{ "Version": "2012-10-17", "Statement": [ { "Sid": "GeneralViewOnlyAccessStatement", "Effect": "Allow", "Action": [ "acm:ListCertificates", "aiops:GetInvestigation", "aiops:GetInvestigationGroup", "aiops:ListInvestigationEvents", "aiops:ListInvestigationGroups", "aiops:ListInvestigations", "amplify:GetWebACLForResource", "amplify:ListDomainAssociations", "amplify:ListResourcesForWebACL", "apigateway:GetPortal", "apigateway:GetPortalProduct", "apigateway:GetPortalProductSharingPolicy", "apigateway:GetRoutingRule", "apigateway:ListPortalProducts", "apigateway:ListPortals", "apigateway:ListProductPages", "apigateway:ListProductRestEndpointPages", "apigateway:ListRoutingRules", "appconfig:GetAccountSettings", "appconfig:GetApplication", "appconfig:GetConfigurationProfile", "appconfig:GetDeploymentStrategy", "appconfig:GetEnvironment", "appconfig:GetExperimentDefinition", "appconfig:GetExtension", "appconfig:GetExtensionAssociation", "appconfig:ListApplications", "appconfig:ListConfigurationProfiles", "appconfig:ListDeploymentStrategies", "appconfig:ListDeployments", "appconfig:ListEnvironments", "appconfig:ListExperimentDefinitions", "appconfig:ListExperimentRuns", "appconfig:ListExtensionAssociations", "appconfig:ListExtensions", "appconfig:ListHostedConfigurationVersions", "appconfig:ListTagsForResource", "appsync:GetApi", "appsync:GetChannelNamespace", "appsync:GetGraphqlApi", "appsync:GetIntrospectionSchema", "appsync:GetResourcePolicy", "appsync:GetSourceApiAssociation", "athena:List*", "autoscaling:Describe*", "aws-marketplace:ViewSubscriptions", "backup:DescribeBackupJob", "backup:DescribeBackupVault", "backup:DescribeCopyJob", "backup:DescribeFramework", "backup:DescribeGlobalSettings", "backup:DescribeProtectedResource", "backup:DescribeRecoveryPoint", "backup:DescribeRegionSettings", "backup:DescribeReportJob", "backup:DescribeReportPlan", "backup:DescribeRestoreJob", "backup:GetBackupPlan", "backup:GetBackupPlanFromJSON", "backup:GetBackupPlanFromTemplate", "backup:GetBackupSelection", "backup:GetSupportedResourceTypes", "backup:ListBackupJobs", "backup:ListBackupPlanTemplates", "backup:ListBackupPlanVersions", "backup:ListBackupPlans", "backup:ListBackupSelections", "backup:ListBackupVaults", "backup:ListCopyJobs", "backup:ListFrameworks", "backup:ListLegalHolds", "backup:ListProtectedResources", "backup:ListProtectedResourcesByBackupVault", "backup:ListRecoveryPointsByBackupVault", "backup:ListRecoveryPointsByLegalHold", "backup:ListRecoveryPointsByResource", "backup:ListReportJobs", "backup:ListReportPlans", "backup:ListRestoreJobs", "backup:ListTags", "batch:ListJobs", "bedrock-agentcore:GatewayGetWebACLForResource", "bedrock-agentcore:GatewayListResourcesForWebACL", "bedrock-agentcore:GetAgentCard", "bedrock-agentcore:GetAgentRuntimeEndpoint", "bedrock-agentcore:GetApiKeyCredentialProvider", "bedrock-agentcore:GetBrowser", "bedrock-agentcore:GetBrowserProfile", "bedrock-agentcore:GetCapacityProvider", "bedrock-agentcore:GetCodeInterpreter", "bedrock-agentcore:GetCodeInterpreterSession", "bedrock-agentcore:GetConfigurationBundle", "bedrock-agentcore:GetConfigurationBundleVersion", "bedrock-agentcore:GetConsentPortal", "bedrock-agentcore:GetEvaluator", "bedrock-agentcore:GetGateway", "bedrock-agentcore:GetGatewayRateLimit", "bedrock-agentcore:GetGatewayRule", "bedrock-agentcore:GetGatewayTarget", "bedrock-agentcore:GetHarnessEndpoint", "bedrock-agentcore:GetMemory", "bedrock-agentcore