EC2
Prefix ec2, 834 actions · Domain Compute
352 AWS managed policies. 30 have reviewed guidance; the rest have authoritative permission data pending editorial review. 130 are service-linked role policies, shown with permission data only.
User access (67)
- AdministratorAccess-AWSElasticBeanstalkAdmin
- AmazonDataZoneEnvironmentRolePermissionsBoundaryAdmin
- AmazonDataZoneProjectRolePermissionsBoundaryAdmin
- AmazonDocDBConsoleFullAccessAdmin
- AmazonDocDBElasticFullAccessAdmin
- AmazonDocDBReadOnlyAccessReader
- AmazonEC2FullAccessAdmin
- AmazonEC2ImageReferencesAccessPolicyReader
- AmazonEC2ReadOnlyAccessReader
- AmazonECS_FullAccessAdmin
- AmazonEKSMCPReadOnlyAccessAnalyst
- AmazonEKSWorkerNodePolicyReader
- AmazonElasticFileSystemFullAccessAdmin
- AmazonElasticFileSystemReadOnlyAccessReader
- AmazonFSxConsoleFullAccessAdmin
- AmazonFSxConsoleReadOnlyAccessReader
- AmazonKeyspacesReadOnlyAccess_v2Reader
- AmazonLaunchWizard_FullaccessAdmin
- AmazonLaunchWizardFullAccessV2Admin
- AmazonManagedBlockchainConsoleFullAccessAdmin
- AmazonMQApiFullAccessAdmin
- AmazonMQApiReadOnlyAccessReader
- AmazonMQFullAccessAdmin
- AmazonMQReadOnlyAccessReader
- AmazonMSKFullAccessAdmin
- AmazonMSKReadOnlyAccessReader
- AmazonNimbleStudio-LaunchProfileWorkerReader
- AmazonRDSReadOnlyAccessReader
- AmazonRoute53ResolverFullAccessAdmin
- AmazonRoute53ResolverReadOnlyAccessReader
- AmazonS3FilesFullAccessAdmin
- AmazonS3FilesReadOnlyAccessReader
- AmazonVPCReadOnlyAccessReader
- AmazonWorkDocsReadOnlyAccessReader
- AmazonWorkSpacesSecureBrowserReadOnlyReader
- AmazonWorkSpacesWebReadOnlyReader
- AmazonZocaloFullAccessAdmin
- AmazonZocaloReadOnlyAccessReader
- AutoScalingConsoleFullAccessAdmin
- AutoScalingFullAccessAdmin
- AWSApplicationMigrationFullAccessAdmin
- AWSApplicationMigrationReadOnlyAccessReader
- AWSCloud9AdministratorAdmin
- AWSCodeStarFullAccessReader
- AWSDeepRacerCloudFormationAccessPolicyAdmin
- AWSDirectoryServiceFullAccessAdmin
- AWSElasticBeanstalkManagedUpdatesCustomerRolePolicyAdmin
- AWSElasticBeanstalkReadOnlyReader
- AWSElasticDisasterRecoveryConsoleFullAccessAdmin
- AWSElasticDisasterRecoveryConsoleFullAccess_v2Admin
- AWSElasticDisasterRecoveryReadOnlyAccessReader
- AWSImageBuilderFullAccessAdmin
- AWSMarketplaceFullAccessAdmin
- AWSMarketplaceRead-onlyReader
- AWSMarketplaceSellerProductsReadOnlyReader
- AWSMigrationHubRefactorSpaces-EnvironmentsWithoutBridgesFullAccessAdmin
- AWSMigrationHubRefactorSpacesFullAccessAdmin
- DataScientistHigh privilegeAdmin
- ElasticLoadBalancingFullAccessAdmin
- ElasticLoadBalancingReadOnlyReader
- NeptuneGraphReadOnlyAccessReader
- NeptuneReadOnlyAccessReader
- NetworkAdministratorAdmin
- SageMakerStudioAdminIAMConsolePolicyAdmin
- SupportUserAdmin
- SystemAdministratorHigh privilegeAdmin
- VPCLatticeReadOnlyAccessReader
Operator and limited (95)
- AIDevOpsReleaseManagementVPCPolicyOperator
- AmazonDataZoneProjectDeploymentPermissionsBoundaryHigh privilegeOperator
- AmazonDataZoneSageMakerProvisioningRolePolicyOperator
- AmazonDRSVPCManagementOperator
- AmazonEBSCSIDriverEKSClusterScopedPolicyOperator
- AmazonEBSCSIDriverPolicyV2Operator
- AmazonEC2RolePolicyForLaunchWizardOperator
- AmazonECSInfrastructureRoleForGatewayHostSharedALBOperator
- AmazonECSInfrastructureRolePolicyForManagedInstancesOperator
- AmazonECSInfrastructureRolePolicyForVpcLatticeOperator
- AmazonEKS_CNI_PolicyOperator
- AmazonEKSBlockStoragePolicyOperator
- AmazonEKSBlockStoragePolicyV2Operator
- AmazonEKSClusterPolicyOperator
- AmazonEKSComputePolicyOperator
- AmazonEKSLoadBalancingPolicyOperator
- AmazonEKSLocalOutpostClusterPolicyOperator
- AmazonEKSNetworkingPolicyOperator
- AmazonEKSServicePolicyOperator
- AmazonEKSVPCResourceControllerOperator
- AmazonElasticMapReducePlacementGroupPolicyOperator
- AmazonEMRFullAccessPolicy_v2Operator
- AmazonNimbleStudio-StudioAdminOperator
- AmazonNimbleStudio-StudioUserOperator
- AmazonODBNetworkAdminOperator
- AmazonRDSCustomInstanceProfileRolePolicyOperator
- AmazonSageMakerGroundTruthExecutionOperator
- AmazonSageMakerHyperPodInferenceAccessOperator
- AmazonSageMakerJobFullAccessOperator
- AmazonSageMakerTrainingSessionFullAccessOperator
- AmazonTimestreamInfluxDBFullAccessOperator
- AmazonTimestreamInfluxDBFullAccessWithoutMarketplaceAccessOperator
- AmazonVPCCrossAccountNetworkInterfaceOperationsOperator
- AmazonVPCFullAccessOperator
- AmazonVPCNetworkAccessAnalyzerFullAccessPolicyOperator
- AmazonVPCReachabilityAnalyzerFullAccessPolicyOperator
- AmazonWorkSpacesPoolServiceAccessOperator
- AmazonWorkSpacesServiceAccessOperator
- AWS-SSM-DiagnosisAutomation-ExecutionRolePolicyOperator
- AWS-SSM-RemediationAutomation-ExecutionRolePolicyOperator
- AWSApplicationMigrationEC2AccessOperator
- AWSApplicationMigrationNetworkMigrationCustomResourceOperator
- AWSApplicationMigrationNetworkMigrationMultiAccountOperator
- AWSBackupGuardDutyRolePolicyForScansOperator
- AWSBackupServiceRolePolicyForIndexingOperator
- AWSBackupServiceRolePolicyForScansOperator
- AWSBudgetsActions_RolePolicyForResourceAdministrationWithSSMOperator
- AWSCloud9UserOperator
- AWSConnectorOperator
- AWSEC2VssRestorePolicyOperator
- AWSEC2VssSnapshotPolicyOperator
- AWSElasticBeanstalkCustomPlatformforEC2RoleOperator
- AWSElasticBeanstalkEKSTaggingOperator
- AWSIoTDeviceTesterForFreeRTOSFullAccessOperator
- AWSLambdaManagedEC2ResourceOperatorOperator
- AWSLambdaNetworkConnectorOperatorPolicyOperator
- AWSMarketplaceAmiIngestionOperator
- AWSMarketplaceImageBuildFullAccessOperator
- AWSMarketplaceSellerProductsFullAccessOperator
- AWSMobileHub_FullAccessOperator
- AWSNetworkFirewallFullAccessOperator
- AWSPartnerLedSupportReadOnlyAccessOperator
- AWSQuickSetupDistributorPermissionsBoundaryOperator
- AWSQuickSetupManagedInstanceProfileExecutionPolicyOperator
- AWSQuickSetupPatchPolicyTagManagementExecutionPolicyOperator
- AWSQuickSetupSchedulerPermissionsBoundaryOperator
- AWSQuickSetupSSMHostMgmtPermissionsBoundaryOperator
- AWSQuickSetupStartStopInstancesExecutionPolicyOperator
- AWSRefactoringToolkitFullAccessOperator
- AWSRoboMakerServiceRolePolicyOperator
- AWSThinkboxAWSPortalAdminPolicyOperator
- AWSThinkboxAWSPortalWorkerPolicyOperator
- AWSThinkboxDeadlineResourceTrackerAccessPolicyOperator
- AWSThinkboxDeadlineSpotEventPluginAdminPolicyOperator
- AWSThinkboxDeadlineSpotEventPluginWorkerPolicyOperator
- AWSTransformInfrastructureExecutorAccessBatchOperator
- AWSTransformInfrastructureExecutorAccessEC2Operator
- AWSTransformNetworkMigrationAgentPolicyOperator
- AWSTransformServerMigrationAgentPolicyOperator
- BedrockAgentCoreRuntimeInstancesOperatorRolePolicyOperator
- CloudWatchActionsEC2AccessOperator
- CloudWatchAgentServerPolicyOperator
- CloudWatchOmniAWSIntegrationPolicyOperator
- DBModDiscoveryAndAssessmentOperator
- DBModVirtualSourceOperator
- EC2FastLaunchFullAccessOperator
- Ec2ImageBuilderCrossAccountDistributionAccessOperator
- EC2ImageBuilderExecutionPolicyOperator
- EC2InstanceConnectOperator
- EC2InstanceProfileForImageBuilderOperator
- GameLiftGameServerGroupPolicyOperator
- NeptuneConsoleFullAccessOperator
- ROSASharedVPCEndpointPolicyOperator
- ViewOnlyAccessOperator
- WorkLinkServiceRolePolicyOperator
Service roles (60)
- AmazonAppStreamServiceAccessOperator
- AmazonDMSVPCManagementRoleOperator
- AmazonEBSCSIDriverPolicyOperator
- AmazonEC2ContainerServiceRoleOperator
- AmazonEC2RoleforDataPipelineRoleHigh privilegeAdmin
- AmazonEC2SpotFleetAutoscaleRoleOperator
- AmazonEC2SpotFleetTaggingRoleOperator
- AmazonECSInfrastructureRoleforExpressGatewayServicesOperator
- AmazonECSInfrastructureRolePolicyForVolumesOperator
- AmazonEFSCSIDriverPolicyOperator
- AmazonElasticMapReduceEditorsRoleOperator
- AmazonElasticMapReduceforEC2RoleHigh privilegeAdmin
- AmazonElasticMapReduceRoleHigh privilegeOperator
- AmazonEMRServicePolicy_v2Operator
- AmazonEMRServicePolicyForSessionsOperator
- AmazonGrafanaCloudWatchAccessAnalyst
- AmazonMachineLearningRoleforRedshiftDataSourceV3Operator
- AmazonSageMakerQuickSightVPCPolicyOperator
- AWSApplicationMigrationFSxProxyVPCPolicyOperator
- AWSApplicationMigrationReplicationServerPolicyOperator
- AWSBackupServiceRolePolicyForBackupOperator
- AWSBackupServiceRolePolicyForRestoresOperator
- AWSBatchServiceRoleOperator
- AWSCloudHSMRoleOperator
- AWSCodeStarServiceRoleAdmin
- AWSDataLifecycleManagerServiceRoleOperator
- AWSDataLifecycleManagerServiceRoleForAMIManagementOperator
- AWSElasticBeanstalkEnhancedHealthOperator
- AWSElasticBeanstalkRoleCoreOperator
- AWSElasticDisasterRecoveryCrossAccountReplicationPolicyOperator
- AWSElasticDisasterRecoveryNetworkReplicationPolicyReader
- AWSElasticDisasterRecoveryReplicationServerPolicyOperator
- AWSElasticDisasterRecoveryStagingAccountPolicyOperator
- AWSElasticDisasterRecoveryStagingAccountPolicy_v2Operator
- AWSFaultInjectionSimulatorEC2AccessOperator
- AWSFaultInjectionSimulatorECSAccessOperator
- AWSFaultInjectionSimulatorEKSAccessOperator
- AWSFaultInjectionSimulatorNetworkAccessOperator
- AWSGlueDataBrewServiceRoleOperator
- AWSLambdaENIManagementAccessOperator
- AWSLambdaMSKExecutionRoleOperator
- AWSLambdaVPCAccessExecutionRoleOperator
- AWSMigrationHubDiscoveryAccessOperator
- AWSMigrationHubRefactorSpaces-SSMAutomationPolicyOperator
- AWSTransformApplicationDeploymentPolicyOperator
- CloudWatchEventsBuiltInTargetExecutionAccessOperator
- EC2ImageBuilderLifecycleExecutionPolicyOperator
- ROSAAmazonEBSCSIDriverOperatorPolicyOperator
- ROSACloudNetworkConfigOperatorPolicyOperator
- ROSAControlPlaneOperatorPolicyOperator
- ROSAInstallerPolicyOperator
- ROSAKarpenterControllerPolicyOperator
- ROSAKubeControllerPolicyOperator
- ROSANodePoolManagementPolicyOperator
- ROSASRESupportPolicyOperator
- ROSAWorkerInstancePolicyReader
- SageMakerStudioEMRServiceRolePolicyOperator
- ServerMigration_ServiceRoleOperator
- ServerMigrationServiceLaunchRoleOperator
- VMImportExportRoleForAWSConnectorOperator
Service-linked roles (130)
- AmazonBioDiscoveryServiceLinkedRolePolicyOperator
- AmazonECSComputeServiceRolePolicyOperator
- AmazonECSServiceRolePolicyOperator
- AmazonEKSForFargateServiceRolePolicyOperator
- AmazonEKSLocalOutpostServiceRolePolicyOperator
- AmazonEKSServiceRolePolicyOperator
- AmazonElasticFileSystemServiceRolePolicyOperator
- AmazonElasticsearchServiceRolePolicyOperator
- AmazonEMRCleanupPolicyOperator
- AmazonEMRContainersServiceRolePolicyOperator
- AmazonEMRServerlessServiceRolePolicyOperator
- AmazonEVSServiceRolePolicyOperator
- AmazonFSxServiceRolePolicyOperator
- AmazonGrafanaServiceLinkedRolePolicyOperator
- AmazonGuardDutyMalwareProtectionServiceRolePolicyOperator
- AmazonGuardDutyServiceRolePolicyOperator
- AmazonInspector2AgentlessServiceRolePolicyOperator
- AmazonInspector2AmiScanServiceRolePolicyOperator
- AmazonInspector2ServiceRolePolicyOperator
- AmazonInspectorServiceRolePolicyReader
- AmazonMQServiceRolePolicyOperator
- AmazonMWAAServerlessServiceRolePolicyOperator
- AmazonMWAAServiceRolePolicyOperator
- AmazonODBServiceRolePolicyOperator
- AmazonOpenSearchIngestionServiceRolePolicyOperator
- AmazonOpenSearchServiceRolePolicyOperator
