Config

Prefix config, 102 actions · Domain Management & Governance

20 AWS managed policies. 0 have reviewed guidance; the rest have authoritative permission data pending editorial review. 14 are service-linked role policies, shown with permission data only.

User access (1)

AWSConfigUserAccessReader

Operator and limited (4)

AWSBackupAuditAccessOperator
AWSQuickSetupCFGCPacksPermissionsBoundaryOperator
AWSSystemsManagerEnableConfigRecordingExecutionPolicyOperator
AWSSystemsManagerEnableExplorerExecutionPolicyOperator

Service roles (1)

AWSConfigRulesExecutionRoleOperator

Service-linked roles (14)

AmazonInspector2ThirdPartyServiceRolePolicyOperator
AWSAgentRegistryServiceRolePolicyOperator
AWSCloudWatchOmniServiceRolePolicyOperator
AWSConfigMultiAccountSetupPolicyOperator
AWSConfigThirdPartyServiceRolePolicyOperator
AWSControlTowerAccountServiceRolePolicyOperator
AWSManagedServices_DetectiveControlsConfig_ServiceRolePolicyOperator
AWSObservabilityAdminServiceRolePolicyOperator
AWSSecurityHubServiceRolePolicyOperator
AWSSecurityHubV2ServiceRolePolicyOperator
AWSServiceRolePolicyForBackupReportsOperator
CloudWatchNetworkFlowMonitorTopologyServiceRolePolicyOperator
ConfigConformsServiceRolePolicyOperator
FMSServiceRolePolicyOperator

Also grants Config actions (44)

associateresourcetypes batchgetaggregateresourceconfig batchgetresourceconfig deleteaggregationauthorization deleteconfigrule deleteconfigurationaggregator deleteconfigurationrecorder deleteconformancepack deleteconnector deletedeliverychannel deleteevaluationresults deleteorganizationconfigrule deleteorganizationconformancepack deletependingaggregationrequest deleteremediationconfiguration deleteremediationexceptions deleteresourceconfig deleteretentionconfiguration deleteservicelinkedconfigurationrecorder deletestoredquery deliverconfigsnapshot describeaggregatecompliancebyconfigrules describeaggregatecompliancebyconformancepacks describeaggregationauthorizations describecompliancebyconfigrule describecompliancebyresource describeconfigruleevaluationstatus describeconfigrules describeconfigurationaggregatorsourcesstatus describeconfigurationaggregators describeconfigurationrecorderstatus describeconfigurationrecorders describeconformancepackcompliance describeconformancepackstatus describeconformancepacks describedeliverychannelstatus describedeliverychannels describeorganizationconfigrulestatuses describeorganizationconfigrules describeorganizationconformancepackstatuses describeorganizationconformancepacks describependingaggregationrequests describeremediationconfigurations describeremediationexceptions describeremediationexecutionstatus describeretentionconfigurations disassociateresourcetypes getaggregatecompliancedetailsbyconfigrule getaggregateconfigrulecompliancesummary getaggregateconformancepackcompliancesummary getaggregatediscoveredresourcecounts getaggregateresourceconfig getcompliancedetailsbyconfigrule getcompliancedetailsbyresource getcompliancesummarybyconfigrule getcompliancesummarybyresourcetype getconformancepackcompliancedetails getconformancepackcompliancesummary getconnector getcustomrulepolicy getdiscoveredresourcecounts getorganizationconfigruledetailedstatus getorganizationconformancepackdetailedstatus getorganizationcustomrulepolicy getresourceconfighistory getresourceevaluationsummary getstoredquery listaggregatediscoveredresources listconfigurationrecorders listconformancepackcompliancescores listconnectors listdiscoveredresources listresourceevaluations liststoredqueries listtagsforresource putaggregationauthorization putconfigrule putconfigurationaggregator putconfigurationrecorder putconformancepack putconnector putdeliverychannel putevaluations putexternalevaluation putorganizationconfigrule putorganizationconformancepack putremediationconfigurations putremediationexceptions putresourceconfig putretentionconfiguration putservicelinkedconfigurationrecorder putstoredquery putthirdpartyservicelinkedconfigurationrecorder selectaggregateresourceconfig selectresourceconfig startconfigrulesevaluation startconfigurationrecorder startremediationexecution startresourceevaluation stopconfigurationrecorder tagresource untagresource

Actions (102)

