ReadOnlyAccess

Last Modified

Oct 30, 2026

October 30, 2026 at 06:03 PM UTC

Version

v191

Total Versions

113

Created

Oct 30, 2026

Actions

3061

Subscribe to updates

Risk

High

An unrestricted escalation path, identity administration, secret reads or the power to switch off security monitoring. Read from this policy document alone: trust policies, boundaries and SCPs in your account still decide what actually succeeds. How this is assessed

  • High

    Can read secrets

    Reads Parameter Store values, SecureString included where the KMS key allows it; Lambda environment variables, where credentials often live, on any resource with no condition.

    ssm:GetParameter (via ssm:Get*)ssm:GetParameters (via ssm:Get*)ssm:GetParametersByPath (via ssm:Get*)lambda:GetFunctionConfiguration (via lambda:Get*)

    Use with caution: Where the holder needs only some secrets, write your own policy scoped to their ARNs or tags, and limit decryption in the KMS key policies.

  • Medium

    Can read data in every bucket or table

    Reads any object in any S3 bucket; any DynamoDB table. Read-only is not the same as harmless when the data is the asset.

    s3:GetObject (via s3:Get*)dynamodb:Scandynamodb:GetItem (via dynamodb:Get*)

    Use with caution: Read access to data is still access to data. For people who only need to see configuration, ViewOnlyAccess carries none of these signals.

