{"columns":["action","accessLevel","plane","patterns","statements","flags"],"defaultVersion":"v12","name":"SystemAdministrator","patterns":["acm:Describe*","acm:Get*","acm:List*","acm:Request*","acm:Resend*","autoscaling:*","cloudtrail:DescribeTrails","cloudtrail:GetTrailStatus","cloudtrail:ListPublicKeys","cloudtrail:ListTags","cloudtrail:LookupEvents","cloudtrail:StartLogging","cloudtrail:StopLogging","cloudwatch:*","codecommit:BatchGetRepositories","codecommit:CreateBranch","codecommit:CreateRepository","codecommit:Get*","codecommit:GitPull","codecommit:GitPush","codecommit:List*","codecommit:Put*","codecommit:Test*","codecommit:Update*","codedeploy:*","codepipeline:*","config:*","ds:*","ec2:AcceptVpcPeeringConnection","ec2:Allocate*","ec2:AssignPrivateIpAddresses*","ec2:Associate*","ec2:AttachClassicLinkVpc","ec2:AttachInternetGateway","ec2:AttachNetworkInterface","ec2:AttachVolume","ec2:AttachVpnGateway","ec2:AuthorizeSecurityGroupEgress","ec2:AuthorizeSecurityGroupIngress","ec2:Bundle*","ec2:Cancel*","ec2:Copy*","ec2:CreateCustomerGateway","ec2:CreateDhcpOptions","ec2:CreateFlowLogs","ec2:CreateImage","ec2:CreateInstanceExportTask","ec2:CreateInternetGateway","ec2:CreateKeyPair","ec2:CreateLaunchTemplate","ec2:CreateLaunchTemplateVersion","ec2:CreateNatGateway","ec2:CreateNetworkInterface","ec2:CreatePlacementGroup","ec2:CreateReservedInstancesListing","ec2:CreateRoute","ec2:CreateRouteTable","ec2:CreateSecurityGroup","ec2:CreateSnapshot","ec2:CreateSpotDatafeedSubscription","ec2:CreateSubnet","ec2:CreateTags","ec2:CreateVolume","ec2:CreateVpc","ec2:CreateVpcEndpoint","ec2:CreateVpcPeeringConnection","ec2:CreateVpnConnection","ec2:CreateVpnConnectionRoute","ec2:CreateVpnGateway","ec2:DeleteCustomerGateway","ec2:DeleteDhcpOptions","ec2:DeleteFlowLogs","ec2:DeleteInternetGateway","ec2:DeleteKeyPair","ec2:DeleteLaunchTemplate","ec2:DeleteLaunchTemplateVersions","ec2:DeleteNatGateway","ec2:DeleteNetworkAcl*","ec2:DeleteNetworkInterface","ec2:DeletePlacementGroup","ec2:DeleteRoute","ec2:DeleteRouteTable","ec2:DeleteSecurityGroup","ec2:DeleteSnapshot","ec2:DeleteSpotDatafeedSubscription","ec2:DeleteSubnet","ec2:DeleteTags","ec2:DeleteVolume","ec2:DeleteVpc","ec2:DeleteVpcEndpoints","ec2:DeleteVpcPeeringConnection","ec2:DeleteVpnConnection","ec2:DeleteVpnConnectionRoute","ec2:DeleteVpnGateway","ec2:DeregisterImage","ec2:Describe*","ec2:DetachClassicLinkVpc","ec2:DetachInternetGateway","ec2:DetachNetworkInterface","ec2:DetachVolume","ec2:DetachVpnGateway","ec2:DisableVgwRoutePropagation","ec2:DisableVpcClassicLink","ec2:DisableVpcClassicLinkDnsSupport","ec2:DisassociateAddress","ec2:DisassociateRouteTable","ec2:EnableVgwRoutePropagation","ec2:EnableVolumeIO","ec2:EnableVpcClassicLink","ec2:EnableVpcClassicLinkDnsSupport","ec2:GetConsoleOutput","ec2:GetConsoleScreenshot","ec2:GetHostReservationPurchasePreview","ec2:GetLaunchTemplateData","ec2:GetPasswordData","ec2:GetSecurityGroupsForVpc","ec2:Import*","ec2:Modify*","ec2:MonitorInstances","ec2:MoveAddressToVpc","ec2:Purchase*","ec2:RebootInstances","ec2:RegisterImage","ec2:RejectVpcPeeringConnection","ec2:Release*","ec2:Replace*","ec2:ReportInstanceStatus","ec2:Request*","ec2:Reset*","ec2:RestoreAddressToClassic","ec2:RevokeSecurityGroupEgress","ec2:RevokeSecurityGroupIngress","ec2:RunInstances","ec2:RunScheduledInstances","ec2:StartInstances","ec2:StopInstances","ec2:TerminateInstances","ec2:UnassignPrivateIpAddresses","ec2:UnmonitorInstances","ec2:UpdateSecurityGroupRuleDescriptionsEgress","ec2:UpdateSecurityGroupRuleDescriptionsIngress","elasticloadbalancing:*","events:*","iam:GetAccessKeyLastUsed","iam:GetAccount*","iam:GetContextKeys*","iam:GetCredentialReport","iam:GetGroup*","iam:GetInstanceProfile","iam:GetLoginProfile","iam:GetOpenIDConnectProvider","iam:GetPolicy*","iam:GetRole","iam:GetRole*","iam:GetSAMLProvider","iam:GetSSHPublicKey","iam:GetServerCertificate","iam:GetServiceLastAccessed*","iam:GetUser*","iam:ListAccessKeys","iam:ListAccountAliases","iam:ListAttached*","iam:ListEntitiesForPolicy","iam:ListGroupPolicies","iam:ListGroups","iam:ListGroupsForUser","iam:ListInstanceProfiles*","iam:ListMFADevices","iam:ListOpenIDConnectProviders","iam:ListPolicies","iam:ListPoliciesGrantingServiceAccess","iam:ListPolicyVersions","iam:ListRolePolicies","iam:ListRoles","iam:ListSAMLProviders","iam:ListSSHPublicKeys","iam:ListServerCertificates","iam:ListSigningCertificates","iam:ListUserPolicies","iam:PassRole","iam:Simulate*","iam:UpdateServerCertificate","iam:UpdateSigningCertificate","iam:Upload*","kinesis:ListStreams","kinesis:PutRecord","kms:CreateAlias","kms:CreateKey","kms:DeleteAlias","kms:Describe*","kms:Encrypt","kms:GenerateRandom","kms:Get*","kms:List*","kms:ReEncrypt*","lambda:Create*","lambda:Delete*","lambda:Get*","lambda:InvokeFunction","lambda:List*","lambda:PublishVersion","lambda:Update*","logs:*","rds:Describe*","rds:ListTagsForResource","rolesanywhere:GetCrl","rolesanywhere:GetProfile","rolesanywhere:GetSubject","rolesanywhere:GetTrustAnchor","rolesanywhere:ListCrls","rolesanywhere:ListProfiles","rolesanywhere:ListSubjects","rolesanywhere:ListTagsForResource","rolesanywhere:ListTrustAnchors","rolesanywhere:PutNotificationSettings","rolesanywhere:ResetNotificationSettings","route53:*","route53domains:*","s3:*","ses:*","sns:*","sqs:*","trustedadvisor:*"],"schemaVersion":1,"services":[{"prefix":"acm","rows":[["acm:DescribeAcmeAccount","Read","unclassified",[0],[0],1],["acm:DescribeAcmeDomainValidation","Read","unclassified",[0],[0],1],["acm:DescribeAcmeEndpoint","Read","unclassified",[0],[0],1],["acm:DescribeAcmeExternalAccountBinding","Read","unclassified",[0],[0],1],["acm:DescribeCertificate","Read","control",[0],[0],1],["acm:GetAccountConfiguration","Read","control",[1],[0],1],["acm:GetAcmeExternalAccountBindingCredentials","Read","unclassified",[1],[0],1],["acm:GetCertificate","Read","control",[1],[0],1],["acm:ListAcmeAccounts","List","unclassified",[2],[0],1],["acm:ListAcmeDomainValidations","List","unclassified",[2],[0],1],["acm:ListAcmeEndpoints","List","unclassified",[2],[0],1],["acm:ListAcmeExternalAccountBindings","List","unclassified",[2],[0],1],["acm:ListCertificateDomainValidations","List","control",[2],[0],1],["acm:ListCertificates","List","control",[2],[0],1],["acm:ListTagsForCertificate","Read","control",[2],[0],1],["acm:ListTagsForResource","Read","control",[2],[0],1],["acm:RequestCertificate","Write","control",[3],[0],1],["acm:ResendValidationEmail","Write","control",[4],[0],1]]},{"prefix":"autoscaling","rows":[["autoscaling:AttachInstances","Write","control",[5],[0],1],["autoscaling:AttachLoadBalancerTargetGroups","Write","control",[5],[0],1],["autoscaling:AttachLoadBalancers","Write","control",[5],[0],1],["autoscaling:AttachTrafficSources","Write","control",[5],[0],1],["autoscaling:BatchDeleteScheduledAction","Write","control",[5],[0],1],["autoscaling:BatchPutScheduledUpdateGroupAction","Write","control",[5],[0],1],["autoscaling:CancelInstanceRefresh","Write","control",[5],[0],1],["autoscaling:CompleteLifecycleAction","Write","control",[5],[0],1],["autoscaling:CreateAutoScalingGroup","Write","control",[5],[0],1],["autoscaling:CreateLaunchConfiguration","Write","control",[5],[0],1],["autoscaling:CreateOrUpdateTags","Tagging","control",[5],[0],1],["autoscaling:DeleteAutoScalingGroup","Write","control",[5],[0],1],["autoscaling:DeleteLaunchConfiguration","Write","control",[5],[0],1],["autoscaling:DeleteLifecycleHook","Write","control",[5],[0],1],["autoscaling:DeleteNotificationConfiguration","Write","control",[5],[0],1],["autoscaling:DeletePolicy","Write","control",[5],[0],1],["autoscaling:DeleteScheduledAction","Write","control",[5],[0],1],["autoscaling:DeleteTags","Tagging","control",[5],[0],1],["autoscaling:DeleteWarmPool","Write","control",[5],[0],1],["autoscaling:DescribeAccountLimits","List","control",[5],[0],1],["autoscaling:DescribeAccountSettings","List","control",[5],[0],1],["autoscaling:DescribeAdjustmentTypes","List","control",[5],[0],1],["autoscaling:DescribeAutoScalingGroups","List","control",[5],[0],1],["autoscaling:DescribeAutoScalingInstances","List","control",[5],[0],1],["autoscaling:DescribeAutoScalingNotificationTypes","List","control",[5],[0],1],["autoscaling:DescribeInstanceRefreshes","List","control",[5],[0],1],["autoscaling:DescribeLaunchConfigurations","List","control",[5],[0],1],["autoscaling:DescribeLifecycleHookTypes","List","control",[5],[0],1],["autoscaling:DescribeLifecycleHooks","List","control",[5],[0],1],["autoscaling:DescribeLoadBalancerTargetGroups","List","control",[5],[0],1],["autoscaling:DescribeLoadBalancers","List","control",[5],[0],1],["autoscaling:DescribeMetricCollectionTypes","List","control",[5],[0],1],["autoscaling:DescribeNotificationConfigurations","List","control",[5],[0],1],["autoscaling:DescribePolicies","List","control",[5],[0],1],["autoscaling:DescribeScalingActivities","List","control",[5],[0],1],["autoscaling:DescribeScalingProcessTypes","List","control",[5],[0],1],["autoscaling:DescribeScheduledActions","List","control",[5],[0],1],["autoscaling:DescribeTags","Read","control",[5],[0],1],["autoscaling:DescribeTerminationPolicyTypes","List","control",[5],[0],1],["autoscaling:DescribeTrafficSources","List","control",[5],[0],1],["autoscaling:DescribeWarmPool","List","control",[5],[0],1],["autoscaling:DetachInstances","Write","control",[5],[0],1],["autoscaling:DetachLoadBalancerTargetGroups","Write","control",[5],[0],1],["autoscaling:DetachLoadBalancers","Write","control",[5],[0],1],["autoscaling:DetachTrafficSources","Write","control",[5],[0],1],["autoscaling:DisableMetricsCollection","Write","control",[5],[0],1],["autoscaling:EnableMetricsCollection","Write","control",[5],[0],1],["autoscaling:EnterStandby","Write","control",[5],[0],1],["autoscaling:ExecutePolicy","Write","control",[5],[0],1],["autoscaling:ExitStandby","Write","control",[5],[0],1],["autoscaling:GetPredictiveScalingForecast","List","control",[5],[0],1],["autoscaling:LaunchInstances","Write","control",[5],[0],1],["autoscaling:PutAccountSetting","Write","control",[5],[0],1],["autoscaling:PutLifecycleHook","Write","control",[5],[0],1],["autoscaling:PutNotificationConfiguration","Write","control",[5],[0],1],["autoscaling:PutScalingPolicy","Write","control",[5],[0],1],["autoscaling:PutScheduledUpdateGroupAction","Write","control",[5],[0],1],["autoscaling:PutWarmPool","Write","control",[5],[0],1],["autoscaling:RecordLifecycleActionHeartbeat","Write","control",[5],[0],1],["autoscaling:ResumeProcesses","Write","control",[5],[0],1],["autoscaling:RollbackInstanceRefresh","Write","control",[5],[0],1],["autoscaling:SetDesiredCapacity","Write","control",[5],[0],1],["autoscaling:SetInstanceHealth","Write","control",[5],[0],1],["autoscaling:SetInstanceProtection","Write","control",[5],[0],1],["autoscaling:StartInstanceRefresh","Write","control",[5],[0],1],["autoscaling:SuspendProcesses","Write","control",[5],[0],1],["autoscaling:TerminateInstanceInAutoScalingGroup","Write","control",[5],[0],1],["autoscaling:UpdateAutoScalingGroup","Write","control",[5],[0],1]]},{"prefix":"cloudtrail","rows":[["cloudtrail:DescribeTrails","Read","control",[6],[0],1],["cloudtrail:GetTrailStatus","Read","control",[7],[0],1],["cloudtrail:ListPublicKeys","Read","control",[8],[0],1],["cloudtrail:ListTags","Read","control",[9],[0],1],["cloudtrail:LookupEvents","Read","control",[10],[0],1],["cloudtrail:StartLogging","Write","control",[11],[0],1],["cloudtrail:StopLogging","Write","control",[12],[0],1]]},{"prefix":"cloudwatch","rows":[["cloudwatch:AssumeAccessProfile","Permissions management","unclassified",[13],[0],1],["cloudwatch:BatchGetServiceLevelIndicatorReport","Read","unclassified",[13],[0],1],["cloudwatch:BatchGetServiceLevelObjectiveBudgetReport","Read","unclassified",[13],[0],1],["cloudwatch:CallWithBearerToken","Write","unclassified",[13],[0],1],["cloudwatch:CreateAccessGrant","Permissions management","control",[13],[0],1],["cloudwatch:CreateAccessProfile","Permissions management","control",[13],[0],1],["cloudwatch:CreateAlert","Write","unclassified",[13],[0],1],["cloudwatch:CreateDomain","Write","control",[13],[0],1],["cloudwatch:CreateDomainAccessGrantForOrganization","Permissions management","control",[13],[0],1],["cloudwatch:CreateDomainForOrganization","Write","control",[13],[0],1],["cloudwatch:CreateIngestionEndpoint","Write","unclassified",[13],[0],1],["cloudwatch:CreateIntegration","Write","control",[13],[0],1],["cloudwatch:CreateOmniDashboard","Write","control",[13],[0],1],["cloudwatch:CreateOmniThread","Write","unclassified",[13],[0],1],["cloudwatch:CreateOneTimeDeepLinkCode","Write","control",[13],[0],1],["cloudwatch:CreateResourceMetricsConfiguration","Write","control",[13],[0],1],["cloudwatch:CreateServiceLevelObjective","Write","unclassified",[13],[0],1],["cloudwatch:CreateSpace","Write","control",[13],[0],1],["cloudwatch:CreateView","Write","control",[13],[0],1],["cloudwatch:DeleteAccessGrant","Permissions management","control",[13],[0],1],["cloudwatch:DeleteAccessProfile","Permissions management","control",[13],[0],1],["cloudwatch:DeleteAlarmMuteRule","Write","control",[13],[0],1],["cloudwatch:DeleteAlarms","Write","control",[13],[0],1],["cloudwatch:DeleteAlert","Write","control",[13],[0],1],["cloudwatch:DeleteAnomalyDetector","Write","control",[13],[0],1],["cloudwatch:DeleteDashboards","Write","control",[13],[0],1],["cloudwatch:DeleteDomain","Write","control",[13],[0],1],["cloudwatch:DeleteDomainAccessGrantForOrganization","Permissions management","control",[13],[0],1],["cloudwatch:DeleteDomainForOrganization","Write","control",[13],[0],1],["cloudwatch:DeleteIngestionEndpoint","Write","unclassified",[13],[0],1],["cloudwatch:DeleteInsightRules","Write","control",[13],[0],1],["cloudwatch:DeleteIntegration","Write","control",[13],[0],1],["cloudwatch:DeleteMetricDataQueryDefinition","Write","control",[13],[0],1],["cloudwatch:DeleteMetricStream","Write","control",[13],[0],1],["cloudwatch:DeleteOmniDashboard","Write","control",[13],[0],1],["cloudwatch:DeleteOmniThread","Write","unclassified",[13],[0],1],["cloudwatch:DeletePipelineRule","Write","unclassified",[13],[0],1],["cloudwatch:DeleteResourceMetricsConfiguration","Write","control",[13],[0],1],["cloudwatch:DeleteServiceLevelObjective","Write","unclassified",[13],[0],1],["cloudwatch:DeleteSpace","Write","control",[13],[0],1],["cloudwatch:DeleteView","Write","control",[13],[0],1],["cloudwatch:DescribeAlarmHistory","Read","control",[13],[0],1],["cloudwatch:DescribeAlarms","Read","control",[13],[0],1],["cloudwatch:DescribeAlarmsForMetric","Read","control",[13],[0],1],["cloudwatch:DescribeAnomalyDetectors","Read","control",[13],[0],1],["cloudwatch:DescribeInsightRules","Read","control",[13],[0],1],["cloudwatch:DetectGroupOutliers","Read","unclassified",[13],[0],1],["cloudwatch:DisableAlarmActions","Write","control",[13],[0],1],["cloudwatch:DisableInsightRules","Write","control",[13],[0],1],["cloudwatch:EnableAlarmActions","Write","control",[13],[0],1],["cloudwatch:EnableInsightRules","Write","control",[13],[0],1],["cloudwatch:EnableTopologyDiscovery","Write","unclassified",[13],[0],1],["cloudwatch:GenerateQuery","Read","unclassified",[13],[0],1],["cloudwatch:GenerateQueryResultsSummary","Read","unclassified",[13],[0],1],["cloudwatch:GetAccessGrant","Read","control",[13],[0],1],["cloudwatch:GetAccessProfile","Read","control",[13],[0],1],["cloudwatch:GetAgentGraph","Read","unclassified",[13],[0],1],["cloudwatch:GetAlarmMuteRule","Read","control",[13],[0],1],["cloudwatch:GetAlert","Read","control",[13],[0],1],["cloudwatch:GetContextGraph","Read","control",[13],[0],1],["cloudwatch:GetDashboard","Read","control",[13],[0],1],["cloudwatch:GetDataset","Read","control",[13],[0],1],["cloudwatch:GetDomain","Read","control",[13],[0],1],["cloudwatch:GetDomainAccessGrantForOrganization","Read","control",[13],[0],1],["cloudwatch:GetDomainForOrganization","Read","control",[13],[0],1],["cloudwatch:GetIngestionEndpoint","Read","unclassified",[13],[0],1],["cloudwatch:GetInsightRuleReport","Read","control",[13],[0],1],["cloudwatch:GetIntegration","Read","control",[13],[0],1],["cloudwatch:GetIntelligenceConfiguration","Read","control",[13],[0],1],["cloudwatch:GetMetricData","Read","data",[13],[0],1],["cloudwatch:GetMetricDataQueryDefinition","Read","control",[13],[0],1],["cloudwatch:GetMetricStatistics","Read","data",[13],[0],1],["cloudwatch:GetMetricStream","Read","control",[13],[0],1],["cloudwatch:GetMetricWidgetImage","Read","data",[13],[0],1],["cloudwatch:GetOTelEnrichment","Read","control",[13],[0],1],["cloudwatch:GetOmniDashboard","Read","control",[13],[0],1],["cloudwatch:GetOmniThread","Read","unclassified",[13],[0],1],["cloudwatch:GetPreferences","Read","unclassified",[13],[0],1],["cloudwatch:GetProfileRecords","Read","unclassified",[13],[0],1],["cloudwatch:GetRecords","Read","control",[13],[0],1],["cloudwatch:GetResourceMetricsConfiguration","Read","control",[13],[0],1],["cloudwatch:GetService","Read","unclassified",[13],[0],1],["cloudwatch:GetServiceData","Read","unclassified",[13],[0],1],["cloudwatch:GetServiceLevelObjective","Read","unclassified",[13],[0],1],["cloudwatch:GetSpace","Read","control",[13],[0],1],["cloudwatch:GetSpaceCredentials","Read","unclassified",[13],[0],1],["cloudwatch:GetSpaceCredentialsForOrganization","Read","control",[13],[0],1],["cloudwatch:GetSpaceDataAccess","Read","control",[13],[0],1],["cloudwatch:GetTelemetryQueryResults","Read","control",[13],[0],1],["cloudwatch:GetTopologyDiscoveryStatus","Read","unclassified",[13],[0],1],["cloudwatch:GetTopologyMap","Read","unclassified",[13],[0],1],["cloudwatch:GetView","Read","control",[13],[0],1],["cloudwatch:InvokeIntegration","Write","unclassified",[13],[0],1],["cloudwatch:Link","Write","unclassified",[13],[0],1],["cloudwatch:ListAccessGrants","List","control",[13],[0],1],["cloudwatch:ListAccessProfiles","List","control",[13],[0],1],["cloudwatch:ListAlarmMuteRules","List","control",[13],[0],1],["cloudwatch:ListAlertContributors","List","unclassified",[13],[0],1],["cloudwatch:ListAlerts","List","control",[13],[0],1],["cloudwatch:ListDashboards","List","control",[13],[0],1],["cloudwatch:ListDomainAccessGrantsForOrganization","List","control",[13],[0],1],["cloudwatch:ListDomains","List","control",[13],[0],1],["cloudwatch:ListEntitiesForMetric","List","unclassified",[13],[0],1],["cloudwatch:ListIngestionEndpoints","List","unclassified",[13],[0],1],["cloudwatch:ListIntegrations","List","control",[13],[0],1],["cloudwatch:ListManagedInsightRules","Read","control",[13],[0],1],["cloudwatch:ListMetricDataQueryDefinitions","List","control",[13],[0],1],["cloudwatch:ListMetricStreams","List","control",[13],[0],1],["cloudwatch:ListMetrics","List","data",[13],[0],1],["cloudwatch:ListOmniDashboards","List","control",[13],[0],1],["cloudwatch:ListOmniThreads","List","unclassified",[13],[0],1],["cloudwatch:ListServiceLevelObjectives","List","unclassified",[13],[0],1],["cloudwatch:ListServices","List","unclassified",[13],[0],1],["cloudwatch:ListSpaceAccess","List","unclassified",[13],[0],1],["cloudwatch:ListSpaces","List","control",[13],[0],1],["cloudwatch:ListSpacesForOrganization","List","control",[13],[0],1],["cloudwatch:ListTagsForResource","List","control",[13],[0],1],["cloudwatch:ListTelemetryFields","List","control",[13],[0],1],["cloudwatch:ListTelemetryQuerySessions","List","control",[13],[0],1],["cloudwatch:ListViews","List","control",[13],[0],1],["cloudwatch:PutAlarmMuteRule","Write","control",[13],[0],1],["cloudwatch:PutAnomalyDetector","Write","control",[13],[0],1],["cloudwatch:PutCompositeAlarm","Write","control",[13],[0],1],["cloudwatch:PutDashboard","Write","control",[13],[0],1],["cloudwatch:PutInsightRule","Write","control",[13],[0],1],["cloudwatch:PutIntelligenceConfiguration","Write","control",[13],[0],1],["cloudwatch:PutLogAlarm","Write","control",[13],[0],1],["cloudwatch:PutManagedInsightRules","Write","control",[13],[0],1],["cloudwatch:PutMetricAlarm","Write","control",[13],[0],1],["cloudwatch:PutMetricData","Write","data",[13],[0],1],["cloudwatch:PutMetricDataQueryDefinition","Write","control",[13],[0],1],["cloudwatch:PutMetricStream","Write","control",[13],[0],1],["cloudwatch:PutPipelineRule","Write","unclassified",[13],[0],1],["cloudwatch:PutProfileRecords","Write","unclassified",[13],[0],1],["cloudwatch:PutRecords","Write","unclassified",[13],[0],1],["cloudwatch:QueryTraces","Write","unclassified",[13],[0],1],["cloudwatch:SearchPrincipals","Write","control",[13],[0],1],["cloudwatch:SetAlarmState","Write","control",[13],[0],1],["cloudwatch:StartMetricStreams","Write","control",[13],[0],1],["cloudwatch:StartOTelEnrichment","Write","control",[13],[0],1],["cloudwatch:StartOmniThreadSession","Write","unclassified",[13],[0],1],["cloudwatch:StartTelemetryQuery","Write","unclassified",[13],[0],1],["cloudwatch:StartTelemetryQuerySession","Write","control",[13],[0],1],["cloudwatch:StopMetricStreams","Write","control",[13],[0],1],["cloudwatch:StopOTelEnrichment","Write","control",[13],[0],1],["cloudwatch:StopTelemetryQuery","Write","control",[13],[0],1],["cloudwatch:StopTelemetryQuerySession","Write","control",[13],[0],1],["cloudwatch:SubmitAlarmFeedback","Write","unclassified",[13],[0],1],["cloudwatch:SubmitFeedback","Write","unclassified",[13],[0],1],["cloudwatch:TagResource","Tagging","control",[13],[0],1],["cloudwatch:UntagResource","Tagging","control",[13],[0],1],["cloudwatch:UpdateAccessProfile","Permissions management","control",[13],[0],1],["cloudwatch:UpdateAlert","Write","control",[13],[0],1],["cloudwatch:UpdateDomain","Write","control",[13],[0],1],["cloudwatch:UpdateDomainForOrganization","Write","control",[13],[0],1],["cloudwatch:UpdateIngestionEndpoint","Write","unclassified",[13],[0],1],["cloudwatch:UpdateIntegration","Write","control",[13],[0],1],["cloudwatch:UpdateOTelEnrichment","Write","control",[13],[0],1],["cloudwatch:UpdateOmniDashboard","Write","control",[13],[0],1],["cloudwatch:UpdateOmniThread","Write","unclassified",[13],[0],1],["cloudwatch:UpdatePreferences","Write","unclassified",[13],[0],1],["cloudwatch:UpdateResourceMetricsConfiguration","Write","control",[13],[0],1],["cloudwatch:UpdateServiceLevelObjective","Write","unclassified",[13],[0],1],["cloudwatch:UpdateSpace","Write","control",[13],[0],1],["cloudwatch:UpdateView","Write","control",[13],[0],1]]},{"prefix":"codecommit","rows":[["codecommit:BatchGetRepositories","Read","control",[14],[0],1],["codecommit:CreateBranch","Write","control",[15],[0],1],["codecommit:CreateRepository","Write","control",[16],[0],1],["codecommit:GetApprovalRuleTemplate","Read","control",[17],[0],1],["codecommit:GetBlob","Read","control",[17],[0],1],["codecommit:GetBlobDifferences","Read","control",[17],[0],1],["codecommit:GetBranch","Read","control",[17],[0],1],["codecommit:GetComment","Read","control",[17],[0],1],["codecommit:GetCommentReactions","Read","control",[17],[0],1],["codecommit:GetCommentsForComparedCommit","Read","control",[17],[0],1],["codecommit:GetCommentsForPullRequest","Read","control",[17],[0],1],["codecommit:GetCommit","Read","control",[17],[0],1],["codecommit:GetCommitHistory","Read","unclassified",[17],[0],1],["codecommit:GetCommitsFromMergeBase","Read","unclassified",[17],[0],1],["codecommit:GetDifferences","Read","control",[17],[0],1],["codecommit:GetFile","Read","control",[17],[0],1],["codecommit:GetFolder","Read","control",[17],[0],1],["codecommit:GetMergeCommit","Read","control",[17],[0],1],["codecommit:GetMergeConflicts","Read","control",[17],[0],1],["codecommit:GetMergeOptions","Read","control",[17],[0],1],["codecommit:GetObjectIdentifier","Read","unclassified",[17],[0],1],["codecommit:GetPullRequest","Read","control",[17],[0],1],["codecommit:GetPullRequestApprovalStates","Read","control",[17],[0],1],["codecommit:GetPullRequestOverrideState","Read","control",[17],[0],1],["codecommit:GetReferences","Read","unclassified",[17],[0],1],["codecommit:GetRepository","Read","control",[17],[0],1],["codecommit:GetRepositoryTriggers","Read","control",[17],[0],1],["codecommit:GetTree","Read","unclassified",[17],[0],1],["codecommit:GetUploadArchiveStatus","Read","unclassified",[17],[0],1],["codecommit:GitPull","Read","unclassified",[18],[0],1],["codecommit:GitPush","Write","unclassified",[19],[0],1],["codecommit:ListApprovalRuleTemplates","List","control",[20],[0],1],["codecommit:ListAssociatedApprovalRuleTemplatesForRepository","List","control",[20],[0],1],["codecommit:ListBranches","List","control",[20],[0],1],["codecommit:ListFileCommitHistory","List","control",[20],[0],1],["codecommit:ListPullRequests","List","control",[20],[0],1],["codecommit:ListRepositories","List","control",[20],[0],1],["codecommit:ListRepositoriesForApprovalRuleTemplate","List","control",[20],[0],1],["codecommit:ListTagsForResource","List","control",[20],[0],1],["codecommit:PutCommentReaction","Write","control",[21],[0],1],["codecommit:PutFile","Write","control",[21],[0],1],["codecommit:PutRepositoryTriggers","Write","control",[21],[0],1],["codecommit:TestRepositoryTriggers","Write","control",[22],[0],1],["codecommit:UpdateApprovalRuleTemplateContent","Write","control",[23],[0],1],["codecommit:UpdateApprovalRuleTemplateDescription","Write","control",[23],[0],1],["codecommit:UpdateApprovalRuleTemplateName","Write","control",[23],[0],1],["codecommit:UpdateComment","Write","control",[23],[0],1],["codecommit:UpdateDefaultBranch","Write","control",[23],[0],1],["codecommit:UpdatePullRequestApprovalRuleContent","Write","control",[23],[0],1],["codecommit:UpdatePullRequestApprovalState","Write","control",[23],[0],1],["codecommit:UpdatePullRequestDescription","Write","control",[23],[0],1],["codecommit:UpdatePullRequestStatus","Write","control",[23],[0],1],["codecommit:UpdatePullRequestTitle","Write","control",[23],[0],1],["codecommit:UpdateRepositoryDescription","Write","control",[23],[0],1],["codecommit:UpdateRepositoryEncryptionKey","Write","control",[23],[0],1],["codecommit:UpdateRepositoryName","Write","control",[23],[0],1]]},{"prefix":"codedeploy","rows":[["codedeploy:AddTagsToOnPremisesInstances","Tagging","control",[24],[0],1],["codedeploy:BatchGetApplicationRevisions","Read","control",[24],[0],1],["codedeploy:BatchGetApplications","Read","control",[24],[0],1],["codedeploy:BatchGetDeploymentGroups","Read","control",[24],[0],1],["codedeploy:BatchGetDeploymentInstances","Read","control",[24],[0],1],["codedeploy:BatchGetDeploymentTargets","Read","control",[24],[0],1],["codedeploy:BatchGetDeployments","Read","control",[24],[0],1],["codedeploy:BatchGetOnPremisesInstances","Read","control",[24],[0],1],["codedeploy:ContinueDeployment","Write","control",[24],[0],1],["codedeploy:CreateApplication","Write","control",[24],[0],1],["codedeploy:CreateCloudFormationDeployment","Write","control",[24],[0],1],["codedeploy:CreateDeployment","Write","control",[24],[0],1],["codedeploy:CreateDeploymentConfig","Write","control",[24],[0],1],["codedeploy:CreateDeploymentGroup","Write","control",[24],[0],1],["codedeploy:DeleteApplication","Write","control",[24],[0],1],["codedeploy:DeleteDeploymentConfig","Write","control",[24],[0],1],["codedeploy:DeleteDeploymentGroup","Write","control",[24],[0],1],["codedeploy:DeleteGitHubAccountToken","Write","control",[24],[0],1],["codedeploy:DeleteResourcesByExternalId","Write","control",[24],[0],1],["codedeploy:DeregisterOnPremisesInstance","Write","control",[24],[0],1],["codedeploy:GetApplication","List","control",[24],[0],1],["codedeploy:GetApplicationRevision","List","control",[24],[0],1],["codedeploy:GetDeployment","List","control",[24],[0],1],["codedeploy:GetDeploymentConfig","List","control",[24],[0],1],["codedeploy:GetDeploymentGroup","List","control",[24],[0],1],["codedeploy:GetDeploymentInstance","List","control",[24],[0],1],["codedeploy:GetDeploymentTarget","Read","control",[24],[0],1],["codedeploy:GetOnPremisesInstance","List","control",[24],[0],1],["codedeploy:ListApplicationRevisions","List","control",[24],[0],1],["codedeploy:ListApplications","List","control",[24],[0],1],["codedeploy:ListDeploymentConfigs","List","control",[24],[0],1],["codedeploy:ListDeploymentGroups","List","control",[24],[0],1],["codedeploy:ListDeploymentInstances","List","control",[24],[0],1],["codedeploy:ListDeploymentTargets","List","control",[24],[0],1],["codedeploy:ListDeployments","List","control",[24],[0],1],["codedeploy:ListGitHubAccountTokenNames","List","control",[24],[0],1],["codedeploy:ListOnPremisesInstances","List","control",[24],[0],1],["codedeploy:ListTagsForResource","List","control",[24],[0],1],["codedeploy:PutLifecycleEventHookExecutionStatus","Write","control",[24],[0],1],["codedeploy:RegisterApplicationRevision","Write","control",[24],[0],1],["codedeploy:RegisterOnPremisesInstance","Write","control",[24],[0],1],["codedeploy:RemoveTagsFromOnPremisesInstances","Tagging","control",[24],[0],1],["codedeploy:SkipWaitTimeForInstanceTermination","Write","control",[24],[0],1],["codedeploy:StopDeployment","Write","control",[24],[0],1],["codedeploy:TagResource","Tagging","control",[24],[0],1],["codedeploy:UntagResource","Tagging","control",[24],[0],1],["codedeploy:UpdateApplication","Write","control",[24],[0],1],["codedeploy:UpdateDeploymentGroup","Write","control",[24],[0],1]]},{"prefix":"codepipeline","rows":[["codepipeline:AcknowledgeJob","Write","control",[25],[0],1],["codepipeline:AcknowledgeThirdPartyJob","Write","control",[25],[0],1],["codepipeline:CreateCustomActionType","Write","control",[25],[0],1],["codepipeline:CreatePipeline","Write","control",[25],[0],1],["codepipeline:DeleteCustomActionType","Write","control",[25],[0],1],["codepipeline:DeletePipeline","Write","control",[25],[0],1],["codepipeline:DeleteWebhook","Write","control",[25],[0],1],["codepipeline:DeregisterWebhookWithThirdParty","Write","control",[25],[0],1],["codepipeline:DisableStageTransition","Write","control",[25],[0],1],["codepipeline:EnableStageTransition","Write","control",[25],[0],1],["codepipeline:GetActionType","Read","control",[25],[0],1],["codepipeline:GetJobDetails","Read","control",[25],[0],1],["codepipeline:GetPipeline","Read","control",[25],[0],1],["codepipeline:GetPipelineExecution","Read","control",[25],[0],1],["codepipeline:GetPipelineState","Read","control",[25],[0],1],["codepipeline:GetThirdPartyJobDetails","Read","control",[25],[0],1],["codepipeline:ListActionExecutions","Read","control",[25],[0],1],["codepipeline:ListActionTypes","Read","control",[25],[0],1],["codepipeline:ListDeployActionExecutionTargets","Read","control",[25],[0],1],["codepipeline:ListPipelineExecutions","List","control",[25],[0],1],["codepipeline:ListPipelines","List","control",[25],[0],1],["codepipeline:ListRuleExecutions","Read","control",[25],[0],1],["codepipeline:ListRuleTypes","Read","control",[25],[0],1],["codepipeline:ListTagsForResource","Read","control",[25],[0],1],["codepipeline:ListWebhooks","List","control",[25],[0],1],["codepipeline:OverrideStageCondition","Write","control",[25],[0],1],["codepipeline:PollForJobs","Write","control",[25],[0],1],["codepipeline:PollForThirdPartyJobs","Write","control",[25],[0],1],["codepipeline:PutActionRevision","Write","control",[25],[0],1],["codepipeline:PutApprovalResult","Write","control",[25],[0],1],["codepipeline:PutJobFailureResult","Write","control",[25],[0],1],["codepipeline:PutJobSuccessResult","Write","control",[25],[0],1],["codepipeline:PutThirdPartyJobFailureResult","Write","control",[25],[0],1],["codepipeline:PutThirdPartyJobSuccessResult","Write","control",[25],[0],1],["codepipeline:PutWebhook","Write","control",[25],[0],1],["codepipeline:RegisterWebhookWithThirdParty","Write","control",[25],[0],1],["codepipeline:RetryStageExecution","Write","control",[25],[0],1],["codepipeline:RollbackStage","Write","control",[25],[0],1],["codepipeline:StartPipelineExecution","Write","control",[25],[0],1],["codepipeline:StopPipelineExecution","Write","control",[25],[0],1],["codepipeline:TagResource","Tagging","control",[25],[0],1],["codepipeline:UntagResource","Tagging","control",[25],[0],1],["codepipeline:UpdateActionType","Write","control",[25],[0],1],["codepipeline:UpdatePipeline","Write","control",[25],[0],1]]},{"prefix":"config","rows":[["config:AssociateResourceTypes","Write","control",[26],[0],1],["config:BatchGetAggregateResourceConfig","Read","control",[26],[0],1],["config:BatchGetResourceConfig","Read","control",[26],[0],1],["config:DeleteAggregationAuthorization","Write","control",[26],[0],1],["config:DeleteConfigRule","Write","control",[26],[0],1],["config:DeleteConfigurationAggregator","Write","control",[26],[0],1],["config:DeleteConfigurationRecorder","Write","control",[26],[0],1],["config:DeleteConformancePack","Write","control",[26],[0],1],["config:DeleteConnector","Write","control",[26],[0],1],["config:DeleteDeliveryChannel","Write","control",[26],[0],1],["config:DeleteEvaluationResults","Write","control",[26],[0],1],["config:DeleteOrganizationConfigRule","Write","control",[26],[0],1],["config:DeleteOrganizationConformancePack","Write","control",[26],[0],1],["config:DeletePendingAggregationRequest","Write","control",[26],[0],1],["config:DeleteRemediationConfiguration","Write","control",[26],[0],1],["config:DeleteRemediationExceptions","Write","control",[26],[0],1],["config:DeleteResourceConfig","Write","control",[26],[0],1],["config:DeleteRetentionConfiguration","Write","control",[26],[0],1],["config:DeleteServiceLinkedConfigurationRecorder","Write","control",[26],[0],1],["config:DeleteStoredQuery","Write","control",[26],[0],1],["config:DeliverConfigSnapshot","Read","control",[26],[0],1],["config:DescribeAggregateComplianceByConfigRules","Read","control",[26],[0],1],["config:DescribeAggregateComplianceByConformancePacks","Read","control",[26],[0],1],["config:DescribeAggregationAuthorizations","List","control",[26],[0],1],["config:DescribeComplianceByConfigRule","Read","control",[26],[0],1],["config:DescribeComplianceByResource","Read","control",[26],[0],1],["config:DescribeConfigRuleEvaluationStatus","Read","control",[26],[0],1],["config:DescribeConfigRules","List","control",[26],[0],1],["config:DescribeConfigurationAggregatorSourcesStatus","Read","control",[26],[0],1],["config:DescribeConfigurationAggregators","List","control",[26],[0],1],["config:DescribeConfigurationRecorderStatus","Read","control",[26],[0],1],["config:DescribeConfigurationRecorders","Read","control",[26],[0],1],["config:DescribeConformancePackCompliance","Read","control",[26],[0],1],["config:DescribeConformancePackStatus","Read","control",[26],[0],1],["config:DescribeConformancePacks","List","control",[26],[0],1],["config:DescribeDeliveryChannelStatus","Read","control",[26],[0],1],["config:DescribeDeliveryChannels","List","control",[26],[0],1],["config:DescribeOrganizationConfigRuleStatuses","Read","control",[26],[0],1],["config:DescribeOrganizationConfigRules","List","control",[26],[0],1],["config:DescribeOrganizationConformancePackStatuses","Read","control",[26],[0],1],["config:DescribeOrganizationConformancePacks","List","control",[26],[0],1],["config:DescribePendingAggregationRequests","List","control",[26],[0],1],["config:DescribeRemediationConfigurations","List","control",[26],[0],1],["config:DescribeRemediationExceptions","List","control",[26],[0],1],["config:DescribeRemediationExecutionStatus","Read","control",[26],[0],1],["config:DescribeRetentionConfigurations","List","control",[26],[0],1],["config:DisassociateResourceTypes","Write","control",[26],[0],1],["config:GetAggregateComplianceDetailsByConfigRule","Read","control",[26],[0],1],["config:GetAggregateConfigRuleComplianceSummary","Read","control",[26],[0],1],["config:GetAggregateConformancePackComplianceSummary","Read","control",[26],[0],1],["config:GetAggregateDiscoveredResourceCounts","Read","control",[26],[0],1],["config:GetAggregateResourceConfig","Read","control",[26],[0],1],["config:GetComplianceDetailsByConfigRule","Read","control",[26],[0],1],["config:GetComplianceDetailsByResource","Read","control",[26],[0],1],["config:GetComplianceSummaryByConfigRule","Read","control",[26],[0],1],["config:GetComplianceSummaryByResourceType","Read","control",[26],[0],1],["config:GetConformancePackComplianceDetails","Read","control",[26],[0],1],["config:GetConformancePackComplianceSummary","Read","control",[26],[0],1],["config:GetConnector","Read","control",[26],[0],1],["config:GetCustomRulePolicy","Read","control",[26],[0],1],["config:GetDiscoveredResourceCounts","Read","control",[26],[0],1],["config:GetOrganizationConfigRuleDetailedStatus","Read","control",[26],[0],1],["config:GetOrganizationConformancePackDetailedStatus","Read","control",[26],[0],1],["config:GetOrganizationCustomRulePolicy","Read","control",[26],[0],1],["config:GetResourceConfigHistory","Read","control",[26],[0],1],["config:GetResourceEvaluationSummary","Read","control",[26],[0],1],["config:GetStoredQuery","Read","control",[26],[0],1],["config:ListAggregateDiscoveredResources","List","control",[26],[0],1],["config:ListConfigurationRecorders","List","control",[26],[0],1],["config:ListConformancePackComplianceScores","List","control",[26],[0],1],["config:ListConnectors","List","control",[26],[0],1],["config:ListDiscoveredResources","List","control",[26],[0],1],["config:ListResourceEvaluations","List","control",[26],[0],1],["config:ListStoredQueries","List","control",[26],[0],1],["config:ListTagsForResource","Read","control",[26],[0],1],["config:PutAggregationAuthorization","Write","control",[26],[0],1],["config:PutConfigRule","Write","control",[26],[0],1],["config:PutConfigurationAggregator","Write","control",[26],[0],1],["config:PutConfigurationRecorder","Write","control",[26],[0],1],["config:PutConformancePack","Write","control",[26],[0],1],["config:PutConnector","Write","control",[26],[0],1],["config:PutDeliveryChannel","Write","control",[26],[0],1],["config:PutEvaluations","Write","control",[26],[0],1],["config:PutExternalEvaluation","Write","control",[26],[0],1],["config:PutOrganizationConfigRule","Write","control",[26],[0],1],["config:PutOrganizationConformancePack","Write","control",[26],[0],1],["config:PutRemediationConfigurations","Write","control",[26],[0],1],["config:PutRemediationExceptions","Write","control",[26],[0],1],["config:PutResourceConfig","Write","control",[26],[0],1],["config:PutRetentionConfiguration","Write","control",[26],[0],1],["config:PutServiceLinkedConfigurationRecorder","Write","control",[26],[0],1],["config:PutStoredQuery","Write","control",[26],[0],1],["config:PutThirdPartyServiceLinkedConfigurationRecorder","Write","control",[26],[0],1],["config:SelectAggregateResourceConfig","Read","control",[26],[0],1],["config:SelectResourceConfig","Read","control",[26],[0],1],["config:StartConfigRulesEvaluation","Write","control",[26],[0],1],["config:StartConfigurationRecorder","Write","control",[26],[0],1],["config:StartRemediationExecution","Write","control",[26],[0],1],["config:StartResourceEvaluation","Write","control",[26],[0],1],["config:StopConfigurationRecorder","Write","control",[26],[0],1],["config:TagResource","Tagging","control",[26],[0],1],["config:UntagResource","Tagging","control",[26],[0],1]]},{"prefix":"ds","rows":[["ds:AcceptSharedDirectory","Write","control",[27],[0],1],["ds:AccessDSData","Permissions