FSx
Prefix fsx, 56 actions · Domain Storage
8 AWS managed policies. 4 have reviewed guidance; the rest have authoritative permission data pending editorial review. 2 are service-linked role policies, shown with permission data only.
User access (5)
Service roles (1)
Service-linked roles (2)
Also grants FSx actions (46)
- AdministratorAccess
- AIDevOpsAgentAccessPolicy
- AIDevOpsAgentActionsPolicy
- AIOpsAssistantPolicy
- AmazonDataZoneSageMakerEnvironmentRolePermissionsBoundary
- AmazonEC2RolePolicyForLaunchWizard
- AmazonECS_FullAccess
- AmazonLaunchWizard_Fullaccess
- AmazonLaunchWizardFullAccessV2
- AmazonNimbleStudio-StudioAdmin
- AmazonNimbleStudio-StudioUser
- AmazonSageMakerFullAccess
- AmazonSageMakerHyperPodInferenceAccess
- AmazonSageMakerNotebooksServiceRolePolicy
- AWS_ConfigRole
- AWSApplicationMigrationFSxProxyVPCPolicy
- AWSApplicationMigrationFullAccess
- AWSAuditManagerServiceRolePolicy
- AWSBackupFullAccess
- AWSBackupOperatorAccess
- AWSBackupServiceLinkedRolePolicyForBackup
- AWSBackupServiceRolePolicyForBackup
- AWSBackupServiceRolePolicyForRestores
- AWSCODAPermissionsBoundary
- AWSConfigServiceRolePolicy
- AWSDataSyncFullAccess
- AWSDataSyncReadOnlyAccess
- AWSM2ServicePolicy
- AWSMcpServiceActionsFullAccess
- AWSPartnerLedSupportReadOnlyAccess
- AWSResilienceHubAsssessmentExecutionPolicy
- AWSResilienceHubV2AssessmentExecutionPolicy
- AWSResourceExplorerServiceRolePolicy
- AWSSupportServiceRolePolicy
- AWSTransformServerMigrationAgentPolicy
- AWSWellArchitectedAgentResourceScanningServiceRolePolicy
- CloudWatchApplicationInsightsFullAccess
- CloudwatchApplicationInsightsServiceLinkedRolePolicy
- CloudWatchOmniAWSIntegrationPolicy
- DataScientist
- PowerUserAccess
- ReadOnlyAccess
- ResourceGroupsTaggingAPITagUntagSupportedResources
- SecurityAudit
- ViewOnlyAccess
- WellArchitectedAgentResourceScanning
associatefilegateway associatefilesystemaliases bypasssnaplockenterpriseretention canceldatarepositorytask copybackup copysnapshotandupdatevolume createandattachs3accesspoint createbackup createdatarepositoryassociation createdatarepositorytask createfilecache createfilesystem createfilesystemfrombackup createsnapshot createstoragevirtualmachine createvolume createvolumefrombackup deletebackup deletedatarepositoryassociation deletefilecache deletefilesystem deleteresourcepolicy deletesnapshot deletestoragevirtualmachine deletevolume describeassociatedfilegateways describebackups describedatarepositoryassociations describedatarepositorytasks describefilecaches describefilesystemaliases describefilesystems describes3accesspointattachments describesharedvpcconfiguration describesnapshots describestoragevirtualmachines describevolumes detachanddeletes3accesspoint disassociatefilegateway disassociatefilesystemaliases getresourcepolicy listtagsforresource managebackupprincipalassociations putresourcepolicy releasefilesystemnfsv3locks restorevolumefromsnapshot startmisconfiguredstaterecovery tagresource untagresource updatedatarepositoryassociation updatefilecache updatefilesystem updatesharedvpcconfiguration updatesnapshot updatestoragevirtualmachine updatevolume
