Trusted Advisor
Prefix trustedadvisor, 42 actions · Domain Management & Governance
4 AWS managed policies. 0 have reviewed guidance; the rest have authoritative permission data pending editorial review. 1 are service-linked role policies, shown with permission data only.
User access (2)
Operator and limited (1)
Service-linked roles (1)
Also grants Trusted Advisor actions (13)
- AdministratorAccess
- AIDevOpsAgentActionsPolicy
- AWSCODAPermissionsBoundary
- AWSMcpServiceActionsFullAccess
- AWSSupportServiceRolePolicy
- AWSWellArchitectedAgentResourceScanningServiceRolePolicy
- PowerUserAccess
- ReadOnlyAccess
- SecurityAudit
- SystemAdministrator
- ViewOnlyAccess
- WellArchitectedAgentResourceScanning
- WellArchitectedConsoleFullAccess
batchupdaterecommendationresourceexclusion deletenotificationconfigurationfordelegatedadmin describeaccount describeaccountaccess describecheckitems describecheckrefreshstatuses describecheckstatushistorychanges describechecksummaries describechecks describenotificationconfigurations describenotificationpreferences describeorganization describeorganizationaccounts describereports describerisk describeriskresources describerisks describeservicemetadata downloadrisk excludecheckitems generatereport getorganizationrecommendation getrecommendation includecheckitems listaccountsforparent listchecks listorganizationrecommendationaccounts listorganizationrecommendationresources listorganizationrecommendations listorganizationalunitsforparent listrecommendationresources listrecommendations listrecommendationsforresource listroots refreshcheck setaccountaccess setorganizationaccess updatenotificationconfigurations updatenotificationpreferences updateorganizationrecommendationlifecycle updaterecommendationlifecycle updateriskstatus
Actions (42)
| Action | Access level | Policies granting without limits | Policies granting with resource or condition limits |
|---|---|---|---|
| trustedadvisor:BatchUpdateRecommendationResourceExclusion | Write | 5 | 1 |
| trustedadvisor:DeleteNotificationConfigurationForDelegatedAdmin | Write | 6 | 1 |
| trustedadvisor:DescribeAccount | Read | 10 | 1 |
| trustedadvisor:DescribeAccountAccess | Read | 10 | 1 |
| trustedadvisor:DescribeCheckItems | Read | 9 | 1 |
| trustedadvisor:DescribeCheckRefreshStatuses | Read | 8 | 1 |
| trustedadvisor:DescribeCheckStatusHistoryChanges | Read | 8 | 1 |
| trustedadvisor:DescribeCheckSummaries | Read | 8 | 1 |
| trustedadvisor:DescribeChecks | Read | 9 | 1 |
| trustedadvisor:DescribeNotificationConfigurations | Read | 10 | 1 |
| trustedadvisor:DescribeNotificationPreferences | Read | 8 | 1 |
| trustedadvisor:DescribeOrganization | Read | 10 | 1 |
| trustedadvisor:DescribeOrganizationAccounts | Read | 8 | 1 |
| trustedadvisor:DescribeReports | Read | 8 | 1 |
| trustedadvisor:DescribeRisk | Read | 10 | 1 |
| trustedadvisor:DescribeRiskResources | Read | 10 | 1 |
| trustedadvisor:DescribeRisks | Read | 10 | 1 |
| trustedadvisor:DescribeServiceMetadata | Read | 8 | 1 |
| trustedadvisor:DownloadRisk | Read | 7 | 1 |
| trustedadvisor:ExcludeCheckItems | Write | 5 | 1 |
| trustedadvisor:GenerateReport | Write | 5 | 1 |
| trustedadvisor:GetOrganizationRecommendation | Read | 9 | 1 |
| trustedadvisor:GetRecommendation | Read | 10 | 2 |
| trustedadvisor:IncludeCheckItems | Write | 5 | 1 |
| trustedadvisor:ListAccountsForParent | Read | 7 | 1 |
| trustedadvisor:ListChecks | List | 10 | 2 |
| trustedadvisor:ListOrganizationRecommendationAccounts | List | 9 | 1 |
| trustedadvisor:ListOrganizationRecommendationResources | List | 9 | 1 |
| trustedadvisor:ListOrganizationRecommendations | List | 9 | 1 |
| trustedadvisor:ListOrganizationalUnitsForParent | Read | 7 | 1 |
| trustedadvisor:ListRecommendationResources | List | 10 | 2 |
| trustedadvisor:ListRecommendations | List | 10 | 2 |
| trustedadvisor:ListRecommendationsForResource | List | 9 | 2 |
| trustedadvisor:ListRoots | Read | 7 | 1 |
| trustedadvisor:RefreshCheck | Write | 5 | 1 |
| trustedadvisor:SetAccountAccess | Write | 5 | 1 |
| trustedadvisor:SetOrganizationAccess | Write | 6 | 1 |
| trustedadvisor:UpdateNotificationConfigurations | Write | 6 | 1 |
| trustedadvisor:UpdateNotificationPreferences | Write | 5 | 1 |
| trustedadvisor:UpdateOrganizationRecommendationLifecycle | Write | 5 | 1 |
| trustedadvisor:UpdateRecommendationLifecycle | Write | 5 | 1 |
| trustedadvisor:UpdateRiskStatus | Write | 6 | 1 |