- AmazonPrometheusScraperServiceRolePolicyOperator
- AmazonRDSBetaServiceRolePolicyOperator
- AmazonRDSCustomPreviewServiceRolePolicyOperator
- AmazonRDSCustomServiceRolePolicyOperator
- AmazonRDSPreviewServiceRolePolicyOperator
- AmazonRDSServiceRolePolicyOperator
- AmazonRedshiftServiceLinkedRolePolicyOperator
- AmazonSageMakerCoreServiceRolePolicyOperator
- AmazonSageMakerInferenceServiceRolePolicyOperator
- AmazonSageMakerNotebooksServiceRolePolicyOperator
- AmazonTimestreamInfluxDBServiceRolePolicyOperator
- AmazonWorkSpacesWebServiceRolePolicyOperator
- APIGatewayServiceRolePolicyOperator
- AppRunnerNetworkingServiceRolePolicyOperator
- AssuranceServiceRolePolicyOperator
- AutoScalingServiceRolePolicyOperator
- AWSApplicationAutoscalingEC2SpotFleetRequestPolicyOperator
- AWSApplicationMigrationServiceRolePolicyOperator
- AWSAuditManagerServiceRolePolicyOperator
- AWSBackupServiceLinkedRolePolicyForBackupOperator
- AWSBedrockAgentCoreGatewayNetworkServiceRolePolicyOperator
- AWSBedrockAgentCoreIdentityNetworkServiceRolePolicyOperator
- AWSBedrockAgentCoreRuntimeInstancesServiceRolePolicyOperator
- AWSCloud9ServiceRolePolicyOperator
- AWSCloudFrontVPCOriginServiceRolePolicyOperator
- AWSContinuumCollectorServiceRolePolicyOperator
- AWSDeviceFarmServiceRolePolicyOperator
- AWSDeviceFarmTestGridServiceRolePolicyOperator
- AWSDirectoryServiceServiceRolePolicyOperator
- AWSEC2CapacityReservationFleetRolePolicyOperator
- AWSEC2FleetServiceRolePolicyOperator
- AWSEC2SpotFleetServiceRolePolicyOperator
- AWSEC2SpotServiceRolePolicyOperator
- AWSEC2SqlHaServiceRolePolicyOperator
- AWSElasticBeanstalkManagedUpdatesServiceRolePolicyAdmin
- AWSElasticBeanstalkServiceRolePolicyOperator
- AWSElasticDisasterRecoveryServiceRolePolicyOperator
- AWSElasticLoadBalancingClassicServiceRolePolicyOperator
- AWSElasticLoadBalancingServiceRolePolicyOperator
- AWSEnhancedClassicNetworkingMangementPolicyReader
- AWSGlobalAcceleratorSLRPolicyOperator
- AWSHealthOmicsServiceLinkedRolePolicyOperator
- AWSIPAMServiceRolePolicyOperator
- AWSKeyManagementServiceCustomKeyStoresServiceRolePolicyOperator
- AWSLambdaServiceRolePolicyOperator
- AWSLicenseManagerLinuxSubscriptionsServiceRolePolicyOperator
- AWSLicenseManagerUserSubscriptionsServiceRolePolicyOperator
- AWSM2ServicePolicyOperator
- AWSManagedServices_ContactsServiceRolePolicyReader
- AWSMediaConnectServicePolicyOperator
- AWSMigrationHubOrchestratorServiceRolePolicyOperator
- AWSMigrationHubRefactorSpacesServiceRolePolicyOperator
- AWSNATGatewayServiceRolePolicyOperator
- AWSNetworkFirewallIGWServiceRolePolicyOperator
- AWSNetworkFirewallServiceRolePolicyOperator
- AWSNetworkManagerCloudWANServiceRolePolicyOperator
- AWSNetworkManagerServiceRolePolicyReader
- AWSOutpostsServiceRolePolicyOperator
- AWSPCSServiceRolePolicyOperator
- AWSReachabilityAnalyzerServiceRolePolicyOperator
- AWSRoboMakerServicePolicyOperator
- AWSS3OnOutpostsServiceRolePolicyOperator
- AWSSecurityAgentServiceRolePolicyOperator
- AWSServiceRoleForAIDevOpsPolicyOperator
- AWSServiceRoleForAmazonEKSNodegroupOperator
- AWSServiceRoleForEC2ScheduledInstancesOperator
- AWSServiceRoleForGroundStationDataflowEndpointGroupPolicyReader
- AWSServiceRoleForImageBuilderOperator
- AWSServiceRoleForSMSOperator
- AWSServiceRolePolicyForBackupRestoreTestingOperator
- AWSServiceRolePolicyForWorkspacesInstancesOperator
- AWSSSMForSAPServiceLinkedRolePolicyOperator
- AWSTrustedAdvisorServiceRolePolicyReader
- AWSVpcLatticeServiceRolePolicyOperator
- AWSVPCTransitGatewayServiceRolePolicyOperator
- AWSVPCVerifiedAccessServiceRolePolicyOperator
- AWSZonalAutoshiftPracticeRunSLRPolicyOperator
- BatchServiceRolePolicyOperator
- BedrockAgentCoreNetworkServiceRolePolicyOperator
- ClientVPNServiceRolePolicyOperator
- CloudWatchEventsServiceRolePolicyOperator
- CloudWatchInternetMonitorServiceRolePolicyOperator
- CloudWatchNetworkFlowMonitorTopologyServiceRolePolicyOperator
- CloudWatchNetworkMonitorServiceRolePolicyOperator
- ComputeOptimizerAutomationServiceRolePolicyOperator
- DAXServiceRolePolicyOperator
- DeclarativePoliciesEC2ReportReader
- EC2ApplicationStatusChecksServiceRolePolicyOperator
- EC2FastLaunchServiceRolePolicyOperator
- EC2FleetTimeShiftableServiceRolePolicyOperator
- Ec2InstanceConnectEndpointOperator
- ElastiCacheServiceRolePolicyOperator
- FMSServiceRolePolicyOperator
- KafkaConnectServiceRolePolicyOperator
- KafkaServiceRolePolicyOperator
- LightsailExportAccessOperator
- MemoryDBServiceRolePolicyOperator
- MigrationHubServiceRolePolicyOperator
- NetworkSecurityDirectorServiceLinkedRolePolicyOperator
- NetworkSecurityManagerServiceRolePolicyOperator
- OpensearchIngestionSelfManagedVpcePolicyOperator
- Route53PrivateHealthChecksServiceRolePolicyOperator
- Route53RecoveryReadinessServiceRolePolicyOperator
- RTBFabricServiceRolePolicyOperator
Also grants EC2 actions (162)
- AccessAnalyzerServiceRolePolicy
- AdministratorAccess
- AIDevOpsAgentAccessPolicy
- AIDevOpsAgentActionsPolicy
- AIOpsAssistantPolicy
- AmazonAppStreamFullAccess
- AmazonAuroraDSQLConsoleFullAccess
- AmazonBedrockFullAccess
- AmazonBedrockLimitedAccess
- AmazonBioDiscoveryFullAccess
- AmazonDataZoneFullAccess
- AmazonDataZoneGlueManageAccessRolePolicy
- AmazonDataZonePreviewConsoleFullAccess
- AmazonDataZoneSageMakerEnvironmentRolePermissionsBoundary
- AmazonDevOpsGuruServiceRolePolicy
- AmazonDocDBFullAccess
- AmazonDynamoDBFullAccess
- AmazonDynamoDBFullAccess_v2
- AmazonDynamoDBFullAccesswithDataPipeline
- AmazonDynamoDBReadOnlyAccess
- AmazonEC2ContainerServiceforEC2Role
- AmazonEC2RoleforSSM
- AmazonElastiCacheFullAccess
- AmazonElasticFileSystemsUtils
- AmazonElasticMapReduceFullAccess
- AmazonFISServiceRolePolicy
- AmazonFSxFullAccess
- AmazonInspectorFullAccess
- AmazonInspectorReadOnlyAccess
- AmazonKendraFullAccess
- AmazonKeyspacesFullAccess
- AmazonODBAutonomousDatabaseAdmin
- AmazonODBAutonomousVmClusterAdmin
- AmazonODBExadataInfrastructureAdmin
- AmazonODBExadataVmClusterAdmin
- AmazonODBExascaleStorageVaultAdmin
- AmazonODBExascaleVmClusterAdmin
- AmazonODBFullAccess
- AmazonODBReadOnlyAccess
- AmazonPrometheusFullAccess
- AmazonRDSFullAccess
- AmazonRedshiftFullAccess
- AmazonRedshiftReadOnlyAccess
- AmazonRoute53AutoNamingFullAccess
- AmazonRoute53FullAccess
- AmazonRoute53GlobalResolverFullAccess
- AmazonRoute53ProfilesFullAccess
- AmazonS3OutpostsFullAccess
- AmazonS3OutpostsReadOnlyAccess
- AmazonSageMakerCanvasFullAccess
- AmazonSageMakerFullAccess
- AmazonSageMakerModelCustomizationCoreAccess
- AmazonSSMAutomationRole
- AmazonSSMFullAccess
- AmazonSSMServiceRolePolicy
- AmazonWorkDocsFullAccess
- AmazonWorkMailFullAccess
- AmplifyBackendDeployFullAccess
- AutoScalingConsoleReadOnlyAccess
- AWS_ConfigRole
- AWSBackupFullAccess
- AWSBackupOperatorAccess
- AWSBackupServiceRolePolicyForItemRestores
- AWSBatchFullAccess
- AWSBudgetsActionsWithAWSResourceControlAccess
- AWSBudgetsSpendLimitMemberRolePolicy
- AWSCloudMapFullAccess
- AWSCloudMapRegisterInstanceAccess
- AWSCODAPermissionsBoundary
- AWSCodeBuildAdminAccess
- AWSCodeDeployRole
- AWSCodePipeline_FullAccess
- AWSConfigServiceRolePolicy
- AWSControlTowerServiceRolePolicy
- AWSDataSyncFullAccess
- AWSDataSyncReadOnlyAccess
- AWSDeadlineCloud-UserAccessFarms
- AWSDeadlineCloud-UserAccessFleets
- AWSDeadlineCloud-UserAccessJobs
- AWSDeadlineCloud-UserAccessQueues
- AWSDeepRacerRoboMakerAccessPolicy
- AWSDirectConnectFullAccess
- AWSDirectConnectReadOnlyAccess
- AWSDirectoryServiceReadOnlyAccess
- AWSElasticBeanstalkService
- AWSElasticDisasterRecoveryRecoveryInstancePolicy
- AWSFinOpsAgentServiceRolePolicy
- AWSFMAdminFullAccess
- AWSFMAdminReadOnlyAccess
- AWSGlueConsoleFullAccess
- AWSGlueConsoleSageMakerNotebookFullAccess
- AwsGlueDataBrewFullAccessPolicy
- AWSGlueServiceNotebookRole
- AWSGlueServiceRole
- AwsGlueSessionUserRestrictedNotebookServiceRole
- AwsGlueSessionUserRestrictedServiceRole
- AWSLambda_FullAccess
- AWSLambda_ReadOnlyAccess
- AWSLambdaFullAccess
- AWSLicenseManagerServiceRolePolicy
- AWSManagementConsoleAdministratorAccess
- AWSManagementConsoleBasicUserAccess
- AWSMarketplaceSellerFullAccess
- AWSMcpServiceActionsFullAccess
- AWSMigrationHubOrchestratorConsoleFullAccess
- AWSObservabilityAdminTelemetryEnablementServiceRolePolicy
- AWSQuickSetupPatchPolicyPermissionsBoundary
- AWSResilienceHubAsssessmentExecutionPolicy
- AWSResilienceHubV2AssessmentExecutionPolicy
- AWSResourceExplorerFullAccess
- AWSResourceExplorerOrganizationsAccess
- AWSResourceExplorerReadOnlyAccess
- AWSResourceExplorerServiceRolePolicy
- AWSResourceGroupsReadOnlyAccess
- AWSShieldDRTAccessPolicy
- AWSStorageGatewayFullAccess
- AWSStorageGatewayReadOnlyAccess
- AWSSupportServiceRolePolicy
- AWSSystemsManagerForSAPFullAccess
- AWSSystemsManagerJustInTimeAccessServicePolicy
- AWSTransferConsoleFullAccess
- AWSTransferFullAccess
- AWSTransformApplicationECSDeploymentPolicy
- AWSWAFConsoleFullAccess
- AWSWAFConsoleReadOnlyAccess
- AWSWAFFullAccess
- AWSWAFReadOnlyAccess
- AWSWellArchitectedAgentResourceScanningServiceRolePolicy
- CloudFrontFullAccess
- CloudFrontReadOnlyAccess
- CloudWatchAgentAdminPolicy
- CloudWatchApplicationInsightsFullAccess
- CloudwatchApplicationInsightsServiceLinkedRolePolicy
- CloudWatchAutomaticDashboardsAccess
- CloudWatchInternetMonitorFullAccess
- CloudWatchSyntheticsFullAccess
- ComputeOptimizerReadOnlyAccess
- ComputeOptimizerServiceRolePolicy
- ConsoleFullAccessFromVercel
- ConsoleViewOnlyAccessFromVercel
- DatabaseAdministrator
- FinOpsAgentAgentPolicy
- GlobalAcceleratorFullAccess
- NeptuneFullAccess
- PowerUserAccess
- ReadOnlyAccess
- ResourceGroupsTaggingAPITagUntagSupportedResources
- SageMakerStudioAdminIAMDefaultExecutionPolicy
- SageMakerStudioAdminIAMPermissiveExecutionPolicy
- SageMakerStudioFullAccess
- SageMakerStudioProjectProvisioningRolePolicy
- SageMakerStudioProjectRoleMachineLearningPolicy
- SageMakerStudioProjectUserRolePermissionsBoundary
- SageMakerStudioProjectUserRolePolicy
- SageMakerStudioUserIAMDefaultExecutionPolicy
- SageMakerStudioUserIAMPermissiveExecutionPolicy
- SecretsManagerReadWrite
- SecurityAudit
- SecurityLakeServiceLinkedRole
- ServerMigrationServiceConsoleFullAccess
- VPCLatticeFullAccess
- WellArchitectedAgentResourceScanning