Policy Document

View on GitHub
{
  "PolicyVersion": {
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Sid": "ReadOnlyActionsGroup1",
          "Effect": "Allow",
          "Action": [
            "a4b:Get*",
            "a4b:List*",
            "a4b:Search*",
            "access-analyzer:GetAccessPreview",
            "access-analyzer:GetAnalyzedResource",
            "access-analyzer:GetAnalyzer",
            "access-analyzer:GetArchiveRule",
            "access-analyzer:GetFinding",
            "access-analyzer:GetFindingsStatistics",
            "access-analyzer:GetGeneratedPolicy",
            "access-analyzer:ListAccessPreviewFindings",
            "access-analyzer:ListAccessPreviews",
            "access-analyzer:ListAnalyzedResources",
            "access-analyzer:ListAnalyzers",
            "access-analyzer:ListArchiveRules",
            "access-analyzer:ListFindings",
            "access-analyzer:ListPolicyGenerations",
            "access-analyzer:ListTagsForResource",
            "access-analyzer:ValidatePolicy",
            "account:GetAccountInformation",
            "account:GetAlternateContact",
            "account:GetContactInformation",
            "account:GetGovCloudAccountInformation",
            "account:GetPrimaryEmail",
            "account:GetRegionOptStatus",
            "account:ListRegions",
            "acm-pca:Describe*",
            "acm-pca:Get*",
            "acm-pca:List*",
            "acm:Describe*",
            "acm:Get*",
            "acm:List*",
            "acm:SearchCertificates",
            "action-recommendations:ListRecommendedActions",
            "agent-registry:GetDiscoverableRegistryRecord",
            "agent-registry:GetRegistry",
            "agent-registry:GetRegistryRecord",
            "agent-registry:InvokeRegistryMcp",
            "agent-registry:ListDiscoverableRegistryRecords",
            "agent-registry:ListRegistries",
            "agent-registry:ListRegistryRecords",
            "agent-registry:ListTagsForResource",
            "agent-registry:SearchDiscoverableRegistryRecords",
            "aidevops:DescribePrivateConnection",
            "aidevops:DescribeServices",
            "aidevops:GetAccountUsage",
            "aidevops:GetAgentSpace",
            "aidevops:GetAssociation",
            "aidevops:GetBacklogTask",
            "aidevops:GetKnowledgeItem",
            "aidevops:GetOperatorApp",
            "aidevops:GetRecommendation",
            "aidevops:GetService",
            "aidevops:ListAgentSpaces",
            "aidevops:ListAssociations",
            "aidevops:ListBacklogTasks",
            "aidevops:ListChats",
            "aidevops:ListExecutions",
            "aidevops:ListGoals",
            "aidevops:ListJournalRecords",
            "aidevops:ListKnowledgeItemVersions",
            "aidevops:ListKnowledgeItems",
            "aidevops:ListPendingMessages",
            "aidevops:ListPrivateConnections",
            "aidevops:ListRecommendations",
            "aidevops:ListServices",
            "aidevops:ListTagsForResource",
            "aidevops:ListWebhooks",
            "aidevops:SearchServiceAccessibleResource",
            "aiops:GetEphemeralInvestigationResults",
            "aiops:GetFact",
            "aiops:GetFactVersions",
            "aiops:GetInvestigation",
            "aiops:GetInvestigationEvent",
            "aiops:GetInvestigationGroup",
            "aiops:GetInvestigationResource",
            "aiops:GetReport",
            "aiops:ListFacts",
            "aiops:ListInvestigationEvents",
            "aiops:ListInvestigationGroups",
            "aiops:ListInvestigations",
            "aiops:ValidateInvestigationGroup",
            "airflow:ListEnvironments",
            "airflow:ListTagsForResource",
            "amplify:GetApp",
            "amplify:GetBackendEnvironment",
            "amplify:GetBranch",
            "amplify:GetDomainAssociation",
            "amplify:GetJob",
            "amplify:GetWebhook",
            "amplify:ListApps",
            "amplify:ListArtifacts",
            "amplify:ListBackendEnvironments",
            "amplify:ListBranches",
            "amplify:ListDomainAssociations",
            "amplify:ListJobs",
            "amplify:ListTagsForResource",
            "amplify:ListWebhooks",
            "aoss:BatchGetCollection",
            "aoss:BatchGetCollectionGroup",
            "aoss:BatchGetLifecyclePolicy",
            "aoss:BatchGetVpcEndpoint",
            "aoss:GetAccessPolicy",
            "aoss:GetAccountSettings",
            "aoss:GetPoliciesStats",
            "aoss:GetSecurityConfig",
            "aoss:GetSecurityPolicy",
            "aoss:ListAccessPolicies",
            "aoss:ListCollectionGroups",
            "aoss:ListCollections",
            "aoss:ListLifecyclePolicies",
            "aoss:ListSecurityConfigs",
            "aoss:ListSecurityPolicies",
            "aoss:ListTagsForResource",
            "aoss:ListVpcEndpoints",
            "apigateway:GET",
            "apigateway:GetPortal",
            "apigateway:GetPortalProduct",
            "apigateway:GetPortalProductSharingPolicy",
            "apigateway:GetProductPage",
            "apigateway:GetProductRestEndpointPage",
            "apigateway:GetRoutingRule",
            "apigateway:ListPortalProducts",
            "apigateway:ListPortals",
            "apigateway:ListProductPages",
            "apigateway:ListProductRestEndpointPages",
            "apigateway:ListRoutingRules",
            "appconfig:GetAccountSettings",
            "appconfig:GetApplication",
            "appconfig:GetConfiguration",
            "appconfig:GetConfigurationProfile",
            "appconfig:GetDeployment",
            "appconfig:GetDeploymentStrategy",
            "appconfig:GetEnvironment",
            "appconfig:GetExperimentDefinition",
            "appconfig:GetExperimentRun",
            "appconfig:GetExtension",
            "appconfig:GetExtensionAssociation",
            "appconfig:GetHostedConfigurationVersion",
            "appconfig:ListApplications",
            "appconfig:ListConfigurationProfiles",
            "appconfig:ListDeploymentStrategies",
            "appconfig:ListDeployments",
            "appconfig:ListEnvironments",
            "appconfig:ListExperimentDefinitions",
            "appconfig:ListExperimentRunEvents",
            "appconfig:ListExperimentRuns",
            "appconfig:ListExtensionAssociations",
            "appconfig:ListExtensions",
            "appconfig:ListHostedConfigurationVersions",
            "appconfig:ListTagsForResource",
            "appfabric:GetAppAuthorization",
            "appfabric:GetAppBundle",
            "appfabric:GetIngestion",
            "appfabric:GetIngestionDestination",
            "appfabric:ListAppAuthorizations",
            "appfabric:ListAppBundles",
            "appfabric:ListIngestionDestinations",