management","unclassified",[27],[0],1],["ds:AddIpRoutes","Write","control",[27],[0],1],["ds:AddRegion","Write","control",[27],[0],1],["ds:AddTagsToResource","Tagging","control",[27],[0],1],["ds:AuthorizeApplication","Write","unclassified",[27],[0],1],["ds:CancelSchemaExtension","Write","control",[27],[0],1],["ds:CheckAlias","Read","unclassified",[27],[0],1],["ds:ConnectDirectory","Write","control",[27],[0],1],["ds:CreateAlias","Write","control",[27],[0],1],["ds:CreateComputer","Write","control",[27],[0],1],["ds:CreateConditionalForwarder","Write","control",[27],[0],1],["ds:CreateDirectory","Write","control",[27],[0],1],["ds:CreateHybridAD","Write","control",[27],[0],1],["ds:CreateIdentityPoolDirectory","Write","unclassified",[27],[0],1],["ds:CreateLogSubscription","Write","control",[27],[0],1],["ds:CreateMicrosoftAD","Write","control",[27],[0],1],["ds:CreateSnapshot","Write","control",[27],[0],1],["ds:CreateTrust","Write","control",[27],[0],1],["ds:DeleteADAssessment","Write","control",[27],[0],1],["ds:DeleteConditionalForwarder","Write","control",[27],[0],1],["ds:DeleteDirectory","Write","control",[27],[0],1],["ds:DeleteLogSubscription","Write","control",[27],[0],1],["ds:DeleteSnapshot","Write","control",[27],[0],1],["ds:DeleteTrust","Write","control",[27],[0],1],["ds:DeregisterCertificate","Write","control",[27],[0],1],["ds:DeregisterEventTopic","Write","control",[27],[0],1],["ds:DescribeADAssessment","Read","control",[27],[0],1],["ds:DescribeCAEnrollmentPolicy","Read","control",[27],[0],1],["ds:DescribeCertificate","Read","control",[27],[0],1],["ds:DescribeClientAuthenticationSettings","Read","control",[27],[0],1],["ds:DescribeConditionalForwarders","Read","control",[27],[0],1],["ds:DescribeDirectories","List","control",[27],[0],1],["ds:DescribeDirectoryDataAccess","Read","control",[27],[0],1],["ds:DescribeDomainControllers","Read","control",[27],[0],1],["ds:DescribeEventTopics","Read","control",[27],[0],1],["ds:DescribeHybridADUpdate","Read","control",[27],[0],1],["ds:DescribeLDAPSSettings","Read","control",[27],[0],1],["ds:DescribeRegions","Read","control",[27],[0],1],["ds:DescribeSettings","Read","control",[27],[0],1],["ds:DescribeSharedDirectories","Read","control",[27],[0],1],["ds:DescribeSnapshots","Read","control",[27],[0],1],["ds:DescribeTrusts","Read","control",[27],[0],1],["ds:DescribeUpdateDirectory","Read","control",[27],[0],1],["ds:DisableCAEnrollmentPolicy","Write","control",[27],[0],1],["ds:DisableClientAuthentication","Write","control",[27],[0],1],["ds:DisableDirectoryDataAccess","Write","control",[27],[0],1],["ds:DisableLDAPS","Write","control",[27],[0],1],["ds:DisableRadius","Write","control",[27],[0],1],["ds:DisableRoleAccess","Write","unclassified",[27],[0],1],["ds:DisableSso","Write","control",[27],[0],1],["ds:EnableCAEnrollmentPolicy","Write","control",[27],[0],1],["ds:EnableClientAuthentication","Write","control",[27],[0],1],["ds:EnableDirectoryDataAccess","Write","control",[27],[0],1],["ds:EnableLDAPS","Write","control",[27],[0],1],["ds:EnableRadius","Write","control",[27],[0],1],["ds:EnableRoleAccess","Write","unclassified",[27],[0],1],["ds:EnableSso","Write","control",[27],[0],1],["ds:GetAuthorizedApplicationDetails","Read","unclassified",[27],[0],1],["ds:GetDirectoryLimits","Read","control",[27],[0],1],["ds:GetSnapshotLimits","Read","control",[27],[0],1],["ds:ListADAssessments","List","control",[27],[0],1],["ds:ListAuthorizedApplications","Read","unclassified",[27],[0],1],["ds:ListCertificates","List","control",[27],[0],1],["ds:ListIpRoutes","Read","control",[27],[0],1],["ds:ListLogSubscriptions","Read","control",[27],[0],1],["ds:ListSchemaExtensions","List","control",[27],[0],1],["ds:ListTagsForResource","Read","control",[27],[0],1],["ds:RegisterCertificate","Write","control",[27],[0],1],["ds:RegisterEventTopic","Write","control",[27],[0],1],["ds:RejectSharedDirectory","Write","control",[27],[0],1],["ds:RemoveIpRoutes","Write","control",[27],[0],1],["ds:RemoveRegion","Write","control",[27],[0],1],["ds:RemoveTagsFromResource","Tagging","control",[27],[0],1],["ds:ResetUserPassword","Write","control",[27],[0],1],["ds:RestoreFromSnapshot","Write","control",[27],[0],1],["ds:ShareDirectory","Write","control",[27],[0],1],["ds:StartADAssessment","Write","control",[27],[0],1],["ds:StartSchemaExtension","Write","control",[27],[0],1],["ds:UnauthorizeApplication","Write","unclassified",[27],[0],1],["ds:UnshareDirectory","Write","control",[27],[0],1],["ds:UpdateAuthorizedApplication","Write","unclassified",[27],[0],1],["ds:UpdateConditionalForwarder","Write","control",[27],[0],1],["ds:UpdateDirectory","Write","unclassified",[27],[0],1],["ds:UpdateDirectorySetup","Write","control",[27],[0],1],["ds:UpdateHybridAD","Write","control",[27],[0],1],["ds:UpdateNumberOfDomainControllers","Write","control",[27],[0],1],["ds:UpdateRadius","Write","control",[27],[0],1],["ds:UpdateSettings","Write","control",[27],[0],1],["ds:UpdateTrust","Write","control",[27],[0],1],["ds:VerifyTrust","Read","control",[27],[0],1]]},{"prefix":"ec2","rows":[["ec2:AcceptVpcPeeringConnection","Write","control",[28],[1],1],["ec2:AllocateAddress","Write","control",[29],[0],1],["ec2:AllocateHosts","Write","control",[29],[0],1],["ec2:AllocateIpamPoolCidr","Write","control",[29],[0],1],["ec2:AssignPrivateIpAddresses","Write","control",[30],[0],1],["ec2:AssociateAddress","Write","control",[31],[0],1],["ec2:AssociateApplicationStatusCheck","Write","control",[31],[0],1],["ec2:AssociateCapacityReservationBillingOwner","Write","control",[31],[0],1],["ec2:AssociateClientVpnTargetNetwork","Write","control",[31],[0],1],["ec2:AssociateDhcpOptions","Write","control",[31],[0],1],["ec2:AssociateEnclaveCertificateIamRole","Write","control",[31],[0],1],["ec2:AssociateIamInstanceProfile","Write","control",[31],[0],1],["ec2:AssociateInstanceEventWindow","Write","control",[31],[0],1],["ec2:AssociateIpamByoasn","Write","control",[31],[0],1],["ec2:AssociateIpamResourceDiscovery","Write","control",[31],[0],1],["ec2:AssociateNatGatewayAddress","Write","control",[31],[0],1],["ec2:AssociateRouteServer","Write","control",[31],[0],1],["ec2:AssociateRouteTable","Write","control",[31],[0],1],["ec2:AssociateSecurityGroupVpc","Write","control",[31],[0],1],["ec2:AssociateSubnetCidrBlock","Write","control",[31],[0],1],["ec2:AssociateTransitGatewayMulticastDomain","Write","control",[31],[0],1],["ec2:AssociateTransitGatewayPolicyTable","Write","control",[31],[0],1],["ec2:AssociateTransitGatewayRouteTable","Write","control",[31],[0],1],["ec2:AssociateTrunkInterface","Write","control",[31],[0],1],["ec2:AssociateVerifiedAccessInstanceWebAcl","Write","unclassified",[31],[0],1],["ec2:AssociateVpcCidrBlock","Write","control",[31],[0],1],["ec2:AttachClassicLinkVpc","Write","control",[32],[1],1],["ec2:AttachInternetGateway","Write","control",[33],[0],1],["ec2:AttachNetworkInterface","Write","control",[34],[0],1],["ec2:AttachVolume","Write","control",[35],[1],1],["ec2:AttachVpnGateway","Write","control",[36],[0],1],["ec2:AuthorizeSecurityGroupEgress","Write","control",[37],[1],1],["ec2:AuthorizeSecurityGroupIngress","Write","control",[38],[1],1],["ec2:BundleInstance","Write","control",[39],[0],1],["ec2:CancelBundleTask","Write","control",[40],[0],1],["ec2:CancelCapacityReservation","Write","control",[40],[0],1],["ec2:CancelCapacityReservationFleets","Write","control",[40],[0],1],["ec2:CancelConversionTask","Write","control",[40],[0],1],["ec2:CancelDeclarativePoliciesReport","Write","control",[40],[0],1],["ec2:CancelExportTask","Write","control",[40],[0],1],["ec2:CancelImageLaunchPermission","Permissions management","control",[40],[0],1],["ec2:CancelImportTask","Write","control",[40],[0],1],["ec2:CancelReservedInstancesListing","Write","control",[40],[0],1],["ec2:CancelSpotFleetRequests","Write","control",[40],[0],1],["ec2:CancelSpotInstanceRequests","Write","control",[40],[0],1],["ec2:CopyFpgaImage","Write","control",[41],[0],1],["ec2:CopyImage","Write","control",[41],[0],1],["ec2:CopySnapshot","Write","control",[41],[0],1],["ec2:CopyVolumes","Write","control",[41],[0],1],["ec2:CreateCustomerGateway","Write","control",[42],[0],1],["ec2:CreateDhcpOptions","Write","control",[43],[0],1],["ec2:CreateFlowLogs","Write","control",[44],[0],1],["ec2:CreateImage","Write","control",[45],[0],1],["ec2:CreateInstanceExportTask","Write","control",[46],[0],1],["ec2:CreateInternetGateway","Write","control",[47],[0],1],["ec2:CreateKeyPair","Write","control",[48],[0],1],["ec2:CreateLaunchTemplate","Write","control",[49],[0],1],["ec2:CreateLaunchTemplateVersion","Write","control",[50],[0],1],["ec2:CreateNatGateway","Write","control",[51],[0],1],["ec2:CreateNetworkInterface","Write","control",[52],[0],1],["ec2:CreatePlacementGroup","Write","control",[53],[0],1],["ec2:CreateReservedInstancesListing","Write","control",[54],[0],1],["ec2:CreateRoute","Write","control",[55],[0],1],["ec2:CreateRouteTable","Write","control",[56],[0],1],["ec2:CreateSecurityGroup","Write","control",[57],[0],1],["ec2:CreateSnapshot","Write","control",[58],[0],1],["ec2:CreateSpotDatafeedSubscription","Write","control",[59],[0],1],["ec2:CreateSubnet","Write","control",[60],[0],1],["ec2:CreateTags","Tagging","control",[61],[0],1],["ec2:CreateVolume","Write","control",[62],[0],1],["ec2:CreateVpc","Write","control",[63],[0],1],["ec2:CreateVpcEndpoint","Write","control",[64],[0],1],["ec2:CreateVpcPeeringConnection","Write","control",[65],[1],1],["ec2:CreateVpnConnection","Write","control",[66],[0],1],["ec2:CreateVpnConnectionRoute","Write","control",[67],[0],1],["ec2:CreateVpnGateway","Write","control",[68],[0],1],["ec2:DeleteCustomerGateway","Write","control",[69],[1],1],["ec2:DeleteDhcpOptions","Write","control",[70],[1],1],["ec2:DeleteFlowLogs","Write","control",[71],[0],1],["ec2:DeleteInternetGateway","Write","control",[72],[1],1],["ec2:DeleteKeyPair","Write","control",[73],[0],1],["ec2:DeleteLaunchTemplate","Write","control",[74],[0],1],["ec2:DeleteLaunchTemplateVersions","Write","control",[75],[0],1],["ec2:DeleteNatGateway","Write","control",[76],[0],1],["ec2:DeleteNetworkAcl","Write","control",[77],[1],1],["ec2:DeleteNetworkAclEntry","Write","control",[77],[1],1],["ec2:DeleteNetworkInterface","Write","control",[78],[0],1],["ec2:DeletePlacementGroup","Write","control",[79],[0],1],["ec2:DeleteRoute","Write","control",[80],[1],1],["ec2:DeleteRouteTable","Write","control",[81],[1],1],["ec2:DeleteSecurityGroup","Write","control",[82],[1],1],["ec2:DeleteSnapshot","Write","control",[83],[0],1],["ec2:DeleteSpotDatafeedSubscription","Write","control",[84],[0],1],["ec2:DeleteSubnet","Write","control",[85],[0],1],["ec2:DeleteTags","Tagging","control",[86],[0],1],["ec2:DeleteVolume","Write","control",[87],[1],1],["ec2:DeleteVpc","Write","control",[88],[0],1],["ec2:DeleteVpcEndpoints","Write","control",[89],[0],1],["ec2:DeleteVpcPeeringConnection","Write","control",[90],[1],1],["ec2:DeleteVpnConnection","Write","control",[91],[0],1],["ec2:DeleteVpnConnectionRoute","Write","control",[92],[0],1],["ec2:DeleteVpnGateway","Write","control",[93],[0],1],["ec2:DeregisterImage","Write","control",[94],[0],1],["ec2:DescribeAccountAttributes","List","control",[95],[0],1],["ec2:DescribeAccountVpcEncryptionControl","List","control",[95],[0],1],["ec2:DescribeAddressTransfers","List","control",[95],[0],1],["ec2:DescribeAddresses","List","control",[95],[0],1],["ec2:DescribeAddressesAttribute","List","control",[95],[0],1],["ec2:DescribeAggregateIdFormat","List","control",[95],[0],1],["ec2:DescribeApplicationStatus","List","control",[95],[0],1],["ec2:DescribeApplicationStatusCheckAssociations","List","control",[95],[0],1],["ec2:DescribeApplicationStatusChecks","List","control",[95],[0],1],["ec2:DescribeAvailabilityZones","List","control",[95],[0],1],["ec2:DescribeAwsNetworkPerformanceMetricSubscriptions","List","control",[95],[0],1],["ec2:DescribeBundleTasks","List","control",[95],[0],1],["ec2:DescribeByoipCidrs","List","control",[95],[0],1],["ec2:DescribeCapacityBlockExtensionHistory","List","control",[95],[0],1],["ec2:DescribeCapacityBlockExtensionOfferings","List","control",[95],[0],1],["ec2:DescribeCapacityBlockOfferings","List","control",[95],[0],1],["ec2:DescribeCapacityBlockStatus","List","control",[95],[0],1],["ec2:DescribeCapacityBlocks","List","control",[95],[0],1],["ec2:DescribeCapacityManagerDataExports","List","control",[95],[0],1],["ec2:DescribeCapacityReservationBillingRequests","List","control",[95],[0],1],["ec2:DescribeCapacityReservationCancellationQuotes","List","control",[95],[0],1],["ec2:DescribeCapacityReservationDateChangeQuotes","List","control",[95],[0],1],["ec2:DescribeCapacityReservationFleets","List","control",[95],[0],1],["ec2:DescribeCapacityReservationTopology","List","control",[95],[0],1],["ec2:DescribeCapacityReservations","List","control",[95],[0],1],["ec2:DescribeCarrierGateways","List","control",[95],[0],1],["ec2:DescribeClassicLinkInstances","List","control",[95],[0],1],["ec2:DescribeClientVpnAuthorizationRules","List","control",[95],[0],1],["ec2:DescribeClientVpnConnections","List","control",[95],[0],1],["ec2:DescribeClientVpnEndpoints","List","control",[95],[0],1],["ec2:DescribeClientVpnRoutes","List","control",[95],[0],1],["ec2:DescribeClientVpnTargetNetworks","List","control",[95],[0],1],["ec2:DescribeCoipPools","List","control",[95],[0],1],["ec2:DescribeConversionTasks","List","control",[95],[0],1],["ec2:DescribeCustomerGateways","List","control",[95],[0],1],["ec2:DescribeDeclarativePoliciesReports","List","control",[95],[0],1],["ec2:DescribeDhcpOptions","List","control",[95],[0],1],["ec2:DescribeEgressOnlyInternetGateways","List","control",[95],[0],1],["ec2:DescribeElasticGpus","List","control",[95],[0],1],["ec2:DescribeExportImageTasks","List","control",[95],[0],1],["ec2:DescribeExportTasks","List","control",[95],[0],1],["ec2:DescribeFastLaunchImages","List","control",[95],[0],1],["ec2:DescribeFastSnapshotRestores","List","control",[95],[0],1],["ec2:DescribeFleetHistory","List","control",[95],[0],1],["ec2:DescribeFleetInstances","List","control",[95],[0],1],["ec2:DescribeFleets","List","control",[95],[0],1],["ec2:DescribeFlowLogs","List","control",[95],[0],1],["ec2:DescribeFpgaImageAttribute","List","control",[95],[0],1],["ec2:DescribeFpgaImages","List","control",[95],[0],1],["ec2:DescribeHostReservationOfferings","List","control",[95],[0],1],["ec2:DescribeHostReservations","List","control",[95],[0],1],["ec2:DescribeHosts","List","control",[95],[0],1],["ec2:DescribeIamInstanceProfileAssociations","List","control",[95],[0],1],["ec2:DescribeIdFormat","List","control",[95],[0],1],["ec2:DescribeIdentityIdFormat","List","control",[95],[0],1],["ec2:DescribeImageAttribute","List","control",[95],[0],1],["ec2:DescribeImageReferences","List","control",[95],[0],1],["ec2:DescribeImageUsageReportEntries","List","control",[95],[0],1],["ec2:DescribeImageUsageReports","List","control",[95],[0],1],["ec2:DescribeImages","List","control",[95],[0],1],["ec2:DescribeImportImageTasks","List","control",[95],[0],1],["ec2:DescribeImportSnapshotTasks","List","control",[95],[0],1],["ec2:DescribeInstanceAttribute","List","control",[95],[0],1],["ec2:DescribeInstanceConnectEndpoints","List","control",[95],[0],1],["ec2:DescribeInstanceCreditSpecifications","List","control",[95],[0],1],["ec2:DescribeInstanceEventNotificationAttributes","List","control",[95],[0],1],["ec2:DescribeInstanceEventWindows","List","control",[95],[0],1],["ec2:DescribeInstanceImageMetadata","List","control",[95],[0],1],["ec2:DescribeInstanceSqlHaHistoryStates","List","control",[95],[0],1],["ec2:DescribeInstanceSqlHaStates","List","control",[95],[0],1],["ec2:DescribeInstanceStatus","List","control",[95],[0],1],["ec2:DescribeInstanceTopology","List","control",[95],[0],1],["ec2:DescribeInstanceTypeOfferings","List","control",[95],[0],1],["ec2:DescribeInstanceTypes","List","control",[95],[0],1],["ec2:DescribeInstances","List","control",[95],[0],1],