IoT
Prefix iot, 293 actions · Domain IoT & Edge
23 AWS managed policies. 0 have reviewed guidance; the rest have authoritative permission data pending editorial review. 1 are service-linked role policies, shown with permission data only.
User access (3)
Operator and limited (5)
- AWSIoTConfigAccessOperator
- AWSIoTDataAccessOperator
- AWSIoTDeviceTesterForFreeRTOSFullAccessOperator
- AWSIoTWirelessFullPublishAccessOperator
- AWSIoTWirelessGatewayCertManagerOperator
Service roles (14)
- AmazonFreeRTOSOTAUpdateOperator
- AmazonSageMakerEdgeDeviceFleetPolicyOperator
- AWSDeepLensServiceRolePolicyOperator
- AWSIoTDeviceDefenderAddThingsToThingGroupMitigationActionOperator
- AWSIoTDeviceDefenderAuditReader
- AWSIoTDeviceDefenderEnableIoTLoggingMitigationActionOperator
- AWSIoTDeviceDefenderReplaceDefaultPolicyMitigationActionOperator
- AWSIoTDeviceDefenderUpdateCACertMitigationActionOperator
- AWSIoTDeviceDefenderUpdateDeviceCertMitigationActionOperator
- AWSIoTFleetHubFederationAccessOperator
- AWSIoTOTAUpdateOperator
- AWSIoTRuleActionsHigh privilegeOperator
- AWSIoTThingsRegistrationOperator
- AWSPanoramaServiceRolePolicyOperator
Service-linked roles (1)
Also grants IoT actions (22)
- AdministratorAccess
- AIDevOpsAgentAccessPolicy
- AIDevOpsAgentActionsPolicy
- AIOpsAssistantPolicy
- AssuranceServiceRolePolicy
- AWS_ConfigRole
- AWSCODAPermissionsBoundary
- AWSConfigServiceRolePolicy
- AWSGreengrassResourceAccessRolePolicy
- AWSIoTSiteWiseConsoleFullAccess
- AWSLambdaFullAccess
- AWSMcpServiceActionsFullAccess
- AWSResourceExplorerServiceRolePolicy
- AWSSupportServiceRolePolicy
- AWSWellArchitectedAgentResourceScanningServiceRolePolicy
- PowerUserAccess
- ReadOnlyAccess
- ResourceGroupsTaggingAPITagUntagSupportedResources
- SecurityAudit
- SupportUser
- ViewOnlyAccess
- WellArchitectedAgentResourceScanning
acceptcertificatetransfer addthingtobillinggroup addthingtothinggroup associatesbomwithpackageversion associatetargetswithjob attachpolicy attachprincipalpolicy attachsecurityprofile attachthingprincipal cancelauditmitigationactionstask cancelaudittask cancelcertificatetransfer canceldetectmitigationactionstask canceljob canceljobexecution cleardefaultauthorizer closetunnel confirmtopicruledestination connect createauditsuppression createauthorizer createbillinggroup createcertificatefromcsr createcertificateprovider createcommand createcustommetric createdimension createdomainconfiguration createdynamicthinggroup createfleetmetric createjob createjobtemplate createkeysandcertificate createmitigationaction createotaupdate createpackage createpackageversion createpolicy createpolicyversion createprovisioningclaim createprovisioningtemplate createprovisioningtemplateversion createrolealias createscheduledaudit createsecurityprofile createstream creatething createthinggroup createthingtype createtopicrule createtopicruledestination deleteaccountauditconfiguration deleteauditsuppression deleteauthorizer deletebillinggroup deletecacertificate deletecertificate deletecertificateprovider deletecommand