Step Functions
Prefix states, 39 actions · Domain Application Integration
4 AWS managed policies. 0 have reviewed guidance; the rest have authoritative permission data pending editorial review.
User access (3)
Service roles (1)
- AmazonSSMMaintenanceWindowRoleOperator
Also grants Step Functions actions (30)
- AdministratorAccess
- AIDevOpsAgentAccessPolicy
- AIDevOpsAgentActionsPolicy
- AIOpsAssistantPolicy
- AmazonDataZoneSageMakerEnvironmentRolePermissionsBoundary
- AmazonSageMakerAdmin-ServiceCatalogProductsServiceRolePolicy
- AmazonSageMakerFullAccess
- AmazonSSMServiceRolePolicy
- AssuranceServiceRolePolicy
- AWS_ConfigRole
- AWSCODAPermissionsBoundary
- AWSCodePipeline_FullAccess
- AWSConfigServiceRolePolicy
- AWSLambda_FullAccess
- AWSLambda_ReadOnlyAccess
- AWSMcpServiceActionsFullAccess
- AWSResilienceHubAsssessmentExecutionPolicy
- AWSResilienceHubV2AssessmentExecutionPolicy
- AWSResourceExplorerServiceRolePolicy
- AWSSupportServiceRolePolicy
- AWSWellArchitectedAgentResourceScanningServiceRolePolicy
- CloudWatchApplicationInsightsFullAccess
- CloudwatchApplicationInsightsServiceLinkedRolePolicy
- CloudWatchOmniAWSIntegrationPolicy
- PowerUserAccess
- ReadOnlyAccess
- ResourceGroupsTaggingAPITagUntagSupportedResources
- SecurityAudit
- ViewOnlyAccess
- WellArchitectedAgentResourceScanning
createactivity createstatemachine createstatemachinealias deleteactivity deletestatemachine deletestatemachinealias deletestatemachineversion describeactivity describeexecution describemaprun describestatemachine describestatemachinealias describestatemachineforexecution getactivitytask getexecutionhistory invokehttpendpoint listactivities listexecutions listmapruns liststatemachinealiases liststatemachineversions liststatemachines listtagsforresource publishstatemachineversion redriveexecution revealsecrets sendtaskfailure sendtaskheartbeat sendtasksuccess startexecution startsyncexecution stopexecution tagresource teststate untagresource updatemaprun updatestatemachine updatestatemachinealias validatestatemachinedefinition
Actions (39)
| Action | Access level | Policies granting without limits | Policies granting with resource or condition limits |
|---|---|---|---|
| states:CreateActivity | Write | 6 | 1 |
| states:CreateStateMachine | Write | 6 | 2 |
| states:CreateStateMachineAlias | Write | 6 | 1 |
| states:DeleteActivity | Write | 6 | 1 |
| states:DeleteStateMachine | Write | 6 | 2 |
| states:DeleteStateMachineAlias | Write | 6 | 1 |
| states:DeleteStateMachineVersion | Write | 6 | 1 |
| states:DescribeActivity | Read | 17 | 3 |
| states:DescribeExecution | Read | 15 | 5 |
| states:DescribeMapRun | Read | 14 | 1 |
| states:DescribeStateMachine | Read | 22 | 3 |
| states:DescribeStateMachineAlias | Read | 17 | 2 |
| states:DescribeStateMachineForExecution | Read | 14 | 1 |
| states:GetActivityTask | Write | 6 | 1 |
| states:GetExecutionHistory | Read | 12 | 3 |
| states:InvokeHTTPEndpoint | Write | 6 | 1 |
| states:ListActivities | List | 18 | 3 |
| states:ListExecutions | List | 16 | 1 |
| states:ListMapRuns | List | 15 | 1 |
| states:ListStateMachineAliases | List | 19 | 2 |
| states:ListStateMachineVersions | List | 19 | 2 |
| states:ListStateMachines | List | 24 | 3 |
| states:ListTagsForResource | List | 17 | 3 |
| states:PublishStateMachineVersion | Write | 6 | 1 |
| states:RedriveExecution | Write | 6 | 1 |
| states:RevealSecrets | Read | 6 | 1 |
| states:SendTaskFailure | Write | 6 | 1 |
| states:SendTaskHeartbeat | Write | 6 | 1 |
| states:SendTaskSuccess | Write | 6 | 1 |
| states:StartExecution | Write | 6 | 5 |
| states:StartSyncExecution | Write | 6 | 1 |
| states:StopExecution | Write | 6 | 3 |
| states:TagResource | Tagging | 7 | 1 |
| states:TestState | Write | 6 | 1 |
| states:UntagResource | Tagging | 7 | 1 |
| states:UpdateMapRun | Write | 6 | 1 |
| states:UpdateStateMachine | Write | 6 | 4 |
| states:UpdateStateMachineAlias | Write | 6 | 1 |
| states:ValidateStateMachineDefinition | Read | 8 | 1 |