acceptaddresstransfer acceptcapacityreservationbillingownership acceptreservedinstancesexchangequote accepttransitgatewayclientvpnattachment accepttransitgatewaymulticastdomainassociations accepttransitgatewaypeeringattachment accepttransitgatewayvpcattachment acceptvpcendpointconnections acceptvpcpeeringconnection advertisebyoipcidr allocateaddress allocatehosts allocateipampoolcidr applysecuritygroupstoclientvpntargetnetwork assignipv6addresses assignprivateipaddresses assignprivatenatgatewayaddress associateaddress associateapplicationstatuscheck associatecapacityreservationbillingowner associateclientvpntargetnetwork associatedhcpoptions associateenclavecertificateiamrole associateiaminstanceprofile associateinstanceeventwindow associateipambyoasn associateipamresourcediscovery associatenatgatewayaddress associaterouteserver associateroutetable associatesecuritygroupvpc associatesubnetcidrblock associatetransitgatewaymulticastdomain associatetransitgatewaypolicytable associatetransitgatewayroutetable associatetrunkinterface associateverifiedaccessinstancewebacl associatevpccidrblock attachappliancetonatgateway attachclassiclinkvpc attachimagewatermark attachinternetgateway attachnetworkinterface attachresourcestoplacementgroup attachverifiedaccesstrustprovider attachvolume attachvpngateway authorizeclientvpningress authorizesecuritygroupegress authorizesecuritygroupingress batchmodifyipamroutingpolicyregistrations bundleinstance cancelbundletask cancelcapacityreservation cancelcapacityreservationfleets cancelconversiontask canceldeclarativepoliciesreport cancelexporttask cancelimagelaunchpermission cancelimporttask cancelreservedinstanceslisting cancelspotfleetrequests cancelspotinstancerequests confirmproductinstance copyfpgaimage copyimage copysnapshot copyvolumes createapplicationstatuscheck createcapacitymanagerdataexport createcapacityreservation createcapacityreservationbysplitting createcapacityreservationcancellationquote createcapacityreservationdatechangequote createcapacityreservationfleet createcarriergateway createclientvpnendpoint createclientvpnroute createcoipcidr createcoippool createcoippoolpermission createcustomergateway createdefaultsubnet createdefaultvpc createdelegatemacvolumeownershiptask createdhcpoptions createegressonlyinternetgateway createfleet createflowlogs createfpgaimage createimage createimageusagereport createinstanceconnectendpoint createinstanceeventwindow createinstanceexporttask createinternetgateway createinterruptiblecapacityreservationallocation createipam createipamexternalresourceverificationtoken createipaminternetregistryassociation createipampolicy createipampool createipamprefixlistresolver createipamprefixlistresolvertarget createipamresourcediscovery createipamroutingpolicyregistration createipamscope createkeypair createlaunchtemplate createlaunchtemplateversion createlocalgatewayroute createlocalgatewayroutetable createlocalgatewayroutetablepermission createlocalgatewayroutetablevirtualinterfacegroupassociation createlocalgatewayroutetablevpcassociation createlocalgatewayvirtualinterface createlocalgatewayvirtualinterfacegroup createmacsystemintegrityprotectionmodificationtask createmanagedprefixlist createnatgateway createnetworkacl createnetworkaclentry createnetworkinsightsaccessscope createnetworkinsightspath createnetworkinterface createnetworkinterfacepermission createodbnetworkpeering createplacementgroup createpublicipv4pool createreplacerootvolumetask createreservedinstanceslisting createrestoreimagetask createroute createrouteserver createrouteserverendpoint createrouteserverpeer createroutetable createsecondarynetwork createsecondarysubnet createsecuritygroup createsnapshot createsnapshots createspotdatafeedsubscription createstoreimagetask createsubnet createsubnetcidrreservation createtags createtrafficmirrorfilter createtrafficmirrorfilterrule createtrafficmirrorsession createtrafficmirrortarget createtransitgateway createtransitgatewayconnect createtransitgatewayconnectpeer createtransitgatewaymeteringpolicy createtransitgatewaymeteringpolicyentry createtransitgatewaymulticastdomain createtransitgatewaypeeringattachment createtransitgatewaypolicytable createtransitgatewaypolicytableentry createtransitgatewayprefixlistreference createtransitgatewayroute createtransitgatewayroutetable createtransitgatewayroutetableannouncement createtransitgatewayvpcattachment createverifiedaccessendpoint createverifiedaccessgroup createverifiedaccessinstance createverifiedaccesstrustprovider createvolume createvpc createvpcblockpublicaccessexclusion createvpcencryptioncontrol createvpcendpoint createvpcendpointconnectionnotification createvpcendpointserviceconfiguration createvpcpeeringconnection createvpnconcentrator createvpnconnection createvpnconnectionroute createvpngateway deleteapplicationstatuscheck deletecapacitymanagerdataexport deletecarriergateway deleteclientvpnendpoint deleteclientvpnendpointauthorizationpolicy deleteclientvpnroute deletecoipcidr deletecoippool deletecoippoolpermission deletecustomergateway deletedhcpoptions deleteegressonlyinternetgateway deletefleets deleteflowlogs deletefpgaimage deleteimageusagereport deleteinstanceconnectendpoint deleteinstanceeventwindow deleteinternetgateway deleteipam deleteipamexternalresourceverificationtoken deleteipaminternetregistryassociation deleteipampolicy deleteipampool deleteipamprefixlistresolver deleteipamprefixlistresolvertarget deleteipamresourcediscovery deleteipamroutingpolicyregistration deleteipamscope deletekeypair deletelaunchtemplate deletelaunchtemplateversions deletelocalgatewayroute deletelocalgatewayroutetable deletelocalgatewayroutetablepermission deletelocalgatewayroutetablevirtualinterfacegroupassociation deletelocalgatewayroutetablevpcassociation deletelocalgatewayvirtualinterface deletelocalgatewayvirtualinterfacegroup deletemanagedprefixlist deletenatgateway deletenetworkacl deletenetworkaclentry deletenetworkinsightsaccessscope deletenetworkinsightsaccessscopeanalysis deletenetworkinsightsanalysis deletenetworkinsightspath deletenetworkinterface deletenetworkinterfacepermission deleteodbnetworkpeering deleteplacementgroup deletepublicipv4pool deletequeuedreservedinstances deleteresourcepolicy deleteroute deleterouteserver deleterouteserverendpoint deleterouteserverpeer deleteroutetable deletesecondarynetwork deletesecondarysubnet deletesecuritygroup deletesnapshot deletespotdatafeedsubscription deletesubnet deletesubnetcidrreservation deletetags deletetrafficmirrorfilter deletetrafficmirrorfilterrule deletetrafficmirrorsession deletetrafficmirrortarget deletetransitgateway deletetransitgatewayclientvpnattachment deletetransitgatewayconnect deletetransitgatewayconnectpeer deletetransitgatewaymeteringpolicy deletetransitgatewaymeteringpolicyentry deletetransitgatewaymulticastdomain deletetransitgatewaypeeringattachment deletetransitgatewaypolicytable deletetransitgatewaypolicytableentry deletetransitgatewayprefixlistreference deletetransitgatewayroute deletetransitgatewayroutetable deletetransitgatewayroutetableannouncement deletetransitgatewayvpcattachment deleteverifiedaccessendpoint deleteverifiedaccessgroup deleteverifiedaccessinstance deleteverifiedaccesstrustprovider deletevolume deletevpc deletevpcblockpublicaccessexclusion deletevpcencryptioncontrol deletevpcendpointconnectionnotifications deletevpcendpointserviceconfigurations deletevpcendpoints deletevpcpeeringconnection deletevpnconcentrator deletevpnconnection deletevpnconnectionroute deletevpngateway deprovisionbyoipcidr deprovisionipambyoasn deprovisionipampoolcidr deprovisionpublicipv4poolcidr deregisterimage deregisterinstanceeventnotificationattributes deregistertransitgatewaymulticastgroupmembers deregistertransitgatewaymulticastgroupsources describeaccountattributes describeaccountvpcencryptioncontrol describeaddresstransfers describeaddresses describeaddressesattribute describeaggregateidformat describeapplicationstatus describeapplicationstatuscheckassociations describeapplicationstatuschecks describeavailabilityzones describeawsnetworkperformancemetricsubscriptions describebundletasks describebyoipcidrs describecapacityblockextensionhistory describecapacityblockextensionofferings describecapacityblockofferings describecapacityblockstatus describecapacityblocks describecapacitymanagerdataexports describecapacityreservationbillingrequests describecapacityreservationcancellationquotes describecapacityreservationdatechangequotes describecapacityreservationfleets describecapacityreservationtopology describecapacityreservations describecarriergateways describeclassiclinkinstances describeclientvpnauthorizationrules describeclientvpnconnections describeclientvpnendpoints describeclientvpnroutes describeclientvpntargetnetworks describecoippools describeconversiontasks describecustomergateways describedeclarativepoliciesreports describedhcpoptions describeegressonlyinternetgateways describeelasticgpus describeexportimagetasks describeexporttasks describefastlaunchimages describefastsnapshotrestores describefleethistory describefleetinstances describefleets describeflowlogs describefpgaimageattribute describefpgaimages describehostreservationofferings describehostreservations describehosts describeiaminstanceprofileassociations describeidformat describeidentityidformat describeimageattribute describeimagereferences describeimageusagereportentries describeimageusagereports describeimages describeimportimagetasks describeimportsnapshottasks describeinstanceattribute describeinstanceconnectendpoints describeinstancecreditspecifications describeinstanceeventnotificationattributes describeinstanceeventwindows describeinstanceimagemetadata describeinstancesqlhahistorystates describeinstancesqlhastates describeinstancestatus describeinstancetopology describeinstancetypeofferings describeinstancetypes describeinstances describeinternetgateways describeipambyoasn describeipamexternalresourceverificationtokens describeipaminternetregistryassociations describeipampolicies describeipampoolallocations describeipampools describeipamprefixlistresolvertargets describeipamprefixlistresolvers describeipamresourcediscoveries describeipamresourcediscoveryassociations describeipamscopes describeipams describeipv6pools describekeypairs describelaunchtemplateversions describelaunchtemplates describelocalgatewayroutetablepermissions describelocalgatewayroutetablevirtualinterfacegroupassociations describelocalgatewayroutetablevpcassociations describelocalgatewayroutetables describelocalgatewayvirtualinterfacegroups describelocalgatewayvirtualinterfaces describelocalgateways describelockedsnapshots describemachosts describemacmodificationtasks describemanagedprefixlists describemovingaddresses describenatgateways describenetworkacls describenetworkinsightsaccessscopeanalyses describenetworkinsightsaccessscopes describenetworkinsightsanalyses describenetworkinsightspaths describenetworkinterfaceattribute describenetworkinterfacepermissions describenetworkinterfaces describeoutpostlags describeplacementgroups describeprefixlists describeprincipalidformat describepublicipv4pools describeregions describereplacerootvolumetasks describereservedinstances describereservedinstanceslistings describereservedinstancesmodifications describereservedinstancesofferings describerouteserverendpoints describerouteserverpeers describerouteservers describeroutetables describescheduledinstanceavailability describescheduledinstances describesecondaryinterfaces describesecondarynetworks describesecondarysubnets describesecuritygroupreferences describesecuritygrouprules describesecuritygroupvpcassociations describesecuritygroups describeservicelinkvirtualinterfaces describesnapshotattribute describesnapshottierstatus describesnapshots describespotdatafeedsubscription describespotfleetinstances describespotfleetrequesthistory describespotfleetrequests describespotinstancerequests describespotpricehistory