deletecommandexecution deleteconnection deletecustommetric deletedimension deletedomainconfiguration deletedynamicthinggroup deletefleetmetric deletejob deletejobexecution deletejobtemplate deletemitigationaction deleteotaupdate deletepackage deletepackageversion deletepolicy deletepolicyversion deleteprovisioningtemplate deleteprovisioningtemplateversion deleteregistrationcode deleterolealias deletescheduledaudit deletesecurityprofile deletestream deletething deletethinggroup deletethingshadow deletethingtype deletetopicrule deletetopicruledestination deletev2logginglevel deprecatethingtype describeaccountauditconfiguration describeauditfinding describeauditmitigationactionstask describeauditsuppression describeaudittask describeauthorizer describebillinggroup describecacertificate describecertificate describecertificateprovider describecustommetric describedefaultauthorizer describedetectmitigationactionstask describedimension describedomainconfiguration describeencryptionconfiguration describeendpoint describeeventconfigurations describefleetmetric describeindex describejob describejobexecution describejobtemplate describemanagedjobtemplate describemitigationaction describeprovisioningtemplate describeprovisioningtemplateversion describerolealias describescheduledaudit describesecurityprofile describestream describething describethinggroup describethingregistrationtask describethingtype describetunnel detachpolicy detachprincipalpolicy detachsecurityprofile detachthingprincipal disabletopicrule disassociatesbomfrompackageversion enabletopicrule getbehaviormodeltrainingsummaries getbucketsaggregation getcardinality getcommand getcommandexecution getconnection geteffectivepolicies getindexingconfiguration getjobdocument getloggingoptions getotaupdate getpackage getpackageconfiguration getpackageversion getpercentiles getpolicy getpolicyversion getregistrationcode getretainedmessage getstatistics getthingconnectivitydata getthingshadow gettopicrule gettopicruledestination getv2loggingoptions listactiveviolations listattachedpolicies listauditfindings listauditmitigationactionsexecutions listauditmitigationactionstasks listauditsuppressions listaudittasks listauthorizers listbillinggroups listcacertificates listcertificateproviders listcertificates listcertificatesbyca listcommandexecutions listcommands listcustommetrics listdetectmitigationactionsexecutions listdetectmitigationactionstasks listdimensions listdomainconfigurations listfleetmetrics listindices listjobexecutionsforjob listjobexecutionsforthing listjobtemplates listjobs listmanagedjobtemplates listmetricvalues listmitigationactions listnamedshadowsforthing listotaupdates listoutgoingcertificates listpackageversions listpackages listpolicies listpolicyprincipals listpolicyversions listprincipalpolicies listprincipalthings listprincipalthingsv2 listprovisioningtemplateversions listprovisioningtemplates listrelatedresourcesforauditfinding listretainedmessages listrolealiases listsbomvalidationresults listscheduledaudits