:GetOauth2CredentialProvider", "bedrock-agentcore:GetOnlineEvaluationConfig", "bedrock-agentcore:GetPaymentConnector", "bedrock-agentcore:GetPaymentCredentialProvider", "bedrock-agentcore:GetPaymentManager", "bedrock-agentcore:GetPaymentSession", "bedrock-agentcore:GetPolicy", "bedrock-agentcore:GetPolicyEngine", "bedrock-agentcore:GetPolicyEngineSummary", "bedrock-agentcore:GetPolicyGeneration", "bedrock-agentcore:GetPolicyGenerationSummary", "bedrock-agentcore:GetPolicySummary", "bedrock-agentcore:GetRegistry", "bedrock-agentcore:GetRegistryRecord", "bedrock-agentcore:GetResourcePolicy", "bedrock-agentcore:GetTokenVault", "bedrock-agentcore:ListApiKeyCredentialProviders", "bedrock-agentcore:ListOauth2CredentialProviders", "bedrock-agentcore:ListTagsForResource", "bedrock-mantle:CallWithBearerToken", "bedrock-mantle:GetAccountDataRetention", "bedrock-mantle:GetCustomizedModel", "bedrock-mantle:GetFineTuningJob", "bedrock-mantle:GetModel", "bedrock-mantle:GetProject", "bedrock-mantle:GetReservation", "bedrock-mantle:ListCustomizedModelAssociations", "bedrock-mantle:ListCustomizedModels", "bedrock-mantle:ListFiles", "bedrock-mantle:ListFineTuningJobs", "bedrock-mantle:ListModels", "bedrock-mantle:ListProjects", "bedrock-mantle:ListReservations", "bedrock-mantle:ListTagsForResource", "bedrock:GetAccountDataRetention", "bedrock:GetAdvancedPromptOptimizationJob", "bedrock:GetAgent", "bedrock:GetAgentActionGroup", "bedrock:GetAgentAlias", "bedrock:GetAgentCollaborator", "bedrock:GetAgentKnowledgeBase", "bedrock:GetAgentVersion", "bedrock:GetAsyncInvoke", "bedrock:GetAutomatedReasoningPolicy", "bedrock:GetAutomatedReasoningPolicyAnnotations", "bedrock:GetAutomatedReasoningPolicyBuildWorkflow", "bedrock:GetAutomatedReasoningPolicyNextScenario", "bedrock:GetBlueprint", "bedrock:GetBlueprintOptimizationStatus", "bedrock:GetBlueprintRecommendation", "bedrock:GetCustomModel", "bedrock:GetCustomModelDeployment", "bedrock:GetDataAutomationLibrary", "bedrock:GetDataAutomationLibraryIngestionJob", "bedrock:GetDataAutomationProject", "bedrock:GetDataAutomationStatus", "bedrock:GetDataSource", "bedrock:GetEvaluationJob", "bedrock:GetExecutionFlowSnapshot", "bedrock:GetFlow", "bedrock:GetFlowAlias", "bedrock:GetFlowExecution", "bedrock:GetFlowVersion", "bedrock:GetFoundationModel", "bedrock:GetFoundationModelAvailability", "bedrock:GetGuardrail", "bedrock:GetImportedModel", "bedrock:GetInferenceProfile", "bedrock:GetIngestedDocumentAcl", "bedrock:GetIngestionJob", "bedrock:GetKnowledgeBase", "bedrock:GetKnowledgeBaseDocuments", "bedrock:GetMarketplaceModelEndpoint", "bedrock:GetModelCopyJob", "bedrock:GetModelCustomizationJob", "bedrock:GetModelEvaluationJob", "bedrock:GetModelImportJob", "bedrock:GetModelInvocationJob", "bedrock:GetModelInvocationLoggingConfiguration", "bedrock:GetPromptRouter", "bedrock:GetProvisionedModelThroughput", "bedrock:GetResourcePolicy", "bedrock:GetUseCaseForModelAccess", "bedrock:ListAdvancedPromptOptimizationJobs", "bedrock:ListAgentActionGroups", "bedrock:ListAgentAliases", "bedrock:ListAgentCollaborators", "bedrock:ListAgentKnowledgeBases", "bedrock:ListAgentVersions", "bedrock:ListAgents", "bedrock:ListAsyncInvokes", "bedrock:ListAutomatedReasoningPolicies", "bedrock:ListAutomatedReasoningPolicyBuildWorkflows", "bedrock:ListBlueprints", "bedrock:ListCustomModelDeployments", "bedrock:ListCustomModels", "bedrock:ListDataAutomationLibraries", "bedrock:ListDataAutomationLibraryEntities", "bedrock:ListDataAutomationLibraryIngestionJobs", "bedrock:ListDataAutomationProjects", "bedrock:ListDataSources", "bedrock:ListEnforcedGuardrailsConfiguration", "bedrock:ListEvaluationJobs", "bedrock:ListFlowAliases", "bedrock:ListFlowExecutions", "bedrock:ListFlowVersions", "bedrock:ListFlows", "bedrock:ListFoundationModelAgreementOffers", "bedrock:ListFoundationModels", "bedrock:ListGuardrails", "bedrock:ListImportedModels", "bedrock:ListInferenceProfiles", "bedrock:ListIngestionJobs", "bedrock:ListInvocationSteps", "bedrock:ListInvocations", "bedrock:ListKnowledgeBaseDocuments", "bedrock:ListKnowledgeBases", "bedrock:ListMarketplaceModelEndpoints", "bedrock:ListModelCopyJobs", "bedrock:ListModelCustomizationJobs", "bedrock:ListModelImportJobs", "bedrock:ListModelInvocationJobs", "bedrock:ListPromptRouters", "bedrock:ListPrompts", "bedrock:ListProvisionedModelThroughputs", "bedrock:ListSessions", "bedrock:ListTagsForResource", "bedrock:ValidateFlowDefinition", "clouddirectory:ListAppliedSchemaArns", "clouddirectory:ListDevelopmentSchemaArns", "clouddirectory:ListDirectories", "clouddirectory:ListPublishedSchemaArns", "cloudformation:DescribeStacks", "cloudformation:GetTemplateSummary", "cloudformation:List*", "cloudfront:List*", "cloudsearch:DescribeDomains", "cloudsearch:List*", "cloudtrail:DescribeTrails", "cloudtrail:ListEventDataStores", "cloudtrail:ListTrails", "cloudtrail:LookupEvents", "cloudwatch:Get*", "cloudwatch:List*", "codeartifact:ListDomains", "codeartifact:ListPackages", "codebuild:ListBuilds*", "codebuild:ListProjects", "codecommit:List*", "codedeploy:BatchGetApplicationRevisions", "codedeploy:BatchGetApplications", "codedeploy:BatchGetDeploymentGroups", "codedeploy:BatchGetDeploymentInstances", "codedeploy:BatchGetDeploymentTargets", "codedeploy:BatchGetDeployments", "codedeploy:BatchGetOnPremisesInstances", "codedeploy:Get*", "codedeploy:List*", "codepipeline:ListPipelines", "codestar:List*", "cognito-identity:GetPrincipalTagAttributeMap", "cognito-identity:ListIdentities", "cognito-identity:ListIdentityPools", "cognito-idp:List*", "cognito-sync:ListDatasets", "comprehend:Describe*", "comprehend:List*", "config:Describe*", "config:List*", "connect:List*", "cost-optimization-hub:GetPreferences", "cost-optimization-hub:GetRecommendation", "cost-optimization-hub:ListEnrollmentStatuses", "cost-optimization-hub:ListRecommendationSummaries", "cost-optimization-hub:ListRecommendations", "databrew:ListJobs", "databrew:ListProjects", "datapipeline:DescribePipelines", "datapipeline:GetAccountLimits", "datapipeline:ListPipelines", "dax:DescribeClusters", "dax:DescribeDefaultParameters", "dax:DescribeEvents", "dax:DescribeParameterGroups", "dax:DescribeParameters", "dax:DescribeSubnetGroups", "dax:ListTags", "devicefarm:List*", "directconnect:Describe*", "discovery:List*", "dlm:GetLifecyclePolicies", "dlm:GetLifecyclePolicy", "dlm:ListTagsForResource", "dms:List*", "ds:DescribeDirectories", "dynamodb:DescribeBackup", "dynamodb:DescribeContinuousBackups", "dynamodb:DescribeContributorInsights", "dynamodb:DescribeEndpoints", "dynamodb:DescribeExport", "dynamodb:DescribeGlobalTable", "dynamodb:DescribeGlobalTableSettings", "dynamodb:DescribeImport", "dynamodb:DescribeKinesisStreamingDestination", "dynamodb:DescribeLimits", "dynamodb:DescribeReservedCapacity", "dynamodb:DescribeReservedCapacityOfferings", "dynamodb:DescribeStream", "dynamodb:DescribeTable", "dynamodb:DescribeTableReplicaAutoScaling", "dynamodb:DescribeTimeToLive", "dynamodb:GetAbacStatus", "dynamodb:GetResourcePolicy", "dynamodb:ListBackups", "dynamodb:ListContributorInsights", "dynamodb:ListExports", "dynamodb:ListGlobalTables", "dynamodb:ListImports", "dynamodb:ListStreams", "dynamodb:ListTables", "dynamodb:ListTagsOfResource", "ec2:DescribeAccountAttributes", "ec2:DescribeAccountVpcEncryptionControl", "ec2:DescribeAddressTransfers", "ec2:DescribeAddresses", "ec2:DescribeAddressesAttribute", "ec2:DescribeAggregateIdFormat", "ec2:DescribeApplicationStatus", "ec2:DescribeApplicationStatusCheckAssociations", "ec2:DescribeApplicationStatusChecks", "ec2:DescribeAvailabilityZones", "ec2:DescribeAwsNetworkPerformanceMetricSubscriptions", "ec2:DescribeBundleTasks", "ec2:DescribeByoipCidrs", "ec2:DescribeCapacityBlockExtensionHistory", "ec2:DescribeCapacityBlockExtensionOfferings", "ec2:DescribeCapacityBlockOfferings", "ec2:DescribeCapacityBlockStatus", "ec2:DescribeCapacityBlocks", "ec2:DescribeCapacityManagerDataExports", "ec2:DescribeCapacityReservationBillingRequests", "ec2:DescribeCapacityReservationCancellationQuotes", "ec2:DescribeCapacityReservationFleets", "ec2:DescribeCapacityReservationTopology", "ec2:DescribeCapacityReservations", "ec2:DescribeCarrierGateways", "ec2:DescribeClassicLinkInstances", "ec2:DescribeClientVpnAuthorizationRules", "ec2:DescribeClientVpnConnections", "ec2:DescribeClientVpnEndpoints", "ec2:DescribeClientVpnRoutes", "ec2:DescribeClientVpnTargetNetworks", "ec2:DescribeCoipPools", "ec2:DescribeConversionTasks", "ec2:DescribeCustomerGateways", "ec2:DescribeDeclarativePoliciesReports", "ec2:DescribeDhcpOptions", "ec2:DescribeEgressOnlyInternetGateways", "ec2:DescribeElasticGpus", "ec2:DescribeExportImageTasks", "ec2:DescribeExportTasks", "ec2:DescribeFastLaunchImages", "ec2:DescribeFastSnapshotRestores", "ec2:DescribeFleetHistory", "ec2:DescribeFleetInstances", "ec2:DescribeFleets", "ec2:DescribeFlowLogs", "ec2:DescribeFpgaImageAttribute", "ec2:DescribeFpgaImages", "ec2:DescribeHost*", "ec2:DescribeIamInstanceProfileAssociations", "ec2:DescribeIdFormat", "ec2:DescribeIdentityIdFormat", "ec2:DescribeImage*", "ec2:DescribeImport*", "ec2:DescribeInstance*", "ec2:DescribeInternetGateways", "ec2:DescribeIpamByoasn", "ec2:DescribeIpamExternalResourceVerificationTokens", "ec2:DescribeIpamInternetRegistryAssociations", "ec2:DescribeIpamPolicies", "ec2:DescribeIpamPoolAllocations", "ec2:DescribeIpamPools", "ec2:DescribeIpamPrefixListResolverTargets", "ec2:DescribeIpamPrefixListResolvers", "ec2:DescribeIpamResourceDiscoveries", "ec2:DescribeIpamResourceDiscoveryAssociations", "ec2:DescribeIpamScopes", "ec2:DescribeIpams", "ec2:DescribeIpv6Pools", "ec2:DescribeKeyPairs", "ec2:DescribeLaunchTemplateVersions", "ec2:DescribeLaunchTemplates", "ec2:DescribeLocalGatewayRouteTablePermissions", "ec2:DescribeLocalGatewayRouteTableVirtualInterfaceGroupAssociations", "ec2:DescribeLocalGatewayRouteTableVpcAssociations", "ec2:DescribeLocalGatewayRouteTables", "ec2:DescribeLocalGatewayVirtualInterfaceGroups", "ec2:DescribeLocalGatewayVirtualInterfaces", "ec2:DescribeLocalGateways", "ec2:DescribeLockedSnapshots", "ec2:DescribeMacHosts", "ec2:DescribeMacModificationTasks", "ec2:DescribeManagedPrefixLists", "ec2:DescribeMovingAddresses", "ec2:DescribeNatGateways", "ec2:DescribeNetwork*", "ec2:DescribeOutpostLags", "ec2:DescribePlacementGroups", "ec2:DescribePrefixLists", "ec2:DescribePrincipalIdFormat", "ec2:DescribePublicIpv4Pools", "ec2:DescribeRegions", "ec2:DescribeReplaceRootVolumeTasks", "ec2:DescribeReserved*", "ec2:DescribeRouteServerEndpoints", "ec2:DescribeRouteServerPeers", "ec2:DescribeRouteServers", "ec2:DescribeRouteTables", "ec2:DescribeScheduledInstanceAvailability", "ec2:DescribeScheduledInstances", "ec2:DescribeSecondaryInterfaces", "ec2:DescribeSecondaryNetworks", "ec2:DescribeSecondarySubnets", "ec2:DescribeSecurityGroupReferences", "ec2:DescribeSecurityGroupRules", "ec2:DescribeSecurityGroupVpcAssociations", "ec2:DescribeSecurityGroups", "ec2:DescribeServiceLinkVirtualInterfaces", "ec2:DescribeSnapshot*", "ec2:DescribeSpot*", "ec2:DescribeStaleSecurityGroups", "ec2:DescribeStoreImageTasks", "ec2:DescribeSubnets", "ec2:DescribeTags", "ec2:DescribeTrafficMirrorFilterRules", "ec2:DescribeTrafficMirrorFilters", "ec2:DescribeTrafficMirrorSessions", "ec2:DescribeTrafficMirrorTargets", "ec2:DescribeTransitGatewayAttachments", "ec2:DescribeTransitGatewayConnectPeers", "ec2:DescribeTransitGatewayConnects", "ec2:DescribeTransitGatewayMeteringPolicies", "ec2:DescribeTransitGatewayMulticastDomains", "ec2:DescribeTransitGatewayPeeringAttachments", "ec2:DescribeTransitGatewayPolicyTables", "ec2:DescribeTransitGatewayRouteTableAnnouncements", "ec2:DescribeTransitGatewayRouteTables", "ec2:DescribeTransitGatewayVpcAttachments", "ec2:DescribeTransitGateways", "ec2:DescribeTrunkInterfaceAssociations", "ec2:DescribeVerifiedAccessEndpoints", "ec2:DescribeVerifiedAccessGroups", "ec2:DescribeVerifiedAccessInstanceLoggingConfigurations", "ec2:DescribeVerifiedAccessInstanceWebAclAssociations", "ec2:DescribeVerifiedAccessInstances", "ec2:DescribeVerifiedAccessTrustProviders", "ec2:DescribeVolume*", "ec2:DescribeVpc*", "ec2:DescribeVpnConcentrators", "ec2:DescribeVpnConnections", "ec2:DescribeVpnGateways", "ec2:GetActiveVpnTunnelStatus", "ec2:GetAllowedImagesSettings", "ec2:GetAssociatedEnclaveCertificateIamRoles", "ec2:GetAssociatedIpv6PoolCidrs", "ec2:GetCapacityManagerAttributes", "ec2:GetCapacityManagerMetricDimensions", "ec2:GetCapacityManagerMonitoredTagKeys", "ec2:GetCapacityReservationUsage", "ec2:GetCoipPoolUsage", "ec2:GetDeclarativePoliciesReportSummary", "ec2:GetDefaultCreditSpecification", "ec2:GetEbsDefaultKmsKeyId", "ec2:GetEbsEncryptionByDefault", "ec2:GetEnabledIpamPolicy", "ec2:GetFlowLogsIntegrationTemplate", "ec2:GetGroupsForCapacityReservation", "ec2:GetHostReservationPurchasePreview", "ec2:GetImageAncestry", "ec2:GetImageBlockPublicAccessState", "ec2:GetInstanceMetadataDefaults", "ec2:GetInstanceTypesFromInstanceRequirements", "ec2:GetIpamAddressHistory", "ec2:GetIpamDiscoveredAccounts", "ec2:GetIpamDiscoveredResourceCidrs", "ec2:GetIpamDiscoveredRoutes", "ec2:GetIpamInternetRegistryAssociationAsns", "ec2:GetIpamInternetRegistryAssociationCidrs", "ec2:GetIpamPolicyAllocationRules", "ec2:GetIpamPolicyOrganizationTargets", "ec2:GetIpamPoolCidrs", "ec2:GetIpamPrefixListResolverRules", "ec2:GetIpamPrefixListResolverVersions", "ec2:GetIpamResourceCidrs", "ec2:GetIpamRouteOriginAuthorizations", "ec2:GetIpamRouteProtectionFindings", "ec2:GetIpamRoutingPolicyRegistrations", "ec2:GetManagedPrefixListAssociations", "ec2:GetManagedPrefixListEntries", "ec2:GetManagedResourceVisibility", "ec2:GetNetworkInsightsAccessScopeAnalysisFindings", "ec2:GetNetworkInsightsAccessScopeContent", "ec2:GetReservedInstancesExchangeQuote", "ec2:GetResourcePolicy", "ec2:GetRouteServerAssociations", "ec2