["ec2:DescribeInternetGateways","List","control",[95],[0],1],["ec2:DescribeIpamByoasn","List","control",[95],[0],1],["ec2:DescribeIpamExternalResourceVerificationTokens","List","control",[95],[0],1],["ec2:DescribeIpamInternetRegistryAssociations","List","control",[95],[0],1],["ec2:DescribeIpamPolicies","List","control",[95],[0],1],["ec2:DescribeIpamPoolAllocations","List","control",[95],[0],1],["ec2:DescribeIpamPools","List","control",[95],[0],1],["ec2:DescribeIpamPrefixListResolverTargets","List","control",[95],[0],1],["ec2:DescribeIpamPrefixListResolvers","List","control",[95],[0],1],["ec2:DescribeIpamResourceDiscoveries","List","control",[95],[0],1],["ec2:DescribeIpamResourceDiscoveryAssociations","List","control",[95],[0],1],["ec2:DescribeIpamScopes","List","control",[95],[0],1],["ec2:DescribeIpams","List","control",[95],[0],1],["ec2:DescribeIpv6Pools","List","control",[95],[0],1],["ec2:DescribeKeyPairs","List","control",[95],[0],1],["ec2:DescribeLaunchTemplateVersions","List","control",[95],[0],1],["ec2:DescribeLaunchTemplates","List","control",[95],[0],1],["ec2:DescribeLocalGatewayRouteTablePermissions","List","unclassified",[95],[0],1],["ec2:DescribeLocalGatewayRouteTableVirtualInterfaceGroupAssociations","List","control",[95],[0],1],["ec2:DescribeLocalGatewayRouteTableVpcAssociations","List","control",[95],[0],1],["ec2:DescribeLocalGatewayRouteTables","List","control",[95],[0],1],["ec2:DescribeLocalGatewayVirtualInterfaceGroups","List","control",[95],[0],1],["ec2:DescribeLocalGatewayVirtualInterfaces","List","control",[95],[0],1],["ec2:DescribeLocalGateways","List","control",[95],[0],1],["ec2:DescribeLockedSnapshots","List","control",[95],[0],1],["ec2:DescribeMacHosts","List","control",[95],[0],1],["ec2:DescribeMacModificationTasks","List","control",[95],[0],1],["ec2:DescribeManagedPrefixLists","List","control",[95],[0],1],["ec2:DescribeMovingAddresses","List","unclassified",[95],[0],1],["ec2:DescribeNatGateways","List","control",[95],[0],1],["ec2:DescribeNetworkAcls","List","control",[95],[0],1],["ec2:DescribeNetworkInsightsAccessScopeAnalyses","List","control",[95],[0],1],["ec2:DescribeNetworkInsightsAccessScopes","List","control",[95],[0],1],["ec2:DescribeNetworkInsightsAnalyses","List","control",[95],[0],1],["ec2:DescribeNetworkInsightsPaths","List","control",[95],[0],1],["ec2:DescribeNetworkInterfaceAttribute","List","control",[95],[0],1],["ec2:DescribeNetworkInterfacePermissions","List","control",[95],[0],1],["ec2:DescribeNetworkInterfaces","List","control",[95],[0],1],["ec2:DescribeOutpostLags","List","control",[95],[0],1],["ec2:DescribePlacementGroups","List","control",[95],[0],1],["ec2:DescribePrefixLists","List","control",[95],[0],1],["ec2:DescribePrincipalIdFormat","List","control",[95],[0],1],["ec2:DescribePublicIpv4Pools","List","control",[95],[0],1],["ec2:DescribeRegions","List","control",[95],[0],1],["ec2:DescribeReplaceRootVolumeTasks","List","control",[95],[0],1],["ec2:DescribeReservedInstances","List","control",[95],[0],1],["ec2:DescribeReservedInstancesListings","List","control",[95],[0],1],["ec2:DescribeReservedInstancesModifications","List","control",[95],[0],1],["ec2:DescribeReservedInstancesOfferings","List","control",[95],[0],1],["ec2:DescribeRouteServerEndpoints","List","control",[95],[0],1],["ec2:DescribeRouteServerPeers","List","control",[95],[0],1],["ec2:DescribeRouteServers","List","control",[95],[0],1],["ec2:DescribeRouteTables","List","control",[95],[0],1],["ec2:DescribeScheduledInstanceAvailability","List","control",[95],[0],1],["ec2:DescribeScheduledInstances","List","control",[95],[0],1],["ec2:DescribeSecondaryInterfaces","List","control",[95],[0],1],["ec2:DescribeSecondaryNetworks","List","control",[95],[0],1],["ec2:DescribeSecondarySubnets","List","control",[95],[0],1],["ec2:DescribeSecurityGroupReferences","List","control",[95],[0],1],["ec2:DescribeSecurityGroupRules","List","control",[95],[0],1],["ec2:DescribeSecurityGroupVpcAssociations","List","control",[95],[0],1],["ec2:DescribeSecurityGroups","List","control",[95],[0],1],["ec2:DescribeServiceLinkVirtualInterfaces","List","control",[95],[0],1],["ec2:DescribeSnapshotAttribute","List","control",[95],[0],1],["ec2:DescribeSnapshotTierStatus","List","control",[95],[0],1],["ec2:DescribeSnapshots","List","control",[95],[0],1],["ec2:DescribeSpotDatafeedSubscription","List","control",[95],[0],1],["ec2:DescribeSpotFleetInstances","List","control",[95],[0],1],["ec2:DescribeSpotFleetRequestHistory","List","control",[95],[0],1],["ec2:DescribeSpotFleetRequests","List","control",[95],[0],1],["ec2:DescribeSpotInstanceRequests","List","control",[95],[0],1],["ec2:DescribeSpotPriceHistory","List","control",[95],[0],1],["ec2:DescribeStaleSecurityGroups","List","control",[95],[0],1],["ec2:DescribeStoreImageTasks","List","control",[95],[0],1],["ec2:DescribeSubnets","List","control",[95],[0],1],["ec2:DescribeTags","List","control",[95],[0],1],["ec2:DescribeTrafficMirrorFilterRules","List","control",[95],[0],1],["ec2:DescribeTrafficMirrorFilters","List","control",[95],[0],1],["ec2:DescribeTrafficMirrorSessions","List","control",[95],[0],1],["ec2:DescribeTrafficMirrorTargets","List","control",[95],[0],1],["ec2:DescribeTransitGatewayAttachments","List","control",[95],[0],1],["ec2:DescribeTransitGatewayConnectPeers","List","control",[95],[0],1],["ec2:DescribeTransitGatewayConnects","List","control",[95],[0],1],["ec2:DescribeTransitGatewayMeteringPolicies","List","control",[95],[0],1],["ec2:DescribeTransitGatewayMulticastDomains","List","control",[95],[0],1],["ec2:DescribeTransitGatewayPeeringAttachments","List","control",[95],[0],1],["ec2:DescribeTransitGatewayPolicyTables","List","control",[95],[0],1],["ec2:DescribeTransitGatewayRouteTableAnnouncements","List","control",[95],[0],1],["ec2:DescribeTransitGatewayRouteTables","List","control",[95],[0],1],["ec2:DescribeTransitGatewayVpcAttachments","List","control",[95],[0],1],["ec2:DescribeTransitGateways","List","control",[95],[0],1],["ec2:DescribeTrunkInterfaceAssociations","List","control",[95],[0],1],["ec2:DescribeVerifiedAccessEndpoints","List","control",[95],[0],1],["ec2:DescribeVerifiedAccessGroups","List","control",[95],[0],1],["ec2:DescribeVerifiedAccessInstanceLoggingConfigurations","List","control",[95],[0],1],["ec2:DescribeVerifiedAccessInstanceWebAclAssociations","List","unclassified",[95],[0],1],["ec2:DescribeVerifiedAccessInstances","List","control",[95],[0],1],["ec2:DescribeVerifiedAccessTrustProviders","List","control",[95],[0],1],["ec2:DescribeVolumeAttribute","List","control",[95],[0],1],["ec2:DescribeVolumeStatus","List","control",[95],[0],1],["ec2:DescribeVolumes","List","control",[95],[0],1],["ec2:DescribeVolumesModifications","List","control",[95],[0],1],["ec2:DescribeVpcAttribute","List","control",[95],[0],1],["ec2:DescribeVpcBlockPublicAccessExclusions","List","control",[95],[0],1],["ec2:DescribeVpcBlockPublicAccessOptions","List","control",[95],[0],1],["ec2:DescribeVpcClassicLink","List","control",[95],[0],1],["ec2:DescribeVpcClassicLinkDnsSupport","List","control",[95],[0],1],["ec2:DescribeVpcEncryptionControls","List","control",[95],[0],1],["ec2:DescribeVpcEndpointAssociations","List","control",[95],[0],1],["ec2:DescribeVpcEndpointConnectionNotifications","List","control",[95],[0],1],["ec2:DescribeVpcEndpointConnections","List","control",[95],[0],1],["ec2:DescribeVpcEndpointServiceConfigurations","List","control",[95],[0],1],["ec2:DescribeVpcEndpointServicePermissions","List","control",[95],[0],1],["ec2:DescribeVpcEndpointServices","List","control",[95],[0],1],["ec2:DescribeVpcEndpoints","List","control",[95],[0],1],["ec2:DescribeVpcPeeringConnections","List","control",[95],[0],1],["ec2:DescribeVpcs","List","control",[95],[0],1],["ec2:DescribeVpnConcentrators","List","control",[95],[0],1],["ec2:DescribeVpnConnections","List","control",[95],[0],1],["ec2:DescribeVpnGateways","List","control",[95],[0],1],["ec2:DetachClassicLinkVpc","Write","control",[96],[1],1],["ec2:DetachInternetGateway","Write","control",[97],[0],1],["ec2:DetachNetworkInterface","Write","control",[98],[0],1],["ec2:DetachVolume","Write","control",[99],[1],1],["ec2:DetachVpnGateway","Write","control",[100],[0],1],["ec2:DisableVgwRoutePropagation","Write","control",[101],[0],1],["ec2:DisableVpcClassicLink","Write","control",[102],[1],1],["ec2:DisableVpcClassicLinkDnsSupport","Write","control",[103],[0],1],["ec2:DisassociateAddress","Write","control",[104],[0],1],["ec2:DisassociateRouteTable","Write","control",[105],[0],1],["ec2:EnableVgwRoutePropagation","Write","control",[106],[0],1],["ec2:EnableVolumeIO","Write","control",[107],[0],1],["ec2:EnableVpcClassicLink","Write","control",[108],[1],1],["ec2:EnableVpcClassicLinkDnsSupport","Write","control",[109],[0],1],["ec2:GetConsoleOutput","Read","control",[110],[0],1],["ec2:GetConsoleScreenshot","Read","control",[111],[1],1],["ec2:GetHostReservationPurchasePreview","Read","control",[112],[0],1],["ec2:GetLaunchTemplateData","Read","control",[113],[0],1],["ec2:GetPasswordData","Read","control",[114],[0],1],["ec2:GetSecurityGroupsForVpc","Read","control",[115],[0],1],["ec2:ImportByoipCidrToIpam","Write","unclassified",[116],[0],1],["ec2:ImportClientVpnClientCertificateRevocationList","Write","control",[116],[0],1],["ec2:ImportImage","Write","control",[116],[0],1],["ec2:ImportInstance","Write","control",[116],[0],1],["ec2:ImportKeyPair","Write","control",[116],[0],1],["ec2:ImportSnapshot","Write","control",[116],[0],1],["ec2:ImportVolume","Write","control",[116],[0],1],["ec2:ModifyAccountVpcEncryptionControl","Write","control",[117],[0],1],["ec2:ModifyAddressAttribute","Write","control",[117],[0],1],["ec2:ModifyApplicationStatusCheck","Write","control",[117],[0],1],["ec2:ModifyAvailabilityZoneGroup","Write","control",[117],[0],1],["ec2:ModifyCapacityReservation","Write","control",[117],[0],1],["ec2:ModifyCapacityReservationFleet","Write","control",[117],[0],1],["ec2:ModifyClientVpnEndpoint","Write","control",[117],[0],1],["ec2:ModifyClientVpnEndpointAuthorizationPolicy","Write","control",[117],[0],1],["ec2:ModifyDefaultCreditSpecification","Write","control",[117],[0],1],["ec2:ModifyEbsDefaultKmsKeyId","Write","control",[117],[0],1],["ec2:ModifyFleet","Write","control",[117],[0],1],["ec2:ModifyFpgaImageAttribute","Write","control",[117],[0],1],["ec2:ModifyHosts","Write","control",[117],[0],1],["ec2:ModifyIdFormat","Write","control",[117],[0],1],["ec2:ModifyIdentityIdFormat","Write","control",[117],[0],1],["ec2:ModifyImageAttribute","Write","control",[117],[0],1],["ec2:ModifyInstanceAttribute","Write","control",[117],[0],1],["ec2:ModifyInstanceCapacityReservationAttributes","Write","control",[117],[0],1],["ec2:ModifyInstanceConnectEndpoint","Write","control",[117],[0],1],["ec2:ModifyInstanceCpuOptions","Write","control",[117],[0],1],["ec2:ModifyInstanceCreditSpecification","Write","control",[117],[0],1],["ec2:ModifyInstanceEventStartTime","Write","control",[117],[0],1],["ec2:ModifyInstanceEventWindow","Write","control",[117],[0],1],["ec2:ModifyInstanceMaintenanceOptions","Write","control",[117],[0],1],["ec2:ModifyInstanceMetadataDefaults","Write","control",[117],[0],1],["ec2:ModifyInstanceMetadataOptions","Write","control",[117],[0],1],["ec2:ModifyInstanceNetworkPerformanceOptions","Write","control",[117],[0],1],["ec2:ModifyInstancePlacement","Write","control",[117],[0],1],["ec2:ModifyIpam","Write","control",[117],[0],1],["ec2:ModifyIpamPolicyAllocationRules","Write","control",[117],[0],1],["ec2:ModifyIpamPool","Write","control",[117],[0],1],["ec2:ModifyIpamPoolAllocation","Write","control",[117],[0],1],["ec2:ModifyIpamPrefixListResolver","Write","control",[117],[0],1],["ec2:ModifyIpamPrefixListResolverTarget","Write","control",[117],[0],1],["ec2:ModifyIpamResourceCidr","Write","control",[117],[0],1],["ec2:ModifyIpamResourceDiscovery","Write","control",[117],[0],1],["ec2:ModifyIpamRoutingPolicyRegistration","Write","control",[117],[0],1],["ec2:ModifyIpamScope","Write","control",[117],[0],1],["ec2:ModifyLaunchTemplate","Write","control",[117],[0],1],["ec2:ModifyLocalGatewayRoute","Write","control",[117],[0],1],["ec2:ModifyManagedPrefixList","Write","control",[117],[0],1],["ec2:ModifyManagedResourceVisibility","Write","control",[117],[0],1],["ec2:ModifyNetworkInterfaceAttribute","Write","control",[117],[0],1],["ec2:ModifyOdbNetworkPeering","Permissions management","unclassified",[117],[0],1],["ec2:ModifyPrivateDnsNameOptions","Write","control",[117],[0],1],["ec2:ModifyPublicIpDnsNameOptions","Write","control",[117],[0],1],["ec2:ModifyReservedInstances","Write","control",[117],[0],1],["ec2:ModifyRouteServer","Write","control",[117],[0],1],["ec2:ModifySecurityGroupRules","Write","control",[117],[0],1],["ec2:ModifySnapshotAttribute","Permissions management","control",[117],[0],1],["ec2:ModifySnapshotTier","Write","control",[117],[0],1],["ec2:ModifySpotFleetRequest","Write","control",[117],[0],1],["ec2:ModifySubnetAttribute","Write","control",[117],[0],1],["ec2:ModifyTrafficMirrorFilterNetworkServices","Write","control",[117],[0],1],["ec2:ModifyTrafficMirrorFilterRule","Write","control",[117],[0],1],["ec2:ModifyTrafficMirrorSession","Write","control",[117],[0],1],["ec2:ModifyTransitGateway","Write","control",[117],[0],1],["ec2:ModifyTransitGatewayAttachmentNatConfiguration","Write","control",[117],[0],1],["ec2:ModifyTransitGatewayMeteringPolicy","Write","control",[117],[0],1],["ec2:ModifyTransitGatewayPolicyTableEntry","Write","control",[117],[0],1],["ec2:ModifyTransitGatewayPrefixListReference","Write","control",[117],[0],1],["ec2:ModifyTransitGatewayVpcAttachment","Write","control",[117],[0],1],["ec2:ModifyVerifiedAccessEndpoint","Write","control",[117],[0],1],["ec2:ModifyVerifiedAccessEndpointPolicy","Write","control",[117],[0],1],["ec2:ModifyVerifiedAccessGroup","Write","control",[117],[0],1],["ec2:ModifyVerifiedAccessGroupPolicy","Write","control",[117],[0],1],["ec2:ModifyVerifiedAccessInstance","Write","control",[117],[0],1],["ec2:ModifyVerifiedAccessInstanceLoggingConfiguration","Write","control",[117],[0],1],["ec2:ModifyVerifiedAccessTrustProvider","Write","control",[117],[0],1],["ec2:ModifyVolume","Write","control",[117],[0],1],["ec2:ModifyVolumeAttribute","Write","control",[117],[0],1],["ec2:ModifyVpcAttribute","Write","control",[117],[0],1],["ec2:ModifyVpcBlockPublicAccessExclusion","Write","control",[117],[0],1],["ec2:ModifyVpcBlockPublicAccessOptions","Write","control",[117],[0],1],["ec2:ModifyVpcEncryptionControl","Write","control",[117],[0],1],["ec2:ModifyVpcEndpoint","Write","control",[117],[0],1],["ec2:ModifyVpcEndpointConnectionNotification","Write","control",[117],[0],1],["ec2:ModifyVpcEndpointPayerResponsibility","Write","control",[117],[0],1],["ec2:ModifyVpcEndpointServiceConfiguration","Write","control",[117],[0],1],["ec2:ModifyVpcEndpointServicePayerResponsibility","Write","control",[117],[0],1],["ec2:ModifyVpcEndpointServicePermissions","Permissions management","control",[117],[0],1],["ec2:ModifyVpcPeeringConnectionOptions","Write","control",[117],[0],1],["ec2:ModifyVpcTenancy","Write","control",[117],[0],1],["ec2:ModifyVpnConnection","Write","control",[117],[0],1],["ec2:ModifyVpnConnectionOptions","Write","control",[117],[0],1],["ec2:ModifyVpnTunnelCertificate","Write","control",[117],[0],1],["ec2:ModifyVpnTunnelOptions","Write","control",[117],[0],1],["ec2:MonitorInstances","Write","control",[118],[0],1],["ec2:MoveAddressToVpc","Write","unclassified",[119],[0],1],["ec2:PurchaseCapacityBlock","Write","control",[120],[0],1],["ec2:PurchaseCapacityBlockExtension","Write","control",[120],[0],1],["ec2:PurchaseHostReservation","Write","control",[120],[0],1],["ec2:PurchaseReservedInstancesOffering","Write","control",[120],[0],1],["ec2:PurchaseScheduledInstances","Write","control",[120],[0],1],["ec2:RebootInstances","Write","control",[121],[1],1],["ec2:RegisterImage","Write","control",[122],[0],1],["ec2:RejectVpcPeeringConnection","Write","control",[123],[1],1],["ec2:ReleaseAddress","Write","control",[124],[0],1],["ec2:ReleaseHosts","Write","control",[124],[0],1],["ec2:ReleaseIpamPoolAllocation","Write","control",[124],[0],1],["ec2:ReplaceIamInstanceProfileAssociation","Write","control",[125],[0],1],["ec2:ReplaceImageCriteriaInAllowedImagesSettings","Write","control",[125],[0],1],["ec2:ReplaceImageInstanceTypeSpecification","Write","control",[125],[0],1],["ec2:ReplaceNetworkAclAssociation","Write","control",[125],[0],1],["ec2:ReplaceNetworkAclEntry","Write","control",[125],[0],1],["ec2:ReplaceRoute","Write","control",[125],[0],1],["ec2:ReplaceRouteTableAssociation","Write","control",[125],[0],1],["ec2:ReplaceTransitGatewayRoute","Write","control",[125],[0],1],["ec2:ReplaceVpnTunnel","Write","control",[125],[0],1],["ec2:ReportInstanceStatus","Write","control",[126],[0],1],["ec2:RequestSpotFleet","Write","control",[127],[0],1],["ec2:RequestSpotInstances","Write","control",[127],[0],1],["ec2:ResetAddressAttribute","Write","control",[128],[0],1],["ec2:ResetEbsDefaultKmsKeyId","Write","control",[128],[0],1],["ec2:ResetFpgaImageAttribute","Write","control",[128],[0],1],["ec2:ResetImageAttribute","Write","control",[128],[0],1],["ec2:ResetInstanceAttribute","Write","control",[128],[0],1],["ec2:ResetNetworkInterfaceAttribute","Write","control",[128],[0],1],["ec2:ResetSnapshotAttribute","Permissions management","control",[128],[0],1],["ec2:RestoreAddressToClassic","Write","unclassified",[129],[0],1],["ec2:RevokeSecurityGroupEgress","Write","control",[130],[1],1],["ec2:RevokeSecurityGroupIngress","Write","control",[131],[1],1],["ec2:RunInstances","Write","control",[132],[1],1],["ec2:RunScheduledInstances","Write","control",[133],[0],1],["ec2:StartInstances","Write","control",[134],[1],1],["ec2:StopInstances","Write","control",[135],[1],1],["ec2:TerminateInstances","Write","control",[136],[1],1],["ec2:UnassignPrivateIpAddresses","Write","control",[137],[0],1],["ec2:UnmonitorInstances","Write","control",[138],[0],1],["ec2:UpdateSecurityGroupRuleDescriptionsEgress","Write","control",[139],[0],1],["ec2:UpdateSecurityGroupRuleDescriptionsIngress","Write","control",[140],[0],1]]},{"prefix":"elasticloadbalancing","rows":[["elasticloadbalancing:AddListenerCertificates","Write","control",[141],[0],1],["elasticloadbalancing:AddTags","Tagging","control",[141],[0],1],["elasticloadbalancing:AddTrustStoreRevocations","Write","control",[141],[0],1],["elasticloadbalancing:AllowVendedLogDeliveryForResource","Permissions