describestalesecuritygroups describestoreimagetasks describesubnets describetags describetrafficmirrorfilterrules describetrafficmirrorfilters describetrafficmirrorsessions describetrafficmirrortargets describetransitgatewayattachments describetransitgatewayconnectpeers describetransitgatewayconnects describetransitgatewaymeteringpolicies describetransitgatewaymulticastdomains describetransitgatewaypeeringattachments describetransitgatewaypolicytables describetransitgatewayroutetableannouncements describetransitgatewayroutetables describetransitgatewayvpcattachments describetransitgateways describetrunkinterfaceassociations describeverifiedaccessendpoints describeverifiedaccessgroups describeverifiedaccessinstanceloggingconfigurations describeverifiedaccessinstancewebaclassociations describeverifiedaccessinstances describeverifiedaccesstrustproviders describevolumeattribute describevolumestatus describevolumes describevolumesmodifications describevpcattribute describevpcblockpublicaccessexclusions describevpcblockpublicaccessoptions describevpcclassiclink describevpcclassiclinkdnssupport describevpcencryptioncontrols describevpcendpointassociations describevpcendpointconnectionnotifications describevpcendpointconnections describevpcendpointserviceconfigurations describevpcendpointservicepermissions describevpcendpointservices describevpcendpoints describevpcpeeringconnections describevpcs describevpnconcentrators describevpnconnections describevpngateways detachappliancefromnatgateway detachclassiclinkvpc detachimagewatermark detachinternetgateway detachnetworkinterface detachresourcesfromplacementgroup detachverifiedaccesstrustprovider detachvolume detachvpngateway disableaddresstransfer disableallowedimagessettings disableapplicationstatuschecksuppression disableawsnetworkperformancemetricsubscription disablecapacitymanager disableebsencryptionbydefault disablefastlaunch disablefastsnapshotrestores disableimage disableimageblockpublicaccess disableimagedeprecation disableimagederegistrationprotection disableinstancesqlhastandbydetections disableipamorganizationadminaccount disableipampolicy disablerouteserverpropagation disableserialconsoleaccess disablesnapshotblockpublicaccess disabletransitgatewayroutetablepropagation disablevgwroutepropagation disablevpcclassiclink disablevpcclassiclinkdnssupport disassociateaddress disassociateapplicationstatuscheck disassociatecapacityreservationbillingowner disassociateclientvpntargetnetwork disassociateenclavecertificateiamrole disassociateiaminstanceprofile disassociateinstanceeventwindow disassociateipambyoasn disassociateipamresourcediscovery disassociatenatgatewayaddress disassociaterouteserver disassociateroutetable disassociatesecuritygroupvpc disassociatesubnetcidrblock disassociatetransitgatewaymulticastdomain disassociatetransitgatewaypolicytable disassociatetransitgatewayroutetable disassociatetrunkinterface disassociateverifiedaccessinstancewebacl disassociatevpccidrblock enableaddresstransfer enableallowedimagessettings enableapplicationstatuschecksuppression enableawsnetworkperformancemetricsubscription enablecapacitymanager enableebsencryptionbydefault enablefastlaunch enablefastsnapshotrestores enableimage enableimageblockpublicaccess enableimagedeprecation enableimagederegistrationprotection enableinstancesqlhastandbydetections enableipaminternetregistryassociation enableipamorganizationadminaccount enableipampolicy enablereachabilityanalyzerorganizationsharing enablerouteserverpropagation enableserialconsoleaccess enablesnapshotblockpublicaccess enabletransitgatewayroutetablepropagation enablevgwroutepropagation enablevolumeio enablevpcclassiclink enablevpcclassiclinkdnssupport exportclientvpnclientcertificaterevocationlist exportclientvpnclientconfiguration exportimage exporttransitgatewayroutes exportverifiedaccessinstanceclientconfiguration getactivevpntunnelstatus getallowedimagessettings getassociatedenclavecertificateiamroles getassociatedipv6poolcidrs getawsnetworkperformancedata getcapacitymanagerattributes getcapacitymanagermetricdata getcapacitymanagermetricdimensions getcapacitymanagermonitoredtagkeys getcapacityreservationusage getclientvpnendpointauthorizationpolicy getcoippoolusage getconsoleoutput getconsolescreenshot getdeclarativepoliciesreportsummary getdefaultcreditspecification getebsdefaultkmskeyid getebsencryptionbydefault getenabledipampolicy getflowlogsintegrationtemplate getgroupsforcapacityreservation gethostreservationpurchasepreview getimageancestry getimageblockpublicaccessstate getimagefindings getinstancemetadatadefaults getinstancetpmekpub getinstancetypesfrominstancerequirements getinstanceuefidata getipamaddresshistory getipamdiscoveredaccounts getipamdiscoveredpublicaddresses getipamdiscoveredresourcecidrs getipamdiscoveredroutes getipaminternetregistryassociationasns getipaminternetregistryassociationcidrs getipampolicyallocationrules getipampolicyorganizationtargets getipampoolallocations getipampoolcidrs getipamprefixlistresolverrules getipamprefixlistresolverversionentries getipamprefixlistresolverversions getipamresourcecidrs getipamrouteoriginauthorizations getipamrouteprotectionfindings getipamroutingpolicyregistrationdeltas getipamroutingpolicyregistrations getlaunchtemplatedata getmanagedprefixlistassociations getmanagedprefixlistentries getmanagedresourcevisibility getnetworkinsightsaccessscopeanalysisfindings getnetworkinsightsaccessscopecontent getpassworddata getreservedinstancesexchangequote getresourcepolicy getrouteserverassociations getrouteserverpropagations getrouteserverroutingdatabase getsecuritygroupsforvpc getserialconsoleaccessstatus getsnapshotblockpublicaccessstate getspotplacementscores getsubnetcidrreservations gettransitgatewayattachmentnatconfiguration gettransitgatewayattachmentpropagations gettransitgatewaymeteringpolicyentries gettransitgatewaymulticastdomainassociations gettransitgatewaypolicytableassociations gettransitgatewaypolicytableentries gettransitgatewayprefixlistreferences gettransitgatewayroutetableassociations gettransitgatewayroutetablepropagations getverifiedaccessendpointpolicy getverifiedaccessendpointtargets getverifiedaccessgrouppolicy getverifiedaccessinstancewebacl getvpcresourcesblockingencryptionenforcement getvpnconnectiondevicesampleconfiguration getvpnconnectiondevicetypes getvpntunnelreplacementstatus importbyoipcidrtoipam importclientvpnclientcertificaterevocationlist importimage importinstance importkeypair importsnapshot importvolume injectapierror injectvolumeiolatency listimagesinrecyclebin listsnapshotsinrecyclebin listvolumesinrecyclebin locksnapshot modifyaccountvpcencryptioncontrol modifyaddressattribute modifyapplicationstatuscheck modifyavailabilityzonegroup modifycapacityreservation modifycapacityreservationfleet modifyclientvpnendpoint modifyclientvpnendpointauthorizationpolicy modifydefaultcreditspecification modifyebsdefaultkmskeyid modifyfleet modifyfpgaimageattribute modifyhosts modifyidformat modifyidentityidformat modifyimageattribute modifyinstanceattribute modifyinstancecapacityreservationattributes modifyinstanceconnectendpoint modifyinstancecpuoptions modifyinstancecreditspecification modifyinstanceeventstarttime modifyinstanceeventwindow modifyinstancemaintenanceoptions modifyinstancemetadatadefaults modifyinstancemetadataoptions modifyinstancenetworkperformanceoptions modifyinstanceplacement modifyipam modifyipampolicyallocationrules modifyipampool modifyipampoolallocation modifyipamprefixlistresolver modifyipamprefixlistresolvertarget modifyipamresourcecidr modifyipamresourcediscovery modifyipamroutingpolicyregistration modifyipamscope modifylaunchtemplate modifylocalgatewayroute modifymanagedprefixlist modifymanagedresourcevisibility modifynetworkinterfaceattribute modifyodbnetworkpeering modifyprivatednsnameoptions modifypublicipdnsnameoptions modifyreservedinstances modifyrouteserver modifysecuritygrouprules modifysnapshotattribute modifysnapshottier modifyspotfleetrequest modifysubnetattribute modifytrafficmirrorfilternetworkservices modifytrafficmirrorfilterrule modifytrafficmirrorsession modifytransitgateway modifytransitgatewayattachmentnatconfiguration modifytransitgatewaymeteringpolicy modifytransitgatewaypolicytableentry modifytransitgatewayprefixlistreference modifytransitgatewayvpcattachment modifyverifiedaccessendpoint modifyverifiedaccessendpointpolicy modifyverifiedaccessgroup modifyverifiedaccessgrouppolicy modifyverifiedaccessinstance modifyverifiedaccessinstanceloggingconfiguration modifyverifiedaccesstrustprovider modifyvolume modifyvolumeattribute modifyvpcattribute modifyvpcblockpublicaccessexclusion modifyvpcblockpublicaccessoptions modifyvpcencryptioncontrol modifyvpcendpoint modifyvpcendpointconnectionnotification modifyvpcendpointpayerresponsibility modifyvpcendpointserviceconfiguration modifyvpcendpointservicepayerresponsibility modifyvpcendpointservicepermissions modifyvpcpeeringconnectionoptions modifyvpctenancy modifyvpnconnection modifyvpnconnectionoptions modifyvpntunnelcertificate modifyvpntunneloptions monitorinstances moveaddresstovpc movebyoipcidrtoipam movecapacityreservationinstances pausevolumeio provisionbyoipcidr provisionipambyoasn provisionipampoolcidr provisionpublicipv4poolcidr purchasecapacityblock purchasecapacityblockextension purchasehostreservation purchasereservedinstancesoffering purchasescheduledinstances putresourcepolicy rebootinstances registerimage registerinstanceeventnotificationattributes registertransitgatewaymulticastgroupmembers registertransitgatewaymulticastgroupsources rejectcapacityreservationbillingownership rejecttransitgatewayclientvpnattachment rejecttransitgatewaymulticastdomainassociations rejecttransitgatewaypeeringattachment rejecttransitgatewayvpcattachment rejectvpcendpointconnections rejectvpcpeeringconnection releaseaddress releasehosts releaseipampoolallocation replaceiaminstanceprofileassociation replaceimagecriteriainallowedimagessettings replaceimageinstancetypespecification replacenetworkaclassociation replacenetworkaclentry replaceroute replaceroutetableassociation replacetransitgatewayroute replacevpntunnel reportinstancestatus requestspotfleet requestspotinstances resetaddressattribute resetebsdefaultkmskeyid resetfpgaimageattribute resetimageattribute resetinstanceattribute resetnetworkinterfaceattribute resetsnapshotattribute restoreaddresstoclassic restoreimagefromrecyclebin restoremanagedprefixlistversion restoresnapshotfromrecyclebin restoresnapshottier restorevolumefromrecyclebin revokeclientvpningress revokesecuritygroupegress revokesecuritygroupingress runinstances runscheduledinstances searchlocalgatewayroutes searchtransitgatewaymulticastgroups searchtransitgatewayroutes senddiagnosticinterrupt sendspotinstanceinterruptions startdeclarativepoliciesreport startinstances startnetworkinsightsaccessscopeanalysis startnetworkinsightsanalysis startvpcendpointserviceprivatednsverification stopinstances terminateclientvpnconnections terminateinstances unassignipv6addresses unassignprivateipaddresses unassignprivatenatgatewayaddress unlocksnapshot unmonitorinstances updatecapacitymanagermonitoredtagkeys updatecapacitymanagerorganizationsaccess updateinterruptiblecapacityreservationallocation updatesecuritygroupruledescriptionsegress updatesecuritygroupruledescriptionsingress validatesecuritygroupquotasforinterface withdrawbyoipcidr
