AWSWellArchitectedAgentResourceScanningServiceRolePolicy

Summary

Grants the AWS Well-Architected Agent read-only access to AWS resource configurations, security settings, and operational data to generate optimization recommendations

Permissions imported from the AWS Managed Policy Reference Guide; other sections pending editorial review.

Identity

ARN

arn:aws:iam::aws:policy/aws-service-role/AWSWellArchitectedAgentResourceScanningServiceRolePolicyCopy ARN

Default version

v4

Created

2026-08-04

Last edited

2026-10-08

Services

access-analyzer, acm, acm-pca, aco-automation, aidevops, aiops, airflow, airflow-serverless, amplify, amplifyuibuilder, aoss, apigateway, app-integrations, appconfig, appflow, application-autoscaling, application-signals, applicationinsights, apprunner, appstream, appsync, apptest, aps, arc-region-switch, arc-zonal-shift, athena, auditmanager, autoscaling, aws-external-anthropic, b2bi, backup, backup-gateway, batch, bcm-data-exports, bcm-pricing-calculator, bedrock, bedrock-agentcore, bedrock-mantle, billing, billingconductor, braket, budgets, cases, ce, chatbot, chime, cleanrooms, cleanrooms-ml, cloudformation, cloudfront, cloudtrail, cloudwatch, codeartifact, codebuild, codecommit, codeconnections, codedeploy, codeguru-profiler, codeguru-reviewer, codepipeline, codestar-connections, codestar-notifications, cognito-identity, cognito-idp, comprehend, config, connect, connect-campaigns, controltower, cur, databrew, datapipeline, datasync, datazone, deadline, detective, devicefarm, devops-guru, directconnect, dms, docdb-elastic, ds, dsql, dynamodb, ec2, ecr, ecr-public, ecs, eks, elasticache, elasticbeanstalk, elasticfilesystem, elasticloadbalancing, elasticmapreduce, elemental-inference, emr-containers, emr-serverless, entityresolution, es, events, evs, finspace, firehose, fis, fms, forecast, frauddetector, fsx, gamelift, gameliftstreams, geo, globalaccelerator, glue, grafana, greengrass, groundstation, guardduty, healthlake, iam, identitystore, imagebuilder, inspector, inspector2, interconnect, internetmonitor, invoicing, iot, iotanalytics, iotdeviceadvisor, iotfleetwise, iotsitewise, iottwinmaker, iotwireless, ivs, ivschat, kafka, kafka-cluster, kafkaconnect, kendra, kendra-ranking, kinesis, kinesisanalytics, kinesisvideo, kms, lakeformation, lambda, launchwizard, lex, license-manager, lightsail, logs, lookoutequipment, lookoutvision, m2, macie2, managedblockchain, mediaconnect, medialive, mediapackage, mediapackage-vod, mediapackagev2, mediatailor, medical-imaging, memorydb, mobiletargeting, mpa, mq, neptune-graph, network-firewall, networkmanager, nimble, notifications, notifications-contacts, nova-act, oam, observabilityadmin, odb, omics, organizations, osis, panorama, payment-cryptography, pca-connector-ad, pca-connector-scep, pcs, personalize, pipes, profile, proton, qbusiness, qldb, quicksight, ram, rbin, rds, redshift, redshift-serverless, refactor-spaces, rekognition, resiliencehub, resource-explorer-2, resource-groups, robomaker, rolesanywhere, route53, route53-recovery-control-config, route53-recovery-readiness, route53globalresolver, route53profiles, route53resolver, rtbfabric, rum, s3, s3-outposts, s3express, s3files, s3tables, s3vectors, sagemaker, scheduler, schemas, secretsmanager, securityagent, securityhub, securitylake, servicecatalog, ses, shield, signer, simspaceweaver, sms-voice, sns, sqs, ssm, ssm-contacts, ssm-guiconnect, ssm-incidents, ssm-quicksetup, ssm-sap, sso, sso-directory, states, sts, supportapp, synthetics, tag, thinclient, timestream, timestream-influxdb, transfer, trustedadvisor, verifiedpermissions, voiceid, vpc-lattice, wafv2, wisdom, workspaces, workspaces-instances, workspaces-web, xray

Control-plane actions (2763)

By access level: 1288 List, 1473 Read, 1 Tagging, 1 Write.

The full action list is in actions.json.

Data-plane actions (10)

By access level: 2 List, 8 Read.

The full action list is in actions.json.

Excluded and conditional actions

No patterns are excluded by NotAction or Deny statements.

Resource scope and attachment

Resource scope across granted actions: all-resources.

Can be attached: No (service-linked role policy).

Why this tier

• Grants 2 write, tagging or permissions-management actions, short of full control of any service.

Guidance

Pending editorial review. The permission data on this page comes straight from AWS; this section will be filled in once a reviewed guide exists.

Related policies

Same domain

• AdministratorAccess-AWSElasticBeanstalk
• AIDevOpsReleaseManagementVPCPolicy
• AmazonAppStreamServiceAccess
• AmazonBioDiscoveryServiceLinkedRolePolicy
• AmazonBraketJobsExecutionPolicy
• AmazonDMSVPCManagementRole
• AmazonDRSVPCManagement
• AmazonEBSCSIDriverEKSClusterScopedPolicy

Frequently asked questions

Pending editorial review. The permission data on this page comes straight from AWS; this section will be filled in once a reviewed guide exists.

Policy JSON

Download policy.json

This document is large, so it is shown compact here. Use the formatted policy.json to read it with indentation.