listsecurityprofiles listsecurityprofilesfortarget liststreams listsubscriptions listtagsforresource listtargetsforpolicy listtargetsforsecurityprofile listthinggroups listthinggroupsforthing listthingprincipals listthingprincipalsv2 listthingregistrationtaskreports listthingregistrationtasks listthingtypes listthings listthingsinbillinggroup listthingsinthinggroup listtopicruledestinations listtopicrules listtunnels listv2logginglevels listviolationevents opentunnel publish putverificationstateonviolation receive registercacertificate registercertificate registercertificatewithoutca registerthing rejectcertificatetransfer removethingfrombillinggroup removethingfromthinggroup replacetopicrule retainpublish rotatetunnelaccesstoken searchindex senddirectmessage setdefaultauthorizer setdefaultpolicyversion setloggingoptions setv2logginglevel setv2loggingoptions startauditmitigationactionstask startcommandexecution startdetectmitigationactionstask startondemandaudittask startthingregistrationtask stopthingregistrationtask subscribe tagresource testauthorization testinvokeauthorizer transfercertificate untagresource updateaccountauditconfiguration updateauditsuppression updateauthorizer updatebillinggroup updatecacertificate updatecertificate updatecertificateprovider updatecommand updatecustommetric updatedimension updatedomainconfiguration updatedynamicthinggroup updateencryptionconfiguration updateeventconfigurations updatefleetmetric updateindexingconfiguration updatejob updatemitigationaction updatepackage updatepackageconfiguration updatepackageversion updateprovisioningtemplate updaterolealias updatescheduledaudit updatesecurityprofile updatestream updatething updatethinggroup updatethinggroupsforthing updatethingshadow updatethingtype updatetopicruledestination validatesecurityprofilebehaviors
Actions (293)
| Action | Access level | Policies granting without limits | Policies granting with resource or condition limits |
|---|---|---|---|
| iot:AcceptCertificateTransfer | Write | 6 | 1 |
| iot:AddThingToBillingGroup | Write | 6 | 1 |
| iot:AddThingToThingGroup | Write | 8 | 1 |
| iot:AssociateSbomWithPackageVersion | Write | 5 | 1 |
| iot:AssociateTargetsWithJob | Write | 6 | 1 |
| iot:AttachPolicy | Permissions management | 7 | 5 |
| iot:AttachPrincipalPolicy | Permissions management | 8 | 4 |
| iot:AttachSecurityProfile | Write | 6 | 1 |
| iot:AttachThingPrincipal | Write | 9 | 5 |
| iot:CancelAuditMitigationActionsTask | Write | 5 | 1 |
| iot:CancelAuditTask | Write | 6 | 1 |
| iot:CancelCertificateTransfer | Write | 6 | 1 |
| iot:CancelDetectMitigationActionsTask | Write | 5 | 1 |
| iot:CancelJob | Write | 7 | 1 |
| iot:CancelJobExecution | Write | 7 | 2 |
| iot:ClearDefaultAuthorizer | Write | 6 | 1 |
| iot:CloseTunnel | Write | 5 | 1 |
| iot:ConfirmTopicRuleDestination | Write | 5 | 1 |
| iot:Connect | Write | 6 | 1 |
| iot:CreateAuditSuppression | Write | 5 | 1 |
| iot:CreateAuthorizer | Write | 6 | 1 |
| iot:CreateBillingGroup | Write | 5 | 1 |
| iot:CreateCertificateFromCsr | Write | 9 | 1 |
