AWSIAMIdentityCenterAllowListForIdentityContext

Last Modified

Mar 12, 2026

March 12, 2026 at 09:26 PM UTC

Version

v12

Total Versions

10

Created

Oct 1, 2024

Actions

119

Risk

no risk signal

Read from this policy document alone: trust policies, boundaries and SCPs in your account still decide what actually succeeds. How this is assessed

IAM Access Analyzer (2)

  • Error / INVALID_ACTION

    The action qapps:ImportDocumentToQApp does not exist. AWS docs

  • Error / INVALID_ACTION

    The action qapps:ImportDocumentToQAppSession does not exist. AWS docs

Policy Document

View on GitHub
{
  "PolicyVersion": {
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Sid": "TrustedIdentityPropagation",
          "Effect": "Deny",
          "NotAction": [
            "aoss:APIAccessAll",
            "athena:BatchGetNamedQuery",
            "athena:BatchGetPreparedStatement",
            "athena:BatchGetQueryExecution",
            "athena:CreateNamedQuery",
            "athena:CreatePreparedStatement",
            "athena:DeleteNamedQuery",
            "athena:DeletePreparedStatement",
            "athena:GetNamedQuery",
            "athena:GetPreparedStatement",
            "athena:GetQueryExecution",
            "athena:GetQueryResults",
            "athena:GetQueryResultsStream",
            "athena:GetQueryRuntimeStatistics",
            "athena:GetWorkGroup",
            "athena:ListNamedQueries",
            "athena:ListPreparedStatements",
            "athena:ListQueryExecutions",
            "athena:StartQueryExecution",
            "athena:StopQueryExecution",
            "athena:UpdateNamedQuery",
            "athena:UpdatePreparedStatement",
            "athena:GetDatabase",
            "athena:GetDataCatalog",
            "athena:GetTableMetadata",
            "athena:ListDatabases",
            "athena:ListDataCatalogs",
            "athena:ListTableMetadata",
            "athena:ListWorkGroups",
            "elasticmapreduce:GetClusterSessionCredentials",
            "elasticmapreduce:AddJobFlowSteps",
            "elasticmapreduce:DescribeCluster",
            "elasticmapreduce:CancelSteps",
            "elasticmapreduce:DescribeStep",
            "elasticmapreduce:ListSteps",
            "es:ESHttpHead",
            "es:ESHttpPost",
            "es:ESHttpGet",
            "es:ESHttpPatch",
            "es:ESHttpDelete",
            "es:ESHttpPut",
            "glue:GetDatabase",
            "glue:GetDatabases",
            "glue:GetTable",
            "glue:GetTables",
            "glue:GetTableVersions",
            "glue:GetPartition",
            "glue:GetPartitions",
            "glue:BatchGetPartition",
            "glue:GetColumnStatisticsForPartition",
            "glue:GetColumnStatisticsForTable",
            "glue:SearchTables",
            "glue:CreateDatabase",
            "glue:UpdateDatabase",
            "glue:DeleteDatabase",
            "glue:CreateTable",
            "glue:DeleteTable",
            "glue:BatchDeleteTable",
            "glue:UpdateTable",
            "glue:BatchCreatePartition",
            "glue:CreatePartition",
            "glue:DeletePartition",
            "glue:BatchDeletePartition",
            "glue:UpdatePartition",
            "glue:BatchUpdatePartition",
            "glue:DeleteColumnStatisticsForPartition",
            "glue:DeleteColumnStatisticsForTable",
            "glue:UpdateColumnStatisticsForPartition",
            "glue:UpdateColumnStatisticsForTable",
            "lakeformation:GetDataAccess",
            "s3:GetAccessGrantsInstanceForPrefix",
            "s3:GetDataAccess",
            "s3:ListCallerAccessGrants",
            "q:StartConversation",
            "q:SendMessage",
            "q:ListConversations",
            "q:GetConversation",
            "q:StartTroubleshootingAnalysis",
            "q:GetTroubleshootingResults",
            "q:StartTroubleshootingResolutionExplanation",
            "q:UpdateTroubleshootingCommandResult",
            "qapps:CreateQApp",
            "qapps:PredictProblemStatementFromConversation",
            "qapps:PredictQAppFromProblemStatement",
            "qapps:CopyQApp",
            "qapps:GetQApp",
            "qapps:ListQApps",
            "qapps:UpdateQApp",
            "qapps:DeleteQApp",
            "qapps:AssociateQAppWithUser",
            "qapps:DisassociateQAppFromUser",
            "qapps:ImportDocumentToQApp",
            "qapps:ImportDocumentToQAppSession",
            "qapps:CreateLibraryItem",
            "qapps:GetLibraryItem",
            "qapps:UpdateLibraryItem",
            "qapps:CreateLibraryItemReview",
            "qapps:ListLibraryItems",
            "qapps:CreateSubscriptionToken",
            "qapps:StartQAppSession",
            "qapps:StopQAppSession",
            "qapps:PredictQApp",
            "qapps:ImportDocument",
            "qapps:AssociateLibraryItemReview",
            "qapps:DisassociateLibraryItemReview",
            "qapps:GetQAppSession",
            "qapps:UpdateQAppSession",
            "qapps:GetQAppSessionMetadata",
            "qapps:UpdateQAppSessionMetadata",
            "qapps:TagResource",
            "qapps:ListQAppSessionData",
            "qapps:ExportQAppSessionData",
            "qbusiness:Chat",
            "qbusiness:ChatSync",
            "qbusiness:ListConversations",
            "qbusiness:ListMessages",
            "qbusiness:DeleteConversation",
            "qbusiness:PutFeedback",
            "sts:SetContext"
          ],
          "Resource": "*"
        }
      ]
    },
    "VersionId": "v12",
    "IsDefaultVersion": true,
    "CreateDate": "2024-10-01T14:19:12+00:00"
  }
}

Version History (13 recorded)

Raw history

AWSIAMIdentityCenterAllowListForIdentityContext - Policy Version v12

No recorded action delta - this version predates the change index. View the raw diff.

Mar 12, 2026

78dbdf8

Update detected

No recorded action delta - this version predates the change index. View the raw diff.

Oct 1, 2024

45ddcec

Update detected

No recorded action delta - this version predates the change index. View the raw diff.

Sep 18, 2024

aafbae9

Update detected

No recorded action delta - this version predates the change index. View the raw diff.

Sep 4, 2024

67b125c

Update detected

No recorded action delta - this version predates the change index. View the raw diff.

Jul 12, 2024

1d1a9d2

Update detected

No recorded action delta - this version predates the change index. View the raw diff.

Jun 27, 2024

1ce120e

Update detected

No recorded action delta - this version predates the change index. View the raw diff.

May 17, 2024

a382e6b

Update detected

No recorded action delta - this version predates the change index. View the raw diff.

May 16, 2024

885d8b0

Update detected

No recorded action delta - this version predates the change index. View the raw diff.

May 13, 2024

1b36617

Update detected

No recorded action delta - this version predates the change index. View the raw diff.

Apr 19, 2024

c2fc4ec

Update detected

No recorded action delta - this version predates the change index. View the raw diff.

Apr 11, 2024

dcf431d

Update detected

No recorded action delta - this version predates the change index. View the raw diff.

Nov 25, 2023

3be8f3a

Update detected

No recorded action delta - this version predates the change index. View the raw diff.

Nov 8, 2023

ea6b557