CloudTrail
Prefix cloudtrail, 66 actions · Domain Management & Governance
6 AWS managed policies. 0 have reviewed guidance; the rest have authoritative permission data pending editorial review. 3 are service-linked role policies, shown with permission data only.
User access (2)
Service roles (1)
- AWSControlTowerServiceRolePolicyOperator
Service-linked roles (3)
- AWSSDMPServiceRolePolicyOperator
- CloudTrailServiceRolePolicyAdmin
- SecurityLakeServiceLinkedRoleOperator
Also grants CloudTrail actions (49)
- AdministratorAccess
- AdministratorAccess-AWSElasticBeanstalk
- AIDevOpsAgentAccessPolicy
- AIDevOpsAgentActionsPolicy
- AIOpsAssistantPolicy
- AIOpsConsoleAdminPolicy
- AmazonCloudWatchEvidentlyFullAccess
- AmazonDevOpsGuruServiceRolePolicy
- AmazonEC2ContainerRegistryFullAccess
- AmazonGuardDutyServiceRolePolicy
- AmazonInspector2ServiceRolePolicy
- AmazonRDSCustomPreviewServiceRolePolicy
- AmazonRDSCustomServiceRolePolicy
- AssuranceServiceRolePolicy
- AWS_ConfigRole
- AWSAuditManagerServiceRolePolicy
- AWSCODAPermissionsBoundary
- AWSCodePipeline_FullAccess
- AWSConfigServiceRolePolicy
- AWSConfigUserAccess
- AWSElasticBeanstalkReadOnly
- AWSFinOpsAgentServiceRolePolicy
- AwsGlueDataBrewFullAccessPolicy
- AWSLakeFormationDataAdmin
- AWSMcpServiceActionsFullAccess
- AWSObservabilityAdminTelemetryEnablementServiceRolePolicy
- AWSPartnerLedSupportReadOnlyAccess
- AWSResourceExplorerServiceRolePolicy
- AWSSecurityHubServiceRolePolicy
- AWSSupportServiceRolePolicy
- AWSTrustedAdvisorServiceRolePolicy
- AWSWellArchitectedAgentResourceScanningServiceRolePolicy
- BedrockAgentCoreFullAccess
- CloudWatchApplicationSignalsFullAccess
- CloudWatchApplicationSignalsReadOnlyAccess
- CloudWatchApplicationSignalsServiceRolePolicy
- CloudWatchFullAccessV2
- CloudWatchOmniAWSIntegrationPolicy
- CloudWatchReadOnlyAccess
- FinOpsAgentAgentPolicy
- PowerUserAccess
- ReadOnlyAccess
- ResourceGroupsTaggingAPITagUntagSupportedResources
- ROSASRESupportPolicy
- SecurityAudit
- SupportUser
- SystemAdministrator
- ViewOnlyAccess
- WellArchitectedAgentResourceScanning
addtags cancelquery createchannel createdashboard createeventdatastore createservicelinkedchannel createtrail deletechannel deletedashboard deleteeventdatastore deleteresourcepolicy deleteservicelinkedchannel deletetrail deregisterorganizationdelegatedadmin describequery describetrails disablefederation enablefederation generatequery generatequeryresultssummary getchannel getdashboard geteventconfiguration geteventdatastore geteventdatastoredata geteventselectors getimport getinsightselectors getqueryresults getresourcepolicy getservicelinkedchannel gettrail gettrailstatus listchannels listdashboards listeventdatastores listimportfailures listimports listinsightsdata listpublickeys listqueries listservicelinkedchannels listtags listtrails lookupevents puteventconfiguration puteventselectors putinsightselectors putresourcepolicy registerorganizationdelegatedadmin removetags restoreeventdatastore searchsamplequeries startdashboardrefresh starteventdatastoreingestion startimport startlogging startquery stopeventdatastoreingestion stopimport stoplogging updatechannel updatedashboard updateeventdatastore updateservicelinkedchannel updatetrail
Actions (66)