Actions (56)
| Action | Access level | Policies granting without limits | Policies granting with resource or condition limits |
|---|---|---|---|
| fsx:AssociateFileGateway | Write | 6 | 1 |
| fsx:AssociateFileSystemAliases | Write | 6 | 1 |
| fsx:BypassSnaplockEnterpriseRetention | Permissions management | 4 | 1 |
| fsx:CancelDataRepositoryTask | Write | 6 | 1 |
| fsx:CopyBackup | Write | 6 | 3 |
| fsx:CopySnapshotAndUpdateVolume | Write | 6 | 1 |
| fsx:CreateAndAttachS3AccessPoint | Write | 6 | 1 |
| fsx:CreateBackup | Write | 6 | 2 |
| fsx:CreateDataRepositoryAssociation | Write | 6 | 1 |
| fsx:CreateDataRepositoryTask | Write | 6 | 1 |
| fsx:CreateFileCache | Write | 6 | 1 |
| fsx:CreateFileSystem | Write | 6 | 3 |
| fsx:CreateFileSystemFromBackup | Write | 6 | 2 |
| fsx:CreateSnapshot | Write | 6 | 4 |
| fsx:CreateStorageVirtualMachine | Write | 6 | 2 |
| fsx:CreateVolume | Write | 6 | 5 |
| fsx:CreateVolumeFromBackup | Write | 6 | 2 |
| fsx:DeleteBackup | Write | 6 | 4 |
| fsx:DeleteDataRepositoryAssociation | Write | 6 | 1 |
| fsx:DeleteFileCache | Write | 6 | 1 |
| fsx:DeleteFileSystem | Write | 6 | 5 |
| fsx:DeleteResourcePolicy | Permissions management | 4 | 3 |
| fsx:DeleteSnapshot | Write | 6 | 2 |
| fsx:DeleteStorageVirtualMachine | Write | 6 | 2 |
| fsx:DeleteVolume | Write | 6 | 7 |
| fsx:DescribeAssociatedFileGateways | Read | 15 | 1 |
| fsx:DescribeBackups | Read | 21 | 5 |
| fsx:DescribeDataRepositoryAssociations | Read | 20 | 2 |
| fsx:DescribeDataRepositoryTasks | Read | 18 | 1 |
| fsx:DescribeFileCaches | Read | 18 | 1 |
| fsx:DescribeFileSystemAliases | Read | 15 | 1 |
| fsx:DescribeFileSystems | Read | 38 | 11 |
| fsx:DescribeS3AccessPointAttachments | Read | 19 | 2 |
| fsx:DescribeSharedVpcConfiguration | Read | 15 | 1 |
| fsx:DescribeSnapshots | Read | 21 | 3 |
| fsx:DescribeStorageVirtualMachines | Read | 25 | 5 |
| fsx:DescribeVolumes | Read | 25 | 7 |
| fsx:DetachAndDeleteS3AccessPoint | Write | 6 | 1 |
| fsx:DisassociateFileGateway | Write | 6 | 1 |
| fsx:DisassociateFileSystemAliases | Write | 6 | 1 |
| fsx:GetResourcePolicy | Permissions management | 4 | 3 |
| fsx:ListTagsForResource | Read | 17 | 7 |
| fsx:ManageBackupPrincipalAssociations | Permissions management | 6 | 2 |
| fsx:PutResourcePolicy | Permissions management | 4 | 3 |
| fsx:ReleaseFileSystemNfsV3Locks | Write | 6 | 1 |
| fsx:RestoreVolumeFromSnapshot | Write | 6 | 1 |
| fsx:StartMisconfiguredStateRecovery | Write | 4 | 1 |
| fsx:TagResource | Tagging | 7 | 9 |
| fsx:UntagResource | Tagging | 7 | 5 |
| fsx:UpdateDataRepositoryAssociation | Write | 6 | 1 |
| fsx:UpdateFileCache | Write | 6 | 1 |
| fsx:UpdateFileSystem | Write | 6 | 1 |
| fsx:UpdateSharedVpcConfiguration | Write | 6 | 1 |
| fsx:UpdateSnapshot | Write | 6 | 1 |
| fsx:UpdateStorageVirtualMachine | Write | 6 | 1 |
| fsx:UpdateVolume | Write | 6 | 2 |