AWSResourceExplorerServiceRolePolicy
Last Modified
Oct 30, 2026
October 30, 2026 at 09:03 PM UTC
Version
v59
Total Versions
39
Created
Oct 30, 2026
Actions
3358
Risk
MediumThe same capabilities in a scoped form, resource policy writes, reads across all data, or full access to a whole service. Read from this policy document alone: trust policies, boundaries and SCPs in your account still decide what actually succeeds. How this is assessed
- Medium
Can read secrets
Reads Lambda environment variables, where credentials often live, on any resource with no condition.
lambda:GetFunctionConfigurationUse with caution: Where the holder needs only some secrets, write your own policy scoped to their ARNs or tags, and limit decryption in the KMS key policies.
Policy Document
View on GitHub{
"PolicyVersion": {
"Document": {
"Version": "2012-10-17",
"Statement": [
{
"Sid": "ResourceExplorerAndOrganizationsAccess",
"Effect": "Allow",
"Action": [
"resource-explorer-2:UpdateIndexType",
"resource-explorer-2:CreateIndex",
"resource-explorer-2:CreateView",
"resource-explorer-2:AssociateDefaultView",
"resource-explorer-2:DeleteIndex",
"organizations:DescribeAccount",
"organizations:DescribeOrganization",
"organizations:ListAWSServiceAccessForOrganization",
"organizations:ListAccounts",
"organizations:ListDelegatedAdministrators",
"organizations:ListOrganizationalUnitsForParent",
"organizations:ListRoots",
"autoscaling:DescribeNotificationConfigurations",
"neptune-graph:GetExportTask",
"neptune-graph:ListExportTasks",
"neptune-graph:ListGraphs",
"quicksight:DescribeAgent",
"quicksight:DescribeAgentPermissions",
"quicksight:DescribeBrand",
"quicksight:DescribeIngestion",
"quicksight:DescribeNamespace",
"quicksight:ListIngestions",
"quicksight:ListNamespaces"
],
"Resource": "*"
},
{
"Sid": "CloudTrailEventsAccess",
"Effect": "Allow",
"Action": [
"cloudtrail:CreateServiceLinkedChannel",
"cloudtrail:GetServiceLinkedChannel"
],
"Resource": "arn:aws:cloudtrail:*:*:channel/aws-service-channel/resource-explorer-2/*"
},
{
"Sid": "ApiGatewayAccess",
"Effect": "Allow",
"Action": "apigateway:GET",
"Resource": [
"arn:aws:apigateway:*::/restapis",
"arn:aws:apigateway:*::/restapis/*",
"arn:aws:apigateway:*::/restapis/*/deployments",
"arn:aws:apigateway:*::/restapis/*/deployments/*",
"arn:aws:apigateway:*::/restapis/*/resources",
"arn:aws:apigateway:*::/restapis/*/resources/*",
"arn:aws:apigateway:*::/restapis/*/resources/*/methods/*",
"arn:aws:apigateway:*::/restapis/*/stages",
"arn:aws:apigateway:*::/restapis/*/stages/*",
"arn:aws:apigateway:*::/vpclinks",
"arn:aws:apigateway:*::/apis",
"arn:aws:apigateway:*::/apis/*/routes",
"arn:aws:apigateway:*::/apis/*/stages",
"arn:aws:apigateway:*::/apis/*",
"arn:aws:apigateway:*::/apis/*/routes/*",
"arn:aws:apigateway:*::/apis/*/stages/*",
"arn:aws:apigateway:*::/apis/*/integrations",
"arn:aws:apigateway:*::/apis/*/integrations/*"
]
},
{
"Sid": "ResourceInventoryAccess",
"Effect": "Allow",
"Action": [
"access-analyzer:CheckNoPublicAccess",
"access-analyzer:GetAnalyzer",
"access-analyzer:ListAnalyzers",
"access-analyzer:ListArchiveRules",
"access-analyzer:ValidatePolicy",
"acm-pca:DescribeCertificateAuthority",
"acm-pca:GetCertificateAuthorityCertificate",
"acm-pca:GetCertificateAuthorityCsr",
"acm-pca:ListCertificateAuthorities",
"acm-pca:ListPermissions",
"acm-pca:ListTags",
"acm:DescribeCertificate",
"acm:GetAccountConfiguration",
"acm:ListCertificates",
"acm:ListTagsForCertificate",
"aidevops:DescribePrivateConnection",
"aidevops:GetAgentSpace",
"aidevops:GetOperatorApp",
"aidevops:GetService",
"aidevops:GetTrigger",
"aidevops:ListAgentSpaces",
"aidevops:ListPrivateConnections",
"aidevops:ListServices",
"aidevops:ListTagsForResource",
"aidevops:ListTriggers",
"aiops:GetInvestigationGroup",
"aiops:ListInvestigationGroups",
"aiops:ListTagsForResource",
"airflow-serverless:GetWorkflow",
"airflow-serverless:ListWorkflows",
"airflow:ListEnvironments",
"amplify:GetDomainAssociation",
"amplify:GetJob",
"amplify:GetWebhook",
"amplify:ListApps",
"amplify:ListBranches",
"amplify:ListDomainAssociations",
"amplify:ListJobs",
"amplify:ListTagsForResource",
"amplify:ListWebhooks",
"amplifyuibuilder:GetCodegenJob",
"amplifyuibuilder:GetComponent",
"amplifyuibuilder:GetForm",
"amplifyuibuilder:ListCodegenJobs",
"amplifyuibuilder:ListComponents",
"amplifyuibuilder:ListForms",
"aoss:BatchGetCollection",
"aoss:BatchGetCollectionGroup",
"aoss:BatchGetLifecyclePolicy",
"aoss:BatchGetVpcEndpoint",
"aoss:GetAccessPolicy",
"aoss:GetSecurityConfig",
"aoss:GetSecurityPolicy",
"aoss:ListAccessPolicies",
"aoss:ListCollectionGroups",
"aoss:ListCollections",
"aoss:ListLifecyclePolicies",
"aoss:ListSecurityConfigs",
"aoss:ListSecurityPolicies",
"aoss:ListTagsForResource",
"aoss:ListVpcEndpoints",
"app-integrations:GetApplication",
"app-integrations:GetDataIntegration",
"app-integrations:GetEventIntegration",
"app-integrations:ListApplications",
"app-integrations:ListDataIntegrations",
"app-integrations:ListEventIntegrations",
"app-integrations:ListTagsForResource",
"appconfig:GetExperimentRun",
"appconfig:GetExtension",
"appconfig:GetHostedConfigurationVersion",
"appconfig:ListApplications",
"appconfig:ListDeploymentStrategies",
"appconfig:ListEnvironments",
"appconfig:ListExperimentRuns",
"appconfig:ListExtensionAssociations",
"appconfig:ListExtensions",
"appfabric:GetAppAuthorization",
"appfabric:GetAppBundle",
"appfabric:GetIngestion",
"appfabric:ListAppAuthorizations",
"appfabric:ListAppBundles",
"appfabric:ListIngestions",
"appfabric:ListTagsForResource",
"appflow:DescribeConnector",
"appflow:DescribeFlow",
"appflow:ListConnectors",
"appflow:ListFlows",
"appflow:ListTagsForResource",
"application-autoscaling:DescribeScalableTargets",
"application-autoscaling:DescribeScheduledActions",
"application-signals:GetServiceLevelObjective",
"application-signals:ListServiceLevelObjectiveExclusionWindows",
"application-signals:ListServiceLevelObjectives",
"application-signals:ListServices",
"application-signals:ListTagsForResource",
"applicationinsights:DescribeApplication",
"applicationinsights:DescribeComponent",
"applicationinsights:DescribeLogPattern",
"applicationinsights:ListApplications",
"applicationinsights:ListComponents",
"applicationinsights:ListLogPatternSets",
"applicationinsights:ListLogPatterns",
"applicationinsights:ListTagsForResource",
"appmesh:ListGatewayRoutes",
"appmesh:ListMeshes",
"appmesh:ListRoutes",
"appmesh:ListVirtualGateways",
"appmesh:ListVirtualNodes",
"appmesh:ListVirtualRouters",
"appmesh:ListVirtualServices",
"apprunner:DescribeAutoScalingConfiguration",
"apprunner:DescribeObservabilityConfiguration",
"apprunner:DescribeService",
"apprunner:DescribeVpcConnector",
"apprunner:DescribeVpcIngressConnection",
"apprunner:ListAutoScalingConfigurations",
"apprunner:ListConnections",
"apprunner:ListObservabilityConfigurations",
"apprunner:ListServices",
"apprunner:ListVpcConnectors",
"apprunner:ListVpcIngressConnections",
"appstream:DescribeAppBlockBuilders",
"appstream:DescribeAppBlocks",
"appstream:DescribeApplications",
"appstream:DescribeFleets",
"appstream:DescribeImageBuilders",
"appstream:DescribeImages",
"appstream:DescribeStacks",
"appstream:ListAssociatedFleets",
"appstream:ListAssociatedStacks",
"appstream:ListTagsForResource",
"appsync:GetApi",
"appsync:GetApiAssociation",
"appsync:GetApiCache",
"appsync:GetChannelNamespace",
"appsync:GetDataSource",
"appsync:GetDomainName",
"appsync:GetGraphqlApi",
"appsync:GetGraphqlApiEnvironmentVariables",
"appsync:GetResolver",
"appsync:GetSourceApiAssociation",
"appsync:GetType",
"appsync:ListApis",
"appsync:ListChannelNamespaces",
"appsync:ListDataSources",
"appsync:ListDomainNames",
"appsync:ListGraphqlApis",
"appsync:ListResolvers",
"appsync:ListSourceApiAssociations",
"appsync:ListTagsForResource",
"appsync:ListTypes",
"apptest:GetTestCase",
"apptest:ListTagsForResource",
"apptest:ListTestCases",
"aps:DescribeAnomalyDetector",
"aps:DescribeQueryLoggingConfiguration",
"aps:DescribeResourcePolicy",
"aps:DescribeRuleGroupsNamespace",
"aps:DescribeScraper",
"aps:DescribeScraperLoggingConfiguration",
"aps:DescribeWorkspaceConfiguration",
"aps:ListAnomalyDetectors",
"aps:ListRuleGroupsNamespaces",
"aps:ListScrapers",
"aps:ListTagsForResource",
"aps:ListWorkspaces",
"arc-region-switch:GetPlan",
"arc-region-switch:ListPlans",
"arc-region-switch:ListRoute53HealthChecks",
"arc-region-switch:ListTagsForResource",
"arc-zonal-shift:GetAutoshiftObserverNotificationStatus",
"arc-zonal-shift:GetManagedResource",
"arc-zonal-shift:ListManagedResources",
"athena:GetCapacityAssignmentConfiguration",
"athena:GetCapacityReservation",
"athena:GetNamedQuery",
"athena:GetSession",
"athena:ListCapacityReservations",
"athena:ListDataCatalogs",
"athena:ListNamedQueries",
"athena:ListSessions",
"athena:ListWorkGroups",
"auditmanager:GetAccountStatus",
"auditmanager:GetAssessment",
"auditmanager:GetAssessmentFramework",
"auditmanager:GetControl",
"auditmanager:ListAssessmentFrameworks",
"auditmanager:ListAssessments",
"auditmanager:ListControls",
"auditmanager:ListTagsForResource",
"autoscaling:DescribeAutoScalingGroups",
"autoscaling:DescribePolicies",
"autoscaling:DescribeScheduledActions",
"b2bi:GetCapability",
"b2bi:GetPartnership",
"b2bi:GetProfile",
"b2bi:ListCapabilities",
"b2bi:ListPartnerships",
"b2bi:ListProfiles",
"b2bi:ListTagsForResource",
"backup-gateway:GetGateway",
"backup-gateway:GetHypervisor",
"backup-gateway:GetVirtualMachine",
"backup-gateway:ListGateways",
"backup-gateway:ListHypervisors",
"backup-gateway:ListTagsForResource",
"backup-search:GetSearchJob",
"backup-search:ListSearchJobs",
"backup:GetLegalHold",
"backup:GetRestoreTestingPlan",
"backup:GetRestoreTestingSelection",
"backup:ListBackupPlans",
"backup:ListBackupVaults",
"backup:ListLegalHolds",
"backup:ListRecoveryPointsByBackupVault",
"backup:ListReportPlans",
"backup:ListRestoreTestingPlans",
"backup:ListRestoreTestingSelections",
"batch:DescribeComputeEnvironments",
"batch:DescribeConsumableResource",
"batch:DescribeJobDefinitions",
"batch:DescribeJobQueues",
"batch:DescribeJobs",
"batch:DescribeQuotaShare",
"batch:DescribeServiceEnvironments",
"batch:DescribeServiceJob",
"batch:ListConsumableResources",
"batch:ListJobs",
"batch:ListQuotaShares",
"batch:ListSchedulingPolicies",
"batch:ListServiceJobs",
"bcm-dashboards:GetDashboard",
"bcm-dashboards:ListDashboards",
"bcm-dashboards:ListTagsForResource",
"bcm-data-exports:GetExport",
"bcm-data-exports:ListExports",
"bcm-data-exports:ListTagsForResource",
"bedrock-agentcore:GetAgentRuntimeEndpoint",
"bedrock-agentcore:GetApiKeyCredentialProvider",
"bedrock-agentcore:GetBrowser",
"bedrock-agentcore:GetCapacityProvider",
"bedrock-agentcore:GetCodeInterpreter",
"bedrock-agentcore:GetConfigurationBundle",
"bedrock-agentcore:GetDataset",
"bedrock-agentcore:GetEvaluator",
"bedrock-agentcore:GetGateway",
"bedrock-agentcore:GetGatewayTarget",
"bedrock-agentcore:GetHarness",
"bedrock-agentcore:GetHarnessEndpoint",
"bedrock-agentcore:GetMemory",
"bedrock-agentcore:GetOauth2CredentialProvider",
"bedrock-agentcore:GetOnlineEvaluationConfig",
"bedrock-agentcore:GetPaymentConnector",
"bedrock-agentcore:GetPaymentManager",
"bedrock-agentcore:GetPolicy",
"bedrock-agentcore:GetPolicyEngine",
"bedrock-agentcore:GetPolicyEngineSummary",
"bedrock-agentcore:GetPolicyGeneration",
"bedrock-agentcore:GetPolicySummary",
"bedrock-agentcore:GetResourcePolicy",
"bedrock-agentcore:GetTokenVault",
"bedrock-agentcore:GetWorkloadIdentity",
"bedrock-agentcore:ListAgentRuntimeEndpoints",
"bedrock-agentcore:ListAgentRuntimes",
"bedrock-agentcore:ListApiKeyCredentialProviders",
"bedrock-agentcore:ListBrowsers",
"bedrock-agentcore:ListCapacityProviders",
"bedrock-agentcore:ListCodeInterpreters",
"bedrock-agentcore:ListConfigurationBundles",
"bedrock-agentcore:ListDatasets",
"bedrock-agentcore:ListEvaluators",
"bedrock-agentcore:ListGatewayTargets",
"bedrock-agentcore:ListGateways",
"bedrock-agentcore:ListHarnessEndpoints",
"bedrock-agentcore:ListHarnesses",
"bedrock-agentcore:ListMemories",
"bedrock-agentcore:ListOauth2CredentialProviders",
"bedrock-agentcore:ListOnlineEvaluationConfigs",
"bedrock-agentcore:ListPaymentConnectors",
"bedrock-agentcore:ListPaymentManagers",
"bedrock-agentcore:ListPolicies",
"bedrock-agentcore:ListPolicyEngineSummaries",
"bedrock-agentcore:ListPolicyEngines",
"bedrock-agentcore:ListPolicyGenerations",
"bedrock-agentcore:ListPolicySummaries",
"bedrock-agentcore:ListWorkloadIdentities",
"bedrock:GetAgentAlias",
"bedrock:GetAsyncInvoke",
"bedrock:GetAutomatedReasoningPolicy",
"bedrock:GetBlueprint",
"bedrock:GetDataAutomationProject",
"bedrock:GetDataAutomationStatus",
"bedrock:GetDataSource",
"bedrock:GetEvaluationJob",
"bedrock:GetFlow",
"bedrock:GetFlowAlias",
"bedrock:GetFlowVersion",
"bedrock:GetFoundationModel",
"bedrock:GetImportedModel",
"bedrock:GetInferenceProfile",
"bedrock:GetModelImportJob",
"bedrock:GetModelInvocationJob",
"bedrock:GetModelInvocationLoggingConfiguration",
"bedrock:ListAgentAliases",
"bedrock:ListAgents",
"bedrock:ListAutomatedReasoningPolicies",
"bedrock:ListBlueprints",
"bedrock:ListCustomModels",
"bedrock:ListDataAutomationProjects",
"bedrock:ListDataSources",
"bedrock:ListEnforcedGuardrailsConfiguration",
"bedrock:ListEvaluationJobs",
"bedrock:ListFlowAliases",
"bedrock:ListFlowVersions",
"bedrock:ListFlows",
"bedrock:ListFoundationModels",
"bedrock:ListGuardrails",
"bedrock:ListInferenceProfiles",
"bedrock:ListKnowledgeBases",
"bedrock:ListPromptRouters",
"bedrock:ListPrompts",
"bedrock:ListTagsForResource",
"billing:GetBillingView",
"billing:ListBillingViews",
"billing:ListSourceViewsForBillingView",
"billing:ListTagsForResource",
"billingconductor:ListCustomLineItemVersions",
"billingconductor:ListResourcesAssociatedToCustomLineItem",
"braket:GetJob",
"braket:GetQuantumTask",
"braket:SearchJobs",
"braket:SearchQuantumTasks",
"budgets:DescribeBudgetActionsForAccount",
"budgets:ViewBudget",
"cases:GetCase",
"cases:ListTagsForResource",
"cases:SearchCases",
"cases:SearchRelatedItems",
"cassandra:GetStream",
"cassandra:ListStreams",
"cassandra:SelectMultiRegionResource",
"ce:DescribeCostCategoryDefinition",
"ce:GetAnomalyMonitors",
"ce:GetAnomalySubscriptions",
"ce:ListCostCategoryDefinitions",
"ce:ListTagsForResource",
"chatbot:DescribeSlackChannelConfigurations",
"chatbot:GetCustomAction",
"chatbot:GetMicrosoftTeamsChannelConfiguration",
"chatbot:ListAssociations",
"chatbot:ListCustomActions",
"chatbot:ListMicrosoftTeamsChannelConfigurations",
"chatbot:ListTagsForResource",
