SNS
Prefix sns, 41 actions · Domain Application Integration
25 AWS managed policies. 6 have reviewed guidance; the rest have authoritative permission data pending editorial review. 2 are service-linked role policies, shown with permission data only.
User access (8)
- AmazonDevOpsGuruConsoleFullAccessAdmin
- AmazonDevOpsGuruFullAccessAdmin
- AmazonRedshiftReadOnlyAccessReader
- AmazonSNSFullAccessAdmin
- AmazonSNSReadOnlyAccessReader
- AWSDirectoryServiceReadOnlyAccessReader
- CloudWatchFullAccessAdmin
- DatabaseAdministratorHigh privilegeAdmin
Operator and limited (4)
Service roles (11)
- AmazonEC2RoleforDataPipelineRoleHigh privilegeAdmin
- AmazonElasticMapReduceforEC2RoleHigh privilegeAdmin
- AmazonRekognitionServiceRoleOperator
- AmazonTextractServiceRoleOperator
- AutoScalingNotificationAccessRoleOperator
- AWSCodeDeployRoleForLambdaOperator
- AWSCodeStarServiceRoleAdmin
- AWSElasticBeanstalkRoleSNSOperator
- AWSIoTDeviceDefenderPublishFindingsToSNSMitigationActionOperator
- AWSIoTFleetHubFederationAccessOperator
- AWSIoTRuleActionsHigh privilegeOperator
Service-linked roles (2)
Also grants SNS actions (114)
- AccessAnalyzerServiceRolePolicy
- AdministratorAccess
- AdministratorAccess-Amplify
- AdministratorAccess-AWSElasticBeanstalk
- AIDevOpsAgentAccessPolicy
- AIDevOpsAgentActionsPolicy
- AIOpsAssistantPolicy
- AmazonAthenaFullAccess
- AmazonChimeFullAccess
- AmazonChimeVoiceConnectorServiceLinkedRolePolicy
- AmazonCodeGuruProfilerFullAccess
- AmazonCognitoPowerUser
- AmazonCognitoReadOnly
- AmazonDataZoneSageMakerEnvironmentRolePermissionsBoundary
- AmazonDocDBConsoleFullAccess
- AmazonDocDBFullAccess
- AmazonDynamoDBFullAccess
- AmazonDynamoDBFullAccess_v2
- AmazonDynamoDBFullAccesswithDataPipeline
- AmazonDynamoDBReadOnlyAccess
- AmazonECS_FullAccess
- AmazonElastiCacheFullAccess
- AmazonElasticTranscoder_FullAccess
- AmazonElasticTranscoder_JobsSubmitter
- AmazonElasticTranscoder_ReadOnlyAccess
- AmazonElasticTranscoderRole
- AmazonInspectorFullAccess
- AmazonInspectorReadOnlyAccess
- AmazonLaunchWizard_Fullaccess
- AmazonLaunchWizardFullAccessV2
- AmazonRDSFullAccess
- AmazonRedshiftFullAccess
- AmazonRoute53FullAccess
- AmazonSageMakerFullAccess
- AmazonSSMAutomationRole
- AmazonTimestreamConsoleFullAccess
- AssuranceServiceRolePolicy
- AutoScalingConsoleFullAccess
- AutoScalingConsoleReadOnlyAccess
- AutoScalingServiceRolePolicy
- AWS_ConfigRole
- AWSAgentlessDiscoveryService
- AWSAuditManagerAdministratorAccess
- AWSAuditManagerServiceRolePolicy
- AWSBudgetsActionsWithAWSResourceControlAccess
- AWSCloudTrail_FullAccess
- AWSCODAPermissionsBoundary
- AWSCodeBuildAdminAccess
- AWSCodeBuildDeveloperAccess
- AWSCodeCommitFullAccess
- AWSCodeCommitPowerUser
- AWSCodeCommitReadOnly
- AWSCodeDeployDeployerAccess
- AWSCodeDeployFullAccess
- AWSCodeDeployRole
- AWSCodeDeployRoleForECS
- AWSCodeDeployRoleForECSLimited
- AWSCodePipeline_FullAccess
- AWSCodeStarNotificationsServiceRolePolicy
- AWSConfigServiceRolePolicy
- AWSConnector
- AWSControlTowerAccountServiceRolePolicy
- AWSDataPipeline_FullAccess
- AWSDataPipeline_PowerUser
- AWSDirectoryServiceFullAccess
- AWSElasticBeanstalkEnhancedHealth
- AWSElasticBeanstalkManagedUpdatesCustomerRolePolicy
- AWSElasticBeanstalkManagedUpdatesServiceRolePolicy
- AWSElasticBeanstalkReadOnly
- AWSElasticBeanstalkRoleCore
- AWSElasticBeanstalkService
- AWSElasticBeanstalkServiceRolePolicy
- AWSImageBuilderFullAccess
- AWSLambdaFullAccess
- AWSLicenseManagerServiceRolePolicy
- AWSMarketplaceFullAccess
- AWSMarketplaceImageBuildFullAccess
- AWSMarketplaceRead-only
- AWSMcpServiceActionsFullAccess
- AWSMobileHub_FullAccess
- AWSMobileHub_ReadOnly
- AWSPartnerLedSupportReadOnlyAccess
- AWSResilienceHubAsssessmentExecutionPolicy
- AWSResilienceHubV2AssessmentExecutionPolicy
- AWSResourceExplorerServiceRolePolicy
- AWSSecurityHubServiceRolePolicy
- AWSServiceRoleForImageBuilder
- AWSSupportServiceRolePolicy
- AWSWellArchitectedAgentResourceScanningServiceRolePolicy
- CloudWatchApplicationInsightsFullAccess
- CloudwatchApplicationInsightsServiceLinkedRolePolicy
- CloudWatchApplicationSignalsFullAccess
- CloudWatchAutomaticDashboardsAccess
- CloudWatchFullAccessV2
- CloudWatchOmniAWSIntegrationPolicy
- CloudWatchOmniSpaceAccessPolicy
- CloudWatchReadOnlyAccess
- CloudWatchSyntheticsFullAccess
- DataScientist
- EC2ImageBuilderExecutionPolicy
- GameLiftGameServerGroupPolicy
- NeptuneConsoleFullAccess
- NeptuneFullAccess
- NetworkAdministrator
- PowerUserAccess
- ReadOnlyAccess
- ResourceGroupsTaggingAPITagUntagSupportedResources
- Route53RecoveryReadinessServiceRolePolicy
- SecurityAudit
- ServerMigrationConnector
- SupportUser
- SystemAdministrator
- ViewOnlyAccess
- WellArchitectedAgentResourceScanning
addpermission checkifphonenumberisoptedout confirmsubscription createplatformapplication createplatformendpoint createsmssandboxphonenumber createtopic deleteendpoint deleteplatformapplication deletesmssandboxphonenumber deletetopic getdataprotectionpolicy getendpointattributes getplatformapplicationattributes getsmsattributes getsmssandboxaccountstatus getsubscriptionattributes gettopicattributes listendpointsbyplatformapplication listoriginationnumbers listphonenumbersoptedout listplatformapplications listsmssandboxphonenumbers listsubscriptions listsubscriptionsbytopic listtagsforresource listtopics optinphonenumber publish putdataprotectionpolicy removepermission setendpointattributes setplatformapplicationattributes setsmsattributes setsubscriptionattributes settopicattributes subscribe tagresource unsubscribe untagresource verifysmssandboxphonenumber
Actions (41)
| Action | Access level | Policies granting without limits | Policies granting with resource or condition limits |
|---|---|---|---|
| sns:AddPermission | Permissions management | 10 | 3 |
| sns:CheckIfPhoneNumberIsOptedOut | Read | 14 | 1 |
| sns:ConfirmSubscription | Write | 10 | 1 |
| sns:CreatePlatformApplication | Write | 10 | 1 |
| sns:CreatePlatformEndpoint | Write | 10 | 1 |
| sns:CreateSMSSandboxPhoneNumber | Write | 11 | 1 |
| sns:CreateTopic | Write | 19 | 25 |
| sns:DeleteEndpoint | Write | 10 | 1 |
| sns:DeletePlatformApplication | Write | 10 | 1 |
| sns:DeleteSMSSandboxPhoneNumber | Write | 11 | 1 |
| sns:DeleteTopic | Write | 13 | 8 |
| sns:GetDataProtectionPolicy | Read | 29 | 3 |
| sns:GetEndpointAttributes | Read | 22 | 1 |
| sns:GetPlatformApplicationAttributes | Read | 22 | 1 |
| sns:GetSMSAttributes | Read | 22 | 1 |
| sns:GetSMSSandboxAccountStatus | Read | 26 | 1 |
| sns:GetSubscriptionAttributes | Read | 33 | 2 |
| sns:GetTopicAttributes | Read | 46 | 11 |
| sns:ListEndpointsByPlatformApplication | List | 27 | 1 |
| sns:ListOriginationNumbers | List | 28 | 1 |
| sns:ListPhoneNumbersOptedOut | Read | 27 | 1 |
| sns:ListPlatformApplications | List | 29 | 1 |
| sns:ListSMSSandboxPhoneNumbers | List | 28 | 1 |
| sns:ListSubscriptions | List | 47 | 2 |
| sns:ListSubscriptionsByTopic | List | 52 | 9 |
| sns:ListTagsForResource | Read | 30 | 3 |
| sns:ListTopics | List | 98 | 3 |
| sns:OptInPhoneNumber | Write | 10 | 1 |
| sns:Publish | Write | 29 | 24 |
| sns:PutDataProtectionPolicy | Write | 10 | 1 |
| sns:RemovePermission | Permissions management | 10 | 2 |
| sns:SetEndpointAttributes | Write | 10 | 1 |
| sns:SetPlatformApplicationAttributes | Write | 10 | 1 |
| sns:SetSMSAttributes | Write | 10 | 1 |
| sns:SetSubscriptionAttributes | Write | 10 | 1 |
| sns:SetTopicAttributes | Permissions management | 14 | 13 |
| sns:Subscribe | Write | 19 | 15 |
| sns:TagResource | Tagging | 11 | 1 |
| sns:Unsubscribe | Write | 17 | 8 |
| sns:UntagResource | Tagging | 11 | 1 |
| sns:VerifySMSSandboxPhoneNumber | Write | 11 | 1 |