            "appfabric:ListIngestions",
            "appfabric:ListTagsForResource",
            "appflow:DescribeConnector",
            "appflow:DescribeConnectorEntity",
            "appflow:DescribeConnectorFields",
            "appflow:DescribeConnectorProfiles",
            "appflow:DescribeConnectors",
            "appflow:DescribeFlow",
            "appflow:DescribeFlowExecution",
            "appflow:DescribeFlowExecutionRecords",
            "appflow:DescribeFlows",
            "appflow:ListConnectorEntities",
            "appflow:ListConnectorFields",
            "appflow:ListConnectors",
            "appflow:ListFlows",
            "appflow:ListTagsForResource",
            "application-autoscaling:Describe*",
            "application-autoscaling:GetPredictiveScalingForecast",
            "application-autoscaling:ListTagsForResource",
            "application-signals:BatchGetServiceLevelObjectiveBudgetReport",
            "application-signals:GetService",
            "application-signals:GetServiceLevelObjective",
            "application-signals:ListAuditFindings",
            "application-signals:ListEntityEvents",
            "application-signals:ListGroupingAttributeDefinitions",
            "application-signals:ListObservedEntities",
            "application-signals:ListServiceDependencies",
            "application-signals:ListServiceDependents",
            "application-signals:ListServiceLevelObjectiveExclusionWindows",
            "application-signals:ListServiceLevelObjectives",
            "application-signals:ListServiceOperations",
            "application-signals:ListServiceStates",
            "application-signals:ListServices",
            "application-signals:ListTagsForResource",
            "applicationinsights:Describe*",
            "applicationinsights:List*",
            "appmesh:Describe*",
            "appmesh:List*",
            "apprunner:DescribeAutoScalingConfiguration",
            "apprunner:DescribeCustomDomains",
            "apprunner:DescribeObservabilityConfiguration",
            "apprunner:DescribeService",
            "apprunner:DescribeVpcConnector",
            "apprunner:DescribeVpcIngressConnection",
            "apprunner:DescribeWebAclForService",
            "apprunner:ListAssociatedServicesForWebAcl",
            "apprunner:ListAutoScalingConfigurations",
            "apprunner:ListConnections",
            "apprunner:ListObservabilityConfigurations",
            "apprunner:ListOperations",
            "apprunner:ListServices",
            "apprunner:ListServicesForAutoScalingConfiguration",
            "apprunner:ListTagsForResource",
            "apprunner:ListVpcConnectors",
            "apprunner:ListVpcIngressConnections",
            "appstream:Describe*",
            "appstream:List*",
            "appstudio:GetAccountStatus",
            "appstudio:GetEnablementJobStatus",
            "appsync:EvaluateMappingTemplate",
            "appsync:Get*",
            "appsync:List*",
            "apptest:GetTestCase",
            "apptest:GetTestConfiguration",
            "apptest:GetTestRunStep",
            "apptest:GetTestSuite",
            "apptest:ListTagsForResource",
            "apptest:ListTestCases",
            "apptest:ListTestConfigurations",
            "apptest:ListTestRunSteps",
            "apptest:ListTestRunTestCases",
            "apptest:ListTestRuns",
            "apptest:ListTestSuites",
            "aps:DescribeAlertManagerDefinition",
            "aps:DescribeAnomalyDetector",
            "aps:DescribeLoggingConfiguration",
            "aps:DescribeQueryLoggingConfiguration",
            "aps:DescribeResourcePolicy",
            "aps:DescribeRuleGroupsNamespace",
            "aps:DescribeScraper",
            "aps:DescribeScraperLoggingConfiguration",
            "aps:DescribeWorkspace",
            "aps:DescribeWorkspaceConfiguration",
            "aps:GetAlertManagerSilence",
            "aps:GetAlertManagerStatus",
            "aps:GetDefaultScraperConfiguration",
            "aps:GetLabels",
            "aps:GetMetricMetadata",
            "aps:GetSeries",
            "aps:ListAlertManagerAlertGroups",
            "aps:ListAlertManagerAlerts",
            "aps:ListAlertManagerReceivers",
            "aps:ListAlertManagerSilences",
            "aps:ListAlerts",
            "aps:ListAnomalyDetectors",
            "aps:ListRuleGroupsNamespaces",
            "aps:ListRules",
            "aps:ListScrapers",
            "aps:ListTagsForResource",
            "aps:ListWorkspaces",
            "aps:PreviewAnomalyDetector",
            "aps:QueryMetrics",
            "arc-region-switch:GetPlan",
            "arc-region-switch:GetPlanEvaluationStatus",
            "arc-region-switch:GetPlanExecution",
            "arc-region-switch:GetPlanInRegion",
            "arc-region-switch:ListPlanExecutionEvents",
            "arc-region-switch:ListPlanExecutions",
            "arc-region-switch:ListPlans",
            "arc-region-switch:ListPlansInRegion",
            "arc-region-switch:ListRoute53HealthChecks",
            "arc-region-switch:ListRoute53HealthChecksInRegion",
            "arc-region-switch:ListTagsForResource",
            "arc-zonal-shift:GetAutoshiftObserverNotificationStatus",
            "arc-zonal-shift:GetManagedResource",
            "arc-zonal-shift:ListAutoshifts",
            "arc-zonal-shift:ListManagedResources",
            "arc-zonal-shift:ListZonalShifts",
            "artifact:GetCustomerAgreement",
            "artifact:GetReport",
            "artifact:GetReportMetadata",
            "artifact:GetTermForReport",
            "artifact:ListAgreements",
            "artifact:ListCustomerAgreements",
            "artifact:ListReportVersions",
            "artifact:ListReports",
            "athena:Batch*",
            "athena:Get*",
            "athena:List*",
            "auditmanager:GetAccountStatus",
            "auditmanager:GetAssessment",
            "auditmanager:GetAssessmentFramework",
            "auditmanager:GetAssessmentReportUrl",
            "auditmanager:GetChangeLogs",
            "auditmanager:GetControl",
            "auditmanager:GetDelegations",
            "auditmanager:GetEvidence",
            "auditmanager:GetEvidenceByEvidenceFolder",
            "auditmanager:GetEvidenceFolder",
            "auditmanager:GetEvidenceFoldersByAssessment",
            "auditmanager:GetEvidenceFoldersByAssessmentControl",
            "auditmanager:GetOrganizationAdminAccount",
            "auditmanager:GetServicesInScope",
            "auditmanager:GetSettings",
            "auditmanager:ListAssessmentFrameworks",
            "auditmanager:ListAssessmentReports",
            "auditmanager:ListAssessments",
            "auditmanager:ListControls",
            "auditmanager:ListKeywordsForDataSource",
            "auditmanager:ListNotifications",