management","unclassified",[141],[0],1],["elasticloadbalancing:ApplySecurityGroupsToLoadBalancer","Write","control",[141],[0],1],["elasticloadbalancing:AttachLoadBalancerToSubnets","Write","control",[141],[0],1],["elasticloadbalancing:ConfigureHealthCheck","Write","control",[141],[0],1],["elasticloadbalancing:CreateAppCookieStickinessPolicy","Write","control",[141],[0],1],["elasticloadbalancing:CreateLBCookieStickinessPolicy","Write","control",[141],[0],1],["elasticloadbalancing:CreateListener","Write","control",[141],[0],1],["elasticloadbalancing:CreateLoadBalancer","Write","control",[141],[0],1],["elasticloadbalancing:CreateLoadBalancerListeners","Write","control",[141],[0],1],["elasticloadbalancing:CreateLoadBalancerPolicy","Write","control",[141],[0],1],["elasticloadbalancing:CreateRule","Write","control",[141],[0],1],["elasticloadbalancing:CreateTargetGroup","Write","control",[141],[0],1],["elasticloadbalancing:CreateTrustStore","Write","control",[141],[0],1],["elasticloadbalancing:CreateWebACLAssociation","Write","unclassified",[141],[0],1],["elasticloadbalancing:DeleteListener","Write","control",[141],[0],1],["elasticloadbalancing:DeleteLoadBalancer","Write","control",[141],[0],1],["elasticloadbalancing:DeleteLoadBalancerListeners","Write","control",[141],[0],1],["elasticloadbalancing:DeleteLoadBalancerPolicy","Write","control",[141],[0],1],["elasticloadbalancing:DeleteRule","Write","control",[141],[0],1],["elasticloadbalancing:DeleteSharedTrustStoreAssociation","Write","control",[141],[0],1],["elasticloadbalancing:DeleteTargetGroup","Write","control",[141],[0],1],["elasticloadbalancing:DeleteTrustStore","Write","control",[141],[0],1],["elasticloadbalancing:DeleteWebACLAssociation","Write","unclassified",[141],[0],1],["elasticloadbalancing:DeregisterInstancesFromLoadBalancer","Write","control",[141],[0],1],["elasticloadbalancing:DeregisterTargets","Write","control",[141],[0],1],["elasticloadbalancing:DescribeAccountLimits","Read","control",[141],[0],1],["elasticloadbalancing:DescribeCapacityReservation","Read","control",[141],[0],1],["elasticloadbalancing:DescribeInstanceHealth","Read","control",[141],[0],1],["elasticloadbalancing:DescribeListenerAttributes","Read","control",[141],[0],1],["elasticloadbalancing:DescribeListenerCertificates","Read","control",[141],[0],1],["elasticloadbalancing:DescribeListeners","Read","control",[141],[0],1],["elasticloadbalancing:DescribeLoadBalancerAttributes","Read","control",[141],[0],1],["elasticloadbalancing:DescribeLoadBalancerPolicies","Read","control",[141],[0],1],["elasticloadbalancing:DescribeLoadBalancerPolicyTypes","Read","control",[141],[0],1],["elasticloadbalancing:DescribeLoadBalancers","List","control",[141],[0],1],["elasticloadbalancing:DescribeRules","Read","control",[141],[0],1],["elasticloadbalancing:DescribeSSLPolicies","Read","control",[141],[0],1],["elasticloadbalancing:DescribeTags","Read","control",[141],[0],1],["elasticloadbalancing:DescribeTargetGroupAttributes","Read","control",[141],[0],1],["elasticloadbalancing:DescribeTargetGroups","Read","control",[141],[0],1],["elasticloadbalancing:DescribeTargetHealth","Read","control",[141],[0],1],["elasticloadbalancing:DescribeTrustStoreAssociations","Read","control",[141],[0],1],["elasticloadbalancing:DescribeTrustStoreRevocations","Read","control",[141],[0],1],["elasticloadbalancing:DescribeTrustStores","Read","control",[141],[0],1],["elasticloadbalancing:DescribeWebACLAssociation","List","unclassified",[141],[0],1],["elasticloadbalancing:DetachLoadBalancerFromSubnets","Write","control",[141],[0],1],["elasticloadbalancing:DisableAvailabilityZonesForLoadBalancer","Write","control",[141],[0],1],["elasticloadbalancing:EnableAvailabilityZonesForLoadBalancer","Write","control",[141],[0],1],["elasticloadbalancing:GetLoadBalancerWebACL","Read","unclassified",[141],[0],1],["elasticloadbalancing:GetResourcePolicy","Read","control",[141],[0],1],["elasticloadbalancing:GetTrustStoreCaCertificatesBundle","Read","control",[141],[0],1],["elasticloadbalancing:GetTrustStoreRevocationContent","Read","control",[141],[0],1],["elasticloadbalancing:ModifyCapacityReservation","Write","control",[141],[0],1],["elasticloadbalancing:ModifyIpPools","Write","control",[141],[0],1],["elasticloadbalancing:ModifyListener","Write","control",[141],[0],1],["elasticloadbalancing:ModifyListenerAttributes","Write","control",[141],[0],1],["elasticloadbalancing:ModifyLoadBalancerAttributes","Write","control",[141],[0],1],["elasticloadbalancing:ModifyRule","Write","control",[141],[0],1],["elasticloadbalancing:ModifyTargetGroup","Write","control",[141],[0],1],["elasticloadbalancing:ModifyTargetGroupAttributes","Write","control",[141],[0],1],["elasticloadbalancing:ModifyTrustStore","Write","control",[141],[0],1],["elasticloadbalancing:RegisterInstancesWithLoadBalancer","Write","control",[141],[0],1],["elasticloadbalancing:RegisterTargets","Write","control",[141],[0],1],["elasticloadbalancing:RemoveListenerCertificates","Write","control",[141],[0],1],["elasticloadbalancing:RemoveTags","Tagging","control",[141],[0],1],["elasticloadbalancing:RemoveTrustStoreRevocations","Write","control",[141],[0],1],["elasticloadbalancing:SetIpAddressType","Write","control",[141],[0],1],["elasticloadbalancing:SetLoadBalancerListenerSSLCertificate","Write","control",[141],[0],1],["elasticloadbalancing:SetLoadBalancerPoliciesForBackendServer","Write","control",[141],[0],1],["elasticloadbalancing:SetLoadBalancerPoliciesOfListener","Write","control",[141],[0],1],["elasticloadbalancing:SetRulePriorities","Write","control",[141],[0],1],["elasticloadbalancing:SetSecurityGroups","Write","control",[141],[0],1],["elasticloadbalancing:SetSubnets","Write","control",[141],[0],1],["elasticloadbalancing:SetWebAcl","Write","unclassified",[141],[0],1]]},{"prefix":"events","rows":[["events:ActivateEventSource","Write","control",[142],[0],1],["events:AllowVendedLogDeliveryForResource","Write","unclassified",[142],[0],1],["events:CancelReplay","Write","control",[142],[0],1],["events:CreateApiDestination","Write","control",[142],[0],1],["events:CreateArchive","Write","control",[142],[0],1],["events:CreateConnection","Write","control",[142],[0],1],["events:CreateEndpoint","Write","control",[142],[0],1],["events:CreateEventBus","Write","control",[142],[0],1],["events:CreateEventSource","Write","control",[142],[0],1],["events:CreatePartnerEventSource","Write","control",[142],[0],1],["events:CreateSubscriber","Write","control",[142],[0],1],["events:DeactivateEventSource","Write","control",[142],[0],1],["events:DeauthorizeConnection","Write","control",[142],[0],1],["events:DeleteApiDestination","Write","control",[142],[0],1],["events:DeleteArchive","Write","control",[142],[0],1],["events:DeleteConnection","Write","control",[142],[0],1],["events:DeleteEndpoint","Write","control",[142],[0],1],["events:DeleteEventBus","Write","control",[142],[0],1],["events:DeleteEventSource","Write","control",[142],[0],1],["events:DeletePartnerEventSource","Write","control",[142],[0],1],["events:DeleteResourcePolicy","Permissions management","control",[142],[0],1],["events:DeleteRule","Write","control",[142],[0],1],["events:DeleteSubscriber","Write","control",[142],[0],1],["events:DescribeApiDestination","Read","control",[142],[0],1],["events:DescribeArchive","Read","control",[142],[0],1],["events:DescribeConnection","Read","control",[142],[0],1],["events:DescribeEndpoint","Read","control",[142],[0],1],["events:DescribeEventBus","Read","control",[142],[0],1],["events:DescribeEventSource","Read","control",[142],[0],1],["events:DescribePartnerEventSource","Read","control",[142],[0],1],["events:DescribeReplay","Read","control",[142],[0],1],["events:DescribeRule","Read","control",[142],[0],1],["events:DescribeSubscriber","Read","control",[142],[0],1],["events:DisableRule","Write","control",[142],[0],1],["events:EnableRule","Write","control",[142],[0],1],["events:GetResourcePolicy","Read","control",[142],[0],1],["events:InvokeApiDestination","Write","unclassified",[142],[0],1],["events:ListApiDestinations","List","control",[142],[0],1],["events:ListArchives","List","control",[142],[0],1],["events:ListConnections","List","control",[142],[0],1],["events:ListEndpoints","List","control",[142],[0],1],["events:ListEventBuses","List","control",[142],[0],1],["events:ListEventSources","List","control",[142],[0],1],["events:ListPartnerEventSourceAccounts","List","control",[142],[0],1],["events:ListPartnerEventSources","List","control",[142],[0],1],["events:ListReplays","List","control",[142],[0],1],["events:ListResourcePolicies","List","control",[142],[0],1],["events:ListRuleNamesByTarget","List","control",[142],[0],1],["events:ListRules","List","control",[142],[0],1],["events:ListSubscribers","List","control",[142],[0],1],["events:ListTagsForResource","List","control",[142],[0],1],["events:ListTargetsByRule","List","control",[142],[0],1],["events:PutEvents","Write","data",[142],[0],1],["events:PutPartnerEvents","Write","data",[142],[0],1],["events:PutPermission","Permissions management","control",[142],[0],1],["events:PutRawEvents","Write","data",[142],[0],1],["events:PutResourcePolicy","Permissions management","control",[142],[0],1],["events:PutRule","Write","control",[142],[0],1],["events:PutTargets","Write","control",[142],[0],1],["events:RemovePermission","Permissions management","control",[142],[0],1],["events:RemoveTargets","Write","control",[142],[0],1],["events:RetrieveConnectionCredentials","Write","unclassified",[142],[0],1],["events:RevokeResource","Write","control",[142],[0],1],["events:StartReplay","Write","control",[142],[0],1],["events:TagResource","Tagging","control",[142],[0],1],["events:TestEventPattern","Read","control",[142],[0],1],["events:UntagResource","Tagging","control",[142],[0],1],["events:UpdateApiDestination","Write","control",[142],[0],1],["events:UpdateArchive","Write","control",[142],[0],1],["events:UpdateConnection","Write","control",[142],[0],1],["events:UpdateEndpoint","Write","control",[142],[0],1],["events:UpdateEventBus","Write","control",[142],[0],1],["events:UpdateEventSource","Write","control",[142],[0],1],["events:UpdateSubscriber","Write","control",[142],[0],1]]},{"prefix":"iam","rows":[["iam:GetAccessKeyLastUsed","Read","control",[143],[3],1],["iam:GetAccountAuthorizationDetails","Read","control",[144],[0],1],["iam:GetAccountEmailAddress","Read","unclassified",[144],[0],1],["iam:GetAccountName","Read","unclassified",[144],[0],1],["iam:GetAccountPasswordPolicy","Read","control",[144],[0],1],["iam:GetAccountProperties","Read","control",[144],[0],1],["iam:GetAccountSummary","List","control",[144],[0],1],["iam:GetContextKeysForCustomPolicy","Read","control",[145],[0],1],["iam:GetContextKeysForPrincipalPolicy","Read","control",[145],[0],1],["iam:GetCredentialReport","Read","control",[146],[0],1],["iam:GetGroup","Read","control",[147],[3],1],["iam:GetGroupPolicy","Read","control",[147],[3],1],["iam:GetInstanceProfile","Read","control",[148],[3],1],["iam:GetLoginProfile","List","control",[149],[3],1],["iam:GetOpenIDConnectProvider","Read","control",[150],[3],1],["iam:GetPolicy","Read","control",[151],[3],1],["iam:GetPolicyVersion","Read","control",[151],[3],1],["iam:GetRole","Read","control",[152,153],[3,4],1],["iam:GetRolePolicy","Read","control",[153],[3],1],["iam:GetRoleTemplateVersion","Read","control",[153],[3],1],["iam:GetSAMLProvider","Read","control",[154],[3],1],["iam:GetSSHPublicKey","Read","control",[155],[3],1],["iam:GetServerCertificate","Read","control",[156],[3],1],["iam:GetServiceLastAccessedDetails","Read","control",[157],[3],1],["iam:GetServiceLastAccessedDetailsWithEntities","Read","control",[157],[3],1],["iam:GetUser","Read","control",[158],[3],1],["iam:GetUserPolicy","Read","control",[158],[3],1],["iam:ListAccessKeys","List","control",[159],[3],1],["iam:ListAccountAliases","List","control",[160],[0],1],["iam:ListAttachedGroupPolicies","List","control",[161],[3],1],["iam:ListAttachedRolePolicies","List","control",[161],[3],1],["iam:ListAttachedUserPolicies","List","control",[161],[3],1],["iam:ListEntitiesForPolicy","List","control",[162],[3],1],["iam:ListGroupPolicies","List","control",[163],[3],1],["iam:ListGroups","List","control",[164],[0],1],["iam:ListGroupsForUser","List","control",[165],[3],1],["iam:ListInstanceProfiles","List","control",[166],[3],1],["iam:ListInstanceProfilesForRole","List","control",[166],[3],1],["iam:ListMFADevices","List","control",[167],[3],1],["iam:ListOpenIDConnectProviders","List","control",[168],[0],1],["iam:ListPolicies","List","control",[169],[0],1],["iam:ListPoliciesGrantingServiceAccess","List","control",[170],[0],1],["iam:ListPolicyVersions","List","control",[171],[3],1],["iam:ListRolePolicies","List","control",[172],[3],1],["iam:ListRoles","List","control",[173],[0,4],1],["iam:ListSAMLProviders","List","control",[174],[0],1],["iam:ListSSHPublicKeys","List","control",[175],[3],1],["iam:ListServerCertificates","List","control",[176],[0],1],["iam:ListSigningCertificates","List","control",[177],[3],1],["iam:ListUserPolicies","List","control",[178],[3],1],["iam:PassRole","Write","control",[179],[4],4],["iam:SimulateCustomPolicy","Read","control",[180],[0],1],["iam:SimulatePrincipalPolicy","Read","control",[180],[0],1],["iam:UpdateServerCertificate","Write","control",[181],[0],1],["iam:UpdateSigningCertificate","Write","control",[182],[0],1],["iam:UploadCloudFrontPublicKey","Write","unclassified",[183],[3],1],["iam:UploadSSHPublicKey","Write","control",[183],[3],1],["iam:UploadServerCertificate","Write","control",[183],[3],1],["iam:UploadSigningCertificate","Write","control",[183],[3],1]]},{"prefix":"kinesis","rows":[["kinesis:ListStreams","List","control",[184],[0],1],["kinesis:PutRecord","Write","data",[185],[0],1]]},{"prefix":"kms","rows":[["kms:CreateAlias","Write","control",[186],[0],1],["kms:CreateKey","Write","control",[187],[0],1],["kms:DeleteAlias","Write","control",[188],[0],1],["kms:DescribeCustomKeyStores","Read","control",[189],[0],1],["kms:DescribeKey","Read","control",[189],[0],1],["kms:Encrypt","Write","control",[190],[0],1],["kms:GenerateRandom","Write","control",[191],[0],1],["kms:GetKeyLastUsage","Read","control",[192],[0],1],["kms:GetKeyPolicy","Read","control",[192],[0],1],["kms:GetKeyRotationStatus","Read","control",[192],[0],1],["kms:GetParametersForImport","Read","control",[192],[0],1],["kms:GetPublicKey","Read","control",[192],[0],1],["kms:ListAliases","List","control",[193],[0],1],["kms:ListGrants","List","control",[193],[0],1],["kms:ListKeyPolicies","List","control",[193],[0],1],["kms:ListKeyRotations","List","control",[193],[0],1],["kms:ListKeys","List","control",[193],[0],1],["kms:ListResourceTags","List","control",[193],[0],1],["kms:ListRetirableGrants","List","control",[193],[0],1],["kms:ReEncryptFrom","Write","control",[194],[0],1],["kms:ReEncryptTo","Write","control",[194],[0],1]]},{"prefix":"lambda","rows":[["lambda:CreateAlias","Write","control",[195],[0],1],["lambda:CreateCapacityProvider","Write","control",[195],[0],1],["lambda:CreateCodeSigningConfig","Write","control",[195],[0],1],["lambda:CreateEventSourceMapping","Write","control",[195],[0],1],["lambda:CreateFunction","Write","control",[195],[0],1],["lambda:CreateFunctionUrlConfig","Write","control",[195],[0],1],["lambda:CreateMicrovmAuthToken","Write","data",[195],[0],1],["lambda:CreateMicrovmImage","Write","control",[195],[0],1],["lambda:CreateMicrovmShellAuthToken","Write","data",[195],[0],1],["lambda:CreateNetworkConnector","Write","control",[195],[0],1],["lambda:CreateWebFunction","Write","control",[195],[0],1],["lambda:CreateWebFunctionEndpoint","Write","control",[195],[0],1],["lambda:CreateWebFunctionRevision","Write","control",[195],[0],1],["lambda:DeleteAlias","Write","control",[196],[0],1],["lambda:DeleteCapacityProvider","Write","control",[196],[0],1],["lambda:DeleteCodeSigningConfig","Write","control",[196],[0],1],["lambda:DeleteEventSourceMapping","Write","control",[196],[0],1],["lambda:DeleteFunction","Write","control",[196],[0],1],["lambda:DeleteFunctionCodeSigningConfig","Write","control",[196],[0],1],["lambda:DeleteFunctionConcurrency","Write","control",[196],[0],1],["lambda:DeleteFunctionEventInvokeConfig","Write","control",[196],[0],1],["lambda:DeleteFunctionUrlConfig","Write","control",[196],[0],1],["lambda:DeleteLayerVersion","Write","control",[196],[0],1],["lambda:DeleteMicrovmImage","Write","control",[196],[0],1],["lambda:DeleteMicrovmImageVersion","Write","control",[196],[0],1],["lambda:DeleteNetworkConnector","Write","control",[196],[0],1],["lambda:DeleteProvisionedConcurrencyConfig","Write","control",[196],[0],1],["lambda:DeleteResourcePolicy","Permissions