ReadOnlyAccess

Summary

AWS describes ReadOnlyAccess as providing read-only access to AWS services and resources. The IAM User Guide says it grants permissions to list, get, describe and otherwise view resources and their attributes, and that it does not include mutating functions like create or delete. The document names actions under 318 service prefixes, so it does not cover every AWS service, and it contains actions that go beyond plain reads (see practical scope).

Permissions imported from the AWS Managed Policy Reference Guide; other sections reviewed against the listed AWS sources.

Identity

ARN

arn:aws:iam::aws:policy/ReadOnlyAccessCopy ARN

Default version

v191

Created

2015-02-06

Last edited

2026-10-30

Services

a4b, access-analyzer, account, acm, acm-pca, action-recommendations, agent-registry, aidevops, aiops, airflow, amplify, aoss, apigateway, appconfig, appfabric, appflow, application-autoscaling, application-signals, applicationinsights, appmesh, apprunner, appstream, appstudio, appsync, apptest, aps, arc-region-switch, arc-zonal-shift, artifact, athena, auditmanager, autoscaling, autoscaling-plans, aws-portal, backup, backup-gateway, batch, bedrock, bedrock-agentcore, bedrock-mantle, billing, billingconductor, braket, budgets, cassandra, ce, chatbot, chime, cleanrooms, cleanrooms-ml, cloud9, clouddirectory, cloudformation, cloudfront, cloudfront-keyvaluestore, cloudhsm, cloudsearch, cloudtrail, cloudwatch, codeartifact, codebuild, codecatalyst, codecommit, codeconnections, codedeploy, codeguru-profiler, codeguru-reviewer, codepipeline, codestar-connections, codestar-notifications, codewhisperer, cognito-identity, cognito-idp, cognito-sync, comprehend, compute-optimizer, config, connect, consoleapp, consolidatedbilling, controlcatalog, cost-optimization-hub, cur, customer-verification, databrew, dataexchange, datapipeline, datasync, datazone, dax, deadline, detective, devicefarm, devops-guru, directconnect, discovery, dlm, dms, docdb-elastic, drs, ds, dsql, dynamodb, ec2, ec2messages, ecr, ecr-public, ecs, eks, elasticache, elasticbeanstalk, elasticfilesystem, elasticloadbalancing, elasticmapreduce, elastictranscoder, elemental-appliances-software, elemental-inference, emr-containers, emr-serverless, es, events, firehose, fis, fms, forecast, frauddetector, freertos, freetier, fsx, gamelift, gameliftstreams, glacier, globalaccelerator, glue, grafana, greengrass, groundstation, guardduty, health, healthlake, iam, identity-sync, identitystore, identitystore-auth, imagebuilder, importexport, inspector, inspector2, interconnect, internetmonitor, invoicing, iot, iotanalytics, iotfleethub, iotfleetwise, iotsitewise, iotwireless, ivs, ivschat, kafka, kafkaconnect, kendra, kinesis, kinesisanalytics, kinesisvideo, kms, lakeformation, lambda, launchwizard, lex, license-manager, lightsail, logs, lookoutequipment, lookoutmetrics, lookoutvision, m2, machinelearning, macie2, managedblockchain, mediaconnect, mediaconvert, medialive, mediapackage, mediapackage-vod, mediapackagev2, mediastore, memorydb, mgh, mgn, mobileanalytics, mobiletargeting, monitron, mpa, mq, network-firewall, networkflowmonitor, networkmanager, networkmonitor, nimble, notifications, notifications-contacts, oam, observabilityadmin, omics, one, opsworks, opsworks-cm, organizations, osis, outposts, payment-cryptography, payments, pca-connector-ad, pca-connector-scep, pcs, personalize, pi, pipes, polly, pricing, proton, purchase-orders, qbusiness, qldb, ram, rbin, rds, redshift, redshift-serverless, refactor-spaces, rekognition, resiliencehub, resource-explorer-2, resource-groups, robomaker, rolesanywhere, route53, route53-recovery-cluster, route53-recovery-control-config, route53-recovery-readiness, route53domains, route53globalresolver, route53profiles, route53resolver, rum, s3, s3-object-lambda, s3-outposts, s3express, s3files, s3tables, s3vectors, sagemaker, savingsplans, scheduler, schemas, sdb, secretsmanager, securityagent, securityhub, securitylake, serverlessrepo, servicecatalog, servicediscovery, servicequotas, ses, shield, signer, signin, sms-voice, snowball, sns, sqs, ssm, ssm-contacts, ssm-incidents, ssm-quicksetup, ssm-sap, sso, sso-directory, startups, states, storagegateway, sts, support, supportplans, sustainability, swf, synthetics, tag, tax, timestream, tnb, transcribe, transfer, transform, transform-custom, translate, trustedadvisor, user-subscriptions, uxc, verifiedpermissions, vpc-lattice, waf, waf-regional, wafv2, wellarchitected, workdocs, workmail, workspaces, workspaces-web, xray

Control-plane actions (6929)

By access level: 2855 List, 3 Permissions management, 4065 Read, 6 Write.

The full action list is in actions.json.

Data-plane actions (147)

By access level: 40 List, 107 Read.

The full action list is in actions.json.

Excluded and conditional actions

No patterns are excluded by NotAction or Deny statements.

Resource scope and attachment

Resource scope across granted actions: all-resources.

Can be attached: Yes, to users, groups and roles.

Why this tier

• Grants 9 write, tagging or permissions-management actions, short of full control of any service.
• 1 granted write or permissions-management action has no data-plane classification from AWS, so the data-plane rule cannot assess it.
• Can read secret values or decrypt data. Reads are not a High privilege rule.

Guidance

Related policies

Same domain

• AccessAnalyzerServiceRolePolicy
• AccountManagementFromVercel
• AlexaForBusinessNetworkProfileServicePolicy
• AmazonAppStreamPCAAccess
• AmazonBioDiscoveryFullAccess
• AmazonBioDiscoveryInAppFullAccess
• AmazonChimeServiceRolePolicy
• AmazonCloudDirectoryFullAccess

Frequently asked questions

When should I attach ReadOnlyAccess?

Attach it for a user who requires read-only access to every resource in an AWS account. Because it also reads data in storage services, use ViewOnlyAccess instead if that is more than the user needs.

What does ReadOnlyAccess grant?

AWS describes it as providing read-only access to AWS services and resources: permissions to list, get, describe and otherwise view resources and their attributes, without mutating functions like create or delete. The document names actions under 318 service prefixes and includes actions such as s3:Get*, s3:List*, dynamodb:Query, dynamodb:Scan, sqs:Receive* and iam:Simulate*, all on Resource "*".

What are the security risks of ReadOnlyAccess?

The user can read data in storage services such as Amazon S3 buckets and Amazon DynamoDB tables, and gets read-only access to security-related services such as IAM and AWS Billing and Cost Management. AWS adds read-only permissions for new services to this policy and the change reaches every identity it is attached to. AWS managed policies don't grant least privilege permissions, and you must consider the security risk of granting principals more permissions than they need. AWS updates to the policy affect every identity it is attached to.

Policy JSON

Download policy.json

This document is large, so it is shown compact here. Use the formatted policy.json to read it with indentation.