"chime:DescribeAppInstance",
"chime:ListAppInstanceBots",
"chime:ListAppInstanceUsers",
"chime:ListAppInstances",
"chime:ListMediaInsightsPipelineConfigurations",
"chime:ListMediaPipelineKinesisVideoStreamPools",
"chime:ListMediaPipelines",
"chime:ListSipMediaApplications",
"chime:ListTagsForResource",
"chime:ListVoiceConnectors",
"cleanrooms-ml:GetAudienceModel",
"cleanrooms-ml:GetConfiguredModelAlgorithm",
"cleanrooms-ml:GetMLInputChannel",
"cleanrooms-ml:GetTrainedModel",
"cleanrooms-ml:GetTrainingDataset",
"cleanrooms-ml:ListAudienceModels",
"cleanrooms-ml:ListTrainedModels",
"cleanrooms-ml:ListTrainingDatasets",
"cleanrooms:GetCollaboration",
"cleanrooms:GetConfiguredTable",
"cleanrooms:GetConfiguredTableAnalysisRule",
"cleanrooms:GetConfiguredTableAssociation",
"cleanrooms:GetConfiguredTableAssociationAnalysisRule",
"cleanrooms:GetIdMappingTable",
"cleanrooms:GetIdNamespaceAssociation",
"cleanrooms:GetIntermediateTable",
"cleanrooms:GetMembership",
"cleanrooms:GetPrivacyBudgetTemplate",
"cleanrooms:ListAnalysisTemplates",
"cleanrooms:ListCollaborations",
"cleanrooms:ListConfiguredTableAssociations",
"cleanrooms:ListConfiguredTables",
"cleanrooms:ListIdMappingTables",
"cleanrooms:ListIdNamespaceAssociations",
"cleanrooms:ListMembers",
"cleanrooms:ListMemberships",
"cleanrooms:ListPrivacyBudgetTemplates",
"cleanrooms:ListTagsForResource",
"cloud9:ListEnvironments",
"cloudformation:BatchDescribeTypeConfigurations",
"cloudformation:DescribePublisher",
"cloudformation:DescribeStackInstance",
"cloudformation:DescribeStackSet",
"cloudformation:DescribeStacks",
"cloudformation:DescribeType",
"cloudformation:GetStackPolicy",
"cloudformation:GetTemplate",
"cloudformation:ListResources",
"cloudformation:ListStackInstances",
"cloudformation:ListStackSets",
"cloudformation:ListStacks",
"cloudformation:ListTypes",
"cloudfront:DescribeConnectionFunction",
"cloudfront:DescribeFunction",
"cloudfront:DescribeKeyValueStore",
"cloudfront:GetAnycastIpList",
"cloudfront:GetCachePolicy",
"cloudfront:GetCloudFrontOriginAccessIdentity",
"cloudfront:GetConnectionFunction",
"cloudfront:GetConnectionGroup",
"cloudfront:GetContinuousDeploymentPolicy",
"cloudfront:GetDistributionTenant",
"cloudfront:GetKeyGroup",
"cloudfront:GetMonitoringSubscription",
"cloudfront:GetOriginAccessControl",
"cloudfront:GetOriginRequestPolicy",
"cloudfront:GetPublicKey",
"cloudfront:GetRealtimeLogConfig",
"cloudfront:GetTrustStore",
"cloudfront:GetVpcOrigin",
"cloudfront:ListAnycastIpLists",
"cloudfront:ListCachePolicies",
"cloudfront:ListCloudFrontOriginAccessIdentities",
"cloudfront:ListConnectionFunctions",
"cloudfront:ListConnectionGroups",
"cloudfront:ListContinuousDeploymentPolicies",
"cloudfront:ListDistributionTenants",
"cloudfront:ListDistributions",
"cloudfront:ListFieldLevelEncryptionConfigs",
"cloudfront:ListFieldLevelEncryptionProfiles",
"cloudfront:ListFunctions",
"cloudfront:ListKeyGroups",
"cloudfront:ListKeyValueStores",
"cloudfront:ListOriginAccessControls",
"cloudfront:ListOriginRequestPolicies",
"cloudfront:ListPublicKeys",
"cloudfront:ListRealtimeLogConfigs",
"cloudfront:ListResponseHeadersPolicies",
"cloudfront:ListTagsForResource",
"cloudfront:ListTrustStores",
"cloudfront:ListVpcOrigins",
"cloudhsm:DescribeBackups",
"cloudhsm:DescribeClusters",
"cloudhsm:ListTags",
"cloudtrail:GetDashboard",
"cloudtrail:GetResourcePolicy",
"cloudtrail:ListChannels",
"cloudtrail:ListDashboards",
"cloudtrail:ListEventDataStores",
"cloudtrail:ListTags",
"cloudtrail:ListTrails",
"cloudwatch:DescribeAlarms",
"cloudwatch:DescribeInsightRules",
"cloudwatch:GetDataset",
"cloudwatch:ListAlarmMuteRules",
"cloudwatch:ListDashboards",
"cloudwatch:ListManagedInsightRules",
"cloudwatch:ListMetricStreams",
"codeartifact:DescribeDomain",
"codeartifact:DescribePackageGroup",
"codeartifact:DescribeRepository",
"codeartifact:GetDomainPermissionsPolicy",
"codeartifact:GetRepositoryPermissionsPolicy",
"codeartifact:ListAllowedRepositoriesForGroup",
"codeartifact:ListDomains",
"codeartifact:ListPackageGroups",
"codeartifact:ListRepositories",
"codeartifact:ListTagsForResource",
"codebuild:BatchGetBuilds",
"codebuild:BatchGetFleets",
"codebuild:ListBuilds",
"codebuild:ListFleets",
"codebuild:ListProjects",
"codecommit:ListRepositories",
"codeconnections:GetConnection",
"codeconnections:GetHost",
"codeconnections:ListConnections",
"codeconnections:ListHosts",
"codedeploy:GetApplication",
"codedeploy:GetDeploymentConfig",
"codedeploy:ListApplications",
"codedeploy:ListDeploymentConfigs",
"codedeploy:ListTagsForResource",
"codeguru-profiler:DescribeProfilingGroup",
"codeguru-profiler:GetNotificationConfiguration",
"codeguru-profiler:GetPolicy",
"codeguru-profiler:ListProfilingGroups",
"codeguru-profiler:ListTagsForResource",
"codeguru-reviewer:DescribeRepositoryAssociation",
"codeguru-reviewer:ListRepositoryAssociations",
"codeguru-reviewer:ListTagsForResource",
"codepipeline:ListActionTypes",
"codepipeline:ListPipelines",
"codepipeline:ListTagsForResource",
"codepipeline:ListWebhooks",
"codestar-connections:GetConnection",
"codestar-connections:GetRepositoryLink",
"codestar-connections:GetSyncConfiguration",
"codestar-connections:ListConnections",
"codestar-connections:ListHosts",
"codestar-connections:ListRepositoryLinks",
"codestar-connections:ListSyncConfigurations",
"cognito-identity:DescribeIdentityPool",
"cognito-identity:ListIdentityPools",
"cognito-idp:AdminGetUser",
"cognito-idp:AdminListGroupsForUser",
"cognito-idp:DescribeManagedLoginBranding",
"cognito-idp:DescribeTerms",
"cognito-idp:DescribeUserPool",
"cognito-idp:DescribeUserPoolClient",
"cognito-idp:GetLogDeliveryConfiguration",
"cognito-idp:GetUICustomization",
"cognito-idp:GetUserPoolMfaConfig",
"cognito-idp:ListTerms",
"cognito-idp:ListUserPools",
"comprehend:DescribeDataset",
"comprehend:DescribeDocumentClassifier",
"comprehend:DescribeEndpoint",
"comprehend:DescribeFlywheel",
"comprehend:DescribeResourcePolicy",
"comprehend:ListDatasets",
"comprehend:ListDocumentClassifiers",
"comprehend:ListEndpoints",
"comprehend:ListEntityRecognizers",
"comprehend:ListFlywheels",
"comprehend:ListTagsForResource",
"config:BatchGetResourceConfig",
"config:DescribeConfigRules",
"config:DescribeConformancePacks",
"config:DescribeDeliveryChannels",
"config:DescribeOrganizationConformancePacks",
"config:GetConnector",
"config:GetCustomRulePolicy",
"config:GetResourceConfigHistory",
"config:GetStoredQuery",
"config:ListConfigurationRecorders",
"config:ListConnectors",
"config:ListDiscoveredResources",
"config:ListResourceEvaluations",
"config:ListStoredQueries",
"config:ListTagsForResource",
"config:SelectResourceConfig",
"connect-campaigns:DescribeCampaign",
"connect-campaigns:ListCampaigns",
"connect:DescribeAgentStatus",
"connect:DescribeContactFlow",
"connect:DescribeContactFlowModule",
"connect:DescribeEmailAddress",
"connect:DescribeEvaluationForm",
"connect:DescribeInstance",
"connect:DescribeInstanceStorageConfig",
"connect:DescribePhoneNumber",
"connect:DescribePredefinedAttribute",
"connect:DescribePrompt",
"connect:DescribeQuickConnect",
"connect:DescribeRoutingProfile",
"connect:DescribeRule",
"connect:DescribeSecurityProfile",
"connect:DescribeTrafficDistributionGroup",
"connect:DescribeUser",
"connect:DescribeUserHierarchyGroup",
"connect:DescribeUserHierarchyStructure",
"connect:DescribeView",
"connect:DescribeVocabulary",
"connect:GetTaskTemplate",
"connect:ListAgentStatuses",
"connect:ListApprovedOrigins",
"connect:ListBots",
"connect:ListContactFlowModules",
"connect:ListContactFlows",
"connect:ListEvaluationFormVersions",
"connect:ListEvaluationForms",
"connect:ListHoursOfOperations",
"connect:ListInstanceAttributes",
"connect:ListInstanceStorageConfigs",
"connect:ListInstances",
"connect:ListIntegrationAssociations",
"connect:ListLambdaFunctions",
"connect:ListPhoneNumbers",
"connect:ListPhoneNumbersV2",
"connect:ListPredefinedAttributes",
"connect:ListPrompts",
"connect:ListQueueEmailAddresses",
"connect:ListQueueQuickConnects",
"connect:ListQueues",
"connect:ListQuickConnects",
"connect:ListRoutingProfileManualAssignmentQueues",
"connect:ListRoutingProfileQueues",
"connect:ListRoutingProfiles",
"connect:ListRules",
"connect:ListSecurityKeys",
"connect:ListSecurityProfileApplications",
"connect:ListSecurityProfileFlowModules",
"connect:ListSecurityProfilePermissions",
"connect:ListSecurityProfiles",
"connect:ListTagsForResource",
"connect:ListTaskTemplates",
"connect:ListTrafficDistributionGroups",
"connect:ListUseCases",
"connect:ListUserHierarchyGroups",
"connect:ListUsers",
"connect:ListViewVersions",
"connect:ListViews",
"connect:SearchAvailablePhoneNumbers",
"connect:SearchEmailAddresses",
"connect:SearchVocabularies",
"controltower:GetEnabledBaseline",
"controltower:GetEnabledControl",
"controltower:GetLandingZone",
"controltower:ListEnabledBaselines",
"controltower:ListEnabledControls",
"controltower:ListLandingZones",
"controltower:ListTagsForResource",
"cur:DescribeReportDefinitions",
"cur:ListTagsForResource",
"databrew:ListDatasets",
"databrew:ListJobs",
"databrew:ListProjects",
"databrew:ListRecipes",
"databrew:ListRulesets",
"databrew:ListSchedules",
"dataexchange:GetAsset",
"dataexchange:GetDataSet",
"dataexchange:GetEventAction",
"dataexchange:ListDataSetRevisions",
"dataexchange:ListDataSets",
"dataexchange:ListEventActions",
"dataexchange:ListRevisionAssets",
"datapipeline:ListPipelines",
"datasync:DescribeLocationAzureBlob",
"datasync:DescribeLocationFsxOntap",
"datasync:DescribeLocationFsxOpenZfs",
"datasync:DescribeTaskExecution",
"datasync:ListLocations",
"datasync:ListTaskExecutions",
"datasync:ListTasks",
"datazone:GetDataSource",
"datazone:GetDomain",
"datazone:GetDomainUnit",
"datazone:GetEnvironment",
"datazone:GetEnvironmentAction",
"datazone:GetEnvironmentBlueprintConfiguration",
"datazone:GetEnvironmentProfile",
"datazone:GetGroupProfile",
"datazone:GetSubscriptionTarget",
"datazone:GetUserProfile",
"datazone:ListDataSources",
"datazone:ListDomainUnitsForParent",
"datazone:ListDomains",
"datazone:ListEntityOwners",
"datazone:ListEnvironmentActions",
"datazone:ListEnvironmentBlueprintConfigurations",
"datazone:ListEnvironmentProfiles",
"datazone:ListEnvironments",
"datazone:ListPolicyGrants",
"datazone:ListProjectMemberships",
"datazone:ListSubscriptionTargets",
"datazone:SearchGroupProfiles",
"datazone:SearchUserProfiles",
"dax:DescribeClusters",
"deadline:GetFarm",
"deadline:GetFleet",
"deadline:GetLicenseEndpoint",
"deadline:GetMonitor",
"deadline:GetQueue",
"deadline:GetQueueEnvironment",
"deadline:GetQueueFleetAssociation",
"deadline:GetQueueLimitAssociation",
"deadline:GetStorageProfile",
"deadline:GetWorker",
"deadline:ListFarms",
"deadline:ListFleets",
"deadline:ListLicenseEndpoints",
"deadline:ListMonitors",
"deadline:ListQueueEnvironments",
"deadline:ListQueueFleetAssociations",
"deadline:ListQueueLimitAssociations",
"deadline:ListQueues",
"deadline:ListStorageProfiles",
"deadline:ListTagsForResource",
"deadline:ListWorkers",
"detective:GetMembers",
"detective:ListGraphs",
"detective:ListMembers",
"detective:ListOrganizationAdminAccount",
"devicefarm:GetDevice",
"devicefarm:GetDeviceInstance",
"devicefarm:GetDevicePool",
"devicefarm:GetRemoteAccessSession",
"devicefarm:GetRun",
"devicefarm:GetVPCEConfiguration",
"devicefarm:ListDeviceInstances",
"devicefarm:ListDevicePools",
"devicefarm:ListDevices",
"devicefarm:ListInstanceProfiles",
"devicefarm:ListProjects",
"devicefarm:ListRuns",
"devicefarm:ListTestGridProjects",
"devicefarm:ListVPCEConfigurations",
"devops-guru:DescribeServiceIntegration",
"devops-guru:ListNotificationChannels",
"directconnect:DescribeConnections",
"directconnect:DescribeDirectConnectGateways",
"directconnect:DescribeVirtualInterfaces",
"dlm:GetLifecyclePolicies",
"dms:DescribeCertificates",
"dms:DescribeDataMigrations",
"dms:DescribeEndpoints",
"dms:DescribeEventSubscriptions",
"dms:DescribeReplicationConfigs",
"dms:DescribeReplicationInstances",
"dms:DescribeReplicationSubnetGroups",
"dms:DescribeReplicationTasks",
"dms:ListDataProviders",
"dms:ListInstanceProfiles",
"dms:ListMigrationProjects",
"dms:ListTagsForResource",
"docdb-elastic:GetCluster",
"docdb-elastic:GetClusterSnapshot",
"docdb-elastic:ListClusters",
"docdb-elastic:ListTagsForResource",
"drs:DescribeJobs",
"drs:DescribeLaunchConfigurationTemplates",
"drs:DescribeRecoveryInstances",
"drs:DescribeSourceNetworks",
"drs:DescribeSourceServers",
"drs:GetRecoveryPlan",
"drs:GetRecoveryPlanExecution",
"drs:ListRecoveryPlanExecutions",
"drs:ListRecoveryPlans",
"drs:ListTagsForResource",
"ds:DescribeDirectories",
"dsql:GetCluster",
"dsql:GetClusterPolicy",
"dsql:GetStream",
"dsql:GetVpcEndpointServiceName",
"dsql:ListClusters",
"dsql:ListStreams",
"dsql:ListTagsForResource",
"dynamodb:DescribeBackup",
"dynamodb:DescribeGlobalTable",
"dynamodb:DescribeStream",
"dynamodb:ListBackups",
"dynamodb:ListStreams",
"dynamodb:ListTables",
"ec2:DescribeAccountAttributes",
"ec2:DescribeAccountVpcEncryptionControl",
"ec2:DescribeAddressTransfers",
"ec2:DescribeAddresses",
"ec2:DescribeAddressesAttribute",
"ec2:DescribeAggregateIdFormat",
"ec2:DescribeApplicationStatus",
"ec2:DescribeApplicationStatusCheckAssociations",
"ec2:DescribeApplicationStatusChecks",
"ec2:DescribeAwsNetworkPerformanceMetricSubscriptions",
"ec2:DescribeBundleTasks",
"ec2:DescribeByoipCidrs",
"ec2:DescribeCapacityBlockExtensionHistory",
"ec2:DescribeCapacityBlockExtensionOfferings",
"ec2:DescribeCapacityBlockOfferings",
"ec2:DescribeCapacityBlockStatus",
"ec2:DescribeCapacityBlocks",
"ec2:DescribeCapacityManagerDataExports",
"ec2:DescribeCapacityReservationBillingRequests",
"ec2:DescribeCapacityReservationCancellationQuotes",
"ec2:DescribeCapacityReservationFleets",
"ec2:DescribeCapacityReservationTopology",
"ec2:DescribeCapacityReservations",
"ec2:DescribeCarrierGateways",
"ec2:DescribeClassicLinkInstances",
"ec2:DescribeClientVpnAuthorizationRules",
"ec2:DescribeClientVpnConnections",
"ec2:DescribeClientVpnEndpoints",
"ec2:DescribeClientVpnRoutes",
"ec2:DescribeCoipPools",
"ec2:DescribeConversionTasks",
"ec2:DescribeCustomerGateways",
"ec2:DescribeDeclarativePoliciesReports",
"ec2:DescribeDhcpOptions",
"ec2:DescribeEgressOnlyInternetGateways",
"ec2:DescribeElasticGpus",
"ec2:DescribeExportImageTasks",
"ec2:DescribeExportTasks",
"ec2:DescribeFastLaunchImages",
"ec2:DescribeFastSnapshotRestores",
"ec2:DescribeFleetHistory",
"ec2:DescribeFleetInstances",
"ec2:DescribeFleets",
"ec2:DescribeFlowLogs",
"ec2:DescribeFpgaImageAttribute",
"ec2:DescribeFpgaImages",