:GetRouteServerPropagations", "ec2:GetSecurityGroupsForVpc", "ec2:GetSerialConsoleAccessStatus", "ec2:GetSnapshotBlockPublicAccessState", "ec2:GetSpotPlacementScores", "ec2:GetSubnetCidrReservations", "ec2:GetTransitGatewayAttachmentPropagations", "ec2:GetTransitGatewayMeteringPolicyEntries", "ec2:GetTransitGatewayMulticastDomainAssociations", "ec2:GetTransitGatewayPolicyTableAssociations", "ec2:GetTransitGatewayPolicyTableEntries", "ec2:GetTransitGatewayPrefixListReferences", "ec2:GetTransitGatewayRouteTableAssociations", "ec2:GetTransitGatewayRouteTablePropagations", "ec2:GetVerifiedAccessEndpointPolicy", "ec2:GetVerifiedAccessEndpointTargets", "ec2:GetVerifiedAccessGroupPolicy", "ec2:GetVerifiedAccessInstanceWebAcl", "ec2:GetVpcResourcesBlockingEncryptionEnforcement", "ec2:GetVpnConnectionDeviceTypes", "ec2:GetVpnTunnelReplacementStatus", "ec2:ListImagesInRecycleBin", "ec2:ListSnapshotsInRecycleBin", "ec2:ListVolumesInRecycleBin", "ec2:SearchLocalGatewayRoutes", "ec2:SearchTransitGatewayMulticastGroups", "ec2:SearchTransitGatewayRoutes", "ecr:DescribeRegistry", "ecr:DescribeRepositories", "ecr:ListImages", "ecs:Describe*", "ecs:List*", "eks:DescribeAccessEntry", "eks:DescribeAddon", "eks:DescribeAddonConfiguration", "eks:DescribeAddonVersions", "eks:DescribeCapability", "eks:DescribeCluster", "eks:DescribeClusterVersions", "eks:DescribeEksAnywhereSubscription", "eks:DescribeFargateProfile", "eks:DescribeIdentityProviderConfig", "eks:DescribeInsight", "eks:DescribeInsightsRefresh", "eks:DescribeNodegroup", "eks:DescribePodIdentityAssociation", "eks:DescribeUpdate", "eks:ListAccessEntries", "eks:ListAccessPolicies", "eks:ListAddons", "eks:ListAssociatedAccessPolicies", "eks:ListCapabilities", "eks:ListClusters", "eks:ListEksAnywhereSubscriptions", "eks:ListFargateProfiles", "eks:ListIdentityProviderConfigs", "eks:ListInsights", "eks:ListNodegroups", "eks:ListPodIdentityAssociations", "eks:ListTagsForResource", "eks:ListUpdates", "elasticache:Describe*", "elasticbeanstalk:DescribeApplicationVersions", "elasticbeanstalk:DescribeApplications", "elasticbeanstalk:DescribeEnvironments", "elasticbeanstalk:ListAvailableSolutionStacks", "elasticfilesystem:DescribeFileSystems", "elasticloadbalancing:DescribeInstanceHealth", "elasticloadbalancing:DescribeListeners", "elasticloadbalancing:DescribeLoadBalancerAttributes", "elasticloadbalancing:DescribeLoadBalancers", "elasticloadbalancing:DescribeTargetGroups", "elasticloadbalancing:DescribeTargetHealth", "elasticmapreduce:List*", "elastictranscoder:List*", "emr-containers:ListTagsForResource", "emr-containers:ListVirtualClusters", "emr-serverless:ListApplications", "es:DescribeElasticsearchDomain", "es:DescribeElasticsearchDomains", "es:ListDomainNames", "events:ListRuleNamesByTarget", "events:ListRules", "events:ListTargetsByRule", "firehose:DescribeDeliveryStream", "firehose:List*", "fsx:DescribeFileSystems", "gamelift:List*", "glacier:DescribeJob", "glacier:GetVaultAccessPolicy", "glacier:GetVaultNotifications", "glacier:List*", "glue:GetJobRuns", "glue:GetResourcePolicies", "glue:GetSchema", "glue:GetTable", "glue:GetTableVersion", "glue:GetTableVersions", "glue:GetTables", "glue:GetTags", "glue:ListJobs", "glue:ListSchemaVersions", "glue:ListSchemas", "glue:ListSessions", "greengrass:List*", "iam:GetAccountSummary", "iam:GetLoginProfile", "iam:List*", "importexport:ListJobs", "inspector:List*", "iot:List*", "kafka:ListClusters", "kendra:ListDataSources