            "auditmanager:ListTagsForResource",
            "auditmanager:ValidateAssessmentReportIntegrity",
            "autoscaling-plans:Describe*",
            "autoscaling-plans:GetScalingPlanResourceForecastData",
            "autoscaling:Describe*",
            "autoscaling:GetPredictiveScalingForecast",
            "aws-portal:View*",
            "backup-gateway:GetBandwidthRateLimitSchedule",
            "backup-gateway:GetGateway",
            "backup-gateway:GetHypervisor",
            "backup-gateway:GetHypervisorPropertyMappings",
            "backup-gateway:GetVirtualMachine",
            "backup-gateway:ListGateways",
            "backup-gateway:ListHypervisors",
            "backup-gateway:ListTagsForResource",
            "backup-gateway:ListVirtualMachines",
            "backup:Describe*",
            "backup:Get*",
            "backup:List*",
            "batch:Describe*",
            "batch:List*",
            "bedrock-agentcore:GatewayGetWebACLForResource",
            "bedrock-agentcore:GatewayListResourcesForWebACL",
            "bedrock-agentcore:GetABTest",
            "bedrock-agentcore:GetAgentCard",
            "bedrock-agentcore:GetAgentRuntime",
            "bedrock-agentcore:GetAgentRuntimeEndpoint",
            "bedrock-agentcore:GetApiKeyCredentialProvider",
            "bedrock-agentcore:GetBatchEvaluation",
            "bedrock-agentcore:GetBrowser",
            "bedrock-agentcore:GetBrowserProfile",
            "bedrock-agentcore:GetBrowserSession",
            "bedrock-agentcore:GetCapacityProvider",
            "bedrock-agentcore:GetCodeInterpreter",
            "bedrock-agentcore:GetCodeInterpreterSession",
            "bedrock-agentcore:GetConfigurationBundle",
            "bedrock-agentcore:GetConfigurationBundleVersion",
            "bedrock-agentcore:GetConsentPortal",
            "bedrock-agentcore:GetEvaluator",
            "bedrock-agentcore:GetEvent",
            "bedrock-agentcore:GetGateway",
            "bedrock-agentcore:GetGatewayRateLimit",
            "bedrock-agentcore:GetGatewayRule",
            "bedrock-agentcore:GetGatewayTarget",
            "bedrock-agentcore:GetHarness",
            "bedrock-agentcore:GetHarnessEndpoint",
            "bedrock-agentcore:GetMemory",
            "bedrock-agentcore:GetMemoryRecord",
            "bedrock-agentcore:GetOauth2CredentialProvider",
            "bedrock-agentcore:GetOnlineEvaluationConfig",
            "bedrock-agentcore:GetPaymentConnector",
            "bedrock-agentcore:GetPaymentCredentialProvider",
            "bedrock-agentcore:GetPaymentInstrument",
            "bedrock-agentcore:GetPaymentInstrumentBalance",
            "bedrock-agentcore:GetPaymentManager",
            "bedrock-agentcore:GetPaymentSession",
            "bedrock-agentcore:GetPolicy",
            "bedrock-agentcore:GetPolicyEngine",
            "bedrock-agentcore:GetPolicyEngineSummary",
            "bedrock-agentcore:GetPolicyGeneration",
            "bedrock-agentcore:GetPolicyGenerationSummary",
            "bedrock-agentcore:GetPolicySummary",
            "bedrock-agentcore:GetRecommendation",
            "bedrock-agentcore:GetRegistry",
            "bedrock-agentcore:GetRegistryRecord",
            "bedrock-agentcore:GetResourcePolicy",
            "bedrock-agentcore:GetTokenVault",
            "bedrock-agentcore:GetWorkloadIdentity",
            "bedrock-agentcore:ListABTests",
            "bedrock-agentcore:ListAgentRuntimeEndpoints",
            "bedrock-agentcore:ListAgentRuntimeVersions",
            "bedrock-agentcore:ListAgentRuntimeVersionsByCapacityProvider",
            "bedrock-agentcore:ListAgentRuntimes",
            "bedrock-agentcore:ListApiKeyCredentialProviders",
            "bedrock-agentcore:ListBatchEvaluations",
            "bedrock-agentcore:ListBrowserProfiles",
            "bedrock-agentcore:ListBrowserSessions",
            "bedrock-agentcore:ListBrowsers",
            "bedrock-agentcore:ListCapacityProviders",
            "bedrock-agentcore:ListCodeInterpreterSessions",
            "bedrock-agentcore:ListCodeInterpreters",
            "bedrock-agentcore:ListConfigurationBundleVersions",
            "bedrock-agentcore:ListConfigurationBundles",
            "bedrock-agentcore:ListEvaluators",
            "bedrock-agentcore:ListEvents",
            "bedrock-agentcore:ListGatewayTargets",
            "bedrock-agentcore:ListGateways",
            "bedrock-agentcore:ListHarnessEndpoints",
            "bedrock-agentcore:ListHarnesses",
            "bedrock-agentcore:ListMemories",
            "bedrock-agentcore:ListMemoryRecords",
            "bedrock-agentcore:ListOauth2CredentialProviders",
            "bedrock-agentcore:ListOnlineEvaluationConfigs",
            "bedrock-agentcore:ListPolicies",
            "bedrock-agentcore:ListPolicyEngineSummaries",
            "bedrock-agentcore:ListPolicyEngines",
            "bedrock-agentcore:ListPolicyGenerationAssets",
            "bedrock-agentcore:ListPolicyGenerationSummaries",
            "bedrock-agentcore:ListPolicyGenerations",
            "bedrock-agentcore:ListPolicySummaries",
            "bedrock-agentcore:ListRecommendations",
            "bedrock-agentcore:ListTagsForResource",
            "bedrock-agentcore:ListWorkloadIdentities",
            "bedrock-agentcore:RetrieveMemoryRecords",
            "bedrock-mantle:CallWithBearerToken",
            "bedrock-mantle:CountTokens",
            "bedrock-mantle:GetAccountDataRetention",
            "bedrock-mantle:GetCustomizedModel",
            "bedrock-mantle:GetFile",
            "bedrock-mantle:GetFineTuningJob",
            "bedrock-mantle:GetInference",
            "bedrock-mantle:GetModel",
            "bedrock-mantle:GetProject",
            "bedrock-mantle:GetReservation",
            "bedrock-mantle:ListCustomizedModelAssociations",
            "bedrock-mantle:ListCustomizedModels",
            "bedrock-mantle:ListFiles",
            "bedrock-mantle:ListFineTuningJobs",
            "bedrock-mantle:ListModels",
            "bedrock-mantle:ListProjects",
            "bedrock-mantle:ListReservations",
            "bedrock-mantle:ListTagsForResource",
            "bedrock:AgenticRetrieveStream",
            "bedrock:CallWithBearerToken",
            "bedrock:CheckIngestedDocumentAcl",
            "bedrock:CountTokens",
            "bedrock:GetAccountDataRetention",
            "bedrock:GetAdvancedPromptOptimizationJob",
            "bedrock:GetAgent",
            "bedrock:GetAgentActionGroup",
            "bedrock:GetAgentAlias",
            "bedrock:GetAgentCollaborator",
            "bedrock:GetAgentKnowledgeBase",
            "bedrock:GetAgentMemory",
            "bedrock:GetAgentVersion",
            "bedrock:GetAsyncInvoke",
            "bedrock:GetAutomatedReasoningPolicy",
            "bedrock:GetAutomatedReasoningPolicyAnnotations",