Actions (834)
| Action | Access level | Policies granting without limits | Policies granting with resource or condition limits |
|---|---|---|---|
| ec2:AcceptAddressTransfer | Write | 6 | 1 |
| ec2:AcceptCapacityReservationBillingOwnership | Write | 6 | 1 |
| ec2:AcceptReservedInstancesExchangeQuote | Write | 6 | 1 |
| ec2:AcceptTransitGatewayClientVpnAttachment | Write | 6 | 1 |
| ec2:AcceptTransitGatewayMulticastDomainAssociations | Write | 6 | 1 |
| ec2:AcceptTransitGatewayPeeringAttachment | Write | 6 | 1 |
| ec2:AcceptTransitGatewayVpcAttachment | Write | 7 | 3 |
| ec2:AcceptVpcEndpointConnections | Write | 8 | 2 |
| ec2:AcceptVpcPeeringConnection | Write | 9 | 1 |
| ec2:AdvertiseByoipCidr | Write | 6 | 1 |
| ec2:AllocateAddress | Write | 24 | 10 |
| ec2:AllocateHosts | Write | 7 | 3 |
| ec2:AllocateIpamPoolCidr | Write | 9 | 1 |
| ec2:ApplySecurityGroupsToClientVpnTargetNetwork | Write | 6 | 1 |
| ec2:AssignIpv6Addresses | Write | 14 | 14 |
| ec2:AssignPrivateIpAddresses | Write | 20 | 13 |
| ec2:AssignPrivateNatGatewayAddress | Write | 6 | 1 |
| ec2:AssociateAddress | Write | 30 | 6 |
| ec2:AssociateApplicationStatusCheck | Write | 7 | 1 |
| ec2:AssociateCapacityReservationBillingOwner | Write | 7 | 1 |
| ec2:AssociateClientVpnTargetNetwork | Write | 7 | 1 |
| ec2:AssociateDhcpOptions | Write | 10 | 3 |
| ec2:AssociateEnclaveCertificateIamRole | Write | 7 | 1 |
| ec2:AssociateIamInstanceProfile | Write | 7 | 11 |
| ec2:AssociateInstanceEventWindow | Write | 7 | 1 |
| ec2:AssociateIpamByoasn | Write | 7 | 1 |
| ec2:AssociateIpamResourceDiscovery | Write | 7 | 1 |
| ec2:AssociateNatGatewayAddress | Write | 7 | 3 |
| ec2:AssociateRouteServer | Write | 7 | 1 |
| ec2:AssociateRouteTable | Write | 15 | 9 |
| ec2:AssociateSecurityGroupVpc | Write | 9 | 1 |
| ec2:AssociateSubnetCidrBlock | Write | 11 | 5 |
| ec2:AssociateTransitGatewayMulticastDomain | Write | 7 | 1 |
| ec2:AssociateTransitGatewayPolicyTable | Write | 7 | 1 |
| ec2:AssociateTransitGatewayRouteTable | Write | 8 | 4 |
| ec2:AssociateTrunkInterface | Write | 9 | 1 |
| ec2:AssociateVerifiedAccessInstanceWebAcl | Write | 7 | 3 |
| ec2:AssociateVpcCidrBlock | Write | 11 | 5 |
| ec2:AttachApplianceToNatGateway | Permissions management | 6 | 1 |
| ec2:AttachClassicLinkVpc | Write | 10 | 1 |
| ec2:AttachImageWatermark | Write | 6 | 3 |
| ec2:AttachInternetGateway | Write | 14 | 7 |
| ec2:AttachNetworkInterface | Write | 21 | 9 |
| ec2:AttachResourcesToPlacementGroup | Permissions management | 6 | 1 |
| ec2:AttachVerifiedAccessTrustProvider | Write | 6 | 1 |
| ec2:AttachVolume | Write | 9 | 22 |
| ec2:AttachVpnGateway | Write | 9 | 1 |
| ec2:AuthorizeClientVpnIngress | Write | 6 | 1 |
| ec2:AuthorizeSecurityGroupEgress | Write | 21 | 33 |
| ec2:AuthorizeSecurityGroupIngress | Write | 41 | 37 |
| ec2:BatchModifyIpamRoutingPolicyRegistrations | Write | 6 | 1 |
| ec2:BundleInstance | Write | 7 | 1 |
| ec2:CancelBundleTask | Write | 7 | 1 |
| ec2:CancelCapacityReservation | Write | 7 | 3 |
| ec2:CancelCapacityReservationFleets | Write | 7 | 1 |
| ec2:CancelConversionTask | Write | 8 | 1 |
| ec2:CancelDeclarativePoliciesReport | Write | 7 | 1 |
| ec2:CancelExportTask | Write | 8 | 3 |
| ec2:CancelImageLaunchPermission | Permissions management | 7 | 1 |
| ec2:CancelImportTask | Write | 8 | 1 |
| ec2:CancelReservedInstancesListing | Write | 7 | 1 |
| ec2:CancelSpotFleetRequests | Write | 13 | 2 |
| ec2:CancelSpotInstanceRequests | Write | 12 | 1 |
| ec2:ConfirmProductInstance | Write | 6 | 1 |
| ec2:CopyFpgaImage | Write | 7 | 1 |
| ec2:CopyImage | Write | 20 | 2 |
| ec2:CopySnapshot | Write | 10 | 7 |
| ec2:CopyVolumes | Write | 7 | 6 |
| ec2:CreateApplicationStatusCheck | Write | 6 | 1 |
| ec2:CreateCapacityManagerDataExport | Write | 6 | 1 |
| ec2:CreateCapacityReservation | Write | 6 | 3 |
| ec2:CreateCapacityReservationBySplitting | Write | 6 | 1 |
| ec2:CreateCapacityReservationCancellationQuote | Write | 6 | 1 |
| ec2:CreateCapacityReservationDateChangeQuote | Write | 6 | 1 |
| ec2:CreateCapacityReservationFleet | Write | 6 | 1 |
| ec2:CreateCarrierGateway | Write | 8 | 1 |
| ec2:CreateClientVpnEndpoint | Write | 6 | 1 |
| ec2:CreateClientVpnRoute | Write | 6 | 1 |
| ec2:CreateCoipCidr | Write | 6 | 1 |
| ec2:CreateCoipPool | Write | 6 | 1 |
| ec2:CreateCoipPoolPermission | Permissions management | 9 | 1 |
| ec2:CreateCustomerGateway | Write | 11 | 1 |
| ec2:CreateDefaultSubnet | Write | 10 | 1 |
| ec2:CreateDefaultVpc | Write | 10 | 1 |
| ec2:CreateDelegateMacVolumeOwnershipTask | Write | 6 | 1 |
| ec2:CreateDhcpOptions | Write | 10 | 3 |
| ec2:CreateEgressOnlyInternetGateway | Write | 8 | 3 |
| ec2:CreateFleet | Write | 11 | 10 |
| ec2:CreateFlowLogs | Write | 9 | 2 |
| ec2:CreateFpgaImage | Write | 6 | 1 |
| ec2:CreateImage | Write | 15 | 3 |
| ec2:CreateImageUsageReport | Write | 6 | 1 |
| ec2:CreateInstanceConnectEndpoint | Write | 6 | 1 |
| ec2:CreateInstanceEventWindow | Write | 6 | 1 |
| ec2:CreateInstanceExportTask | Write | 8 | 1 |
| ec2:CreateInternetGateway | Write | 16 | 5 |
| ec2:CreateInterruptibleCapacityReservationAllocation | Write | 6 | 1 |
| ec2:CreateIpam | Write | 6 | 1 |
| ec2:CreateIpamExternalResourceVerificationToken | Write | 6 | 1 |
| ec2:CreateIpamInternetRegistryAssociation | Write | 6 | 1 |
| ec2:CreateIpamPolicy | Write | 6 | 1 |
| ec2:CreateIpamPool | Write | 6 | 1 |
| ec2:CreateIpamPrefixListResolver | Write | 6 | 1 |
| ec2:CreateIpamPrefixListResolverTarget | Write | 6 | 1 |
| ec2:CreateIpamResourceDiscovery | Write | 6 | 1 |
| ec2:CreateIpamRoutingPolicyRegistration | Write | 6 | 1 |
| ec2:CreateIpamScope | Write | 6 | 1 |
| ec2:CreateKeyPair | Write | 11 | 4 |
| ec2:CreateLaunchTemplate | Write | 18 | 18 |
| ec2:CreateLaunchTemplateVersion | Write | 14 | 15 |
| ec2:CreateLocalGatewayRoute | Write | 7 | 1 |
| ec2:CreateLocalGatewayRouteTable | Write | 6 | 1 |
| ec2:CreateLocalGatewayRouteTablePermission | Permissions management | 9 | 1 |
| ec2:CreateLocalGatewayRouteTableVirtualInterfaceGroupAssociation | Write | 6 | 1 |
| ec2:CreateLocalGatewayRouteTableVpcAssociation | Write | 8 | 1 |
| ec2:CreateLocalGatewayVirtualInterface | Write | 6 | 1 |
| ec2:CreateLocalGatewayVirtualInterfaceGroup | Write | 6 | 1 |
| ec2:CreateMacSystemIntegrityProtectionModificationTask | Write | 6 | 1 |
| ec2:CreateManagedPrefixList | Write | 6 | 2 |
| ec2:CreateNatGateway | Write | 15 | 4 |
| ec2:CreateNetworkAcl | Write | 10 | 3 |
| ec2:CreateNetworkAclEntry | Write | 9 | 4 |
| ec2:CreateNetworkInsightsAccessScope | Write | 7 | 1 |
| ec2:CreateNetworkInsightsPath | Write | 7 | 4 |
| ec2:CreateNetworkInterface | Write | 74 | 54 |
| ec2:CreateNetworkInterfacePermission | Permissions management | 37 | 27 |
| ec2:CreateOdbNetworkPeering | Permissions management | 8 | 1 |
| ec2:CreatePlacementGroup | Write | 10 | 5 |
| ec2:CreatePublicIpv4Pool | Write | 6 | 1 |
| ec2:CreateReplaceRootVolumeTask | Write | 7 | 1 |
| ec2:CreateReservedInstancesListing | Write | 7 | 1 |
| ec2:CreateRestoreImageTask | Write | 6 | 1 |
| ec2:CreateRoute | Write | 19 | 9 |
| ec2:CreateRouteServer | Write | 6 | 1 |
| ec2:CreateRouteServerEndpoint | Write | 6 | 1 |
| ec2:CreateRouteServerPeer | Write | 6 | 1 |
| ec2:CreateRouteTable | Write | 17 | 7 |
| ec2:CreateSecondaryNetwork | Write | 6 | 1 |
| ec2:CreateSecondarySubnet | Write | 6 | 1 |
| ec2:CreateSecurityGroup | Write | 50 | 34 |
| ec2:CreateSnapshot | Write | 13 | 21 |
| ec2:CreateSnapshots | Write | 7 | 6 |
| ec2:CreateSpotDatafeedSubscription | Write | 7 | 1 |
| ec2:CreateStoreImageTask | Write | 6 | 1 |
| ec2:CreateSubnet | Write | 19 | 7 |
| ec2:CreateSubnetCidrReservation | Write | 6 | 1 |
| ec2:CreateTags | Tagging | 28 | 164 |
| ec2:CreateTrafficMirrorFilter | Write | 6 | 1 |
| ec2:CreateTrafficMirrorFilterRule | Write | 6 | 1 |
| ec2:CreateTrafficMirrorSession | Write | 6 | 1 |
| ec2:CreateTrafficMirrorTarget | Write | 6 | 1 |
| ec2:CreateTransitGateway | Write | 7 | 4 |
| ec2:CreateTransitGatewayConnect | Write | 6 | 1 |
| ec2:CreateTransitGatewayConnectPeer | Write | 6 | 1 |
| ec2:CreateTransitGatewayMeteringPolicy | Write | 6 | 1 |
| ec2:CreateTransitGatewayMeteringPolicyEntry | Write | 6 | 1 |
| ec2:CreateTransitGatewayMulticastDomain | Write | 6 | 1 |
| ec2:CreateTransitGatewayPeeringAttachment | Write | 6 | 1 |
| ec2:CreateTransitGatewayPolicyTable | Write | 6 | 1 |
| ec2:CreateTransitGatewayPolicyTableEntry | Write | 6 | 1 |
| ec2:CreateTransitGatewayPrefixListReference | Write | 6 | 1 |
| ec2:CreateTransitGatewayRoute | Write | 7 | 3 |
| ec2:CreateTransitGatewayRouteTable | Write | 7 | 3 |
| ec2:CreateTransitGatewayRouteTableAnnouncement | Write | 7 | 1 |
| ec2:CreateTransitGatewayVpcAttachment | Write | 7 | 4 |
| ec2:CreateVerifiedAccessEndpoint | Write | 6 | 1 |
| ec2:CreateVerifiedAccessGroup | Write | 6 | 1 |
| ec2:CreateVerifiedAccessInstance | Write | 6 | 1 |
| ec2:CreateVerifiedAccessTrustProvider | Write | 6 | 1 |
| ec2:CreateVolume | Write | 10 | 25 |
| ec2:CreateVpc | Write | 18 | 6 |
| ec2:CreateVpcBlockPublicAccessExclusion | Write | 6 | 1 |
| ec2:CreateVpcEncryptionControl | Write | 6 | 1 |
| ec2:CreateVpcEndpoint | Write | 29 | 21 |
| ec2:CreateVpcEndpointConnectionNotification | Write | 8 | 1 |
| ec2:CreateVpcEndpointServiceConfiguration | Write | 10 | 4 |
| ec2:CreateVpcPeeringConnection | Write | 9 | 1 |
| ec2:CreateVpnConcentrator | Write | 6 | 1 |
| ec2:CreateVpnConnection | Write | 9 | 1 |
| ec2:CreateVpnConnectionRoute | Write | 9 | 1 |
| ec2:CreateVpnGateway | Write | 9 | 1 |
| ec2:DeleteApplicationStatusCheck | Write | 6 | 1 |
| ec2:DeleteCapacityManagerDataExport | Write | 6 | 1 |
| ec2:DeleteCarrierGateway | Write | 8 | 1 |
| ec2:DeleteClientVpnEndpoint | Write | 6 | 1 |
| ec2:DeleteClientVpnEndpointAuthorizationPolicy | Write | 6 | 1 |
| ec2:DeleteClientVpnRoute | Write | 6 | 1 |
| ec2:DeleteCoipCidr | Write | 6 | 1 |
| ec2:DeleteCoipPool | Write | 6 | 1 |
| ec2:DeleteCoipPoolPermission | Permissions management | 9 | 1 |
| ec2:DeleteCustomerGateway | Write | 9 | 1 |
| ec2:DeleteDhcpOptions | Write | 10 | 3 |
| ec2:DeleteEgressOnlyInternetGateway | Write | 8 | 1 |
| ec2:DeleteFleets | Write | 8 | 1 |
| ec2:DeleteFlowLogs | Write | 9 | 2 |
| ec2:DeleteFpgaImage | Write | 6 | 1 |
| ec2:DeleteImageUsageReport | Write | 6 | 1 |
| ec2:DeleteInstanceConnectEndpoint | Write | 6 | 1 |
| ec2:DeleteInstanceEventWindow | Write | 6 | 1 |
| ec2:DeleteInternetGateway | Write | 11 | 7 |
| ec2:DeleteIpam | Write | 6 | 1 |
| ec2:DeleteIpamExternalResourceVerificationToken | Write | 6 | 1 |
| ec2:DeleteIpamInternetRegistryAssociation | Write | 6 | 1 |
| ec2:DeleteIpamPolicy | Write | 6 | 1 |
| ec2:DeleteIpamPool | Write | 6 | 1 |
| ec2:DeleteIpamPrefixListResolver | Write | 6 | 1 |
| ec2:DeleteIpamPrefixListResolverTarget | Write | 6 | 1 |
| ec2:DeleteIpamResourceDiscovery | Write | 6 | 1 |