{"Version":"2012-10-17","Statement":[{"Sid":"WellArchitectedAgentScanningReadOnly1","Effect":"Allow","Action":["access-analyzer:GetAnalyzer","access-analyzer:ListAnalyzers","access-analyzer:ListArchiveRules","acm-pca:DescribeCertificateAuthority","acm-pca:GetCertificateAuthorityCsr","acm-pca:ListCertificateAuthorities","acm-pca:ListTags","acm:DescribeCertificate","aco-automation:GetAutomationRule","aco-automation:ListAutomationRules","aidevops:DescribePrivateConnection","aidevops:GetAgentSpace","aidevops:GetAssociation","aidevops:GetOperatorApp","aidevops:GetService","aidevops:ListAgentSpaces","aidevops:ListAssociations","aidevops:ListPrivateConnections","aidevops:ListServices","aidevops:ListTagsForResource","aiops:GetInvestigationGroup","aiops:GetInvestigationGroupPolicy","aiops:ListInvestigationGroups","aiops:ListTagsForResource","airflow-serverless:GetWorkflow","airflow-serverless:ListTagsForResource","airflow-serverless:ListWorkflows","airflow:GetEnvironment","airflow:ListEnvironments","amplify:GetApp","amplify:GetBranch","amplify:GetDomainAssociation","amplify:ListApps","amplify:ListBranches","amplify:ListDomainAssociations","amplify:ListTagsForResource","amplifyuibuilder:GetComponent","amplifyuibuilder:GetForm","amplifyuibuilder:GetTheme","amplifyuibuilder:ListComponents","amplifyuibuilder:ListForms","amplifyuibuilder:ListThemes","aoss:BatchGetCollection","aoss:BatchGetCollectionGroup","aoss:BatchGetLifecyclePolicy","aoss:BatchGetVpcEndpoint","aoss:GetAccessPolicy","aoss:GetSecurityConfig","aoss:GetSecurityPolicy","aoss:ListAccessPolicies","aoss:ListCollectionGroups","aoss:ListCollections","aoss:ListLifecyclePolicies","aoss:ListSecurityConfigs","aoss:ListSecurityPolicies","aoss:ListTagsForResource","aoss:ListVpcEndpoints","apigateway:GetRoutingRule","apigateway:ListRoutingRules","app-integrations:GetApplication","app-integrations:GetDataIntegration","app-integrations:GetEventIntegration","app-integrations:ListApplications","app-integrations:ListDataIntegrations","app-integrations:ListEventIntegrations","app-integrations:ListTagsForResource","appconfig:GetApplication","appconfig:GetConfigurationProfile","appconfig:GetDeployment","appconfig:GetDeploymentStrategy","appconfig:GetEnvironment","appconfig:GetExtension","appconfig:GetExtensionAssociation","appconfig:GetHostedConfigurationVersion","appconfig:ListApplications","appconfig:ListConfigurationProfiles","appconfig:ListDeploymentStrategies","appconfig:ListDeployments","appconfig:ListEnvironments","appconfig:ListExtensionAssociations","appconfig:ListExtensions","appconfig:ListHostedConfigurationVersions","appconfig:ListTagsForResource","appflow:DescribeConnector","appflow:DescribeConnectorProfiles","appflow:DescribeFlow","appflow:ListConnectors","appflow:ListFlows","appflow:ListTagsForResource","application-autoscaling:DescribeScalableTargets","application-autoscaling:DescribeScalingActivities","application-autoscaling:DescribeScalingPolicies","application-autoscaling:DescribeScheduledActions","application-signals:GetServiceLevelObjective","application-signals:ListGroupingAttributeDefinitions","application-signals:ListServiceLevelObjectiveExclusionWindows","application-signals:ListServiceLevelObjectives","application-signals:ListServices","application-signals:ListTagsForResource","applicationinsights:DescribeApplication","applicationinsights:DescribeComponent","applicationinsights:DescribeLogPattern","applicationinsights:ListApplications","applicationinsights:ListComponents","applicationinsights:ListLogPatternSets","applicationinsights:ListLogPatterns","applicationinsights:ListTagsForResource","apprunner:DescribeAutoScalingConfiguration","apprunner:DescribeObservabilityConfiguration","apprunner:DescribeService","apprunner:DescribeVpcConnector","apprunner:DescribeVpcIngressConnection","apprunner:ListAutoScalingConfigurations","apprunner:ListObservabilityConfigurations","apprunner:ListServices","apprunner:ListVpcConnectors","apprunner:ListVpcIngressConnections","appstream:DescribeAppBlockBuilders","appstream:DescribeDirectoryConfigs","appstream:DescribeImageBuilders","appstream:DescribeStacks","appstream:DescribeUserStackAssociations","appstream:DescribeUsers","appstream:ListTagsForResource","appsync:GetApi","appsync:GetChannelNamespace","appsync:GetDataSource","appsync:GetDomainName","appsync:GetGraphqlApi","appsync:GetSourceApiAssociation","appsync:ListApis","appsync:ListChannelNamespaces","appsync:ListDataSources","appsync:ListDomainNames","appsync:ListFunctions","appsync:ListGraphqlApis","appsync:ListResolvers","appsync:ListSourceApiAssociations","appsync:ListTagsForResource","apptest:GetTestCase","apptest:ListTagsForResource","apptest:ListTestCases","aps:DescribeAlertManagerDefinition","aps:DescribeAnomalyDetector","aps:DescribeLoggingConfiguration","aps:DescribeQueryLoggingConfiguration","aps:DescribeResourcePolicy","aps:DescribeRuleGroupsNamespace","aps:DescribeScraper","aps:DescribeScraperLoggingConfiguration","aps:DescribeWorkspace","aps:DescribeWorkspaceConfiguration","aps:ListAnomalyDetectors","aps:ListRuleGroupsNamespaces","aps:ListScrapers","aps:ListTagsForResource","aps:ListWorkspaces","arc-region-switch:GetPlan","arc-region-switch:ListPlans","arc-region-switch:ListRoute53HealthChecks","arc-region-switch:ListTagsForResource","arc-zonal-shift:GetAutoshiftObserverNotificationStatus","arc-zonal-shift:GetManagedResource","arc-zonal-shift:ListManagedResources","athena:GetCapacityAssignmentConfiguration","athena:GetCapacityReservation","athena:GetDataCatalog","athena:GetNamedQuery","athena:GetPreparedStatement","athena:GetWorkGroup","athena:ListCapacityReservations","athena:ListDataCatalogs","athena:ListNamedQueries","athena:ListPreparedStatements","athena:ListTagsForResource","athena:ListWorkGroups","auditmanager:GetAssessment","auditmanager:ListAssessments","auditmanager:ListTagsForResource","autoscaling:DescribeAccountLimits","autoscaling:DescribeAccountSettings","autoscaling:DescribeAdjustmentTypes","autoscaling:DescribeAutoScalingGroups","autoscaling:DescribeAutoScalingInstances","autoscaling:DescribeAutoScalingNotificationTypes","autoscaling:DescribeInstanceRefreshes","autoscaling:DescribeLaunchConfigurations","autoscaling:DescribeLifecycleHookTypes","autoscaling:DescribeLifecycleHooks","autoscaling:DescribeLoadBalancerTargetGroups","autoscaling:DescribeLoadBalancers","autoscaling:DescribeMetricCollectionTypes","autoscaling:DescribeNotificationConfigurations","autoscaling:DescribePolicies","autoscaling:DescribeScalingActivities","autoscaling:DescribeScalingProcessTypes","autoscaling:DescribeScheduledActions","autoscaling:DescribeTags","autoscaling:DescribeTerminationPolicyTypes","autoscaling:DescribeTrafficSources","autoscaling:DescribeWarmPool","aws-external-anthropic:GetWorkspace","aws-external-anthropic:ListTagsForResource","aws-external-anthropic:ListWorkspaces","b2bi:GetCapability","b2bi:GetPartnership","b2bi:GetProfile","b2bi:GetTransformer","b2bi:ListCapabilities","b2bi:ListPartnerships","b2bi:ListProfiles","b2bi:ListTagsForResource","b2bi:ListTransformers","backup-gateway:GetHypervisor","backup-gateway:ListHypervisors","backup-gateway:ListTagsForResource","backup:DescribeBackupVault","backup:DescribeFramework","backup:DescribeReportPlan","backup:GetBackupPlan","backup:GetBackupSelection","backup:GetBackupVaultAccessPolicy","backup:GetBackupVaultNotifications","backup:GetRestoreTestingPlan","backup:GetRestoreTestingSelection","backup:GetTieringConfiguration","backup:ListBackupPlans","backup:ListBackupSelections","backup:ListBackupVaults","backup:ListFrameworks","backup:ListReportPlans","backup:ListRestoreTestingPlans","backup:ListRestoreTestingSelections","backup:ListTags","backup:ListTieringConfigurations","batch:DescribeComputeEnvironments","batch:DescribeConsumableResource","batch:DescribeJobDefinitions","batch:DescribeJobQueues","batch:DescribeQuotaShare","batch:DescribeSchedulingPolicies","batch:DescribeServiceEnvironments","batch:ListConsumableResources","batch:ListQuotaShares","batch:ListSchedulingPolicies","bcm-data-exports:GetExport","bcm-data-exports:ListExports","bcm-data-exports:ListTagsForResource","bcm-pricing-calculator:GetBillScenario","bcm-pricing-calculator:ListBillScenarios","bcm-pricing-calculator:ListTagsForResource","bedrock-agentcore:GetAgentRuntime","bedrock-agentcore:GetAgentRuntimeEndpoint","bedrock-agentcore:GetApiKeyCredentialProvider","bedrock-agentcore:GetBrowser","bedrock-agentcore:GetBrowserProfile","bedrock-agentcore:GetCodeInterpreter","bedrock-agentcore:GetDataset","bedrock-agentcore:GetEvaluator","bedrock-agentcore:GetGateway","bedrock-agentcore:GetGatewayTarget","bedrock-agentcore:GetHarness","bedrock-agentcore:GetMemory","bedrock-agentcore:GetOauth2CredentialProvider","bedrock-agentcore:GetOnlineEvaluationConfig","bedrock-agentcore:GetPaymentConnector","bedrock-agentcore:GetPaymentCredentialProvider","bedrock-agentcore:GetPolicy","bedrock-agentcore:GetPolicyEngine","bedrock-agentcore:GetWorkloadIdentity","bedrock-agentcore:ListAgentRuntimeEndpoints","bedrock-agentcore:ListAgentRuntimes","bedrock-agentcore:ListApiKeyCredentialProviders","bedrock-agentcore:ListBrowserProfiles","bedrock-agentcore:ListBrowsers","bedrock-agentcore:ListCodeInterpreters","bedrock-agentcore:ListDatasets","bedrock-agentcore:ListEvaluators","bedrock-agentcore:ListGatewayTargets","bedrock-agentcore:ListGateways","bedrock-agentcore:ListHarnesses","bedrock-agentcore:ListMemories","bedrock-agentcore:ListOauth2CredentialProviders","bedrock-agentcore:ListOnlineEvaluationConfigs","bedrock-agentcore:ListPaymentConnectors","bedrock-agentcore:ListPaymentCredentialProviders","bedrock-agentcore:ListPolicies","bedrock-agentcore:ListPolicyEngines","bedrock-agentcore:ListTagsForResource","bedrock-agentcore:ListWorkloadIdentities","bedrock-mantle:GetProject","bedrock-mantle:ListProjects","bedrock-mantle:ListTagsForResource","bedrock:GetAgent","bedrock:GetAgentActionGroup","bedrock:GetAgentAlias","bedrock:GetAgentCollaborator","bedrock:GetAgentKnowledgeBase","bedrock:GetAutomatedReasoningPolicy","bedrock:GetBlueprint","bedrock:GetDataAutomationLibrary","bedrock:GetDataAutomationProject","bedrock:GetDataSource","bedrock:GetFlow","bedrock:GetFlowAlias","bedrock:GetFlowVersion","bedrock:GetGuardrail","bedrock:GetInferenceProfile","bedrock:GetKnowledgeBase","bedrock:GetPrompt","bedrock:GetPromptRouter","bedrock:ListAgentActionGroups","bedrock:ListAgentAliases","bedrock:ListAgentCollaborators","bedrock:ListAgentKnowledgeBases","bedrock:ListAgents","bedrock:ListAutomatedReasoningPolicies","bedrock:ListBlueprints","bedrock:ListDataAutomationLibraries","bedrock:ListDataAutomationProjects","bedrock:ListDataSources","bedrock:ListEnforcedGuardrailsConfiguration","bedrock:ListFlowAliases","bedrock:ListFlowVersions","bedrock:ListFlows","bedrock:ListGuardrails","bedrock:ListInferenceProfiles","bedrock:ListKnowledgeBases","bedrock:ListPromptRouters","bedrock:ListPrompts","bedrock:ListTagsForResource","billing:GetBillingView","billing:ListBillingViews","billing:ListSourceViewsForBillingView","billing:ListTagsForResource","billingconductor:ListAccountAssociations","billingconductor:ListBillingGroups","billingconductor:ListCustomLineItemVersions","billingconductor:ListCustomLineItems","billingconductor:ListPricingPlans","billingconductor:ListPricingRules","billingconductor:ListPricingRulesAssociatedToPricingPlan","billingconductor:ListResourcesAssociatedToCustomLineItem","billingconductor:ListTagsForResource","braket:ListTagsForResource","braket:SearchSpendingLimits","budgets:DescribeBudgetAction","budgets:DescribeBudgetActionsForAccount","budgets:DescribeBudgetActionsForBudget","budgets:ListTagsForResource","cases:BatchGetCaseRule","cases:BatchGetField","cases:GetDomain","cases:GetLayout","cases:GetTemplate","cases:ListCaseRules","cases:ListDomains","cases:ListFields","cases:ListLayouts","cases:ListTemplates","ce:DescribeCostCategoryDefinition","ce:GetAnomalyMonitors","ce:GetAnomalySubscriptions","ce:GetCostAndUsage","ce:GetCostAndUsageWithResources","ce:ListCostCategoryDefinitions","ce:ListTagsForResource","chatbot:DescribeSlackChannelConfigurations","chatbot:GetCustomAction","chatbot:GetMicrosoftTeamsChannelConfiguration","chatbot:ListAssociations","chatbot:ListCustomActions","chatbot:ListMicrosoftTeamsChannelConfigurations","chatbot:ListTagsForResource","chime:DescribeAppInstance","chime:DescribeAppInstanceBot","chime:ListAppInstanceBots","chime:ListAppInstances","chime:ListTagsForResource","cleanrooms-ml:GetConfiguredModelAlgorithm","cleanrooms-ml:GetConfiguredModelAlgorithmAssociation","cleanrooms-ml:GetTrainingDataset","cleanrooms-ml:ListConfiguredModelAlgorithmAssociations","cleanrooms-ml:ListConfiguredModelAlgorithms","cleanrooms-ml:ListTrainingDatasets","cleanrooms:GetAnalysisTemplate","cleanrooms:GetCollaboration","cleanrooms:GetConfiguredTable","cleanrooms:GetConfiguredTableAnalysisRule","cleanrooms:GetConfiguredTableAssociation","cleanrooms:GetConfiguredTableAssociationAnalysisRule","cleanrooms:GetIdMappingTable","cleanrooms:GetIdNamespaceAssociation","cleanrooms:GetMembership","cleanrooms:GetPrivacyBudgetTemplate","cleanrooms:ListAnalysisTemplates","cleanrooms:ListCollaborations","cleanrooms:ListConfiguredTableAssociations","cleanrooms:ListConfiguredTables","cleanrooms:ListIdMappingTables","cleanrooms:ListIdNamespaceAssociations","cleanrooms:ListMembers","cleanrooms:ListMemberships","cleanrooms:ListPrivacyBudgetTemplates","cleanrooms:ListTagsForResource","cloudformation:BatchDescribeTypeConfigurations","cloudformation:DescribePublisher","cloudformation:DescribeStackInstance","cloudformation:DescribeStackSet","cloudformation:DescribeStacks","cloudformation:DescribeType","cloudformation:GetResource","cloudformation:GetStackPolicy","cloudformation:GetTemplate","cloudformation:ListResources","cloudformation:ListStackResources","cloudformation:ListStackInstances","cloudformation:ListStackSets","cloudformation:ListStacks","cloudformation:ListTypeVersions","cloudformation:ListTypes","cloudfront:DescribeConnectionFunction","cloudfront:DescribeFunction","cloudfront:DescribeKeyValueStore","cloudfront:GetAnycastIpList","cloudfront:GetCachePolicy","cloudfront:GetCloudFrontOriginAccessIdentity","cloudfront:GetConnectionFunction","cloudfront:GetConnectionGroup","cloudfront:GetContinuousDeploymentPolicy","cloudfront:GetDistribution","cloudfront:GetDistributionConfig","cloudfront:GetDistributionTenant","cloudfront:GetFunction","cloudfront:GetKeyGroup","cloudfront:GetOriginAccessControl","cloudfront:GetOriginRequestPolicy","cloudfront:GetPublicKey","cloudfront:GetRealtimeLogConfig","cloudfront:GetResponseHeadersPolicy","cloudfront:GetTrustStore","cloudfront:GetVpcOrigin","cloudfront:ListAnycastIpLists","cloudfront:ListCachePolicies","cloudfront:ListCloudFrontOriginAccessIdentities","cloudfront:ListConnectionFunctions","cloudfront:ListConnectionGroups","cloudfront:ListContinuousDeploymentPolicies","cloudfront:ListDistributionTenants","cloudfront:ListDistributions","cloudfront:ListFunctions","cloudfront:ListKeyGroups","cloudfront:ListKeyValueStores","cloudfront:ListOriginAccessControls","cloudfront:ListOriginRequestPolicies","cloudfront:ListPublicKeys","cloudfront:ListRealtimeLogConfigs","cloudfront:ListResponseHeadersPolicies","cloudfront:ListTagsForResource","cloudfront:ListTrustStores","cloudfront:ListVpcOrigins","cloudtrail:DescribeTrails","cloudtrail:GetChannel","cloudtrail:GetDashboard","cloudtrail:GetEventConfiguration","cloudtrail:GetEventDataStore","cloudtrail:GetEventSelectors","cloudtrail:GetInsightSelectors","cloudtrail:GetTrail","cloudtrail:GetTrailStatus","cloudtrail:ListChannels","cloudtrail:ListDashboards","cloudtrail:ListEventDataStores","cloudtrail:ListTags","cloudtrail:ListTrails","cloudwatch:DescribeAlarms","cloudwatch:GetAlarmMuteRule","cloudwatch:GetDashboard","cloudwatch:GetMetricData","cloudwatch:GetMetricStatistics","cloudwatch:GetMetricStream","cloudwatch:GetMetricWidgetImage","cloudwatch:GetOTelEnrichment","cloudwatch:ListAlarmMuteRules","cloudwatch:ListDashboards","cloudwatch:ListManagedInsightRules","cloudwatch:ListMetricStreams","cloudwatch:ListMetrics","cloudwatch:ListTagsForResource","codeartifact:DescribeDomain","codeartifact:DescribePackageGroup","codeartifact:DescribeRepository","codeartifact:GetDomainPermissionsPolicy","codeartifact:GetRepositoryPermissionsPolicy","codeartifact:ListAllowedRepositoriesForGroup","codeartifact:ListDomains","codeartifact:ListPackageGroups","codeartifact:ListRepositories","codeartifact:ListTagsForResource","codebuild:BatchGetFleets","codebuild:ListFleets","codecommit:GetRepository","codecommit:GetRepositoryTriggers","codeconnections:GetConnection","codeconnections:ListConnections","codeconnections:ListTagsForResource","codedeploy:GetApplication","codedeploy:GetDeployment","codedeploy:GetDeploymentConfig","codedeploy:GetDeploymentGroup","codedeploy:ListApplications","codedeploy:ListDeploymentConfigs","codedeploy:ListDeploymentGroups","codedeploy:ListDeployments","codedeploy:ListTagsForResource","codeguru-profiler:DescribeProfilingGroup","codeguru-profiler:GetNotificationConfiguration","codeguru-profiler:GetPolicy","codeguru-profiler:ListProfilingGroups","codeguru-profiler:ListTagsForResource","codeguru-reviewer:DescribeRepositoryAssociation","codeguru-reviewer:ListRepositoryAssociations","codeguru-reviewer:ListTagsForResource","codepipeline:GetPipeline","codepipeline:GetPipelineState","codepipeline:ListActionTypes","codepipeline:ListPipelines","codepipeline:ListTagsForResource","codepipeline:ListWebhooks","codestar-connections:GetConnection","codestar-connections:GetRepositoryLink","codestar-connections:GetSyncConfiguration","codestar-connections:ListConnections","codestar-connections:ListRepositoryLinks","codestar-connections:ListSyncConfigurations","codestar-connections:ListTagsForResource","codestar-notifications:DescribeNotificationRule","codestar-notifications:ListNotificationRules","cognito-identity:DescribeIdentityPool","cognito-identity:GetIdentityPoolRoles","cognito-identity:GetPrincipalTagAttributeMap","cognito-identity:ListIdentityPools","cognito-idp:DescribeIdentityProvider","cognito-idp:DescribeResourceServer","cognito-idp:DescribeTerms","cognito-idp:DescribeUserPool","cognito-idp:DescribeUserPoolClient","cognito-idp:GetGroup","cognito-idp:GetUserPoolMfaConfig","cognito-idp:ListGroups","cognito-idp:ListIdentityProviders","cognito-idp:ListResourceServers","cognito-idp:ListTerms","cognito-idp:ListUserPoolClients","cognito-idp:ListUserPools","comprehend:DescribeDocumentClassifier","comprehend:DescribeFlywheel","comprehend:DescribeResourcePolicy","comprehend:ListDocumentClassifiers","comprehend:ListFlywheels","comprehend:ListTagsForResource","config:DescribeAggregationAuthorizations","config:DescribeComplianceByConfigRule","config:DescribeConfigRules","config:DescribeConfigurationAggregators","config:DescribeConformancePacks","config:DescribeOrganizationConformancePacks","config:DescribeRemediationConfigurations","config:GetStoredQuery","config:ListStoredQueries","config:ListTagsForResource","connect-campaigns:DescribeCampaign","connect-campaigns:ListCampaigns","connect:DescribeAgentStatus","connect:DescribeContactFlow","connect:DescribeContactFlowModule","connect:DescribeContactFlowModuleAlias","connect:DescribeDataTable","connect:DescribeEvaluationForm","connect:DescribeHoursOfOperation","connect:DescribeInstance","connect:DescribeInstanceStorageConfig","connect:DescribeNotification","connect:DescribePhoneNumber","connect:DescribePredefinedAttribute","connect:DescribePrompt","connect:DescribeQueue","connect:DescribeQuickConnect","connect:DescribeRoutingProfile","connect:DescribeRule","connect:DescribeSecurityProfile","connect:DescribeTrafficDistributionGroup","connect:DescribeUserHierarchyGroup","connect:DescribeView","connect:DescribeWorkspace","connect:GetTaskTemplate","connect:ListAgentStatuses","connect:ListApprovedOrigins","connect:ListBots","connect:ListContactFlowModuleAliases","connect:ListContactFlowModuleVersions","connect:ListContactFlowModules","connect:ListContactFlowVersions","connect:ListContactFlows","connect:ListDataTableAttributes","connect:ListDataTables","connect:ListEvaluationFormVersions","connect:ListEvaluationForms","connect:ListHoursOfOperationOverrides","connect:ListHoursOfOperations","connect:ListInstanceAttributes","connect:ListInstanceStorageConfigs","connect:ListInstances","connect:ListIntegrationAssociations","connect:ListLambdaFunctions","connect:ListNotifications","connect:ListPredefinedAttributes","connect:ListPrompts","connect:ListQueueEmailAddresses","connect:ListQueueQuickConnects","connect:ListQueues","connect:ListQuickConnects","connect:ListRoutingProfileManualAssignmentQueues","connect:ListRoutingProfileQueues","connect:ListRoutingProfiles","connect:ListRules","connect:ListSecurityKeys","connect:ListSecurityProfileApplications","connect:ListSecurityProfileFlowModules","connect:ListSecurityProfilePermissions","connect:ListSecurityProfiles","connect:ListTagsForResource","connect:ListTaskTemplates","connect:ListTrafficDistributionGroups","connect:ListUserHierarchyGroups","connect:ListUserProficiencies","connect:ListUsers","connect:ListViewVersions","connect:ListViews","connect:ListWorkspaceMedia","connect:ListWorkspacePages","connect:ListWorkspaces","connect:SearchWorkspaceAssociations","controltower:GetEnabledBaseline","controltower:GetEnabledControl","controltower:GetLandingZone","controltower:ListEnabledBaselines","controltower:ListEnabledControls","controltower:ListLandingZones","controltower:ListTagsForResource","cur:DescribeReportDefinitions","cur:ListTagsForResource","databrew:DescribeDataset","databrew:DescribeJob","databrew:DescribeProject","databrew:DescribeRecipe","databrew:DescribeRuleset","databrew:DescribeSchedule","databrew:ListDatasets","databrew:ListJobs","databrew:ListProjects","databrew:ListRecipes","databrew:ListRulesets","databrew:ListSchedules","databrew:ListTagsForResource","datapipeline:DescribePipelines","datapipeline:GetPipelineDefinition","datapipeline:ListPipelines","datasync:DescribeAgent","datasync:DescribeLocationAzureBlob","datasync:DescribeLocationEfs","datasync:DescribeLocationFsxLustre","datasync:DescribeLocationFsxOntap","datasync:DescribeLocationFsxOpenZfs","datasync:DescribeLocationFsxWindows","datasync:DescribeLocationHdfs","datasync:DescribeLocationNfs","datasync:DescribeLocationObjectStorage","datasync:DescribeLocationS3","datasync:DescribeLocationSmb","datasync:DescribeTask","datasync:ListAgents","datasync:ListLocations","datasync:ListTagsForResource","datasync:ListTasks","datazone:GetDataSource","datazone:GetDomain","datazone:GetDomainUnit","datazone:GetEnvironment","datazone:GetEnvironmentAction","datazone:GetEnvironmentBlueprintConfiguration","datazone:GetEnvironmentProfile","datazone:GetGroupProfile","datazone:GetProject","datazone:GetProjectProfile","datazone:GetSubscriptionTarget","datazone:GetUserProfile","datazone:ListConnections","datazone:ListDataSources","datazone:ListDomainUnitsForParent","datazone:ListDomains","datazone:ListEntityOwners","datazone:ListEnvironmentActions","datazone:ListEnvironmentBlueprintConfigurations","datazone:ListEnvironmentProfiles","datazone:ListEnvironments","datazone:ListPolicyGrants","datazone:ListProjectMemberships","datazone:ListProjectProfiles","datazone:ListProjects","datazone:ListSubscriptionTargets","datazone:SearchGroupProfiles","datazone:SearchUserProfiles","deadline:GetFarm","deadline:GetFleet","deadline:GetLicenseEndpoint","deadline:GetLimit","deadline:GetMonitor","deadline:GetQueue","deadline:GetQueueEnvironment","deadline:GetQueueFleetAssociation","deadline:GetQueueLimitAssociation","deadline:GetStorageProfile","deadline:ListFarms","deadline:ListFleets","deadline:ListLicenseEndpoints","deadline:ListLimits","deadline:ListMeteredProducts","deadline:ListMonitors","deadline:ListQueueEnvironments","deadline:ListQueueFleetAssociations","deadline:ListQueueLimitAssociations","deadline:ListQueues","deadline:ListStorageProfiles","deadline:ListTagsForResource","detective:DescribeOrganizationConfiguration","detective:GetMembers","detective:ListGraphs","detective:ListMembers","detective:ListOrganizationAdminAccount","detective:ListTagsForResource","devicefarm:GetDevicePool","devicefarm:GetInstanceProfile","devicefarm:GetNetworkProfile","devicefarm:GetProject","devicefarm:GetTestGridProject","devicefarm:GetVPCEConfiguration","devicefarm:ListDevicePools","devicefarm:ListInstanceProfiles","devicefarm:ListNetworkProfiles","devicefarm:ListProjects","devicefarm:ListTagsForResource","devicefarm:ListTestGridProjects","devicefarm:ListVPCEConfigurations","devops-guru:DescribeServiceIntegration","devops-guru:GetResourceCollection","devops-guru:ListNotificationChannels","directconnect:DescribeConnections","directconnect:DescribeDirectConnectGatewayAssociations","directconnect:DescribeDirectConnectGateways","directconnect:DescribeLags","directconnect:DescribeVirtualInterfaces","dms:DescribeDataMigrations","dms:DescribeReplicationConfigs","dms:ListDataProviders","dms:ListInstanceProfiles","dms:ListMigrationProjects","dms:ListTagsForResource","docdb-elastic:GetCluster","docdb-elastic:ListClusters","docdb-elastic:ListTagsForResource","ds:DescribeDirectories","ds:ListTagsForResource","dsql:GetCluster","dsql:GetClusterPolicy","dsql:GetVpcEndpointServiceName","dsql:ListClusters","dsql:ListTagsForResource","dynamodb:DescribeBackup","dynamodb:DescribeContinuousBackups","dynamodb:DescribeContributorInsights","dynamodb:DescribeEndpoints","dynamodb:DescribeExport","dynamodb:DescribeGlobalTable","dynamodb:DescribeGlobalTableSettings","dynamodb:DescribeImport","dynamodb:DescribeKinesisStreamingDestination","dynamodb:DescribeLimits","dynamodb:DescribeReservedCapacity","dynamodb:DescribeReservedCapacityOfferings","dynamodb:DescribeStream","dynamodb:DescribeTable","dynamodb:DescribeTableReplicaAutoScaling","dynamodb:DescribeTimeToLive