            "bedrock:GetAutomatedReasoningPolicyBuildWorkflow",
            "bedrock:GetAutomatedReasoningPolicyBuildWorkflowResultAssets",
            "bedrock:GetAutomatedReasoningPolicyNextScenario",
            "bedrock:GetAutomatedReasoningPolicyTestCase",
            "bedrock:GetAutomatedReasoningPolicyTestResult",
            "bedrock:GetBlueprint",
            "bedrock:GetBlueprintOptimizationStatus",
            "bedrock:GetBlueprintRecommendation",
            "bedrock:GetCustomModel",
            "bedrock:GetCustomModelDeployment",
            "bedrock:GetDataAutomationLibrary",
            "bedrock:GetDataAutomationLibraryEntity",
            "bedrock:GetDataAutomationLibraryIngestionJob",
            "bedrock:GetDataAutomationProject",
            "bedrock:GetDataAutomationStatus",
            "bedrock:GetDataSource",
            "bedrock:GetDocumentContent",
            "bedrock:GetEvaluationJob",
            "bedrock:GetExecutionFlowSnapshot",
            "bedrock:GetFlow",
            "bedrock:GetFlowAlias",
            "bedrock:GetFlowExecution",
            "bedrock:GetFlowVersion",
            "bedrock:GetFoundationModel",
            "bedrock:GetFoundationModelAvailability",
            "bedrock:GetGuardrail",
            "bedrock:GetImportedModel",
            "bedrock:GetInferenceProfile",
            "bedrock:GetIngestedDocumentAcl",
            "bedrock:GetIngestionJob",
            "bedrock:GetInvocationStep",
            "bedrock:GetInvoke",
            "bedrock:GetKnowledgeBase",
            "bedrock:GetKnowledgeBaseDocuments",
            "bedrock:GetMarketplaceModelEndpoint",
            "bedrock:GetModelCopyJob",
            "bedrock:GetModelCustomizationJob",
            "bedrock:GetModelEvaluationJob",
            "bedrock:GetModelImportJob",
            "bedrock:GetModelInvocationJob",
            "bedrock:GetModelInvocationLoggingConfiguration",
            "bedrock:GetPrompt",
            "bedrock:GetPromptRouter",
            "bedrock:GetProvisionedModelThroughput",
            "bedrock:GetResourcePolicy",
            "bedrock:GetSession",
            "bedrock:GetUseCaseForModelAccess",
            "bedrock:ListAdvancedPromptOptimizationJobs",
            "bedrock:ListAgentActionGroups",
            "bedrock:ListAgentAliases",
            "bedrock:ListAgentCollaborators",
            "bedrock:ListAgentKnowledgeBases",
            "bedrock:ListAgentVersions",
            "bedrock:ListAgents",
            "bedrock:ListAsyncInvokes",
            "bedrock:ListAutomatedReasoningPolicies",
            "bedrock:ListAutomatedReasoningPolicyBuildWorkflows",
            "bedrock:ListAutomatedReasoningPolicyTestCases",
            "bedrock:ListAutomatedReasoningPolicyTestResults",
            "bedrock:ListBlueprints",
            "bedrock:ListCustomModelDeployments",
            "bedrock:ListCustomModels",
            "bedrock:ListDataAutomationLibraries",
            "bedrock:ListDataAutomationLibraryEntities",
            "bedrock:ListDataAutomationLibraryIngestionJobs",
            "bedrock:ListDataAutomationProjects",
            "bedrock:ListDataSources",
            "bedrock:ListEnforcedGuardrailsConfiguration",
            "bedrock:ListEvaluationJobs",
            "bedrock:ListFlowAliases",
            "bedrock:ListFlowExecutionEvents",
            "bedrock:ListFlowExecutions",
            "bedrock:ListFlowVersions",
            "bedrock:ListFlows",
            "bedrock:ListFoundationModelAgreementOffers",
            "bedrock:ListFoundationModels",
            "bedrock:ListGuardrails",
            "bedrock:ListImportedModels",
            "bedrock:ListInferenceProfiles",
            "bedrock:ListIngestionJobs",
            "bedrock:ListInvocationSteps",
            "bedrock:ListInvocations",
            "bedrock:ListKnowledgeBaseDocuments",
            "bedrock:ListKnowledgeBases",
            "bedrock:ListMarketplaceModelEndpoints",
            "bedrock:ListModelCopyJobs",
            "bedrock:ListModelCustomizationJobs",
            "bedrock:ListModelImportJobs",
            "bedrock:ListModelInvocationJobs",
            "bedrock:ListPromptRouters",
            "bedrock:ListPrompts",
            "bedrock:ListProvisionedModelThroughputs",
            "bedrock:ListSessions",
            "bedrock:ListTagsForResource",
            "bedrock:RenderPrompt",
            "bedrock:Retrieve",
            "bedrock:ValidateFlowDefinition",
            "billing:GetBillingData",
            "billing:GetBillingDetails",
            "billing:GetBillingNotifications",
            "billing:GetBillingPreferences",
            "billing:GetBillingView",
            "billing:GetContractInformation",
            "billing:GetCreditAllocationHistory",
            "billing:GetCredits",
            "billing:GetIAMAccessPreference",
            "billing:GetResourcePolicy",
            "billing:GetSellerOfRecord",
            "billing:ListBillingViews",
            "billing:ListSourceViewsForBillingView",
            "billing:ListTagsForResource",
            "billingconductor:GetBillingGroupCostReport",
            "billingconductor:ListAccountAssociations",
            "billingconductor:ListBillingGroupCostReports",
            "billingconductor:ListBillingGroups",
            "billingconductor:ListCustomLineItemVersions",
            "billingconductor:ListCustomLineItems",
            "billingconductor:ListPricingPlans",
            "billingconductor:ListPricingPlansAssociatedWithPricingRule",
            "billingconductor:ListPricingRules",
            "billingconductor:ListPricingRulesAssociatedToPricingPlan",
            "billingconductor:ListResourcesAssociatedToCustomLineItem",
            "billingconductor:ListTagsForResource",
            "braket:GetDevice",
            "braket:GetJob",
            "braket:GetQuantumTask",
            "braket:SearchDevices",
            "braket:SearchJobs",
            "braket:SearchQuantumTasks",
            "braket:SearchSpendingLimits",
            "budgets:Describe*",
            "budgets:ListTagsForResource",
            "budgets:View*",
            "cassandra:Select",
            "ce:DescribeCostCategoryDefinition",
            "ce:DescribeNotificationSubscription",
            "ce:DescribeReport",
            "ce:GetAnomalies",
            "ce:GetAnomalyMonitors",
            "ce:GetAnomalySubscriptions",
            "ce:GetApproximateUsageRecords",
            "ce:GetCommitmentPurchaseAnalysis",
            "ce:GetCostAndUsage",
            "ce:GetCostAndUsageComparisons",
            "ce:GetCostAndUsageWithResources",
            "ce:GetCostCategories",
            "ce:GetCostComparisonDrivers",
            "ce:GetCostForecast",
            "ce:GetDimensionValues",
            "ce:GetPreferences",
            "ce:GetReservationCoverage",
            "ce:GetReservationPurchaseRecommendation",