| ec2:DeleteIpamRoutingPolicyRegistration | Write | 6 | 1 |
| ec2:DeleteIpamScope | Write | 6 | 1 |
| ec2:DeleteKeyPair | Write | 8 | 5 |
| ec2:DeleteLaunchTemplate | Write | 17 | 17 |
| ec2:DeleteLaunchTemplateVersions | Write | 11 | 13 |
| ec2:DeleteLocalGatewayRoute | Write | 7 | 1 |
| ec2:DeleteLocalGatewayRouteTable | Write | 6 | 1 |
| ec2:DeleteLocalGatewayRouteTablePermission | Permissions management | 9 | 1 |
| ec2:DeleteLocalGatewayRouteTableVirtualInterfaceGroupAssociation | Write | 6 | 1 |
| ec2:DeleteLocalGatewayRouteTableVpcAssociation | Write | 8 | 1 |
| ec2:DeleteLocalGatewayVirtualInterface | Write | 6 | 1 |
| ec2:DeleteLocalGatewayVirtualInterfaceGroup | Write | 6 | 1 |
| ec2:DeleteManagedPrefixList | Write | 6 | 2 |
| ec2:DeleteNatGateway | Write | 11 | 6 |
| ec2:DeleteNetworkAcl | Write | 10 | 6 |
| ec2:DeleteNetworkAclEntry | Write | 10 | 3 |
| ec2:DeleteNetworkInsightsAccessScope | Write | 7 | 1 |
| ec2:DeleteNetworkInsightsAccessScopeAnalysis | Write | 7 | 1 |
| ec2:DeleteNetworkInsightsAnalysis | Write | 7 | 4 |
| ec2:DeleteNetworkInsightsPath | Write | 7 | 4 |
| ec2:DeleteNetworkInterface | Write | 72 | 50 |
| ec2:DeleteNetworkInterfacePermission | Permissions management | 26 | 13 |
| ec2:DeleteOdbNetworkPeering | Permissions management | 8 | 1 |
| ec2:DeletePlacementGroup | Write | 13 | 3 |
| ec2:DeletePublicIpv4Pool | Write | 6 | 1 |
| ec2:DeleteQueuedReservedInstances | Write | 6 | 1 |
| ec2:DeleteResourcePolicy | Permissions management | 6 | 1 |
| ec2:DeleteRoute | Write | 14 | 10 |
| ec2:DeleteRouteServer | Write | 6 | 1 |
| ec2:DeleteRouteServerEndpoint | Write | 6 | 1 |
| ec2:DeleteRouteServerPeer | Write | 6 | 1 |
| ec2:DeleteRouteTable | Write | 11 | 10 |
| ec2:DeleteSecondaryNetwork | Write | 6 | 1 |
| ec2:DeleteSecondarySubnet | Write | 6 | 1 |
| ec2:DeleteSecurityGroup | Write | 32 | 32 |
| ec2:DeleteSnapshot | Write | 15 | 26 |
| ec2:DeleteSpotDatafeedSubscription | Write | 7 | 1 |
| ec2:DeleteSubnet | Write | 14 | 9 |
| ec2:DeleteSubnetCidrReservation | Write | 6 | 1 |
| ec2:DeleteTags | Tagging | 20 | 50 |
| ec2:DeleteTrafficMirrorFilter | Write | 6 | 1 |
| ec2:DeleteTrafficMirrorFilterRule | Write | 6 | 1 |
| ec2:DeleteTrafficMirrorSession | Write | 6 | 1 |
| ec2:DeleteTrafficMirrorTarget | Write | 6 | 1 |
| ec2:DeleteTransitGateway | Write | 7 | 4 |
| ec2:DeleteTransitGatewayClientVpnAttachment | Write | 6 | 1 |
| ec2:DeleteTransitGatewayConnect | Write | 6 | 1 |
| ec2:DeleteTransitGatewayConnectPeer | Write | 6 | 1 |
| ec2:DeleteTransitGatewayMeteringPolicy | Write | 6 | 1 |
| ec2:DeleteTransitGatewayMeteringPolicyEntry | Write | 6 | 1 |
| ec2:DeleteTransitGatewayMulticastDomain | Write | 6 | 1 |
| ec2:DeleteTransitGatewayPeeringAttachment | Write | 6 | 1 |
| ec2:DeleteTransitGatewayPolicyTable | Write | 6 | 1 |
| ec2:DeleteTransitGatewayPolicyTableEntry | Write | 6 | 1 |
| ec2:DeleteTransitGatewayPrefixListReference | Write | 6 | 1 |
| ec2:DeleteTransitGatewayRoute | Write | 7 | 3 |
| ec2:DeleteTransitGatewayRouteTable | Write | 7 | 3 |
| ec2:DeleteTransitGatewayRouteTableAnnouncement | Write | 7 | 1 |
| ec2:DeleteTransitGatewayVpcAttachment | Write | 7 | 5 |
| ec2:DeleteVerifiedAccessEndpoint | Write | 6 | 1 |
| ec2:DeleteVerifiedAccessGroup | Write | 6 | 1 |
| ec2:DeleteVerifiedAccessInstance | Write | 6 | 1 |
| ec2:DeleteVerifiedAccessTrustProvider | Write | 6 | 1 |
| ec2:DeleteVolume | Write | 13 | 25 |
| ec2:DeleteVpc | Write | 13 | 7 |
| ec2:DeleteVpcBlockPublicAccessExclusion | Write | 6 | 1 |
| ec2:DeleteVpcEncryptionControl | Write | 6 | 1 |
| ec2:DeleteVpcEndpointConnectionNotifications | Write | 8 | 1 |
| ec2:DeleteVpcEndpointServiceConfigurations | Write | 8 | 7 |
| ec2:DeleteVpcEndpoints | Write | 14 | 18 |
| ec2:DeleteVpcPeeringConnection | Write | 9 | 1 |
| ec2:DeleteVpnConcentrator | Write | 6 | 1 |
| ec2:DeleteVpnConnection | Write | 9 | 1 |
| ec2:DeleteVpnConnectionRoute | Write | 9 | 1 |
| ec2:DeleteVpnGateway | Write | 9 | 1 |
| ec2:DeprovisionByoipCidr | Write | 6 | 1 |
| ec2:DeprovisionIpamByoasn | Write | 6 | 1 |
| ec2:DeprovisionIpamPoolCidr | Write | 6 | 1 |
| ec2:DeprovisionPublicIpv4PoolCidr | Write | 6 | 1 |
| ec2:DeregisterImage | Write | 20 | 6 |
| ec2:DeregisterInstanceEventNotificationAttributes | Write | 6 | 1 |
| ec2:DeregisterTransitGatewayMulticastGroupMembers | Write | 6 | 1 |
| ec2:DeregisterTransitGatewayMulticastGroupSources | Write | 6 | 1 |
| ec2:DescribeAccountAttributes | List | 95 | 7 |
| ec2:DescribeAccountVpcEncryptionControl | List | 41 | 3 |
| ec2:DescribeAddressTransfers | List | 42 | 4 |
| ec2:DescribeAddresses | List | 101 | 5 |
| ec2:DescribeAddressesAttribute | List | 42 | 5 |
| ec2:DescribeAggregateIdFormat | List | 42 | 4 |
| ec2:DescribeApplicationStatus | List | 41 | 3 |
| ec2:DescribeApplicationStatusCheckAssociations | List | 41 | 3 |
| ec2:DescribeApplicationStatusChecks | List | 41 | 3 |
| ec2:DescribeAvailabilityZones | List | 160 | 8 |
| ec2:DescribeAwsNetworkPerformanceMetricSubscriptions | List | 41 | 4 |
| ec2:DescribeBundleTasks | List | 42 | 4 |
| ec2:DescribeByoipCidrs | List | 44 | 4 |
| ec2:DescribeCapacityBlockExtensionHistory | List | 40 | 4 |
| ec2:DescribeCapacityBlockExtensionOfferings | List | 40 | 4 |
| ec2:DescribeCapacityBlockOfferings | List | 41 | 4 |
| ec2:DescribeCapacityBlockStatus | List | 41 | 4 |
| ec2:DescribeCapacityBlocks | List | 41 | 4 |
| ec2:DescribeCapacityManagerDataExports | List | 42 | 4 |
| ec2:DescribeCapacityReservationBillingRequests | List | 40 | 4 |
| ec2:DescribeCapacityReservationCancellationQuotes | List | 40 | 4 |
| ec2:DescribeCapacityReservationDateChangeQuotes | List | 37 | 2 |
| ec2:DescribeCapacityReservationFleets | List | 43 | 4 |
| ec2:DescribeCapacityReservationTopology | List | 42 | 4 |
| ec2:DescribeCapacityReservations | List | 59 | 4 |
| ec2:DescribeCarrierGateways | List | 46 | 4 |
| ec2:DescribeClassicLinkInstances | List | 50 | 4 |
| ec2:DescribeClientVpnAuthorizationRules | List | 42 | 4 |
| ec2:DescribeClientVpnConnections | List | 42 | 4 |
| ec2:DescribeClientVpnEndpoints | List | 44 | 4 |
| ec2:DescribeClientVpnRoutes | List | 42 | 4 |
| ec2:DescribeClientVpnTargetNetworks | List | 42 | 4 |
| ec2:DescribeCoipPools | List | 51 | 4 |
| ec2:DescribeConversionTasks | List | 43 | 4 |
| ec2:DescribeCustomerGateways | List | 59 | 6 |
| ec2:DescribeDeclarativePoliciesReports | List | 40 | 4 |
| ec2:DescribeDhcpOptions | List | 73 | 8 |
| ec2:DescribeEgressOnlyInternetGateways | List | 48 | 6 |
| ec2:DescribeElasticGpus | List | 41 | 4 |
| ec2:DescribeExportImageTasks | List | 44 | 4 |
| ec2:DescribeExportTasks | List | 43 | 4 |
| ec2:DescribeFastLaunchImages | List | 43 | 4 |
| ec2:DescribeFastSnapshotRestores | List | 45 | 4 |
| ec2:DescribeFleetHistory | List | 43 | 4 |
| ec2:DescribeFleetInstances | List | 44 | 4 |
| ec2:DescribeFleets | List | 48 | 4 |
| ec2:DescribeFlowLogs | List | 49 | 5 |
| ec2:DescribeFpgaImageAttribute | List | 42 | 4 |
| ec2:DescribeFpgaImages | List | 42 | 4 |
| ec2:DescribeHostReservationOfferings | List | 42 | 4 |
| ec2:DescribeHostReservations | List | 42 | 4 |
| ec2:DescribeHosts | List | 51 | 5 |
| ec2:DescribeIamInstanceProfileAssociations | List | 49 | 4 |
| ec2:DescribeIdFormat | List | 42 | 4 |
| ec2:DescribeIdentityIdFormat | List | 42 | 4 |
| ec2:DescribeImageAttribute | List | 48 | 5 |
| ec2:DescribeImageReferences | List | 41 | 4 |
| ec2:DescribeImageUsageReportEntries | List | 40 | 4 |
| ec2:DescribeImageUsageReports | List | 40 | 4 |
| ec2:DescribeImages | List | 112 | 7 |
| ec2:DescribeImportImageTasks | List | 48 | 4 |
| ec2:DescribeImportSnapshotTasks | List | 43 | 4 |
| ec2:DescribeInstanceAttribute | List | 71 | 8 |
| ec2:DescribeInstanceConnectEndpoints | List | 42 | 4 |
| ec2:DescribeInstanceCreditSpecifications | List | 45 | 4 |
| ec2:DescribeInstanceEventNotificationAttributes | List | 42 | 4 |
| ec2:DescribeInstanceEventWindows | List | 43 | 4 |
| ec2:DescribeInstanceImageMetadata | List | 40 | 4 |
| ec2:DescribeInstanceSqlHaHistoryStates | List | 40 | 4 |
| ec2:DescribeInstanceSqlHaStates | List | 41 | 4 |
| ec2:DescribeInstanceStatus | List | 89 | 7 |
| ec2:DescribeInstanceTopology | List | 43 | 4 |
| ec2:DescribeInstanceTypeOfferings | List | 61 | 5 |
| ec2:DescribeInstanceTypes | List | 78 | 7 |
| ec2:DescribeInstances | List | 209 | 8 |
| ec2:DescribeInternetGateways | List | 104 | 7 |
| ec2:DescribeIpamByoasn | List | 41 | 4 |
| ec2:DescribeIpamExternalResourceVerificationTokens | List | 41 | 4 |
| ec2:DescribeIpamInternetRegistryAssociations | List | 40 | 3 |
| ec2:DescribeIpamPolicies | List | 40 | 4 |
| ec2:DescribeIpamPoolAllocations | List | 40 | 4 |
| ec2:DescribeIpamPools | List | 47 | 4 |
| ec2:DescribeIpamPrefixListResolverTargets | List | 41 | 4 |
| ec2:DescribeIpamPrefixListResolvers | List | 41 | 4 |
| ec2:DescribeIpamResourceDiscoveries | List | 42 | 4 |
| ec2:DescribeIpamResourceDiscoveryAssociations | List | 42 | 4 |
| ec2:DescribeIpamScopes | List | 43 | 4 |
| ec2:DescribeIpams | List | 43 | 4 |
| ec2:DescribeIpv6Pools | List | 45 | 4 |
| ec2:DescribeKeyPairs | List | 71 | 5 |
| ec2:DescribeLaunchTemplateVersions | List | 72 | 7 |
| ec2:DescribeLaunchTemplates | List | 72 | 7 |
| ec2:DescribeLocalGatewayRouteTablePermissions | List | 42 | 4 |
| ec2:DescribeLocalGatewayRouteTableVirtualInterfaceGroupAssociations | List | 45 | 4 |
| ec2:DescribeLocalGatewayRouteTableVpcAssociations | List | 51 | 4 |
| ec2:DescribeLocalGatewayRouteTables | List | 50 | 4 |
| ec2:DescribeLocalGatewayVirtualInterfaceGroups | List | 44 | 4 |
| ec2:DescribeLocalGatewayVirtualInterfaces | List | 45 | 4 |
| ec2:DescribeLocalGateways | List | 48 | 4 |
| ec2:DescribeLockedSnapshots | List | 40 | 4 |
| ec2:DescribeMacHosts | List | 40 | 4 |
| ec2:DescribeMacModificationTasks | List | 40 | 4 |
| ec2:DescribeManagedPrefixLists | List | 55 | 6 |
| ec2:DescribeMovingAddresses | List | 45 | 4 |
| ec2:DescribeNatGateways | List | 68 | 8 |
| ec2:DescribeNetworkAcls | List | 67 | 7 |
| ec2:DescribeNetworkInsightsAccessScopeAnalyses | List | 43 | 4 |
| ec2:DescribeNetworkInsightsAccessScopes | List | 43 | 4 |
| ec2:DescribeNetworkInsightsAnalyses | List | 44 | 6 |
| ec2:DescribeNetworkInsightsPaths | List | 45 | 6 |
| ec2:DescribeNetworkInterfaceAttribute | List | 60 | 4 |
| ec2:DescribeNetworkInterfacePermissions | List | 48 | 4 |
| ec2:DescribeNetworkInterfaces | List | 181 | 15 |
| ec2:DescribeOutpostLags | List | 41 | 4 |
| ec2:DescribePlacementGroups | List | 61 | 4 |
| ec2:DescribePrefixLists | List | 54 | 6 |
| ec2:DescribePrincipalIdFormat | List | 42 | 4 |
| ec2:DescribePublicIpv4Pools | List | 44 | 4 |
| ec2:DescribeRegions | List | 88 | 5 |
| ec2:DescribeReplaceRootVolumeTasks | List | 41 | 4 |
| ec2:DescribeReservedInstances | List | 45 | 4 |
| ec2:DescribeReservedInstancesListings | List | 42 | 4 |
| ec2:DescribeReservedInstancesModifications | List | 42 | 4 |
| ec2:DescribeReservedInstancesOfferings | List | 44 | 4 |
| ec2:DescribeRouteServerEndpoints | List | 42 | 4 |
| ec2:DescribeRouteServerPeers | List | 42 | 4 |
| ec2:DescribeRouteServers | List | 42 | 4 |