"ec2:DescribeHostReservationOfferings",
"ec2:DescribeHostReservations",
"ec2:DescribeHosts",
"ec2:DescribeIamInstanceProfileAssociations",
"ec2:DescribeIdFormat",
"ec2:DescribeIdentityIdFormat",
"ec2:DescribeImageAttribute",
"ec2:DescribeImageReferences",
"ec2:DescribeImageUsageReportEntries",
"ec2:DescribeImageUsageReports",
"ec2:DescribeImages",
"ec2:DescribeImportImageTasks",
"ec2:DescribeImportSnapshotTasks",
"ec2:DescribeInstanceConnectEndpoints",
"ec2:DescribeInstanceEventNotificationAttributes",
"ec2:DescribeInstanceEventWindows",
"ec2:DescribeInstanceImageMetadata",
"ec2:DescribeInstanceSqlHaHistoryStates",
"ec2:DescribeInstanceSqlHaStates",
"ec2:DescribeInstanceStatus",
"ec2:DescribeInstanceTopology",
"ec2:DescribeInstanceTypeOfferings",
"ec2:DescribeInstanceTypes",
"ec2:DescribeInstances",
"ec2:DescribeInternetGateways",
"ec2:DescribeIpamByoasn",
"ec2:DescribeIpamExternalResourceVerificationTokens",
"ec2:DescribeIpamInternetRegistryAssociations",
"ec2:DescribeIpamPolicies",
"ec2:DescribeIpamPoolAllocations",
"ec2:DescribeIpamPools",
"ec2:DescribeIpamPrefixListResolverTargets",
"ec2:DescribeIpamPrefixListResolvers",
"ec2:DescribeIpamResourceDiscoveries",
"ec2:DescribeIpamResourceDiscoveryAssociations",
"ec2:DescribeIpamScopes",
"ec2:DescribeIpams",
"ec2:DescribeIpv6Pools",
"ec2:DescribeKeyPairs",
"ec2:DescribeLaunchTemplates",
"ec2:DescribeLocalGatewayRouteTableVirtualInterfaceGroupAssociations",
"ec2:DescribeLocalGatewayRouteTableVpcAssociations",
"ec2:DescribeLocalGatewayRouteTables",
"ec2:DescribeLocalGatewayVirtualInterfaceGroups",
"ec2:DescribeLocalGatewayVirtualInterfaces",
"ec2:DescribeLocalGateways",
"ec2:DescribeLockedSnapshots",
"ec2:DescribeMacHosts",
"ec2:DescribeMacModificationTasks",
"ec2:DescribeManagedPrefixLists",
"ec2:DescribeMovingAddresses",
"ec2:DescribeNatGateways",
"ec2:DescribeNetworkAcls",
"ec2:DescribeNetworkInsightsAccessScopeAnalyses",
"ec2:DescribeNetworkInsightsAccessScopes",
"ec2:DescribeNetworkInsightsAnalyses",
"ec2:DescribeNetworkInsightsPaths",
"ec2:DescribeNetworkInterfaceAttribute",
"ec2:DescribeNetworkInterfacePermissions",
"ec2:DescribeNetworkInterfaces",
"ec2:DescribeOutpostLags",
"ec2:DescribePlacementGroups",
"ec2:DescribePrefixLists",
"ec2:DescribePrincipalIdFormat",
"ec2:DescribePublicIpv4Pools",
"ec2:DescribeRegions",
"ec2:DescribeReplaceRootVolumeTasks",
"ec2:DescribeReservedInstances",
"ec2:DescribeReservedInstancesListings",
"ec2:DescribeReservedInstancesModifications",
"ec2:DescribeReservedInstancesOfferings",
"ec2:DescribeRouteTables",
"ec2:DescribeScheduledInstanceAvailability",
"ec2:DescribeScheduledInstances",
"ec2:DescribeSecondaryInterfaces",
"ec2:DescribeSecondaryNetworks",
"ec2:DescribeSecondarySubnets",
"ec2:DescribeSecurityGroupReferences",
"ec2:DescribeSecurityGroupRules",
"ec2:DescribeSecurityGroupVpcAssociations",
"ec2:DescribeSecurityGroups",
"ec2:DescribeServiceLinkVirtualInterfaces",
"ec2:DescribeSnapshotAttribute",
"ec2:DescribeSnapshotTierStatus",
"ec2:DescribeSnapshots",
"ec2:DescribeSpotDatafeedSubscription",
"ec2:DescribeSpotFleetInstances",
"ec2:DescribeSpotFleetRequestHistory",
"ec2:DescribeSpotFleetRequests",
"ec2:DescribeSpotInstanceRequests",
"ec2:DescribeSpotPriceHistory",
"ec2:DescribeStaleSecurityGroups",
"ec2:DescribeStoreImageTasks",
"ec2:DescribeSubnets",
"ec2:DescribeTags",
"ec2:DescribeTrafficMirrorFilterRules",
"ec2:DescribeTrafficMirrorFilters",
"ec2:DescribeTrafficMirrorSessions",
"ec2:DescribeTrafficMirrorTargets",
"ec2:DescribeTransitGatewayAttachments",
"ec2:DescribeTransitGatewayConnectPeers",
"ec2:DescribeTransitGatewayMeteringPolicies",
"ec2:DescribeTransitGatewayMulticastDomains",
"ec2:DescribeTransitGatewayPeeringAttachments",
"ec2:DescribeTransitGatewayPolicyTables",
"ec2:DescribeTransitGatewayRouteTableAnnouncements",
"ec2:DescribeTransitGatewayRouteTables",
"ec2:DescribeTransitGatewayVpcAttachments",
"ec2:DescribeTransitGateways",
"ec2:DescribeTrunkInterfaceAssociations",
"ec2:DescribeVerifiedAccessEndpoints",
"ec2:DescribeVerifiedAccessGroups",
"ec2:DescribeVerifiedAccessInstanceLoggingConfigurations",
"ec2:DescribeVerifiedAccessInstances",
"ec2:DescribeVerifiedAccessTrustProviders",
"ec2:DescribeVolumeStatus",
"ec2:DescribeVolumes",
"ec2:DescribeVolumesModifications",
"ec2:DescribeVpcAttribute",
"ec2:DescribeVpcBlockPublicAccessExclusions",
"ec2:DescribeVpcBlockPublicAccessOptions",
"ec2:DescribeVpcClassicLink",
"ec2:DescribeVpcClassicLinkDnsSupport",
"ec2:DescribeVpcEncryptionControls",
"ec2:DescribeVpcEndpointAssociations",
"ec2:DescribeVpcEndpointConnectionNotifications",
"ec2:DescribeVpcEndpointConnections",
"ec2:DescribeVpcEndpointServiceConfigurations",
"ec2:DescribeVpcEndpointServicePermissions",
"ec2:DescribeVpcEndpointServices",
"ec2:DescribeVpcEndpoints",
"ec2:DescribeVpcPeeringConnections",
"ec2:DescribeVpcs",
"ec2:DescribeVpnConcentrators",
"ec2:DescribeVpnConnections",
"ec2:DescribeVpnGateways",
"ec2:GetAllowedImagesSettings",
"ec2:GetAssociatedEnclaveCertificateIamRoles",
"ec2:GetCoipPoolUsage",
"ec2:GetIpamPrefixListResolverRules",
"ec2:GetRouteServerAssociations",
"ec2:GetRouteServerPropagations",
"ec2:GetSnapshotBlockPublicAccessState",
"ec2:GetSubnetCidrReservations",
"ec2:GetTransitGatewayMulticastDomainAssociations",
"ec2:GetTransitGatewayRouteTableAssociations",
"ec2:GetTransitGatewayRouteTablePropagations",
"ec2:GetVerifiedAccessEndpointPolicy",
"ec2:GetVerifiedAccessGroupPolicy",
"ec2:SearchLocalGatewayRoutes",
"ec2:SearchTransitGatewayMulticastGroups",
"ec2:SearchTransitGatewayRoutes",
"ecr-public:DescribeRegistries",
"ecr-public:DescribeRepositories",
"ecr-public:GetRegistryCatalogData",
"ecr:DescribeRepositories",
"ecr:DescribeRepositoryCreationTemplates",
"ecr:GetRegistryScanningConfiguration",
"ecs:DescribeCapacityProviders",
"ecs:DescribeContainerInstances",
"ecs:DescribeDaemon",
"ecs:DescribeDaemonTaskDefinition",
"ecs:DescribeServiceDeployments",
"ecs:DescribeServiceRevisions",
"ecs:DescribeServices",
"ecs:DescribeTasks",
"ecs:ListClusters",
"ecs:ListContainerInstances",
"ecs:ListDaemonTaskDefinitions",
"ecs:ListDaemons",
"ecs:ListServiceDeployments",
"ecs:ListServices",
"ecs:ListTaskDefinitions",
"ecs:ListTasks",
"eks:DescribeAccessEntry",
"eks:DescribeAddon",
"eks:DescribeCapability",
"eks:DescribeFargateProfile",
"eks:DescribeIdentityProviderConfig",
"eks:DescribeNodegroup",
"eks:DescribePodIdentityAssociation",
"eks:ListAccessEntries",
"eks:ListAddons",
"eks:ListAssociatedAccessPolicies",
"eks:ListClusters",
"eks:ListEksAnywhereSubscriptions",
"eks:ListFargateProfiles",
"eks:ListIdentityProviderConfigs",
"eks:ListNodegroups",
"eks:ListPodIdentityAssociations",
"elasticache:DescribeCacheClusters",
"elasticache:DescribeCacheParameterGroups",
"elasticache:DescribeCacheParameters",
"elasticache:DescribeCacheSubnetGroups",
"elasticache:DescribeGlobalReplicationGroups",
"elasticache:DescribeReplicationGroups",
"elasticache:DescribeReservedCacheNodes",
"elasticache:DescribeServerlessCacheSnapshots",
"elasticache:DescribeServerlessCaches",
"elasticache:DescribeSnapshots",
"elasticache:DescribeUserGroups",
"elasticache:DescribeUsers",
"elasticache:ListTagsForResource",
"elasticbeanstalk:DescribeApplicationVersions",
"elasticbeanstalk:DescribeApplications",
"elasticbeanstalk:DescribeEnvironments",
"elasticfilesystem:DescribeAccessPoints",
"elasticfilesystem:DescribeFileSystems",
"elasticloadbalancing:DescribeListenerAttributes",
"elasticloadbalancing:DescribeListenerCertificates",
"elasticloadbalancing:DescribeListeners",
"elasticloadbalancing:DescribeLoadBalancers",
"elasticloadbalancing:DescribeRules",
"elasticloadbalancing:DescribeTargetGroups",
"elasticloadbalancing:DescribeTrustStoreRevocations",
"elasticloadbalancing:DescribeTrustStores",
"elasticmapreduce:DescribeCluster",
"elasticmapreduce:DescribeStep",
"elasticmapreduce:GetAutoTerminationPolicy",
"elasticmapreduce:GetSession",
"elasticmapreduce:ListBootstrapActions",
"elasticmapreduce:ListClusters",
"elasticmapreduce:ListSessions",
"elasticmapreduce:ListSteps",
"elemental-inference:GetDictionary",
"elemental-inference:GetFeed",
"elemental-inference:ListFeeds",
"emr-containers:DescribeJobRun",
"emr-containers:DescribeManagedEndpoint",
"emr-containers:DescribeSecurityConfiguration",
"emr-containers:ListJobRuns",
"emr-containers:ListJobTemplates",
"emr-containers:ListManagedEndpoints",
"emr-containers:ListSecurityConfigurations",
"emr-containers:ListTagsForResource",
"emr-containers:ListVirtualClusters",
"emr-serverless:ListApplications",
"entityresolution:GetIdMappingWorkflow",
"entityresolution:GetIdNamespace",
"entityresolution:GetMatchingWorkflow",
"entityresolution:GetPolicy",
"entityresolution:GetSchemaMapping",
"entityresolution:ListIdMappingWorkflows",
"entityresolution:ListIdNamespaces",
"entityresolution:ListMatchingWorkflows",
"entityresolution:ListSchemaMappings",
"entityresolution:ListTagsForResource",
"es:GetApplication",
"es:GetDataSource",
"es:ListApplications",
"es:ListDataSources",
"es:ListDomainNames",
"events:ListApiDestinations",
"events:ListArchives",
"events:ListConnections",
"events:ListEndpoints",
"events:ListEventBuses",
"events:ListRules",
"evidently:ListExperiments",
"evidently:ListFeatures",
"evidently:ListLaunches",
"evidently:ListProjects",
"evs:GetEnvironment",
"evs:ListEnvironments",
"evs:ListTagsForResource",
"finspace:GetEnvironment",
"finspace:ListEnvironments",
"firehose:DescribeDeliveryStream",
"firehose:ListDeliveryStreams",
"fis:GetAction",
"fis:GetSafetyLever",
"fis:GetTargetAccountConfiguration",
"fis:ListActions",
"fis:ListExperimentTemplates",
"fis:ListExperiments",
"fis:ListTargetAccountConfigurations",
"fms:GetAppsList",
"fms:GetProtocolsList",
"fms:GetResourceSet",
"fms:ListAppsLists",
"fms:ListPolicies",
"fms:ListProtocolsLists",
"fms:ListResourceSetResources",
"fms:ListResourceSets",
"forecast:ListDatasetGroups",
"forecast:ListDatasetImportJobs",
"forecast:ListDatasets",
"forecast:ListForecastExportJobs",
"forecast:ListForecasts",
"forecast:ListPredictorBacktestExportJobs",
"forecast:ListPredictors",
"frauddetector:GetDetectors",
"frauddetector:GetEntityTypes",
"frauddetector:GetEventTypes",
"frauddetector:GetExternalModels",
"frauddetector:GetLabels",
"frauddetector:GetModels",
"frauddetector:GetOutcomes",
"frauddetector:GetVariables",
"fsx:DescribeBackups",
"fsx:DescribeDataRepositoryTasks",
"fsx:DescribeFileCaches",
"fsx:DescribeFileSystems",
"fsx:DescribeVolumes",
"fsx:ListTagsForResource",
"gamelift:DescribeContainerFleet",
"gamelift:DescribeGameSessionQueues",
"gamelift:DescribeMatchmakingConfigurations",
"gamelift:DescribeMatchmakingRuleSets",
"gamelift:DescribeScalingPolicies",
"gamelift:ListAliases",
"gamelift:ListBuilds",
"gamelift:ListContainerFleets",
"gamelift:ListFleets",
"gamelift:ListGameServerGroups",
"gamelift:ListLocations",
"gamelift:ListScripts",
"gameliftstreams:GetApplication",
"gameliftstreams:GetStreamGroup",
"gameliftstreams:ListApplications",
"gameliftstreams:ListStreamGroups",
"gameliftstreams:ListTagsForResource",
"geo:DescribeKey",
"geo:GetJob",
"geo:ListJobs",
"geo:ListKeys",
"geo:ListMaps",
"geo:ListPlaceIndexes",
"geo:ListTagsForResource",
"geo:ListTrackers",
"glacier:ListVaults",
"globalaccelerator:DescribeCrossAccountAttachment",
"globalaccelerator:ListAccelerators",
"globalaccelerator:ListCrossAccountAttachments",
"globalaccelerator:ListEndpointGroups",
"globalaccelerator:ListListeners",
"glue:DescribeConnectionType",
"glue:GetBlueprint",
"glue:GetCrawlers",
"glue:GetCustomEntityType",
"glue:GetDataQualityRuleset",
"glue:GetDatabases",
"glue:GetIntegrationResourceProperty",
"glue:GetJobs",
"glue:GetRegistry",
"glue:GetSchema",
"glue:GetSchemaVersion",
"glue:GetSession",
"glue:GetTableVersion",
"glue:GetTableVersions",
"glue:GetTables",
"glue:GetTags",
"glue:GetTrigger",
"glue:GetTriggers",
"glue:GetUsageProfile",
"glue:GetUserDefinedFunction",
"glue:GetUserDefinedFunctions",
"glue:ListConnectionTypes",
"glue:ListCustomEntityTypes",
"glue:ListDataQualityRulesets",
"glue:ListIntegrationResourceProperties",
"glue:ListMLTransforms",
"glue:ListRegistries",
"glue:ListSchemaVersions",
"glue:ListSchemas",
"glue:ListSessions",
"glue:ListTriggers",
"glue:ListUsageProfiles",
"glue:querySchemaVersionMetadata",
"grafana:ListWorkspaces",
"greengrass:GetComponent",
"greengrass:GetCoreDevice",
"greengrass:GetDeployment",
"greengrass:ListComponentVersions",
"greengrass:ListComponents",
"greengrass:ListConnectorDefinitions",
"greengrass:ListCoreDefinitions",
"greengrass:ListCoreDevices",
"greengrass:ListDeployments",
"greengrass:ListDeviceDefinitions",
"greengrass:ListFunctionDefinitions",
"greengrass:ListGroups",
"greengrass:ListLoggerDefinitions",
"greengrass:ListResourceDefinitions",
"greengrass:ListSubscriptionDefinitions",
"groundstation:DescribeContact",
"groundstation:GetSatellite",
"groundstation:ListConfigs",
"groundstation:ListContacts",
"groundstation:ListDataflowEndpointGroups",
"groundstation:ListMissionProfiles",
"groundstation:ListSatellites",
"guardduty:GetMalwareProtectionPlan",
"guardduty:GetThreatEntitySet",
"guardduty:GetTrustedEntitySet",
"guardduty:ListDetectors",
"guardduty:ListFilters",
"guardduty:ListIPSets",
"guardduty:ListMalwareProtectionPlans",
"guardduty:ListPublishingDestinations",
"guardduty:ListThreatEntitySets",
"guardduty:ListThreatIntelSets",
"guardduty:ListTrustedEntitySets",
"healthlake:GetDataTransformationProfile",
"healthlake:ListFHIRDatastores",
"iam:GetCredentialReport",
"iam:GetGroup",
"iam:GetGroupPolicy",
"iam:GetUser",
"iam:GetUserPolicy",
"iam:ListAccessKeys",
"iam:ListAttachedGroupPolicies",
"iam:ListAttachedUserPolicies",
"iam:ListGroupPolicies",
"iam:ListGroups",
"iam:ListInstanceProfiles",
"iam:ListMFADevices",
"iam:ListOpenIDConnectProviders",
"iam:ListPolicies",
"iam:ListRoles",
"iam:ListSAMLProviders",
"iam:ListServerCertificates",
"iam:ListUserPolicies",
"iam:ListUsers",
"iam:ListVirtualMFADevices",
"identitystore:DescribeGroup",
"identitystore:DescribeGroupMembership",
"identitystore:ListGroupMemberships",
"identitystore:ListGroupMembershipsForMember",
"identitystore:ListGroups",
"imagebuilder:GetLifecyclePolicy",
"imagebuilder:GetWorkflow",
"imagebuilder:ListComponentBuildVersions",
"imagebuilder:ListComponents",
"imagebuilder:ListContainerRecipes",
"imagebuilder:ListDistributionConfigurations",
"imagebuilder:ListImageBuildVersions",
"imagebuilder:ListImagePipelines",
"imagebuilder:ListImageRecipes",
"imagebuilder:ListImages",
"imagebuilder:ListInfrastructureConfigurations",
"imagebuilder:ListLifecyclePolicies",
"imagebuilder:ListTagsForResource",