| iot:CreateCertificateProvider | Write | 5 | 1 |
| iot:CreateCommand | Write | 5 | 1 |
| iot:CreateCustomMetric | Write | 5 | 1 |
| iot:CreateDimension | Write | 5 | 1 |
| iot:CreateDomainConfiguration | Write | 5 | 1 |
| iot:CreateDynamicThingGroup | Write | 5 | 1 |
| iot:CreateFleetMetric | Write | 6 | 1 |
| iot:CreateJob | Write | 9 | 4 |
| iot:CreateJobTemplate | Write | 5 | 1 |
| iot:CreateKeysAndCertificate | Write | 13 | 1 |
| iot:CreateMitigationAction | Write | 5 | 1 |
| iot:CreateOTAUpdate | Write | 7 | 1 |
| iot:CreatePackage | Write | 5 | 1 |
| iot:CreatePackageVersion | Write | 5 | 1 |
| iot:CreatePolicy | Permissions management | 12 | 2 |
| iot:CreatePolicyVersion | Permissions management | 8 | 3 |
| iot:CreateProvisioningClaim | Write | 5 | 1 |
| iot:CreateProvisioningTemplate | Write | 5 | 1 |
| iot:CreateProvisioningTemplateVersion | Write | 5 | 1 |
| iot:CreateRoleAlias | Write | 6 | 3 |
| iot:CreateScheduledAudit | Write | 6 | 1 |
| iot:CreateSecurityProfile | Write | 6 | 1 |
| iot:CreateStream | Write | 8 | 1 |
| iot:CreateThing | Write | 9 | 5 |
| iot:CreateThingGroup | Write | 6 | 1 |
| iot:CreateThingType | Write | 6 | 1 |
| iot:CreateTopicRule | Write | 7 | 1 |
| iot:CreateTopicRuleDestination | Write | 5 | 1 |
| iot:DeleteAccountAuditConfiguration | Write | 6 | 1 |
| iot:DeleteAuditSuppression | Write | 5 | 1 |
| iot:DeleteAuthorizer | Write | 6 | 1 |
| iot:DeleteBillingGroup | Write | 5 | 1 |
| iot:DeleteCACertificate | Write | 7 | 1 |
| iot:DeleteCertificate | Write | 7 | 5 |
| iot:DeleteCertificateProvider | Write | 5 | 1 |
| iot:DeleteCommand | Write | 5 | 1 |
| iot:DeleteCommandExecution | Write | 5 | 1 |
| iot:DeleteConnection | Write | 5 | 1 |
| iot:DeleteCustomMetric | Write | 5 | 1 |
| iot:DeleteDimension | Write | 5 | 1 |
| iot:DeleteDomainConfiguration | Write | 5 | 1 |
| iot:DeleteDynamicThingGroup | Write | 5 | 1 |
| iot:DeleteFleetMetric | Write | 6 | 1 |
| iot:DeleteJob | Write | 6 | 5 |
| iot:DeleteJobExecution | Write | 6 | 1 |
| iot:DeleteJobTemplate | Write | 5 | 1 |
| iot:DeleteMitigationAction | Write | 5 | 1 |
| iot:DeleteOTAUpdate | Write | 6 | 2 |
| iot:DeletePackage | Write | 5 | 1 |
| iot:DeletePackageVersion | Write | 5 | 1 |
| iot:DeletePolicy | Permissions management | 6 | 3 |
| iot:DeletePolicyVersion | Permissions management | 6 | 1 |
| iot:DeleteProvisioningTemplate | Write | 5 | 1 |
| iot:DeleteProvisioningTemplateVersion | Write | 5 | 1 |
| iot:DeleteRegistrationCode | Write | 6 | 1 |
| iot:DeleteRoleAlias | Write | 6 | 1 |
| iot:DeleteScheduledAudit | Write | 6 | 1 |
| iot:DeleteSecurityProfile | Write | 6 | 1 |
| iot:DeleteStream | Write | 6 | 3 |
| iot:DeleteThing | Write | 7 | 5 |
| iot:DeleteThingGroup | Write | 6 | 1 |
| iot:DeleteThingShadow | Write | 6 | 5 |
| iot:DeleteThingType | Write | 6 | 1 |
| iot:DeleteTopicRule | Write | 6 | 1 |
| iot:DeleteTopicRuleDestination | Write | 5 | 1 |
| iot:DeleteV2LoggingLevel | Write | 6 | 1 |
| iot:DeprecateThingType | Write | 6 | 1 |
| iot:DescribeAccountAuditConfiguration | Read | 16 | 3 |