{"Version":"2012-10-17","Statement":[{"Sid":"ReadOnlyActionsGroup1","Effect":"Allow","Action":["a4b:Get*","a4b:List*","a4b:Search*","access-analyzer:GetAccessPreview","access-analyzer:GetAnalyzedResource","access-analyzer:GetAnalyzer","access-analyzer:GetArchiveRule","access-analyzer:GetFinding","access-analyzer:GetFindingsStatistics","access-analyzer:GetGeneratedPolicy","access-analyzer:ListAccessPreviewFindings","access-analyzer:ListAccessPreviews","access-analyzer:ListAnalyzedResources","access-analyzer:ListAnalyzers","access-analyzer:ListArchiveRules","access-analyzer:ListFindings","access-analyzer:ListPolicyGenerations","access-analyzer:ListTagsForResource","access-analyzer:ValidatePolicy","account:GetAccountInformation","account:GetAlternateContact","account:GetContactInformation","account:GetGovCloudAccountInformation","account:GetPrimaryEmail","account:GetRegionOptStatus","account:ListRegions","acm-pca:Describe*","acm-pca:Get*","acm-pca:List*","acm:Describe*","acm:Get*","acm:List*","acm:SearchCertificates","action-recommendations:ListRecommendedActions","agent-registry:GetDiscoverableRegistryRecord","agent-registry:GetRegistry","agent-registry:GetRegistryRecord","agent-registry:InvokeRegistryMcp","agent-registry:ListDiscoverableRegistryRecords","agent-registry:ListRegistries","agent-registry:ListRegistryRecords","agent-registry:ListTagsForResource","agent-registry:SearchDiscoverableRegistryRecords","aidevops:DescribePrivateConnection","aidevops:DescribeServices","aidevops:GetAccountUsage","aidevops:GetAgentSpace","aidevops:GetAssociation","aidevops:GetBacklogTask","aidevops:GetKnowledgeItem","aidevops:GetOperatorApp","aidevops:GetRecommendation","aidevops:GetService","aidevops:ListAgentSpaces","aidevops:ListAssociations","aidevops:ListBacklogTasks","aidevops:ListChats","aidevops:ListExecutions","aidevops:ListGoals","aidevops:ListJournalRecords","aidevops:ListKnowledgeItemVersions","aidevops:ListKnowledgeItems","aidevops:ListPendingMessages","aidevops:ListPrivateConnections","aidevops:ListRecommendations","aidevops:ListServices","aidevops:ListTagsForResource","aidevops:ListWebhooks","aidevops:SearchServiceAccessibleResource","aiops:GetEphemeralInvestigationResults","aiops:GetFact","aiops:GetFactVersions","aiops:GetInvestigation","aiops:GetInvestigationEvent","aiops:GetInvestigationGroup","aiops:GetInvestigationResource","aiops:GetReport","aiops:ListFacts","aiops:ListInvestigationEvents","aiops:ListInvestigationGroups","aiops:ListInvestigations","aiops:ValidateInvestigationGroup","airflow:ListEnvironments","airflow:ListTagsForResource","amplify:GetApp","amplify:GetBackendEnvironment","amplify:GetBranch","amplify:GetDomainAssociation","amplify:GetJob","amplify:GetWebhook","amplify:ListApps","amplify:ListArtifacts","amplify:ListBackendEnvironments","amplify:ListBranches","amplify:ListDomainAssociations","amplify:ListJobs","amplify:ListTagsForResource","amplify:ListWebhooks","aoss:BatchGetCollection","aoss:BatchGetCollectionGroup","aoss:BatchGetLifecyclePolicy","aoss:BatchGetVpcEndpoint","aoss:GetAccessPolicy","aoss:GetAccountSettings","aoss:GetPoliciesStats","aoss:GetSecurityConfig","aoss:GetSecurityPolicy","aoss:ListAccessPolicies","aoss:ListCollectionGroups","aoss:ListCollections","aoss:ListLifecyclePolicies","aoss:ListSecurityConfigs","aoss:ListSecurityPolicies","aoss:ListTagsForResource","aoss:ListVpcEndpoints","apigateway:GET","apigateway:GetPortal","apigateway:GetPortalProduct","apigateway:GetPortalProductSharingPolicy","apigateway:GetProductPage","apigateway:GetProductRestEndpointPage","apigateway:GetRoutingRule","apigateway:ListPortalProducts","apigateway:ListPortals","apigateway:ListProductPages","apigateway:ListProductRestEndpointPages","apigateway:ListRoutingRules","appconfig:GetAccountSettings","appconfig:GetApplication","appconfig:GetConfiguration","appconfig:GetConfigurationProfile","appconfig:GetDeployment","appconfig:GetDeploymentStrategy","appconfig:GetEnvironment","appconfig:GetExperimentDefinition","appconfig:GetExperimentRun","appconfig:GetExtension","appconfig:GetExtensionAssociation","appconfig:GetHostedConfigurationVersion","appconfig:ListApplications","appconfig:ListConfigurationProfiles","appconfig:ListDeploymentStrategies","appconfig:ListDeployments","appconfig:ListEnvironments","appconfig:ListExperimentDefinitions","appconfig:ListExperimentRunEvents","appconfig:ListExperimentRuns","appconfig:ListExtensionAssociations","appconfig:ListExtensions","appconfig:ListHostedConfigurationVersions","appconfig:ListTagsForResource","appfabric:GetAppAuthorization","appfabric:GetAppBundle","appfabric:GetIngestion","appfabric:GetIngestionDestination","appfabric:ListAppAuthorizations","appfabric:ListAppBundles","appfabric:ListIngestionDestinations","appfabric:ListIngestions","appfabric:ListTagsForResource","appflow:DescribeConnector","appflow:DescribeConnectorEntity","appflow:DescribeConnectorFields","appflow:DescribeConnectorProfiles","appflow:DescribeConnectors","appflow:DescribeFlow","appflow:DescribeFlowExecution","appflow:DescribeFlowExecutionRecords","appflow:DescribeFlows","appflow:ListConnectorEntities","appflow:ListConnectorFields","appflow:ListConnectors","appflow:ListFlows","appflow:ListTagsForResource","application-autoscaling:Describe*","application-autoscaling:GetPredictiveScalingForecast","application-autoscaling:ListTagsForResource","application-signals:BatchGetServiceLevelObjectiveBudgetReport","application-signals:GetService","application-signals:GetServiceLevelObjective","application-signals:ListAuditFindings","application-signals:ListEntityEvents","application-signals:ListGroupingAttributeDefinitions","application-signals:ListObservedEntities","application-signals:ListServiceDependencies","application-signals:ListServiceDependents","application-signals:ListServiceLevelObjectiveExclusionWindows","application-signals:ListServiceLevelObjectives","application-signals:ListServiceOperations","application-signals:ListServiceStates","application-signals:ListServices","application-signals:ListTagsForResource","applicationinsights:Describe*","applicationinsights:List*","appmesh:Describe*","appmesh:List*","apprunner:DescribeAutoScalingConfiguration","apprunner:DescribeCustomDomains","apprunner:DescribeObservabilityConfiguration","apprunner:DescribeService","apprunner:DescribeVpcConnector","apprunner:DescribeVpcIngressConnection","apprunner:DescribeWebAclForService","apprunner:ListAssociatedServicesForWebAcl","apprunner:ListAutoScalingConfigurations","apprunner:ListConnections","apprunner:ListObservabilityConfigurations","apprunner:ListOperations","apprunner:ListServices","apprunner:ListServicesForAutoScalingConfiguration","apprunner:ListTagsForResource","apprunner:ListVpcConnectors","apprunner:ListVpcIngressConnections","appstream:Describe*","appstream:List*","appstudio:GetAccountStatus","appstudio:GetEnablementJobStatus","appsync:EvaluateMappingTemplate","appsync:Get*","appsync:List*","apptest:GetTestCase","apptest:GetTestConfiguration","apptest:GetTestRunStep","apptest:GetTestSuite","apptest:ListTagsForResource","apptest:ListTestCases","apptest:ListTestConfigurations","apptest:ListTestRunSteps","apptest:ListTestRunTestCases","apptest:ListTestRuns","apptest:ListTestSuites","aps:DescribeAlertManagerDefinition","aps:DescribeAnomalyDetector","aps:DescribeLoggingConfiguration","aps:DescribeQueryLoggingConfiguration","aps:DescribeResourcePolicy","aps:DescribeRuleGroupsNamespace","aps:DescribeScraper","aps:DescribeScraperLoggingConfiguration","aps:DescribeWorkspace","aps:DescribeWorkspaceConfiguration","aps:GetAlertManagerSilence","aps:GetAlertManagerStatus","aps:GetDefaultScraperConfiguration","aps:GetLabels","aps:GetMetricMetadata","aps:GetSeries","aps:ListAlertManagerAlertGroups","aps:ListAlertManagerAlerts","aps:ListAlertManagerReceivers","aps:ListAlertManagerSilences","aps:ListAlerts","aps:ListAnomalyDetectors","aps:ListRuleGroupsNamespaces","aps:ListRules","aps:ListScrapers","aps:ListTagsForResource","aps:ListWorkspaces","aps:PreviewAnomalyDetector","aps:QueryMetrics","arc-region-switch:GetPlan","arc-region-switch:GetPlanEvaluationStatus","arc-region-switch:GetPlanExecution","arc-region-switch:GetPlanInRegion","arc-region-switch:ListPlanExecutionEvents","arc-region-switch:ListPlanExecutions","arc-region-switch:ListPlans","arc-region-switch:ListPlansInRegion","arc-region-switch:ListRoute53HealthChecks","arc-region-switch:ListRoute53HealthChecksInRegion","arc-region-switch:ListTagsForResource","arc-zonal-shift:GetAutoshiftObserverNotificationStatus","arc-zonal-shift:GetManagedResource","arc-zonal-shift:ListAutoshifts","arc-zonal-shift:ListManagedResources","arc-zonal-shift:ListZonalShifts","artifact:GetCustomerAgreement","artifact:GetReport","artifact:GetReportMetadata","artifact:GetTermForReport","artifact:ListAgreements","artifact:ListCustomerAgreements","artifact:ListReportVersions","artifact:ListReports","athena:Batch*","athena:Get*","athena:List*","auditmanager:GetAccountStatus","auditmanager:GetAssessment","auditmanager:GetAssessmentFramework","auditmanager:GetAssessmentReportUrl","auditmanager:GetChangeLogs","auditmanager:GetControl","auditmanager:GetDelegations","auditmanager:GetEvidence","auditmanager:GetEvidenceByEvidenceFolder","auditmanager:GetEvidenceFolder","auditmanager:GetEvidenceFoldersByAssessment","auditmanager:GetEvidenceFoldersByAssessmentControl","auditmanager:GetOrganizationAdminAccount","auditmanager:GetServicesInScope","auditmanager:GetSettings","auditmanager:ListAssessmentFrameworks","auditmanager:ListAssessmentReports","auditmanager:ListAssessments","auditmanager:ListControls","auditmanager:ListKeywordsForDataSource","auditmanager:ListNotifications","auditmanager:ListTagsForResource","auditmanager:ValidateAssessmentReportIntegrity","autoscaling-plans:Describe*","autoscaling-plans:GetScalingPlanResourceForecastData","autoscaling:Describe*","autoscaling:GetPredictiveScalingForecast","aws-portal:View*","backup-gateway:GetBandwidthRateLimitSchedule","backup-gateway:GetGateway","backup-gateway:GetHypervisor","backup-gateway:GetHypervisorPropertyMappings","backup-gateway:GetVirtualMachine","backup-gateway:ListGateways","backup-gateway:ListHypervisors","backup-gateway:ListTagsForResource","backup-gateway:ListVirtualMachines","backup:Describe*","backup:Get*","backup:List*","batch:Describe*","batch:List*","bedrock-agentcore:GatewayGetWebACLForResource","bedrock-agentcore:GatewayListResourcesForWebACL","bedrock-agentcore:GetABTest","bedrock-agentcore:GetAgentCard","bedrock-agentcore:GetAgentRuntime","bedrock-agentcore:GetAgentRuntimeEndpoint","bedrock-agentcore:GetApiKeyCredentialProvider","bedrock-agentcore:GetBatchEvaluation","bedrock-agentcore:GetBrowser","bedrock-agentcore:GetBrowserProfile","bedrock-agentcore:GetBrowserSession","bedrock-agentcore:GetCapacityProvider","bedrock-agentcore:GetCodeInterpreter","bedrock-agentcore:GetCodeInterpreterSession","bedrock-agentcore:GetConfigurationBundle","bedrock-agentcore:GetConfigurationBundleVersion","bedrock-agentcore:GetConsentPortal","bedrock-agentcore:GetEvaluator","bedrock-agentcore:GetEvent","bedrock-agentcore:GetGateway","bedrock-agentcore:GetGatewayRateLimit","bedrock-agentcore:GetGatewayRule","bedrock-agentcore:GetGatewayTarget","bedrock-agentcore:GetHarness","bedrock-agentcore:GetHarnessEndpoint","bedrock-agentcore:GetMemory","bedrock-agentcore:GetMemoryRecord","bedrock-agentcore:GetOauth2CredentialProvider","bedrock-agentcore:GetOnlineEvaluationConfig","bedrock-agentcore:GetPaymentConnector","bedrock-agentcore:GetPaymentCredentialProvider","bedrock-agentcore:GetPaymentInstrument","bedrock-agentcore:GetPaymentInstrumentBalance","bedrock-agentcore:GetPaymentManager","bedrock-agentcore:GetPaymentSession","bedrock-agentcore:GetPolicy","bedrock-agentcore:GetPolicyEngine","bedrock-agentcore:GetPolicyEngineSummary","bedrock-agentcore:GetPolicyGeneration","bedrock-agentcore:GetPolicyGenerationSummary","bedrock-agentcore:GetPolicySummary","bedrock-agentcore:GetRecommendation","bedrock-agentcore:GetRegistry","bedrock-agentcore:GetRegistryRecord","bedrock-agentcore:GetResourcePolicy","bedrock-agentcore:GetTokenVault","bedrock-agentcore:GetWorkloadIdentity","bedrock-agentcore:ListABTests","bedrock-agentcore:ListAgentRuntimeEndpoints","bedrock-agentcore:ListAgentRuntimeVersions","bedrock-agentcore:ListAgentRuntimeVersionsByCapacityProvider","bedrock-agentcore:ListAgentRuntimes","bedrock-agentcore:ListApiKeyCredentialProviders","bedrock-agentcore:ListBatchEvaluations","bedrock-agentcore:ListBrowserProfiles","bedrock-agentcore:ListBrowserSessions","bedrock-agentcore:ListBrowsers","bedrock-agentcore:ListCapacityProviders","bedrock-agentcore:ListCodeInterpreterSessions","bedrock-agentcore:ListCodeInterpreters","bedrock-agentcore:ListConfigurationBundleVersions","bedrock-agentcore:ListConfigurationBundles","bedrock-agentcore:ListEvaluators","bedrock-agentcore:ListEvents","bedrock-agentcore:ListGatewayTargets","bedrock-agentcore:ListGateways","bedrock-agentcore:ListHarnessEndpoints","bedrock-agentcore:ListHarnesses","bedrock-agentcore:ListMemories","bedrock-agentcore:ListMemoryRecords","bedrock-agentcore:ListOauth2CredentialProviders","bedrock-agentcore:ListOnlineEvaluationConfigs","bedrock-agentcore:ListPolicies","bedrock-agentcore:ListPolicyEngineSummaries","bedrock-agentcore:ListPolicyEngines","bedrock-agentcore:ListPolicyGenerationAssets","bedrock-agentcore:ListPolicyGenerationSummaries","bedrock-agentcore:ListPolicyGenerations","bedrock-agentcore:ListPolicySummaries","bedrock-agentcore:ListRecommendations","bedrock-agentcore:ListTagsForResource","bedrock-agentcore:ListWorkloadIdentities","bedrock-agentcore:RetrieveMemoryRecords","bedrock-mantle:CallWithBearerToken","bedrock-mantle:CountTokens","bedrock-mantle:GetAccountDataRetention","bedrock-mantle:GetCustomizedModel","bedrock-mantle:GetFile","bedrock-mantle:GetFineTuningJob","bedrock-mantle:GetInference","bedrock-mantle:GetModel","bedrock-mantle:GetProject","bedrock-mantle:GetReservation","bedrock-mantle:ListCustomizedModelAssociations","bedrock-mantle:ListCustomizedModels","bedrock-mantle:ListFiles","bedrock-mantle:ListFineTuningJobs","bedrock-mantle:ListModels","bedrock-mantle:ListProjects","bedrock-mantle:ListReservations","bedrock-mantle:ListTagsForResource","bedrock:AgenticRetrieveStream","bedrock:CallWithBearerToken","bedrock:CheckIngestedDocumentAcl","bedrock:CountTokens","bedrock:GetAccountDataRetention","bedrock:GetAdvancedPromptOptimizationJob","bedrock:GetAgent","bedrock:GetAgentActionGroup","bedrock:GetAgentAlias","bedrock:GetAgentCollaborator","bedrock:GetAgentKnowledgeBase","bedrock:GetAgentMemory","bedrock:GetAgentVersion","bedrock:GetAsyncInvoke","bedrock:GetAutomatedReasoningPolicy","bedrock:GetAutomatedReasoningPolicyAnnotations","bedrock:GetAutomatedReasoningPolicyBuildWorkflow","bedrock:GetAutomatedReasoningPolicyBuildWorkflowResultAssets","bedrock:GetAutomatedReasoningPolicyNextScenario","bedrock:GetAutomatedReasoningPolicyTestCase","bedrock:GetAutomatedReasoningPolicyTestResult","bedrock:GetBlueprint","bedrock:GetBlueprintOptimizationStatus","bedrock:GetBlueprintRecommendation","bedrock:GetCustomModel","bedrock:GetCustomModelDeployment","bedrock:GetDataAutomationLibrary","bedrock:GetDataAutomationLibraryEntity","bedrock:GetDataAutomationLibraryIngestionJob","bedrock:GetDataAutomationProject","bedrock:GetDataAutomationStatus","bedrock:GetDataSource","bedrock:GetDocumentContent","bedrock:GetEvaluationJob","bedrock:GetExecutionFlowSnapshot","bedrock:GetFlow","bedrock:GetFlowAlias","bedrock:GetFlowExecution","bedrock:GetFlowVersion","bedrock:GetFoundationModel","bedrock:GetFoundationModelAvailability","bedrock:GetGuardrail","bedrock:GetImportedModel","bedrock:GetInferenceProfile","bedrock:GetIngestedDocumentAcl","bedrock:GetIngestionJob","bedrock:GetInvocationStep","bedrock:GetInvoke","bedrock:GetKnowledgeBase","bedrock:GetKnowledgeBaseDocuments","bedrock:GetMarketplaceModelEndpoint","bedrock:GetModelCopyJob","bedrock:GetModelCustomizationJob","bedrock:GetModelEvaluationJob","bedrock:GetModelImportJob","bedrock:GetModelInvocationJob","bedrock:GetModelInvocationLoggingConfiguration","bedrock:GetPrompt","bedrock:GetPromptRouter","bedrock:GetProvisionedModelThroughput","bedrock:GetResourcePolicy","bedrock:GetSession","bedrock:GetUseCaseForModelAccess","bedrock:ListAdvancedPromptOptimizationJobs","bedrock:ListAgentActionGroups","bedrock:ListAgentAliases","bedrock:ListAgentCollaborators","bedrock:ListAgentKnowledgeBases","bedrock:ListAgentVersions","bedrock:ListAgents","bedrock:ListAsyncInvokes","bedrock:ListAutomatedReasoningPolicies","bedrock:ListAutomatedReasoningPolicyBuildWorkflows","bedrock:ListAutomatedReasoningPolicyTestCases","bedrock:ListAutomatedReasoningPolicyTestResults","bedrock:ListBlueprints","bedrock:ListCustomModelDeployments","bedrock:ListCustomModels","bedrock:ListDataAutomationLibraries","bedrock:ListDataAutomationLibraryEntities","bedrock:ListDataAutomationLibraryIngestionJobs","bedrock:ListDataAutomationProjects","bedrock:ListDataSources","bedrock:ListEnforcedGuardrailsConfiguration","bedrock:ListEvaluationJobs","bedrock:ListFlowAliases","bedrock:ListFlowExecutionEvents","bedrock:ListFlowExecutions","bedrock:ListFlowVersions","bedrock:ListFlows","bedrock:ListFoundationModelAgreementOffers","bedrock:ListFoundationModels","bedrock:ListGuardrails","bedrock:ListImportedModels","bedrock:ListInferenceProfiles","bedrock:ListIngestionJobs","bedrock:ListInvocationSteps","bedrock:ListInvocations","bedrock:ListKnowledgeBaseDocuments","bedrock:ListKnowledgeBases","bedrock:ListMarketplaceModelEndpoints","bedrock:ListModelCopyJobs","bedrock:ListModelCustomizationJobs","bedrock:ListModelImportJobs","bedrock:ListModelInvocationJobs","bedrock:ListPromptRouters","bedrock:ListPrompts","bedrock:ListProvisionedModelThroughputs","bedrock:ListSessions","bedrock:ListTagsForResource","bedrock:RenderPrompt","bedrock:Retrieve","bedrock:ValidateFlowDefinition","billing:GetBillingData","billing:GetBillingDetails","billing:GetBillingNotifications","billing:GetBillingPreferences","billing:GetBillingView","billing:GetContractInformation","billing:GetCreditAllocationHistory","billing:GetCredits","billing:GetIAMAccessPreference","billing:GetResourcePolicy","billing:GetSellerOfRecord","billing:ListBillingViews","billing:ListSourceViewsForBillingView","billing:ListTagsForResource","billingconductor:GetBillingGroupCostReport","billingconductor:ListAccountAssociations","billingconductor:ListBillingGroupCostReports","billingconductor:ListBillingGroups","billingconductor:ListCustomLineItemVersions","billingconductor:ListCustomLineItems","billingconductor:ListPricingPlans","billingconductor:ListPricingPlansAssociatedWithPricingRule","billingconductor:ListPricingRules","billingconductor:ListPricingRulesAssociatedToPricingPlan","billingconductor:ListResourcesAssociatedToCustomLineItem","billingconductor:ListTagsForResource","braket:GetDevice","braket:GetJob","braket:GetQuantumTask","braket:SearchDevices","braket:SearchJobs","braket:SearchQuantumTasks","braket:SearchSpendingLimits","budgets:Describe*","budgets:ListTagsForResource","budgets:View*","cassandra:Select","ce:DescribeCostCategoryDefinition","ce:DescribeNotificationSubscription","ce:DescribeReport","ce:GetAnomalies","ce:GetAnomalyMonitors","ce:GetAnomalySubscriptions","ce:GetApproximateUsageRecords","ce:GetCommitmentPurchaseAnalysis","ce:GetCostAndUsage","ce:GetCostAndUsageComparisons","ce:GetCostAndUsageWithResources","ce:GetCostCategories","ce:GetCostComparisonDrivers","ce:GetCostForecast","ce:GetDimensionValues","ce:GetPreferences","ce:GetReservationCoverage","ce:GetReservationPurchaseRecommendation","ce:GetReservationUtilization","ce:GetRightsizingRecommendation","ce:GetSavingsPlanPurchaseRecommendationDetails","ce:GetSavingsPlansCoverage","ce:GetSavingsPlansPurchaseRecommendation","ce:GetSavingsPlansUtilization","ce:GetSavingsPlansUtilizationDetails","ce:GetTags","ce:GetUsageForecast","ce:ListCommitmentPurchaseAnalyses","ce:ListCostAllocationTagBackfillHistory","ce:ListCostAllocationTags","ce:ListCostCategoryDefinitions","ce:ListCostCategoryResourceAssociations","ce:ListSavingsPlansPurchaseRecommendationGeneration","ce:ListTagsForResource","chatbot:Describe*","chatbot:Get*","chatbot:List*","chime:Get*","chime:List*","chime:Retrieve*","chime:Search*","chime:Validate*","cleanrooms-ml:GetAudienceGenerationJob","cleanrooms-ml:GetAudienceModel","cleanrooms-ml:GetConfiguredAudienceModel","cleanrooms-ml:GetConfiguredAudienceModelPolicy","cleanrooms-ml:GetTrainingDataset","cleanrooms-ml:ListAudienceExportJobs","cleanrooms-ml:ListAudienceGenerationJobs","cleanrooms-ml:ListAudienceModels","cleanrooms-ml:ListConfiguredAudienceModels","cleanrooms-ml:ListTagsForResource","cleanrooms-ml:ListTrainingDatasets","cleanrooms:BatchGetCollaborationAnalysisTemplate","cleanrooms:BatchGetSchema","cleanrooms:BatchGetSchemaAnalysisRule","cleanrooms:GetAnalysisTemplate","cleanrooms:GetCollaboration","cleanrooms:GetCollaborationAnalysisTemplate","cleanrooms:GetCollaborationChangeRequest","cleanrooms:GetCollaborationConfiguredAudienceModelAssociation","cleanrooms:GetCollaborationIdNamespaceAssociation","cleanrooms:GetCollaborationPrivacyBudgetTemplate","cleanrooms:GetConfiguredAudienceModelAssociation","cleanrooms:GetConfiguredTable","cleanrooms:GetConfiguredTableAnalysisRule","cleanrooms:GetConfiguredTableAssociation","cleanrooms:GetConfiguredTableAssociationAnalysisRule","cleanrooms:GetIdMappingTable","cleanrooms:GetIdNamespaceAssociation","cleanrooms:GetMembership","cleanrooms:GetPrivacyBudgetTemplate","cleanrooms:GetProtectedJob","cleanrooms:GetProtectedQuery","cleanrooms:GetSchema","cleanrooms:GetSchemaAnalysisRule","cleanrooms:ListAnalysisTemplates","cleanrooms:ListCollaborationAnalysisTemplates","cleanrooms:ListCollaborationChangeRequests","cleanrooms:ListCollaborationConfiguredAudienceModelAssociations","cleanrooms:ListCollaborationIdNamespaceAssociations","cleanrooms:ListCollaborationPrivacyBudgetTemplates","cleanrooms:ListCollaborationPrivacyBudgets","cleanrooms:ListCollaborations","cleanrooms:ListConfiguredAudienceModelAssociations","cleanrooms:ListConfiguredTableAssociations","cleanrooms:ListConfiguredTables","cleanrooms:ListIdMappingTables","cleanrooms:ListIdNamespaceAssociations","cleanrooms:ListMembers","cleanrooms:ListMemberships","cleanrooms:ListPrivacyBudgetTemplates","cleanrooms:ListPrivacyBudgets","cleanrooms:ListProtectedJobs","cleanrooms:ListProtectedQueries","cleanrooms:ListSchemas","cleanrooms:ListTagsForResource","cleanrooms:PreviewPrivacyImpact","cloud9:Describe*","cloud9:List*","clouddirectory:BatchRead","clouddirectory:Get*","clouddirectory:List*","clouddirectory:LookupPolicy","cloudformation:BatchDescribeTypeConfigurations","cloudformation:Describe*","cloudformation:Detect*","cloudformation:Estimate*","cloudformation:Get*","cloudformation:List*","cloudformation:ValidateTemplate","cloudfront-keyvaluestore:Describe*","cloudfront-keyvaluestore:Get*","cloudfront-keyvaluestore:List*","cloudfront:Describe*","cloudfront:Get*","cloudfront:List*","cloudhsm:Describe*","cloudhsm:GetResourcePolicy","cloudhsm:List*","cloudsearch:Describe*","cloudsearch:List*","cloudtrail:Describe*","cloudtrail:Get*","cloudtrail:List*","cloudtrail:LookupEvents","cloudwatch:Describe*","cloudwatch:GenerateQuery","cloudwatch:GenerateQueryResultsSummary","cloudwatch:Get*","cloudwatch:List*","codeartifact:DescribeDomain","codeartifact:DescribePackage","codeartifact:DescribePackageVersion","codeartifact:DescribeRepository","codeartifact:GetAuthorizationToken","codeartifact:GetDomainPermissionsPolicy","codeartifact:GetPackageVersionAsset","codeartifact:GetPackageVersionReadme","codeartifact:GetRepositoryEndpoint","codeartifact:GetRepositoryPermissionsPolicy","codeartifact:ListDomains","codeartifact:ListPackageVersionAssets","codeartifact:ListPackageVersionDependencies","codeartifact:ListPackageVersions","codeartifact:ListPackages","codeartifact:ListRepositories","codeartifact:ListRepositoriesInDomain","codeartifact:ListTagsForResource","codeartifact:ReadFromRepository","codebuild:BatchGet*","codebuild:DescribeCodeCoverages","codebuild:DescribeTestCases","codebuild:List*","codecatalyst:GetBillingAuthorization","codecatalyst:GetConnection","codecatalyst:GetPendingConnection","codecatalyst:ListConnections","codecatalyst:ListIamRolesForConnection","codecatalyst:ListTagsForResource","codecommit:BatchGet*","codecommit:Describe*","codecommit:Get*","codecommit:GitPull","codecommit:List*","codeconnections:GetConnection","codeconnections:GetHost","codeconnections:GetRepositoryLink","codeconnections:GetRepositorySyncStatus","codeconnections:GetResourceSyncStatus","codeconnections:GetSyncConfiguration","codeconnections:ListConnections","codeconnections:ListHosts","codeconnections:ListRepositoryLinks","codeconnections:ListRepositorySyncDefinitions","codeconnections:ListSyncConfigurations","codeconnections:ListTagsForResource","codedeploy:BatchGet*","codedeploy:Get*","codedeploy:List*","codeguru-profiler:Describe*","codeguru-profiler:Get*","codeguru-profiler:List*","codeguru-reviewer:Describe*","codeguru-reviewer:Get*","codeguru-reviewer:List*","codepipeline:Get*","codepipeline:List*","codestar-connections:GetConnection","codestar-connections:GetHost","codestar-connections:GetRepositoryLink","codestar-connections:GetRepositorySyncStatus","codestar-connections:GetResourceSyncStatus","codestar-connections:GetSyncConfiguration","codestar-connections:ListConnections","codestar-connections:ListHosts","codestar-connections:ListRepositoryLinks","codestar-connections:ListRepositorySyncDefinitions","codestar-connections:ListSyncConfigurations","codestar-connections:ListTagsForResource","codestar-notifications:ListTargets","codestar-notifications:describeNotificationRule","codestar-notifications:listEventTypes","codestar-notifications:listNotificationRules","codestar-notifications:listTagsForResource","codestar:Describe*","codestar:Get*","codestar:List*","codestar:Verify*","codewhisperer:ListProfiles","cognito-identity:Describe*","cognito-identity:GetCredentialsForIdentity","cognito-identity:GetIdentityPoolAnalytics","cognito-identity:GetIdentityPoolDailyAnalytics","cognito-identity:GetIdentityPoolRoles","cognito-identity:GetIdentityProviderDailyAnalytics","cognito-identity:GetOpenIdToken","cognito-identity:GetOpenIdTokenForDeveloperIdentity","cognito-identity:List*","cognito-identity:Lookup*","cognito-idp:AdminGet*","cognito-idp:AdminList*","cognito-idp:Describe*","cognito-idp:Get*","cognito-idp:List*","cognito-sync:Describe*","cognito-sync:Get*","cognito-sync:List*","cognito-sync:QueryRecords","comprehend:BatchDetect*","comprehend:Classify*","comprehend:Contains*","comprehend:Describe*","comprehend:Detect*","comprehend:List*","compute-optimizer:DescribeRecommendationExportJobs","compute-optimizer:GetAutoScalingGroupRecommendations","compute-optimizer:GetEBSVolumeRecommendations","compute-optimizer:GetEC2InstanceRecommendations","compute-optimizer:GetEC2RecommendationProjectedMetrics","compute-optimizer:GetECSServiceRecommendationProjectedMetrics","compute-optimizer:GetECSServiceRecommendations","compute-optimizer:GetEffectiveRecommendationPreferences","compute-optimizer:GetEnrollmentStatus","compute-optimizer:GetEnrollmentStatusesForOrganization","compute-optimizer:GetIdleRecommendations","compute-optimizer:GetLambdaFunctionRecommendations","compute-optimizer:GetLicenseRecommendations","compute-optimizer:GetRDSDatabaseRecommendationProjectedMetrics","compute-optimizer:GetRDSDatabaseRecommendations","compute-optimizer:GetRecommendationPreferences","compute-optimizer:GetRecommendationSummaries","config:BatchGetAggregateResourceConfig","config:BatchGetResourceConfig","config:Deliver*","config:Describe*","config:Get*","config:List*","config:SelectAggregateResourceConfig","config:SelectResourceConfig","connect:Describe*","connect:GetContactAttributes","connect:GetCurrentMetricData","connect:GetCurrentUserData","connect:GetFederationToken","connect:GetMetricData","connect:GetMetricDataV2","connect:GetTaskTemplate","connect:GetTrafficDistribution","connect:List*","consoleapp:GetDeviceIdentity","consoleapp:ListDeviceIdentities","consolidatedbilling:GetAccountBillingRole","consolidatedbilling:ListLinkedAccounts","controlcatalog:GetControl","controlcatalog:ListCommonControls","controlcatalog:ListControlMappings","controlcatalog:ListControls","controlcatalog:ListDomains","controlcatalog:ListObjectives","cost-optimization-hub:GetPreferences","cost-optimization-hub:GetRecommendation","cost-optimization-hub:ListEfficiencyMetrics","cost-optimization-hub:ListEnrollmentStatuses","cost-optimization-hub:ListRecommendationSummaries","cost-optimization-hub:ListRecommendations","cur:GetClassicReport","cur:GetClassicReportPreferences","cur:GetUsageReport","customer-verification:GetCustomerVerificationDetails","customer-verification:GetCustomerVerificationEligibility","databrew:DescribeDataset","databrew:DescribeJob","databrew:DescribeJobRun","databrew:DescribeProject","databrew:DescribeRecipe","databrew:DescribeRuleset","databrew:DescribeSchedule","databrew:ListDatasets","databrew:ListJobRuns","databrew:ListJobs","databrew:ListProjects","databrew:ListRecipeVersions","databrew:ListRecipes","databrew:ListRulesets","databrew:ListSchedules","databrew:ListTagsForResource","dataexchange:Get*","dataexchange:List*","datapipeline:Describe*","datapipeline:EvaluateExpression","datapipeline:Get*","datapipeline:List*","datapipeline:QueryObjects","datapipeline:Validate*","datasync:Describe*","datasync:List*","datazone:GetAsset","datazone:GetAssetType","datazone:GetDataProduct","datazone:GetDataSource","datazone:GetDataSourceRun","datazone:GetDomain","datazone:GetDomainSharingPolicy","datazone:GetDomainUnit","datazone:GetEnvironment","datazone:GetEnvironmentAction","datazone:GetEnvironmentBlueprint","datazone:GetEnvironmentBlueprintConfiguration","datazone:GetEnvironmentProfile","datazone:GetFormType","datazone:GetGlossary","datazone:GetGlossaryTerm","datazone:GetGroupProfile","datazone:GetLineageNode","datazone:GetListing","datazone:GetMetadataGenerationRun","datazone:GetProject","datazone:GetProjectProfile","datazone:GetSubscription","datazone:GetSubscriptionEligibility","datazone:GetSubscriptionGrant","datazone:GetSubscriptionRequestDetails","datazone:GetSubscriptionTarget","datazone:GetTimeSeriesDataPoint","datazone:GetUserProfile","datazone:ListAccountEnvironments","datazone:ListAssetRevisions","datazone:ListDataProductRevisions","datazone:ListDataSourceRunActivities","datazone:ListDataSourceRuns","datazone:ListDataSources","datazone:ListDomainUnitsForParent","datazone:ListDomains","datazone:ListEntityOwners","datazone:ListEnvironmentActions","datazone:ListEnvironmentBlueprintConfigurationSummaries","datazone:ListEnvironmentBlueprintConfigurations","datazone:ListEnvironmentBlueprints","datazone:ListEnvironmentProfiles","datazone:ListEnvironments","datazone:ListGroupsForUser","datazone:ListLineageNodeHistory","datazone:ListNotifications","datazone:ListPolicyGrants","datazone:ListProjectMemberships","datazone:ListProjectProfiles","datazone:ListProjects","datazone:ListSubscriptionGrants","datazone:ListSubscriptionRequests","datazone:ListSubscriptionTargets","datazone:ListSubscriptions","datazone:ListTagsForResource","datazone:ListTimeSeriesDataPoints","datazone:Search","datazone:SearchGroupProfiles","datazone:SearchListings","datazone:SearchTypes","datazone:SearchUserProfiles","dax:BatchGetItem","dax:Describe*","dax:GetItem","dax:ListTags","dax:Query","dax:Scan","deadline:BatchGetJobEntity","deadline:GetApplicationVersion","deadline:GetBudget","deadline:GetFarm","deadline:GetFleet","deadline:GetJob","deadline:GetLicenseEndpoint","deadline:GetLimit","deadline:GetMonitor","deadline:GetMonitorSettings","deadline:GetQueue","deadline:GetQueueEnvironment","deadline:GetQueueFleetAssociation","deadline:GetQueueLimitAssociation","deadline:GetSession","deadline:GetSessionAction","deadline:GetSessionsStatisticsAggregation","deadline:GetStep","deadline:GetStorageProfile","deadline:GetStorageProfileForQueue","deadline:GetTask","deadline:GetVolume","deadline:GetWorker","deadline:ListAvailableMeteredProducts