"imagebuilder:ListWorkflowBuildVersions",
"imagebuilder:ListWorkflows",
"inspector2:GetCodeSecurityScanConfiguration",
"inspector2:ListCisScanConfigurations",
"inspector2:ListCodeSecurityScanConfigurations",
"inspector2:ListFilters",
"inspector2:ListTagsForResource",
"inspector:ListAssessmentTemplates",
"interconnect:GetConnection",
"interconnect:ListConnections",
"interconnect:ListTagsForResource",
"internetmonitor:ListTagsForResource",
"invoicing:GetInvoiceUnit",
"invoicing:ListInvoiceUnits",
"iot:DescribeCertificateProvider",
"iot:DescribeThingGroup",
"iot:DescribeThingType",
"iot:DescribeTunnel",
"iot:GetCommand",
"iot:GetOTAUpdate",
"iot:GetPackage",
"iot:GetPackageVersion",
"iot:GetV2LoggingOptions",
"iot:ListAuthorizers",
"iot:ListBillingGroups",
"iot:ListCACertificates",
"iot:ListCertificateProviders",
"iot:ListCertificates",
"iot:ListCommands",
"iot:ListCustomMetrics",
"iot:ListDimensions",
"iot:ListFleetMetrics",
"iot:ListJobTemplates",
"iot:ListJobs",
"iot:ListMitigationActions",
"iot:ListOTAUpdates",
"iot:ListPackageVersions",
"iot:ListPackages",
"iot:ListPolicies",
"iot:ListProvisioningTemplates",
"iot:ListRoleAliases",
"iot:ListScheduledAudits",
"iot:ListSecurityProfiles",
"iot:ListStreams",
"iot:ListThingGroups",
"iot:ListThingTypes",
"iot:ListThings",
"iot:ListTopicRuleDestinations",
"iot:ListTopicRules",
"iot:ListTunnels",
"iotanalytics:ListChannels",
"iotanalytics:ListDatasets",
"iotanalytics:ListDatastores",
"iotanalytics:ListPipelines",
"iotdeviceadvisor:GetSuiteDefinition",
"iotdeviceadvisor:GetSuiteRun",
"iotdeviceadvisor:ListSuiteDefinitions",
"iotdeviceadvisor:ListSuiteRuns",
"iotevents:DescribeAlarmModel",
"iotevents:DescribeDetectorModel",
"iotevents:DescribeInput",
"iotevents:ListAlarmModels",
"iotevents:ListDetectorModels",
"iotevents:ListInputs",
"iotevents:ListTagsForResource",
"iotfleethub:DescribeApplication",
"iotfleethub:ListApplications",
"iotfleetwise:GetDecoderManifest",
"iotfleetwise:GetFleet",
"iotfleetwise:GetSignalCatalog",
"iotfleetwise:GetStateTemplate",
"iotfleetwise:GetVehicle",
"iotfleetwise:ListDecoderManifestNetworkInterfaces",
"iotfleetwise:ListDecoderManifestSignals",
"iotfleetwise:ListDecoderManifests",
"iotfleetwise:ListModelManifests",
"iotfleetwise:ListSignalCatalogNodes",
"iotfleetwise:ListSignalCatalogs",
"iotfleetwise:ListStateTemplates",
"iotfleetwise:ListVehicles",
"iotmanagedintegrations:GetOtaTask",
"iotsitewise:DescribeComputationModel",
"iotsitewise:DescribeDataset",
"iotsitewise:DescribePipeline",
"iotsitewise:DescribeTask",
"iotsitewise:DescribeTimeSeries",
"iotsitewise:DescribeWorkspace",
"iotsitewise:ListAccessPolicies",
"iotsitewise:ListAssetModels",
"iotsitewise:ListAssets",
"iotsitewise:ListComputationModels",
"iotsitewise:ListDashboards",
"iotsitewise:ListDatasets",
"iotsitewise:ListGateways",
"iotsitewise:ListPipelines",
"iotsitewise:ListPortals",
"iotsitewise:ListProjects",
"iotsitewise:ListTasks",
"iotsitewise:ListTimeSeries",
"iotsitewise:ListWorkspaces",
"iottwinmaker:ListComponentTypes",
"iottwinmaker:ListEntities",
"iottwinmaker:ListSyncJobs",
"iottwinmaker:ListWorkspaces",
"iotwireless:GetPartnerAccount",
"iotwireless:GetWirelessDeviceImportTask",
"iotwireless:ListDestinations",
"iotwireless:ListDeviceProfiles",
"iotwireless:ListDevicesForWirelessDeviceImportTask",
"iotwireless:ListFuotaTasks",
"iotwireless:ListMulticastGroups",
"iotwireless:ListPartnerAccounts",
"iotwireless:ListServiceProfiles",
"iotwireless:ListTagsForResource",
"iotwireless:ListWirelessDeviceImportTasks",
"iotwireless:ListWirelessDevices",
"iotwireless:ListWirelessGatewayTaskDefinitions",
"iotwireless:ListWirelessGateways",
"ivs:GetChannel",
"ivs:GetEncoderConfiguration",
"ivs:GetPlaybackRestrictionPolicy",
"ivs:GetStage",
"ivs:GetStorageConfiguration",
"ivs:GetStreamKey",
"ivs:ListChannels",
"ivs:ListEncoderConfigurations",
"ivs:ListIngestConfigurations",
"ivs:ListPlaybackKeyPairs",
"ivs:ListPlaybackRestrictionPolicies",
"ivs:ListPublicKeys",
"ivs:ListRecordingConfigurations",
"ivs:ListStages",
"ivs:ListStorageConfigurations",
"ivs:ListStreamKeys",
"ivschat:GetLoggingConfiguration",
"ivschat:GetRoom",
"ivschat:ListLoggingConfigurations",
"ivschat:ListRooms",
"ivschat:ListTagsForResource",
"kafka:DescribeReplicator",
"kafka:ListClusters",
"kafka:ListConfigurations",
"kafka:ListReplicators",
"kafkaconnect:ListWorkerConfigurations",
"kendra-ranking:ListRescoreExecutionPlans",
"kendra:ListAccessControlConfigurations",
"kendra:ListDataSources",
"kendra:ListExperiences",
"kendra:ListFaqs",
"kendra:ListFeaturedResultsSets",
"kendra:ListIndices",
"kendra:ListQuerySuggestionsBlockLists",
"kendra:ListThesauri",
"kinesis:ListStreams",
"kinesisanalytics:ListApplications",
"kinesisvideo:ListSignalingChannels",
"kinesisvideo:ListStreams",
"kms:ListKeys",
"lakeformation:ListDataCellsFilter",
"lambda:GetDurableExecution",
"lambda:ListCapacityProviders",
"lambda:ListCodeSigningConfigs",
"lambda:ListEventSourceMappings",
"lambda:ListFunctions",
"lambda:ListLayerVersions",
"lambda:ListLayers",
"lambda:ListVersionsByFunction",
"launchwizard:ListDeploymentEvents",
"launchwizard:ListDeployments",
"launchwizard:ListTagsForResource",
"lex:ListBotAliases",
"lex:ListBots",
"license-manager:ListDistributedGrants",
"license-manager:ListTagsForResource",
"lightsail:GetAlarms",
"lightsail:GetBuckets",
"lightsail:GetCertificates",
"lightsail:GetContainerServices",
"lightsail:GetDiskSnapshot",
"lightsail:GetDiskSnapshots",
"lightsail:GetDisks",
"lightsail:GetInstanceSnapshot",
"logs:DescribeDestinations",
"logs:DescribeLogGroups",
"logs:ListTagsForResource",
"lookoutmetrics:ListAlerts",
"lookoutmetrics:ListAnomalyDetectors",
"lookoutvision:ListProjects",
"m2:ListEnvironments",
"macie2:ListAllowLists",
"macie2:ListCustomDataIdentifiers",
"macie2:ListFindingsFilters",
"macie2:ListMembers",
"managedblockchain:ListAccessors",
"mediaconnect:ListFlows",
"mediaconnect:ListGateways",
"mediapackage-vod:ListAssets",
"mediapackage-vod:ListPackagingConfigurations",
"mediapackage-vod:ListPackagingGroups",
"mediapackage:ListChannels",
"mediapackage:ListOriginEndpoints",
"mediastore:ListContainers",
"mediatailor:ListChannels",
"mediatailor:ListLiveSources",
"mediatailor:ListPlaybackConfigurations",
"mediatailor:ListSourceLocations",
"mediatailor:ListVodSources",
"memorydb:DescribeACLs",
"memorydb:DescribeClusters",
"memorydb:DescribeParameterGroups",
"memorydb:DescribeSnapshots",
"memorydb:DescribeSubnetGroups",
"memorydb:DescribeUsers",
"mobiletargeting:GetApps",
"mobiletargeting:GetCampaigns",
"mobiletargeting:GetSegments",
"mobiletargeting:ListTemplates",
"mq:ListBrokers",
"mq:ListConfigurations",
"network-firewall:ListFirewallPolicies",
"network-firewall:ListFirewalls",
"network-firewall:ListRuleGroups",
"networkmanager:DescribeGlobalNetworks",
"networkmanager:GetDevices",
"networkmanager:GetLinks",
"networkmanager:ListAttachments",
"networkmanager:ListCoreNetworks",
"oam:ListSinks",
"omics:ListReferenceStores",
"omics:ListRunGroups",
"omics:ListWorkflows",
"organizations:DescribeResourcePolicy",
"organizations:ListPolicies",
"outposts:ListSites",
"panorama:ListDevices",
"panorama:ListPackages",
"partnercentral:ListBenefitApplications",
"partnercentral:ListEngagementInvitations",
"partnercentral:ListEngagements",
"partnercentral:ListOpportunities",
"partnercentral:ListResourceSnapshotJobs",
"partnercentral:ListResourceSnapshots",
"personalize:ListDatasetGroups",
"personalize:ListDatasets",
"personalize:ListSchemas",
"personalize:ListSolutions",
"pipes:ListPipes",
"profile:ListDomains",
"profile:ListIntegrations",
"profile:ListProfileObjectTypes",
"proton:ListEnvironmentAccountConnections",
"proton:ListEnvironmentTemplates",
"proton:ListServiceTemplates",
"qldb:ListJournalKinesisStreamsForLedger",
"qldb:ListLedgers",
"quicksight:DescribeAccountSubscription",
"quicksight:ListDataSets",
"quicksight:ListDataSources",
"quicksight:ListFolders",
"quicksight:ListTemplates",
"quicksight:ListThemes",
"ram:GetResourceShares",
"ram:ListPermissions",
"rbin:ListRules",
"rbin:ListTagsForResource",
"rds:DescribeBlueGreenDeployments",
"rds:DescribeDBClusterEndpoints",
"rds:DescribeDBClusterParameterGroups",
"rds:DescribeDBClusterSnapshots",
"rds:DescribeDBClusters",
"rds:DescribeDBEngineVersions",
"rds:DescribeDBInstanceAutomatedBackups",
"rds:DescribeDBInstances",
"rds:DescribeDBParameterGroups",
"rds:DescribeDBProxies",
"rds:DescribeDBProxyEndpoints",
"rds:DescribeDBSecurityGroups",
"rds:DescribeDBSnapshots",
"rds:DescribeDBSubnetGroups",
"rds:DescribeEventSubscriptions",
"rds:DescribeGlobalClusters",
"rds:DescribeOptionGroups",
"rds:DescribeReservedDBInstances",
"redshift:DescribeClusterParameterGroups",
"redshift:DescribeClusterSnapshots",
"redshift:DescribeClusterSubnetGroups",
"redshift:DescribeClusters",
"redshift:DescribeEventSubscriptions",
"redshift:DescribeHsmClientCertificates",
"redshift:DescribeSnapshotCopyGrants",
"redshift:DescribeSnapshotSchedules",
"redshift:DescribeUsageLimits",
"refactor-spaces:ListApplications",
"refactor-spaces:ListEnvironments",
"refactor-spaces:ListRoutes",
"refactor-spaces:ListServices",
"rekognition:DescribeProjects",
"rekognition:ListCollections",
"resiliencehub:ListAppAssessments",
"resiliencehub:ListApps",
"resiliencehub:ListResiliencyPolicies",
"resource-explorer-2:GetIndex",
"resource-explorer-2:ListIndexes",
"resource-explorer-2:ListViews",
"resource-groups:ListGroups",
"route53-recovery-control-config:ListClusters",
"route53-recovery-control-config:ListControlPanels",
"route53-recovery-control-config:ListRoutingControls",
"route53-recovery-control-config:ListSafetyRules",
"route53-recovery-readiness:ListCells",
"route53-recovery-readiness:ListReadinessChecks",
"route53-recovery-readiness:ListRecoveryGroups",
"route53-recovery-readiness:ListResourceSets",
"route53:ListHealthChecks",
"route53:ListHostedZones",
"route53domains:ListDomains",
"route53resolver:ListFirewallDomainLists",
"route53resolver:ListFirewallRuleGroupAssociations",
"route53resolver:ListFirewallRuleGroups",
"route53resolver:ListResolverEndpoints",
"route53resolver:ListResolverQueryLogConfigs",
"route53resolver:ListResolverRules",
"rum:ListAppMonitors",
"s3:GetBucketLocation",
"s3:ListAccessPoints",
"s3:ListAllMyBuckets",
"s3:ListBucket",
"s3:ListMultiRegionAccessPoints",
"s3:ListStorageLensConfigurations",
"s3:ListStorageLensGroups",
"s3express:ListAllMyDirectoryBuckets",
"s3vectors:ListIndexes",
"s3vectors:ListVectorBuckets",
"sagemaker:DescribeInferenceComponent",
"sagemaker:ListActions",
"sagemaker:ListAlgorithms",
"sagemaker:ListAppImageConfigs",
"sagemaker:ListApps",
"sagemaker:ListArtifacts",
"sagemaker:ListClusters",
"sagemaker:ListCodeRepositories",
"sagemaker:ListContexts",
"sagemaker:ListDomains",
"sagemaker:ListEndpointConfigs",
"sagemaker:ListEndpoints",
"sagemaker:ListExperiments",
"sagemaker:ListFeatureGroups",
"sagemaker:ListFlowDefinitions",
"sagemaker:ListHubContents",
"sagemaker:ListHubs",
"sagemaker:ListHumanLoops",
"sagemaker:ListHumanTaskUis",
"sagemaker:ListImageVersions",
"sagemaker:ListImages",
"sagemaker:ListInferenceComponents",
"sagemaker:ListInferenceExperiments",
"sagemaker:ListMlflowTrackingServers",
"sagemaker:ListModelCardVersions",
"sagemaker:ListModelCards",
"sagemaker:ListModelPackageGroups",
"sagemaker:ListModelPackages",
"sagemaker:ListModels",
"sagemaker:ListMonitoringSchedules",
"sagemaker:ListNotebookInstanceLifecycleConfigs",
"sagemaker:ListNotebookInstances",
"sagemaker:ListPartnerApps",
"sagemaker:ListPipelines",
"sagemaker:ListProjects",
"sagemaker:ListSpaces",
"sagemaker:ListStudioLifecycleConfigs",
"sagemaker:ListTrialComponents",
"sagemaker:ListTrials",
"sagemaker:ListUserProfiles",
"sagemaker:ListWorkforces",
"sagemaker:ListWorkteams",
"scheduler:ListScheduleGroups",
"schemas:ListDiscoverers",
"secretsmanager:ListSecrets",
"servicecatalog:ListApplications",
"servicecatalog:ListAttributeGroups",
"servicediscovery:ListServices",
"ses:ListConfigurationSets",
"ses:ListContactLists",
"ses:ListDedicatedIpPools",
"ses:ListEmailIdentities",
"ses:ListEmailTemplates",
"shield:ListProtectionGroups",
"shield:ListProtections",
"signer:ListSigningProfiles",
"sns:ListTopics",
"sqs:ListQueues",
"ssm-incidents:ListResponsePlans",
"ssm:DescribeInstanceInformation",
"ssm:DescribeMaintenanceWindowTargets",
"ssm:DescribeMaintenanceWindowTasks",
"ssm:DescribeMaintenanceWindows",
"ssm:DescribeParameters",
"ssm:DescribeSessions",
"ssm:ListAssociations",
"ssm:ListDocuments",
"ssm:ListResourceDataSync",
"states:ListActivities",
"states:ListStateMachines",
"storagegateway:ListFileShares",
"storagegateway:ListGateways",
"swf:ListDomains",
"synthetics:DescribeCanaries",
"synthetics:ListGroups",
"transfer:ListAgreements",
"transfer:ListCertificates",
"transfer:ListConnectors",
"transfer:ListProfiles",
"transfer:ListServers",
"transfer:ListUsers",
"transfer:ListWorkflows",
"verifiedpermissions:ListPolicyStores",
"vpc-lattice:ListAccessLogSubscriptions",
"vpc-lattice:ListListeners",
"vpc-lattice:ListRules",
"vpc-lattice:ListServiceNetworkServiceAssociations",
"vpc-lattice:ListServiceNetworks",
"vpc-lattice:ListServices",
"vpc-lattice:ListTagsForResource",
"vpc-lattice:ListTargetGroups",
"wafv2:ListIPSets",
"wafv2:ListRegexPatternSets",
"wafv2:ListRuleGroups",
"wafv2:ListWebACLs",
"wellarchitected:ListWorkloads",
"wisdom:ListAssistantAssociations",
"wisdom:ListAssistants",
"wisdom:ListContents",
"wisdom:ListKnowledgeBases",
"workspaces-web:ListPortals",
"workspaces:DescribeConnectionAliases",
"workspaces:DescribeWorkspaces",
"xray:GetSamplingRules"
],
"Resource": "*"
},
{
"Sid": "PermissionsForReadGetResources",
"Effect": "Allow",
"Action": [
"access-analyzer:GetArchiveRule",
"access-analyzer:ListTagsForResource",
"account-access:GetEntitlement",
"account-access:ListEntitlements",
"account:GetAlternateContact",
"airflow:GetEnvironment",
"airflow:ListTagsForResource",
"amplify:GetApp",
"amplify:GetBranch",
"amplifyuibuilder:ExportThemes",
"amplifyuibuilder:GetTheme",
"amplifyuibuilder:ListThemes",
"app-integrations:ListEventIntegrationAssociations",
"appconfig:GetApplication",
"appconfig:GetConfigurationProfile",
"appconfig:GetDeployment",
"appconfig:GetDeploymentStrategy",
"appconfig:GetEnvironment",
"appconfig:GetExperimentDefinition",
"appconfig:GetExtensionAssociation",
"appconfig:ListConfigurationProfiles",
"appconfig:ListDeployments",
"appconfig:ListExperimentDefinitions",
"appconfig:ListHostedConfigurationVersions",
"appconfig:ListTagsForResource",
"appflow:DescribeConnectorProfiles",
"application-autoscaling:DescribeScalingPolicies",