| iot:DescribeAuditFinding | Read | 11 | 1 |
| iot:DescribeAuditMitigationActionsTask | Read | 11 | 1 |
| iot:DescribeAuditSuppression | Read | 11 | 1 |
| iot:DescribeAuditTask | Read | 13 | 1 |
| iot:DescribeAuthorizer | Read | 17 | 3 |
| iot:DescribeBillingGroup | Read | 15 | 3 |
| iot:DescribeCACertificate | Read | 18 | 3 |
| iot:DescribeCertificate | Read | 20 | 3 |
| iot:DescribeCertificateProvider | Read | 14 | 2 |
| iot:DescribeCustomMetric | Read | 15 | 3 |
| iot:DescribeDefaultAuthorizer | Read | 14 | 1 |
| iot:DescribeDetectMitigationActionsTask | Read | 11 | 1 |
| iot:DescribeDimension | Read | 14 | 2 |
| iot:DescribeDomainConfiguration | Read | 15 | 3 |
| iot:DescribeEncryptionConfiguration | Read | 11 | 2 |
| iot:DescribeEndpoint | Read | 23 | 1 |
| iot:DescribeEventConfigurations | Read | 13 | 1 |
| iot:DescribeFleetMetric | Read | 15 | 3 |
| iot:DescribeIndex | Read | 15 | 1 |
| iot:DescribeJob | Read | 17 | 4 |
| iot:DescribeJobExecution | Read | 15 | 5 |
| iot:DescribeJobTemplate | Read | 15 | 3 |
| iot:DescribeManagedJobTemplate | Read | 11 | 1 |
| iot:DescribeMitigationAction | Read | 14 | 3 |
| iot:DescribeProvisioningTemplate | Read | 14 | 3 |
| iot:DescribeProvisioningTemplateVersion | Read | 11 | 1 |
| iot:DescribeRoleAlias | Read | 17 | 4 |
| iot:DescribeScheduledAudit | Read | 16 | 3 |
| iot:DescribeSecurityProfile | Read | 17 | 3 |
| iot:DescribeStream | Read | 16 | 1 |
| iot:DescribeThing | Read | 18 | 6 |
| iot:DescribeThingGroup | Read | 19 | 3 |
| iot:DescribeThingRegistrationTask | Read | 13 | 1 |
| iot:DescribeThingType | Read | 17 | 2 |
| iot:DescribeTunnel | Read | 13 | 1 |
| iot:DetachPolicy | Permissions management | 7 | 3 |
| iot:DetachPrincipalPolicy | Permissions management | 6 | 4 |
| iot:DetachSecurityProfile | Write | 6 | 1 |
| iot:DetachThingPrincipal | Write | 8 | 5 |
| iot:DisableTopicRule | Write | 6 | 1 |
| iot:DisassociateSbomFromPackageVersion | Write | 5 | 1 |
| iot:EnableTopicRule | Write | 6 | 1 |
| iot:GetBehaviorModelTrainingSummaries | List | 8 | 1 |
| iot:GetBucketsAggregation | Read | 9 | 1 |
| iot:GetCardinality | Read | 9 | 1 |
| iot:GetCommand | Read | 11 | 2 |
| iot:GetCommandExecution | Read | 8 | 1 |
| iot:GetConnection | Write | 8 | 1 |
| iot:GetEffectivePolicies | Read | 12 | 1 |
| iot:GetIndexingConfiguration | Read | 12 | 1 |
| iot:GetJobDocument | Read | 10 | 1 |
| iot:GetLoggingOptions | Read | 12 | 1 |
| iot:GetOTAUpdate | Read | 11 | 2 |
| iot:GetPackage | Read | 13 | 2 |
| iot:GetPackageConfiguration | Read | 8 | 1 |
| iot:GetPackageVersion | Read | 13 | 2 |
| iot:GetPercentiles | Read | 9 | 1 |
| iot:GetPolicy | Read | 19 | 3 |
| iot:GetPolicyVersion | Read | 12 | 1 |
| iot:GetRegistrationCode | Read | 11 | 1 |
| iot:GetRetainedMessage | Read | 8 | 1 |
| iot:GetStatistics | Read | 9 | 1 |
| iot:GetThingConnectivityData | Read | 8 | 1 |
| iot:GetThingShadow | Read | 14 | 6 |
| iot:GetTopicRule | Read | 16 | 3 |
| iot:GetTopicRuleDestination | Read | 13 | 2 |
| iot:GetV2LoggingOptions | Read | 17 | 2 |