","deadline:ListBudgets","deadline:ListFarmMembers","deadline:ListFarms","deadline:ListFleetMembers","deadline:ListFleets","deadline:ListJobMembers","deadline:ListJobParameterDefinitions","deadline:ListJobs","deadline:ListLicenseEndpoints","deadline:ListLimits","deadline:ListMeteredProducts","deadline:ListMonitors","deadline:ListQueueEnvironments","deadline:ListQueueFleetAssociations","deadline:ListQueueLimitAssociations","deadline:ListQueueMembers","deadline:ListQueues","deadline:ListSessionActions","deadline:ListSessions","deadline:ListSessionsForWorker","deadline:ListStepConsumers","deadline:ListStepDependencies","deadline:ListSteps","deadline:ListStorageProfiles","deadline:ListStorageProfilesForQueue","deadline:ListTagsForResource","deadline:ListTasks","deadline:ListVolumes","deadline:ListWorkers","deadline:SearchJobs","deadline:SearchSteps","deadline:SearchTasks","deadline:SearchWorkers","deepcomposer:GetComposition","deepcomposer:GetModel","deepcomposer:GetSampleModel","deepcomposer:ListCompositions","deepcomposer:ListModels","deepcomposer:ListSampleModels","deepcomposer:ListTrainingTopics","detective:BatchGetGraphMemberDatasources","detective:BatchGetMembershipDatasources","detective:Get*","detective:List*","detective:SearchGraph","devicefarm:Get*","devicefarm:List*","devops-guru:DescribeAccountHealth","devops-guru:DescribeAccountOverview","devops-guru:DescribeAnomaly","devops-guru:DescribeEventSourcesConfig","devops-guru:DescribeFeedback","devops-guru:DescribeInsight","devops-guru:DescribeOrganizationHealth","devops-guru:DescribeOrganizationOverview","devops-guru:DescribeOrganizationResourceCollectionHealth","devops-guru:DescribeResourceCollectionHealth","devops-guru:DescribeServiceIntegration","devops-guru:GetCostEstimation","devops-guru:GetResourceCollection","devops-guru:ListAnomaliesForInsight","devops-guru:ListAnomalousLogGroups","devops-guru:ListEvents","devops-guru:ListInsights","devops-guru:ListMonitoredResources","devops-guru:ListNotificationChannels","devops-guru:ListOrganizationInsights","devops-guru:ListRecommendations","devops-guru:SearchInsights","devops-guru:StartCostEstimation","directconnect:Describe*","directconnect:GetResiliencyGroup","directconnect:ListResiliencyGroupAssociations","directconnect:ListResiliencyGroups","directconnect:ListVirtualInterfaceRoutes","directconnect:ListVirtualInterfaceTestHistory","discovery:Describe*","discovery:Get*","discovery:List*","dlm:Get*","dlm:ListTagsForResource","dms:Describe*","dms:List*","dms:Test*","docdb-elastic:GetCluster","docdb-elastic:GetClusterSnapshot","docdb-elastic:ListClusterSnapshots","docdb-elastic:ListClusters","docdb-elastic:ListPendingMaintenanceActions","docdb-elastic:ListTagsForResource","drs:DescribeJobLogItems","drs:DescribeJobs","drs:DescribeLaunchConfigurationTemplates","drs:DescribeRecoveryInstances","drs:DescribeRecoverySnapshots","drs:DescribeReplicationConfigurationTemplates","drs:DescribeSourceNetworks","drs:DescribeSourceServers","drs:GetFailbackReplicationConfiguration","drs:GetLaunchConfiguration","drs:GetReplicationConfiguration","drs:ListExtensibleSourceServers","drs:ListLaunchActions","drs:ListStagingAccounts","drs:ListTagsForResource","ds:Check*","ds:Describe*","ds:Get*","ds:List*","ds:Verify*","dsql:GetCluster","dsql:GetClusterPolicy","dsql:GetStream","dsql:GetVpcEndpointServiceName","dsql:ListClusters","dsql:ListStreams","dsql:ListTagsForResource","dynamodb:BatchGet*","dynamodb:Describe*","dynamodb:Get*","dynamodb:List*","dynamodb:PartiQLSelect","dynamodb:Query","dynamodb:ReadDataForReplication","dynamodb:Scan","dynamodb:SearchVectors","ec2:Describe*","ec2:DescribeInstanceImageMetadata","ec2:Get*","ec2:ListImagesInRecycleBin","ec2:ListSnapshotsInRecycleBin","ec2:ListVolumesInRecycleBin","ec2:SearchLocalGatewayRoutes","ec2:SearchTransitGatewayMulticastGroups","ec2:SearchTransitGatewayRoutes","ec2messages:Get*","ecr-public:BatchCheckLayerAvailability","ecr-public:DescribeImageTags","ecr-public:DescribeImages","ecr-public:DescribeRegistries","ecr-public:DescribeRepositories","ecr-public:GetAuthorizationToken","ecr-public:GetRegistryCatalogData","ecr-public:GetRepositoryCatalogData","ecr-public:GetRepositoryPolicy","ecr-public:ListTagsForResource","ecr:BatchCheck*","ecr:BatchGet*","ecr:Describe*","ecr:Get*","ecr:List*","ecs:Describe*","ecs:GetTaskProtection","ecs:List*","eks:AccessKubernetesApi","eks:Describe*","eks:List*","elasticache:Describe*","elasticache:List*","elasticbeanstalk:Check*","elasticbeanstalk:Describe*","elasticbeanstalk:List*","elasticbeanstalk:Request*","elasticbeanstalk:Retrieve*","elasticbeanstalk:Validate*","elasticfilesystem:Describe*","elasticfilesystem:ListTagsForResource","elasticloadbalancing:Describe*","elasticmapreduce:Describe*","elasticmapreduce:GetBlockPublicAccessConfiguration","elasticmapreduce:List*","elasticmapreduce:View*","elastictranscoder:List*","elastictranscoder:Read*","elemental-appliances-software:Get*","elemental-appliances-software:List*","elemental-inference:ExportDictionaryEntries","elemental-inference:GetDictionary","elemental-inference:GetFeed","elemental-inference:ListDictionaries","elemental-inference:ListFeeds","emr-containers:DescribeJobRun","emr-containers:DescribeManagedEndpoint","emr-containers:DescribeVirtualCluster","emr-containers:ListJobRuns","emr-containers:ListManagedEndpoints","emr-containers:ListTagsForResource","emr-containers:ListVirtualClusters","emr-serverless:GetApplication","emr-serverless:GetDashboardForJobRun","emr-serverless:GetJobRun","emr-serverless:ListApplications","emr-serverless:ListJobRuns","emr-serverless:ListTagsForResource","es:Describe*","es:ESHttpGet","es:ESHttpHead","es:Get*","es:List*","events:Describe*","events:List*","events:Test*","evidently:GetExperiment","evidently:GetExperimentResults","evidently:GetFeature","evidently:GetLaunch","evidently:GetProject","evidently:GetSegment","evidently:ListExperiments","evidently:ListFeatures","evidently:ListLaunches","evidently:ListProjects","evidently:ListSegmentReferences","evidently:ListSegments","evidently:ListTagsForResource","evidently:TestSegmentPattern","firehose:Describe*","firehose:List*","fis:GetAction","fis:GetExperiment","fis:GetExperimentTargetAccountConfiguration","fis:GetExperimentTemplate","fis:GetTargetAccountConfiguration","fis:GetTargetResourceType","fis:ListActions","fis:ListExperimentResolvedTargets","fis:ListExperimentTargetAccountConfigurations","fis:ListExperimentTemplates","fis:ListExperiments","fis:ListTagsForResource","fis:ListTargetAccountConfigurations","fis:ListTargetResourceTypes","fms:GetAdminAccount","fms:GetAdminScope","fms:GetAppsList","fms:GetComplianceDetail","fms:GetNotificationChannel","fms:GetPolicy","fms:GetProtectionStatus","fms:GetProtocolsList","fms:GetViolationDetails","fms:ListAppsLists","fms:ListComplianceStatus","fms:ListMemberAccounts","fms:ListPolicies","fms:ListProtocolsLists","fms:ListTagsForResource","forecast:DescribeAutoPredictor","forecast:DescribeDataset","forecast:DescribeDatasetGroup","forecast:DescribeDatasetImportJob","forecast:DescribeExplainability","forecast:DescribeExplainabilityExport","forecast:DescribeForecast","forecast:DescribeForecastExportJob","forecast:DescribeMonitor","forecast:DescribePredictor","forecast:DescribePredictorBacktestExportJob","forecast:DescribeWhatIfAnalysis","forecast:DescribeWhatIfForecast","forecast:DescribeWhatIfForecastExport","forecast:GetAccuracyMetrics","forecast:ListDatasetGroups","forecast:ListDatasetImportJobs","forecast:ListDatasets","forecast:ListExplainabilities","forecast:ListExplainabilityExports","forecast:ListForecastExportJobs","forecast:ListForecasts","forecast:ListMonitorEvaluations","forecast:ListMonitors","forecast:ListPredictorBacktestExportJobs","forecast:ListPredictors","forecast:ListWhatIfAnalyses","forecast:ListWhatIfForecastExports","forecast:ListWhatIfForecasts","forecast:QueryForecast","forecast:QueryWhatIfForecast","frauddetector:BatchGetVariable","frauddetector:DescribeDetector","frauddetector:DescribeModelVersions","frauddetector:GetBatchImportJobs","frauddetector:GetBatchPredictionJobs","frauddetector:GetDeleteEventsByEventTypeStatus","frauddetector:GetDetectorVersion","frauddetector:GetDetectors","frauddetector:GetEntityTypes","frauddetector:GetEvent","frauddetector:GetEventPredictionMetadata","frauddetector:GetEventTypes","frauddetector:GetExternalModels","frauddetector:GetKMSEncryptionKey","frauddetector:GetLabels","frauddetector:GetListElements","frauddetector:GetListsMetadata","frauddetector:GetModelVersion","frauddetector:GetModels","frauddetector:GetOutcomes","frauddetector:GetRules","frauddetector:GetVariables","frauddetector:ListEventPredictions","frauddetector:ListTagsForResource","freertos:Describe*","freertos:List*","freetier:GetAccountActivity","freetier:GetAccountPlanState","freetier:GetFreeTierAlertPreference","freetier:GetFreeTierUsage","freetier:ListAccountActivities","fsx:Describe*","fsx:List*","gamelift:Describe*","gamelift:Get*","gamelift:List*","gamelift:ResolveAlias","gamelift:Search*","gameliftstreams:GetApplication","gameliftstreams:GetStreamGroup","gameliftstreams:GetStreamUrl","gameliftstreams:ListApplicationShaderCaches","gameliftstreams:ListApplications","gameliftstreams:ListStreamGroups","gameliftstreams:ListStreamSessions","gameliftstreams:ListStreamSessionsByAccount","gameliftstreams:ListStreamUrls","gameliftstreams:ListTagsForResource","glacier:Describe*","glacier:Get*","glacier:List*","globalaccelerator:Describe*","globalaccelerator:List*","glue:BatchGetCrawlers","glue:BatchGetDevEndpoints","glue:BatchGetJobs","glue:BatchGetPartition","glue:BatchGetTableOptimizer","glue:BatchGetTriggers","glue:BatchGetWorkflows","glue:CheckSchemaVersionValidity","glue:GetCatalog","glue:GetCatalogImportStatus","glue:GetCatalogs","glue:GetClassifier","glue:GetClassifiers","glue:GetCrawler","glue:GetCrawlerMetrics","glue:GetCrawlers","glue:GetDataCatalogEncryptionSettings","glue:GetDatabase","glue:GetDatabases","glue:GetDataflowGraph","glue:GetDevEndpoint","glue:GetDevEndpoints","glue:GetJob","glue:GetJobBookmark","glue:GetJobRun","glue:GetJobRuns","glue:GetJobs","glue:GetMLTaskRun","glue:GetMLTaskRuns","glue:GetMLTransform","glue:GetMLTransforms","glue:GetMapping","glue:GetPartition","glue:GetPartitions","glue:GetPlan","glue:GetRegistry","glue:GetResourcePolicy","glue:GetSchema","glue:GetSchemaByDefinition","glue:GetSchemaVersion","glue:GetSchemaVersionsDiff","glue:GetSecurityConfiguration","glue:GetSecurityConfigurations","glue:GetSession","glue:GetStatement","glue:GetTable","glue:GetTableOptimizer","glue:GetTableVersion","glue:GetTableVersions","glue:GetTables","glue:GetTags","glue:GetTrigger","glue:GetTriggers","glue:GetUserDefinedFunction","glue:GetUserDefinedFunctions","glue:GetWorkflow","glue:GetWorkflowRun","glue:GetWorkflowRunProperties","glue:GetWorkflowRuns","glue:ListCrawlers","glue:ListCrawls","glue:ListDevEndpoints","glue:ListJobs","glue:ListMLTransforms","glue:ListRegistries","glue:ListSchemaVersions","glue:ListSchemas","glue:ListSessions","glue:ListStatements","glue:ListTableOptimizerRuns","glue:ListTriggers","glue:ListWorkflows","glue:QuerySchemaVersionMetadata","glue:SearchTables","grafana:DescribeWorkspace","grafana:DescribeWorkspaceAuthentication","grafana:DescribeWorkspaceConfiguration","grafana:ListPermissions","grafana:ListTagsForResource","grafana:ListVersions","grafana:ListWorkspaces","greengrass:DescribeComponent","greengrass:Get*","greengrass:List*","groundstation:DescribeContact","groundstation:DescribeContactVersion","groundstation:DescribeEphemeris","groundstation:GetConfig","groundstation:GetDataflowEndpointGroup","groundstation:GetMinuteUsage","groundstation:GetMissionProfile","groundstation:GetSatellite","groundstation:ListAntennas","groundstation:ListConfigs","groundstation:ListContactVersions","groundstation:ListContacts","groundstation:ListDataflowEndpointGroups","groundstation:ListEphemerides","groundstation:ListGroundStationReservations","groundstation:ListGroundStations","groundstation:ListMissionProfiles","groundstation:ListSatellites","groundstation:ListTagsForResource","guardduty:Describe*","guardduty:Get*","guardduty:List*","health:Describe*","healthlake:DescribeFHIRDatastore","healthlake:DescribeFHIRExportJob","healthlake:DescribeFHIRImportJob","healthlake:GetCapabilities","healthlake:ListFHIRDatastores","healthlake:ListFHIRExportJobs","healthlake:ListFHIRImportJobs","healthlake:ListTagsForResource","healthlake:ReadResource","healthlake:SearchWithGet","healthlake:SearchWithPost","iam:Generate*","iam:Get*","iam:List*","iam:Simulate*","identity-sync:GetSyncProfile","identity-sync:GetSyncTarget","identity-sync:ListSyncFilters","identitystore-auth:BatchGetSession","identitystore-auth:ListSessions","identitystore:DescribeGroup","identitystore:DescribeGroupMembership","identitystore:DescribeUser","identitystore:GetGroupId","identitystore:GetGroupMembershipId","identitystore:GetUserId","identitystore:IsMemberInGroups","identitystore:ListGroupMemberships","identitystore:ListGroupMembershipsForMember","identitystore:ListGroups","identitystore:ListUsers","imagebuilder:Get*","imagebuilder:List*","importexport:Get*","importexport:List*","inspector2:BatchGetAccountStatus","inspector2:BatchGetCodeSnippet","inspector2:BatchGetFreeTrialInfo","inspector2:BatchGetMemberEc2DeepInspectionStatus","inspector2:DescribeOrganizationConfiguration","inspector2:GetCisScanReport","inspector2:GetConfiguration","inspector2:GetDelegatedAdminAccount","inspector2:GetEc2DeepInspectionConfiguration","inspector2:GetEncryptionKey","inspector2:GetFindingsReportStatus","inspector2:GetMember","inspector2:GetSbomExport","inspector2:ListAccountPermissions","inspector2:ListCisScanConfigurations","inspector2:ListCisScans","inspector2:ListConnectors","inspector2:ListCoverage","inspector2:ListCoverageStatistics","inspector2:ListDelegatedAdminAccounts","inspector2:ListFilters","inspector2:ListFindingAggregations","inspector2:ListFindings","inspector2:ListMembers","inspector2:ListTagsForResource","inspector2:ListUsageTotals","inspector2:SearchVulnerabilities","inspector:Describe*","inspector:Get*","inspector:List*","inspector:Preview*","interconnect:DescribeConnectionProposal","interconnect:GetConnection","interconnect:GetEnvironment","interconnect:ListAttachPoints","interconnect:ListConnections","interconnect:ListEnvironments","interconnect:ListTagsForResource","internetmonitor:GetHealthEvent","internetmonitor:GetInternetEvent","internetmonitor:GetMonitor","internetmonitor:ListHealthEvents","internetmonitor:ListInternetEvents","internetmonitor:ListMonitors","internetmonitor:ListTagsForResource","invoicing:GetInvoiceEmailDeliveryPreferences","invoicing:GetInvoicePDF","invoicing:ListInvoiceSummaries","iot1click:DescribeDevice","iot1click:DescribePlacement","iot1click:DescribeProject","iot1click:GetDeviceMethods","iot1click:GetDevicesInPlacement","iot1click:ListDeviceEvents","iot1click:ListDevices","iot1click:ListPlacements","iot1click:ListProjects","iot1click:ListTagsForResource","iot:Describe*","iot:Get*","iot:List*","iotanalytics:Describe*","iotanalytics:Get*","iotanalytics:List*","iotanalytics:SampleChannelData","iotevents:DescribeAlarm","iotevents:DescribeAlarmModel","iotevents:DescribeDetector","iotevents:DescribeDetectorModel","iotevents:DescribeInput","iotevents:DescribeLoggingOptions","iotevents:ListAlarmModelVersions","iotevents:ListAlarmModels","iotevents:ListAlarms","iotevents:ListDetectorModelVersions","iotevents:ListDetectorModels","iotevents:ListDetectors","iotevents:ListInputs","iotevents:ListTagsForResource","iotfleethub:DescribeApplication","iotfleethub:ListApplications","iotfleetwise:GetCampaign","iotfleetwise:GetDecoderManifest","iotfleetwise:GetFleet","iotfleetwise:GetLoggingOptions","iotfleetwise:GetModelManifest","iotfleetwise:GetRegisterAccountStatus","iotfleetwise:GetSignalCatalog","iotfleetwise:GetVehicle","iotfleetwise:GetVehicleStatus","iotfleetwise:ListCampaigns","iotfleetwise:ListDecoderManifestNetworkInterfaces","iotfleetwise:ListDecoderManifestSignals","iotfleetwise:ListDecoderManifests","iotfleetwise:ListFleets