"apprunner:ListTagsForResource",
"appstream:DescribeDirectoryConfigs",
"aps:DescribeAlertManagerDefinition",
"aps:DescribeLoggingConfiguration",
"aps:DescribeWorkspace",
"athena:GetDataCatalog",
"athena:GetPreparedStatement",
"athena:GetWorkGroup",
"athena:ListPreparedStatements",
"athena:ListTagsForResource",
"autoscaling-plans:DescribeScalingPlanResources",
"autoscaling-plans:DescribeScalingPlans",
"autoscaling-plans:GetScalingPlanResourceForecastData",
"autoscaling:DescribeLaunchConfigurations",
"autoscaling:DescribeLifecycleHooks",
"autoscaling:DescribeTags",
"autoscaling:DescribeWarmPool",
"b2bi:GetTransformer",
"b2bi:ListTransformers",
"backup-gateway:ListVirtualMachines",
"backup:DescribeBackupVault",
"backup:DescribeFramework",
"backup:DescribeProtectedResource",
"backup:DescribeRecoveryPoint",
"backup:DescribeReportPlan",
"backup:GetBackupPlan",
"backup:GetBackupSelection",
"backup:GetBackupVaultAccessPolicy",
"backup:GetBackupVaultNotifications",
"backup:GetTieringConfiguration",
"backup:ListBackupSelections",
"backup:ListFrameworks",
"backup:ListTags",
"backup:ListTieringConfigurations",
"batch:DescribeSchedulingPolicies",
"batch:ListTagsForResource",
"bedrock-agentcore:GetAgentRuntime",
"bedrock-agentcore:GetBrowserProfile",
"bedrock-agentcore:GetPaymentCredentialProvider",
"bedrock-agentcore:GetPolicyGenerationSummary",
"bedrock-agentcore:ListBrowserProfiles",
"bedrock-agentcore:ListPaymentCredentialProviders",
"bedrock-agentcore:ListPolicyGenerationSummaries",
"bedrock-agentcore:ListTagsForResource",
"bedrock:GetAgent",
"bedrock:GetAgentActionGroup",
"bedrock:GetAgentCollaborator",
"bedrock:GetAgentKnowledgeBase",
"bedrock:GetFlowAlias",
"bedrock:GetGuardrail",
"bedrock:GetKnowledgeBase",
"bedrock:GetPromptRouter",
"bedrock:ListAgentActionGroups",
"bedrock:ListAgentCollaborators",
"bedrock:ListAgentKnowledgeBases",
"bedrock:ListTagsForResource",
"billingconductor:ListAccountAssociations",
"billingconductor:ListBillingGroups",
"billingconductor:ListCustomLineItems",
"billingconductor:ListPricingPlans",
"billingconductor:ListPricingRules",
"billingconductor:ListPricingRulesAssociatedToPricingPlan",
"billingconductor:ListTagsForResource",
"braket:ListTagsForResource",
"braket:SearchSpendingLimits",
"budgets:DescribeBudgetAction",
"budgets:DescribeBudgetActionsForBudget",
"cases:BatchGetCaseRule",
"cases:BatchGetField",
"cases:GetDomain",
"cases:GetLayout",
"cases:GetTemplate",
"cases:ListCaseRules",
"cases:ListDomains",
"cases:ListFields",
"cases:ListLayouts",
"cases:ListTemplates",
"cassandra:Select",
"chime:DescribeAppInstanceBot",
"chime:DescribeAppInstanceUser",
"chime:DescribeChannelFlow",
"chime:ListChannelFlows",
"cleanrooms-ml:ListConfiguredModelAlgorithms",
"cleanrooms:GetAnalysisTemplate",
"cleanrooms:GetCollaboration",
"cleanrooms:GetConfiguredAudienceModelAssociation",
"cleanrooms:ListMembers",
"cleanrooms:ListTagsForResource",
"cloud9:DescribeEnvironmentMemberships",
"cloud9:DescribeEnvironments",
"cloud9:ListTagsForResource",
"cloudformation:DescribeChangeSet",
"cloudformation:GetResource",
"cloudformation:ListChangeSets",
"cloudformation:ListStackResources",
"cloudfront:GetDistribution",
"cloudfront:GetDistributionConfig",
"cloudfront:GetFunction",
"cloudfront:GetResponseHeadersPolicy",
"cloudtrail:DescribeTrails",
"cloudtrail:GetChannel",
"cloudtrail:GetEventConfiguration",
"cloudtrail:GetEventDataStore",
"cloudtrail:GetEventSelectors",
"cloudtrail:GetInsightSelectors",
"cloudtrail:GetTrail",
"cloudtrail:GetTrailStatus",
"cloudwatch:DescribeAlarmsForMetric",
"cloudwatch:DescribeAnomalyDetectors",
"cloudwatch:GetAlarmMuteRule",
"cloudwatch:GetDashboard",
"cloudwatch:GetMetricStream",
"cloudwatch:ListTagsForResource",
"codeartifact:ListPackages",
"codeartifact:ListPackageVersions",
"codebuild:BatchGetReportGroups",
"codebuild:ListReportGroups",
"codebuild:ListSourceCredentials",
"codecommit:GetRepository",
"codecommit:GetRepositoryTriggers",
"codecommit:ListTagsForResource",
"codeconnections:ListTagsForResource",
"codedeploy:GetDeployment",
"codedeploy:GetDeploymentGroup",
"codedeploy:ListDeploymentGroups",
"codedeploy:ListDeployments",
"codepipeline:GetPipeline",
"codepipeline:GetPipelineState",
"codestar-connections:ListTagsForResource",
"cognito-identity:GetIdentityPoolRoles",
"cognito-identity:GetPrincipalTagAttributeMap",
"cognito-identity:ListTagsForResource",
"cognito-idp:DescribeIdentityProvider",
"cognito-idp:DescribeResourceServer",
"cognito-idp:DescribeUserPoolDomain",
"cognito-idp:GetGroup",
"cognito-idp:ListGroups",
"cognito-idp:ListIdentityProviders",
"cognito-idp:ListResourceServers",
"cognito-idp:ListTagsForResource",
"cognito-idp:ListUserPoolClients",
"config:DescribeAggregationAuthorizations",
"connect:DescribeDataTable",
"connect:DescribeHoursOfOperation",
"connect:DescribeMetric",
"connect:DescribeNotification",
"connect:DescribeQueue",
"connect:DescribeWorkspace",
"connect:ListDataTables",
"connect:ListHoursOfOperationOverrides",
"connect:ListInstances",
"connect:ListMetrics",
"connect:ListNotifications",
"connect:ListQuickConnects",
"connect:ListSecurityProfileAIAgents",
"connect:ListUserProficiencies",
"connect:ListUsers",
"connect:ListWorkspaceMedia",
"connect:ListWorkspacePages",
"connect:ListWorkspaces",
"connect:SearchWorkspaceAssociations",
"databrew:DescribeDataset",
"databrew:DescribeJob",
"databrew:DescribeProject",
"databrew:DescribeRecipe",
"databrew:DescribeRuleset",
"databrew:DescribeSchedule",
"databrew:ListJobs",
"databrew:ListProjects",
"databrew:ListRecipeVersions",
"databrew:ListSchedules",
"databrew:ListTagsForResource",
"dataexchange:GetRevision",
"dataexchange:ListTagsForResource",
"datasync:DescribeAgent",
"datasync:DescribeLocationEfs",
"datasync:DescribeLocationFsxLustre",
"datasync:DescribeLocationFsxWindows",
"datasync:DescribeLocationHdfs",
"datasync:DescribeLocationNfs",
"datasync:DescribeLocationS3",
"datasync:DescribeLocationSmb",
"datasync:DescribeTask",
"datasync:ListAgents",
"datasync:ListTagsForResource",
"datasync:ListTasks",
"dax:DescribeParameterGroups",
"dax:DescribeParameters",
"dax:DescribeSubnetGroups",
"dax:ListTags",
"deadline:GetBudget",
"deadline:GetJob",
"deadline:ListBudgets",
"deadline:ListJobs",
"deadline:SearchJobs",
"detective:DescribeOrganizationConfiguration",
"detective:ListTagsForResource",
"devicefarm:GetInstanceProfile",
"devicefarm:GetNetworkProfile",
"devicefarm:GetProject",
"devicefarm:GetTestGridProject",
"devicefarm:ListNetworkProfiles",
"devicefarm:ListTagsForResource",
"devops-guru:GetResourceCollection",
"directconnect:DescribeLags",
"dlm:GetLifecyclePolicy",
"dlm:ListTagsForResource",
"dms:DescribeReplicationTaskAssessmentRuns",
"ds:DescribeDirectories",
"ds:DescribeDomainControllers",
"ds:DescribeEventTopics",
"ds:ListLogSubscriptions",
"ds:ListTagsForResource",
"dynamodb:DescribeContinuousBackups",
"dynamodb:DescribeContributorInsights",
"dynamodb:DescribeGlobalTableSettings",
"dynamodb:DescribeKinesisStreamingDestination",
"dynamodb:DescribeLimits",
"dynamodb:DescribeTable",
"dynamodb:DescribeTableReplicaAutoScaling",
"dynamodb:DescribeTimeToLive",
"dynamodb:GetResourcePolicy",
"dynamodb:ListTagsOfResource",
"ec2:DescribeAvailabilityZones",
"ec2:DescribeClientVpnTargetNetworks",
"ec2:DescribeInstanceAttribute",
"ec2:DescribeInstanceCreditSpecifications",
"ec2:DescribeLaunchTemplateVersions",
"ec2:DescribeRouteServerEndpoints",
"ec2:DescribeRouteServerPeers",
"ec2:DescribeRouteServers",
"ec2:DescribeTransitGatewayConnects",
"ec2:DescribeVolumeAttribute",
"ec2:GetEbsEncryptionByDefault",
"ec2:GetInstanceTypesFromInstanceRequirements",
"ec2:GetIpamPoolAllocations",
"ec2:GetIpamPoolCidrs",
"ec2:GetManagedPrefixListEntries",
"ec2:GetNetworkInsightsAccessScopeAnalysisFindings",
"ec2:GetNetworkInsightsAccessScopeContent",
"ecr-public:GetRepositoryCatalogData",
"ecr-public:GetRepositoryPolicy",
"ecr-public:ListTagsForResource",
"ecr:BatchGetRepositoryScanningConfiguration",
"ecr:DescribePullThroughCacheRules",
"ecr:DescribeRegistry",
"ecr:GetLifecyclePolicy",
"ecr:GetRegistryPolicy",
"ecr:GetRepositoryPolicy",
"ecr:ListTagsForResource",
"ecs:DescribeClusters",
"ecs:DescribeExpressGatewayService",
"ecs:DescribeTaskDefinition",
"ecs:DescribeTaskSets",
"ecs:ListTagsForResource",
"ecs:ListTaskDefinitionFamilies",
"eks:DescribeCluster",
"eks:ListCapabilities",
"eks:ListTagsForResource",
"elasticache:DescribeCacheSecurityGroups",
"elasticbeanstalk:DescribeConfigurationSettings",
"elasticbeanstalk:ListTagsForResource",
"elasticfilesystem:DescribeBackupPolicy",
"elasticfilesystem:DescribeFileSystemPolicy",
"elasticfilesystem:DescribeLifecycleConfiguration",
"elasticfilesystem:DescribeMountTargets",
"elasticfilesystem:DescribeMountTargetSecurityGroups",
"elasticfilesystem:DescribeReplicationConfigurations",
"elasticfilesystem:DescribeTags",
"elasticloadbalancing:DescribeCapacityReservation",
"elasticloadbalancing:DescribeLoadBalancerAttributes",
"elasticloadbalancing:DescribeLoadBalancerPolicies",
"elasticloadbalancing:DescribeLoadBalancerPolicyTypes",
"elasticloadbalancing:DescribeTags",
"elasticloadbalancing:DescribeTargetGroupAttributes",
"elasticloadbalancing:DescribeTargetHealth",
"elasticmapreduce:DescribeSecurityConfiguration",
"elasticmapreduce:DescribeStudio",
"elasticmapreduce:GetBlockPublicAccessConfiguration",
"elasticmapreduce:GetManagedScalingPolicy",
"elasticmapreduce:GetStudioSessionMapping",
"elasticmapreduce:ListInstanceFleets",
"elasticmapreduce:ListInstanceGroups",
"elasticmapreduce:ListInstances",
"elasticmapreduce:ListSecurityConfigurations",
"elasticmapreduce:ListStudios",
"elasticmapreduce:ListStudioSessionMappings",
"elemental-inference:ListTagsForResource",
"emr-containers:DescribeVirtualCluster",
"emr-containers:ListVirtualClusters",
"emr-serverless:GetApplication",
"emr-serverless:GetJobRun",
"emr-serverless:ListJobRuns",
"es:DescribeDomain",
"es:DescribeDomains",
"es:DescribeElasticsearchDomain",
"es:DescribeElasticsearchDomains",
"es:GetCompatibleElasticsearchVersions",
"es:GetCompatibleVersions",
"es:ListDomainsForPackage",
"es:ListTags",
"es:ListVpcEndpointsForDomain",
"events:DescribeApiDestination",
"events:DescribeArchive",
"events:DescribeConnection",
"events:DescribeEndpoint",
"events:DescribeEventBus",
"events:DescribeRule",
"events:ListTagsForResource",
"events:ListTargetsByRule",
"firehose:ListTagsForDeliveryStream",
"fis:GetExperiment",
"fis:GetExperimentTemplate",
"fis:ListTagsForResource",
"fms:GetNotificationChannel",
"fms:GetPolicy",
"fms:ListTagsForResource",
"forecast:DescribeDataset",
"forecast:DescribeDatasetGroup",
"forecast:ListTagsForResource",
"frauddetector:GetListElements",
"fsx:DescribeDataRepositoryAssociations",
"fsx:DescribeS3AccessPointAttachments",
"fsx:DescribeSnapshots",
"fsx:DescribeStorageVirtualMachines",
"gamelift:DescribeAlias",
"gamelift:DescribeBuild",
"gamelift:DescribeContainerGroupDefinition",
"gamelift:DescribeFleetAttributes",
"gamelift:DescribeFleetCapacity",
"gamelift:DescribeFleetLocationAttributes",
"gamelift:DescribeFleetLocationCapacity",
"gamelift:DescribeFleetPortSettings",
"gamelift:DescribeGameServerGroup",
"gamelift:DescribeGameSessionQueues",
"gamelift:DescribeMatchmakingConfigurations",
"gamelift:DescribeMatchmakingRuleSets",
"gamelift:DescribeRuntimeConfiguration",
"gamelift:DescribeScript",
"gamelift:DescribeVpcPeeringAuthorizations",
"gamelift:DescribeVpcPeeringConnections",
"gamelift:ListBuilds",
"gamelift:ListContainerGroupDefinitions",
"gamelift:ListLocations",
"gamelift:ListScripts",
"gamelift:ListTagsForResource",
"gamelift:ValidateMatchmakingRuleSet",
"geo:DescribeGeofenceCollection",
"geo:DescribeMap",
"geo:DescribePlaceIndex",
"geo:DescribeRouteCalculator",
"geo:DescribeTracker",
"geo:ListGeofenceCollections",
"geo:ListRouteCalculators",
"geo:ListTrackerConsumers",
"globalaccelerator:DescribeAccelerator",
"globalaccelerator:DescribeAcceleratorAttributes",
"globalaccelerator:DescribeEndpointGroup",
"globalaccelerator:DescribeListener",
"globalaccelerator:ListTagsForResource",
"glue:BatchGetDevEndpoints",
"glue:BatchGetJobs",
"glue:BatchGetWorkflows",
"glue:DescribeIntegrations",
"glue:GetCatalog",
"glue:GetCatalogs",
"glue:GetClassifier",
"glue:GetClassifiers",
"glue:GetCrawler",
"glue:GetDatabase",
"glue:GetDataCatalogEncryptionSettings",
"glue:GetDevEndpoint",
"glue:GetDevEndpoints",
"glue:GetMLTransform",
"glue:GetMLTransforms",
"glue:GetPartition",
"glue:GetPartitions",
"glue:GetSecurityConfiguration",
"glue:GetSecurityConfigurations",
"glue:GetTable",
"glue:GetWorkflow",
"glue:ListBlueprints",
"glue:ListCrawlers",
"glue:ListDevEndpoints",
"glue:ListJobs",
"glue:ListWorkflows",
"grafana:DescribeWorkspace",
"grafana:DescribeWorkspaceAuthentication",
"grafana:DescribeWorkspaceConfiguration",
"grafana:ListTagsForResource",
"greengrass:DescribeComponent",
"greengrass:ListTagsForResource",
"groundstation:GetConfig",
"groundstation:GetDataflowEndpointGroup",
"groundstation:GetMissionProfile",
"groundstation:ListConfigs",
"groundstation:ListMissionProfiles",
"groundstation:ListTagsForResource",
"guardduty:DescribePublishingDestination",
"guardduty:GetAdministratorAccount",
"guardduty:GetDetector",
"guardduty:GetFilter",
"guardduty:GetFindings",
"guardduty:GetIPSet",
"guardduty:GetMasterAccount",
"guardduty:GetMemberDetectors",
"guardduty:GetMembers",
"guardduty:GetThreatIntelSet",
"guardduty:ListFindings",
"guardduty:ListMembers",
"guardduty:ListOrganizationAdminAccounts",
"guardduty:ListTagsForResource",
"healthlake:DescribeFHIRDatastore",
"healthlake:ListDataTransformationProfiles",
"healthlake:ListTagsForResource",
"iam:GenerateCredentialReport",
"iam:GetAccountAuthorizationDetails",
"iam:GetAccountPasswordPolicy",
"iam:GetAccountSummary",
"iam:GetInstanceProfile",
"iam:GetOpenIDConnectProvider",
"iam:GetPolicy",
"iam:GetPolicyVersion",
"iam:GetRole",
"iam:GetRolePolicy",
"iam:GetSAMLProvider",
"iam:GetServerCertificate",
"iam:ListAttachedRolePolicies",
"iam:ListEntitiesForPolicy",
"iam:ListGroupsForUser",
"iam:ListInstanceProfilesForRole",
"iam:ListInstanceProfileTags",
"iam:ListMFADeviceTags",
"iam:ListPolicyVersions",
"iam:ListRolePolicies",
"imagebuilder:GetComponent",
"imagebuilder:GetContainerRecipe",
"imagebuilder:GetDistributionConfiguration",
"imagebuilder:GetImage",
"imagebuilder:GetImagePipeline",
"imagebuilder:GetImageRecipe",
"imagebuilder:GetInfrastructureConfiguration",
"inspector2:BatchGetAccountStatus",
"inspector2:GetDelegatedAdminAccount",
"inspector2:ListMembers",
"internetmonitor:GetMonitor",
"internetmonitor:ListMonitors",