            "ce:GetReservationUtilization",
            "ce:GetRightsizingRecommendation",
            "ce:GetSavingsPlanPurchaseRecommendationDetails",
            "ce:GetSavingsPlansCoverage",
            "ce:GetSavingsPlansPurchaseRecommendation",
            "ce:GetSavingsPlansUtilization",
            "ce:GetSavingsPlansUtilizationDetails",
            "ce:GetTags",
            "ce:GetUsageForecast",
            "ce:ListCommitmentPurchaseAnalyses",
            "ce:ListCostAllocationTagBackfillHistory",
            "ce:ListCostAllocationTags",
            "ce:ListCostCategoryDefinitions",
            "ce:ListCostCategoryResourceAssociations",
            "ce:ListSavingsPlansPurchaseRecommendationGeneration",
            "ce:ListTagsForResource",
            "chatbot:Describe*",
            "chatbot:Get*",
            "chatbot:List*",
            "chime:Get*",
            "chime:List*",
            "chime:Retrieve*",
            "chime:Search*",
            "chime:Validate*",
            "cleanrooms-ml:GetAudienceGenerationJob",
            "cleanrooms-ml:GetAudienceModel",
            "cleanrooms-ml:GetConfiguredAudienceModel",
            "cleanrooms-ml:GetConfiguredAudienceModelPolicy",
            "cleanrooms-ml:GetTrainingDataset",
            "cleanrooms-ml:ListAudienceExportJobs",
            "cleanrooms-ml:ListAudienceGenerationJobs",
            "cleanrooms-ml:ListAudienceModels",
            "cleanrooms-ml:ListConfiguredAudienceModels",
            "cleanrooms-ml:ListTagsForResource",
            "cleanrooms-ml:ListTrainingDatasets",
            "cleanrooms:BatchGetCollaborationAnalysisTemplate",
            "cleanrooms:BatchGetSchema",
            "cleanrooms:BatchGetSchemaAnalysisRule",
            "cleanrooms:GetAnalysisTemplate",
            "cleanrooms:GetCollaboration",
            "cleanrooms:GetCollaborationAnalysisTemplate",
            "cleanrooms:GetCollaborationChangeRequest",
            "cleanrooms:GetCollaborationConfiguredAudienceModelAssociation",
            "cleanrooms:GetCollaborationIdNamespaceAssociation",
            "cleanrooms:GetCollaborationPrivacyBudgetTemplate",
            "cleanrooms:GetConfiguredAudienceModelAssociation",
            "cleanrooms:GetConfiguredTable",
            "cleanrooms:GetConfiguredTableAnalysisRule",
            "cleanrooms:GetConfiguredTableAssociation",
            "cleanrooms:GetConfiguredTableAssociationAnalysisRule",
            "cleanrooms:GetIdMappingTable",
            "cleanrooms:GetIdNamespaceAssociation",
            "cleanrooms:GetMembership",
            "cleanrooms:GetPrivacyBudgetTemplate",
            "cleanrooms:GetProtectedJob",
            "cleanrooms:GetProtectedQuery",
            "cleanrooms:GetSchema",
            "cleanrooms:GetSchemaAnalysisRule",
            "cleanrooms:ListAnalysisTemplates",
            "cleanrooms:ListCollaborationAnalysisTemplates",
            "cleanrooms:ListCollaborationChangeRequests",
            "cleanrooms:ListCollaborationConfiguredAudienceModelAssociations",
            "cleanrooms:ListCollaborationIdNamespaceAssociations",
            "cleanrooms:ListCollaborationPrivacyBudgetTemplates",
            "cleanrooms:ListCollaborationPrivacyBudgets",
            "cleanrooms:ListCollaborations",
            "cleanrooms:ListConfiguredAudienceModelAssociations",
            "cleanrooms:ListConfiguredTableAssociations",
            "cleanrooms:ListConfiguredTables",
            "cleanrooms:ListIdMappingTables",
            "cleanrooms:ListIdNamespaceAssociations",
            "cleanrooms:ListMembers",
            "cleanrooms:ListMemberships",
            "cleanrooms:ListPrivacyBudgetTemplates",
            "cleanrooms:ListPrivacyBudgets",
            "cleanrooms:ListProtectedJobs",
            "cleanrooms:ListProtectedQueries",
            "cleanrooms:ListSchemas",
            "cleanrooms:ListTagsForResource",
            "cleanrooms:PreviewPrivacyImpact",
            "cloud9:Describe*",
            "cloud9:List*",
            "clouddirectory:BatchRead",
            "clouddirectory:Get*",
            "clouddirectory:List*",
            "clouddirectory:LookupPolicy",
            "cloudformation:BatchDescribeTypeConfigurations",
            "cloudformation:Describe*",
            "cloudformation:Detect*",
            "cloudformation:Estimate*",
            "cloudformation:Get*",
            "cloudformation:List*",
            "cloudformation:ValidateTemplate",
            "cloudfront-keyvaluestore:Describe*",
            "cloudfront-keyvaluestore:Get*",
            "cloudfront-keyvaluestore:List*",
            "cloudfront:Describe*",
            "cloudfront:Get*",
            "cloudfront:List*",
            "cloudhsm:Describe*",
            "cloudhsm:GetResourcePolicy",
            "cloudhsm:List*",
            "cloudsearch:Describe*",
            "cloudsearch:List*",
            "cloudtrail:Describe*",
            "cloudtrail:Get*",
            "cloudtrail:List*",
            "cloudtrail:LookupEvents",
            "cloudwatch:Describe*",
            "cloudwatch:GenerateQuery",
            "cloudwatch:GenerateQueryResultsSummary",
            "cloudwatch:Get*",
            "cloudwatch:List*",
            "codeartifact:DescribeDomain",
            "codeartifact:DescribePackage",
            "codeartifact:DescribePackageVersion",
            "codeartifact:DescribeRepository",
            "codeartifact:GetAuthorizationToken",
            "codeartifact:GetDomainPermissionsPolicy",
            "codeartifact:GetPackageVersionAsset",
            "codeartifact:GetPackageVersionReadme",
            "codeartifact:GetRepositoryEndpoint",
            "codeartifact:GetRepositoryPermissionsPolicy",
            "codeartifact:ListDomains",
            "codeartifact:ListPackageVersionAssets",
            "codeartifact:ListPackageVersionDependencies",
            "codeartifact:ListPackageVersions",
            "codeartifact:ListPackages",
            "codeartifact:ListRepositories",
            "codeartifact:ListRepositoriesInDomain",
            "codeartifact:ListTagsForResource",
            "codeartifact:ReadFromRepository",
            "codebuild:BatchGet*",
            "codebuild:DescribeCodeCoverages",
            "codebuild:DescribeTestCases",
            "codebuild:List*",
            "codecatalyst:GetBillingAuthorization",
            "codecatalyst:GetConnection",
            "codecatalyst:GetPendingConnection",
            "codecatalyst:ListConnections",
            "codecatalyst:ListIamRolesForConnection",
            "codecatalyst:ListTagsForResource",
            "codecommit:BatchGet*",
            "codecommit:Describe*",
            "codecommit:Get*",
            "codecommit:GitPull",
            "codecommit:List*",
            "codeconnections:GetConnection",
            "codeconnections:GetHost",
            "codeconnections:GetRepositoryLink",