","dynamodb:GetResourcePolicy","dynamodb:ListTables","dynamodb:ListTagsOfResource","ec2:DescribeAccountAttributes","ec2:DescribeAddressTransfers","ec2:DescribeAddresses","ec2:DescribeAddressesAttribute","ec2:DescribeAggregateIdFormat","ec2:DescribeAvailabilityZones","ec2:DescribeAwsNetworkPerformanceMetricSubscriptions","ec2:DescribeBundleTasks","ec2:DescribeByoipCidrs","ec2:DescribeCapacityBlockExtensionHistory","ec2:DescribeCapacityBlockExtensionOfferings","ec2:DescribeCapacityBlockOfferings","ec2:DescribeCapacityBlockStatus","ec2:DescribeCapacityBlocks","ec2:DescribeCapacityManagerDataExports","ec2:DescribeCapacityReservationBillingRequests","ec2:DescribeCapacityReservationCancellationQuotes","ec2:DescribeCapacityReservationFleets","ec2:DescribeCapacityReservationTopology","ec2:DescribeCapacityReservations","ec2:DescribeCarrierGateways","ec2:DescribeClassicLinkInstances","ec2:DescribeClientVpnAuthorizationRules","ec2:DescribeClientVpnConnections","ec2:DescribeClientVpnEndpoints","ec2:DescribeClientVpnRoutes","ec2:DescribeClientVpnTargetNetworks","ec2:DescribeCoipPools","ec2:DescribeConversionTasks","ec2:DescribeCustomerGateways","ec2:DescribeDeclarativePoliciesReports","ec2:DescribeDhcpOptions","ec2:DescribeEgressOnlyInternetGateways","ec2:DescribeElasticGpus","ec2:DescribeExportImageTasks","ec2:DescribeExportTasks","ec2:DescribeFastLaunchImages","ec2:DescribeFastSnapshotRestores","ec2:DescribeFleetHistory","ec2:DescribeFleetInstances","ec2:DescribeFleets","ec2:DescribeFlowLogs","ec2:DescribeFpgaImageAttribute","ec2:DescribeFpgaImages","ec2:DescribeHostReservationOfferings","ec2:DescribeHostReservations","ec2:DescribeHosts","ec2:DescribeIamInstanceProfileAssociations","ec2:DescribeIdFormat","ec2:DescribeIdentityIdFormat","ec2:DescribeImageAttribute","ec2:DescribeImageReferences","ec2:DescribeImageUsageReportEntries","ec2:DescribeImageUsageReports","ec2:DescribeImages","ec2:DescribeImportImageTasks","ec2:DescribeImportSnapshotTasks","ec2:DescribeInstanceAttribute","ec2:DescribeInstanceConnectEndpoints","ec2:DescribeInstanceCreditSpecifications","ec2:DescribeInstanceEventNotificationAttributes","ec2:DescribeInstanceEventWindows","ec2:DescribeInstanceImageMetadata","ec2:DescribeInstanceSqlHaHistoryStates","ec2:DescribeInstanceSqlHaStates","ec2:DescribeInstanceStatus","ec2:DescribeInstanceTopology","ec2:DescribeInstanceTypeOfferings","ec2:DescribeInstanceTypes","ec2:DescribeInstances","ec2:DescribeInternetGateways","ec2:DescribeIpamByoasn","ec2:DescribeIpamExternalResourceVerificationTokens","ec2:DescribeIpamPolicies","ec2:DescribeIpamPoolAllocations","ec2:DescribeIpamPools","ec2:DescribeIpamPrefixListResolverTargets","ec2:DescribeIpamPrefixListResolvers","ec2:DescribeIpamResourceDiscoveries","ec2:DescribeIpamResourceDiscoveryAssociations","ec2:DescribeIpamScopes","ec2:DescribeIpams","ec2:DescribeIpv6Pools","ec2:DescribeKeyPairs","ec2:DescribeLaunchTemplateVersions","ec2:DescribeLaunchTemplates","ec2:DescribeLocalGatewayRouteTablePermissions","ec2:DescribeLocalGatewayRouteTableVirtualInterfaceGroupAssociations","ec2:DescribeLocalGatewayRouteTableVpcAssociations","ec2:DescribeLocalGatewayRouteTables","ec2:DescribeLocalGatewayVirtualInterfaceGroups","ec2:DescribeLocalGatewayVirtualInterfaces","ec2:DescribeLocalGateways","ec2:DescribeLockedSnapshots","ec2:DescribeMacHosts","ec2:DescribeMacModificationTasks","ec2:DescribeManagedPrefixLists","ec2:DescribeMovingAddresses","ec2:DescribeNatGateways","ec2:DescribeNetworkAcls","ec2:DescribeNetworkInsightsAccessScopeAnalyses","ec2:DescribeNetworkInsightsAccessScopes","ec2:DescribeNetworkInsightsAnalyses","ec2:DescribeNetworkInsightsPaths","ec2:DescribeNetworkInterfaceAttribute","ec2:DescribeNetworkInterfacePermissions","ec2:DescribeNetworkInterfaces","ec2:DescribeOutpostLags","ec2:DescribePlacementGroups","ec2:DescribePrefixLists","ec2:DescribePrincipalIdFormat","ec2:DescribePublicIpv4Pools","ec2:DescribeRegions","ec2:DescribeReplaceRootVolumeTasks","ec2:DescribeReservedInstances","ec2:DescribeReservedInstancesListings","ec2:DescribeReservedInstancesModifications","ec2:DescribeReservedInstancesOfferings","ec2:DescribeRouteServerEndpoints","ec2:DescribeRouteServerPeers","ec2:DescribeRouteServers","ec2:DescribeRouteTables","ec2:DescribeScheduledInstanceAvailability","ec2:DescribeScheduledInstances","ec2:DescribeSecondaryInterfaces","ec2:DescribeSecondaryNetworks","ec2:DescribeSecondarySubnets","ec2:DescribeSecurityGroupReferences","ec2:DescribeSecurityGroupRules","ec2:DescribeSecurityGroupVpcAssociations","ec2:DescribeSecurityGroups","ec2:DescribeServiceLinkVirtualInterfaces","ec2:DescribeSnapshotAttribute","ec2:DescribeSnapshotTierStatus","ec2:DescribeSnapshots","ec2:DescribeSpotDatafeedSubscription","ec2:DescribeSpotFleetInstances","ec2:DescribeSpotFleetRequestHistory","ec2:DescribeSpotFleetRequests","ec2:DescribeSpotInstanceRequests","ec2:DescribeSpotPriceHistory","ec2:DescribeStaleSecurityGroups","ec2:DescribeStoreImageTasks","ec2:DescribeSubnets","ec2:DescribeTags","ec2:DescribeTrafficMirrorFilterRules","ec2:DescribeTrafficMirrorFilters","ec2:DescribeTrafficMirrorSessions","ec2:DescribeTrafficMirrorTargets","ec2:DescribeTransitGatewayAttachments","ec2:DescribeTransitGatewayConnectPeers","ec2:DescribeTransitGatewayConnects","ec2:DescribeTransitGatewayMeteringPolicies","ec2:DescribeTransitGatewayMulticastDomains","ec2:DescribeTransitGatewayPeeringAttachments","ec2:DescribeTransitGatewayPolicyTables","ec2:DescribeTransitGatewayRouteTableAnnouncements","ec2:DescribeTransitGatewayRouteTables","ec2:DescribeTransitGatewayVpcAttachments","ec2:DescribeTransitGateways","ec2:DescribeTrunkInterfaceAssociations","ec2:DescribeVerifiedAccessEndpoints","ec2:DescribeVerifiedAccessGroups","ec2:DescribeVerifiedAccessInstanceLoggingConfigurations","ec2:DescribeVerifiedAccessInstanceWebAclAssociations","ec2:DescribeVerifiedAccessInstances","ec2:DescribeVerifiedAccessTrustProviders","ec2:DescribeVolumeAttribute","ec2:DescribeVolumeStatus","ec2:DescribeVolumes","ec2:DescribeVolumesModifications","ec2:DescribeVpcAttribute","ec2:DescribeVpcBlockPublicAccessExclusions","ec2:DescribeVpcBlockPublicAccessOptions","ec2:DescribeVpcClassicLink","ec2:DescribeVpcClassicLinkDnsSupport","ec2:DescribeVpcEncryptionControls","ec2:DescribeVpcEndpointAssociations","ec2:DescribeVpcEndpointConnectionNotifications","ec2:DescribeVpcEndpointConnections","ec2:DescribeVpcEndpointServiceConfigurations","ec2:DescribeVpcEndpointServicePermissions","ec2:DescribeVpcEndpointServices","ec2:DescribeVpcEndpoints","ec2:DescribeVpcPeeringConnections","ec2:DescribeVpcs","ec2:DescribeVpnConcentrators","ec2:DescribeVpnConnections","ec2:DescribeVpnGateways","ec2:GetAssociatedEnclaveCertificateIamRoles","ec2:GetIpamPoolAllocations","ec2:GetIpamPoolCidrs","ec2:GetIpamPrefixListResolverRules","ec2:GetManagedPrefixListEntries","ec2:GetNetworkInsightsAccessScopeContent","ec2:GetRouteServerAssociations","ec2:GetRouteServerPropagations","ec2:GetSnapshotBlockPublicAccessState","ec2:GetTransitGatewayMeteringPolicyEntries","ec2:GetTransitGatewayMulticastDomainAssociations","ec2:GetTransitGatewayRouteTableAssociations","ec2:GetTransitGatewayRouteTablePropagations","ec2:GetVerifiedAccessEndpointPolicy","ec2:GetVerifiedAccessGroupPolicy","ec2:SearchLocalGatewayRoutes","ec2:SearchTransitGatewayMulticastGroups","ec2:SearchTransitGatewayRoutes","ecr-public:DescribeRepositories","ecr-public:GetRepositoryCatalogData","ecr-public:GetRepositoryPolicy","ecr-public:ListTagsForResource","ecr:DescribePullThroughCacheRules","ecr:DescribeRegistry","ecr:DescribeRepositories","ecr:DescribeRepositoryCreationTemplates","ecr:GetLifecyclePolicy","ecr:GetRegistryPolicy","ecr:GetRegistryScanningConfiguration","ecr:GetRepositoryPolicy","ecr:GetSigningConfiguration","ecr:ListPullTimeUpdateExclusions","ecr:ListTagsForResource","ecs:DescribeCapacityProviders","ecs:DescribeClusters","ecs:DescribeDaemon","ecs:DescribeDaemonTaskDefinition","ecs:DescribeServices","ecs:DescribeTaskDefinition","ecs:ListClusters","ecs:ListDaemonTaskDefinitions","ecs:ListDaemons","ecs:ListServices","ecs:ListTagsForResource","ecs:ListTaskDefinitions","eks:DescribeAccessEntry","eks:DescribeAddon","eks:DescribeCapability","eks:DescribeCluster","eks:DescribeFargateProfile","eks:DescribeIdentityProviderConfig","eks:DescribeNodegroup","eks:DescribePodIdentityAssociation","eks:ListAccessEntries","eks:ListAddons","eks:ListAssociatedAccessPolicies","eks:ListCapabilities","eks:ListClusters","eks:ListFargateProfiles","eks:ListIdentityProviderConfigs","eks:ListNodegroups","eks:ListPodIdentityAssociations","elasticache:DescribeCacheClusters","elasticache:DescribeCacheParameterGroups","elasticache:DescribeCacheParameters","elasticache:DescribeCacheSubnetGroups","elasticache:DescribeGlobalReplicationGroups","elasticache:DescribeReplicationGroups","elasticache:DescribeServerlessCaches","elasticache:DescribeUserGroups","elasticache:DescribeUsers","elasticache:ListTagsForResource","elasticbeanstalk:DescribeApplicationVersions","elasticbeanstalk:DescribeApplications","elasticbeanstalk:DescribeConfigurationSettings","elasticbeanstalk:DescribeEnvironments","elasticbeanstalk:ListTagsForResource","elasticfilesystem:DescribeAccessPoints","elasticfilesystem:DescribeBackupPolicy","elasticfilesystem:DescribeFileSystemPolicy","elasticfilesystem:DescribeFileSystems","elasticfilesystem:DescribeLifecycleConfiguration","elasticfilesystem:DescribeMountTargetSecurityGroups","elasticfilesystem:DescribeMountTargets","elasticfilesystem:DescribeReplicationConfigurations","elasticloadbalancing:DescribeCapacityReservation","elasticloadbalancing:DescribeListenerAttributes","elasticloadbalancing:DescribeListeners","elasticloadbalancing:DescribeLoadBalancerAttributes","elasticloadbalancing:DescribeLoadBalancers","elasticloadbalancing:DescribeRules","elasticloadbalancing:DescribeTags","elasticloadbalancing:DescribeTargetGroupAttributes","elasticloadbalancing:DescribeTargetGroups","elasticloadbalancing:DescribeTargetHealth","elasticloadbalancing:DescribeTrustStoreRevocations","elasticloadbalancing:DescribeTrustStores","elasticmapreduce:DescribeSecurityConfiguration","elasticmapreduce:DescribeStudio","elasticmapreduce:GetStudioSessionMapping","elasticmapreduce:ListSecurityConfigurations","elasticmapreduce:ListStudioSessionMappings","elasticmapreduce:ListStudios","elemental-inference:GetFeed","elemental-inference:ListFeeds","elemental-inference:ListTagsForResource","emr-containers:DescribeManagedEndpoint","emr-containers:DescribeSecurityConfiguration","emr-containers:DescribeVirtualCluster","emr-containers:ListManagedEndpoints","emr-containers:ListSecurityConfigurations","emr-containers:ListTagsForResource","emr-containers:ListVirtualClusters","emr-serverless:GetApplication","emr-serverless:ListApplications","entityresolution:GetIdMappingWorkflow","entityresolution:GetIdNamespace","entityresolution:GetMatchingWorkflow","entityresolution:GetPolicy","entityresolution:GetSchemaMapping","entityresolution:ListIdMappingWorkflows","entityresolution:ListIdNamespaces","entityresolution:ListMatchingWorkflows","entityresolution:ListSchemaMappings","entityresolution:ListTagsForResource","es:GetApplication","es:ListApplications","es:ListTags","events:DescribeApiDestination","events:DescribeArchive","events:DescribeConnection","events:DescribeEndpoint","events:DescribeEventBus","events:DescribeRule","events:ListApiDestinations","events:ListArchives","events:ListConnections","events:ListEndpoints","events:ListEventBuses","events:ListRules","events:ListTagsForResource","events:ListTargetsByRule","evidently:GetSegment","evidently:ListSegments","evidently:ListTagsForResource","evs:GetEnvironment","evs:ListEnvironments","evs:ListTagsForResource","finspace:GetEnvironment","finspace:ListEnvironments","firehose:DescribeDeliveryStream","firehose:ListDeliveryStreams","firehose:ListTagsForDeliveryStream","fis:GetExperimentTemplate","fis:GetTargetAccountConfiguration","fis:ListExperimentTemplates","fis:ListTagsForResource","fis:ListTargetAccountConfigurations","fms:GetNotificationChannel","fms:GetPolicy","fms:GetResourceSet","fms:ListPolicies","fms:ListResourceSetResources","fms:ListResourceSets","fms:ListTagsForResource","forecast:DescribeDataset","forecast:DescribeDatasetGroup","forecast:ListDatasetGroups","forecast:ListDatasets","frauddetector:BatchGetVariable","frauddetector:DescribeDetector","frauddetector:GetDetectorVersion","frauddetector:GetDetectors","frauddetector:GetEntityTypes","frauddetector:GetEventTypes","frauddetector:GetExternalModels","frauddetector:GetLabels","frauddetector:GetListsMetadata","frauddetector:GetModelVersion","frauddetector:GetOutcomes","frauddetector:GetRules","frauddetector:GetVariables","frauddetector:ListTagsForResource","fsx:DescribeDataRepositoryAssociations","fsx:DescribeS3AccessPointAttachments","gamelift:DescribeAlias","gamelift:DescribeBuild","gamelift:DescribeContainerFleet","gamelift:DescribeContainerGroupDefinition","gamelift:DescribeFleetAttributes","gamelift:DescribeFleetCapacity","gamelift:DescribeFleetLocationAttributes","gamelift:DescribeFleetLocationCapacity","gamelift:DescribeFleetPortSettings","gamelift:DescribeGameServerGroup","gamelift:DescribeGameSessionQueues","gamelift:DescribeMatchmakingConfigurations","gamelift:DescribeMatchmakingRuleSets","gamelift:DescribeRuntimeConfiguration","gamelift:DescribeScalingPolicies","gamelift:DescribeScript","gamelift:ListAliases","gamelift:ListBuilds","gamelift:ListContainerFleets","gamelift:ListContainerGroupDefinitions","gamelift:ListFleets","gamelift:ListGameServerGroups","gamelift:ListLocations","gamelift:ListScripts","gamelift:ListTagsForResource","gamelift:ValidateMatchmakingRuleSet","gameliftstreams:GetApplication","gameliftstreams:GetStreamGroup","gameliftstreams:ListApplications","gameliftstreams:ListStreamGroups","gameliftstreams:ListTagsForResource","geo:DescribeGeofenceCollection","geo:DescribeKey","geo:DescribeMap","geo:DescribePlaceIndex","geo:DescribeRouteCalculator","geo:DescribeTracker","geo:ListGeofenceCollections","geo:ListKeys","geo:ListMaps","geo:ListPlaceIndexes","geo:ListRouteCalculators","geo:ListTrackerConsumers","geo:ListTrackers","globalaccelerator:DescribeAccelerator","globalaccelerator:DescribeCrossAccountAttachment","globalaccelerator:DescribeEndpointGroup","globalaccelerator:DescribeListener","globalaccelerator:ListAccelerators","globalaccelerator:ListCrossAccountAttachments","globalaccelerator:ListEndpointGroups","globalaccelerator:ListListeners","glue:DescribeIntegrations","glue:GetCatalog","glue:GetCatalogs","glue:GetCrawler","glue:GetDatabase","glue:GetDatabases","glue:GetIntegrationResourceProperty","glue:GetJob","glue:GetRegistry","glue:GetSchema","glue:GetSchemaVersion","glue:GetTags","glue:GetTrigger","glue:GetUsageProfile","glue:ListCrawlers","glue:ListIntegrationResourceProperties","glue:ListJobs","glue:ListRegistries","glue:ListSchemaVersions","glue:ListSchemas","glue:ListTriggers","glue:ListUsageProfiles","grafana:DescribeWorkspace","grafana:DescribeWorkspaceAuthentication","grafana:DescribeWorkspaceConfiguration","grafana:ListWorkspaces","greengrass:DescribeComponent","greengrass:GetDeployment","greengrass:ListComponentVersions","greengrass:ListDeployments","greengrass:ListTagsForResource","groundstation:GetConfig","groundstation:GetDataflowEndpointGroup","groundstation:GetMissionProfile","groundstation:ListConfigs","groundstation:ListDataflowEndpointGroups","groundstation:ListMissionProfiles","groundstation:ListTagsForResource","guardduty:DescribePublishingDestination","guardduty:GetDetector","guardduty:GetFilter","guardduty:GetIPSet","guardduty:GetMalwareProtectionPlan","guardduty:GetMasterAccount","guardduty:GetMembers","guardduty:GetThreatEntitySet","guardduty:GetThreatIntelSet","guardduty:GetTrustedEntitySet","guardduty:ListDetectors","guardduty:ListFilters","guardduty:ListIPSets","guardduty:ListMalwareProtectionPlans","guardduty:ListMembers","guardduty:ListPublishingDestinations","guardduty:ListTagsForResource","guardduty:ListThreatEntitySets","guardduty:ListThreatIntelSets","guardduty:ListTrustedEntitySets","healthlake:DescribeFHIRDatastore","healthlake:ListFHIRDatastores","healthlake:ListTagsForResource","iam:GetGroup","iam:GetGroupPolicy","iam:GetInstanceProfile","iam:GetLoginProfile","iam:GetOpenIDConnectProvider","iam:GetPolicy","iam:GetPolicyVersion","iam:GetRole","iam:GetRolePolicy","iam:GetSAMLProvider","iam:GetServerCertificate","iam:GetServiceLinkedRoleDeletionStatus","iam:GetUser","iam:GetUserPolicy","iam:ListAttachedGroupPolicies","iam:ListAttachedRolePolicies","iam:ListAttachedUserPolicies","iam:ListEntitiesForPolicy","iam:ListGroupPolicies","iam:ListGroups","iam:ListGroupsForUser","iam:ListInstanceProfiles","iam:ListOpenIDConnectProviders","iam:ListPolicies","iam:ListRolePolicies","iam:ListRoles","iam:ListSAMLProviders","iam:ListServerCertificates","iam:ListUserPolicies","iam:ListUsers","iam:ListVirtualMFADevices","identitystore:DescribeGroup","identitystore:ListGroupMemberships","identitystore:ListGroupMembershipsForMember","identitystore:ListGroups","imagebuilder:GetComponent","imagebuilder:GetContainerRecipe","imagebuilder:GetDistributionConfiguration","imagebuilder:GetImage","imagebuilder:GetImagePipeline","imagebuilder:GetImageRecipe","imagebuilder:GetInfrastructureConfiguration","imagebuilder:GetLifecyclePolicy","imagebuilder:GetWorkflow","imagebuilder:ListComponentBuildVersions","imagebuilder:ListComponents","imagebuilder:ListContainerRecipes","imagebuilder:ListDistributionConfigurations","imagebuilder:ListImageBuildVersions","imagebuilder:ListImagePipelines","imagebuilder:ListImageRecipes","imagebuilder:ListImages","imagebuilder:ListInfrastructureConfigurations","imagebuilder:ListLifecyclePolicies","imagebuilder:ListWorkflowBuildVersions","imagebuilder:ListWorkflows","inspector2:GetCodeSecurityIntegration","inspector2:GetCodeSecurityScanConfiguration","inspector2:ListCisScanConfigurations","inspector2:ListCodeSecurityIntegrations","inspector2:ListCodeSecurityScanConfigurations","inspector2:ListFilters","inspector2:ListTagsForResource","inspector:DescribeAssessmentTargets","inspector:DescribeAssessmentTemplates","inspector:ListAssessmentTargets","inspector:ListAssessmentTemplates","interconnect:GetConnection","interconnect:ListConnections","interconnect:ListTagsForResource","internetmonitor:GetMonitor","internetmonitor:ListMonitors","internetmonitor:ListTagsForResource","invoicing:GetInvoiceUnit","invoicing:ListInvoiceUnits","invoicing:ListTagsForResource","iot:DescribeAccountAuditConfiguration","iot:DescribeAuthorizer","iot:DescribeBillingGroup","iot:DescribeCACertificate","iot:DescribeCertificate","iot:DescribeCertificateProvider","iot:DescribeCustomMetric","iot:DescribeDimension","iot:DescribeDomainConfiguration","iot:DescribeEncryptionConfiguration","iot:DescribeFleetMetric","iot:DescribeJob","iot:DescribeJobTemplate","iot:DescribeMitigationAction","iot:DescribeProvisioningTemplate","iot:DescribeRoleAlias","iot:DescribeScheduledAudit","iot:DescribeSecurityProfile","iot:DescribeThing","iot:DescribeThingGroup","iot:DescribeThingType","iot:GetCommand","iot:GetPackage","iot:GetPackageVersion","iot:GetPolicy","iot:GetThingShadow","iot:GetTopicRule","iot:GetTopicRuleDestination","iot:GetV2LoggingOptions","iot:ListAuthorizers","iot:ListBillingGroups","iot:ListCACertificates","iot:ListCertificateProviders","iot:ListCertificates","iot:ListCommands","iot:ListCustomMetrics","iot:ListDimensions","iot:ListDomainConfigurations","iot:ListFleetMetrics","iot:ListJobTemplates","iot:ListMitigationActions","iot:ListPackageVersions","iot:ListPackages","iot:ListPolicies","iot:ListProvisioningTemplates","iot:ListRoleAliases","iot:ListScheduledAudits","iot:ListSecurityProfiles","iot:ListTagsForResource","iot:ListTargetsForSecurityProfile","iot:ListThingGroups","iot:ListThingTypes","iot:ListThings","iot:ListTopicRuleDestinations","iot:ListTopicRules","iot:ListV2LoggingLevels","iotanalytics:DescribeChannel","iotanalytics:DescribeDataset","iotanalytics:DescribeDatastore","iotanalytics:DescribeLoggingOptions","iotanalytics:DescribePipeline","iotanalytics:ListChannels","iotanalytics:ListDatasets","iotanalytics:ListDatastores","iotanalytics:ListPipelines","iotanalytics:ListTagsForResource","iotdeviceadvisor:GetSuiteDefinition","iotdeviceadvisor:ListSuiteDefinitions","iotevents:DescribeAlarmModel","iotevents:DescribeDetectorModel","iotevents:DescribeInput","iotevents:ListAlarmModels","iotevents:ListDetectorModels","iotevents:ListInputs","iotevents:ListTagsForResource","iotfleetwise:GetCampaign","iotfleetwise:GetDecoderManifest","iotfleetwise:GetFleet","iotfleetwise:GetModelManifest","iotfleetwise:GetSignalCatalog","iotfleetwise:GetStateTemplate","iotfleetwise:GetVehicle","iotfleetwise:ListCampaigns","iotfleetwise:ListDecoderManifestNetworkInterfaces","iotfleetwise:ListDecoderManifestSignals","iotfleetwise:ListDecoderManifests","iotfleetwise:ListFleets","iotfleetwise:ListModelManifestNodes","iotfleetwise:ListModelManifests","iotfleetwise:ListSignalCatalogNodes","iotfleetwise:ListSignalCatalogs","iotfleetwise:ListStateTemplates","iotfleetwise:ListTagsForResource","iotfleetwise:ListVehicles","iotsitewise:DescribeAccessPolicy","iotsitewise:DescribeAsset","iotsitewise:DescribeAssetModel","iotsitewise:DescribeAssetModelCompositeModel","iotsitewise:DescribeAssetModelInterfaceRelationship","iotsitewise:DescribeComputationModel","iotsitewise:DescribeDashboard","iotsitewise:DescribeDataset","iotsitewise:DescribeGateway","iotsitewise:DescribeGatewayCapabilityConfiguration","iotsitewise:DescribePortal","iotsitewise:DescribeProject","iotsitewise:ListAccessPolicies","iotsitewise:ListAssetModelCompositeModels","iotsitewise:ListAssetModelProperties","iotsitewise:ListAssetModels","iotsitewise:ListAssetProperties","iotsitewise:ListAssets","iotsitewise:ListAssociatedAssets","iotsitewise:ListComputationModels","iotsitewise:ListDashboards","iotsitewise:ListDatasets","iotsitewise:ListGateways","iotsitewise:ListPortals","iotsitewise:ListProjectAssets","iotsitewise:ListProjects","iotsitewise:ListTagsForResource","iottwinmaker:GetComponentType","iottwinmaker:GetEntity","iottwinmaker:GetScene","iottwinmaker:GetSyncJob","iottwinmaker:GetWorkspace","iottwinmaker:ListComponentTypes","iottwinmaker:ListComponents","iottwinmaker:ListEntities","iottwinmaker:ListProperties","iottwinmaker:ListScenes","iottwinmaker:ListSyncJobs","iottwinmaker:ListTagsForResource","iottwinmaker:ListWorkspaces","iotwireless:GetDestination","iotwireless:GetDeviceProfile","iotwireless:GetFuotaTask","iotwireless:GetMulticastGroup","iotwireless:GetNetworkAnalyzerConfiguration","iotwireless:GetPartnerAccount","iotwireless:GetServiceProfile","iotwireless:GetWirelessDevice","iotwireless:GetWirelessDeviceImportTask","iotwireless:GetWirelessGateway","iotwireless:GetWirelessGatewayTaskDefinition","iotwireless:ListDestinations","iotwireless:ListDeviceProfiles","iotwireless:ListFuotaTasks","iotwireless:ListMulticastGroups","iotwireless:ListNetworkAnalyzerConfigurations","iotwireless:ListPartnerAccounts","iotwireless:ListServiceProfiles","iotwireless:ListTagsForResource","iotwireless:ListWirelessDeviceImportTasks","iotwireless:ListWirelessDevices","iotwireless:ListWirelessGatewayTaskDefinitions","iotwireless:ListWirelessGateways","ivs:GetChannel","ivs:GetEncoderConfiguration","ivs:GetIngestConfiguration","ivs:GetPlaybackKeyPair","ivs:GetPlaybackRestrictionPolicy","ivs:GetPublicKey","ivs:GetRecordingConfiguration","ivs:GetStage","ivs:GetStorageConfiguration","ivs:GetStreamKey","ivs:ListChannels","ivs:ListEncoderConfigurations","ivs:ListIngestConfigurations","ivs:ListPlaybackKeyPairs","ivs:ListPlaybackRestrictionPolicies","ivs:ListPublicKeys","ivs:ListRecordingConfigurations","ivs:ListStages","ivs:ListStorageConfigurations","ivs:ListStreamKeys","ivs:ListTagsForResource","ivschat:GetLoggingConfiguration","ivschat:GetRoom","ivschat:ListLoggingConfigurations","ivschat:ListRooms","ivschat:ListTagsForResource","kafka-cluster:DescribeTopic","kafka-cluster:DescribeTopicDynamicConfiguration","kafka:DescribeCluster","kafka:DescribeClusterV2","kafka:DescribeConfiguration","kafka:DescribeReplicator","kafka:DescribeVpcConnection","kafka:GetClusterPolicy"],"Resource":"*","Condition":{"StringEquals":{"aws:ResourceAccount":"${aws:PrincipalAccount}"}}},{"Sid":"WellArchitectedAgentScanningReadOnly2","Effect":"Allow","Action":["networkmanager:GetCoreNetworkPolicy","networkmanager:GetCustomerGatewayAssociations","networkmanager:GetDevices","networkmanager:GetDirectConnectGatewayAttachment","networkmanager:GetLinkAssociations","networkmanager:GetLinks","networkmanager:GetSiteToSiteVpnAttachment","networkmanager:GetSites","networkmanager:GetTransitGatewayPeering","networkmanager:GetTransitGatewayRegistrations","networkmanager:GetTransitGatewayRouteTableAttachment","networkmanager:GetVpcAttachment","networkmanager:ListAttachments","networkmanager:ListConnectPeers","networkmanager:ListCoreNetworkPrefixListAssociations","networkmanager:ListCoreNetworks","networkmanager:ListPeerings","nimble:GetStudio","nimble:ListStudios","notifications-contacts:GetEmailContact","notifications-contacts:ListEmailContacts","notifications-contacts:ListTagsForResource","notifications:GetEventRule","notifications:GetNotificationConfiguration","notifications:ListChannels","notifications:ListEventRules","notifications:ListManagedNotificationChannelAssociations","notifications:ListNotificationConfigurations","notifications:ListNotificationHubs","notifications:ListOrganizationalUnits","notifications:ListTagsForResource","nova-act:GetWorkflowDefinition","nova-act:ListWorkflowDefinitions","oam:GetLink","oam:GetSink","oam:GetSinkPolicy","oam:ListLinks","oam:ListSinks","oam:ListTagsForResource","observabilityadmin:GetCentralizationRuleForOrganization","observabilityadmin:GetS3TableIntegration","observabilityadmin:GetTelemetryEnrichmentStatus","observabilityadmin:GetTelemetryEvaluationStatus","observabilityadmin:GetTelemetryEvaluationStatusForOrganization","observabilityadmin:GetTelemetryPipeline","observabilityadmin:GetTelemetryRule","observabilityadmin:GetTelemetryRuleForOrganization","observabilityadmin:ListCentralizationRulesForOrganization","observabilityadmin:ListS3TableIntegrations","observabilityadmin:ListTagsForResource","observabilityadmin:ListTelemetryPipelines","observabilityadmin:ListTelemetryRules","observabilityadmin:ListTelemetryRulesForOrganization","odb:GetCloudAutonomousVmCluster","odb:GetCloudExadataInfrastructure","odb:GetCloudVmCluster","odb:GetDbNode","odb:GetOdbNetwork","odb:GetOdbPeeringConnection","odb:ListCloudAutonomousVmClusters","odb:ListCloudExadataInfrastructures","odb:ListCloudVmClusters","odb:ListDbNodes","odb:ListDbServers","odb:ListOdbNetworks","odb:ListOdbPeeringConnections","odb:ListTagsForResource","omics:GetAnnotationStore","omics:GetConfiguration","omics:GetReferenceStore","omics:GetRunGroup","omics:GetS3AccessPolicy","omics:GetSequenceStore","omics:GetVariantStore","omics:GetWorkflow","omics:GetWorkflowVersion","omics:ListAnnotationStores","omics:ListConfigurations","omics:ListReferenceStores","omics:ListRunGroups","omics:ListSequenceStores","omics:ListTagsForResource","omics:ListVariantStores","omics:ListWorkflowVersions","omics:ListWorkflows","organizations:DescribeAccount","organizations:DescribeOrganization","organizations:DescribeOrganizationalUnit","organizations:DescribePolicy","organizations:DescribeResourcePolicy","organizations:ListAccounts","organizations:ListDelegatedAdministrators","organizations:ListOrganizationalUnitsForParent","organizations:ListParents","organizations:ListPolicies","organizations:ListRoots","organizations:ListTagsForResource","organizations:ListTargetsForPolicy","osis:GetPipeline","osis:GetResourcePolicy","osis:ListPipelines","osis:ListTagsForResource","panorama:DescribeApplicationInstance","panorama:DescribeApplicationInstanceDetails","panorama:DescribePackage","panorama:ListApplicationInstances","panorama:ListPackages","panorama:ListTagsForResource","payment-cryptography:GetAlias","payment-cryptography:GetKey","payment-cryptography:GetResourcePolicy","payment-cryptography:ListAliases","payment-cryptography:ListKeys","payment-cryptography:ListTagsForResource","pca-connector-ad:GetConnector","pca-connector-ad:GetDirectoryRegistration","pca-connector-ad:GetServicePrincipalName","pca-connector-ad:GetTemplate","pca-connector-ad:GetTemplateGroupAccessControlEntry","pca-connector-ad:ListConnectors","pca-connector-ad:ListDirectoryRegistrations","pca-connector-ad:ListServicePrincipalNames","pca-connector-ad:ListTagsForResource","pca-connector-ad:ListTemplateGroupAccessControlEntries","pca-connector-ad:ListTemplates","pca-connector-scep:GetChallengeMetadata","pca-connector-scep:GetConnector","pca-connector-scep:ListChallengeMetadata","pca-connector-scep:ListConnectors","pca-connector-scep:ListTagsForResource","pcs:GetCluster","pcs:GetComputeNodeGroup","pcs:GetQueue","pcs:ListClusters","pcs:ListComputeNodeGroups","pcs:ListQueues","pcs:ListTagsForResource","personalize:DescribeDataset","personalize:DescribeDatasetGroup","personalize:DescribeSchema","personalize:DescribeSolution","personalize:ListDatasetGroups","personalize:ListDatasets","personalize:ListSchemas","personalize:ListSolutions","pipes:DescribePipe","pipes:ListPipes","profile:GetCalculatedAttributeDefinition","profile:GetDomain","profile:GetDomainObjectType","profile:GetEventStream","profile:GetEventTrigger","profile:GetIntegration","profile:GetProfileObjectType","profile:GetRecommender","profile:GetSegmentDefinition","profile:ListCalculatedAttributeDefinitions","profile:ListDomainObjectTypes","profile:ListDomains","profile:ListEventStreams","profile:ListEventTriggers","profile:ListIntegrations","profile:ListProfileObjectTypes","profile:ListRecommenders","profile:ListSegmentDefinitions","profile:ListTagsForResource","proton:GetEnvironmentAccountConnection","proton:GetEnvironmentTemplate","proton:GetServiceTemplate","proton:ListEnvironmentAccountConnections","proton:ListEnvironmentTemplates","proton:ListServiceTemplates","proton:ListTagsForResource","qbusiness:GetApplication","qbusiness:GetDataAccessor","qbusiness:GetDataSource","qbusiness:GetIndex","qbusiness:GetPlugin","qbusiness:GetPolicy","qbusiness:GetRetriever","qbusiness:GetWebExperience","qbusiness:ListApplications","qbusiness:ListDataAccessors","qbusiness:ListDataSources","qbusiness:ListIndices","qbusiness:ListPlugins","qbusiness:ListRetrievers","qbusiness:ListTagsForResource","qbusiness:ListWebExperiences","qldb:DescribeJournalKinesisStream","qldb:ListJournalKinesisStreamsForLedger","qldb:ListTagsForResource","quicksight:DescribeActionConnector","quicksight:DescribeActionConnectorPermissions","quicksight:DescribeAnalysis","quicksight:DescribeAnalysisPermissions","quicksight:DescribeCustomPermissions","quicksight:DescribeDashboard","quicksight:DescribeDashboardPermissions","quicksight:DescribeDataSet","quicksight:DescribeDataSetPermissions","quicksight:DescribeDataSetRefreshProperties","quicksight:DescribeDataSource","quicksight:DescribeDataSourcePermissions","quicksight:DescribeFolder","quicksight:DescribeFolderPermissions","quicksight:DescribeRefreshSchedule","quicksight:DescribeTemplate","quicksight:DescribeTemplatePermissions","quicksight:DescribeTheme","quicksight:DescribeThemePermissions","quicksight:DescribeTopic","quicksight:DescribeVPCConnection","quicksight:ListActionConnectors","quicksight:ListAnalyses","quicksight:ListCustomPermissions","quicksight:ListDashboards","quicksight:ListDataSets","quicksight:ListDataSources","quicksight:ListFolders","quicksight:ListRefreshSchedules","quicksight:ListTagsForResource","quicksight:ListTemplates","quicksight:ListThemes","quicksight:ListTopics","quicksight:ListVPCConnections","ram:GetPermission","ram:GetResourceShares","ram:ListPermissionVersions","ram:ListPermissions","rbin:GetRule","rbin:ListRules","rbin:ListTagsForResource","rds:DescribeDBClusterParameterGroups","rds:DescribeDBClusterParameters","rds:DescribeDBClusters","rds:DescribeDBEngineVersions","rds:DescribeDBInstances","rds:DescribeDBParameterGroups","rds:DescribeDBParameters","rds:DescribeDBProxies","rds:DescribeDBProxyEndpoints","rds:DescribeDBProxyTargetGroups","rds:DescribeDBProxyTargets","rds:DescribeDBShardGroups","rds:DescribeDBSubnetGroups","rds:DescribeEngineDefaultParameters","rds:DescribeEventSubscriptions","rds:DescribeGlobalClusters","rds:DescribeIntegrations","rds:DescribeOptionGroups","rds:ListTagsForResource","redshift-serverless:GetNamespace","redshift-serverless:GetSnapshot","redshift-serverless:GetWorkgroup","redshift-serverless:ListNamespaces","redshift-serverless:ListSnapshotCopyConfigurations","redshift-serverless:ListSnapshots","redshift-serverless:ListTagsForResource","redshift-serverless:ListWorkgroups","redshift:DescribeClusterDbRevisions","redshift:DescribeClusterParameterGroups","redshift:DescribeClusterParameters","redshift:DescribeClusterSubnetGroups","redshift:DescribeClusters","redshift:DescribeEndpointAccess","redshift:DescribeEndpointAuthorization","redshift:DescribeEventSubscriptions","redshift:DescribeIntegrations","redshift:DescribeLoggingStatus","redshift:DescribeScheduledActions","redshift:DescribeTags","redshift:GetResourcePolicy","refactor-spaces:GetApplication","refactor-spaces:GetEnvironment","refactor-spaces:GetRoute","refactor-spaces:GetService","refactor-spaces:ListApplications","refactor-spaces:ListEnvironments","refactor-spaces:ListRoutes","refactor-spaces:ListServices","refactor-spaces:ListTagsForResource","rekognition:DescribeCollection","rekognition:DescribeProjects","rekognition:DescribeStreamProcessor","rekognition:ListCollections","rekognition:ListStreamProcessors","rekognition:ListTagsForResource","resiliencehub:DescribeApp","resiliencehub:DescribeAppVersionTemplate","resiliencehub:DescribeResiliencyPolicy","resiliencehub:GetPolicy","resiliencehub:GetService","resiliencehub:GetSystem","resiliencehub:GetUserJourney","resiliencehub:ListAppVersionResourceMappings","resiliencehub:ListAppVersions","resiliencehub:ListApps","resiliencehub:ListAssertions","resiliencehub:ListInputSources","resiliencehub:ListPolicies","resiliencehub:ListResiliencyPolicies","resiliencehub:ListServiceFunctions","resiliencehub:ListServices","resiliencehub:ListSystems","resiliencehub:ListTagsForResource","resiliencehub:ListUserJourneys","resource-explorer-2:GetIndex","resource-explorer-2:GetView","resource-explorer-2:ListIndexes","resource-explorer-2:ListViews","resource-groups:GetGroup","resource-groups:GetGroupConfiguration","resource-groups:GetGroupQuery","resource-groups:GetTagSyncTask","resource-groups:GetTags","resource-groups:ListGroupResources","resource-groups:ListGroups","resource-groups:ListTagSyncTasks","resource-groups:SearchResources","robomaker:DescribeFleet","robomaker:DescribeRobot","robomaker:DescribeRobotApplication","robomaker:DescribeSimulationApplication","robomaker:ListFleets","robomaker:ListRobotApplications","robomaker:ListRobots","robomaker:ListSimulationApplications","rolesanywhere:GetCrl","rolesanywhere:GetProfile","rolesanywhere:GetTrustAnchor","rolesanywhere:ListCrls","rolesanywhere:ListProfiles","rolesanywhere:ListTagsForResource","rolesanywhere:ListTrustAnchors","route53-recovery-control-config:DescribeCluster","route53-recovery-control-config:DescribeControlPanel","route53-recovery-control-config:DescribeRoutingControl","route53-recovery-control-config:DescribeSafetyRule","route53-recovery-control-config:ListClusters","route53-recovery-control-config:ListControlPanels","route53-recovery-control-config:ListRoutingControls","route53-recovery-control-config:ListSafetyRules","route53-recovery-control-config:ListTagsForResource","route53-recovery-readiness:GetCell","route53-recovery-readiness:GetReadinessCheck","route53-recovery-readiness:GetRecoveryGroup","route53-recovery-readiness:GetResourceSet","route53-recovery-readiness:ListCells","route53-recovery-readiness:ListReadinessChecks","route53-recovery-readiness:ListRecoveryGroups","route53-recovery-readiness:ListResourceSets","route53-recovery-readiness:ListTagsForResources","route53:GetDNSSEC","route53:GetHealthCheck","route53:GetHostedZone","route53:ListCidrBlocks","route53:ListCidrCollections","route53:ListHealthChecks","route53:ListHostedZones","route53:ListQueryLoggingConfigs","route53:ListTagsForResource","route53globalresolver:GetAccessSource","route53globalresolver:GetDNSView","route53globalresolver:GetFirewallDomainList","route53globalresolver:GetFirewallRule","route53globalresolver:GetGlobalResolver","route53globalresolver:GetHostedZoneAssociation","route53globalresolver:ListAccessSources","route53globalresolver:ListAccessTokens","route53globalresolver:ListDNSViews","route53globalresolver:ListFirewallDomainLists","route53globalresolver:ListFirewallRules","route53globalresolver:ListGlobalResolvers","route53globalresolver:ListHostedZoneAssociations","route53globalresolver:ListTagsForResource","route53profiles:GetProfile","route53profiles:GetProfileAssociation","route53profiles:GetProfileResourceAssociation","route53profiles:ListProfileAssociations","route53profiles:ListProfileResourceAssociations","route53profiles:ListProfiles","route53profiles:ListTagsForResource","route53resolver:GetFirewallDomainList","route53resolver:GetFirewallRuleGroup","route53resolver:GetFirewallRuleGroupAssociation","route53resolver:GetOutpostResolver","route53resolver:GetResolverConfig","route53resolver:GetResolverEndpoint","route53resolver:GetResolverQueryLogConfig","route53resolver:GetResolverQueryLogConfigAssociation","route53resolver:GetResolverRule","route53resolver:GetResolverRuleAssociation","route53resolver:ListFirewallDomainLists","route53resolver:ListFirewallRuleGroupAssociations","route53resolver:ListFirewallRuleGroups","route53resolver:ListFirewallRules","route53resolver:ListOutpostResolvers","route53resolver:ListResolverConfigs","route53resolver:ListResolverDnssecConfigs","route53resolver:ListResolverEndpointIpAddresses","route53resolver:ListResolverEndpoints","route53resolver:ListResolverQueryLogConfigAssociations","route53resolver:ListResolverQueryLogConfigs","route53resolver:ListResolverRuleAssociations","route53resolver:ListResolverRules","route53resolver:ListTagsForResource","rtbfabric:GetCertificateAssociation","rtbfabric:GetInboundExternalLink","rtbfabric:GetLink","rtbfabric:GetLinkRoutingRule","rtbfabric:GetOutboundExternalLink","rtbfabric:GetRequesterGateway","rtbfabric:GetResponderGateway","rtbfabric:ListCertificateAssociations","rtbfabric:ListLinkRoutingRules","rtbfabric:ListLinks","rtbfabric:ListRequesterGateways","rtbfabric:ListResponderGateways","rtbfabric:ListTagsForResource","rum:BatchGetRumMetricDefinitions","rum:GetAppMonitor","rum:GetResourcePolicy","rum:ListAppMonitors","rum:ListRumMetricsDestinations","rum:ListTagsForResource","s3-outposts:GetAccessPoint","s3-outposts:GetAccessPointPolicy","s3-outposts:GetBucket","s3-outposts:GetBucketTagging","s3-outposts:GetLifecycleConfiguration","s3-outposts:ListAccessPoints","s3-outposts:ListEndpoints","s3-outposts:ListRegionalBuckets","s3:GetAccelerateConfiguration","s3:GetAccessGrant","s3:GetAccessGrantsInstance","s3:GetAccessGrantsLocation","s3:GetAccessPoint","s3:GetAccessPointConfigurationForObjectLambda","s3:GetAccessPointForObjectLambda","s3:GetAccessPointPolicy","s3:GetAccessPointPolicyStatusForObjectLambda","s3:GetAnalyticsConfiguration","s3:GetBucketAbac","s3:GetBucketAcl","s3:GetBucketCORS","s3:GetBucketLocation","s3:GetBucketLogging","s3:GetBucketMetadataTableConfiguration","s3:GetBucketNotification","s3:GetBucketObjectLockConfiguration","s3:GetBucketOwnershipControls","s3:GetBucketPolicy","s3:GetBucketPublicAccessBlock","s3:GetBucketTagging","s3:GetBucketVersioning","s3:GetBucketWebsite","s3:GetEncryptionConfiguration","s3:GetIntelligentTieringConfiguration","s3:GetInventoryConfiguration","s3:GetLifecycleConfiguration","s3:GetMetricsConfiguration","s3:GetMultiRegionAccessPoint","s3:GetMultiRegionAccessPointPolicy","s3:GetMultiRegionAccessPointPolicyStatus","s3:GetObjectAcl","s3:GetReplicationConfiguration","s3:GetStorageLensConfiguration","s3:GetStorageLensConfigurationTagging","s3:GetStorageLensGroup","s3:ListAccessGrants","s3:ListAccessGrantsInstances","s3:ListAccessGrantsLocations","s3:ListAccessPoints","s3:ListAccessPointsForObjectLambda","s3:ListAllMyBuckets","s3:ListMultiRegionAccessPoints","s3:ListStorageLensConfigurations","s3:ListStorageLensGroups","s3:ListTagsForResource","s3express:GetAccessPoint","s3express:GetAccessPointPolicy","s3express:GetAccessPointScope","s3express:GetBucketPolicy","s3express:GetEncryptionConfiguration","s3express:GetInventoryConfiguration","s3express:GetLifecycleConfiguration","s3express:GetMetricsConfiguration","s3express:ListAccessPointsForDirectoryBuckets","s3express:ListAllMyDirectoryBuckets","s3express:ListTagsForResource","s3files:GetAccessPoint","s3files:GetFileSystem","s3files:GetFileSystemPolicy","s3files:GetMountTarget","s3files:GetSynchronizationConfiguration","s3files:ListAccessPoints","s3files:ListFileSystems","s3files:ListMountTargets","s3files:ListTagsForResource","s3tables:GetNamespace","s3tables:GetTable","s3tables:GetTableBucket","s3tables:GetTableBucketEncryption","s3tables:GetTableBucketMaintenanceConfiguration","s3tables:GetTableBucketMetricsConfiguration","s3tables:GetTableBucketPolicy","s3tables:GetTableBucketReplication","s3tables:GetTableBucketStorageClass","s3tables:GetTableMaintenanceConfiguration","s3tables:GetTablePolicy","s3tables:GetTableStorageClass","s3tables:ListNamespaces","s3tables:ListTableBuckets","s3tables:ListTables","s3tables:ListTagsForResource","s3vectors:GetIndex","s3vectors:GetVectorBucket","s3vectors:GetVectorBucketPolicy","s3vectors:ListIndexes","s3vectors:ListTagsForResource","s3vectors:ListVectorBuckets","sagemaker:DescribeApp","sagemaker:DescribeAppImageConfig","sagemaker:DescribeCluster","sagemaker:DescribeDataQualityJobDefinition","sagemaker:DescribeDomain","sagemaker:DescribeEndpoint","sagemaker:DescribeFeatureGroup","sagemaker:DescribeImage","sagemaker:DescribeImageVersion","sagemaker:DescribeInferenceComponent","sagemaker:DescribeInferenceExperiment","sagemaker:DescribeMlflowTrackingServer","sagemaker:DescribeModel","sagemaker:DescribeModelBiasJobDefinition","sagemaker:DescribeModelCard","sagemaker:DescribeModelExplainabilityJobDefinition","sagemaker:DescribeModelPackage","sagemaker:DescribeModelPackageGroup","sagemaker:DescribeModelQualityJobDefinition","sagemaker:DescribeMonitoringSchedule","sagemaker:DescribePartnerApp","sagemaker:DescribePipeline","sagemaker:DescribeProcessingJob","sagemaker:DescribeProject","sagemaker:DescribeSpace","sagemaker:DescribeStudioLifecycleConfig","sagemaker:DescribeUserProfile","sagemaker:GetModelPackageGroupPolicy","sagemaker:ListAppImageConfigs","sagemaker:ListApps","sagemaker:ListClusters","sagemaker:ListDataQualityJobDefinitions","sagemaker:ListDomains","sagemaker:ListEndpoints","sagemaker:ListFeatureGroups","sagemaker:ListImageVersions","sagemaker:ListImages","sagemaker:ListInferenceComponents","sagemaker:ListInferenceExperiments","sagemaker:ListMlflowTrackingServers","sagemaker:ListModelBiasJobDefinitions","sagemaker:ListModelCardVersions","sagemaker:ListModelCards","sagemaker:ListModelExplainabilityJobDefinitions","sagemaker:ListModelPackageGroups","sagemaker:ListModelPackages","sagemaker:ListModelQualityJobDefinitions","sagemaker:ListModels","sagemaker:ListMonitoringSchedules","sagemaker:ListPartnerApps","sagemaker:ListPipelines","sagemaker:ListProcessingJobs","sagemaker:ListProjects","sagemaker:ListSpaces","sagemaker:ListStudioLifecycleConfigs","sagemaker:ListTags","sagemaker:ListUserProfiles","scheduler:GetSchedule","scheduler:GetScheduleGroup","scheduler:ListScheduleGroups","scheduler:ListSchedules","scheduler:ListTagsForResource","schemas:DescribeDiscoverer","schemas:DescribeRegistry","schemas:DescribeSchema","schemas:ListDiscoverers","schemas:ListRegistries","schemas:ListSchemaVersions","schemas:ListSchemas","secretsmanager:DescribeSecret","secretsmanager:GetResourcePolicy","secretsmanager:ListSecrets","securityagent:BatchGetAgentSpaces","securityagent:BatchGetPentests","securityagent:BatchGetTargetDomains","securityagent:GetApplication","securityagent:ListAgentSpaces","securityagent:ListApplications","securityagent:ListIntegratedResources","securityagent:ListPentests","securityagent:ListTagsForResource","securityagent:ListTargetDomains","securityhub:BatchGetAutomationRules","securityhub:BatchGetSecurityControls","securityhub:DescribeHub","securityhub:DescribeOrganizationConfiguration","securityhub:DescribeSecurityHubV2","securityhub:DescribeStandardsControls","securityhub:GetAggregatorV2","securityhub:GetAutomationRuleV2","securityhub:GetConfigurationPolicy","securityhub:GetConfigurationPolicyAssociation","securityhub:GetConnectorV2","securityhub:GetEnabledStandards","securityhub:GetFindingAggregator","securityhub:GetInsights","securityhub:ListAggregatorsV2","securityhub:ListAutomationRules","securityhub:ListAutomationRulesV2","securityhub:ListConfigurationPolicies","securityhub:ListConfigurationPolicyAssociations","securityhub:ListConnectorsV2","securityhub:ListEnabledProductsForImport","securityhub:ListFindingAggregators","securityhub:ListOrganizationAdminAccounts","securityhub:ListSecurityControlDefinitions","securityhub:ListTagsForResource","securitylake:GetSubscriber","securitylake:ListDataLakeExceptions","securitylake:ListDataLakes","securitylake:ListLogSources","securitylake:ListSubscribers","securitylake:ListTagsForResource","servicecatalog:DescribeConstraint","servicecatalog:DescribePortfolio","servicecatalog:DescribePortfolioShares","servicecatalog:DescribeServiceAction","servicecatalog:DescribeTagOption","servicecatalog:GetApplication","servicecatalog:GetAttributeGroup","servicecatalog:ListApplications","servicecatalog:ListAssociatedAttributeGroups","servicecatalog:ListAssociatedResources","servicecatalog:ListAttributeGroups","servicecatalog:ListConstraintsForPortfolio","servicecatalog:ListPortfolios","servicecatalog:ListPortfoliosForProduct","servicecatalog:ListPrincipalsForPortfolio","servicecatalog:ListResourcesForTagOption","servicecatalog:ListServiceActions","servicecatalog:ListServiceActionsForProvisioningArtifact","servicecatalog:ListTagOptions","servicecatalog:ListTagsForResource","ses:DescribeConfigurationSet","ses:GetAddonInstance","ses:GetAddonSubscription","ses:GetAddressList","ses:GetArchive","ses:GetConfigurationSet","ses:GetConfigurationSetEventDestinations","ses:GetContactList","ses:GetCustomVerificationEmailTemplate","ses:GetDedicatedIpPool","ses:GetDedicatedIps","ses:GetEmailIdentity","ses:GetEmailTemplate","ses:GetIngressPoint","ses:GetMultiRegionEndpoint","ses:GetRelay","ses:GetRuleSet","ses:GetTemplate","ses:GetTenant","ses:GetTrafficPolicy","ses:ListAddonInstances","ses:ListAddonSubscriptions","ses:ListAddressLists","ses:ListArchives","ses:ListConfigurationSets","ses:ListContactLists","ses:ListCustomVerificationEmailTemplates","ses:ListDedicatedIpPools","ses:ListEmailIdentities","ses:ListEmailTemplates","ses:ListIngressPoints","ses:ListMultiRegionEndpoints","ses:ListRelays","ses:ListRuleSets","ses:ListTagsForResource","ses:ListTemplates","ses:ListTenantResources","ses:ListTenants","ses:ListTrafficPolicies","shield:DescribeDRTAccess","shield:DescribeEmergencyContactSettings","shield:DescribeProtection","shield:DescribeProtectionGroup","shield:DescribeSubscription","shield:ListProtectionGroups","shield:ListProtections","shield:ListTagsForResource","signer:GetSigningProfile","signer:ListProfilePermissions","signer:ListSigningProfiles","simspaceweaver:DescribeSimulation","simspaceweaver:ListSimulations","sms-voice:DescribeConfigurationSets","sms-voice:DescribeKeywords","sms-voice:DescribeOptOutLists","sms-voice:DescribePhoneNumbers","sms-voice:DescribePools","sms-voice:DescribeProtectConfigurations","sms-voice:DescribeSenderIds","sms-voice:GetProtectConfigurationCountryRuleSet","sms-voice:GetResourcePolicy","sms-voice:ListPoolOriginationIdentities","sms-voice:ListTagsForResource","sns:GetDataProtectionPolicy","sns:GetSubscriptionAttributes","sns:GetTopicAttributes","sns:ListSubscriptions","sns:ListSubscriptionsByTopic","sns:ListTagsForResource","sns:ListTopics","sqs:GetQueueAttributes","sqs:ListQueueTags","sqs:ListQueues","ssm-contacts:GetContact","ssm-contacts:GetContactChannel","ssm-contacts:GetRotation","ssm-contacts:ListContactChannels","ssm-contacts:ListContacts","ssm-contacts:ListRotations","ssm-contacts:ListTagsForResource","ssm-guiconnect:GetConnectionRecordingPreferences","ssm-incidents:GetReplicationSet","ssm-incidents:GetResponsePlan","ssm-incidents:ListReplicationSets","ssm-incidents:ListResponsePlans","ssm-incidents:ListTagsForResource","ssm-quicksetup:GetConfigurationManager","ssm-quicksetup:ListConfigurationManagers","ssm-sap:GetApplication","ssm-sap:ListApplications","ssm-sap:ListTagsForResource","ssm:DescribeAssociation","ssm:DescribeDocument","ssm:DescribeMaintenanceWindowTargets","ssm:DescribeMaintenanceWindowTasks","ssm:DescribeMaintenanceWindows","ssm:DescribeParameters","ssm:DescribePatchBaselines","ssm:GetDefaultPatchBaseline","ssm:GetDocument","ssm:GetMaintenanceWindow","ssm:GetMaintenanceWindowTask","ssm:GetPatchBaseline","ssm:GetResourcePolicies","ssm:ListAssociations","ssm:ListDocuments","ssm:ListResourceDataSync","ssm:ListTagsForResource","sso-directory:DescribeGroup","sso-directory:SearchGroups","sso:DescribeApplication","sso:DescribeApplicationAssignment","sso:DescribeInstance","sso:DescribeInstanceAccessControlAttributeConfiguration","sso:DescribePermissionSet","sso:GetInlinePolicyForPermissionSet","sso:GetManagedApplicationInstance","sso:GetPermissionsBoundaryForPermissionSet","sso:ListAccountAssignments","sso:ListApplicationAssignments","sso:ListApplications","sso:ListCustomerManagedPolicyReferencesInPermissionSet","sso:ListInstances","sso:ListManagedPoliciesInPermissionSet","sso:ListPermissionSets","sso:ListTagsForResource","states:DescribeActivity","states:DescribeStateMachine","states:DescribeStateMachineAlias","states:ListActivities","states:ListStateMachineAliases","states:ListStateMachineVersions","states:ListStateMachines","states:ListTagsForResource","sts:GetCallerIdentity","supportapp:GetAccountAlias","supportapp:ListSlackChannelConfigurations","supportapp:ListSlackWorkspaceConfigurations","synthetics:DescribeCanaries","synthetics:GetCanary","synthetics:GetGroup","synthetics:ListGroupResources","synthetics:ListGroups","synthetics:ListTagsForResource","tag:GetResources","thinclient:GetEnvironment","thinclient:ListEnvironments","thinclient:ListTagsForResource","timestream-influxdb:GetDbCluster","timestream-influxdb:GetDbInstance","timestream-influxdb:ListDbClusters","timestream-influxdb:ListDbInstances","timestream-influxdb:ListTagsForResource","timestream:DescribeDatabase","timestream:DescribeEndpoints","timestream:DescribeScheduledQuery","timestream:DescribeTable","timestream:ListDatabases","timestream:ListScheduledQueries","timestream:ListTables","timestream:ListTagsForResource","transfer:DescribeAgreement","transfer:DescribeCertificate","transfer:DescribeConnector","transfer:DescribeProfile","transfer:DescribeServer","transfer:DescribeUser","transfer:DescribeWebApp","transfer:DescribeWebAppCustomization","transfer:DescribeWorkflow","transfer:ListAgreements","transfer:ListCertificates","transfer:ListConnectors","transfer:ListProfiles","transfer:ListServers","transfer:ListUsers","transfer:ListWebApps","transfer:ListWorkflows","trustedadvisor:GetRecommendation","trustedadvisor:ListChecks","trustedadvisor:ListRecommendationResources","trustedadvisor:ListRecommendations","trustedadvisor:ListRecommendationsForResource","verifiedpermissions:GetIdentitySource","verifiedpermissions:GetPolicy","verifiedpermissions:GetPolicyStore","verifiedpermissions