", "kendra:ListTagsForResource", "kinesis:ListStreams", "kinesisanalytics:ListApplications", "kinesisanalytics:ListTagsForResource", "kms:ListKeys", "kms:ListResourceTags", "lambda:GetPolicy", "lambda:GetProvisionedConcurrencyConfig", "lambda:GetResourcePolicy", "lambda:List*", "lex:GetBotAliases", "lex:GetBotChannelAssociations", "lex:GetBotVersions", "lex:GetBots", "lex:GetIntentVersions", "lex:GetIntents", "lex:GetSlotTypeVersions", "lex:GetSlotTypes", "lex:GetUtterancesView", "lightsail:GetBlueprints", "lightsail:GetBundles", "lightsail:GetInstancePortStates", "lightsail:GetInstanceSnapshots", "lightsail:GetInstances", "lightsail:GetKeyPair", "lightsail:GetRegions", "lightsail:GetStaticIps", "lightsail:IsVpcPeered", "logs:Describe*", "logs:GetTransformer", "logs:ListEntitiesForLogGroup", "logs:ListLogGroupsForEntity", "logs:ListLogGroupsForQuery", "logs:ListTagsForResource", "lookoutvision:ListModelPackagingJobs", "lookoutvision:ListModels", "lookoutvision:ListProjects", "m2:GetApplication", "m2:GetEnvironment", "m2:ListApplications", "m2:ListEnvironments", "m2:ListTagsForResource", "machinelearning:Describe*", "mediaconnect:ListEntitlements", "mediaconnect:ListFlows", "mediaconnect:ListOfferings", "mediaconnect:ListReservations", "mediaconnect:ListRouterInputs", "mediaconnect:ListRouterNetworkInterfaces", "mediaconnect:ListRouterOutputs", "mediastore:DescribeContainer", "mediastore:GetLifecyclePolicy", "mediastore:ListTagsForResource", "memorydb:DescribeAcls", "memorydb:DescribeUsers", "mobiletargeting:GetApplicationSettings", "mobiletargeting:GetCampaigns", "mobiletargeting:GetImportJobs", "mobiletargeting:GetSegments", "oam:ListAttachedLinks", "oam:ListLinks", "oam:ListSinks", "opsworks-cm:Describe*", "opsworks:Describe*", "organizations:List*", "outposts:GetOutpost", "outposts:GetOutpostInstanceTypes", "outposts:ListOutposts", "outposts:ListSites", "outposts:ListTagsForResource", "polly:Describe*", "polly:List*", "profile:ListDomains", "profile:ListIntegrations", "qapps:GetQApp", "qapps:ListQApps", "qapps:ListTagsForResource", "qbusiness:GetApplication", "qbusiness:GetDataSource", "qbusiness:GetIndex", "qbusiness:GetPlugin", "qbusiness:GetPolicy", "qbusiness:GetRetriever", "qbusiness:GetWebExperience", "ram:GetResourceShareAssociations", "rds:Describe*", "redshift-serverless:GetCustomDomainAssociation", "redshift-serverless:GetEndpointAccess", "redshift-serverless:GetNamespace", "redshift-serverless:GetRecoveryPoint", "redshift-serverless:GetResourcePolicy", "redshift-serverless:ListSnapshots", "redshift-serverless:ListTagsForResource", "redshift-serverless:ListWorkgroups", "redshift:DescribeClusters", "redshift:DescribeEvents", "redshift:ViewQueriesInConsole", "resource-explorer-2:GetDefaultView", "resource-explorer-2:GetIndex", "resource-explorer-2:ListIndexes", "resource-explorer-2:ListSupportedResourceTypes", "resource-explorer-2:ListTagsForResource", "resource-explorer-2:ListViews", "rolesanywhere:ListCrls", "rolesanywhere:ListProfiles", "rolesanywhere:ListSubjects", "rolesanywhere:ListTagsForResource", "rolesanywhere:ListTrustAnchors", "route53:Get*", "route53:List*", "route53domains:List*", "route53profiles:GetProfile", "route53profiles:GetProfileAssociation", "route53profiles:GetProfileResourceAssociation", "route53profiles:ListProfileAssociations", "route53profiles:ListProfileResourceAssociations", "route53profiles:ListProfiles", "route53profiles:ListTagsForResource", "route