| ec2:DescribeRouteTables | List | 128 | 11 |
| ec2:DescribeScheduledInstanceAvailability | List | 42 | 4 |
| ec2:DescribeScheduledInstances | List | 43 | 4 |
| ec2:DescribeSecondaryInterfaces | List | 40 | 4 |
| ec2:DescribeSecondaryNetworks | List | 40 | 4 |
| ec2:DescribeSecondarySubnets | List | 40 | 4 |
| ec2:DescribeSecurityGroupReferences | List | 49 | 4 |
| ec2:DescribeSecurityGroupRules | List | 57 | 5 |
| ec2:DescribeSecurityGroupVpcAssociations | List | 44 | 4 |
| ec2:DescribeSecurityGroups | List | 265 | 20 |
| ec2:DescribeServiceLinkVirtualInterfaces | List | 41 | 4 |
| ec2:DescribeSnapshotAttribute | List | 47 | 4 |
| ec2:DescribeSnapshotTierStatus | List | 47 | 4 |
| ec2:DescribeSnapshots | List | 105 | 7 |
| ec2:DescribeSpotDatafeedSubscription | List | 42 | 4 |
| ec2:DescribeSpotFleetInstances | List | 47 | 5 |
| ec2:DescribeSpotFleetRequestHistory | List | 45 | 4 |
| ec2:DescribeSpotFleetRequests | List | 49 | 4 |
| ec2:DescribeSpotInstanceRequests | List | 52 | 4 |
| ec2:DescribeSpotPriceHistory | List | 49 | 4 |
| ec2:DescribeStaleSecurityGroups | List | 48 | 4 |
| ec2:DescribeStoreImageTasks | List | 42 | 4 |
| ec2:DescribeSubnets | List | 298 | 21 |
| ec2:DescribeTags | List | 94 | 4 |
| ec2:DescribeTrafficMirrorFilterRules | List | 42 | 4 |
| ec2:DescribeTrafficMirrorFilters | List | 43 | 4 |
| ec2:DescribeTrafficMirrorSessions | List | 43 | 4 |
| ec2:DescribeTrafficMirrorTargets | List | 43 | 4 |
| ec2:DescribeTransitGatewayAttachments | List | 55 | 6 |
| ec2:DescribeTransitGatewayConnectPeers | List | 44 | 4 |
| ec2:DescribeTransitGatewayConnects | List | 48 | 6 |
| ec2:DescribeTransitGatewayMeteringPolicies | List | 42 | 4 |
| ec2:DescribeTransitGatewayMulticastDomains | List | 45 | 4 |
| ec2:DescribeTransitGatewayPeeringAttachments | List | 54 | 6 |
| ec2:DescribeTransitGatewayPolicyTables | List | 47 | 4 |
| ec2:DescribeTransitGatewayRouteTableAnnouncements | List | 43 | 4 |
| ec2:DescribeTransitGatewayRouteTables | List | 54 | 6 |
| ec2:DescribeTransitGatewayVpcAttachments | List | 57 | 6 |
| ec2:DescribeTransitGateways | List | 60 | 6 |
| ec2:DescribeTrunkInterfaceAssociations | List | 41 | 4 |
| ec2:DescribeVerifiedAccessEndpoints | List | 43 | 4 |
| ec2:DescribeVerifiedAccessGroups | List | 43 | 4 |
| ec2:DescribeVerifiedAccessInstanceLoggingConfigurations | List | 42 | 4 |
| ec2:DescribeVerifiedAccessInstanceWebAclAssociations | List | 44 | 4 |
| ec2:DescribeVerifiedAccessInstances | List | 45 | 4 |
| ec2:DescribeVerifiedAccessTrustProviders | List | 43 | 4 |
| ec2:DescribeVolumeAttribute | List | 46 | 5 |
| ec2:DescribeVolumeStatus | List | 54 | 4 |
| ec2:DescribeVolumes | List | 105 | 6 |
| ec2:DescribeVolumesModifications | List | 53 | 4 |
| ec2:DescribeVpcAttribute | List | 84 | 5 |
| ec2:DescribeVpcBlockPublicAccessExclusions | List | 42 | 4 |
| ec2:DescribeVpcBlockPublicAccessOptions | List | 42 | 4 |
| ec2:DescribeVpcClassicLink | List | 56 | 4 |
| ec2:DescribeVpcClassicLinkDnsSupport | List | 45 | 4 |
| ec2:DescribeVpcEncryptionControls | List | 43 | 4 |
| ec2:DescribeVpcEndpointAssociations | List | 42 | 4 |
| ec2:DescribeVpcEndpointConnectionNotifications | List | 47 | 4 |
| ec2:DescribeVpcEndpointConnections | List | 49 | 4 |
| ec2:DescribeVpcEndpointServiceConfigurations | List | 61 | 6 |
| ec2:DescribeVpcEndpointServicePermissions | List | 49 | 4 |
| ec2:DescribeVpcEndpointServices | List | 51 | 4 |
| ec2:DescribeVpcEndpoints | List | 121 | 8 |
| ec2:DescribeVpcPeeringConnections | List | 63 | 6 |
| ec2:DescribeVpcs | List | 265 | 19 |
| ec2:DescribeVpnConcentrators | List | 41 | 4 |
| ec2:DescribeVpnConnections | List | 58 | 6 |
| ec2:DescribeVpnGateways | List | 59 | 6 |
| ec2:DetachApplianceFromNatGateway | Permissions management | 6 | 1 |
| ec2:DetachClassicLinkVpc | Write | 10 | 1 |
| ec2:DetachImageWatermark | Write | 6 | 1 |
| ec2:DetachInternetGateway | Write | 12 | 6 |
| ec2:DetachNetworkInterface | Write | 24 | 7 |
| ec2:DetachResourcesFromPlacementGroup | Permissions management | 6 | 1 |
| ec2:DetachVerifiedAccessTrustProvider | Write | 6 | 1 |
| ec2:DetachVolume | Write | 12 | 21 |
| ec2:DetachVpnGateway | Write | 9 | 1 |
| ec2:DisableAddressTransfer | Write | 6 | 1 |
| ec2:DisableAllowedImagesSettings | Write | 6 | 1 |
| ec2:DisableApplicationStatusCheckSuppression | Write | 6 | 1 |
| ec2:DisableAwsNetworkPerformanceMetricSubscription | Write | 6 | 1 |
| ec2:DisableCapacityManager | Write | 6 | 1 |
| ec2:DisableEbsEncryptionByDefault | Write | 6 | 1 |
| ec2:DisableFastLaunch | Write | 7 | 1 |
| ec2:DisableFastSnapshotRestores | Write | 7 | 1 |
| ec2:DisableImage | Write | 6 | 2 |
| ec2:DisableImageBlockPublicAccess | Permissions management | 6 | 1 |
| ec2:DisableImageDeprecation | Write | 6 | 3 |
| ec2:DisableImageDeregistrationProtection | Write | 6 | 1 |
| ec2:DisableInstanceSqlHaStandbyDetections | Write | 6 | 1 |
| ec2:DisableIpamOrganizationAdminAccount | Write | 6 | 1 |
| ec2:DisableIpamPolicy | Write | 6 | 1 |
| ec2:DisableRouteServerPropagation | Write | 6 | 1 |
| ec2:DisableSerialConsoleAccess | Write | 6 | 1 |
| ec2:DisableSnapshotBlockPublicAccess | Permissions management | 6 | 1 |
| ec2:DisableTransitGatewayRouteTablePropagation | Write | 8 | 3 |
| ec2:DisableVgwRoutePropagation | Write | 9 | 1 |
| ec2:DisableVpcClassicLink | Write | 9 | 1 |
| ec2:DisableVpcClassicLinkDnsSupport | Write | 9 | 1 |
| ec2:DisassociateAddress | Write | 26 | 6 |
| ec2:DisassociateApplicationStatusCheck | Write | 6 | 1 |
| ec2:DisassociateCapacityReservationBillingOwner | Write | 6 | 1 |
| ec2:DisassociateClientVpnTargetNetwork | Write | 6 | 1 |
| ec2:DisassociateEnclaveCertificateIamRole | Write | 6 | 1 |
| ec2:DisassociateIamInstanceProfile | Write | 6 | 11 |
| ec2:DisassociateInstanceEventWindow | Write | 6 | 1 |
| ec2:DisassociateIpamByoasn | Write | 6 | 1 |
| ec2:DisassociateIpamResourceDiscovery | Write | 6 | 1 |
| ec2:DisassociateNatGatewayAddress | Write | 6 | 3 |
| ec2:DisassociateRouteServer | Write | 6 | 1 |
| ec2:DisassociateRouteTable | Write | 13 | 8 |
| ec2:DisassociateSecurityGroupVpc | Write | 8 | 1 |
| ec2:DisassociateSubnetCidrBlock | Write | 8 | 3 |
| ec2:DisassociateTransitGatewayMulticastDomain | Write | 6 | 1 |
| ec2:DisassociateTransitGatewayPolicyTable | Write | 6 | 1 |
| ec2:DisassociateTransitGatewayRouteTable | Write | 7 | 4 |
| ec2:DisassociateTrunkInterface | Write | 8 | 1 |
| ec2:DisassociateVerifiedAccessInstanceWebAcl | Write | 6 | 3 |
| ec2:DisassociateVpcCidrBlock | Write | 8 | 3 |
| ec2:EnableAddressTransfer | Write | 6 | 1 |
| ec2:EnableAllowedImagesSettings | Write | 6 | 1 |
| ec2:EnableApplicationStatusCheckSuppression | Write | 6 | 1 |
| ec2:EnableAwsNetworkPerformanceMetricSubscription | Write | 6 | 1 |
| ec2:EnableCapacityManager | Write | 6 | 1 |
| ec2:EnableEbsEncryptionByDefault | Write | 6 | 1 |
| ec2:EnableFastLaunch | Write | 7 | 3 |
| ec2:EnableFastSnapshotRestores | Write | 7 | 7 |
| ec2:EnableImage | Write | 6 | 2 |
| ec2:EnableImageBlockPublicAccess | Permissions management | 6 | 1 |
| ec2:EnableImageDeprecation | Write | 6 | 3 |
| ec2:EnableImageDeregistrationProtection | Write | 6 | 1 |
| ec2:EnableInstanceSqlHaStandbyDetections | Write | 6 | 1 |
| ec2:EnableIpamInternetRegistryAssociation | Write | 6 | 1 |
| ec2:EnableIpamOrganizationAdminAccount | Write | 6 | 1 |
| ec2:EnableIpamPolicy | Write | 6 | 1 |
| ec2:EnableReachabilityAnalyzerOrganizationSharing | Write | 6 | 1 |
| ec2:EnableRouteServerPropagation | Write | 6 | 1 |
| ec2:EnableSerialConsoleAccess | Write | 6 | 1 |
| ec2:EnableSnapshotBlockPublicAccess | Permissions management | 6 | 1 |
| ec2:EnableTransitGatewayRouteTablePropagation | Write | 8 | 3 |
| ec2:EnableVgwRoutePropagation | Write | 9 | 1 |
| ec2:EnableVolumeIO | Write | 7 | 1 |
| ec2:EnableVpcClassicLink | Write | 9 | 1 |
| ec2:EnableVpcClassicLinkDnsSupport | Write | 9 | 1 |
| ec2:ExportClientVpnClientCertificateRevocationList | Read | 6 | 1 |
| ec2:ExportClientVpnClientConfiguration | Read | 6 | 1 |
| ec2:ExportImage | Write | 6 | 3 |
| ec2:ExportTransitGatewayRoutes | Write | 7 | 1 |
| ec2:ExportVerifiedAccessInstanceClientConfiguration | Read | 6 | 1 |
| ec2:GetActiveVpnTunnelStatus | Read | 12 | 1 |
| ec2:GetAllowedImagesSettings | Read | 15 | 1 |
| ec2:GetAssociatedEnclaveCertificateIamRoles | Read | 16 | 2 |
| ec2:GetAssociatedIpv6PoolCidrs | Read | 13 | 1 |
| ec2:GetAwsNetworkPerformanceData | Read | 10 | 1 |
| ec2:GetCapacityManagerAttributes | Read | 13 | 1 |
| ec2:GetCapacityManagerMetricData | Read | 11 | 1 |
| ec2:GetCapacityManagerMetricDimensions | Read | 12 | 1 |
| ec2:GetCapacityManagerMonitoredTagKeys | List | 12 | 1 |
| ec2:GetCapacityReservationUsage | Read | 13 | 1 |
| ec2:GetClientVpnEndpointAuthorizationPolicy | Read | 9 | 1 |
| ec2:GetCoipPoolUsage | Read | 20 | 1 |
| ec2:GetConsoleOutput | Read | 15 | 10 |
| ec2:GetConsoleScreenshot | Read | 13 | 6 |
| ec2:GetDeclarativePoliciesReportSummary | Read | 11 | 1 |
| ec2:GetDefaultCreditSpecification | Read | 13 | 1 |
| ec2:GetEbsDefaultKmsKeyId | Read | 20 | 3 |
| ec2:GetEbsEncryptionByDefault | Read | 25 | 3 |
| ec2:GetEnabledIpamPolicy | Read | 11 | 1 |
| ec2:GetFlowLogsIntegrationTemplate | Read | 11 | 1 |
| ec2:GetGroupsForCapacityReservation | List | 13 | 1 |
| ec2:GetHostReservationPurchasePreview | Read | 14 | 1 |
| ec2:GetImageAncestry | Read | 11 | 1 |
| ec2:GetImageBlockPublicAccessState | Read | 13 | 1 |
| ec2:GetImageFindings | Read | 9 | 1 |
| ec2:GetInstanceMetadataDefaults | List | 12 | 1 |
| ec2:GetInstanceTpmEkPub | Read | 9 | 1 |
| ec2:GetInstanceTypesFromInstanceRequirements | List | 19 | 1 |
| ec2:GetInstanceUefiData | Read | 9 | 1 |
| ec2:GetIpamAddressHistory | Read | 13 | 1 |
| ec2:GetIpamDiscoveredAccounts | Read | 13 | 1 |
| ec2:GetIpamDiscoveredPublicAddresses | Read | 11 | 1 |
| ec2:GetIpamDiscoveredResourceCidrs | Read | 13 | 1 |
| ec2:GetIpamDiscoveredRoutes | Read | 12 | 1 |
| ec2:GetIpamInternetRegistryAssociationAsns | Read | 11 | 1 |
| ec2:GetIpamInternetRegistryAssociationCidrs | Read | 11 | 1 |
| ec2:GetIpamPolicyAllocationRules | List | 11 | 1 |
| ec2:GetIpamPolicyOrganizationTargets | List | 11 | 1 |
| ec2:GetIpamPoolAllocations | List | 17 | 3 |
| ec2:GetIpamPoolCidrs | Read | 21 | 3 |
| ec2:GetIpamPrefixListResolverRules | Read | 13 | 2 |
| ec2:GetIpamPrefixListResolverVersionEntries | Read | 9 | 1 |
| ec2:GetIpamPrefixListResolverVersions | Read | 11 | 1 |
| ec2:GetIpamResourceCidrs | Read | 13 | 1 |
| ec2:GetIpamRouteOriginAuthorizations | Read | 11 | 1 |
| ec2:GetIpamRouteProtectionFindings | Read | 11 | 1 |
| ec2:GetIpamRoutingPolicyRegistrationDeltas | Read | 9 | 1 |
| ec2:GetIpamRoutingPolicyRegistrations | Read | 11 | 1 |
| ec2:GetLaunchTemplateData | Read | 13 | 2 |
| ec2:GetManagedPrefixListAssociations | Read | 15 | 1 |
| ec2:GetManagedPrefixListEntries | Read | 32 | 5 |
| ec2:GetManagedResourceVisibility | List | 11 | 1 |
| ec2:GetNetworkInsightsAccessScopeAnalysisFindings | Read | 15 | 1 |
| ec2:GetNetworkInsightsAccessScopeContent | Read | 19 | 3 |
| ec2:GetPasswordData | Read | 11 | 2 |
| ec2:GetReservedInstancesExchangeQuote | Read | 13 | 1 |