"invoicing:ListProcurementPortalPreferences",
"invoicing:ListTagsForResource",
"iot:DescribeAccountAuditConfiguration",
"iot:DescribeAuthorizer",
"iot:DescribeBillingGroup",
"iot:DescribeCACertificate",
"iot:DescribeCertificate",
"iot:DescribeCustomMetric",
"iot:DescribeDimension",
"iot:DescribeDomainConfiguration",
"iot:DescribeFleetMetric",
"iot:DescribeJob",
"iot:DescribeJobTemplate",
"iot:DescribeMitigationAction",
"iot:DescribeProvisioningTemplate",
"iot:DescribeRoleAlias",
"iot:DescribeScheduledAudit",
"iot:DescribeSecurityProfile",
"iot:DescribeStream",
"iot:DescribeThing",
"iot:GetPolicy",
"iot:GetTopicRuleDestination",
"iot:ListDomainConfigurations",
"iot:ListSecurityProfilesForTarget",
"iot:ListTagsForResource",
"iot:ListTargetsForSecurityProfile",
"iot:ListV2LoggingLevels",
"iot:ValidateSecurityProfileBehaviors",
"iotfleetwise:GetCampaign",
"iotfleetwise:GetModelManifest",
"iotfleetwise:ListCampaigns",
"iotfleetwise:ListFleets",
"iotfleetwise:ListModelManifestNodes",
"iotfleetwise:ListTagsForResource",
"iotsitewise:DescribeAccessPolicy",
"iotsitewise:DescribeAsset",
"iotsitewise:DescribeAssetModel",
"iotsitewise:DescribeDashboard",
"iotsitewise:DescribeGateway",
"iotsitewise:DescribePortal",
"iotsitewise:DescribeProject",
"iotsitewise:ListAssetModelCompositeModels",
"iotsitewise:ListAssetModelProperties",
"iotsitewise:ListAssetProperties",
"iotsitewise:ListAssociatedAssets",
"iotsitewise:ListProjectAssets",
"iotsitewise:ListTagsForResource",
"iottwinmaker:GetComponentType",
"iottwinmaker:GetEntity",
"iottwinmaker:GetScene",
"iottwinmaker:GetSyncJob",
"iottwinmaker:GetWorkspace",
"iottwinmaker:ListScenes",
"iottwinmaker:ListTagsForResource",
"iotwireless:GetDestination",
"iotwireless:GetDeviceProfile",
"iotwireless:GetFuotaTask",
"iotwireless:GetMulticastGroup",
"iotwireless:GetNetworkAnalyzerConfiguration",
"iotwireless:GetServiceProfile",
"iotwireless:GetWirelessDevice",
"iotwireless:GetWirelessGateway",
"iotwireless:GetWirelessGatewayTaskDefinition",
"iotwireless:ListNetworkAnalyzerConfigurations",
"ivs:GetComposition",
"ivs:GetPlaybackKeyPair",
"ivs:GetRecordingConfiguration",
"ivs:ListCompositions",
"ivs:ListPlaybackKeyPairs",
"ivs:ListTagsForResource",
"kafka:DescribeCluster",
"kafka:DescribeClusterV2",
"kafka:DescribeConfiguration",
"kafka:DescribeConfigurationRevision",
"kafka:DescribeVpcConnection",
"kafka:GetClusterPolicy",
"kafka:ListClustersV2",
"kafka:ListScramSecrets",
"kafka:ListTagsForResource",
"kafka:ListVpcConnections",
"kafkaconnect:DescribeConnector",
"kafkaconnect:DescribeCustomPlugin",
"kafkaconnect:DescribeWorkerConfiguration",
"kafkaconnect:ListConnectors",
"kafkaconnect:ListCustomPlugins",
"kafkaconnect:ListTagsForResource",
"kendra-ranking:DescribeRescoreExecutionPlan",
"kendra-ranking:ListTagsForResource",
"kendra:DescribeIndex",
"kendra:ListTagsForResource",
"kinesis:DescribeStreamConsumer",
"kinesis:DescribeStreamSummary",
"kinesis:GetResourcePolicy",
"kinesis:ListStreamConsumers",
"kinesis:ListTagsForResource",
"kinesis:ListTagsForStream",
"kinesisanalytics:DescribeApplication",
"kinesisanalytics:ListTagsForResource",
"kinesisvideo:DescribeSignalingChannel",
"kinesisvideo:DescribeStream",
"kinesisvideo:ListTagsForResource",
"kinesisvideo:ListTagsForStream",
"kms:DescribeKey",
"kms:GetKeyPolicy",
"kms:GetKeyRotationStatus",
"kms:ListAliases",
"kms:ListResourceTags",
"lakeformation:DescribeLakeFormationIdentityCenterConfiguration",
"lakeformation:DescribeResource",
"lakeformation:GetDataLakeSettings",
"lakeformation:ListPermissions",
"lakeformation:ListResources",
"lambda:GetAlias",
"lambda:GetCodeSigningConfig",
"lambda:GetEventSourceMapping",
"lambda:GetFunction",
"lambda:GetFunctionCodeSigningConfig",
"lambda:GetFunctionConfiguration",
"lambda:GetFunctionEventInvokeConfig",
"lambda:GetFunctionRecursionConfig",
"lambda:GetFunctionScalingConfig",
"lambda:GetFunctionUrlConfig",
"lambda:GetLayerVersion",
"lambda:GetLayerVersionPolicy",
"lambda:GetPolicy",
"lambda:GetProvisionedConcurrencyConfig",
"lambda:GetRuntimeManagementConfig",
"lambda:ListAliases",
"lambda:ListFunctionEventInvokeConfigs",
"lambda:ListFunctionUrlConfigs",
"lambda:ListTags",
"launchwizard:GetDeployment",
"lex:DescribeBot",
"lex:DescribeBotAlias",
"lex:DescribeBotVersion",
"lex:DescribeResourcePolicy",
"lex:ListBotLocales",
"lex:ListBotVersions",
"lex:ListTagsForResource",
"license-manager:GetGrant",
"license-manager:GetLicense",
"license-manager:GetLicenseAssetRuleset",
"license-manager:ListLicenseAssetRulesets",
"license-manager:ListLicenses",
"license-manager:ListReceivedGrants",
"lightsail:GetActiveNames",
"lightsail:GetDisk",
"lightsail:GetDistributions",
"lightsail:GetDomain",
"lightsail:GetDomains",
"lightsail:GetInstance",
"lightsail:GetInstanceSnapshots",
"lightsail:GetInstances",
"lightsail:GetKeyPair",
"lightsail:GetKeyPairs",
"lightsail:GetLoadBalancer",
"lightsail:GetLoadBalancerTlsCertificates",
"lightsail:GetLoadBalancers",
"lightsail:GetOperations",
"lightsail:GetRelationalDatabase",
"lightsail:GetRelationalDatabaseParameters",
"lightsail:GetRelationalDatabases",
"lightsail:GetRelationalDatabaseSnapshot",
"lightsail:GetRelationalDatabaseSnapshots",
"lightsail:GetStaticIp",
"lightsail:GetStaticIps",
"logs:DescribeAccountPolicies",
"logs:DescribeDeliveries",
"logs:DescribeDeliveryDestinations",
"logs:DescribeDeliverySources",
"logs:DescribeIndexPolicies",
"logs:DescribeLogStreams",
"logs:DescribeMetricFilters",
"logs:DescribeQueryDefinitions",
"logs:DescribeResourcePolicies",
"logs:GetDataProtectionPolicy",
"logs:GetDelivery",
"logs:GetDeliveryDestination",
"logs:GetDeliveryDestinationPolicy",
"logs:GetDeliverySource",
"logs:GetIntegration",
"logs:GetLogAnomalyDetector",
"logs:GetLogDelivery",
"logs:GetScheduledQuery",
"logs:ListIntegrations",
"logs:ListLogAnomalyDetectors",
"logs:ListLogDeliveries",
"logs:ListTagsLogGroup",
"lookoutequipment:DescribeInferenceScheduler",
"lookoutequipment:ListTagsForResource",
"lookoutmetrics:DescribeMetricSet",
"m2:GetApplication",
"m2:GetEnvironment",
"m2:ListApplications",
"m2:ListTagsForResource",
"macie2:DescribeOrganizationConfiguration",
"macie2:GetAllowList",
"macie2:GetAutomatedDiscoveryConfiguration",
"macie2:GetClassificationExportConfiguration",
"macie2:GetCustomDataIdentifier",
"macie2:GetFindingsFilter",
"macie2:GetFindingsPublicationConfiguration",
"macie2:GetMacieSession",
"macie2:GetMember",
"macie2:ListAutomatedDiscoveryAccounts",
"macie2:ListTagsForResource",
"managedblockchain:GetMember",
"managedblockchain:GetNetwork",
"managedblockchain:GetNode",
"managedblockchain:ListInvitations",
"managedblockchain:ListMembers",
"managedblockchain:ListNodes",
"mediaconnect:DescribeBridge",
"mediaconnect:DescribeFlow",
"mediaconnect:DescribeGateway",
"mediaconnect:GetRouterInput",
"mediaconnect:GetRouterNetworkInterface",
"mediaconnect:ListBridges",
"mediaconnect:ListRouterInputs",
"mediaconnect:ListRouterNetworkInterfaces",
"mediaconnect:ListRouterOutputs",
"mediaconnect:ListTagsForResource",
"mediaconvert:GetPreset",
"mediaconvert:GetQueue",
"medialive:DescribeChannelPlacementGroup",
"medialive:DescribeInput",
"medialive:DescribeMultiplex",
"medialive:DescribeMultiplexProgram",
"medialive:DescribeNode",
"medialive:DescribeSdiSource",
"medialive:GetCloudWatchAlarmTemplate",
"medialive:GetCloudWatchAlarmTemplateGroup",
"medialive:GetEventBridgeRuleTemplate",
"medialive:GetEventBridgeRuleTemplateGroup",
"medialive:GetSignalMap",
"medialive:ListChannelPlacementGroups",
"medialive:ListChannels",
"medialive:ListCloudWatchAlarmTemplateGroups",
"medialive:ListCloudWatchAlarmTemplates",
"medialive:ListEventBridgeRuleTemplateGroups",
"medialive:ListEventBridgeRuleTemplates",
"medialive:ListInputs",
"medialive:ListMultiplexPrograms",
"medialive:ListMultiplexes",
"medialive:ListNetworks",
"medialive:ListNodes",
"medialive:ListSdiSources",
"medialive:ListSignalMaps",
"medialive:ListTagsForResource",
"mediapackage-vod:DescribeAsset",
"mediapackage-vod:DescribePackagingConfiguration",
"mediapackage-vod:DescribePackagingGroup",
"mediapackage-vod:ListTagsForResource",
"mediapackagev2:GetChannel",
"mediapackagev2:GetChannelGroup",
"mediapackagev2:GetChannelPolicy",
"mediapackagev2:GetOriginEndpoint",
"mediapackagev2:GetOriginEndpointPolicy",
"mediapackagev2:ListChannelGroups",
"mediapackagev2:ListChannels",
"mediapackagev2:ListOriginEndpoints",
"mediatailor:DescribeChannel",
"mediatailor:DescribeLiveSource",
"mediatailor:DescribeSourceLocation",
"mediatailor:DescribeVodSource",
"mediatailor:GetChannelPolicy",
"mediatailor:GetPlaybackConfiguration",
"medical-imaging:GetDatastore",
"medical-imaging:ListDatastores",
"medical-imaging:ListTagsForResource",
"memorydb:DescribeMultiRegionClusters",
"memorydb:DescribeParameters",
"memorydb:ListTags",
"mgn:DescribeJobs",
"mgn:GetNetworkMigrationDefinition",
"mgn:ListApplications",
"mgn:ListConnectors",
"mgn:ListExports",
"mgn:ListImports",
"mgn:ListNetworkMigrationDefinitions",
"mgn:ListTagsForResource",
"mgn:ListWaves",
"mobiletargeting:GetApp",
"mobiletargeting:GetApplicationSettings",
"mobiletargeting:GetCampaign",
"mobiletargeting:GetEmailChannel",
"mobiletargeting:GetEmailTemplate",
"mobiletargeting:GetEventStream",
"mobiletargeting:GetInAppTemplate",
"mobiletargeting:GetSegment",
"mobiletargeting:ListTagsForResource",
"mpa:GetApprovalTeam",
"mpa:GetIdentitySource",
"mpa:ListApprovalTeams",
"mpa:ListIdentitySources",
"mpa:ListTagsForResource",
"mq:DescribeBroker",
"mq:DescribeConfiguration",
"mq:ListTags",
"neptune-graph:GetGraph",
"neptune-graph:GetGraphSnapshot",
"neptune-graph:GetPrivateGraphEndpoint",
"neptune-graph:ListGraphSnapshots",
"neptune-graph:ListPrivateGraphEndpoints",
"neptune-graph:ListTagsForResource",
"network-firewall:DescribeFirewall",
"network-firewall:DescribeFirewallPolicy",
"network-firewall:DescribeLoggingConfiguration",
"network-firewall:DescribeRuleGroup",
"network-firewall:DescribeTLSInspectionConfiguration",
"network-firewall:DescribeVpcEndpointAssociation",
"network-firewall:ListTagsForResource",
"network-firewall:ListTLSInspectionConfigurations",
"network-firewall:ListVpcEndpointAssociations",
"networkmanager:GetConnectAttachment",
"networkmanager:GetConnectPeer",
"networkmanager:GetCoreNetwork",
"networkmanager:GetCoreNetworkPolicy",
"networkmanager:GetCustomerGatewayAssociations",
"networkmanager:GetDirectConnectGatewayAttachment",
"networkmanager:GetLinkAssociations",
"networkmanager:GetSiteToSiteVpnAttachment",
"networkmanager:GetSites",
"networkmanager:GetTransitGatewayPeering",
"networkmanager:GetTransitGatewayRegistrations",
"networkmanager:GetTransitGatewayRouteTableAttachment",
"networkmanager:GetVpcAttachment",
"networkmanager:ListConnectPeers",
"networkmanager:ListPeerings",
"networkmanager:ListTagsForResource",
"networkmonitor:GetProbe",
"notifications-contacts:GetEmailContact",
"notifications-contacts:ListEmailContacts",
"notifications-contacts:ListTagsForResource",
"notifications:GetEventRule",
"notifications:GetNotificationConfiguration",
"notifications:ListEventRules",
"notifications:ListManagedNotificationChannelAssociations",
"notifications:ListNotificationConfigurations",
"notifications:ListNotificationHubs",
"notifications:ListOrganizationalUnits",
"notifications:ListTagsForResource",
"nova-act:GetWorkflowDefinition",
"nova-act:ListWorkflowDefinitions",
"oam:GetLink",
"oam:GetSink",
"oam:GetSinkPolicy",
"oam:ListLinks",
"oam:ListTagsForResource",
"odb:GetAutonomousDatabase",
"odb:GetCloudAutonomousVmCluster",
"odb:GetCloudExadataInfrastructure",
"odb:GetCloudVmCluster",
"odb:GetDbNode",
"odb:GetOdbNetwork",
"odb:GetOdbPeeringConnection",
"odb:ListAutonomousDatabases",
"odb:ListCloudAutonomousVmClusters",
"odb:ListCloudExadataInfrastructures",
"odb:ListCloudVmClusters",
"odb:ListDbNodes",
"odb:ListDbServers",
"odb:ListOdbNetworks",
"odb:ListOdbPeeringConnections",
"odb:ListTagsForResource",
"omics:GetAnnotationStore",
"omics:GetConfiguration",
"omics:GetReferenceStore",
"omics:GetRun",
"omics:GetRunCache",
"omics:GetRunGroup",
"omics:GetS3AccessPolicy",
"omics:GetSequenceStore",
"omics:GetVariantStore",
"omics:GetWorkflow",
"omics:GetWorkflowVersion",
"omics:ListAnnotationStores",
"omics:ListConfigurations",
"omics:ListReadSets",
"omics:ListReferences",
"omics:ListRunCaches",
"omics:ListRuns",
"omics:ListSequenceStores",
"omics:ListTagsForResource",
"omics:ListVariantStores",
"omics:ListWorkflowVersions",
"organizations:DescribeEffectivePolicy",
"organizations:DescribeOrganization",
"organizations:DescribeOrganizationalUnit",
"organizations:DescribePolicy",
"organizations:ListAccountsForParent",
"organizations:ListDelegatedServicesForAccount",
"organizations:ListParents",
"organizations:ListPoliciesForTarget",
"organizations:ListTagsForResource",
"organizations:ListTargetsForPolicy",
"osis:GetPipeline",
"osis:GetResourcePolicy",
"osis:ListPipelines",
"osis:ListTagsForResource",
"outposts:GetOutpost",
"outposts:GetSite",
"outposts:ListOutposts",
"panorama:DescribeApplicationInstance",
"panorama:DescribeDevice",
"panorama:DescribePackageVersion",
"panorama:ListApplicationInstances",
"panorama:ListNodes",
"panorama:ListTagsForResource",
"partnercentral:GetBenefitApplication",
"partnercentral:ListTagsForResource",
"payment-cryptography:GetAlias",
"payment-cryptography:GetKey",
"payment-cryptography:ListAliases",
"payment-cryptography:ListKeys",
"payment-cryptography:ListTagsForResource",
"pca-connector-ad:GetConnector",
"pca-connector-ad:GetDirectoryRegistration",
"pca-connector-ad:GetServicePrincipalName",
"pca-connector-ad:GetTemplate",
"pca-connector-ad:GetTemplateGroupAccessControlEntry",
"pca-connector-ad:ListConnectors",
"pca-connector-ad:ListDirectoryRegistrations",
"pca-connector-ad:ListServicePrincipalNames",
"pca-connector-ad:ListTagsForResource",
"pca-connector-ad:ListTemplateGroupAccessControlEntries",
"pca-connector-ad:ListTemplates",
"pca-connector-scep:GetChallengeMetadata",
"pca-connector-scep:GetConnector",
"pca-connector-scep:ListChallengeMetadata",
"pca-connector-scep:ListConnectors",
"pca-connector-scep:ListTagsForResource",
"pcs:GetCluster",
"pcs:GetComputeNodeGroup",
"pcs:GetQueue",
"pcs:ListClusters",
"pcs:ListComputeNodeGroups",
"pcs:ListQueues",
"pcs:ListTagsForResource",
"personalize:DescribeDataset",
"personalize:DescribeDatasetGroup",
"personalize:DescribeSchema",
"personalize:DescribeSolution",
"personalize:ListDatasetImportJobs",
"personalize:ListFilters",
"personalize:ListTagsForResource",
"pi:ListTagsForResource",
"pipes:DescribePipe",
"polly:GetLexicon",
"polly:ListLexicons",