","iotfleetwise:ListFleetsForVehicle","iotfleetwise:ListModelManifestNodes","iotfleetwise:ListModelManifests","iotfleetwise:ListSignalCatalogNodes","iotfleetwise:ListSignalCatalogs","iotfleetwise:ListTagsForResource","iotfleetwise:ListVehicles","iotfleetwise:ListVehiclesInFleet","iotsitewise:Describe*","iotsitewise:Get*","iotsitewise:List*","iotwireless:GetDestination","iotwireless:GetDeviceProfile","iotwireless:GetEventConfigurationByResourceTypes","iotwireless:GetFuotaTask","iotwireless:GetLogLevelsByResourceTypes","iotwireless:GetMetricConfiguration","iotwireless:GetMetrics","iotwireless:GetMulticastGroup","iotwireless:GetMulticastGroupSession","iotwireless:GetNetworkAnalyzerConfiguration","iotwireless:GetPartnerAccount","iotwireless:GetPosition","iotwireless:GetPositionConfiguration","iotwireless:GetPositionEstimate","iotwireless:GetResourceEventConfiguration","iotwireless:GetResourceLogLevel","iotwireless:GetResourcePosition","iotwireless:GetServiceEndpoint","iotwireless:GetServiceProfile","iotwireless:GetWirelessDevice","iotwireless:GetWirelessDeviceImportTask","iotwireless:GetWirelessDeviceStatistics","iotwireless:GetWirelessGateway","iotwireless:GetWirelessGatewayCertificate","iotwireless:GetWirelessGatewayFirmwareInformation","iotwireless:GetWirelessGatewayStatistics","iotwireless:GetWirelessGatewayTask","iotwireless:GetWirelessGatewayTaskDefinition","iotwireless:ListDestinations","iotwireless:ListDeviceProfiles","iotwireless:ListDevicesForWirelessDeviceImportTask","iotwireless:ListEventConfigurations","iotwireless:ListFuotaTasks","iotwireless:ListMulticastGroups","iotwireless:ListMulticastGroupsByFuotaTask","iotwireless:ListNetworkAnalyzerConfigurations","iotwireless:ListPartnerAccounts","iotwireless:ListPositionConfigurations","iotwireless:ListQueuedMessages","iotwireless:ListServiceProfiles","iotwireless:ListTagsForResource","iotwireless:ListWirelessDeviceImportTasks","iotwireless:ListWirelessDevices","iotwireless:ListWirelessGatewayTaskDefinitions","iotwireless:ListWirelessGateways","ivs:BatchGetChannel","ivs:GetChannel","ivs:GetComposition","ivs:GetEncoderConfiguration","ivs:GetIngestConfiguration","ivs:GetParticipant","ivs:GetPlaybackKeyPair","ivs:GetPlaybackRestrictionPolicy","ivs:GetPublicKey","ivs:GetRecordingConfiguration","ivs:GetStage","ivs:GetStageSession","ivs:GetStorageConfiguration","ivs:GetStream","ivs:GetStreamSession","ivs:ListChannels","ivs:ListCompositions","ivs:ListEncoderConfigurations","ivs:ListIngestConfigurations","ivs:ListParticipantEvents","ivs:ListParticipants","ivs:ListPlaybackKeyPairs","ivs:ListPlaybackRestrictionPolicies","ivs:ListPublicKeys","ivs:ListRecordingConfigurations","ivs:ListStageSessions","ivs:ListStages","ivs:ListStorageConfigurations","ivs:ListStreamKeys","ivs:ListStreamSessions","ivs:ListStreams","ivs:ListTagsForResource","ivschat:GetLoggingConfiguration","ivschat:GetRoom","ivschat:ListLoggingConfigurations","ivschat:ListRooms","ivschat:ListTagsForResource","startups:GetSpendSummary"],"Resource":"*"},{"Sid":"ReadOnlyActionsGroup2","Effect":"Allow","Action":["kafka:Describe*","kafka:DescribeCluster","kafka:DescribeClusterOperation","kafka:DescribeClusterV2","kafka:DescribeConfiguration","kafka:DescribeConfigurationRevision","kafka:Get*","kafka:GetBootstrapBrokers","kafka:GetCompatibleKafkaVersions","kafka:List*","kafka:ListClusterOperations","kafka:ListClusters","kafka:ListClustersV2","kafka:ListConfigurationRevisions","kafka:ListConfigurations","kafka:ListKafkaVersions","kafka:ListNodes","kafka:ListTagsForResource","kafkaconnect:DescribeConnector","kafkaconnect:DescribeCustomPlugin","kafkaconnect:DescribeWorkerConfiguration","kafkaconnect:ListConnectors","kafkaconnect:ListCustomPlugins","kafkaconnect:ListWorkerConfigurations","kendra:BatchGetDocumentStatus","kendra:DescribeDataSource","kendra:DescribeExperience","kendra:DescribeFaq","kendra:DescribeIndex","kendra:DescribePrincipalMapping","kendra:DescribeQuerySuggestionsBlockList","kendra:DescribeQuerySuggestionsConfig","kendra:DescribeThesaurus","kendra:GetQuerySuggestions","kendra:GetSnapshots","kendra:ListDataSourceSyncJobs","kendra:ListDataSources","kendra:ListEntityPersonas","kendra:ListExperienceEntities","kendra:ListExperiences","kendra:ListFaqs","kendra:ListGroupsOlderThanOrderingId","kendra:ListIndices","kendra:ListQuerySuggestionsBlockLists","kendra:ListTagsForResource","kendra:ListThesauri","kendra:Query","kinesis:Describe*","kinesis:Get*","kinesis:List*","kinesisanalytics:Describe*","kinesisanalytics:Discover*","kinesisanalytics:Get*","kinesisanalytics:List*","kinesisvideo:Describe*","kinesisvideo:Get*","kinesisvideo:List*","kms:Describe*","kms:Get*","kms:List*","lakeformation:DescribeResource","lakeformation:GetDataCellsFilter","lakeformation:GetDataLakeSettings","lakeformation:GetEffectivePermissionsForPath","lakeformation:GetLfTag","lakeformation:GetResourceLfTags","lakeformation:ListDataCellsFilter","lakeformation:ListLfTags","lakeformation:ListPermissions","lakeformation:ListResources","lakeformation:ListTableStorageOptimizers","lakeformation:SearchDatabasesByLfTags","lakeformation:SearchTablesByLfTags","lambda:Get*","lambda:List*","launchwizard:DescribeAdditionalNode","launchwizard:DescribeProvisionedApp","launchwizard:DescribeProvisioningEvents","launchwizard:DescribeSettingsSet","launchwizard:GetDeployment","launchwizard:GetInfrastructureSuggestion","launchwizard:GetIpAddress","launchwizard:GetResourceCostEstimate","launchwizard:GetResourceRecommendation","launchwizard:GetSettingsSet","launchwizard:GetWorkload","launchwizard:GetWorkloadAsset","launchwizard:GetWorkloadAssets","launchwizard:GetWorkloadDeploymentPattern","launchwizard:ListAdditionalNodes","launchwizard:ListAllowedResources","launchwizard:ListDeploymentEvents","launchwizard:ListDeployments","launchwizard:ListProvisionedApps","launchwizard:ListResourceCostEstimates","launchwizard:ListSettingsSets","launchwizard:ListTagsForResource","launchwizard:ListWorkloadDeploymentOptions","launchwizard:ListWorkloadDeploymentPatterns","launchwizard:ListWorkloads","lex:DescribeBot","lex:DescribeBotAlias","lex:DescribeBotChannel","lex:DescribeBotLocale","lex:DescribeBotReplica","lex:DescribeBotVersion","lex:DescribeExport","lex:DescribeImport","lex:DescribeIntent","lex:DescribeResourcePolicy","lex:DescribeSlot","lex:DescribeSlotType","lex:Get*","lex:ListBotAliasReplicas","lex:ListBotAliases","lex:ListBotChannels","lex:ListBotLocales","lex:ListBotReplicas","lex:ListBotVersionReplicas","lex:ListBotVersions","lex:ListBots","lex:ListBuiltInIntents","lex:ListBuiltInSlotTypes","lex:ListExports","lex:ListImports","lex:ListIntents","lex:ListSlotTypes","lex:ListSlots","lex:ListTagsForResource","license-manager:Get*","license-manager:List*","lightsail:GetActiveNames","lightsail:GetAlarms","lightsail:GetAutoSnapshots","lightsail:GetBlueprints","lightsail:GetBucketAccessKeys","lightsail:GetBucketBundles","lightsail:GetBucketMetricData","lightsail:GetBuckets","lightsail:GetBundles","lightsail:GetCertificates","lightsail:GetCloudFormationStackRecords","lightsail:GetContainerAPIMetadata","lightsail:GetContainerImages","lightsail:GetContainerServiceDeployments","lightsail:GetContainerServiceMetricData","lightsail:GetContainerServicePowers","lightsail:GetContainerServices","lightsail:GetDisk","lightsail:GetDiskSnapshot","lightsail:GetDiskSnapshots","lightsail:GetDisks","lightsail:GetDistributionBundles","lightsail:GetDistributionLatestCacheReset","lightsail:GetDistributionMetricData","lightsail:GetDistributions","lightsail:GetDomain","lightsail:GetDomains","lightsail:GetExportSnapshotRecords","lightsail:GetInstance","lightsail:GetInstanceMetricData","lightsail:GetInstancePortStates","lightsail:GetInstanceSnapshot","lightsail:GetInstanceSnapshots","lightsail:GetInstanceState","lightsail:GetInstances","lightsail:GetKeyPair","lightsail:GetKeyPairs","lightsail:GetLoadBalancer","lightsail:GetLoadBalancerMetricData","lightsail:GetLoadBalancerTlsCertificates","lightsail:GetLoadBalancers","lightsail:GetOperation","lightsail:GetOperations","lightsail:GetOperationsForResource","lightsail:GetRegions","lightsail:GetRelationalDatabase","lightsail:GetRelationalDatabaseBlueprints","lightsail:GetRelationalDatabaseBundles","lightsail:GetRelationalDatabaseEvents","lightsail:GetRelationalDatabaseLogEvents","lightsail:GetRelationalDatabaseLogStreams","lightsail:GetRelationalDatabaseMetricData","lightsail:GetRelationalDatabaseParameters","lightsail:GetRelationalDatabaseSnapshot","lightsail:GetRelationalDatabaseSnapshots","lightsail:GetRelationalDatabases","lightsail:GetStaticIp","lightsail:GetStaticIps","lightsail:Is*","logs:Describe*","logs:FilterLogEvents","logs:Get*","logs:ListAggregateLogGroupSummaries","logs:ListAnomalies","logs:ListEntitiesForLogGroup","logs:ListIntegrations","logs:ListLogAnomalyDetectors","logs:ListLogDeliveries","logs:ListLogGroupsForEntity","logs:ListLogGroupsForQuery","logs:ListScheduledQueries","logs:ListSourcesForS3TableIntegration","logs:ListTagsForResource","logs:ListTagsLogGroup","logs:StartLiveTail","logs:StartQuery","logs:StopLiveTail","logs:StopQuery","logs:TestMetricFilter","lookoutequipment:DescribeDataIngestionJob","lookoutequipment:DescribeDataset","lookoutequipment:DescribeInferenceScheduler","lookoutequipment:DescribeLabel","lookoutequipment:DescribeLabelGroup","lookoutequipment:DescribeModel","lookoutequipment:DescribeModelVersion","lookoutequipment:DescribeResourcePolicy","lookoutequipment:DescribeRetrainingScheduler","lookoutequipment:ListDataIngestionJobs","lookoutequipment:ListDatasets","lookoutequipment:ListInferenceEvents","lookoutequipment:ListInferenceExecutions","lookoutequipment:ListInferenceSchedulers","lookoutequipment:ListLabelGroups","lookoutequipment:ListLabels","lookoutequipment:ListModelVersions","lookoutequipment:ListModels","lookoutequipment:ListRetrainingSchedulers","lookoutequipment:ListSensorStatistics","lookoutequipment:ListTagsForResource","lookoutmetrics:Describe*","lookoutmetrics:Get*","lookoutmetrics:List*","lookoutvision:DescribeDataset","lookoutvision:DescribeModel","lookoutvision:DescribeModelPackagingJob","lookoutvision:DescribeProject","lookoutvision:ListDatasetEntries","lookoutvision:ListModelPackagingJobs","lookoutvision:ListModels","lookoutvision:ListProjects","lookoutvision:ListTagsForResource","m2:GetApplication","m2:GetApplicationVersion","m2:GetBatchJobExecution","m2:GetDataSetDetails","m2:GetDataSetImportTask","m2:GetDeployment","m2:GetEnvironment","m2:ListApplicationVersions","m2:ListApplications","m2:ListBatchJobDefinitions","m2:ListBatchJobExecutions","m2:ListDataSetImportHistory","m2:ListDataSets","m2:ListDeployments","m2:ListEngineVersions","m2:ListEnvironments","m2:ListTagsForResource","machinelearning:Describe*","machinelearning:Get*","macie2:BatchGetCustomDataIdentifiers","macie2:DescribeBuckets","macie2:DescribeClassificationJob","macie2:DescribeOrganizationConfiguration","macie2:GetAdministratorAccount","macie2:GetAllowList","macie2:GetAutomatedDiscoveryConfiguration","macie2:GetBucketStatistics","macie2:GetClassificationExportConfiguration","macie2:GetClassificationScope","macie2:GetCustomDataIdentifier","macie2:GetFindingStatistics","macie2:GetFindings","macie2:GetFindingsFilter","macie2:GetFindingsPublicationConfiguration","macie2:GetInvitationsCount","macie2:GetMacieSession","macie2:GetMember","macie2:GetResourceProfile","macie2:GetRevealConfiguration","macie2:GetSensitiveDataOccurrencesAvailability","macie2:GetSensitivityInspectionTemplate","macie2:GetUsageStatistics","macie2:GetUsageTotals","macie2:ListAllowLists","macie2:ListAutomatedDiscoveryAccounts","macie2:ListClassificationJobs","macie2:ListClassificationScopes","macie2:ListCustomDataIdentifiers","macie2:ListFindings","macie2:ListFindingsFilters","macie2:ListInvitations","macie2:ListMembers","macie2:ListOrganizationAdminAccounts","macie2:ListResourceProfileArtifacts","macie2:ListResourceProfileDetections","macie2:ListSensitivityInspectionTemplates","macie2:ListTagsForResource","macie2:SearchResources","managedblockchain:GetMember","managedblockchain:GetNetwork","managedblockchain:GetNode","managedblockchain:GetProposal","managedblockchain:ListInvitations","managedblockchain:ListMembers","managedblockchain:ListNetworks","managedblockchain:ListNodes","managedblockchain:ListProposalVotes","managedblockchain:ListProposals","managedblockchain:ListTagsForResource","mediaconnect:DescribeFlow","mediaconnect:DescribeFlowSourceMetadata","mediaconnect:DescribeFlowSourceThumbnail","mediaconnect:DescribeGateway","mediaconnect:DescribeGatewayInstance","mediaconnect:DescribeOffering","mediaconnect:DescribeReservation","mediaconnect:DiscoverGatewayPollEndpoint","mediaconnect:GetRouterInput","mediaconnect:GetRouterNetworkInterface","mediaconnect:GetRouterOutput","mediaconnect:ListBridges","mediaconnect:ListEntitlements","mediaconnect:ListFlows","mediaconnect:ListGatewayInstances","mediaconnect:ListGateways","mediaconnect:ListOfferings","mediaconnect:ListReservations","mediaconnect:ListRouterInputs","mediaconnect:ListRouterNetworkInterfaces","mediaconnect:ListRouterOutputs","mediaconnect:ListTagsForResource","mediaconvert:DescribeEndpoints","mediaconvert:Get*","mediaconvert:List*","mediaconvert:Probe","mediaconvert:SearchJobs","medialive:DescribeAccountConfiguration","medialive:DescribeChannel","medialive:DescribeChannelPlacementGroup","medialive:DescribeCluster","medialive:DescribeInput","medialive:DescribeInputDevice","medialive:DescribeInputDeviceThumbnail","medialive:DescribeInputSecurityGroup","medialive:DescribeMultiplex","medialive:DescribeMultiplexProgram","medialive:DescribeNetwork","medialive:DescribeOffering","medialive:DescribeReservation","medialive:DescribeSchedule","medialive:GetCloudWatchAlarmTemplate","medialive:GetCloudWatchAlarmTemplateGroup","medialive:GetEventBridgeRuleTemplate","medialive:GetEventBridgeRuleTemplateGroup","medialive:GetSignalMap","medialive:ListChannels","medialive:ListCloudWatchAlarmTemplateGroups","medialive:ListCloudWatchAlarmTemplates","medialive:ListEventBridgeRuleTemplateGroups","medialive:ListEventBridgeRuleTemplates","medialive:ListInputDeviceTransfers","medialive:ListInputDevices","medialive:ListInputSecurityGroups","medialive:ListInputs","medialive:ListMultiplexPrograms","medialive:ListMultiplexes","medialive:ListOfferings","medialive:ListReservations","medialive:ListSignalMaps","medialive:ListTagsForResource","mediapackage-vod:Describe*","mediapackage-vod:List*","mediapackage:Describe*","mediapackage:List*","mediapackagev2:GetChannel","mediapackagev2:GetChannelGroup","mediapackagev2:GetChannelPolicy","mediapackagev2:GetHeadObject","mediapackagev2:GetObject","mediapackagev2:GetOriginEndpoint","mediapackagev2:GetOriginEndpointPolicy","mediapackagev2:ListChannelGroups","mediapackagev2:ListChannels","mediapackagev2:ListOriginEndpoints","mediapackagev2:ListTagsForResource","mediastore:DescribeContainer","mediastore:DescribeObject","mediastore:GetContainerPolicy","mediastore:GetCorsPolicy","mediastore:GetLifecyclePolicy","mediastore:GetMetricPolicy","mediastore:GetObject","mediastore:ListContainers","mediastore:ListItems","mediastore:ListTagsForResource","memorydb:DescribeAcls","memorydb:DescribeClusters","memorydb:DescribeEngineVersions","memorydb:DescribeEvents","memorydb:DescribeMultiRegionClusters","memorydb:DescribeMultiRegionParameterGroups","memorydb:DescribeMultiRegionParameters","memorydb:DescribeParameterGroups","memorydb:DescribeParameters","memorydb:DescribeReservedNodes","memorydb:DescribeReservedNodesOfferings","memorydb:DescribeServiceUpdates","memorydb:DescribeSnapshots","memorydb:DescribeSubnetGroups","memorydb:DescribeUsers","memorydb:ListAllowedMultiRegionClusterUpdates","memorydb:ListAllowedNodeTypeUpdates","memorydb:ListTags","mgh:Describe*","mgh:GetHomeRegion","mgh:List*","mgn:DescribeJobLogItems","mgn:DescribeJobs","mgn:DescribeLaunchConfigurationTemplates","mgn:DescribeReplicationConfigurationTemplates","mgn:DescribeSourceServers","mgn:DescribeVcenterClients","mgn:GetLaunchConfiguration","mgn:GetReplicationConfiguration","mgn:ListApplications","mgn:ListSourceServerActions","mgn:ListTemplateActions","mgn:ListWaves","mobileanalytics:Get*","mobiletargeting:Get*","mobiletargeting:List*","monitron:GetProject","monitron:GetProjectAdminUser","monitron:ListProjects","monitron:ListTagsForResource","mpa:GetApprovalTeam","mpa:GetIdentitySource","mpa:GetPolicyVersion","mpa:GetResourcePolicy","mpa:GetSession","mpa:ListApprovalTeams","mpa:ListIdentitySources","mpa:ListPolicies","mpa:ListPolicyVersions","mpa:ListResourcePolicies","mpa:ListSessions","mpa:ListTagsForResource","mq:Describe*","mq:List*","network-firewall:DescribeFirewall","network-firewall:DescribeFirewallPolicy","network-firewall:DescribeLoggingConfiguration","network-firewall:DescribeProxy","network-firewall:DescribeProxyConfiguration","network-firewall:DescribeProxyRule","network-firewall:DescribeProxyRuleGroup","network-firewall:DescribeResourcePolicy","network-firewall:DescribeRuleGroup","network-firewall:DescribeRuleGroupMetadata","network-firewall:DescribeTLSInspectionConfiguration","network-firewall:ListFirewallPolicies","network-firewall:ListFirewalls","network-firewall:ListProxies","network-firewall:ListProxyConfigurations","network-firewall:ListProxyRuleGroups","network-firewall:ListRuleGroups","network-firewall:ListTLSInspectionConfigurations","network-firewall:ListTagsForResource","networkflowmonitor:GetMonitor","networkflowmonitor:GetScope","networkflowmonitor:ListMonitors","networkflowmonitor:ListScopes","networkmanager:DescribeGlobalNetworks","networkmanager:GetConnectAttachment","networkmanager:GetConnectPeer","networkmanager:GetConnectPeerAssociations","networkmanager:GetConnections","networkmanager:GetCoreNetwork","networkmanager:GetCoreNetworkChangeEvents","networkmanager:GetCoreNetworkChangeSet","networkmanager:GetCoreNetworkPolicy","networkmanager:GetCustomerGatewayAssociations","networkmanager:GetDevices","networkmanager:GetLinkAssociations","networkmanager:GetLinks","networkmanager:GetNetworkResourceCounts","networkmanager:GetNetworkResourceRelationships","networkmanager:GetNetworkResources","networkmanager:GetNetworkRoutes","networkmanager:GetNetworkTelemetry","networkmanager:GetResourcePolicy","networkmanager:GetRouteAnalysis","networkmanager:GetSiteToSiteVpnAttachment","networkmanager:GetSites","networkmanager:GetTransitGatewayConnectPeerAssociations","networkmanager:GetTransitGatewayPeering","networkmanager:GetTransitGatewayRegistrations","networkmanager:GetTransitGatewayRouteTableAttachment","networkmanager:GetVpcAttachment","networkmanager:ListAttachmentRoutingPolicyAssociations","networkmanager:ListAttachments","networkmanager:ListConnectPeers","networkmanager:ListCoreNetworkPolicyVersions","networkmanager:ListCoreNetworkPrefixListAssociations","networkmanager:ListCoreNetworkRoutingInformation","networkmanager:ListCoreNetworks","networkmanager:ListPeerings","networkmanager:ListTagsForResource","networkmonitor:GetMonitor","networkmonitor:GetProbe","networkmonitor:ListMonitors","networkmonitor:ListTagsForResource","nimble:GetEula","nimble:GetFeatureMap","nimble:GetLaunchProfile","nimble:GetLaunchProfileDetails","nimble:GetLaunchProfileInitialization","nimble:GetLaunchProfileMember","nimble:GetStreamingImage","nimble:GetStreamingSession","nimble:GetStudio","nimble:GetStudioComponent","nimble:GetStudioMember","nimble:ListEulaAcceptances","nimble:ListEulas","nimble:ListLaunchProfileMembers","nimble:ListLaunchProfiles","nimble:ListStreamingImages","nimble:ListStreamingSessions","nimble:ListStudioComponents","nimble:ListStudioMembers","nimble:ListStudios","nimble:ListTagsForResource","notifications-contacts:GetEmailContact","notifications-contacts:ListEmailContacts","notifications-contacts:ListTagsForResource","notifications:GetEventRule","notifications:GetFeatureOptInStatus","notifications:GetManagedNotificationChildEvent","notifications:GetManagedNotificationConfiguration","notifications:GetManagedNotificationEvent","notifications:GetNotificationConfiguration","notifications:GetNotificationEvent","notifications:GetNotificationsAccessForOrganization","notifications:List*","oam:GetLink","oam:GetSink","oam:GetSinkPolicy","oam:ListAttachedLinks","oam:ListLinks","oam:ListSinks","observabilityadmin:GetCentralizationRuleForOrganization","observabilityadmin:GetS3TableIntegration","observabilityadmin:GetTelemetryEnrichmentStatus","observabilityadmin:GetTelemetryEvaluationStatus","observabilityadmin:GetTelemetryEvaluationStatusForOrganization","observabilityadmin:GetTelemetryPipeline","observabilityadmin:GetTelemetryRule","observabilityadmin:GetTelemetryRuleForOrganization","observabilityadmin:ListCentralizationRulesForOrganization","observabilityadmin:ListResourceTelemetry","observabilityadmin:ListResourceTelemetryForOrganization","observabilityadmin:ListS3TableIntegrations","observabilityadmin:ListTagsForResource","observabilityadmin:ListTelemetryPipelines","observabilityadmin:ListTelemetryRules","observabilityadmin:ListTelemetryRulesForOrganization","observabilityadmin:TestTelemetryPipeline","observabilityadmin:ValidateTelemetryPipelineConfiguration","omics:Get*","omics:List*","one:GetDeviceConfigurationTemplate","one:GetDeviceInstance","one:GetDeviceInstanceConfiguration","one:GetSite","one:GetSiteAddress","one:ListDeviceConfigurationTemplates","one:ListDeviceInstances","one:ListSites","one:ListUsers","opsworks-cm:Describe*","opsworks-cm:List*","opsworks:Describe*","opsworks:Get*","organizations:Describe*","organizations:List*","osis:GetPipeline","osis:GetPipelineBlueprint","osis:GetPipelineChangeProgress","osis:ListPipelineBlueprints","osis:ListPipelines","osis:ListTagsForResource","outposts:Get*","outposts:List*","payment-cryptography:GetAlias","payment-cryptography:GetKey","payment-cryptography:GetPublicKeyCertificate","payment-cryptography:ListAliases","payment-cryptography:ListKeys","payment-cryptography:ListTagsForResource","payments:GetPaymentInstrument","payments:GetPaymentStatus","payments:ListPaymentInstruments","payments:ListPaymentPreferences","payments:ListPaymentProgramOptions","payments:ListPaymentProgramStatus","payments:ListTagsForResource","pca-connector-ad:GetConnector","pca-connector-ad:GetDirectoryRegistration","pca-connector-ad:GetServicePrincipalName","pca-connector-ad:GetTemplate","pca-connector-ad:GetTemplateGroupAccessControlEntry","pca-connector-ad:ListConnectors","pca-connector-ad:ListDirectoryRegistrations","pca-connector-ad:ListServicePrincipalNames","pca-connector-ad:ListTagsForResource","pca-connector-ad:ListTemplateGroupAccessControlEntries","pca-connector-ad:ListTemplates","pca-connector-scep:GetChallengeMetadata","pca-connector-scep:GetConnector","pca-connector-scep:ListChallengeMetadata","pca-connector-scep:ListConnectors","pca-connector-scep:ListTagsForResource","pcs:GetCluster","pcs:GetComputeNodeGroup","pcs:GetQueue","pcs:ListClusters","pcs:ListComputeNodeGroups","pcs:ListQueues","pcs:ListTagsForResource","personalize:Describe*","personalize:Get*","personalize:List*","pi:DescribeDimensionKeys","pi:GetDimensionKeyDetails","pi:GetResourceMetadata","pi:GetResourceMetrics","pi:ListAvailableResourceDimensions","pi:ListAvailableResourceMetrics","pipes:DescribePipe","pipes:ListPipes","pipes:ListTagsForResource","polly:Describe*","polly:Get*","polly:List*","polly:SynthesizeSpeech","pricing:DescribeServices","pricing:GetAttributeValues","pricing:GetPriceListFileUrl","pricing:GetProducts","pricing:ListPriceLists","proton:GetDeployment","proton:GetEnvironment","proton:GetEnvironmentTemplate","proton:GetEnvironmentTemplateVersion","proton:GetService","proton:GetServiceInstance","proton:GetServiceTemplate","proton:GetServiceTemplateVersion","proton:ListDeployments","proton:ListEnvironmentAccountConnections","proton:ListEnvironmentTemplates","proton:ListEnvironments","proton:ListServiceInstances","proton:ListServiceTemplates","proton:ListServices","proton:ListTagsForResource","purchase-orders:GetPurchaseOrder","purchase-orders:ListPurchaseOrderInvoices","purchase-orders:ListPurchaseOrders","purchase-orders:ViewPurchaseOrders","qbusiness:GetApplication","qbusiness:GetChatControlsConfiguration","qbusiness:GetDataSource","qbusiness:GetGroup","qbusiness:GetIndex","qbusiness:GetPlugin","qbusiness:GetRetriever","qbusiness:GetUser","qbusiness:GetWebExperience","qbusiness:ListApplications","qbusiness:ListDataSourceSyncJobs","qbusiness:ListDataSources","qbusiness:ListGroups","qbusiness:ListIndices","qbusiness:ListPlugins","qbusiness:ListRetrievers","qbusiness:ListSubscriptions","qbusiness:ListTagsForResource","qbusiness:ListWebExperiences","qldb:DescribeJournalKinesisStream","qldb:DescribeJournalS3Export","qldb:DescribeLedger","qldb:GetBlock","qldb:GetDigest","qldb:GetRevision","qldb:ListJournalKinesisStreamsForLedger","qldb:ListJournalS3Exports","qldb:ListJournalS3ExportsForLedger","qldb:ListLedgers","qldb:ListTagsForResource","ram:Get*","ram:List*","rbin:GetRule","rbin:ListRules","rbin:ListTagsForResource","rds:Describe*","rds:Download*","rds:List*","redshift-serverless:GetCustomDomainAssociation","redshift-serverless:GetEndpointAccess","redshift-serverless:GetNamespace","redshift-serverless:GetRecoveryPoint","redshift-serverless:GetResourcePolicy","redshift-serverless:GetScheduledAction","redshift-serverless:GetSnapshot","redshift-serverless:GetTableRestoreStatus","redshift-serverless:GetUsageLimit","redshift-serverless:GetWorkgroup","redshift-serverless:ListCustomDomainAssociations","redshift-serverless:ListEndpointAccess","redshift-serverless:ListNamespaces","redshift-serverless:ListRecoveryPoints","redshift-serverless:ListScheduledActions","redshift-serverless:ListSnapshotCopyConfigurations","redshift-serverless:ListSnapshots","redshift-serverless:ListTableRestoreStatus","redshift-serverless:ListTagsForResource","redshift-serverless:ListUsageLimits","redshift-serverless:ListWorkgroups","redshift:Describe*","redshift:GetReservedNodeExchangeOfferings","redshift:ListRecommendations","redshift:View*","refactor-spaces:GetApplication","refactor-spaces:GetEnvironment","refactor-spaces:GetResourcePolicy","refactor-spaces:GetRoute","refactor-spaces:GetService","refactor-spaces:ListApplications","refactor-spaces:ListEnvironmentVpcs","refactor-spaces:ListEnvironments","refactor-spaces:ListRoutes","refactor-spaces:ListServices","refactor-spaces:ListTagsForResource","rekognition:CompareFaces","rekognition:DescribeDataset","rekognition:DescribeProjectVersions","rekognition:DescribeProjects","rekognition:DescribeStreamProcessor","rekognition:Detect*","rekognition:GetCelebrityInfo","rekognition:GetCelebrityRecognition","rekognition:GetContentModeration","rekognition:GetFaceDetection","rekognition:GetFaceSearch","rekognition:GetLabelDetection","rekognition:GetPersonTracking","rekognition:GetSegmentDetection","rekognition:GetTextDetection","rekognition:List*","rekognition:RecognizeCelebrities","rekognition:Search*","resiliencehub:DescribeApp","resiliencehub:DescribeAppAssessment","resiliencehub:DescribeAppVersion","resiliencehub:DescribeAppVersionAppComponent","resiliencehub:DescribeAppVersionResource","resiliencehub:DescribeAppVersionResourcesResolutionStatus","resiliencehub:DescribeAppVersionTemplate","resiliencehub:DescribeDraftAppVersionResourcesImportStatus","resiliencehub:DescribeMetricsExport","resiliencehub:DescribeResiliencyPolicy","resiliencehub:DescribeResourceGroupingRecommendationTask","resiliencehub:GetFailureModeFinding","resiliencehub:GetPolicy","resiliencehub:GetService","resiliencehub:GetSystem","resiliencehub:GetUserJourney","resiliencehub:ListAlarmRecommendations","resiliencehub:ListAppAssessmentComplianceDrifts","resiliencehub:ListAppAssessmentResourceDrifts","resiliencehub:ListAppAssessments","resiliencehub:ListAppComponentCompliances","resiliencehub:ListAppComponentRecommendations","resiliencehub:ListAppInputSources","resiliencehub:ListAppVersionAppComponents","resiliencehub:ListAppVersionResourceMappings","resiliencehub:ListAppVersionResources","resiliencehub:ListAppVersions","resiliencehub:ListApps","resiliencehub:ListAssertions","resiliencehub:ListDependencies","resiliencehub:ListFailureModeAssessments","resiliencehub:ListFailureModeFindings","resiliencehub:ListInputSources","resiliencehub:ListMetrics","resiliencehub:ListPolicies","resiliencehub:ListRecommendationTemplates","resiliencehub:ListReports","resiliencehub:ListResiliencyPolicies","resiliencehub:ListResourceGroupingRecommendations","resiliencehub:ListResources","resiliencehub:ListServiceEvents","resiliencehub:ListServiceEvents","resiliencehub:ListServiceFunctions","resiliencehub:ListServiceFunctions","resiliencehub:ListServiceTopologyEdges","resiliencehub:ListServices","resiliencehub:ListSopRecommendations","resiliencehub:ListSuggestedResiliencyPolicies","resiliencehub:ListSystemEvents","resiliencehub:ListSystems","resiliencehub:ListTagsForResource","resiliencehub:ListTestRecommendations","resiliencehub:ListUnsupportedAppVersionResources","resiliencehub:ListUserJourneys","resource-explorer-2:BatchGetView","resource-explorer-2:GetAccountLevelServiceConfiguration","resource-explorer-2:GetDefaultView","resource-explorer-2:GetIndex","resource-explorer-2:GetManagedView","resource-explorer-2:GetResourceExplorerSetup","resource-explorer-2:GetServiceIndex","resource-explorer-2:GetServiceView","resource-explorer-2:GetView","resource-explorer-2:ListIndexes","resource-explorer-2:ListIndexesForMembers","resource-explorer-2:ListManagedViews","resource-explorer-2:ListServiceIndexes","resource-explorer-2:ListServiceViews","resource-explorer-2:ListStreamingAccessForServices","resource-explorer-2:ListSupportedResourceTypes","resource-explorer-2:ListTagsForResource","resource-explorer-2:ListViews","resource-explorer-2:Search","resource-groups:Get*","resource-groups:List*","resource-groups:Search*","robomaker:BatchDescribe*","robomaker:Describe*","robomaker:Get*","robomaker:List*","rolesanywhere:GetCrl","rolesanywhere:GetProfile","rolesanywhere:GetSubject","rolesanywhere:GetTrustAnchor","rolesanywhere:ListCrls","rolesanywhere:ListProfiles","rolesanywhere:ListSubjects","rolesanywhere:ListTagsForResource","rolesanywhere:ListTrustAnchors","route53-recovery-cluster:Get*","route53-recovery-cluster:ListRoutingControls","route53-recovery-control-config:Describe*","route53-recovery-control-config:GetResourcePolicy","route53-recovery-control-config:List*","route53-recovery-readiness:Get*","route53-recovery-readiness:List*","route53:Get*","route53:List*","route53:Test*","route53domains:Check*","route53domains:Get*","route53domains:List*","route53domains:View*","route53globalresolver:GetAccessSource","route53globalresolver:GetDNSView","route53globalresolver:GetFirewallDomainList","route53globalresolver:GetFirewallRule","route53globalresolver:GetGlobalResolver","route53globalresolver:GetHostedZoneAssociation","route53globalresolver:GetManagedFirewallDomainList","route53globalresolver:ListAccessSources","route53globalresolver:ListAccessTokens","route53globalresolver:ListDNSViews","route53globalresolver:ListFirewallDomainLists","route53globalresolver:ListFirewallDomains","route53globalresolver:ListFirewallRules","route53globalresolver:ListGlobalResolvers","route53globalresolver:ListHostedZoneAssociations","route53globalresolver:ListManagedFirewallDomainLists","route53profiles:GetProfile","route53profiles:GetProfileAssociation","route53profiles:GetProfileResourceAssociation","route53profiles:ListProfileAssociations","route53profiles:ListProfileResourceAssociations","route53profiles:ListProfiles","route53profiles:ListTagsForResource","route53resolver:Get*","route53resolver:List*","rum:GetAppMonitor","rum:GetAppMonitorData","rum:ListAppMonitors","s3-object-lambda:GetObject","s3-object-lambda:GetObjectAcl","s3-object-lambda:GetObjectLegalHold","s3-object-lambda:GetObjectRetention","s3-object-lambda:GetObjectTagging","s3-object-lambda:GetObjectVersion","s3-object-lambda:GetObjectVersionAcl","s3-object-lambda:GetObjectVersionTagging","s3-object-lambda:ListBucket","s3-object-lambda:ListBucketMultipartUploads","s3-object-lambda:ListBucketVersions","s3-object-lambda:ListMultipartUploadParts","s3-outposts:GetAccessPoint","s3-outposts:GetAccessPointPolicy","s3-outposts:GetBucket","s3-outposts:GetBucketPolicy","s3-outposts:GetBucketTagging","s3-outposts:GetBucketVersioning","s3-outposts:GetLifecycleConfiguration","s3-outposts:GetObject","s3-outposts:GetObjectTagging","s3-outposts:GetObjectVersion","s3-outposts:GetObjectVersionForReplication","s3-outposts:GetObjectVersionTagging","s3-outposts:GetReplicationConfiguration","s3-outposts:ListAccessPoints","s3-outposts:ListBucket","s3-outposts:ListBucketMultipartUploads","s3-outposts:ListBucketVersions","s3-outposts:ListEndpoints","s3-outposts:ListMultipartUploadParts","s3-outposts:ListOutpostsWithS3","s3-outposts:ListRegionalBuckets","s3-outposts:ListSharedEndpoints","s3:DescribeJob","s3:Get*","s3:List*","s3express:GetAccessPoint","s3express:GetAccessPointPolicy","s3express:GetAccessPointScope","s3express:GetBucketPolicy","s3express:GetEncryptionConfiguration","s3express:GetLifecycleConfiguration","s3express:ListAccessPointsForDirectoryBuckets","s3express:ListAllMyDirectoryBuckets","s3express:ListTagsForResource","s3files:GetAccessPoint","s3files:GetFileSystem","s3files:GetFileSystemPolicy","s3files:GetMountTarget","s3files:GetSynchronizationConfiguration","s3files:ListAccessPoints","s3files:ListFileSystems","s3files:ListMountTargets","s3files:ListTagsForResource","s3tables:GetNamespace","s3tables:GetTable","s3tables:GetTableBucket","s3tables:GetTableBucketEncryption","s3tables:GetTableBucketMaintenanceConfiguration","s3tables:GetTableBucketPolicy","s3tables:GetTableBucketReplication","s3tables:GetTableBucketStorageClass","s3tables:GetTableData","s3tables:GetTableEncryption","s3tables:GetTableMaintenanceConfiguration","s3tables:GetTableMaintenanceJobStatus","s3tables:GetTableMetadataLocation","s3tables:GetTablePolicy","s3tables:GetTableRecordExpirationConfiguration","s3tables:GetTableRecordExpirationJobStatus","s3tables:GetTableReplication","s3tables:GetTableReplicationStatus","s3tables:GetTableStorageClass","s3tables:ListNamespaces","s3tables:ListTableBuckets","s3tables:ListTables","s3tables:ListTagsForResource","s3vectors:GetIndex","s3vectors:GetVectorBucket","s3vectors:GetVectorBucketPolicy","s3vectors:GetVectors","s3vectors:ListIndexes","s3vectors:ListVectorBuckets","s3vectors:ListVectors","s3vectors:QueryVectors","sagemaker:Describe*","sagemaker:GetSearchSuggestions","sagemaker:List*","sagemaker:Search","savingsplans:DescribeSavingsPlanRates","savingsplans:DescribeSavingsPlans","savingsplans:DescribeSavingsPlansOfferingRates","savingsplans:DescribeSavingsPlansOfferings","savingsplans:ListTagsForResource","scheduler:GetSchedule","scheduler:GetScheduleGroup","scheduler:ListScheduleGroups","scheduler:ListSchedules","scheduler:ListTagsForResource","schemas:Describe*","schemas:Get*","schemas:List*","schemas:Search*","sdb:Get*","sdb:List*","sdb:Select*","secretsmanager:Describe*","secretsmanager:GetResourcePolicy","secretsmanager:List*","securityagent:BatchGetAgentSpaces","securityagent:BatchGetArtifactMetadata","securityagent:BatchGetCodeReviewJobTasks","securityagent:BatchGetCodeReviewJobs","securityagent:BatchGetCodeReviews","securityagent:BatchGetFindings","securityagent:BatchGetPentestJobContentMetadata","securityagent:BatchGetPentestJobTasks","securityagent:BatchGetPentestJobs","securityagent:BatchGetPentests","securityagent:BatchGetTargetDomains","securityagent:BatchGetValidationRuns","securityagent:GetApplication","securityagent:GetArtifact","securityagent:GetDesignReview","securityagent:GetDesignReviewArtifact","securityagent:GetDesignReviewFeedback","securityagent:GetIntegration","securityagent:GetSecurityRequirementPack","securityagent:ListAgentSpaces","securityagent:ListApplications","securityagent:ListArtifacts","securityagent:ListCodeReviewJobTasks","securityagent:ListCodeReviewJobsForCodeReview","securityagent:ListCodeReviews","securityagent:ListDesignReviewComments","securityagent:ListDesignReviews","securityagent:ListDiscoveredDomains","securityagent:ListDiscoveredEndpoints","securityagent:ListFindings","securityagent:ListIntegratedResources","securityagent:ListIntegrations","securityagent:ListMemberships","securityagent:ListPentestJobTasks","securityagent:ListPentestJobsForPentest","securityagent:ListPentests","securityagent:ListResourcesFromIntegration","securityagent:ListSecurityRequirementPacks","securityagent:ListSecurityRequirements","securityagent:ListTargetDomains","securityhub:BatchGetAutomationRules","securityhub:BatchGetConfigurationPolicyAssociations","securityhub:BatchGetControlEvaluations","securityhub:BatchGetSecurityControls","securityhub:BatchGetStandardsControlAssociations","securityhub:Describe*","securityhub:Get*","securityhub:List*","securitylake:GetDataLakeExceptionSubscription","securitylake:GetDataLakeOrganizationConfiguration","securitylake:GetDataLakeSources","securitylake:GetSubscriber","securitylake:ListDataLakeExceptions","securitylake:ListDataLakes","securitylake:ListLogSources","securitylake:ListSubscribers","securitylake:ListTagsForResource","serverlessrepo:Get*","serverlessrepo:List*","serverlessrepo:SearchApplications","servicecatalog:Describe*","servicecatalog:GetApplication","servicecatalog:GetAttributeGroup","servicecatalog:List*","servicecatalog:Scan*","servicecatalog:Search*","servicediscovery:DiscoverInstances","servicediscovery:DiscoverInstancesRevision","servicediscovery:Get*","servicediscovery:List*","servicequotas:GetAWSDefaultServiceQuota","servicequotas:GetAssociationForServiceQuotaTemplate","servicequotas:GetAutoManagementConfiguration","servicequotas:GetQuotaUtilizationReport","servicequotas:GetRequestedServiceQuotaChange","servicequotas:GetServiceQuota","servicequotas:GetServiceQuotaIncreaseRequestFromTemplate","servicequotas:ListAWSDefaultServiceQuotas","servicequotas:ListRequestedServiceQuotaChangeHistory","servicequotas:ListRequestedServiceQuotaChangeHistoryByQuota","servicequotas:ListServiceQuotaIncreaseRequestsInTemplate","servicequotas:ListServiceQuotas","servicequotas:ListServices","servicequotas:StartQuotaUtilizationReport","ses:BatchGetMetricData","ses:Describe*","ses:Get*","ses:List*","shield:Describe*","shield:Get*","shield:List*","signer:DescribeSigningJob","signer:GetSigningPlatform","signer:GetSigningProfile","signer:ListProfilePermissions","signer:ListSigningJobs","signer:ListSigningPlatforms","signer:ListSigningProfiles","signer:ListTagsForResource","signin:ListTrustedIdentityPropagationApplicationsForConsole","sms-voice:DescribeAccountAttributes","sms-voice:DescribeAccountLimits","sms-voice:DescribeConfigurationSets","sms-voice:DescribeKeywords","sms-voice:DescribeOptOutLists","sms-voice:DescribeOptedOutNumbers","sms-voice:DescribePhoneNumbers","sms-voice:DescribePools","sms-voice:DescribeProtectConfigurations","sms-voice:DescribeRegistrationAttachments","sms-voice:DescribeRegistrationFieldDefinitions","sms-voice:DescribeRegistrationFieldValues","sms-voice:DescribeRegistrationSectionDefinitions","sms-voice:DescribeRegistrationTypeDefinitions","sms-voice:DescribeRegistrationVersions","sms-voice:DescribeRegistrations","sms-voice:DescribeSenderIds","sms-voice:DescribeSpendLimits","sms-voice:DescribeVerifiedDestinationNumbers","sms-voice:ListPoolOriginationIdentities","sms-voice:ListTagsForResource","snowball:Describe*","snowball:Get*","snowball:List*","sns:Check*","sns:Get*","sns:List*","sqs:Get*","sqs:List*","sqs:Receive*","ssm-contacts:DescribeEngagement","ssm-contacts:DescribePage","ssm-contacts:GetContact","ssm-contacts:GetContactChannel","ssm-contacts:ListContactChannels","ssm-contacts:ListContacts","ssm-contacts:ListEngagements","ssm-contacts:ListPageReceipts","ssm-contacts:ListPagesByContact","ssm-contacts:ListPagesByEngagement","ssm-incidents:GetIncidentRecord","ssm-incidents:GetReplicationSet","ssm-incidents:GetResourcePolicies","ssm-incidents:GetResponsePlan","ssm-incidents:GetTimelineEvent","ssm-incidents:ListIncidentRecords","ssm-incidents:ListRelatedItems","ssm-incidents:ListReplicationSets","ssm-incidents:ListResponsePlans","ssm-incidents:ListTagsForResource","ssm-incidents:ListTimelineEvents","ssm-quicksetup:GetConfiguration","ssm-quicksetup:GetConfigurationManager","ssm-quicksetup:GetServiceSettings","ssm-quicksetup:ListConfigurationManagers","ssm-quicksetup:ListConfigurations","ssm-quicksetup:ListQuickSetupTypes","ssm-quicksetup:ListTagsForResource","ssm-sap:GetApplication","ssm-sap:GetComponent","ssm-sap:GetConfigurationCheckOperation","ssm-sap:GetDatabase","ssm-sap:GetOperation","ssm-sap:GetResourcePermission","ssm-sap:ListApplications","ssm-sap:ListComponents","ssm-sap:ListConfigurationCheckDefinitions","ssm-sap:ListConfigurationCheckOperations","ssm-sap:ListDatabases","ssm-sap:ListOperationEvents","ssm-sap:ListOperations","ssm-sap:ListSubCheckResults","ssm-sap:ListSubCheckRuleResults","ssm-sap:ListTagsForResource","ssm:Describe*","ssm:Get*","ssm:List*","sso-directory:Describe*","sso-directory:List*","sso-directory:Search*","sso:Describe*","sso:Get*","sso:List*","states:Describe*","states:GetExecutionHistory","states:List*","states:ValidateStateMachineDefinition","storagegateway:Describe*","storagegateway:List*","sts:GetAccessKeyInfo","sts:GetCallerIdentity","sts:GetSessionToken","support:DescribeAttachment","support:DescribeCaseAttributes","support:DescribeCases","support:DescribeCommunication","support:DescribeCommunications","support:DescribeCreateCaseOptions","support:DescribeIssueTypes","support:DescribeServices","support:DescribeSeverityLevels","support:DescribeSupportLevel","support:DescribeSupportedLanguages","support:DescribeTrustedAdvisorCheckRefreshStatuses","support:DescribeTrustedAdvisorCheckResult","support:DescribeTrustedAdvisorCheckSummaries","support:DescribeTrustedAdvisorChecks","support:SearchForCases","supportplans:GetSupportPlan","supportplans:GetSupportPlanUpdateStatus","supportplans:ListSupportPlanModifiers","sustainability:GetCarbonFootprintSummary","sustainability:GetEstimatedCarbonEmissions","sustainability:GetEstimatedCarbonEmissionsDimensionValues","sustainability:GetEstimatedWaterAllocation","sustainability:GetEstimatedWaterAllocationDimensionValues","swf:Count*","swf:Describe*","swf:Get*","swf:List*","synthetics:Describe*","synthetics:Get*","synthetics:List*","tag:DescribeReportCreation","tag:Get*","tax:GetExemptions","tax:GetTaxInheritance","tax:GetTaxInterview","tax:GetTaxRegistration","tax:GetTaxRegistrationDocument","tax:ListTaxRegistrations","timestream:DescribeBatchLoadTask","timestream:DescribeDatabase","timestream:DescribeEndpoints","timestream:DescribeTable","timestream:ListBatchLoadTasks","timestream:ListDatabases","timestream:ListMeasures","timestream:ListTables","timestream:ListTagsForResource","tnb:GetSolFunctionInstance","tnb:GetSolFunctionPackage","tnb:GetSolFunctionPackageContent","tnb:GetSolFunctionPackageDescriptor","tnb:GetSolNetworkInstance","tnb:GetSolNetworkOperation","tnb:GetSolNetworkPackage","tnb:GetSolNetworkPackageContent","tnb:GetSolNetworkPackageDescriptor","tnb:ListSolFunctionInstances","tnb:ListSolFunctionPackages","tnb:ListSolNetworkInstances","tnb:ListSolNetworkOperations","tnb:ListSolNetworkPackages","tnb:ListTagsForResource","transcribe:Get*","transcribe:List*","transfer:Describe*","transfer:List*","transfer:TestIdentityProvider","transform-custom:GetAnalysis","transform-custom:GetCampaign","transform-custom:GetFinding","transform-custom:GetFindingGroups","transform-custom:GetKnowledgeItem","transform-custom:GetRemediation","transform-custom:GetRepository","transform-custom:GetSource","transform-custom:ListAnalyses","transform-custom:ListCampaignRepositories","transform-custom:ListCampaigns","transform-custom:ListFindings","transform-custom:ListKnowledgeItems","transform-custom:ListRemediations","transform-custom:ListRepositories","transform-custom:ListSources","transform-custom:ListTagsForResource","transform-custom:ListTransformationPackageMetadata","transform:GetAccountSettings","transform:GetAgent","transform:GetAgentRuntimeConfiguration","transform:GetConnector","transform:ListAgents","transform:ListConnectors","transform:ListProfiles","transform:ListTagsForResource","translate:DescribeTextTranslationJob","translate:GetParallelData","translate:GetTerminology","translate:ListParallelData","translate:ListTerminologies","translate:ListTextTranslationJobs","trustedadvisor:Describe*","trustedadvisor:GetOrganizationRecommendation","trustedadvisor:GetRecommendation","trustedadvisor:ListChecks","trustedadvisor:ListOrganizationRecommendationAccounts","trustedadvisor:ListOrganizationRecommendationResources","trustedadvisor:ListOrganizationRecommendations","trustedadvisor:ListRecommendationResources","trustedadvisor:ListRecommendations","user-subscriptions:ListApplicationClaims","user-subscriptions:ListClaims","user-subscriptions:ListUserSubscriptions","uxc:GetAccountColor","uxc:GetAccountCustomizations","uxc:ListServices","verifiedpermissions:GetIdentitySource","verifiedpermissions:GetPolicy","verifiedpermissions:GetPolicyStore","verifiedpermissions:GetPolicyTemplate","verifiedpermissions:GetSchema","verifiedpermissions:IsAuthorized","verifiedpermissions:IsAuthorizedWithToken","verifiedpermissions:ListIdentitySources","verifiedpermissions:ListPolicies","verifiedpermissions:ListPolicyStores","verifiedpermissions:ListPolicyTemplates","vpc-lattice:GetAccessLogSubscription","vpc-lattice:GetAuthPolicy","vpc-lattice:GetDomainVerification","vpc-lattice:GetListener","vpc-lattice:GetResourceConfiguration","vpc-lattice:GetResourceGateway","vpc-lattice:GetResourcePolicy","vpc-lattice:GetRule","vpc-lattice:GetService","vpc-lattice:GetServiceNetwork","vpc-lattice:GetServiceNetworkResourceAssociation","vpc-lattice:GetServiceNetworkServiceAssociation","vpc-lattice:GetServiceNetworkVpcAssociation","vpc-lattice:GetTargetGroup","vpc-lattice:ListAccessLogSubscriptions","vpc-lattice:ListDomainVerifications","vpc-lattice:ListListeners","vpc-lattice:ListResourceConfigurations","vpc-lattice:ListResourceEndpointAssociations","vpc-lattice:ListResourceGateways","vpc-lattice:ListRules","vpc-lattice:ListServiceNetworkResourceAssociations","vpc-lattice:ListServiceNetworkServiceAssociations","vpc-lattice:ListServiceNetworkVpcAssociations","vpc-lattice:ListServiceNetworkVpcEndpointAssociations","vpc-lattice:ListServiceNetworks","vpc-lattice:ListServices","vpc-lattice:ListTagsForResource","vpc-lattice:ListTargetGroups","vpc-lattice:ListTargets","waf-regional:Get*","waf-regional:List*","waf:Get*","waf:List*","wafv2:CheckCapacity","wafv2:Describe*","wafv2:Get*","wafv2:List*","wellarchitected:ExportLens","wellarchitected:GetAnswer","wellarchitected:GetConsolidatedReport","wellarchitected:GetLens","wellarchitected:GetLensReview","wellarchitected:GetLensReviewReport","wellarchitected:GetLensVersionDifference","wellarchitected:GetMilestone","wellarchitected:GetProfile","wellarchitected:GetProfileTemplate","wellarchitected:GetReviewTemplate","wellarchitected:GetReviewTemplateAnswer","wellarchitected:GetReviewTemplateLensReview","wellarchitected:GetWorkload","wellarchitected:List*","workdocs:CheckAlias","workdocs:Describe*","workdocs:Get*","workmail:Describe*","workmail:Get*","workmail:List*","workmail:Search*","workspaces-web:GetBrowserSettings","workspaces-web:GetIdentityProvider","workspaces-web:GetNetworkSettings","workspaces-web:GetPortal","workspaces-web:GetPortalServiceProviderMetadata","workspaces-web:GetTrustStore","workspaces-web:GetUserAccessLoggingSettings","workspaces-web:GetUserSettings","workspaces-web:ListBrowserSettings","workspaces-web:ListIdentityProviders","workspaces-web:ListNetworkSettings","workspaces-web:ListPortals","workspaces-web:ListTagsForResource","workspaces-web:ListTrustStores","workspaces-web:ListUserAccessLoggingSettings","workspaces-web:ListUserSettings","workspaces:Describe*","xray:BatchGet*","xray:CancelTraceRetrieval","xray:Get*","xray:ListResourcePolicies","xray:ListRetrievedTraces","xray:ListTagsForResource","xray:StartTraceRetrieval"],"Resource":"*"},{"Sid":"S3ExpressReadOnlySessionObjectAccess","Effect":"Allow","Action":["s3express:CreateSession"],"Resource":"*","Condition":{"StringEquals":{"s3express:SessionMode":"ReadOnly"}}}]}