            "codeconnections:GetRepositorySyncStatus",
            "codeconnections:GetResourceSyncStatus",
            "codeconnections:GetSyncConfiguration",
            "codeconnections:ListConnections",
            "codeconnections:ListHosts",
            "codeconnections:ListRepositoryLinks",
            "codeconnections:ListRepositorySyncDefinitions",
            "codeconnections:ListSyncConfigurations",
            "codeconnections:ListTagsForResource",
            "codedeploy:BatchGet*",
            "codedeploy:Get*",
            "codedeploy:List*",
            "codeguru-profiler:Describe*",
            "codeguru-profiler:Get*",
            "codeguru-profiler:List*",
            "codeguru-reviewer:Describe*",
            "codeguru-reviewer:Get*",
            "codeguru-reviewer:List*",
            "codepipeline:Get*",
            "codepipeline:List*",
            "codestar-connections:GetConnection",
            "codestar-connections:GetHost",
            "codestar-connections:GetRepositoryLink",
            "codestar-connections:GetRepositorySyncStatus",
            "codestar-connections:GetResourceSyncStatus",
            "codestar-connections:GetSyncConfiguration",
            "codestar-connections:ListConnections",
            "codestar-connections:ListHosts",
            "codestar-connections:ListRepositoryLinks",
            "codestar-connections:ListRepositorySyncDefinitions",
            "codestar-connections:ListSyncConfigurations",
            "codestar-connections:ListTagsForResource",
            "codestar-notifications:ListTargets",
            "codestar-notifications:describeNotificationRule",
            "codestar-notifications:listEventTypes",
            "codestar-notifications:listNotificationRules",
            "codestar-notifications:listTagsForResource",
            "codestar:Describe*",
            "codestar:Get*",
            "codestar:List*",
            "codestar:Verify*",
            "codewhisperer:ListProfiles",
            "cognito-identity:Describe*",
            "cognito-identity:GetCredentialsForIdentity",
            "cognito-identity:GetIdentityPoolAnalytics",
            "cognito-identity:GetIdentityPoolDailyAnalytics",
            "cognito-identity:GetIdentityPoolRoles",
            "cognito-identity:GetIdentityProviderDailyAnalytics",
            "cognito-identity:GetOpenIdToken",
            "cognito-identity:GetOpenIdTokenForDeveloperIdentity",
            "cognito-identity:List*",
            "cognito-identity:Lookup*",
            "cognito-idp:AdminGet*",
            "cognito-idp:AdminList*",
            "cognito-idp:Describe*",
            "cognito-idp:Get*",
            "cognito-idp:List*",
            "cognito-sync:Describe*",
            "cognito-sync:Get*",
            "cognito-sync:List*",
            "cognito-sync:QueryRecords",
            "comprehend:BatchDetect*",
            "comprehend:Classify*",
            "comprehend:Contains*",
            "comprehend:Describe*",
            "comprehend:Detect*",
            "comprehend:List*",
            "compute-optimizer:DescribeRecommendationExportJobs",
            "compute-optimizer:GetAutoScalingGroupRecommendations",
            "compute-optimizer:GetEBSVolumeRecommendations",
            "compute-optimizer:GetEC2InstanceRecommendations",
            "compute-optimizer:GetEC2RecommendationProjectedMetrics",
            "compute-optimizer:GetECSServiceRecommendationProjectedMetrics",
            "compute-optimizer:GetECSServiceRecommendations",
            "compute-optimizer:GetEffectiveRecommendationPreferences",
            "compute-optimizer:GetEnrollmentStatus",
            "compute-optimizer:GetEnrollmentStatusesForOrganization",
            "compute-optimizer:GetIdleRecommendations",
            "compute-optimizer:GetLambdaFunctionRecommendations",
            "compute-optimizer:GetLicenseRecommendations",
            "compute-optimizer:GetRDSDatabaseRecommendationProjectedMetrics",
            "compute-optimizer:GetRDSDatabaseRecommendations",
            "compute-optimizer:GetRecommendationPreferences",
            "compute-optimizer:GetRecommendationSummaries",
            "config:BatchGetAggregateResourceConfig",
            "config:BatchGetResourceConfig",
            "config:Deliver*",
            "config:Describe*",
            "config:Get*",
            "config:List*",
            "config:SelectAggregateResourceConfig",
            "config:SelectResourceConfig",
            "connect:Describe*",
            "connect:GetContactAttributes",
            "connect:GetCurrentMetricData",
            "connect:GetCurrentUserData",
            "connect:GetFederationToken",
            "connect:GetMetricData",
            "connect:GetMetricDataV2",
            "connect:GetTaskTemplate",
            "connect:GetTrafficDistribution",
            "connect:List*",
            "consoleapp:GetDeviceIdentity",
            "consoleapp:ListDeviceIdentities",
            "consolidatedbilling:GetAccountBillingRole",
            "consolidatedbilling:ListLinkedAccounts",
            "controlcatalog:GetControl",
            "controlcatalog:ListCommonControls",
            "controlcatalog:ListControlMappings",
            "controlcatalog:ListControls",
            "controlcatalog:ListDomains",
            "controlcatalog:ListObjectives",
            "cost-optimization-hub:GetPreferences",
            "cost-optimization-hub:GetRecommendation",
            "cost-optimization-hub:ListEfficiencyMetrics",
            "cost-optimization-hub:ListEnrollmentStatuses",
            "cost-optimization-hub:ListRecommendationSummaries",
            "cost-optimization-hub:ListRecommendations",
            "cur:GetClassicReport",
            "cur:GetClassicReportPreferences",
            "cur:GetUsageReport",
            "customer-verification:GetCustomerVerificationDetails",
            "customer-verification:GetCustomerVerificationEligibility",
            "databrew:DescribeDataset",
            "databrew:DescribeJob",
            "databrew:DescribeJobRun",
            "databrew:DescribeProject",
            "databrew:DescribeRecipe",
            "databrew:DescribeRuleset",
            "databrew:DescribeSchedule",
            "databrew:ListDatasets",
            "databrew:ListJobRuns",
            "databrew:ListJobs",
            "databrew:ListProjects",
            "databrew:ListRecipeVersions",
            "databrew:ListRecipes",
            "databrew:ListRulesets",
            "databrew:ListSchedules",
            "databrew:ListTagsForResource",
            "dataexchange:Get*",
            "dataexchange:List*",
            "datapipeline:Describe*",
            "datapipeline:EvaluateExpression",
            "datapipeline:Get*",
            "datapipeline:List*",
            "datapipeline:QueryObjects",
            "datapipeline:Validate*",
            "datasync:Describe*",