management","control",[196],[0],1],["lambda:DeleteWebFunction","Write","control",[196],[0],1],["lambda:DeleteWebFunctionEndpoint","Write","control",[196],[0],1],["lambda:DeleteWebFunctionRevision","Write","control",[196],[0],1],["lambda:GetAccountSettings","Read","control",[197],[0],1],["lambda:GetAlias","Read","control",[197],[0],1],["lambda:GetCapacityProvider","Read","control",[197],[0],1],["lambda:GetCodeSigningConfig","Read","control",[197],[0],1],["lambda:GetDurableExecution","Read","control",[197],[0],1],["lambda:GetDurableExecutionHistory","Read","control",[197],[0],1],["lambda:GetDurableExecutionState","Read","data",[197],[0],1],["lambda:GetEventSourceMapping","Read","control",[197],[0],1],["lambda:GetFunction","Read","control",[197],[0],1],["lambda:GetFunctionCodeSigningConfig","Read","control",[197],[0],1],["lambda:GetFunctionConcurrency","Read","control",[197],[0],1],["lambda:GetFunctionConfiguration","Read","control",[197],[0],1],["lambda:GetFunctionEventInvokeConfig","Read","control",[197],[0],1],["lambda:GetFunctionRecursionConfig","Read","control",[197],[0],1],["lambda:GetFunctionScalingConfig","Read","control",[197],[0],1],["lambda:GetFunctionUrlConfig","Read","control",[197],[0],1],["lambda:GetLayerVersion","Read","control",[197],[0],1],["lambda:GetLayerVersionPolicy","Read","control",[197],[0],1],["lambda:GetMicrovm","Read","control",[197],[0],1],["lambda:GetMicrovmImage","Read","control",[197],[0],1],["lambda:GetMicrovmImageBuild","Read","control",[197],[0],1],["lambda:GetMicrovmImageVersion","Read","control",[197],[0],1],["lambda:GetNetworkConnector","Read","control",[197],[0],1],["lambda:GetPolicy","Read","control",[197],[0],1],["lambda:GetProvisionedConcurrencyConfig","Read","control",[197],[0],1],["lambda:GetResourcePolicy","Read","control",[197],[0],1],["lambda:GetRuntimeManagementConfig","Read","control",[197],[0],1],["lambda:GetWebAccountSettings","Read","control",[197],[0],1],["lambda:GetWebFunction","Read","control",[197],[0],1],["lambda:GetWebFunctionEndpoint","Read","control",[197],[0],1],["lambda:GetWebFunctionRevision","Read","control",[197],[0],1],["lambda:InvokeFunction","Write","data",[198],[0],1],["lambda:ListAliases","List","control",[199],[0],1],["lambda:ListCapacityProviders","List","control",[199],[0],1],["lambda:ListCodeSigningConfigs","List","control",[199],[0],1],["lambda:ListDurableExecutionsByFunction","List","control",[199],[0],1],["lambda:ListEventSourceMappings","List","control",[199],[0],1],["lambda:ListFunctionEventInvokeConfigs","List","control",[199],[0],1],["lambda:ListFunctionUrlConfigs","List","control",[199],[0],1],["lambda:ListFunctionVersionsByCapacityProvider","List","control",[199],[0],1],["lambda:ListFunctions","List","control",[199],[0],1],["lambda:ListFunctionsByCodeSigningConfig","List","control",[199],[0],1],["lambda:ListLayerVersions","List","control",[199],[0],1],["lambda:ListLayers","List","control",[199],[0],1],["lambda:ListManagedMicrovmImageVersions","List","control",[199],[0],1],["lambda:ListManagedMicrovmImages","List","control",[199],[0],1],["lambda:ListMicrovmImageBuilds","List","control",[199],[0],1],["lambda:ListMicrovmImageVersions","List","control",[199],[0],1],["lambda:ListMicrovmImages","List","control",[199],[0],1],["lambda:ListMicrovms","List","control",[199],[0],1],["lambda:ListNetworkConnectorVersions","List","control",[199],[0],1],["lambda:ListNetworkConnectors","List","control",[199],[0],1],["lambda:ListProvisionedConcurrencyConfigs","List","control",[199],[0],1],["lambda:ListTags","Read","control",[199],[0],1],["lambda:ListVersionsByFunction","List","control",[199],[0],1],["lambda:ListWebFunctionEndpoints","List","control",[199],[0],1],["lambda:ListWebFunctionRevisions","List","control",[199],[0],1],["lambda:ListWebFunctions","List","control",[199],[0],1],["lambda:PublishVersion","Write","control",[200],[0],1],["lambda:UpdateAlias","Write","control",[201],[0],1],["lambda:UpdateCapacityProvider","Write","control",[201],[0],1],["lambda:UpdateCodeSigningConfig","Write","control",[201],[0],1],["lambda:UpdateEventSourceMapping","Write","control",[201],[0],1],["lambda:UpdateFunctionCode","Write","control",[201],[0],1],["lambda:UpdateFunctionCodeSigningConfig","Write","unclassified",[201],[0],1],["lambda:UpdateFunctionConfiguration","Write","control",[201],[0],1],["lambda:UpdateFunctionEventInvokeConfig","Write","control",[201],[0],1],["lambda:UpdateFunctionUrlConfig","Write","control",[201],[0],1],["lambda:UpdateMicrovmImage","Write","control",[201],[0],1],["lambda:UpdateMicrovmImageVersion","Write","control",[201],[0],1],["lambda:UpdateNetworkConnector","Write","control",[201],[0],1],["lambda:UpdateWebFunctionEndpoint","Write","control",[201],[0],1]]},{"prefix":"logs","rows":[["logs:AssociateKmsKey","Write","control",[202],[0],1],["logs:AssociateSourceToS3TableIntegration","Write","control",[202],[0],1],["logs:CallWithBearerToken","Write","unclassified",[202],[0],1],["logs:CancelExportTask","Write","control",[202],[0],1],["logs:CancelImportTask","Write","control",[202],[0],1],["logs:CreateDelivery","Write","control",[202],[0],1],["logs:CreateExportTask","Write","control",[202],[0],1],["logs:CreateImportTask","Write","control",[202],[0],1],["logs:CreateLogAnomalyDetector","Write","control",[202],[0],1],["logs:CreateLogDelivery","Write","unclassified",[202],[0],1],["logs:CreateLogGroup","Write","control",[202],[0],1],["logs:CreateLogStream","Write","control",[202],[0],1],["logs:CreateLookupTable","Write","control",[202],[0],1],["logs:CreateScheduledQuery","Write","control",[202],[0],1],["logs:DeleteAccountPolicy","Write","control",[202],[0],1],["logs:DeleteDataProtectionPolicy","Write","control",[202],[0],1],["logs:DeleteDelivery","Write","control",[202],[0],1],["logs:DeleteDeliveryDestination","Write","control",[202],[0],1],["logs:DeleteDeliveryDestinationPolicy","Write","control",[202],[0],1],["logs:DeleteDeliverySource","Write","control",[202],[0],1],["logs:DeleteDestination","Write","control",[202],[0],1],["logs:DeleteIndexPolicy","Write","control",[202],[0],1],["logs:DeleteIntegration","Write","control",[202],[0],1],["logs:DeleteLogAnomalyDetector","Write","control",[202],[0],1],["logs:DeleteLogDelivery","Write","unclassified",[202],[0],1],["logs:DeleteLogGroup","Write","control",[202],[0],1],["logs:DeleteLogStream","Write","control",[202],[0],1],["logs:DeleteLookupTable","Write","control",[202],[0],1],["logs:DeleteMetricFilter","Write","control",[202],[0],1],["logs:DeletePipelineRule","Write","unclassified",[202],[0],1],["logs:DeleteQueryDefinition","Write","control",[202],[0],1],["logs:DeleteResourcePolicy","Permissions management","control",[202],[0],1],["logs:DeleteRetentionPolicy","Write","control",[202],[0],1],["logs:DeleteScheduledQuery","Write","control",[202],[0],1],["logs:DeleteSubscriptionFilter","Write","control",[202],[0],1],["logs:DeleteSyslogConfiguration","Write","control",[202],[0],1],["logs:DeleteTransformer","Write","control",[202],[0],1],["logs:DescribeAccountPolicies","List","control",[202],[0],1],["logs:DescribeConfigurationTemplates","List","control",[202],[0],1],["logs:DescribeDeliveries","List","control",[202],[0],1],["logs:DescribeDeliveryDestinations","List","control",[202],[0],1],["logs:DescribeDeliverySources","List","control",[202],[0],1],["logs:DescribeDestinations","List","control",[202],[0],1],["logs:DescribeExportTasks","List","control",[202],[0],1],["logs:DescribeFieldIndexes","List","control",[202],[0],1],["logs:DescribeImportTaskBatches","List","control",[202],[0],1],["logs:DescribeImportTasks","List","control",[202],[0],1],["logs:DescribeIndexPolicies","List","control",[202],[0],1],["logs:DescribeLogGroups","List","control",[202],[0],1],["logs:DescribeLogStreams","List","control",[202],[0],1],["logs:DescribeLookupTables","List","control",[202],[0],1],["logs:DescribeMetricFilters","List","control",[202],[0],1],["logs:DescribeQueries","List","control",[202],[0],1],["logs:DescribeQueryDefinitions","List","control",[202],[0],1],["logs:DescribeResourcePolicies","List","control",[202],[0],1],["logs:DescribeSubscriptionFilters","List","control",[202],[0],1],["logs:DisassociateKmsKey","Write","control",[202],[0],1],["logs:DisassociateSourceFromS3TableIntegration","Write","control",[202],[0],1],["logs:FilterLogEvents","Read","control",[202],[0],1],["logs:GetDataProtectionPolicy","Read","control",[202],[0],1],["logs:GetDelivery","Read","control",[202],[0],1],["logs:GetDeliveryDestination","Read","control",[202],[0],1],["logs:GetDeliveryDestinationPolicy","Read","control",[202],[0],1],["logs:GetDeliverySource","Read","control",[202],[0],1],["logs:GetIntegration","Read","control",[202],[0],1],["logs:GetLogAnomalyDetector","Read","control",[202],[0],1],["logs:GetLogDelivery","Read","unclassified",[202],[0],1],["logs:GetLogEvents","Read","control",[202],[0],1],["logs:GetLogFields","Read","control",[202],[0],1],["logs:GetLogGroupFields","Read","control",[202],[0],1],["logs:GetLogRecord","Read","control",[202],[0],1],["logs:GetLookupTable","Read","control",[202],[0],1],["logs:GetQueryResults","Read","control",[202],[0],1],["logs:GetScheduledQuery","Read","control",[202],[0],1],["logs:GetScheduledQueryHistory","Read","control",[202],[0],1],["logs:GetStorageTierPolicy","Read","control",[202],[0],1],["logs:GetTransformer","Read","control",[202],[0],1],["logs:IntegrateWithDataset","Write","unclassified",[202],[0],1],["logs:IntegrateWithS3Table","Write","unclassified",[202],[0],1],["logs:Link","Write","unclassified",[202],[0],1],["logs:ListAggregateLogGroupSummaries","List","control",[202],[0],1],["logs:ListAnomalies","List","control",[202],[0],1],["logs:ListEntitiesForLogGroup","List","unclassified",[202],[0],1],["logs:ListIntegrations","List","control",[202],[0],1],["logs:ListLogAnomalyDetectors","List","control",[202],[0],1],["logs:ListLogDeliveries","List","unclassified",[202],[0],1],["logs:ListLogGroups","List","control",[202],[0],1],["logs:ListLogGroupsForEntity","List","unclassified",[202],[0],1],["logs:ListLogGroupsForQuery","List","control",[202],[0],1],["logs:ListScheduledQueries","List","control",[202],[0],1],["logs:ListSourcesForS3TableIntegration","List","control",[202],[0],1],["logs:ListSyslogConfigurations","List","control",[202],[0],1],["logs:ListTagsForResource","List","control",[202],[0],1],["logs:ListTagsLogGroup","List","control",[202],[0],1],["logs:ProcessWithPipeline","Write","unclassified",[202],[0],1],["logs:PutAccountPolicy","Write","control",[202],[0],1],["logs:PutBearerTokenAuthentication","Write","control",[202],[0],1],["logs:PutDataProtectionPolicy","Write","control",[202],[0],1],["logs:PutDeliveryDestination","Write","control",[202],[0],1],["logs:PutDeliveryDestinationPolicy","Write","control",[202],[0],1],["logs:PutDeliverySource","Write","control",[202],[0],1],["logs:PutDestination","Write","control",[202],[0],1],["logs:PutDestinationPolicy","Write","control",[202],[0],1],["logs:PutIndexPolicy","Write","control",[202],[0],1],["logs:PutIntegration","Write","control",[202],[0],1],["logs:PutLogEvents","Write","unclassified",[202],[0],1],["logs:PutLogGroupDeletionProtection","Write","control",[202],[0],1],["logs:PutMetricFilter","Write","control",[202],[0],1],["logs:PutPipelineRule","Write","unclassified",[202],[0],1],["logs:PutQueryDefinition","Write","control",[202],[0],1],["logs:PutResourcePolicy","Permissions management","control",[202],[0],1],["logs:PutRetentionPolicy","Write","control",[202],[0],1],["logs:PutStorageTierPolicy","Write","control",[202],[0],1],["logs:PutSubscriptionFilter","Write","control",[202],[0],1],["logs:PutSyslogConfiguration","Write","control",[202],[0],1],["logs:PutTransformer","Write","control",[202],[0],1],["logs:StartLiveTail","Read","unclassified",[202],[0],1],["logs:StartQuery","Read","control",[202],[0],1],["logs:StopLiveTail","Read","unclassified",[202],[0],1],["logs:StopQuery","Read","control",[202],[0],1],["logs:TagLogGroup","Tagging","control",[202],[0],1],["logs:TagResource","Tagging","control",[202],[0],1],["logs:TestMetricFilter","Read","control",[202],[0],1],["logs:TestTransformer","Read","control",[202],[0],1],["logs:Unmask","Read","control",[202],[0],1],["logs:UntagLogGroup","Tagging","control",[202],[0],1],["logs:UntagResource","Tagging","control",[202],[0],1],["logs:UpdateAnomaly","Write","control",[202],[0],1],["logs:UpdateDeliveryConfiguration","Write","control",[202],[0],1],["logs:UpdateLogAnomalyDetector","Write","control",[202],[0],1],["logs:UpdateLogDelivery","Write","unclassified",[202],[0],1],["logs:UpdateLookupTable","Write","control",[202],[0],1],["logs:UpdateScheduledQuery","Write","control",[202],[0],1]]},{"prefix":"rds","rows":[["rds:DescribeAccountAttributes","List","control",[203],[0],1],["rds:DescribeBlueGreenDeployments","List","control",[203],[0],1],["rds:DescribeCertificates","List","control",[203],[0],1],["rds:DescribeDBCapacityReservations","List","control",[203],[0],1],["rds:DescribeDBClusterAutomatedBackups","List","control",[203],[0],1],["rds:DescribeDBClusterBacktracks","List","control",[203],[0],1],["rds:DescribeDBClusterEndpoints","List","control",[203],[0],1],["rds:DescribeDBClusterParameterGroups","List","control",[203],[0],1],["rds:DescribeDBClusterParameters","List","control",[203],[0],1],["rds:DescribeDBClusterSnapshotAttributes","List","control",[203],[0],1],["rds:DescribeDBClusterSnapshots","List","control",[203],[0],1],["rds:DescribeDBClusters","List","control",[203],[0],1],["rds:DescribeDBEngineVersions","List","control",[203],[0],1],["rds:DescribeDBInstanceAutomatedBackups","List","control",[203],[0],1],["rds:DescribeDBInstances","List","control",[203],[0],1],["rds:DescribeDBLogFiles","List","control",[203],[0],1],["rds:DescribeDBMajorEngineVersions","List","control",[203],[0],1],["rds:DescribeDBParameterGroups","List","control",[203],[0],1],["rds:DescribeDBParameters","List","control",[203],[0],1],["rds:DescribeDBProxies","List","control",[203],[0],1],["rds:DescribeDBProxyEndpoints","List","control",[203],[0],1],["rds:DescribeDBProxyTargetGroups","List","control",[203],[0],1],["rds:DescribeDBProxyTargets","List","control",[203],[0],1],["rds:DescribeDBRecommendations","List","control",[203],[0],1],["rds:DescribeDBSecurityGroups","List","control",[203],[0],1],["rds:DescribeDBShardGroups","List","control",[203],[0],1],["rds:DescribeDBSnapshotAttributes","List","control",[203],[0],1],["rds:DescribeDBSnapshotTenantDatabases","List","control",[203],[0],1],["rds:DescribeDBSnapshots","List","control",[203],[0],1],["rds:DescribeDBSubnetGroups","List","control",[203],[0],1],["rds:DescribeEngineDefaultClusterParameters","List","control",[203],[0],1],["rds:DescribeEngineDefaultParameters","List","control",[203],[0],1],["rds:DescribeEventCategories","List","control",[203],[0],1],["rds:DescribeEventSubscriptions","List","control",[203],[0],1],["rds:DescribeEvents","List","control",[203],[0],1],["rds:DescribeExportTasks","List","control",[203],[0],1],["rds:DescribeGlobalClusters","List","control",[203],[0],1],["rds:DescribeIntegrations","List","control",[203],[0],1],["rds:DescribeOptionGroupOptions","List","control",[203],[0],1],["rds:DescribeOptionGroups","List","control",[203],[0],1],["rds:DescribeOrderableDBInstanceOptions","List","control",[203],[0],1],["rds:DescribePendingMaintenanceActions","List","control",[203],[0],1],["rds:DescribeRecommendationGroups","Read","unclassified",[203],[0],1],["rds:DescribeRecommendations","Read","unclassified",[203],[0],1],["rds:DescribeReservedDBInstances","List","control",[203],[0],1],["rds:DescribeReservedDBInstancesOfferings","List","control",[203],[0],1],["rds:DescribeSourceRegions","List","control",[203],[0],1],["rds:DescribeTenantDatabases","List","control",[203],[0],1],["rds:DescribeValidDBInstanceModifications","List","control",[203],[0],1],["rds:ListTagsForResource","Read","control",[204],[0],1]]},{"prefix":"rolesanywhere","rows":[["rolesanywhere:GetCrl","Read","control",[205],[0],1],["rolesanywhere:GetProfile","Read","control",[206],[0],1],["rolesanywhere:GetSubject","Read","control",[207],[0],1],["rolesanywhere:GetTrustAnchor","Read","control",[208],[0],1],["rolesanywhere:ListCrls","List","control",[209],[0],1],["rolesanywhere:ListProfiles","List","control",[210],[0],1],["rolesanywhere:ListSubjects","List","control",[211],[0],1],["rolesanywhere:ListTagsForResource","List","control",[212],[0],1],["rolesanywhere:ListTrustAnchors","List","control",[213],[0],1],["rolesanywhere:PutNotificationSettings","Write","control",[214],[0],1],["rolesanywhere:ResetNotificationSettings","Write","control",[215],[0],1]]},{"prefix":"route53","rows":[["route53:ActivateKeySigningKey","Write","control",[216],[0],1],["route53:AssociateVPCWithHostedZone","Write","control",[216],[0],1],["route53:ChangeCidrCollection","Write","control",[216],[0],1],["route53:ChangeResourceRecordSets","Write","control",[216],[0],1],["route53:ChangeTagsForResource","Tagging","control",[216],[0],1],["route53:CreateCidrCollection","Write","control",[216],[0],1],["route53:CreateHealthCheck","Write","control",[216],[0],1],["route53:CreateHostedZone","Write","control",[216],[0],1],["route53:CreateKeySigningKey","Write","control",[216],[0],1],["route53:CreateQueryLoggingConfig","Write","control",[216],[0],1],["route53:CreateReusableDelegationSet","Write","control",[216],[0],1],["route53:CreateTrafficPolicy","Write","control",[216],[0],1],["route53:CreateTrafficPolicyInstance","Write","control",[216],[0],1],["route53:CreateTrafficPolicyVersion","Write","control",[216],[0],1],["route53:CreateVPCAssociationAuthorization","Write","control",[216],[0],1],["route53:DeactivateKeySigningKey","Write","control",[216],[0],1],["route53:DeleteCidrCollection","Write","control",[216],[0],1],["route53:DeleteHealthCheck","Write","control",[216],[0],1],["route53:DeleteHostedZone","Write","control",[216],[0],1],["route53:DeleteKeySigningKey","Write","control",[216],[0],1],["route53:DeleteQueryLoggingConfig","Write","control",[216],[0],1],["route53:DeleteReusableDelegationSet","Write","control",[216],[0],1],["route53:DeleteTrafficPolicy","Write","control",[216],[0],1],["route53:DeleteTrafficPolicyInstance","Write","control",[216],[0],1],["route53:DeleteVPCAssociationAuthorization","Write","control",[216],[0],1],["route53:DisableHostedZoneDNSSEC","Write","control",[216],[0],1],["route53:DisassociateVPCFromHostedZone","Write","control",[216],[0],1],["route53:EnableHostedZoneDNSSEC","Write","control",[216],[0],1],["route53:GetAccountLimit","Read","control",[216],[0],1],["route53:GetChange","List","control",[216],[0],1],["route53:GetCheckerIpRanges","List","control",[216],[0],1],["route53:GetDNSSEC","Read","control",[216],[0],1],["route53:GetGeoLocation","List","control",[216],[0],1],["route53:GetHealthCheck","Read","control",[216],[0],1],["route53:GetHealthCheckCount","List","control",[216],[0],1],["route53:GetHealthCheckLastFailureReason","List","control",[216],[0],1],["route53:GetHealthCheckStatus","List","control",[216],[0],1],["route53:GetHostedZone","List","control",[216],[0],1],["route53:GetHostedZoneCount","List","control",[216],[0],1],["route53:GetHostedZoneLimit","Read","control",[216],[0],1],["route53:GetQueryLoggingConfig","Read","control",[216],[0],1],["route53:GetReusableDelegationSet","List","control",[216],[0],1],["route53:GetReusableDelegationSetLimit","Read","control",[216],[0],1],["route53:GetTrafficPolicy","Read","control",[216],[0],1],["route53:GetTrafficPolicyInstance","Read","control",[216],[0],1],["route53:GetTrafficPolicyInstanceCount","Read","control",[216],[0],1],["route53:ListCidrBlocks","List","control",[216],[0],1],["route53:ListCidrCollections","List","control",[216],[0],1],["route53:ListCidrLocations","List","control",[216],[0],1],["route53:ListGeoLocations","Read","control",[216],[0],1],["route53:ListHealthChecks","Read","control",[216],[0],1],["route53:ListHostedZones","List","control",[216],[0],1],["route53:ListHostedZonesByName","List","control",[216],[0],1],["route53:ListHostedZonesByVPC","List","control",[216],[0],1],["route53:ListQueryLoggingConfigs","List","control",[216],[0],1],["route53:ListResourceRecordSets","List","control",[216],[0],1],["route53:ListReusableDelegationSets","Read","control",[216],[0],1],["route53:ListTagsForResource","Read","control",[216],[0],1],["route53:ListTagsForResources","Read","control",[216],[0],1],["route53:ListTrafficPolicies","List","control",[216],[0],1],["route53:ListTrafficPolicyInstances","Read","control",[216],[0],1],["route53:ListTrafficPolicyInstancesByHostedZone","List","control",[216],[0],1],["route53:ListTrafficPolicyInstancesByPolicy","List","control",[216],[0],1],["route53:ListTrafficPolicyVersions","List","control",[216],[0],1],["route53:ListVPCAssociationAuthorizations","List","control",[216],[0],1],["route53:TestDNSAnswer","Read","control",[216],[0],1],["route53:UpdateHealthCheck","Write","control",[216],[0],1],["route53:UpdateHostedZoneComment","Write","control",[216],[0],1],["route53:UpdateHostedZoneFeatures","Write","control",[216],[0],1],["route53:UpdateTrafficPolicyComment","Write","control",[216],[0],1],["route53:UpdateTrafficPolicyInstance","Write","control",[216],[0],1]]},{"prefix":"route53domains","rows":[["route53domains:AcceptDomainTransferFromAnotherAwsAccount","Write","control",[217],[0],1],["route53domains:AssociateDelegationSignerToDomain","Write","control",[217],[0],1],["route53domains:CancelDomainTransferToAnotherAwsAccount","Write","control",[217],[0],1],["route53domains:CheckDomainAvailability","Read","control",[217],[0],1],["route53domains:CheckDomainTransferability","Read","control",[217],[0],1],["route53domains:DeleteDomain","Write","control",[217],[0],1],["route53domains:DeleteTagsForDomain","Tagging","control",[217],[0],1],["route53domains:DisableDomainAutoRenew","Write","control",[217],[0],1],["route53domains:DisableDomainTransferLock","Write","control",[217],[0],1],["route53domains:DisassociateDelegationSignerFromDomain","Write","control",[217],[0],1],["route53domains:EnableDomainAutoRenew","Write","control",[217],[0],1],["route53domains:EnableDomainTransferLock","Write","control",[217],[0],1],["route53domains:GetContactReachabilityStatus","Read","control",[217],[0],1],["route53domains:GetDomainDetail","Read","control",[217],[0],1],["route53domains:GetDomainPrices","Read","control",[217],[0],1],["route53domains:GetDomainSuggestions","Read","control",[217],[0],1],["route53domains:GetOperationDetail","Read","control",[217],[0],1],["route53domains:ListDomains","List","control",[217],[0],1],["route53domains:ListOperations","List","control",[217],[0],1],["route53domains:ListPrices","List","control",[217],[0],1],["route53domains:ListTagsForDomain","Read","control",[217],[0],1],["route53domains:PushDomain","Write","control",[217],[0],1],["route53domains:RegisterDomain","Write","control",[217],[0],1],["route53domains:RejectDomainTransferFromAnotherAwsAccount","Write","control",[217],[0],1],["route53domains:RenewDomain","Write","control",[217],[0],1],["route53domains:ResendContactReachabilityEmail","Write","control",[217],[0],1],["route53domains:ResendOperationAuthorization","Write","control",[217],[0],1],["route53domains:RestoreDomain","Write","control",[217],[0],1],["route53domains:RetrieveDomainAuthCode","Write","control",[217],[0],1],["route53domains:TransferDomain","Write","control",[217],[0],1],["route53domains:TransferDomainToAnotherAwsAccount","Write","control",[217],[0],1],["route53domains:UpdateDomainContact","Write","control",[217],[0],1],["route53domains:UpdateDomainContactPrivacy","Write","control",[217],[0],1],["route53domains:UpdateDomainNameservers","Write","control",[217],[0],1],["route53domains:UpdateTagsForDomain","Tagging","control",[217],[0],1],["route53domains:ViewBilling","Read","control",[217],[0],1]]},{"prefix":"s3","rows":[["s3:AbortMultipartUpload","Write","data",[218],[2],1],["s3:AllowVendedLogDeliveryForResource","Read","unclassified",[218],[2],1],["s3:AssociateAccessGrantsIdentityCenter","Permissions management","control",[218],[2],1],["s3:BypassGovernanceRetention","Permissions management","data",[218],[2],1],["s3:CreateAccessGrant","Permissions management","control",[218],[2],1],["s3:CreateAccessGrantsInstance","Permissions management","control",[218],[2],1],["s3:CreateAccessGrantsLocation","Permissions management","control",[218],[2],1],["s3:CreateAccessPoint","Write","control",[218],[2],1],["s3:CreateAccessPointForObjectLambda","Write","control",[218],[2],1],["s3:CreateBucket","Write","control",[218],[2],1],["s3:CreateBucketMetadataTableConfiguration","Write","control",[218],[2],1],["s3:CreateJob","Write","control",[218],[2],1],["s3:CreateMultiRegionAccessPoint","Write","control",[218],[2],1],["s3:CreateStorageLensGroup","Write","control",[218],[2],1],["s3:DeleteAccessGrant","Permissions management","control",[218],[2],1],["s3:DeleteAccessGrantsInstance","Permissions management","control",[218],[2],1],["s3:DeleteAccessGrantsInstanceResourcePolicy","Permissions management","control",[218],[2],1],["s3:DeleteAccessGrantsLocation","Permissions management","control",[218],[2],1],["s3:DeleteAccessPoint","Write","control",[218],[2],1],["s3:DeleteAccessPointForObjectLambda","Write","control",[218],[2],1],["s3:DeleteAccessPointPolicy","Permissions management","control",[218],[2],1],["s3:DeleteAccessPointPolicyForObjectLambda","Permissions management","control",[218],[2],1],["s3:DeleteBucket","Write","control",[218],[2],1],["s3:DeleteBucketMetadataTableConfiguration","Write","control",[218],[2],1],["s3:DeleteBucketPolicy","Permissions management","control",[218],[2],1],["s3:DeleteBucketWebsite","Write","control",[218],[2],1],["s3:DeleteJobTagging","Tagging","control",[218],[2],1],["s3:DeleteMultiRegionAccessPoint","Write","control",[218],[2],1],["s3:DeleteObject","Write","data",[218],[2],1],["s3:DeleteObjectAnnotation","Write","unclassified",[218],[2],1],["s3:DeleteObjectTagging","Tagging","data",[218],[2],1],["s3:DeleteObjectVersion","Write","data",[218],[2],1],["s3:DeleteObjectVersionAnnotation","Write","unclassified",[218],[2],1],["s3:DeleteObjectVersionTagging","Tagging","data",[218],[2],1],["s3:DeleteStorageLensConfiguration","Write","control",[218],[2],1],["s3:DeleteStorageLensConfigurationTagging","Tagging","control",[218],[2],1],["s3:DeleteStorageLensGroup","Write","control",[218],[2],1],["s3:DescribeJob","Read","control",[218],[2],1],["s3:DescribeMultiRegionAccessPointOperation","Read","control",[218],[2],1],["s3:DissociateAccessGrantsIdentityCenter","Permissions management","control",[218],[2],1],["s3:GetAccelerateConfiguration","Read","unclassified",[218],[2],1],["s3:GetAccessGrant","Read","control",[218],[2],1],["s3:GetAccessGrantsInstance","Read","control",[218],[2],1],["s3:GetAccessGrantsInstanceForPrefix","Read","control",[218],[2],1],["s3:GetAccessGrantsInstanceResourcePolicy","Read","control",[218],[2],1],["s3:GetAccessGrantsLocation","Read","control",[218],[2],1],["s3:GetAccessPoint","Read","control",[218],[2],1],["s3:GetAccessPointConfigurationForObjectLambda","Read","control",[218],[2],1],["s3:GetAccessPointForObjectLambda","Read","control",[218],[2],1],["s3:GetAccessPointPolicy","Read","control",[218],[2],1],["s3:GetAccessPointPolicyForObjectLambda","Read","control",[218],[2],1],["s3:GetAccessPointPolicyStatus","Read","control",[218],[2],1],["s3:GetAccessPointPolicyStatusForObjectLambda","Read","control",[218],[2],1],["s3:GetAccountPublicAccessBlock","Read","unclassified",[218],[2],1],["s3:GetAnalyticsConfiguration","Read","control",[218],[2],1],["s3:GetBucketAbac","Read","unclassified",[218],[2],1],["s3:GetBucketAcl","Read","control",[218],[2],1],["s3:GetBucketCORS","Read","control",[218],[2],1],["s3:GetBucketLocation","Read","control",[218],[2],1],["s3:GetBucketLogging","Read","control",[218],[2],1],["s3:GetBucketMetadataTableConfiguration","Read","control",[218],[2],1],["s3:GetBucketNotification","Read","control",[218],[2],1],["s3:GetBucketObjectLockConfiguration","Read","unclassified",[218],[2],1],["s3:GetBucketOwnershipControls","Read","control",[218],[2],1],["s3:GetBucketPolicy","Read","control",[218],[2],1],["s3:GetBucketPolicyStatus","Read","control",[218],[2],1],["s3:GetBucketPublicAccessBlock","Read","unclassified",[218],[2],1],["s3:GetBucketRequestPayment","Read","control",[218],[2],1],["s3:GetBucketTagging","Read","control",[218],[2],1],["s3:GetBucketVersioning","Read","control",[218],[2],1],["s3:GetBucketWebsite","Read","control",[218],[2],1],["s3:GetDataAccess","Read","control",[218],[2],1],["s3:GetEncryptionConfiguration","Read","control",[218],[2],1],["s3:GetIntelligentTieringConfiguration","Read","control",[218],[2],1],["s3:GetInventoryConfiguration","Read","control",[218],[2],1],["s3:GetJobTagging","Read","control",[218],[2],1],["s3:GetLifecycleConfiguration","Read","control",[218],[2],1],["s3:GetMetricsConfiguration","Read","control",[218],[2],1],["s3:GetMultiRegionAccessPoint","Read","control",[218],[2],1],["s3:GetMultiRegionAccessPointPolicy","Read","control",[218],[2],1],["s3:GetMultiRegionAccessPointPolicyStatus","Read","control",[218],[2],1],["s3:GetMultiRegionAccessPointRoutes","Read","control",[218],[2],1],["s3:GetObject","Read","data",[218],[2],1],["s3:GetObjectAcl","Read","data",[218],[2],1],["s3:GetObjectAnnotation","Read","unclassified",[218],[2],1],["s3:GetObjectAttributes","Read","unclassified",[218],[2],1],["s3:GetObjectLegalHold","Read","data",[218],[2],1],["s3:GetObjectRetention","Read","data",[218],[2],1],["s3:GetObjectTagging","Read","data",[218],[2],1],["s3:GetObjectTorrent","Read","unclassified",[218],[2],1],["s3:GetObjectVersion","Read","data",[218],[2],1],["s3:GetObjectVersionAcl","Read","data",[218],[2],1],["s3:GetObjectVersionAnnotation","Read","unclassified",[218],[2],1],["s3:GetObjectVersionAnnotationForReplication","Read","unclassified",[218],[2],1],["s3:GetObjectVersionAttributes","Read","unclassified",[218],[2],1],["s3:GetObjectVersionForReplication","Read","unclassified",[218],[2],1],["s3:GetObjectVersionTagging","Read","data",[218],[2],1],["s3:GetObjectVersionTorrent","Read","unclassified",[218],[2],1],["s3:GetReplicationConfiguration","Read","control",[218],[2],1],["s3:GetStorageLensConfiguration","Read","control",[218],[2],1],["s3:GetStorageLensConfigurationTagging","Read","control",[218],[2],1],["s3:GetStorageLensDashboard","Read","unclassified",[218],[2],1],["s3:GetStorageLensGroup","Read","control",[218],[2],1],["s3:InitiateReplication","Write","unclassified",[218],[2],1],["s3:ListAccessGrants","List","control",[218],[2],1],["s3:ListAccessGrantsInstances","List","control",[218],[2],1],["s3:ListAccessGrantsLocations","List","control",[218],[2],1],["s3:ListAccessPoints","List","control",[218],[2],1],["s3:ListAccessPointsForObjectLambda","List","control",[218],[2],1],["s3:ListAllMyBuckets","List","control",[218],[2],1],["s3:ListBucket","List","data",[218],[2],1],["s3:ListBucketMultipartUploads","List","control",[218],[2],1],["s3:ListBucketVersions","List","data",[218],[2],1],["s3:ListCallerAccessGrants","List","control",[218],[2],1],["s3:ListJobs","List","control",[218],[2],1],["s3:ListMultiRegionAccessPoints","List","control",[218],[2],1],["s3:ListMultipartUploadParts","List","data",[218],[2],1],["s3:ListObjectAnnotations","List","unclassified",[218],[2],1],["s3:ListObjectVersionAnnotations","List","unclassified",[218],[2],1],["s3:ListStorageLensConfigurations","List","control",[218],[2],1],["s3:ListStorageLensGroups","List","control",[218],[2],1],["s3:ListTagsForResource","List","control",[218],[2],1],["s3:ObjectOwnerOverrideToBucketOwner","Permissions management","unclassified",[218],[2],1],["s3:PauseReplication","Write","unclassified",[218],[2],1],["s3:PutAccelerateConfiguration","Write","unclassified",[218],[2],1],["s3:PutAccessGrantsInstanceResourcePolicy","Permissions management","control",[218],[2],1],["s3:PutAccessPointConfigurationForObjectLambda","Write","control",[218],[2],1],["s3:PutAccessPointPolicy","Permissions management","control",[218],[2],1],["s3:PutAccessPointPolicyForObjectLambda","Permissions management","control",[218],[2],1],["s3:PutAccessPointPublicAccessBlock","Permissions management","unclassified",[218],[2],1],["s3:PutAccountPublicAccessBlock","Permissions management","unclassified",[218],[2],1],["s3:PutAnalyticsConfiguration","Write","control",[218],[2],1],["s3:PutBucketAbac","Write","unclassified",[218],[2],1],["s3:PutBucketAcl","Permissions management","control",[218],[2],1],["s3:PutBucketCORS","Write","control",[218],[2],1],["s3:PutBucketLogging","Write","control",[218],[2],1],["s3:PutBucketNotification","Write","unclassified",[218],[2],1],["s3:PutBucketObjectLockConfiguration","Write","control",[218],[2],1],["s3:PutBucketOwnershipControls","Permissions management","control",[218],[2],1],["s3:PutBucketPolicy","Permissions management","control",[218],[2],1],["s3:PutBucketPublicAccessBlock","Permissions management","unclassified",[218],[2],1],["s3:PutBucketRequestPayment","Write","control",[218],[2],1],["s3:PutBucketTagging","Tagging","control",[218],[2],1],["s3:PutBucketVersioning","Write","control",[218],[2],1],["s3:PutBucketWebsite","Write","control",[218],[2],1],["s3:PutEncryptionConfiguration","Write","control",[218],[2],1],["s3:PutIntelligentTieringConfiguration","Write","control",[218],[2],1],["s3:PutInventoryConfiguration","Write","control",[218],[2],1],["s3:PutJobTagging","Tagging","control",[218],[2],1],["s3:PutLifecycleConfiguration","Write","control",[218],[2],1],["s3:PutMetricsConfiguration","Write","control",[218],[2],1],["s3:PutMultiRegionAccessPointPolicy","Permissions management","control",[218],[2],1],["s3:PutObject","Write","data",[218],[2],1],["s3:PutObjectAcl","Permissions management","data",[218],[2],1],["s3:PutObjectAnnotation","Write","unclassified",[218],[2],1],["s3:PutObjectLegalHold","Write","data",[218],[2],1],["s3:PutObjectRetention","Write","data",[218],[2],1],["s3:PutObjectTagging","Tagging","data",[218],[2],1],["s3:PutObjectVersionAcl","Permissions management","data",[218],[2],1],["s3:PutObjectVersionAnnotation","Write","unclassified",[218],[2],1],["s3:PutObjectVersionTagging","Tagging","data",[218],[2],1],["s3:PutReplicationConfiguration","Write","control",[218],[2],1],["s3:PutStorageLensConfiguration","Write","control",[218],[2],1],["s3:PutStorageLensConfigurationTagging","Tagging","control",[218],[2],1],["s3:ReplicateDelete","Write","unclassified",[218],[2],1],["s3:ReplicateObject","Write","unclassified",[218],[2],1],["s3:ReplicateObjectAnnotation","Write","unclassified",[218],[2],1],["s3:ReplicateTags","Tagging","unclassified",[218],[2],1],["s3:RestoreObject","Write","data",[218],[2],1],["s3:SubmitMultiRegionAccessPointRoutes","Write","control",[218],[2],1],["s3:TagResource","Tagging","control",[218],[2],1],["s3:UntagResource","Tagging","control",[218],[2],1],["s3:UpdateAccessGrantsLocation","Permissions management","control",[218],[2],1],["s3:UpdateBucketMetadataAnnotationTableConfiguration","Write","unclassified",[218],[2],1],["s3:UpdateBucketMetadataInventoryTableConfiguration","Write","control",[218],[2],1],["s3:UpdateBucketMetadataJournalTableConfiguration","Write","control",[218],[2],1],["s3:UpdateJobPriority","Write","control",[218],[2],1],["s3:UpdateJobStatus","Write","control",[218],[2],1],["s3:UpdateObjectEncryption","Write","unclassified",[218],[2],1],["s3:UpdateStorageLensGroup","Write","control",[218],[2],1]]},{"prefix":"ses","rows":[["ses:AllowVendedLogDeliveryForResource","Permissions management","unclassified",[219],[0],1],["ses:ApplyTrackingConfigurationOverrides","Permissions management","unclassified",[219],[0],1],["ses:AssociateEmailIdentityCertificate","Write","control",[219],[0],1],["ses:BatchGetMetricData","Read","control",[219],[0],1],["ses:CancelExportJob","Write","control",[219],[0],1],["ses:CloneReceiptRuleSet","Write","control",[219],[0],1],["ses:CreateAddonInstance","Write","control",[219],[0],1],["ses:CreateAddonSubscription","Write","control",[219],[0],1],["ses:CreateAddressList","Write","control",[219],[0],1],["ses:CreateAddressListImportJob","Write","control",[219],[0],1],["ses:CreateArchive","Write","control",[219],[0],1],["ses:CreateConfigurationSet","Write","control",[219],[0],1],["ses:CreateConfigurationSetEventDestination","Write","control",[219],[0],1],["ses:CreateConfigurationSetTrackingOptions","Write","control",[219],[0],1],["ses:CreateContact","Write","control",[219],[0],1],["ses:CreateContactList","Write","control",[219],[0],1],["ses:CreateCustomVerificationEmailTemplate","Write","control",[219],[0],1],["ses:CreateDedicatedIpPool","Write","control",[219],[0],1],["ses:CreateDeliverabilityTestReport","Write","control",[219],[0],1],["ses:CreateEmailIdentity","Write","control",[219],[0],1],["ses:CreateEmailIdentityPolicy","Permissions management","control",[219],[0],1],["ses:CreateEmailTemplate","Write","control",[219],[0],1],["ses:CreateExportJob","Write","control",[219],[0],1],["ses:CreateImportJob","Write","control",[219],[0],1],["ses:CreateIngressPoint","Write","control",[219],[0],1],["ses:CreateMultiRegionEndpoint","Write","control",[219],[0],1],["ses:CreateReceiptFilter","Write","control",[219],[0],1],["ses:CreateReceiptRule","Write","control",[219],[0],1],["ses:CreateReceiptRuleSet","Write","control",[219],[0],1],["ses:CreateRelay","Write","control",[219],[0],1],["ses:CreateRuleSet","Write","control",[219],[0],1],["ses:CreateTemplate","Write","control",[219],[0],1],["ses:CreateTenant","Write","control",[219],[0],1],["ses:CreateTenantResourceAssociation","Write","control",[219],[0],1],["ses:CreateTrafficPolicy","Write","control",[219],[0],1],["ses:DeleteAddonInstance","Write","control",[219],[0],1],["ses:DeleteAddonSubscription","Write","control",[219],[0],1],["ses:DeleteAddressList","Write","control",[219],[0],1],["ses:DeleteArchive","Write","control",[219],[0],1],["ses:DeleteConfigurationSet","Write","control",[219],[0],1],["ses:DeleteConfigurationSetEventDestination","Write","control",[219],[0],1],["ses:DeleteConfigurationSetTrackingOptions","Write","control",[219],[0],1],["ses:DeleteContact","Write","control",[219],[0],1],["ses:DeleteContactList","Write","control",[219],[0],1],["ses:DeleteCustomVerificationEmailTemplate","Write","control",[219],[0],1],["ses:DeleteDedicatedIpPool","Write","control",[219],[0],1],["ses:DeleteEmailIdentity","Write","control",[219],[0],1],["ses:DeleteEmailIdentityPolicy","Permissions