swf:describeWorkflowExecution","swf:describeWorkflowType","swf:getWorkflowExecutionHistory","swf:listActivityTypes","swf:listClosedWorkflowExecutions","swf:listDomains","swf:listOpenWorkflowExecutions","swf:listWorkflowTypes","sustainability:getEstimatedCarbonEmissions","sustainability:getEstimatedCarbonEmissionsDimensionValues","sustainability:getEstimatedWaterAllocation","sustainability:getEstimatedWaterAllocationDimensionValues","synthetics:describeCanaries","synthetics:describeCanariesLastRun","synthetics:describeRuntimeVersions","synthetics:getCanary","synthetics:getCanaryRuns","synthetics:getGroup","synthetics:listAssociatedGroups","synthetics:listGroupResources","synthetics:listGroups","tax:getTaxInheritance","tax:getTaxRegistration","textract:listAdapters","textract:listAdapterVersions","textract:listTagsForResource","thinclient:getDevice","thinclient:getEnvironment","thinclient:getSoftwareSet","thinclient:listDevices","thinclient:listEnvironments","thinclient:listSoftwareSets","timestream:describeAccountSettings","timestream:describeBatchLoadTask","timestream:describeDatabase","timestream:describeEndpoints","timestream:describeScheduledQuery","timestream:describeTable","timestream:listBatchLoadTasks","timestream:listDatabases","timestream:listScheduledQueries","timestream:listTables","tiros:createQuery","tiros:getQueryAnswer","tiros:getQueryExplanation","transcribe:describeLanguageModel","transcribe:getCallAnalyticsCategory","transcribe:getCallAnalyticsJob","transcribe:getMedicalTranscriptionJob","transcribe:getMedicalVocabulary","transcribe:getTranscriptionJob","transcribe:getVocabulary","transcribe:getVocabularyFilter","transcribe:listCallAnalyticsCategories","transcribe:listCallAnalyticsJobs","transcribe:listLanguageModels","transcribe:listMedicalTranscriptionJobs","transcribe:listMedicalVocabularies","transcribe:listTranscriptionJobs","transcribe:listVocabularies","transcribe:listVocabularyFilters","transfer:describeAccess","transfer:describeAgreement","transfer:describeConnector","transfer:describeExecution","transfer:describeProfile","transfer:describeServer","transfer:describeUser","transfer:describeWebApp","transfer:describeWebAppCustomization","transfer:describeWorkflow","transfer:listAccesses","transfer:listAgreements","transfer:listConnectors","transfer:listExecutions","transfer:listHostKeys","transfer:listProfiles","transfer:listServers","transfer:listTagsForResource","transfer:listUsers","transfer:listWebApps","transfer:listWorkflows","transfer:sendWorkflowStepState","trustedadvisor:getOrganizationRecommendation","trustedadvisor:getRecommendation","trustedadvisor:listChecks","trustedadvisor:listOrganizationRecommendationAccounts","trustedadvisor:listOrganizationRecommendationResources","trustedadvisor:listOrganizationRecommendations","trustedadvisor:listRecommendationResources","trustedadvisor:listRecommendations","trustedadvisor:listRecommendationsForResource","verifiedpermissions:getIdentitySource","verifiedpermissions:getPolicy","verifiedpermissions:getPolicyStore","verifiedpermissions:getPolicyTemplate","verifiedpermissions:getSchema","verifiedpermissions:listIdentitySources","verifiedpermissions:listPolicies","verifiedpermissions:listPolicyStores","verifiedpermissions:listPolicyTemplates","vpc-lattice:getAccessLogSubscription","vpc-lattice:getAuthPolicy","vpc-lattice:getDomainVerification","vpc-lattice:getListener","vpc-lattice:getResourceConfiguration","vpc-lattice:getResourceGateway","vpc-lattice:getResourcePolicy","vpc-lattice:getRule","vpc-lattice:getService","vpc-lattice:getServiceNetwork","vpc-lattice:getServiceNetworkResourceAssociation","vpc-lattice:getServiceNetworkServiceAssociation","vpc-lattice:getServiceNetworkVpcAssociation","vpc-lattice:getTargetGroup","vpc-lattice:listAccessLogSubscriptions","vpc-lattice:listDomainVerifications","vpc-lattice:listListeners","vpc-lattice:listResourceConfigurations","vpc-lattice:listResourceEndpointAssociations","vpc-lattice:listResourceGateways","vpc-lattice:listRules","vpc-lattice:listServiceNetworks","vpc-lattice:listServiceNetworkResourceAssociations","vpc-lattice:listServiceNetworkServiceAssociations","vpc-lattice:listServiceNetworkVpcAssociations","vpc-lattice:listServiceNetworkVpcEndpointAssociations","vpc-lattice:listServices","vpc-lattice:listTargetGroups","vpc-lattice:listTargets","waf-regional:getByteMatchSet","waf-regional:getChangeTokenStatus","waf-regional:getGeoMatchSet","waf-regional:getIPSet","waf-regional:getLoggingConfiguration","waf-regional:getRateBasedRule","waf-regional:getRegexMatchSet","waf-regional:getRegexPatternSet","waf-regional:getRule","waf-regional:getRuleGroup","waf-regional:getSqlInjectionMatchSet","waf-regional:getWebACL","waf-regional:getWebACLForResource","waf-regional:listActivatedRulesInRuleGroup","waf-regional:listByteMatchSets","waf-regional:listGeoMatchSets","waf-regional:listIPSets","waf-regional:listLoggingConfigurations","waf-regional:listRateBasedRules","waf-regional:listRegexMatchSets","waf-regional:listRegexPatternSets","waf-regional:listResourcesForWebACL","waf-regional:listRuleGroups","waf-regional:listRules","waf-regional:listSqlInjectionMatchSets","waf-regional:listWebACLs","waf:getByteMatchSet","waf:getChangeTokenStatus","waf:getGeoMatchSet","waf:getIPSet","waf:getLoggingConfiguration","waf:getRateBasedRule","waf:getRegexMatchSet","waf:getRegexPatternSet","waf:getRule","waf:getRuleGroup","waf:getSampledRequests","waf:getSizeConstraintSet","waf:getSqlInjectionMatchSet","waf:getWebACL","waf:getXssMatchSet","waf:listActivatedRulesInRuleGroup","waf:listByteMatchSets","waf:listGeoMatchSets","waf:listIPSets","waf:listLoggingConfigurations","waf:listRateBasedRules","waf:listRegexMatchSets","waf:listRegexPatternSets","waf:listRuleGroups","waf:listRules","waf:listSizeConstraintSets","waf:listSqlInjectionMatchSets","waf:listWebACLs","waf:listXssMatchSets","wafv2:checkCapacity","wafv2:describeManagedRuleGroup","wafv2:getIPSet","wafv2:getLoggingConfiguration","wafv2:getPermissionPolicy","wafv2:getRateBasedStatementManagedKeys","wafv2:getRegexPatternSet","wafv2:getRuleGroup","wafv2:getSampledRequests","wafv2:getWebACL","wafv2:getWebACLForResource","wafv2:listAvailableManagedRuleGroups","wafv2:listIPSets","wafv2:listLoggingConfigurations","wafv2:listRegexPatternSets","wafv2:listResourcesForWebACL","wafv2:listRuleGroups","wafv2:listTagsForResource","wafv2:listWebACLs","wellarchitected:getAgentContext","wellarchitected:getAgentGoal","wellarchitected:getAgentProfile","wellarchitected:getAgentRecommendation","wellarchitected:getAgentRecommendationGeneration","wellarchitected:listAgentContexts","wellarchitected:listAgentGoals","wellarchitected:listAgentProfiles","wellarchitected:listAgentRecommendationGenerations","wellarchitected:listAgentRecommendationItems","wellarchitected:listAgentRecommendations","wisdom:getAIAgent","wisdom:getAIGuardrail","wisdom:getAIPrompt","wisdom:listAIAgents","wisdom:listAssistants","workdocs:checkAlias","workdocs:describeAvailableDirectories","workdocs:describeInstances","workmail:describeGroup","workmail:describeOrganization","workmail:describeResource","workmail:describeUser","workmail:listAliases","workmail:listGroupMembers","workmail:listGroups","workmail:listMailboxPermissions","workmail:listOrganizations","workmail:listResourceDelegates","workmail:listResources","workmail:listUsers","workspaces-web:getBrowserSettings","workspaces-web:getIdentityProvider","workspaces-web:getNetworkSettings","workspaces-web:getPortal","workspaces-web:getPortalServiceProviderMetadata","workspaces-web:getTrustStoreCertificate","workspaces-web:getUserSettings","workspaces-web:listBrowserSettings","workspaces-web:listIdentityProviders","workspaces-web:listNetworkSettings","workspaces-web:listPortals","workspaces-web:listTagsForResource","workspaces-web:listTrustStoreCertificates","workspaces-web:listTrustStores","workspaces-web:listUserSettings","workspaces:describeAccount","workspaces:describeAccountModifications","workspaces:describeApplicationAssociations","workspaces:describeApplications","workspaces:describeCustomWorkspaceImageImport","workspaces:describeIpGroups","workspaces:describeTags","workspaces:describeWorkspaceAssociations","workspaces:describeWorkspaceBundles","workspaces:describeWorkspaceDirectories","workspaces:describeWorkspaceImages","workspaces:describeWorkspaces","workspaces:describeWorkspaceSnapshots","workspaces:describeWorkspacesConnectionStatus","workspaces:describeWorkspacesPools","workspaces:describeWorkspacesPoolSessions","xray:getEncryptionConfig","xray:getGroup","xray:getGroups","xray:getInsightImpactGraph","xray:getSamplingRules","xray:getSamplingStatisticSummaries","xray:getSamplingTargets","xray:getServiceGraph","xray:getTimeSeriesServiceStatistics","xray:getTraceGraph","xray:listResourcePolicies"],"Resource":["*"]}]}
Version history
Current version v60, edited by AWS on 2026-10-26. Version history is recorded from 2026-11-11. Earlier versions are in the IAM console under Policy versions.
Attach snippets
This policy cannot be attached to users, groups or roles, so there are no attach snippets.
Sources
Pending editorial review. No editorial sources are listed yet.