| iot:ListActiveViolations | List | 15 | 1 |
| iot:ListAttachedPolicies | List | 16 | 1 |
| iot:ListAuditFindings | List | 14 | 1 |
| iot:ListAuditMitigationActionsExecutions | List | 12 | 1 |
| iot:ListAuditMitigationActionsTasks | List | 12 | 1 |
| iot:ListAuditSuppressions | List | 12 | 1 |
| iot:ListAuditTasks | List | 14 | 1 |
| iot:ListAuthorizers | List | 18 | 3 |
| iot:ListBillingGroups | List | 15 | 3 |
| iot:ListCACertificates | List | 19 | 3 |
| iot:ListCertificateProviders | List | 15 | 2 |
| iot:ListCertificates | List | 20 | 2 |
| iot:ListCertificatesByCA | List | 15 | 1 |
| iot:ListCommandExecutions | List | 13 | 1 |
| iot:ListCommands | List | 16 | 2 |
| iot:ListCustomMetrics | List | 16 | 3 |
| iot:ListDetectMitigationActionsExecutions | List | 12 | 1 |
| iot:ListDetectMitigationActionsTasks | List | 12 | 1 |
| iot:ListDimensions | List | 16 | 2 |
| iot:ListDomainConfigurations | List | 16 | 3 |
| iot:ListFleetMetrics | List | 16 | 3 |
| iot:ListIndices | List | 14 | 1 |
| iot:ListJobExecutionsForJob | List | 16 | 1 |
| iot:ListJobExecutionsForThing | List | 16 | 1 |
| iot:ListJobTemplates | List | 16 | 3 |
| iot:ListJobs | List | 17 | 1 |
| iot:ListManagedJobTemplates | List | 12 | 1 |
| iot:ListMetricValues | List | 13 | 1 |
| iot:ListMitigationActions | List | 15 | 3 |
| iot:ListNamedShadowsForThing | List | 15 | 1 |
| iot:ListOTAUpdates | List | 15 | 1 |
| iot:ListOutgoingCertificates | List | 15 | 1 |
| iot:ListPackageVersions | List | 16 | 2 |
| iot:ListPackages | List | 16 | 2 |
| iot:ListPolicies | List | 20 | 3 |
| iot:ListPolicyPrincipals | List | 16 | 1 |
| iot:ListPolicyVersions | List | 15 | 1 |
| iot:ListPrincipalPolicies | List | 16 | 1 |
| iot:ListPrincipalThings | List | 17 | 1 |
| iot:ListPrincipalThingsV2 | List | 12 | 1 |
| iot:ListProvisioningTemplateVersions | List | 12 | 1 |
| iot:ListProvisioningTemplates | List | 15 | 3 |
| iot:ListRelatedResourcesForAuditFinding | List | 12 | 1 |
| iot:ListRetainedMessages | List | 12 | 1 |
| iot:ListRoleAliases | List | 19 | 3 |
| iot:ListSbomValidationResults | List | 12 | 1 |
| iot:ListScheduledAudits | List | 17 | 3 |
| iot:ListSecurityProfiles | List | 18 | 3 |
| iot:ListSecurityProfilesForTarget | List | 17 | 1 |
| iot:ListStreams | List | 15 | 1 |
| iot:ListSubscriptions | Write | 12 | 1 |
| iot:ListTagsForResource | Read | 15 | 4 |
| iot:ListTargetsForPolicy | List | 16 | 1 |
| iot:ListTargetsForSecurityProfile | List | 17 | 3 |
| iot:ListThingGroups | List | 19 | 3 |
| iot:ListThingGroupsForThing | List | 16 | 1 |
| iot:ListThingPrincipals | List | 16 | 1 |
| iot:ListThingPrincipalsV2 | List | 12 | 1 |
| iot:ListThingRegistrationTaskReports | List | 14 | 1 |
| iot:ListThingRegistrationTasks | List | 15 | 1 |
| iot:ListThingTypes | List | 18 | 2 |
| iot:ListThings | List | 18 | 2 |
| iot:ListThingsInBillingGroup | List | 12 | 1 |
| iot:ListThingsInThingGroup | List | 16 | 1 |
| iot:ListTopicRuleDestinations | List | 15 | 2 |
| iot:ListTopicRules | List | 19 | 3 |
| iot:ListTunnels | List | 14 | 1 |
| iot:ListV2LoggingLevels | List | 18 | 3 |
| iot:ListViolationEvents | List | 14 | 1 |
| iot:OpenTunnel | Write | 5 | 1 |
| iot:Publish | Write | 8 | 1 |
| iot:PutVerificationStateOnViolation | Write | 5 | 1 |
| iot:Receive | Write | 6 | 1 |
| iot:RegisterCACertificate | Write | 7 | 1 |
| iot:RegisterCertificate | Write | 8 | 1 |
| iot:RegisterCertificateWithoutCA | Write | 5 | 1 |
| iot:RegisterThing | Write | 7 | 1 |
| iot:RejectCertificateTransfer | Write | 6 | 1 |
| iot:RemoveThingFromBillingGroup | Write | 6 | 1 |
| iot:RemoveThingFromThingGroup | Write | 7 | 1 |
| iot:ReplaceTopicRule | Write | 7 | 1 |
| iot:RetainPublish | Write | 5 | 1 |
| iot:RotateTunnelAccessToken | Write | 5 | 1 |
| iot:SearchIndex | Read | 8 | 1 |
| iot:SendDirectMessage | Write | 5 | 1 |
| iot:SetDefaultAuthorizer | Permissions management | 6 | 1 |
| iot:SetDefaultPolicyVersion | Permissions management | 6 | 1 |
| iot:SetLoggingOptions | Write | 6 | 1 |
| iot:SetV2LoggingLevel | Write | 6 | 1 |
| iot:SetV2LoggingOptions | Write | 7 | 1 |
| iot:StartAuditMitigationActionsTask | Write | 5 | 1 |
| iot:StartCommandExecution | Write | 5 | 1 |
| iot:StartDetectMitigationActionsTask | Write | 5 | 1 |
| iot:StartOnDemandAuditTask | Write | 6 | 1 |
| iot:StartThingRegistrationTask | Write | 6 | 1 |
| iot:StopThingRegistrationTask | Write | 6 | 1 |
| iot:Subscribe | Write | 6 | 1 |
| iot:TagResource | Tagging | 6 | 2 |
| iot:TestAuthorization | Read | 7 | 1 |
| iot:TestInvokeAuthorizer | Read | 7 | 1 |
| iot:TransferCertificate | Write | 6 | 1 |
| iot:UntagResource | Tagging | 6 | 1 |
| iot:UpdateAccountAuditConfiguration | Write | 6 | 1 |
| iot:UpdateAuditSuppression | Write | 5 | 1 |
| iot:UpdateAuthorizer | Write | 6 | 1 |
| iot:UpdateBillingGroup | Write | 5 | 1 |
| iot:UpdateCACertificate | Write | 8 | 1 |
| iot:UpdateCertificate | Write | 9 | 5 |
| iot:UpdateCertificateProvider | Write | 5 | 1 |
| iot:UpdateCommand | Write | 5 | 1 |
| iot:UpdateCustomMetric | Write | 5 | 1 |
| iot:UpdateDimension | Write | 5 | 1 |
| iot:UpdateDomainConfiguration | Write | 5 | 1 |
| iot:UpdateDynamicThingGroup | Write | 5 | 1 |
| iot:UpdateEncryptionConfiguration | Write | 5 | 1 |
| iot:UpdateEventConfigurations | Write | 6 | 1 |
| iot:UpdateFleetMetric | Write | 6 | 1 |
| iot:UpdateIndexingConfiguration | Write | 6 | 1 |
| iot:UpdateJob | Write | 5 | 1 |
| iot:UpdateMitigationAction | Write | 5 | 1 |
| iot:UpdatePackage | Write | 5 | 1 |
| iot:UpdatePackageConfiguration | Write | 5 | 1 |
| iot:UpdatePackageVersion | Write | 5 | 1 |
| iot:UpdateProvisioningTemplate | Write | 5 | 1 |
| iot:UpdateRoleAlias | Write | 6 | 2 |
| iot:UpdateScheduledAudit | Write | 6 | 1 |
| iot:UpdateSecurityProfile | Write | 6 | 1 |
| iot:UpdateStream | Write | 6 | 1 |
| iot:UpdateThing | Write | 7 | 4 |
| iot:UpdateThingGroup | Write | 6 | 1 |
| iot:UpdateThingGroupsForThing | Write | 7 | 1 |
| iot:UpdateThingShadow | Write | 7 | 5 |
| iot:UpdateThingType | Write | 5 | 1 |
| iot:UpdateTopicRuleDestination | Write | 5 | 1 |
| iot:ValidateSecurityProfileBehaviors | Read | 10 | 1 |