management","control",[219],[0],1],["ses:DeleteEmailTemplate","Write","control",[219],[0],1],["ses:DeleteIdentity","Write","control",[219],[0],1],["ses:DeleteIdentityPolicy","Permissions management","control",[219],[0],1],["ses:DeleteIngressPoint","Write","control",[219],[0],1],["ses:DeleteMultiRegionEndpoint","Write","control",[219],[0],1],["ses:DeleteReceiptFilter","Write","control",[219],[0],1],["ses:DeleteReceiptRule","Write","control",[219],[0],1],["ses:DeleteReceiptRuleSet","Write","control",[219],[0],1],["ses:DeleteRelay","Write","control",[219],[0],1],["ses:DeleteRuleSet","Write","control",[219],[0],1],["ses:DeleteSuppressedDestination","Write","control",[219],[0],1],["ses:DeleteTemplate","Write","control",[219],[0],1],["ses:DeleteTenant","Write","control",[219],[0],1],["ses:DeleteTenantResourceAssociation","Write","control",[219],[0],1],["ses:DeleteTrafficPolicy","Write","control",[219],[0],1],["ses:DeleteVerifiedEmailAddress","Write","control",[219],[0],1],["ses:DeregisterMemberFromAddressList","Write","control",[219],[0],1],["ses:DescribeActiveReceiptRuleSet","Read","control",[219],[0],1],["ses:DescribeConfigurationSet","Read","control",[219],[0],1],["ses:DescribeReceiptRule","Read","control",[219],[0],1],["ses:DescribeReceiptRuleSet","Read","control",[219],[0],1],["ses:DisassociateEmailIdentityCertificate","Write","control",[219],[0],1],["ses:GetAccount","Read","control",[219],[0],1],["ses:GetAccountSendingEnabled","Read","control",[219],[0],1],["ses:GetAddonInstance","Read","control",[219],[0],1],["ses:GetAddonSubscription","Read","control",[219],[0],1],["ses:GetAddressList","Read","control",[219],[0],1],["ses:GetAddressListImportJob","Read","control",[219],[0],1],["ses:GetArchive","Read","control",[219],[0],1],["ses:GetArchiveExport","Read","control",[219],[0],1],["ses:GetArchiveMessage","Read","control",[219],[0],1],["ses:GetArchiveMessageContent","Read","control",[219],[0],1],["ses:GetArchiveSearch","Read","control",[219],[0],1],["ses:GetArchiveSearchResults","Read","control",[219],[0],1],["ses:GetBlacklistReports","Read","control",[219],[0],1],["ses:GetConfigurationSet","Read","control",[219],[0],1],["ses:GetConfigurationSetEventDestinations","Read","control",[219],[0],1],["ses:GetContact","Read","control",[219],[0],1],["ses:GetContactList","Read","control",[219],[0],1],["ses:GetCustomVerificationEmailTemplate","Read","control",[219],[0],1],["ses:GetDedicatedIp","Read","control",[219],[0],1],["ses:GetDedicatedIpPool","Read","control",[219],[0],1],["ses:GetDedicatedIps","Read","control",[219],[0],1],["ses:GetDeliverabilityDashboardOptions","Read","control",[219],[0],1],["ses:GetDeliverabilityTestReport","Read","control",[219],[0],1],["ses:GetDomainDeliverabilityCampaign","Read","control",[219],[0],1],["ses:GetDomainStatisticsReport","Read","control",[219],[0],1],["ses:GetEmailAddressInsights","Read","control",[219],[0],1],["ses:GetEmailIdentity","Read","control",[219],[0],1],["ses:GetEmailIdentityPolicies","Read","control",[219],[0],1],["ses:GetEmailTemplate","Read","control",[219],[0],1],["ses:GetExportJob","Read","control",[219],[0],1],["ses:GetIdentityDkimAttributes","Read","control",[219],[0],1],["ses:GetIdentityMailFromDomainAttributes","Read","control",[219],[0],1],["ses:GetIdentityNotificationAttributes","Read","control",[219],[0],1],["ses:GetIdentityPolicies","Read","control",[219],[0],1],["ses:GetIdentityVerificationAttributes","Read","control",[219],[0],1],["ses:GetImportJob","Read","control",[219],[0],1],["ses:GetIngressPoint","Read","control",[219],[0],1],["ses:GetMemberOfAddressList","Read","control",[219],[0],1],["ses:GetMessageInsights","Read","control",[219],[0],1],["ses:GetMultiRegionEndpoint","Read","control",[219],[0],1],["ses:GetRelay","Read","control",[219],[0],1],["ses:GetReputationEntity","Read","control",[219],[0],1],["ses:GetRuleSet","Read","control",[219],[0],1],["ses:GetSendQuota","Read","control",[219],[0],1],["ses:GetSendStatistics","Read","control",[219],[0],1],["ses:GetSuppressedDestination","Read","control",[219],[0],1],["ses:GetTemplate","Read","control",[219],[0],1],["ses:GetTenant","Read","control",[219],[0],1],["ses:GetTrafficPolicy","Read","control",[219],[0],1],["ses:ListAddonInstances","List","control",[219],[0],1],["ses:ListAddonSubscriptions","List","control",[219],[0],1],["ses:ListAddressListImportJobs","List","control",[219],[0],1],["ses:ListAddressLists","List","control",[219],[0],1],["ses:ListArchiveExports","List","control",[219],[0],1],["ses:ListArchiveSearches","List","control",[219],[0],1],["ses:ListArchives","List","control",[219],[0],1],["ses:ListConfigurationSets","List","control",[219],[0],1],["ses:ListContactLists","List","control",[219],[0],1],["ses:ListContacts","List","control",[219],[0],1],["ses:ListCustomVerificationEmailTemplates","List","control",[219],[0],1],["ses:ListDedicatedIpPools","List","control",[219],[0],1],["ses:ListDeliverabilityTestReports","List","control",[219],[0],1],["ses:ListDomainDeliverabilityCampaigns","Read","control",[219],[0],1],["ses:ListEmailIdentities","List","control",[219],[0],1],["ses:ListEmailIdentityCertificates","List","control",[219],[0],1],["ses:ListEmailTemplates","List","control",[219],[0],1],["ses:ListExportJobs","List","control",[219],[0],1],["ses:ListIdentities","List","control",[219],[0],1],["ses:ListIdentityPolicies","List","control",[219],[0],1],["ses:ListImportJobs","List","control",[219],[0],1],["ses:ListIngressPoints","List","control",[219],[0],1],["ses:ListMembersOfAddressList","List","control",[219],[0],1],["ses:ListMultiRegionEndpoints","List","control",[219],[0],1],["ses:ListReceiptFilters","Read","control",[219],[0],1],["ses:ListReceiptRuleSets","Read","control",[219],[0],1],["ses:ListRecommendations","Read","control",[219],[0],1],["ses:ListRelays","List","control",[219],[0],1],["ses:ListReputationEntities","List","control",[219],[0],1],["ses:ListResourceTenants","List","control",[219],[0],1],["ses:ListRuleSets","List","control",[219],[0],1],["ses:ListSuppressedDestinations","Read","control",[219],[0],1],["ses:ListTagsForResource","Read","control",[219],[0],1],["ses:ListTemplates","List","control",[219],[0],1],["ses:ListTenantResources","List","control",[219],[0],1],["ses:ListTenants","List","control",[219],[0],1],["ses:ListTrafficPolicies","List","control",[219],[0],1],["ses:ListVerifiedEmailAddresses","Read","control",[219],[0],1],["ses:PutAccountDedicatedIpWarmupAttributes","Write","control",[219],[0],1],["ses:PutAccountDetails","Write","control",[219],[0],1],["ses:PutAccountPricingAttributes","Write","control",[219],[0],1],["ses:PutAccountSendingAttributes","Write","control",[219],[0],1],["ses:PutAccountSuppressionAttributes","Write","control",[219],[0],1],["ses:PutAccountVdmAttributes","Write","control",[219],[0],1],["ses:PutConfigurationSetArchivingOptions","Write","control",[219],[0],1],["ses:PutConfigurationSetDeliveryOptions","Write","control",[219],[0],1],["ses:PutConfigurationSetReputationOptions","Write","control",[219],[0],1],["ses:PutConfigurationSetSendingOptions","Write","control",[219],[0],1],["ses:PutConfigurationSetSuppressionOptions","Write","control",[219],[0],1],["ses:PutConfigurationSetTrackingOptions","Write","control",[219],[0],1],["ses:PutConfigurationSetVdmOptions","Write","control",[219],[0],1],["ses:PutDedicatedIpInPool","Write","control",[219],[0],1],["ses:PutDedicatedIpPoolScalingAttributes","Write","control",[219],[0],1],["ses:PutDedicatedIpWarmupAttributes","Write","control",[219],[0],1],["ses:PutDeliverabilityDashboardOption","Write","control",[219],[0],1],["ses:PutEmailIdentityConfigurationSetAttributes","Write","control",[219],[0],1],["ses:PutEmailIdentityDkimAttributes","Write","control",[219],[0],1],["ses:PutEmailIdentityDkimSigningAttributes","Write","control",[219],[0],1],["ses:PutEmailIdentityFeedbackAttributes","Write","control",[219],[0],1],["ses:PutEmailIdentityMailFromAttributes","Write","control",[219],[0],1],["ses:PutIdentityPolicy","Permissions management","control",[219],[0],1],["ses:PutSuppressedDestination","Write","control",[219],[0],1],["ses:PutTenantSuppressionAttributes","Write","control",[219],[0],1],["ses:RegisterMemberToAddressList","Write","control",[219],[0],1],["ses:ReorderReceiptRuleSet","Write","control",[219],[0],1],["ses:ReplicateEmailIdentityDkimSigningKey","Permissions management","unclassified",[219],[0],1],["ses:SendBounce","Write","unclassified",[219],[0],1],["ses:SendBulkEmail","Write","data",[219],[0],1],["ses:SendBulkTemplatedEmail","Write","unclassified",[219],[0],1],["ses:SendCustomVerificationEmail","Write","control",[219],[0],1],["ses:SendEmail","Write","unclassified",[219],[0],1],["ses:SendRawEmail","Write","unclassified",[219],[0],1],["ses:SendTemplatedEmail","Write","data",[219],[0],1],["ses:SetActiveReceiptRuleSet","Write","control",[219],[0],1],["ses:SetIdentityDkimEnabled","Write","control",[219],[0],1],["ses:SetIdentityFeedbackForwardingEnabled","Write","control",[219],[0],1],["ses:SetIdentityHeadersInNotificationsEnabled","Write","control",[219],[0],1],["ses:SetIdentityMailFromDomain","Write","control",[219],[0],1],["ses:SetIdentityNotificationTopic","Write","control",[219],[0],1],["ses:SetReceiptRulePosition","Write","control",[219],[0],1],["ses:StartAddressListImportJob","Write","control",[219],[0],1],["ses:StartArchiveExport","Write","control",[219],[0],1],["ses:StartArchiveSearch","Write","control",[219],[0],1],["ses:StopAddressListImportJob","Write","control",[219],[0],1],["ses:StopArchiveExport","Write","control",[219],[0],1],["ses:StopArchiveSearch","Write","control",[219],[0],1],["ses:TagResource","Tagging","control",[219],[0],1],["ses:TestRenderEmailTemplate","Write","control",[219],[0],1],["ses:TestRenderTemplate","Write","control",[219],[0],1],["ses:UntagResource","Tagging","control",[219],[0],1],["ses:UpdateAccountSendingEnabled","Write","control",[219],[0],1],["ses:UpdateArchive","Write","control",[219],[0],1],["ses:UpdateConfigurationSet","Write","control",[219],[0],1],["ses:UpdateConfigurationSetEventDestination","Write","control",[219],[0],1],["ses:UpdateConfigurationSetReputationMetricsEnabled","Write","control",[219],[0],1],["ses:UpdateConfigurationSetSendingEnabled","Write","control",[219],[0],1],["ses:UpdateConfigurationSetTrackingOptions","Write","control",[219],[0],1],["ses:UpdateContact","Write","control",[219],[0],1],["ses:UpdateContactList","Write","control",[219],[0],1],["ses:UpdateCustomVerificationEmailTemplate","Write","control",[219],[0],1],["ses:UpdateEmailIdentityPolicy","Permissions management","control",[219],[0],1],["ses:UpdateEmailTemplate","Write","control",[219],[0],1],["ses:UpdateIngressPoint","Write","control",[219],[0],1],["ses:UpdateReceiptRule","Write","control",[219],[0],1],["ses:UpdateRelay","Write","control",[219],[0],1],["ses:UpdateReputationEntityCustomerManagedStatus","Write","control",[219],[0],1],["ses:UpdateReputationEntityPolicy","Write","control",[219],[0],1],["ses:UpdateRuleSet","Write","control",[219],[0],1],["ses:UpdateTemplate","Write","control",[219],[0],1],["ses:UpdateTrafficPolicy","Write","control",[219],[0],1],["ses:VerifyDomainDkim","Write","control",[219],[0],1],["ses:VerifyDomainIdentity","Write","control",[219],[0],1],["ses:VerifyEmailAddress","Write","control",[219],[0],1],["ses:VerifyEmailIdentity","Write","control",[219],[0],1]]},{"prefix":"sns","rows":[["sns:AddPermission","Permissions management","control",[220],[0],1],["sns:CheckIfPhoneNumberIsOptedOut","Read","control",[220],[0],1],["sns:ConfirmSubscription","Write","control",[220],[0],1],["sns:CreatePlatformApplication","Write","control",[220],[0],1],["sns:CreatePlatformEndpoint","Write","control",[220],[0],1],["sns:CreateSMSSandboxPhoneNumber","Write","control",[220],[0],1],["sns:CreateTopic","Write","control",[220],[0],1],["sns:DeleteEndpoint","Write","control",[220],[0],1],["sns:DeletePlatformApplication","Write","control",[220],[0],1],["sns:DeleteSMSSandboxPhoneNumber","Write","control",[220],[0],1],["sns:DeleteTopic","Write","control",[220],[0],1],["sns:GetDataProtectionPolicy","Read","control",[220],[0],1],["sns:GetEndpointAttributes","Read","control",[220],[0],1],["sns:GetPlatformApplicationAttributes","Read","control",[220],[0],1],["sns:GetSMSAttributes","Read","control",[220],[0],1],["sns:GetSMSSandboxAccountStatus","Read","control",[220],[0],1],["sns:GetSubscriptionAttributes","Read","control",[220],[0],1],["sns:GetTopicAttributes","Read","control",[220],[0],1],["sns:ListEndpointsByPlatformApplication","List","control",[220],[0],1],["sns:ListOriginationNumbers","List","control",[220],[0],1],["sns:ListPhoneNumbersOptedOut","Read","control",[220],[0],1],["sns:ListPlatformApplications","List","control",[220],[0],1],["sns:ListSMSSandboxPhoneNumbers","List","control",[220],[0],1],["sns:ListSubscriptions","List","control",[220],[0],1],["sns:ListSubscriptionsByTopic","List","control",[220],[0],1],["sns:ListTagsForResource","Read","control",[220],[0],1],["sns:ListTopics","List","control",[220],[0],1],["sns:OptInPhoneNumber","Write","control",[220],[0],1],["sns:Publish","Write","data",[220],[0],1],["sns:PutDataProtectionPolicy","Write","control",[220],[0],1],["sns:RemovePermission","Permissions management","control",[220],[0],1],["sns:SetEndpointAttributes","Write","control",[220],[0],1],["sns:SetPlatformApplicationAttributes","Write","control",[220],[0],1],["sns:SetSMSAttributes","Write","control",[220],[0],1],["sns:SetSubscriptionAttributes","Write","control",[220],[0],1],["sns:SetTopicAttributes","Permissions management","control",[220],[0],1],["sns:Subscribe","Write","control",[220],[0],1],["sns:TagResource","Tagging","control",[220],[0],1],["sns:Unsubscribe","Write","control",[220],[0],1],["sns:UntagResource","Tagging","control",[220],[0],1],["sns:VerifySMSSandboxPhoneNumber","Write","control",[220],[0],1]]},{"prefix":"sqs","rows":[["sqs:AddPermission","Permissions management","unclassified",[221],[0],1],["sqs:CancelMessageMoveTask","Write","unclassified",[221],[0],1],["sqs:ChangeMessageVisibility","Write","unclassified",[221],[0],1],["sqs:CreateQueue","Write","unclassified",[221],[0],1],["sqs:DeleteMessage","Write","unclassified",[221],[0],1],["sqs:DeleteQueue","Write","unclassified",[221],[0],1],["sqs:GetQueueAttributes","Read","unclassified",[221],[0],1],["sqs:GetQueueUrl","Read","unclassified",[221],[0],1],["sqs:ListDeadLetterSourceQueues","Read","unclassified",[221],[0],1],["sqs:ListMessageMoveTasks","Read","unclassified",[221],[0],1],["sqs:ListQueueTags","Read","unclassified",[221],[0],1],["sqs:ListQueues","Read","unclassified",[221],[0],1],["sqs:PurgeQueue","Write","unclassified",[221],[0],1],["sqs:ReceiveMessage","Read","unclassified",[221],[0],1],["sqs:RemovePermission","Permissions management","unclassified",[221],[0],1],["sqs:SendMessage","Write","unclassified",[221],[0],1],["sqs:SetQueueAttributes","Permissions management","unclassified",[221],[0],1],["sqs:StartMessageMoveTask","Write","unclassified",[221],[0],1],["sqs:TagQueue","Tagging","unclassified",[221],[0],1],["sqs:UntagQueue","Tagging","unclassified",[221],[0],1]]},{"prefix":"trustedadvisor","rows":[["trustedadvisor:BatchUpdateRecommendationResourceExclusion","Write","control",[222],[0],1],["trustedadvisor:DeleteNotificationConfigurationForDelegatedAdmin","Write","unclassified",[222],[0],1],["trustedadvisor:DescribeAccount","Read","unclassified",[222],[0],1],["trustedadvisor:DescribeAccountAccess","Read","unclassified",[222],[0],1],["trustedadvisor:DescribeCheckItems","Read","control",[222],[0],1],["trustedadvisor:DescribeCheckRefreshStatuses","Read","unclassified",[222],[0],1],["trustedadvisor:DescribeCheckStatusHistoryChanges","Read","unclassified",[222],[0],1],["trustedadvisor:DescribeCheckSummaries","Read","control",[222],[0],1],["trustedadvisor:DescribeChecks","Read","control",[222],[0],1],["trustedadvisor:DescribeNotificationConfigurations","Read","unclassified",[222],[0],1],["trustedadvisor:DescribeNotificationPreferences","Read","unclassified",[222],[0],1],["trustedadvisor:DescribeOrganization","Read","unclassified",[222],[0],1],["trustedadvisor:DescribeOrganizationAccounts","Read","unclassified",[222],[0],1],["trustedadvisor:DescribeReports","Read","unclassified",[222],[0],1],["trustedadvisor:DescribeRisk","Read","unclassified",[222],[0],1],["trustedadvisor:DescribeRiskResources","Read","unclassified",[222],[0],1],["trustedadvisor:DescribeRisks","Read","unclassified",[222],[0],1],["trustedadvisor:DescribeServiceMetadata","Read","unclassified",[222],[0],1],["trustedadvisor:DownloadRisk","Read","unclassified",[222],[0],1],["trustedadvisor:ExcludeCheckItems","Write","unclassified",[222],[0],1],["trustedadvisor:GenerateReport","Write","unclassified",[222],[0],1],["trustedadvisor:GetOrganizationRecommendation","Read","control",[222],[0],1],["trustedadvisor:GetRecommendation","Read","control",[222],[0],1],["trustedadvisor:IncludeCheckItems","Write","unclassified",[222],[0],1],["trustedadvisor:ListAccountsForParent","Read","unclassified",[222],[0],1],["trustedadvisor:ListChecks","List","control",[222],[0],1],["trustedadvisor:ListOrganizationRecommendationAccounts","List","control",[222],[0],1],["trustedadvisor:ListOrganizationRecommendationResources","List","control",[222],[0],1],["trustedadvisor:ListOrganizationRecommendations","List","control",[222],[0],1],["trustedadvisor:ListOrganizationalUnitsForParent","Read","unclassified",[222],[0],1],["trustedadvisor:ListRecommendationResources","List","control",[222],[0],1],["trustedadvisor:ListRecommendations","List","control",[222],[0],1],["trustedadvisor:ListRecommendationsForResource","List","control",[222],[0],1],["trustedadvisor:ListRoots","Read","unclassified",[222],[0],1],["trustedadvisor:RefreshCheck","Write","unclassified",[222],[0],1],["trustedadvisor:SetAccountAccess","Write","unclassified",[222],[0],1],["trustedadvisor:SetOrganizationAccess","Write","unclassified",[222],[0],1],["trustedadvisor:UpdateNotificationConfigurations","Write","unclassified",[222],[0],1],["trustedadvisor:UpdateNotificationPreferences","Write","unclassified",[222],[0],1],["trustedadvisor:UpdateOrganizationRecommendationLifecycle","Write","control",[222],[0],1],["trustedadvisor:UpdateRecommendationLifecycle","Write","control",[222],[0],1],["trustedadvisor:UpdateRiskStatus","Write","unclassified",[222],[0],1]]}],"snapshot":"2026-11-13"}