Resource Groups
Prefix resource-groups, 29 actions · Domain Management & Governance
8 AWS managed policies. 4 have reviewed guidance; the rest have authoritative permission data pending editorial review. 2 are service-linked role policies, shown with permission data only.
User access (3)
Operator and limited (2)
Service roles (1)
- AmazonSSMMaintenanceWindowRoleOperator
Service-linked roles (2)
Also grants Resource Groups actions (48)
- AdministratorAccess
- AIDevOpsAgentAccessPolicy
- AIDevOpsAgentActionsPolicy
- AIOpsAssistantPolicy
- AmazonDynamoDBFullAccess
- AmazonDynamoDBReadOnlyAccess
- AmazonECSInfrastructureRolePolicyForManagedInstances
- AmazonEMRServicePolicy_v2
- AmazonLaunchWizard_Fullaccess
- AmazonLaunchWizardFullAccessV2
- AmazonSSMServiceRolePolicy
- AmazonVPCNetworkAccessAnalyzerFullAccessPolicy
- AssuranceServiceRolePolicy
- AutoScalingServiceRolePolicy
- AWS_ConfigRole
- AWSCODAPermissionsBoundary
- AWSConfigServiceRolePolicy
- AWSElasticDisasterRecoveryConsoleFullAccess
- AWSElasticDisasterRecoveryConsoleFullAccess_v2
- AWSLicenseManagerMasterAccountRolePolicy
- AWSMcpServiceActionsFullAccess
- AWSNetworkFirewallIGWServiceRolePolicy
- AWSNetworkFirewallServiceRolePolicy
- AWSQuickSetupDeploymentRolePolicy
- AWSQuickSetupPatchPolicyDeploymentRolePolicy
- AWSReachabilityAnalyzerServiceRolePolicy
- AWSResilienceHubAsssessmentExecutionPolicy
- AWSResilienceHubV2AssessmentExecutionPolicy
- AWSResourceExplorerServiceRolePolicy
- AWSServiceRoleForSMS
- AWSSupportServiceRolePolicy
- AWSWellArchitectedAgentResourceScanningServiceRolePolicy
- AWSWellArchitectedDiscoveryServiceRolePolicy
- CloudwatchApplicationInsightsServiceLinkedRolePolicy
- CloudWatchAutomaticDashboardsAccess
- CloudWatchOmniAWSIntegrationPolicy
- PowerUserAccess
- ReadOnlyAccess
- ResourceGroupsTaggingAPITagUntagSupportedResources
- SageMakerStudioAdminIAMDefaultExecutionPolicy
- SageMakerStudioAdminIAMPermissiveExecutionPolicy
- SageMakerStudioProjectRoleMachineLearningPolicy
- SageMakerStudioProjectUserRolePermissionsBoundary
- SageMakerStudioUserIAMDefaultExecutionPolicy
- SageMakerStudioUserIAMPermissiveExecutionPolicy
- SecurityAudit
- ServerMigrationServiceLaunchRole
- WellArchitectedAgentResourceScanning
associateresource canceltagsynctask creategroup deletegroup deletegrouppolicy disassociateresource getaccountsettings getgroup getgroupconfiguration getgrouppolicy getgroupquery gettagsynctask gettags groupresources listgroupresources listgroupingstatuses listgroups listresourcetypes listtagsynctasks putgroupconfiguration putgrouppolicy searchresources starttagsynctask tag ungroupresources untag updateaccountsettings updategroup updategroupquery
Actions (29)
| Action | Access level | Policies granting without limits | Policies granting with resource or condition limits |
|---|---|---|---|
| resource-groups:AssociateResource | Write | 5 | 2 |
| resource-groups:CancelTagSyncTask | Write | 5 | 1 |
| resource-groups:CreateGroup | Write | 6 | 12 |
| resource-groups:DeleteGroup | Write | 6 | 12 |
| resource-groups:DeleteGroupPolicy | Write | 5 | 1 |
| resource-groups:DisassociateResource | Write | 5 | 2 |
| resource-groups:GetAccountSettings | Read | 12 | 1 |
| resource-groups:GetGroup | Read | 23 | 8 |
| resource-groups:GetGroupConfiguration | Read | 18 | 6 |
| resource-groups:GetGroupPolicy | Read | 12 | 1 |
| resource-groups:GetGroupQuery | Read | 30 | 5 |
| resource-groups:GetTagSyncTask | Read | 12 | 2 |
| resource-groups:GetTags | Read | 19 | 5 |
| resource-groups:GroupResources | Write | 5 | 1 |
| resource-groups:ListGroupResources | List | 40 | 5 |
| resource-groups:ListGroupingStatuses | List | 15 | 1 |
| resource-groups:ListGroups | List | 27 | 3 |
| resource-groups:ListResourceTypes | List | 15 | 1 |
| resource-groups:ListTagSyncTasks | List | 15 | 2 |
| resource-groups:PutGroupConfiguration | Write | 5 | 1 |
| resource-groups:PutGroupPolicy | Write | 5 | 2 |
| resource-groups:SearchResources | List | 11 | 2 |
| resource-groups:StartTagSyncTask | Write | 5 | 1 |
| resource-groups:Tag | Tagging | 6 | 7 |
| resource-groups:UngroupResources | Write | 5 | 1 |
| resource-groups:Untag | Tagging | 6 | 3 |
| resource-groups:UpdateAccountSettings | Write | 5 | 1 |
| resource-groups:UpdateGroup | Write | 5 | 4 |
| resource-groups:UpdateGroupQuery | Write | 5 | 1 |