"profile:GetCalculatedAttributeDefinition",
"profile:GetDomain",
"profile:GetDomainObjectType",
"profile:GetEventStream",
"profile:GetIntegration",
"profile:GetProfileObjectType",
"profile:GetRecommender",
"profile:ListCalculatedAttributeDefinitions",
"profile:ListDomainObjectTypes",
"profile:ListDomains",
"profile:ListEventStreams",
"profile:ListProfileObjectTypes",
"profile:ListRecommenders",
"profile:ListTagsForResource",
"qbusiness:GetApplication",
"qbusiness:GetDataSource",
"qbusiness:GetIndex",
"qbusiness:GetPlugin",
"qbusiness:GetPolicy",
"qbusiness:GetRetriever",
"qbusiness:GetWebExperience",
"qbusiness:ListApplications",
"qbusiness:ListDataSources",
"qbusiness:ListIndices",
"qbusiness:ListPlugins",
"qbusiness:ListRetrievers",
"qbusiness:ListTagsForResource",
"qbusiness:ListWebExperiences",
"quicksight:DescribeActionConnector",
"quicksight:DescribeActionConnectorPermissions",
"quicksight:DescribeAnalysis",
"quicksight:DescribeAnalysisPermissions",
"quicksight:DescribeCustomPermissions",
"quicksight:DescribeDashboard",
"quicksight:DescribeDashboardPermissions",
"quicksight:DescribeDataSet",
"quicksight:DescribeDataSetPermissions",
"quicksight:DescribeDataSetRefreshProperties",
"quicksight:DescribeDataSource",
"quicksight:DescribeDataSourcePermissions",
"quicksight:DescribeDlpSetting",
"quicksight:DescribeFlow",
"quicksight:DescribeFolder",
"quicksight:DescribeFolderPermissions",
"quicksight:DescribeKnowledgeBase",
"quicksight:DescribeKnowledgeBasePermissions",
"quicksight:DescribeOAuthClientApplication",
"quicksight:DescribeRefreshSchedule",
"quicksight:DescribeSpace",
"quicksight:DescribeSpacePermissions",
"quicksight:DescribeTemplate",
"quicksight:DescribeTemplatePermissions",
"quicksight:DescribeTheme",
"quicksight:DescribeThemePermissions",
"quicksight:DescribeTopic",
"quicksight:DescribeUser",
"quicksight:DescribeVPCConnection",
"quicksight:GetFlowPermissions",
"quicksight:ListActionConnectors",
"quicksight:ListAgents",
"quicksight:ListAnalyses",
"quicksight:ListBrands",
"quicksight:ListCustomPermissions",
"quicksight:ListDashboards",
"quicksight:ListDlpSettings",
"quicksight:ListFlows",
"quicksight:ListKnowledgeBases",
"quicksight:ListOAuthClientApplications",
"quicksight:ListRefreshSchedules",
"quicksight:ListSpaceResources",
"quicksight:ListSpaces",
"quicksight:ListTagsForResource",
"quicksight:ListTopics",
"quicksight:ListUsers",
"quicksight:ListVPCConnections",
"ram:GetPermission",
"ram:GetResourceShareAssociations",
"ram:ListPermissionAssociations",
"ram:ListPermissionVersions",
"ram:ListResources",
"ram:ListResourceSharePermissions",
"rbin:GetRule",
"rds:DescribeDBClusterAutomatedBackups",
"rds:DescribeDBClusterParameters",
"rds:DescribeDBClusterSnapshotAttributes",
"rds:DescribeDBParameters",
"rds:DescribeDBProxyTargetGroups",
"rds:DescribeDBProxyTargets",
"rds:DescribeDBShardGroups",
"rds:DescribeDBSnapshotAttributes",
"rds:DescribeDBSnapshotTenantDatabases",
"rds:DescribeEngineDefaultClusterParameters",
"rds:DescribeEngineDefaultParameters",
"rds:DescribeIntegrations",
"rds:DescribeTenantDatabases",
"rds:ListTagsForResource",
"redshift-serverless:GetNamespace",
"redshift-serverless:GetSnapshot",
"redshift-serverless:GetWorkgroup",
"redshift-serverless:ListNamespaces",
"redshift-serverless:ListSnapshotCopyConfigurations",
"redshift-serverless:ListSnapshots",
"redshift-serverless:ListTagsForResource",
"redshift-serverless:ListWorkgroups",
"redshift:DescribeClusterDbRevisions",
"redshift:DescribeClusterParameters",
"redshift:DescribeClusterSecurityGroups",
"redshift:DescribeDataShares",
"redshift:DescribeEndpointAccess",
"redshift:DescribeEndpointAuthorization",
"redshift:DescribeIntegrations",
"redshift:DescribeLoggingStatus",
"redshift:DescribeScheduledActions",
"redshift:DescribeTags",
"redshift:GetResourcePolicy",
"refactor-spaces:GetApplication",
"refactor-spaces:GetEnvironment",
"refactor-spaces:GetRoute",
"refactor-spaces:GetService",
"refactor-spaces:ListTagsForResource",
"rekognition:DescribeCollection",
"rekognition:DescribeDataset",
"rekognition:DescribeStreamProcessor",
"rekognition:ListStreamProcessors",
"rekognition:ListTagsForResource",
"resiliencehub:DescribeApp",
"resiliencehub:DescribeAppVersionTemplate",
"resiliencehub:DescribeResiliencyPolicy",
"resiliencehub:ListAppVersionResourceMappings",
"resiliencehub:ListTagsForResource",
"resource-explorer-2:GetDefaultView",
"resource-explorer-2:GetView",
"resource-explorer-2:ListTagsForResource",
"resource-groups:GetGroup",
"resource-groups:GetGroupConfiguration",
"resource-groups:GetGroupQuery",
"resource-groups:GetTags",
"resource-groups:ListGroupResources",
"rolesanywhere:GetCrl",
"rolesanywhere:GetProfile",
"rolesanywhere:GetTrustAnchor",
"rolesanywhere:ListCrls",
"rolesanywhere:ListProfiles",
"rolesanywhere:ListTagsForResource",
"rolesanywhere:ListTrustAnchors",
"route53-recovery-control-config:DescribeCluster",
"route53-recovery-control-config:DescribeControlPanel",
"route53-recovery-control-config:DescribeRoutingControl",
"route53-recovery-control-config:DescribeSafetyRule",
"route53-recovery-control-config:ListTagsForResource",
"route53-recovery-readiness:GetCell",
"route53-recovery-readiness:GetReadinessCheck",
"route53-recovery-readiness:GetRecoveryGroup",
"route53-recovery-readiness:GetResourceSet",
"route53:GetChange",
"route53:GetDNSSEC",
"route53:GetHealthCheck",
"route53:GetHostedZone",
"route53:ListCidrBlocks",
"route53:ListCidrCollections",
"route53:ListCidrLocations",
"route53:ListHostedZonesByName",
"route53:ListQueryLoggingConfigs",
"route53:ListResourceRecordSets",
"route53:ListTagsForResource",
"route53globalresolver:GetAccessSource",
"route53globalresolver:GetAccessToken",
"route53globalresolver:GetDNSView",
"route53globalresolver:ListAccessSources",
"route53globalresolver:ListAccessTokens",
"route53globalresolver:ListDNSViews",
"route53profiles:GetProfile",
"route53profiles:GetProfileAssociation",
"route53profiles:GetProfileResourceAssociation",
"route53profiles:ListProfileAssociations",
"route53profiles:ListProfileResourceAssociations",
"route53profiles:ListProfiles",
"route53profiles:ListTagsForResource",
"route53resolver:GetFirewallDomainList",
"route53resolver:GetFirewallRuleGroup",
"route53resolver:GetFirewallRuleGroupAssociation",
"route53resolver:GetOutpostResolver",
"route53resolver:GetResolverConfig",
"route53resolver:GetResolverDnssecConfig",
"route53resolver:GetResolverEndpoint",
"route53resolver:GetResolverQueryLogConfig",
"route53resolver:GetResolverQueryLogConfigAssociation",
"route53resolver:GetResolverRule",
"route53resolver:GetResolverRuleAssociation",
"route53resolver:ListFirewallDomains",
"route53resolver:ListFirewallRules",
"route53resolver:ListOutpostResolvers",
"route53resolver:ListResolverConfigs",
"route53resolver:ListResolverDnssecConfigs",
"route53resolver:ListResolverEndpointIpAddresses",
"route53resolver:ListResolverQueryLogConfigAssociations",
"route53resolver:ListResolverRuleAssociations",
"route53resolver:ListTagsForResource",
"rtbfabric:GetCertificateAssociation",
"rtbfabric:GetInboundExternalLink",
"rtbfabric:GetLink",
"rtbfabric:GetLinkRoutingRule",
"rtbfabric:GetOutboundExternalLink",
"rtbfabric:GetRequesterGateway",
"rtbfabric:GetResponderGateway",
"rtbfabric:ListCertificateAssociations",
"rtbfabric:ListLinkRoutingRules",
"rtbfabric:ListLinks",
"rtbfabric:ListRequesterGateways",
"rtbfabric:ListResponderGateways",
"rtbfabric:ListTagsForResource",
"rum:GetAppMonitor",
"rum:GetAppMonitorData",
"rum:ListTagsForResource",
"s3-outposts:GetAccessPoint",
"s3-outposts:GetAccessPointPolicy",
"s3-outposts:GetBucket",
"s3-outposts:GetBucketPolicy",
"s3-outposts:GetBucketTagging",
"s3-outposts:GetLifecycleConfiguration",
"s3-outposts:ListAccessPoints",
"s3-outposts:ListEndpoints",
"s3-outposts:ListRegionalBuckets",
"s3:DescribeJob",
"s3:GetAccelerateConfiguration",
"s3:GetAccessGrant",
"s3:GetAccessGrantsInstance",
"s3:GetAccessGrantsLocation",
"s3:GetAccessPoint",
"s3:GetAccessPointForObjectLambda",
"s3:GetAccessPointPolicy",
"s3:GetAccessPointPolicyForObjectLambda",
"s3:GetAccessPointPolicyStatus",
"s3:GetAccessPointPolicyStatusForObjectLambda",
"s3:GetAccountPublicAccessBlock",
"s3:GetAnalyticsConfiguration",
"s3:GetBucketAbac",
"s3:GetBucketAcl",
"s3:GetBucketCORS",
"s3:GetBucketLogging",
"s3:GetBucketMetadataTableConfiguration",
"s3:GetBucketNotification",
"s3:GetBucketObjectLockConfiguration",
"s3:GetBucketOwnershipControls",
"s3:GetBucketPolicy",
"s3:GetBucketPolicyStatus",
"s3:GetBucketPublicAccessBlock",
"s3:GetBucketRequestPayment",
"s3:GetBucketTagging",
"s3:GetBucketVersioning",
"s3:GetBucketWebsite",
"s3:GetEncryptionConfiguration",
"s3:GetIntelligentTieringConfiguration",
"s3:GetInventoryConfiguration",
"s3:GetJobTagging",
"s3:GetLifecycleConfiguration",
"s3:GetMetricsConfiguration",
"s3:GetMultiRegionAccessPoint",
"s3:GetMultiRegionAccessPointPolicy",
"s3:GetMultiRegionAccessPointPolicyStatus",
"s3:GetReplicationConfiguration",
"s3:GetStorageLensConfiguration",
"s3:GetStorageLensConfigurationTagging",
"s3:GetStorageLensGroup",
"s3:ListAccessGrants",
"s3:ListAccessGrantsInstances",
"s3:ListAccessGrantsLocations",
"s3:ListAccessPointsForObjectLambda",
"s3:ListJobs",
"s3:ListTagsForResource",
"s3express:GetAccessPoint",
"s3express:GetAccessPointPolicy",
"s3express:GetAccessPointScope",
"s3express:GetBucketPolicy",
"s3express:GetEncryptionConfiguration",
"s3express:GetInventoryConfiguration",
"s3express:GetLifecycleConfiguration",
"s3express:GetMetricsConfiguration",
"s3express:ListAccessPointsForDirectoryBuckets",
"s3express:ListTagsForResource",
"s3files:GetAccessPoint",
"s3files:GetFileSystem",
"s3files:GetFileSystemPolicy",
"s3files:GetMountTarget",
"s3files:GetSynchronizationConfiguration",
"s3files:ListAccessPoints",
"s3files:ListFileSystems",
"s3files:ListMountTargets",
"s3files:ListTagsForResource",
"s3tables:GetTable",
"s3tables:GetTableBucket",
"s3tables:GetTableBucketEncryption",
"s3tables:GetTableBucketMaintenanceConfiguration",
"s3tables:GetTableBucketMetricsConfiguration",
"s3tables:GetTableBucketPolicy",
"s3tables:GetTableBucketReplication",
"s3tables:GetTableBucketStorageClass",
"s3tables:GetTableMaintenanceConfiguration",
"s3tables:GetTableStorageClass",
"s3tables:ListNamespaces",
"s3tables:ListTableBuckets",
"s3tables:ListTables",
"s3tables:ListTagsForResource",
"s3vectors:GetIndex",
"s3vectors:GetVectorBucket",
"s3vectors:GetVectorBucketPolicy",
"s3vectors:ListTagsForResource",
"sagemaker:DescribeAction",
"sagemaker:DescribeAlgorithm",
"sagemaker:DescribeApp",
"sagemaker:DescribeAppImageConfig",
"sagemaker:DescribeArtifact",
"sagemaker:DescribeAutoMLJob",
"sagemaker:DescribeAutoMLJobV2",
"sagemaker:DescribeCluster",
"sagemaker:DescribeClusterSchedulerConfig",
"sagemaker:DescribeCodeRepository",
"sagemaker:DescribeComputeQuota",
"sagemaker:DescribeContext",
"sagemaker:DescribeDataQualityJobDefinition",
"sagemaker:DescribeDevice",
"sagemaker:DescribeDeviceFleet",
"sagemaker:DescribeDomain",
"sagemaker:DescribeEndpoint",
"sagemaker:DescribeEndpointConfig",
"sagemaker:DescribeExperiment",
"sagemaker:DescribeFeatureGroup",
"sagemaker:DescribeFlowDefinition",
"sagemaker:DescribeHub",
"sagemaker:DescribeHumanTaskUi",
"sagemaker:DescribeHyperParameterTuningJob",
"sagemaker:DescribeImage",
"sagemaker:DescribeImageVersion",
"sagemaker:DescribeInferenceExperiment",
"sagemaker:DescribeLabelingJob",
"sagemaker:DescribeMlflowApp",
"sagemaker:DescribeMlflowTrackingServer",
"sagemaker:DescribeModel",
"sagemaker:DescribeModelBiasJobDefinition",
"sagemaker:DescribeModelCard",
"sagemaker:DescribeModelCardExportJob",
"sagemaker:DescribeModelExplainabilityJobDefinition",
"sagemaker:DescribeModelPackage",
"sagemaker:DescribeModelPackageGroup",
"sagemaker:DescribeModelQualityJobDefinition",
"sagemaker:DescribeMonitoringSchedule",
"sagemaker:DescribeNotebookInstance",
"sagemaker:DescribeNotebookInstanceLifecycleConfig",
"sagemaker:DescribeOptimizationJob",
"sagemaker:DescribePartnerApp",
"sagemaker:DescribePipeline",
"sagemaker:DescribePipelineExecution",
"sagemaker:DescribeProcessingJob",
"sagemaker:DescribeProject",
"sagemaker:DescribeSpace",
"sagemaker:DescribeStudioLifecycleConfig",
"sagemaker:DescribeTrainingJob",
"sagemaker:DescribeTrainingPlan",
"sagemaker:DescribeTrial",
"sagemaker:DescribeTrialComponent",
"sagemaker:DescribeUserProfile",
"sagemaker:DescribeWorkforce",
"sagemaker:DescribeWorkteam",
"sagemaker:GetModelPackageGroupPolicy",
"sagemaker:ListAutoMLJobs",
"sagemaker:ListClusterSchedulerConfigs",
"sagemaker:ListComputeQuotas",
"sagemaker:ListDataQualityJobDefinitions",
"sagemaker:ListDeviceFleets",
"sagemaker:ListHyperParameterTuningJobs",
"sagemaker:ListLabelingJobs",
"sagemaker:ListMlflowApps",
"sagemaker:ListModelBiasJobDefinitions",
"sagemaker:ListModelCardExportJobs",
"sagemaker:ListModelExplainabilityJobDefinitions",
"sagemaker:ListModelQualityJobDefinitions",
"sagemaker:ListMonitoringAlerts",
"sagemaker:ListOptimizationJobs",
"sagemaker:ListPipelineExecutions",
"sagemaker:ListProcessingJobs",
"sagemaker:ListTags",
"sagemaker:ListTrainingJobs",
"sagemaker:ListTrainingPlans",
"scheduler:GetSchedule",
"scheduler:GetScheduleGroup",
"scheduler:ListSchedules",
"scheduler:ListTagsForResource",
"schemas:DescribeDiscoverer",
"schemas:DescribeRegistry",
"schemas:DescribeSchema",
"schemas:GetResourcePolicy",
"schemas:ListDiscoverers",
"schemas:ListRegistries",
"schemas:ListSchemas",
"scn:GetInstance",
"scn:ListInstances",
"scn:ListTagsForResource",
"sdb:GetAttributes",
"sdb:ListDomains",
"secretsmanager:DescribeSecret",
"secretsmanager:GetResourcePolicy",
"secretsmanager:ListSecretVersionIds",
"securityagent:BatchGetAgentSpaces",
"securityagent:BatchGetPentests",
"securityagent:BatchGetSecurityRequirements",
"securityagent:BatchGetTargetDomains",
"securityagent:GetApplication",
"securityagent:GetSecurityRequirementPack",
"securityagent:ListAgentSpaces",
"securityagent:ListApplications",
"securityagent:ListIntegratedResources",
"securityagent:ListPentests",
"securityagent:ListSecurityRequirementPacks",
"securityagent:ListSecurityRequirements",
"securityagent:ListTagsForResource",
"securityagent:ListTargetDomains",
"securityhub:DescribeHub",
"securityhub:DescribeOrganizationConfiguration",
"securityhub:DescribeStandardsControls",
"securityhub:GetAggregatorV2",
"securityhub:GetAutomationRuleV2",
"securityhub:GetConfigurationPolicy",
"securityhub:GetConfigurationPolicyAssociation",
"securityhub:GetEnabledStandards",
"securityhub:GetFindingAggregator",
"securityhub:ListAggregatorsV2",