| ec2:GetResourcePolicy | Read | 11 | 1 |
| ec2:GetRouteServerAssociations | Read | 16 | 2 |
| ec2:GetRouteServerPropagations | Read | 16 | 2 |
| ec2:GetRouteServerRoutingDatabase | Read | 10 | 1 |
| ec2:GetSecurityGroupsForVpc | Read | 28 | 7 |
| ec2:GetSerialConsoleAccessStatus | Read | 14 | 1 |
| ec2:GetSnapshotBlockPublicAccessState | Read | 19 | 3 |
| ec2:GetSpotPlacementScores | Read | 13 | 1 |
| ec2:GetSubnetCidrReservations | Read | 14 | 3 |
| ec2:GetTransitGatewayAttachmentNatConfiguration | Read | 9 | 1 |
| ec2:GetTransitGatewayAttachmentPropagations | List | 13 | 1 |
| ec2:GetTransitGatewayMeteringPolicyEntries | List | 12 | 2 |
| ec2:GetTransitGatewayMulticastDomainAssociations | List | 19 | 2 |
| ec2:GetTransitGatewayPolicyTableAssociations | List | 17 | 1 |
| ec2:GetTransitGatewayPolicyTableEntries | List | 17 | 1 |
| ec2:GetTransitGatewayPrefixListReferences | List | 13 | 1 |
| ec2:GetTransitGatewayRouteTableAssociations | List | 21 | 4 |
| ec2:GetTransitGatewayRouteTablePropagations | List | 28 | 4 |
| ec2:GetVerifiedAccessEndpointPolicy | List | 19 | 2 |
| ec2:GetVerifiedAccessEndpointTargets | List | 11 | 1 |
| ec2:GetVerifiedAccessGroupPolicy | List | 19 | 2 |
| ec2:GetVerifiedAccessInstanceWebAcl | List | 14 | 5 |
| ec2:GetVpcResourcesBlockingEncryptionEnforcement | List | 12 | 1 |
| ec2:GetVpnConnectionDeviceSampleConfiguration | List | 10 | 1 |
| ec2:GetVpnConnectionDeviceTypes | List | 13 | 1 |
| ec2:GetVpnTunnelReplacementStatus | List | 14 | 1 |
| ec2:ImportByoipCidrToIpam | Write | 7 | 1 |
| ec2:ImportClientVpnClientCertificateRevocationList | Write | 7 | 1 |
| ec2:ImportImage | Write | 10 | 1 |
| ec2:ImportInstance | Write | 8 | 1 |
| ec2:ImportKeyPair | Write | 9 | 1 |
| ec2:ImportSnapshot | Write | 8 | 1 |
| ec2:ImportVolume | Write | 8 | 1 |
| ec2:InjectApiError | Write | 6 | 1 |
| ec2:InjectVolumeIOLatency | Write | 6 | 1 |
| ec2:ListImagesInRecycleBin | List | 12 | 1 |
| ec2:ListSnapshotsInRecycleBin | List | 12 | 1 |
| ec2:ListVolumesInRecycleBin | List | 11 | 1 |
| ec2:LockSnapshot | Write | 6 | 5 |
| ec2:ModifyAccountVpcEncryptionControl | Write | 7 | 1 |
| ec2:ModifyAddressAttribute | Write | 7 | 1 |
| ec2:ModifyApplicationStatusCheck | Write | 7 | 1 |
| ec2:ModifyAvailabilityZoneGroup | Write | 7 | 1 |
| ec2:ModifyCapacityReservation | Write | 7 | 3 |
| ec2:ModifyCapacityReservationFleet | Write | 7 | 1 |
| ec2:ModifyClientVpnEndpoint | Write | 7 | 1 |
| ec2:ModifyClientVpnEndpointAuthorizationPolicy | Write | 7 | 1 |
| ec2:ModifyDefaultCreditSpecification | Write | 7 | 1 |
| ec2:ModifyEbsDefaultKmsKeyId | Write | 7 | 1 |
| ec2:ModifyFleet | Write | 8 | 1 |
| ec2:ModifyFpgaImageAttribute | Write | 7 | 1 |
| ec2:ModifyHosts | Write | 7 | 1 |
| ec2:ModifyIdFormat | Write | 7 | 1 |
| ec2:ModifyIdentityIdFormat | Write | 7 | 1 |
| ec2:ModifyImageAttribute | Write | 17 | 3 |
| ec2:ModifyInstanceAttribute | Write | 18 | 17 |
| ec2:ModifyInstanceCapacityReservationAttributes | Write | 7 | 1 |
| ec2:ModifyInstanceConnectEndpoint | Write | 7 | 1 |
| ec2:ModifyInstanceCpuOptions | Write | 7 | 1 |
| ec2:ModifyInstanceCreditSpecification | Write | 7 | 1 |
| ec2:ModifyInstanceEventStartTime | Write | 7 | 1 |
| ec2:ModifyInstanceEventWindow | Write | 7 | 1 |
| ec2:ModifyInstanceMaintenanceOptions | Write | 7 | 1 |
| ec2:ModifyInstanceMetadataDefaults | Write | 7 | 1 |
| ec2:ModifyInstanceMetadataOptions | Write | 7 | 2 |
| ec2:ModifyInstanceNetworkPerformanceOptions | Write | 7 | 1 |
| ec2:ModifyInstancePlacement | Write | 7 | 3 |
| ec2:ModifyIpam | Write | 7 | 1 |
| ec2:ModifyIpamPolicyAllocationRules | Write | 7 | 1 |
| ec2:ModifyIpamPool | Write | 7 | 1 |
| ec2:ModifyIpamPoolAllocation | Write | 7 | 1 |
| ec2:ModifyIpamPrefixListResolver | Write | 7 | 1 |
| ec2:ModifyIpamPrefixListResolverTarget | Write | 7 | 1 |
| ec2:ModifyIpamResourceCidr | Write | 7 | 1 |
| ec2:ModifyIpamResourceDiscovery | Write | 7 | 1 |
| ec2:ModifyIpamRoutingPolicyRegistration | Write | 7 | 1 |
| ec2:ModifyIpamScope | Write | 7 | 1 |
| ec2:ModifyLaunchTemplate | Write | 9 | 13 |
| ec2:ModifyLocalGatewayRoute | Write | 7 | 1 |
| ec2:ModifyManagedPrefixList | Write | 7 | 3 |
| ec2:ModifyManagedResourceVisibility | Write | 7 | 1 |
| ec2:ModifyNetworkInterfaceAttribute | Write | 42 | 22 |
| ec2:ModifyOdbNetworkPeering | Permissions management | 9 | 1 |
| ec2:ModifyPrivateDnsNameOptions | Write | 7 | 1 |
| ec2:ModifyPublicIpDnsNameOptions | Write | 7 | 1 |
| ec2:ModifyReservedInstances | Write | 7 | 1 |
| ec2:ModifyRouteServer | Write | 7 | 1 |
| ec2:ModifySecurityGroupRules | Write | 9 | 2 |
| ec2:ModifySnapshotAttribute | Permissions management | 12 | 11 |
| ec2:ModifySnapshotTier | Write | 8 | 3 |
| ec2:ModifySpotFleetRequest | Write | 13 | 2 |
| ec2:ModifySubnetAttribute | Write | 13 | 6 |
| ec2:ModifyTrafficMirrorFilterNetworkServices | Write | 7 | 1 |
| ec2:ModifyTrafficMirrorFilterRule | Write | 7 | 1 |
| ec2:ModifyTrafficMirrorSession | Write | 7 | 1 |
| ec2:ModifyTransitGateway | Write | 8 | 4 |
| ec2:ModifyTransitGatewayAttachmentNatConfiguration | Write | 7 | 1 |
| ec2:ModifyTransitGatewayMeteringPolicy | Write | 7 | 1 |
| ec2:ModifyTransitGatewayPolicyTableEntry | Write | 7 | 1 |
| ec2:ModifyTransitGatewayPrefixListReference | Write | 7 | 1 |
| ec2:ModifyTransitGatewayVpcAttachment | Write | 8 | 3 |
| ec2:ModifyVerifiedAccessEndpoint | Write | 7 | 1 |
| ec2:ModifyVerifiedAccessEndpointPolicy | Write | 7 | 1 |
| ec2:ModifyVerifiedAccessGroup | Write | 7 | 1 |
| ec2:ModifyVerifiedAccessGroupPolicy | Write | 7 | 1 |
| ec2:ModifyVerifiedAccessInstance | Write | 7 | 1 |
| ec2:ModifyVerifiedAccessInstanceLoggingConfiguration | Write | 7 | 1 |
| ec2:ModifyVerifiedAccessTrustProvider | Write | 7 | 1 |
| ec2:ModifyVolume | Write | 8 | 15 |
| ec2:ModifyVolumeAttribute | Write | 7 | 5 |
| ec2:ModifyVpcAttribute | Write | 14 | 9 |
| ec2:ModifyVpcBlockPublicAccessExclusion | Write | 7 | 1 |
| ec2:ModifyVpcBlockPublicAccessOptions | Write | 7 | 1 |
| ec2:ModifyVpcEncryptionControl | Write | 7 | 1 |
| ec2:ModifyVpcEndpoint | Write | 15 | 12 |
| ec2:ModifyVpcEndpointConnectionNotification | Write | 9 | 1 |
| ec2:ModifyVpcEndpointPayerResponsibility | Write | 7 | 1 |
| ec2:ModifyVpcEndpointServiceConfiguration | Write | 9 | 1 |
| ec2:ModifyVpcEndpointServicePayerResponsibility | Write | 7 | 1 |
| ec2:ModifyVpcEndpointServicePermissions | Permissions management | 9 | 4 |
| ec2:ModifyVpcPeeringConnectionOptions | Write | 9 | 1 |
| ec2:ModifyVpcTenancy | Write | 9 | 1 |
| ec2:ModifyVpnConnection | Write | 8 | 1 |
| ec2:ModifyVpnConnectionOptions | Write | 8 | 1 |
| ec2:ModifyVpnTunnelCertificate | Write | 8 | 1 |
| ec2:ModifyVpnTunnelOptions | Write | 8 | 1 |
| ec2:MonitorInstances | Write | 7 | 2 |
| ec2:MoveAddressToVpc | Write | 9 | 1 |
| ec2:MoveByoipCidrToIpam | Write | 6 | 1 |
| ec2:MoveCapacityReservationInstances | Write | 6 | 1 |
| ec2:PauseVolumeIO | Write | 6 | 1 |
| ec2:ProvisionByoipCidr | Write | 6 | 1 |
| ec2:ProvisionIpamByoasn | Write | 6 | 1 |
| ec2:ProvisionIpamPoolCidr | Write | 6 | 1 |
| ec2:ProvisionPublicIpv4PoolCidr | Write | 6 | 1 |
| ec2:PurchaseCapacityBlock | Write | 7 | 1 |
| ec2:PurchaseCapacityBlockExtension | Write | 7 | 1 |
| ec2:PurchaseHostReservation | Write | 7 | 1 |
| ec2:PurchaseReservedInstancesOffering | Write | 7 | 1 |
| ec2:PurchaseScheduledInstances | Write | 7 | 1 |
| ec2:PutResourcePolicy | Permissions management | 6 | 2 |
| ec2:RebootInstances | Write | 10 | 10 |
| ec2:RegisterImage | Write | 13 | 3 |
| ec2:RegisterInstanceEventNotificationAttributes | Write | 6 | 1 |
| ec2:RegisterTransitGatewayMulticastGroupMembers | Write | 6 | 1 |
| ec2:RegisterTransitGatewayMulticastGroupSources | Write | 6 | 1 |
| ec2:RejectCapacityReservationBillingOwnership | Write | 6 | 1 |
| ec2:RejectTransitGatewayClientVpnAttachment | Write | 6 | 1 |
| ec2:RejectTransitGatewayMulticastDomainAssociations | Write | 6 | 1 |
| ec2:RejectTransitGatewayPeeringAttachment | Write | 6 | 1 |
| ec2:RejectTransitGatewayVpcAttachment | Write | 7 | 3 |
| ec2:RejectVpcEndpointConnections | Write | 8 | 1 |
| ec2:RejectVpcPeeringConnection | Write | 9 | 1 |
| ec2:ReleaseAddress | Write | 20 | 10 |
| ec2:ReleaseHosts | Write | 7 | 1 |
| ec2:ReleaseIpamPoolAllocation | Write | 7 | 1 |
| ec2:ReplaceIamInstanceProfileAssociation | Write | 7 | 6 |
| ec2:ReplaceImageCriteriaInAllowedImagesSettings | Write | 7 | 1 |
| ec2:ReplaceImageInstanceTypeSpecification | Write | 7 | 1 |
| ec2:ReplaceNetworkAclAssociation | Write | 11 | 3 |
| ec2:ReplaceNetworkAclEntry | Write | 9 | 3 |
| ec2:ReplaceRoute | Write | 10 | 7 |
| ec2:ReplaceRouteTableAssociation | Write | 10 | 5 |
| ec2:ReplaceTransitGatewayRoute | Write | 8 | 3 |
| ec2:ReplaceVpnTunnel | Write | 8 | 1 |
| ec2:ReportInstanceStatus | Write | 7 | 1 |
| ec2:RequestSpotFleet | Write | 13 | 1 |
| ec2:RequestSpotInstances | Write | 14 | 1 |
| ec2:ResetAddressAttribute | Write | 7 | 1 |
| ec2:ResetEbsDefaultKmsKeyId | Write | 7 | 1 |
| ec2:ResetFpgaImageAttribute | Write | 7 | 1 |
| ec2:ResetImageAttribute | Write | 8 | 1 |
| ec2:ResetInstanceAttribute | Write | 7 | 1 |
| ec2:ResetNetworkInterfaceAttribute | Write | 9 | 1 |
| ec2:ResetSnapshotAttribute | Permissions management | 7 | 1 |
| ec2:RestoreAddressToClassic | Write | 9 | 1 |
| ec2:RestoreImageFromRecycleBin | Write | 6 | 1 |
| ec2:RestoreManagedPrefixListVersion | Write | 6 | 1 |
| ec2:RestoreSnapshotFromRecycleBin | Write | 6 | 1 |
| ec2:RestoreSnapshotTier | Write | 6 | 2 |
| ec2:RestoreVolumeFromRecycleBin | Write | 6 | 1 |
| ec2:RevokeClientVpnIngress | Write | 6 | 1 |
| ec2:RevokeSecurityGroupEgress | Write | 22 | 31 |
| ec2:RevokeSecurityGroupIngress | Write | 26 | 28 |
| ec2:RunInstances | Write | 31 | 38 |
| ec2:RunScheduledInstances | Write | 7 | 1 |
| ec2:SearchLocalGatewayRoutes | List | 20 | 2 |
| ec2:SearchTransitGatewayMulticastGroups | List | 17 | 2 |
| ec2:SearchTransitGatewayRoutes | List | 27 | 5 |
| ec2:SendDiagnosticInterrupt | Write | 6 | 1 |
| ec2:SendSpotInstanceInterruptions | Write | 6 | 2 |
| ec2:StartDeclarativePoliciesReport | Read | 6 | 1 |
| ec2:StartInstances | Write | 13 | 27 |
| ec2:StartNetworkInsightsAccessScopeAnalysis | Write | 7 | 1 |
| ec2:StartNetworkInsightsAnalysis | Write | 7 | 4 |
| ec2:StartVpcEndpointServicePrivateDnsVerification | Write | 6 | 1 |
| ec2:StopInstances | Write | 18 | 28 |
| ec2:TerminateClientVpnConnections | Write | 6 | 1 |
| ec2:TerminateInstances | Write | 26 | 54 |
| ec2:UnassignIpv6Addresses | Write | 12 | 12 |
| ec2:UnassignPrivateIpAddresses | Write | 16 | 9 |
| ec2:UnassignPrivateNatGatewayAddress | Write | 6 | 1 |
| ec2:UnlockSnapshot | Write | 6 | 1 |
| ec2:UnmonitorInstances | Write | 7 | 1 |
| ec2:UpdateCapacityManagerMonitoredTagKeys | Write | 6 | 1 |
| ec2:UpdateCapacityManagerOrganizationsAccess | Write | 6 | 1 |
| ec2:UpdateInterruptibleCapacityReservationAllocation | Write | 6 | 1 |
| ec2:UpdateSecurityGroupRuleDescriptionsEgress | Write | 9 | 2 |
| ec2:UpdateSecurityGroupRuleDescriptionsIngress | Write | 9 | 2 |
| ec2:ValidateSecurityGroupQuotasForInterface | Read | 9 | 1 |
| ec2:WithdrawByoipCidr | Write | 6 | 1 |