:GetPolicyStoreAlias","verifiedpermissions:GetPolicyTemplate","verifiedpermissions:GetSchema","verifiedpermissions:ListIdentitySources","verifiedpermissions:ListPolicies","verifiedpermissions:ListPolicyStoreAliases","verifiedpermissions:ListPolicyStores","verifiedpermissions:ListPolicyTemplates","verifiedpermissions:ListTagsForResource","voiceid:DescribeDomain","voiceid:ListDomains","voiceid:ListTagsForResource","vpc-lattice:GetAccessLogSubscription","vpc-lattice:GetDomainVerification","vpc-lattice:GetListener","vpc-lattice:GetResourceConfiguration","vpc-lattice:GetResourceGateway","vpc-lattice:GetRule","vpc-lattice:GetService","vpc-lattice:GetServiceNetwork","vpc-lattice:GetServiceNetworkResourceAssociation","vpc-lattice:GetServiceNetworkServiceAssociation","vpc-lattice:GetServiceNetworkVpcAssociation","vpc-lattice:GetTargetGroup","vpc-lattice:ListAccessLogSubscriptions","vpc-lattice:ListDomainVerifications","vpc-lattice:ListListeners","vpc-lattice:ListResourceConfigurations","vpc-lattice:ListResourceGateways","vpc-lattice:ListRules","vpc-lattice:ListServiceNetworkResourceAssociations","vpc-lattice:ListServiceNetworkServiceAssociations","vpc-lattice:ListServiceNetworkVpcAssociations","vpc-lattice:ListServiceNetworks","vpc-lattice:ListServices","vpc-lattice:ListTagsForResource","vpc-lattice:ListTargetGroups","vpc-lattice:ListTargets","wafv2:GetIPSet","wafv2:GetLoggingConfiguration","wafv2:GetRegexPatternSet","wafv2:GetRuleGroup","wafv2:GetWebACL","wafv2:ListIPSets","wafv2:ListLoggingConfigurations","wafv2:ListRegexPatternSets","wafv2:ListRuleGroups","wafv2:ListTagsForResource","wafv2:ListWebACLs","wisdom:GetAIAgent","wisdom:GetAIGuardrail","wisdom:GetAIPrompt","wisdom:GetAssistant","wisdom:GetAssistantAssociation","wisdom:GetKnowledgeBase","wisdom:GetMessageTemplate","wisdom:GetQuickResponse","wisdom:ListAIAgentVersions","wisdom:ListAIAgents","wisdom:ListAIGuardrailVersions","wisdom:ListAIGuardrails","wisdom:ListAIPromptVersions","wisdom:ListAIPrompts","wisdom:ListAssistantAssociations","wisdom:ListAssistants","wisdom:ListKnowledgeBases","wisdom:ListMessageTemplateVersions","wisdom:ListMessageTemplates","wisdom:ListQuickResponses","workspaces-instances:GetWorkspaceInstance","workspaces-instances:ListTagsForResource","workspaces-instances:ListWorkspaceInstances","workspaces-web:GetBrowserSettings","workspaces-web:GetDataProtectionSettings","workspaces-web:GetIdentityProvider","workspaces-web:GetIpAccessSettings","workspaces-web:GetNetworkSettings","workspaces-web:GetPortal","workspaces-web:GetPortalServiceProviderMetadata","workspaces-web:GetSessionLogger","workspaces-web:GetTrustStore","workspaces-web:GetTrustStoreCertificate","workspaces-web:GetUserAccessLoggingSettings","workspaces-web:GetUserSettings","workspaces-web:ListBrowserSettings","workspaces-web:ListDataProtectionSettings","workspaces-web:ListIdentityProviders","workspaces-web:ListIpAccessSettings","workspaces-web:ListNetworkSettings","workspaces-web:ListPortals","workspaces-web:ListSessionLoggers","workspaces-web:ListSessions","workspaces-web:ListTagsForResource","workspaces-web:ListTrustStoreCertificates","workspaces-web:ListTrustStores","workspaces-web:ListUserAccessLoggingSettings","workspaces-web:ListUserSettings","workspaces:DescribeConnectionAliases","workspaces:DescribeTags","workspaces:DescribeWorkspaces","workspaces:DescribeWorkspacesPools","xray:GetGroup","xray:GetGroups","xray:GetIndexingRules","xray:GetSamplingRules","xray:GetTraceSegmentDestination","xray:ListResourcePolicies","xray:ListTagsForResource"],"Resource":"*","Condition":{"StringEquals":{"aws:ResourceAccount":"${aws:PrincipalAccount}"}}},{"Sid":"WellArchitectedAgentScanningReadOnly3","Effect":"Allow","Action":["kafka:ListClusters","kafka:ListClustersV2","kafka:ListConfigurations","kafka:ListReplicators","kafka:ListScramSecrets","kafka:ListTagsForResource","kafka:ListVpcConnections","kafkaconnect:DescribeConnector","kafkaconnect:DescribeCustomPlugin","kafkaconnect:DescribeWorkerConfiguration","kafkaconnect:ListConnectors","kafkaconnect:ListCustomPlugins","kafkaconnect:ListTagsForResource","kafkaconnect:ListWorkerConfigurations","kendra-ranking:DescribeRescoreExecutionPlan","kendra-ranking:ListRescoreExecutionPlans","kendra-ranking:ListTagsForResource","kendra:DescribeDataSource","kendra:DescribeFaq","kendra:DescribeIndex","kendra:ListDataSources","kendra:ListFaqs","kendra:ListIndices","kendra:ListTagsForResource","kinesis:DescribeStreamConsumer","kinesis:DescribeStreamSummary","kinesis:ListStreamConsumers","kinesis:ListStreams","kinesis:ListTagsForResource","kinesis:ListTagsForStream","kinesisanalytics:DescribeApplication","kinesisanalytics:ListApplications","kinesisanalytics:ListTagsForResource","kinesisvideo:DescribeSignalingChannel","kinesisvideo:DescribeStream","kinesisvideo:DescribeStreamStorageConfiguration","kinesisvideo:ListSignalingChannels","kinesisvideo:ListStreams","kinesisvideo:ListTagsForResource","kinesisvideo:ListTagsForStream","kms:DescribeKey","kms:GetKeyPolicy","kms:GetKeyRotationStatus","kms:ListAliases","kms:ListKeys","kms:ListResourceTags","lakeformation:DescribeLakeFormationIdentityCenterConfiguration","lakeformation:DescribeResource","lakeformation:GetLFTag","lakeformation:ListDataCellsFilter","lakeformation:ListLFTags","lakeformation:ListResources","lambda:GetAlias","lambda:GetCapacityProvider","lambda:GetCodeSigningConfig","lambda:GetEventSourceMapping","lambda:GetFunction","lambda:GetFunctionCodeSigningConfig","lambda:GetFunctionConcurrency","lambda:GetFunctionConfiguration","lambda:GetFunctionEventInvokeConfig","lambda:GetFunctionRecursionConfig","lambda:GetFunctionScalingConfig","lambda:GetFunctionUrlConfig","lambda:GetLayerVersionPolicy","lambda:GetPolicy","lambda:GetProvisionedConcurrencyConfig","lambda:GetRuntimeManagementConfig","lambda:ListAliases","lambda:ListCapacityProviders","lambda:ListCodeSigningConfigs","lambda:ListEventSourceMappings","lambda:ListFunctionEventInvokeConfigs","lambda:ListFunctionUrlConfigs","lambda:ListFunctions","lambda:ListLayerVersions","lambda:ListTags","lambda:ListVersionsByFunction","launchwizard:GetDeployment","launchwizard:ListDeploymentEvents","launchwizard:ListDeployments","launchwizard:ListTagsForResource","lex:DescribeBot","lex:DescribeBotAlias","lex:DescribeBotReplica","lex:DescribeBotVersion","lex:DescribeResourcePolicy","lex:GetBotAlias","lex:ListBotAliases","lex:ListBotLocales","lex:ListBotReplicas","lex:ListBotVersions","lex:ListBots","lex:ListIntents","lex:ListSlotTypes","lex:ListSlots","lex:ListTagsForResource","license-manager:GetGrant","license-manager:GetLicense","license-manager:ListDistributedGrants","license-manager:ListLicenses","license-manager:ListTagsForResource","lightsail:GetAlarms","lightsail:GetBuckets","lightsail:GetCertificates","lightsail:GetContainerServices","lightsail:GetDisk","lightsail:GetDiskSnapshot","lightsail:GetDiskSnapshots","lightsail:GetDisks","lightsail:GetDistributions","lightsail:GetDomain","lightsail:GetDomains","lightsail:GetInstance","lightsail:GetInstanceSnapshot","lightsail:GetInstanceSnapshots","lightsail:GetInstances","lightsail:GetLoadBalancer","lightsail:GetLoadBalancerTlsCertificates","lightsail:GetLoadBalancers","lightsail:GetRelationalDatabase","lightsail:GetRelationalDatabaseSnapshot","lightsail:GetRelationalDatabaseSnapshots","lightsail:GetRelationalDatabases","lightsail:GetStaticIp","lightsail:GetStaticIps","logs:DescribeAccountPolicies","logs:DescribeDeliveries","logs:DescribeDeliveryDestinations","logs:DescribeDeliverySources","logs:DescribeDestinations","logs:DescribeIndexPolicies","logs:DescribeLogGroups","logs:DescribeLogStreams","logs:DescribeMetricFilters","logs:DescribeQueryDefinitions","logs:DescribeResourcePolicies","logs:DescribeSubscriptionFilters","logs:GetDataProtectionPolicy","logs:GetDelivery","logs:GetDeliveryDestination","logs:GetDeliveryDestinationPolicy","logs:GetDeliverySource","logs:GetIntegration","logs:GetLogAnomalyDetector","logs:GetLogDelivery","logs:GetScheduledQuery","logs:GetTransformer","logs:ListIntegrations","logs:ListLogAnomalyDetectors","logs:ListLogDeliveries","logs:ListScheduledQueries","logs:ListSourcesForS3TableIntegration","logs:ListTagsForResource","lookoutequipment:DescribeInferenceScheduler","lookoutequipment:ListInferenceSchedulers","lookoutvision:DescribeProject","lookoutvision:ListProjects","m2:GetApplication","m2:GetDeployment","m2:GetEnvironment","m2:ListApplications","m2:ListDeployments","m2:ListEnvironments","m2:ListTagsForResource","macie2:GetAllowList","macie2:GetCustomDataIdentifier","macie2:GetFindingsFilter","macie2:GetMacieSession","macie2:ListAllowLists","macie2:ListAutomatedDiscoveryAccounts","macie2:ListCustomDataIdentifiers","macie2:ListFindingsFilters","managedblockchain:GetAccessor","managedblockchain:ListAccessors","mediaconnect:DescribeBridge","mediaconnect:DescribeFlow","mediaconnect:DescribeGateway","mediaconnect:GetRouterInput","mediaconnect:GetRouterNetworkInterface","mediaconnect:GetRouterOutput","mediaconnect:ListBridges","mediaconnect:ListFlows","mediaconnect:ListGateways","mediaconnect:ListRouterInputs","mediaconnect:ListRouterNetworkInterfaces","mediaconnect:ListRouterOutputs","mediaconnect:ListTagsForResource","medialive:DescribeChannelPlacementGroup","medialive:DescribeCluster","medialive:DescribeMultiplex","medialive:DescribeMultiplexProgram","medialive:DescribeNetwork","medialive:DescribeSdiSource","medialive:GetCloudWatchAlarmTemplate","medialive:GetCloudWatchAlarmTemplateGroup","medialive:GetEventBridgeRuleTemplate","medialive:GetEventBridgeRuleTemplateGroup","medialive:GetSignalMap","medialive:ListChannelPlacementGroups","medialive:ListCloudWatchAlarmTemplateGroups","medialive:ListCloudWatchAlarmTemplates","medialive:ListClusters","medialive:ListEventBridgeRuleTemplateGroups","medialive:ListEventBridgeRuleTemplates","medialive:ListMultiplexPrograms","medialive:ListMultiplexes","medialive:ListNetworks","medialive:ListSdiSources","medialive:ListSignalMaps","medialive:ListTagsForResource","mediapackage-vod:DescribeAsset","mediapackage-vod:DescribePackagingConfiguration","mediapackage-vod:DescribePackagingGroup","mediapackage-vod:ListAssets","mediapackage-vod:ListPackagingConfigurations","mediapackage-vod:ListPackagingGroups","mediapackage:DescribeChannel","mediapackage:DescribeOriginEndpoint","mediapackage:ListChannels","mediapackage:ListOriginEndpoints","mediapackagev2:GetChannel","mediapackagev2:GetChannelGroup","mediapackagev2:GetOriginEndpoint","mediapackagev2:ListChannelGroups","mediapackagev2:ListChannels","mediapackagev2:ListOriginEndpoints","mediatailor:DescribeChannel","mediatailor:DescribeLiveSource","mediatailor:DescribeSourceLocation","mediatailor:DescribeVodSource","mediatailor:GetPlaybackConfiguration","mediatailor:ListChannels","mediatailor:ListLiveSources","mediatailor:ListPlaybackConfigurations","mediatailor:ListSourceLocations","mediatailor:ListVodSources","medical-imaging:GetDatastore","medical-imaging:ListDatastores","medical-imaging:ListTagsForResource","memorydb:DescribeACLs","memorydb:DescribeAcls","memorydb:DescribeClusters","memorydb:DescribeMultiRegionClusters","memorydb:DescribeParameterGroups","memorydb:DescribeSubnetGroups","memorydb:DescribeUsers","memorydb:ListTags","mobiletargeting:GetInAppTemplate","mobiletargeting:ListTemplates","mpa:GetApprovalTeam","mpa:GetIdentitySource","mpa:ListApprovalTeams","mpa:ListIdentitySources","mpa:ListTagsForResource","mq:DescribeBroker","mq:DescribeConfiguration","mq:DescribeSharedResources","mq:ListBrokers","mq:ListConfigurations","mq:ListTags","neptune-graph:GetGraph","neptune-graph:GetGraphSnapshot","neptune-graph:GetPrivateGraphEndpoint","neptune-graph:ListGraphSnapshots","neptune-graph:ListGraphs","neptune-graph:ListPrivateGraphEndpoints","neptune-graph:ListTagsForResource","network-firewall:DescribeFirewall","network-firewall:DescribeFirewallPolicy","network-firewall:DescribeRuleGroup","network-firewall:DescribeTLSInspectionConfiguration","network-firewall:DescribeVpcEndpointAssociation","network-firewall:ListFirewallPolicies","network-firewall:ListFirewalls","network-firewall:ListRuleGroups","network-firewall:ListTLSInspectionConfigurations","network-firewall:ListTagsForResource","network-firewall:ListVpcEndpointAssociations","networkmanager:DescribeGlobalNetworks","networkmanager:GetConnectAttachment","networkmanager:GetConnectPeer","networkmanager:GetCoreNetwork"],"Resource":"*","Condition":{"StringEquals":{"aws:ResourceAccount":"${aws:PrincipalAccount}"}}}]}

Version history

Current version v4, edited by AWS on 2026-10-08. Version history is recorded from 2026-11-11. Earlier versions are in the IAM console under Policy versions.

Attach snippets

This policy cannot be attached to users, groups or roles, so there are no attach snippets.

Sources

Pending editorial review. No editorial sources are listed yet.

• Official AWS reference for AWSWellArchitectedAgentResourceScanningServiceRolePolicy
• Report a data issue