"securityhub:ListAutomationRulesV2",
"securityhub:ListConfigurationPolicies",
"securityhub:ListConfigurationPolicyAssociations",
"securityhub:ListEnabledProductsForImport",
"securityhub:ListFindingAggregators",
"securityhub:ListTagsForResource",
"securitylake:GetSubscriber",
"securitylake:ListDataLakeExceptions",
"securitylake:ListDataLakes",
"securitylake:ListLogSources",
"securitylake:ListSubscribers",
"securitylake:ListTagsForResource",
"servicecatalog:DescribePortfolio",
"servicecatalog:DescribePortfolioShares",
"servicecatalog:DescribeProductAsAdmin",
"servicecatalog:DescribeProvisionedProduct",
"servicecatalog:DescribeProvisioningArtifact",
"servicecatalog:DescribeServiceAction",
"servicecatalog:DescribeTagOption",
"servicecatalog:GetApplication",
"servicecatalog:GetAttributeGroup",
"servicecatalog:ListAssociatedResources",
"servicecatalog:ListPortfolios",
"servicecatalog:ListProvisioningArtifacts",
"servicecatalog:ListServiceActions",
"servicecatalog:ListServiceActionsForProvisioningArtifact",
"servicecatalog:ListTagOptions",
"servicecatalog:SearchProductsAsAdmin",
"servicediscovery:GetInstance",
"servicediscovery:GetNamespace",
"servicediscovery:GetService",
"servicediscovery:ListInstances",
"servicediscovery:ListNamespaces",
"servicediscovery:ListTagsForResource",
"servicequotas:GetServiceQuota",
"servicequotas:ListServiceQuotas",
"servicequotas:ListTagsForResource",
"ses:DescribeReceiptRule",
"ses:DescribeReceiptRuleSet",
"ses:GetAddonInstance",
"ses:GetAddonSubscription",
"ses:GetAddressList",
"ses:GetArchive",
"ses:GetConfigurationSet",
"ses:GetConfigurationSetEventDestinations",
"ses:GetContactList",
"ses:GetCustomVerificationEmailTemplate",
"ses:GetDedicatedIpPool",
"ses:GetDedicatedIps",
"ses:GetEmailIdentity",
"ses:GetEmailTemplate",
"ses:GetIngressPoint",
"ses:GetRelay",
"ses:GetRuleSet",
"ses:GetTemplate",
"ses:GetTenant",
"ses:GetTrafficPolicy",
"ses:ListAddonInstances",
"ses:ListAddonSubscriptions",
"ses:ListAddressLists",
"ses:ListArchives",
"ses:ListCustomVerificationEmailTemplates",
"ses:ListIngressPoints",
"ses:ListReceiptFilters",
"ses:ListReceiptRuleSets",
"ses:ListRelays",
"ses:ListRuleSets",
"ses:ListTagsForResource",
"ses:ListTemplates",
"ses:ListTenantResources",
"ses:ListTenants",
"ses:ListTrafficPolicies",
"shield:DescribeDRTAccess",
"shield:DescribeProtection",
"shield:DescribeProtectionGroup",
"shield:DescribeSubscription",
"shield:ListTagsForResource",
"signer:GetSigningProfile",
"signer:ListProfilePermissions",
"simspaceweaver:DescribeSimulation",
"simspaceweaver:ListSimulations",
"sms-voice:DescribeConfigurationSets",
"sms-voice:DescribeKeywords",
"sms-voice:DescribeOptOutLists",
"sms-voice:DescribePhoneNumbers",
"sms-voice:DescribePools",
"sms-voice:DescribeProtectConfigurations",
"sms-voice:DescribeSenderIds",
"sms-voice:GetProtectConfigurationCountryRuleSet",
"sms-voice:GetResourcePolicy",
"sms-voice:ListPoolOriginationIdentities",
"sms-voice:ListTagsForResource",
"sns:GetDataProtectionPolicy",
"sns:GetSMSSandboxAccountStatus",
"sns:GetSubscriptionAttributes",
"sns:GetTopicAttributes",
"sns:ListSubscriptions",
"sns:ListSubscriptionsByTopic",
"sns:ListTagsForResource",
"sqs:GetQueueAttributes",
"sqs:ListQueueTags",
"ssm-contacts:GetContact",
"ssm-contacts:GetContactChannel",
"ssm-contacts:GetRotation",
"ssm-contacts:ListContactChannels",
"ssm-contacts:ListContacts",
"ssm-contacts:ListRotations",
"ssm-contacts:ListTagsForResource",
"ssm-guiconnect:GetConnectionRecordingPreferences",
"ssm-incidents:GetReplicationSet",
"ssm-incidents:GetResponsePlan",
"ssm-incidents:ListReplicationSets",
"ssm-incidents:ListTagsForResource",
"ssm-quicksetup:GetConfigurationManager",
"ssm-quicksetup:ListConfigurationManagers",
"ssm-sap:GetApplication",
"ssm-sap:GetComponent",
"ssm-sap:GetDatabase",
"ssm-sap:ListApplications",
"ssm-sap:ListComponents",
"ssm-sap:ListDatabases",
"ssm-sap:ListTagsForResource",
"ssm:DescribeAssociation",
"ssm:DescribeAutomationExecutions",
"ssm:DescribeDocument",
"ssm:DescribeDocumentPermission",
"ssm:DescribeOpsItems",
"ssm:DescribePatchBaselines",
"ssm:GetAutomationExecution",
"ssm:GetCloudConnector",
"ssm:GetDefaultPatchBaseline",
"ssm:GetDocument",
"ssm:GetMaintenanceWindow",
"ssm:GetOpsItem",
"ssm:GetOpsMetadata",
"ssm:GetPatchBaseline",
"ssm:GetResourcePolicies",
"ssm:GetServiceSetting",
"ssm:ListCloudConnectors",
"ssm:ListOpsMetadata",
"ssm:ListTagsForResource",
"sso-directory:DescribeGroup",
"sso-directory:DescribeUser",
"sso:DescribeApplication",
"sso:DescribeInstance",
"sso:DescribeInstanceAccessControlAttributeConfiguration",
"sso:DescribePermissionSet",
"sso:GetApplicationGrant",
"sso:GetInlinePolicyForPermissionSet",
"sso:GetPermissionsBoundaryForPermissionSet",
"sso:ListApplications",
"sso:ListCustomerManagedPolicyReferencesInPermissionSet",
"sso:ListInstances",
"sso:ListManagedPoliciesInPermissionSet",
"sso:ListPermissionSets",
"sso:ListTagsForResource",
"states:DescribeActivity",
"states:DescribeExecution",
"states:DescribeStateMachine",
"states:DescribeStateMachineAlias",
"states:ListExecutions",
"states:ListStateMachineAliases",
"states:ListStateMachineVersions",
"states:ListTagsForResource",
"storagegateway:ListTagsForResource",
"storagegateway:ListVolumes",
"sts:GetCallerIdentity",
"support:DescribeCases",
"supportapp:ListSlackChannelConfigurations",
"supportapp:ListSlackWorkspaceConfigurations",
"supportauthz:ListTagsForResource",
"swf:DescribeDomain",
"swf:ListTagsForResource",
"synthetics:DescribeCanariesLastRun",
"synthetics:DescribeRuntimeVersions",
"synthetics:GetCanary",
"synthetics:GetCanaryRuns",
"synthetics:GetGroup",
"synthetics:ListAssociatedGroups",
"synthetics:ListGroupResources",
"synthetics:ListTagsForResource",
"tag:GetResources",
"textract:GetAdapter",
"textract:ListAdapters",
"textract:ListTagsForResource",
"timestream-influxdb:GetDbCluster",
"timestream-influxdb:GetDbInstance",
"timestream-influxdb:ListDbClusters",
"timestream-influxdb:ListDbInstances",
"timestream-influxdb:ListTagsForResource",
"timestream:DescribeDatabase",
"timestream:DescribeEndpoints",
"timestream:DescribeScheduledQuery",
"timestream:DescribeTable",
"timestream:ListDatabases",
"timestream:ListScheduledQueries",
"timestream:ListTables",
"timestream:ListTagsForResource",
"transcribe:GetCallAnalyticsJob",
"transcribe:GetVocabularyFilter",
"transcribe:ListCallAnalyticsJobs",
"transcribe:ListTagsForResource",
"transcribe:ListVocabularyFilters",
"transfer:DescribeAgreement",
"transfer:DescribeCertificate",
"transfer:DescribeConnector",
"transfer:DescribeHostKey",
"transfer:DescribeProfile",
"transfer:DescribeServer",
"transfer:DescribeUser",
"transfer:DescribeWebApp",
"transfer:DescribeWebAppCustomization",
"transfer:DescribeWorkflow",
"transfer:ListHostKeys",
"transfer:ListTagsForResource",
"transfer:ListWebApps",
"verifiedpermissions:GetIdentitySource",
"verifiedpermissions:GetPolicyStore",
"verifiedpermissions:GetPolicyTemplate",
"verifiedpermissions:GetSchema",
"verifiedpermissions:ListIdentitySources",
"verifiedpermissions:ListPolicyTemplates",
"verifiedpermissions:ListTagsForResource",
"voiceid:DescribeDomain",
"voiceid:ListTagsForResource",
"vpc-lattice:GetAccessLogSubscription",
"vpc-lattice:GetListener",
"vpc-lattice:GetResourceConfiguration",
"vpc-lattice:GetResourceGateway",
"vpc-lattice:GetResourcePolicy",
"vpc-lattice:GetRule",
"vpc-lattice:GetService",
"vpc-lattice:GetServiceNetwork",
"vpc-lattice:GetServiceNetworkResourceAssociation",
"vpc-lattice:GetServiceNetworkServiceAssociation",
"vpc-lattice:GetServiceNetworkVpcAssociation",
"vpc-lattice:GetTargetGroup",
"vpc-lattice:ListResourceConfigurations",
"vpc-lattice:ListResourceGateways",
"vpc-lattice:ListServiceNetworkResourceAssociations",
"vpc-lattice:ListServiceNetworkVpcAssociations",
"vpc-lattice:ListTargets",
"waf-regional:GetLoggingConfiguration",
"waf-regional:GetWebACL",
"waf-regional:GetWebACLForResource",
"waf-regional:ListLoggingConfigurations",
"waf:GetLoggingConfiguration",
"waf:GetWebACL",
"wafv2:GetIPSet",
"wafv2:GetLoggingConfiguration",
"wafv2:GetRegexPatternSet",
"wafv2:GetRuleGroup",
"wafv2:GetWebACL",
"wafv2:ListLoggingConfigurations",
"wafv2:ListTagsForResource",
"wellarchitected:GetLens",
"wellarchitected:GetProfile",
"wellarchitected:GetReviewTemplate",
"wellarchitected:ListLenses",
"wellarchitected:ListProfiles",
"wellarchitected:ListReviewTemplates",
"wickr:GetNetwork",
"wickr:ListNetworks",
"wisdom:GetAIAgent",
"wisdom:GetAIGuardrail",
"wisdom:GetAIPrompt",
"wisdom:GetAssistant",
"wisdom:GetContent",
"wisdom:GetKnowledgeBase",
"wisdom:GetQuickResponse",
"wisdom:GetSession",
"wisdom:ListAIAgentVersions",
"wisdom:ListAIAgents",
"wisdom:ListAIGuardrails",
"wisdom:ListAIGuardrailVersions",
"wisdom:ListAIPrompts",
"wisdom:ListAIPromptVersions",
"wisdom:ListQuickResponses",
"wisdom:SearchSessions",
"workspaces-web:GetBrowserSettings",
"workspaces-web:GetDataProtectionSettings",
"workspaces-web:GetIpAccessSettings",
"workspaces-web:GetNetworkSettings",
"workspaces-web:GetSessionLogger",
"workspaces-web:GetTrustStore",
"workspaces-web:GetTrustStoreCertificate",
"workspaces-web:GetUserAccessLoggingSettings",
"workspaces-web:GetUserSettings",
"workspaces-web:ListBrowserSettings",
"workspaces-web:ListDataProtectionSettings",
"workspaces-web:ListIdentityProviders",
"workspaces-web:ListIpAccessSettings",
"workspaces-web:ListNetworkSettings",
"workspaces-web:ListSessionLoggers",
"workspaces-web:ListTagsForResource",
"workspaces-web:ListTrustStoreCertificates",
"workspaces-web:ListTrustStores",
"workspaces-web:ListUserAccessLoggingSettings",
"workspaces-web:ListUserSettings",
"workspaces:DescribeTags",
"workspaces:DescribeWorkspacesPools",
"xray:GetGroup",
"xray:GetGroups",
"xray:GetIndexingRules",
"xray:GetTraceSegmentDestination",
"xray:ListResourcePolicies",
"xray:ListTagsForResource"
],
"Resource": "*"
}
]
},
"VersionId": "v59",
"IsDefaultVersion": true,
"CreateDate": "2026-10-30T20:27:08+00:00"
}
}Version History (44 recorded)
Raw historyv59updated
11 actions added
v58updated
408 actions added
3 new AWS services
58 never-before-seen actions: amplifyuibuilder:GetCodegenJob, amplifyuibuilder:ListCodegenJobs, cases:GetCase, cases:ListTagsForResource, cases:SearchCases, cases:SearchRelatedItems, cleanrooms-ml:GetMLInputChannel, cleanrooms-ml:GetTrainedModel, cleanrooms-ml:ListTrainedModels, cleanrooms:GetIntermediateTable, cloudhsm:ListTags, cloudwatch:GetDataset, comprehend:DescribeDataset, comprehend:ListDatasets, config:GetCustomRulePolicy, config:ListResourceEvaluations, connect:DescribeVocabulary, connect:ListUseCases, connect:SearchEmailAddresses, connect:SearchVocabularies, devicefarm:GetDeviceInstance, devicefarm:ListDeviceInstances, elasticmapreduce:GetSession, elasticmapreduce:ListSessions, geo:GetJob, geo:ListJobs, geo:ListTagsForResource, glue:ListCustomEntityTypes, iotdeviceadvisor:GetSuiteRun, iotdeviceadvisor:ListSuiteRuns, iotsitewise:DescribePipeline, iotsitewise:DescribeTask, iotsitewise:DescribeWorkspace, iotsitewise:ListPipelines, iotsitewise:ListTasks, iotsitewise:ListWorkspaces, license-manager:GetLicenseAssetRuleset, license-manager:ListLicenseAssetRulesets, personalize:ListFilters, quicksight:DescribeDlpSetting, quicksight:DescribeFlow, quicksight:DescribeKnowledgeBase, quicksight:DescribeKnowledgeBasePermissions, quicksight:DescribeSpace, quicksight:DescribeSpacePermissions, quicksight:GetFlowPermissions, quicksight:ListAgents, quicksight:ListBrands, quicksight:ListDlpSettings, quicksight:ListFlows, quicksight:ListKnowledgeBases, quicksight:ListSpaceResources, quicksight:ListSpaces, securityagent:BatchGetSecurityRequirements, supportauthz:ListTagsForResource, swf:ListTagsForResource, transfer:DescribeHostKey, wisdom:SearchSessions
4 permissions management, incl. glue:DescribeConnectionType: glue:DescribeConnectionType, glue:ListConnectionTypes, quicksight:DescribeKnowledgeBasePermissions, quicksight:DescribeSpacePermissions
v57updated
100 actions added
v56updated
742 actions added
v55updated
706 actions added
New AWS service supportapp
12 never-before-seen actions: entityresolution:GetPolicy, inspector2:GetCodeSecurityScanConfiguration, inspector2:ListCodeSecurityScanConfigurations, mediatailor:GetChannelPolicy, omics:GetConfiguration, omics:ListConfigurations, profile:GetEventStream, profile:ListEventStreams, quicksight:DescribeOAuthClientApplication, quicksight:ListOAuthClientApplications, rtbfabric:GetCertificateAssociation, rtbfabric:ListCertificateAssociations
v54updated
2 actions added
v53updated
393 actions added
v52updated
90 actions added
4 never-before-seen actions: codedeploy:ListTagsForResource, codeguru-profiler:ListTagsForResource, codeguru-reviewer:ListTagsForResource, greengrass:ListTagsForResource
v51updated
29 actions added
AWSResourceExplorerServiceRolePolicy - Policy Version v50
No recorded action delta - this version predates the change index. View the raw diff.
Mar 12, 2026
b9d5604AWSResourceExplorerServiceRolePolicy - Policy Version v50
No recorded action delta - this version predates the change index. View the raw diff.
Feb 27, 2026
a33e6c9AWSResourceExplorerServiceRolePolicy - Policy Version v49
No recorded action delta - this version predates the change index. View the raw diff.
Feb 27, 2026
fc5caccAWSResourceExplorerServiceRolePolicy - Policy Version v49
No recorded action delta - this version predates the change index. View the raw diff.
Feb 12, 2026
1d158c6AWSResourceExplorerServiceRolePolicy - Policy Version v36
No recorded action delta - this version predates the change index. View the raw diff.
Feb 12, 2026
c0beae0AWSResourceExplorerServiceRolePolicy - Policy Version v23
No recorded action delta - this version predates the change index. View the raw diff.
Feb 11, 2026
58917daAWSResourceExplorerServiceRolePolicy - Policy Version v22
No recorded action delta - this version predates the change index. View the raw diff.
Dec 17, 2025
d539239AWSResourceExplorerServiceRolePolicy - Policy Version v21
No recorded action delta - this version predates the change index. View the raw diff.
Dec 16, 2025
2eaff90AWSResourceExplorerServiceRolePolicy - Policy Version v21
No recorded action delta - this version predates the change index. View the raw diff.
Nov 18, 2025
d15549aAWSResourceExplorerServiceRolePolicy - Policy Version v20
No recorded action delta - this version predates the change index. View the raw diff.
Oct 24, 2025
2d48750AWSResourceExplorerServiceRolePolicy - Policy Version v19
No recorded action delta - this version predates the change index. View the raw diff.
Oct 3, 2025
476b252