| Action | Access level | Policies granting without limits | Policies granting with resource or condition limits |
|---|---|---|---|
| cloudtrail:AddTags | Tagging | 7 | 1 |
| cloudtrail:CancelQuery | Write | 6 | 1 |
| cloudtrail:CreateChannel | Write | 6 | 1 |
| cloudtrail:CreateDashboard | Write | 6 | 1 |
| cloudtrail:CreateEventDataStore | Write | 6 | 1 |
| cloudtrail:CreateServiceLinkedChannel | Write | 6 | 11 |
| cloudtrail:CreateTrail | Write | 6 | 3 |
| cloudtrail:DeleteChannel | Write | 6 | 1 |
| cloudtrail:DeleteDashboard | Write | 6 | 1 |
| cloudtrail:DeleteEventDataStore | Write | 6 | 1 |
| cloudtrail:DeleteResourcePolicy | Write | 6 | 1 |
| cloudtrail:DeleteServiceLinkedChannel | Write | 6 | 5 |
| cloudtrail:DeleteTrail | Write | 6 | 2 |
| cloudtrail:DeregisterOrganizationDelegatedAdmin | Write | 6 | 1 |
| cloudtrail:DescribeQuery | Read | 12 | 1 |
| cloudtrail:DescribeTrails | Read | 34 | 3 |
| cloudtrail:DisableFederation | Write | 6 | 1 |
| cloudtrail:EnableFederation | Write | 6 | 1 |
| cloudtrail:GenerateQuery | Write | 6 | 1 |
| cloudtrail:GenerateQueryResultsSummary | Read | 6 | 1 |
| cloudtrail:GetChannel | Read | 14 | 7 |
| cloudtrail:GetDashboard | Read | 12 | 2 |
| cloudtrail:GetEventConfiguration | Read | 14 | 3 |
| cloudtrail:GetEventDataStore | Read | 14 | 3 |
| cloudtrail:GetEventDataStoreData | Read | 9 | 1 |
| cloudtrail:GetEventSelectors | Read | 23 | 4 |
| cloudtrail:GetImport | Read | 9 | 1 |
| cloudtrail:GetInsightSelectors | Read | 16 | 3 |
| cloudtrail:GetQueryResults | Read | 11 | 2 |
| cloudtrail:GetResourcePolicy | Read | 14 | 2 |
| cloudtrail:GetServiceLinkedChannel | Read | 9 | 4 |
| cloudtrail:GetTrail | Read | 19 | 3 |
| cloudtrail:GetTrailStatus | Read | 26 | 6 |
| cloudtrail:ListChannels | List | 19 | 3 |
| cloudtrail:ListDashboards | List | 15 | 3 |
| cloudtrail:ListEventDataStores | List | 19 | 3 |
| cloudtrail:ListImportFailures | Read | 12 | 1 |
| cloudtrail:ListImports | List | 12 | 1 |
| cloudtrail:ListInsightsData | List | 12 | 1 |
| cloudtrail:ListPublicKeys | Read | 15 | 1 |
| cloudtrail:ListQueries | List | 12 | 1 |
| cloudtrail:ListServiceLinkedChannels | List | 14 | 2 |
| cloudtrail:ListTags | Read | 19 | 3 |
| cloudtrail:ListTrails | List | 21 | 3 |
| cloudtrail:LookupEvents | Read | 28 | 2 |
| cloudtrail:PutEventConfiguration | Write | 6 | 1 |
| cloudtrail:PutEventSelectors | Write | 6 | 3 |
| cloudtrail:PutInsightSelectors | Write | 6 | 1 |
| cloudtrail:PutResourcePolicy | Write | 6 | 1 |
| cloudtrail:RegisterOrganizationDelegatedAdmin | Write | 6 | 1 |
| cloudtrail:RemoveTags | Tagging | 7 | 1 |
| cloudtrail:RestoreEventDataStore | Write | 6 | 1 |
| cloudtrail:SearchSampleQueries | Read | 6 | 1 |
| cloudtrail:StartDashboardRefresh | Write | 6 | 1 |
| cloudtrail:StartEventDataStoreIngestion | Write | 6 | 1 |
| cloudtrail:StartImport | Write | 6 | 1 |
| cloudtrail:StartLogging | Write | 7 | 3 |
| cloudtrail:StartQuery | Write | 8 | 2 |
| cloudtrail:StopEventDataStoreIngestion | Write | 6 | 1 |
| cloudtrail:StopImport | Write | 6 | 1 |
| cloudtrail:StopLogging | Write | 7 | 2 |
| cloudtrail:UpdateChannel | Write | 6 | 1 |
| cloudtrail:UpdateDashboard | Write | 6 | 1 |
| cloudtrail:UpdateEventDataStore | Write | 6 | 1 |
| cloudtrail:UpdateServiceLinkedChannel | Write | 6 | 4 |
| cloudtrail:UpdateTrail | Write | 6 | 2 |