Version history

Current version v191, edited by AWS on 2026-10-30. Version history is recorded from 2026-11-11. Earlier versions are in the IAM console under Policy versions.

Attach snippets

aws iam attach-role-policy --role-name ROLE_NAME --policy-arn arn:aws:iam::aws:policy/ReadOnlyAccess
aws iam attach-user-policy --user-name USER_NAME --policy-arn arn:aws:iam::aws:policy/ReadOnlyAccess
aws iam attach-group-policy --group-name GROUP_NAME --policy-arn arn:aws:iam::aws:policy/ReadOnlyAccess

Resources:
  ExampleRole:
    Type: AWS::IAM::Role
    Properties:
      AssumeRolePolicyDocument: {}  # replace with your trust policy
      ManagedPolicyArns:
        - arn:aws:iam::aws:policy/ReadOnlyAccess

resource "aws_iam_role_policy_attachment" "readonlyaccess" {
  role       = aws_iam_role.example.name
  policy_arn = "arn:aws:iam::aws:policy/ReadOnlyAccess"
}

role.addManagedPolicy(
  iam.ManagedPolicy.fromAwsManagedPolicyName("ReadOnlyAccess"),
);

Sources

• ReadOnlyAccess (AWS Managed Policy Reference Guide) (retrieved 2026-11-12; supports summary, practicalScope, securityConsiderations, assignmentGuidance, faqs)
• AWS managed policies for job functions (IAM User Guide) (retrieved 2026-11-12; supports practicalScope, useCases, bestPractices, securityConsiderations, assignmentGuidance, faqs)
• Managed policies and inline policies (IAM User Guide) (retrieved 2026-11-12; supports useCases, securityConsiderations, faqs)

• Official AWS reference for ReadOnlyAccess
• Report a data issue