Config actions that managed policies grant
Action	Access level	Policies granting without limits	Policies granting with resource or condition limits
config:AssociateResourceTypes	Write	5	3
config:BatchGetAggregateResourceConfig	Read	12	1
config:BatchGetResourceConfig	Read	16	2
config:DeleteAggregationAuthorization	Write	5	1
config:DeleteConfigRule	Write	5	7
config:DeleteConfigurationAggregator	Write	5	5
config:DeleteConfigurationRecorder	Write	5	1
config:DeleteConformancePack	Write	5	3
config:DeleteConnector	Write	5	1
config:DeleteDeliveryChannel	Write	5	1
config:DeleteEvaluationResults	Write	5	2
config:DeleteOrganizationConfigRule	Write	5	1
config:DeleteOrganizationConformancePack	Write	5	1
config:DeletePendingAggregationRequest	Write	5	1
config:DeleteRemediationConfiguration	Write	5	2
config:DeleteRemediationExceptions	Write	5	1
config:DeleteResourceConfig	Write	5	1
config:DeleteRetentionConfiguration	Write	5	1
config:DeleteServiceLinkedConfigurationRecorder	Write	5	13
config:DeleteStoredQuery	Write	5	1
config:DeliverConfigSnapshot	Read	8	1
config:DescribeAggregateComplianceByConfigRules	Read	18	2
config:DescribeAggregateComplianceByConformancePacks	Read	17	1
config:DescribeAggregationAuthorizations	List	19	4
config:DescribeComplianceByConfigRule	Read	21	3
config:DescribeComplianceByResource	Read	19	1
config:DescribeConfigRuleEvaluationStatus	Read	22	1
config:DescribeConfigRules	List	27	3
config:DescribeConfigurationAggregatorSourcesStatus	Read	18	1
config:DescribeConfigurationAggregators	List	20	3
config:DescribeConfigurationRecorderStatus	Read	31	8
config:DescribeConfigurationRecorders	Read	40	8
config:DescribeConformancePackCompliance	Read	18	1
config:DescribeConformancePackStatus	Read	21	1
config:DescribeConformancePacks	List	20	3
config:DescribeDeliveryChannelStatus	Read	20	1
config:DescribeDeliveryChannels	List	23	2
config:DescribeOrganizationConfigRuleStatuses	Read	18	1
config:DescribeOrganizationConfigRules	List	18	1
config:DescribeOrganizationConformancePackStatuses	Read	18	1
config:DescribeOrganizationConformancePacks	List	19	3
config:DescribePendingAggregationRequests	List	18	1
config:DescribeRemediationConfigurations	List	19	3
config:DescribeRemediationExceptions	List	18	1
config:DescribeRemediationExecutionStatus	Read	18	1
config:DescribeRetentionConfigurations	List	18	1
config:DisassociateResourceTypes	Write	5	3
config:GetAggregateComplianceDetailsByConfigRule	Read	12	1
config:GetAggregateConfigRuleComplianceSummary	Read	12	1
config:GetAggregateConformancePackComplianceSummary	Read	11	1
config:GetAggregateDiscoveredResourceCounts	Read	12	1
config:GetAggregateResourceConfig	Read	14	1
config:GetComplianceDetailsByConfigRule	Read	13	6
config:GetComplianceDetailsByResource	Read	12	1
config:GetComplianceSummaryByConfigRule	Read	13	1
config:GetComplianceSummaryByResourceType	Read	12	1
config:GetConformancePackComplianceDetails	Read	12	1
config:GetConformancePackComplianceSummary	Read	12	1
config:GetConnector	Read	16	2
config:GetCustomRulePolicy	Read	12	1
config:GetDiscoveredResourceCounts	Read	13	1
config:GetOrganizationConfigRuleDetailedStatus	Read	12	1
config:GetOrganizationConformancePackDetailedStatus	Read	12	1
config:GetOrganizationCustomRulePolicy	Read	11	1
config:GetResourceConfigHistory	Read	16	1
config:GetResourceEvaluationSummary	Read	11	1
config:GetStoredQuery	Read	17	3
config:ListAggregateDiscoveredResources	List	18	1
config:ListConfigurationRecorders	List	24	2
config:ListConformancePackComplianceScores	List	17	1
config:ListConnectors	List	20	1
config:ListDiscoveredResources	List	21	2
config:ListResourceEvaluations	List	18	1
config:ListStoredQueries	List	18	3
config:ListTagsForResource	Read	19	3
config:PutAggregationAuthorization	Write	8	2
config:PutConfigRule	Write	8	8
config:PutConfigurationAggregator	Write	8	5
config:PutConfigurationRecorder	Write	10	1
config:PutConformancePack	Write	8	4
config:PutConnector	Write	9	1
config:PutDeliveryChannel	Write	10	1
config:PutEvaluations	Write	11	1
config:PutExternalEvaluation	Write	8	1
config:PutOrganizationConfigRule	Write	8	1
config:PutOrganizationConformancePack	Write	8	1
config:PutRemediationConfigurations	Write	8	2
config:PutRemediationExceptions	Write	8	1
config:PutResourceConfig	Write	8	1
config:PutRetentionConfiguration	Write	8	1
config:PutServiceLinkedConfigurationRecorder	Write	9	11
config:PutStoredQuery	Write	8	1
config:PutThirdPartyServiceLinkedConfigurationRecorder	Write	8	4
config:SelectAggregateResourceConfig	Read	15	3
config:SelectResourceConfig	Read	19	2
config:StartConfigRulesEvaluation	Write	5	2
config:StartConfigurationRecorder	Write	7	1
config:StartRemediationExecution	Write	5	1
config:StartResourceEvaluation	Write	5	1
config:StopConfigurationRecorder	Write	5	1
config:TagResource	Tagging	6	4
config:UntagResource	Tagging	6	1