53resolver:Get*", "route53resolver:List*", "s3:ListAllMyBuckets", "s3:ListBucket", "s3:ListMultiRegionAccessPoints", "sagemaker:Describe*", "sagemaker:List*", "sdb:List*", "servicecatalog:List*", "ses:DescribeActiveReceiptRuleSet", "ses:List*", "ses:ListDedicatedIpPools", "shield:List*", "sns:GetDataProtectionPolicy", "sns:GetSubscriptionAttributes", "sns:List*", "sqs:GetQueueAttributes", "sqs:GetQueueUrl", "sqs:ListDeadLetterSourceQueues", "sqs:ListMessageMoveTasks", "sqs:ListQueueTags", "sqs:ListQueues", "ssm:ListAssociations", "ssm:ListDocuments", "states:ListActivities", "states:ListExecutions", "states:ListMapRuns", "states:ListStateMachineAliases", "states:ListStateMachineVersions", "states:ListStateMachines", "storagegateway:DescribeSMBSettings", "storagegateway:ListGateways", "storagegateway:ListLocalDisks", "storagegateway:ListVolumeRecoveryPoints", "storagegateway:ListVolumes", "swf:List*", "tiros:GetQueryAnswer", "tiros:GetQueryExplanation", "tiros:GetQueryExtensionAccounts", "trustedadvisor:Describe*", "uxc:GetAccountCustomizations", "uxc:ListServices", "waf-regional:List*", "waf:List*", "wafv2:List*", "wisdom:ListAssistants", "workdocs:DescribeAvailableDirectories", "workdocs:DescribeInstances", "workmail:Describe*", "workspaces:Describe*", "xray:GetEncryptionConfig", "xray:GetGroups", "xray:GetSamplingRules", "xray:GetSamplingStatisticSummaries", "xray:GetSamplingTargets", "xray:GetTraceSegmentDestination", "xray:ListResourcePolicies" ], "Resource": "*" }, { "Sid": "APIGatewayAccess", "Effect": "Allow", "Action": [ "apigateway:GET" ], "Resource": [ "arn:aws:apigateway:*::/apis", "arn:aws:apigateway:*::/apis/*/authorizers/*", "arn:aws:apigateway:*::/apis/*/authorizers", "arn:aws:apigateway:*::/apis/*/cors", "arn:aws:apigateway:*::/apis/*/deployments/*", "arn:aws:apigateway:*::/apis/*/deployments", "arn:aws:apigateway:*::/apis/*/exports/*", "arn:aws:apigateway:*::/apis/*/integrations/*", "arn:aws:apigateway:*::/apis/*/integrations", "arn:aws:apigateway:*::/apis/*/models/*", "arn:aws:apigateway:*::/apis/*/models", "arn:aws:apigateway:*::/apis/*/routes/*", "arn:aws:apigateway:*::/apis/*/routes", "arn:aws:apigateway:*::/apis/*/stages", "arn:aws:apigateway:*::/apis/*/stages/*", "arn:aws:apigateway:*::/clientcertificates", "arn:aws:apigateway:*::/clientcertificates/*", "arn:aws:apigateway:*::/domainnames", "arn:aws:apigateway:*::/domainnames/*/apimappings", "arn:aws:apigateway:*::/restapis", "arn:aws:apigateway:*::/restapis/*/authorizers/*", "arn:aws:apigateway:*::/restapis/*/authorizers", "arn:aws:apigateway:*::/restapis/*/deployments/*", "arn:aws:apigateway:*::/restapis/*/deployments", "arn:aws:apigateway:*::/restapis/*/documentation/parts/*", "arn:aws:apigateway:*::/restapis/*/documentation/parts", "arn:aws:apigateway:*::/restapis/*/documentation/versions/*", "arn:aws:apigateway:*::/restapis/*/documentation/versions", "arn:aws:apigateway:*::/restapis/*/gatewayresponses/*", "arn:aws:apigateway:*::/restapis/*/gatewayresponses", "arn:aws:apigateway:*::/restapis/*/models/*", "arn:aws:apigateway:*::/restapis/*/models", "arn:aws:apigateway:*::/restapis/*/requestvalidators", "arn:aws:apigateway:*::/restapis/*/requestvalidators/*", "arn:aws:apigateway:*::/restapis/*/resources/*", "arn:aws:apigateway:*::/restapis/*/resources", "arn:aws:apigateway:*::/restapis/*/stages", "arn:aws:apigateway:*::/restapis/*/stages/*", "arn:aws:apigateway:*::/tags/*", "arn:aws:apigateway:*::/vpclinks" ] } ] }