            "datasync:List*",
            "datazone:GetAsset",
            "datazone:GetAssetType",
            "datazone:GetDataProduct",
            "datazone:GetDataSource",
            "datazone:GetDataSourceRun",
            "datazone:GetDomain",
            "datazone:GetDomainSharingPolicy",
            "datazone:GetDomainUnit",
            "datazone:GetEnvironment",
            "datazone:GetEnvironmentAction",
            "datazone:GetEnvironmentBlueprint",
            "datazone:GetEnvironmentBlueprintConfiguration",
            "datazone:GetEnvironmentProfile",
            "datazone:GetFormType",
            "datazone:GetGlossary",
            "datazone:GetGlossaryTerm",
            "datazone:GetGroupProfile",
            "datazone:GetLineageNode",
            "datazone:GetListing",
            "datazone:GetMetadataGenerationRun",
            "datazone:GetProject",
            "datazone:GetProjectProfile",
            "datazone:GetSubscription",
            "datazone:GetSubscriptionEligibility",
            "datazone:GetSubscriptionGrant",
            "datazone:GetSubscriptionRequestDetails",
            "datazone:GetSubscriptionTarget",
            "datazone:GetTimeSeriesDataPoint",
            "datazone:GetUserProfile",
            "datazone:ListAccountEnvironments",
            "datazone:ListAssetRevisions",
            "datazone:ListDataProductRevisions",
            "datazone:ListDataSourceRunActivities",
            "datazone:ListDataSourceRuns",
            "datazone:ListDataSources",
            "datazone:ListDomainUnitsForParent",
            "datazone:ListDomains",
            "datazone:ListEntityOwners",
            "datazone:ListEnvironmentActions",
            "datazone:ListEnvironmentBlueprintConfigurationSummaries",
            "datazone:ListEnvironmentBlueprintConfigurations",
            "datazone:ListEnvironmentBlueprints",
            "datazone:ListEnvironmentProfiles",
            "datazone:ListEnvironments",
            "datazone:ListGroupsForUser",
            "datazone:ListLineageNodeHistory",
            "datazone:ListNotifications",
            "datazone:ListPolicyGrants",
            "datazone:ListProjectMemberships",
            "datazone:ListProjectProfiles",
            "datazone:ListProjects",
            "datazone:ListSubscriptionGrants",
            "datazone:ListSubscriptionRequests",
            "datazone:ListSubscriptionTargets",
            "datazone:ListSubscriptions",
            "datazone:ListTagsForResource",
            "datazone:ListTimeSeriesDataPoints",
            "datazone:Search",
            "datazone:SearchGroupProfiles",
            "datazone:SearchListings",
            "datazone:SearchTypes",
            "datazone:SearchUserProfiles",
            "dax:BatchGetItem",
            "dax:Describe*",
            "dax:GetItem",
            "dax:ListTags",
            "dax:Query",
            "dax:Scan",
            "deadline:BatchGetJobEntity",
            "deadline:GetApplicationVersion",
            "deadline:GetBudget",
            "deadline:GetFarm",
            "deadline:GetFleet",
            "deadline:GetJob",
            "deadline:GetLicenseEndpoint",
            "deadline:GetLimit",
            "deadline:GetMonitor",
            "deadline:GetMonitorSettings",
            "deadline:GetQueue",
            "deadline:GetQueueEnvironment",
            "deadline:GetQueueFleetAssociation",
            "deadline:GetQueueLimitAssociation",
            "deadline:GetSession",
            "deadline:GetSessionAction",
            "deadline:GetSessionsStatisticsAggregation",
            "deadline:GetStep",
            "deadline:GetStorageProfile",
            "deadline:GetStorageProfileForQueue",
            "deadline:GetTask",
            "deadline:GetVolume",
            "deadline:GetWorker",
            "deadline:ListAvailableMeteredProducts",
            "deadline:ListBudgets",
            "deadline:ListFarmMembers",
            "deadline:ListFarms",
            "deadline:ListFleetMembers",
            "deadline:ListFleets",
            "deadline:ListJobMembers",
            "deadline:ListJobParameterDefinitions",
            "deadline:ListJobs",
            "deadline:ListLicenseEndpoints",
            "deadline:ListLimits",
            "deadline:ListMeteredProducts",
            "deadline:ListMonitors",
            "deadline:ListQueueEnvironments",
            "deadline:ListQueueFleetAssociations",
            "deadline:ListQueueLimitAssociations",
            "deadline:ListQueueMembers",
            "deadline:ListQueues",
            "deadline:ListSessionActions",
            "deadline:ListSessions",
            "deadline:ListSessionsForWorker",
            "deadline:ListStepConsumers",
            "deadline:ListStepDependencies",
            "deadline:ListSteps",
            "deadline:ListStorageProfiles",
            "deadline:ListStorageProfilesForQueue",
            "deadline:ListTagsForResource",
            "deadline:ListTasks",
            "deadline:ListVolumes",
            "deadline:ListWorkers",
            "deadline:SearchJobs",
            "deadline:SearchSteps",
            "deadline:SearchTasks",
            "deadline:SearchWorkers",
            "deepcomposer:GetComposition",
            "deepcomposer:GetModel",
            "deepcomposer:GetSampleModel",
            "deepcomposer:ListCompositions",
            "deepcomposer:ListModels",
            "deepcomposer:ListSampleModels",
            "deepcomposer:ListTrainingTopics",
            "detective:BatchGetGraphMemberDatasources",
            "detective:BatchGetMembershipDatasources",
            "detective:Get*",
            "detective:List*",
            "detective:SearchGraph",
            "devicefarm:Get*",
            "devicefarm:List*",
            "devops-guru:DescribeAccountHealth",
            "devops-guru:DescribeAccountOverview",
            "devops-guru:DescribeAnomaly",
            "devops-guru:DescribeEventSourcesConfig",
            "devops-guru:DescribeFeedback",
            "devops-guru:DescribeInsight",
            "devops-guru:DescribeOrganizationHealth",
            "devops-guru:DescribeOrganizationOverview",
            "devops-guru:DescribeOrganizationResourceCollectionHealth",
            "devops-guru:DescribeResourceCollectionHealth",
            "devops-guru:DescribeServiceIntegration",
            "devops-guru:GetCostEstimation",
            "devops-guru:GetResourceCollection",
            "devops-guru:ListAnomaliesForInsight",
            "devops-guru:ListAnomalousLogGroups",
            "devops-guru:ListEvents",
            "devops-guru:ListInsights",
            "devops-guru:ListMonitoredResources",
            "devops-guru:ListNotificationChannels",
            "devops-guru:ListOrganizationInsights",
            "devops-guru:ListRecommendations",
            "devops-guru:SearchInsights",
            "devops-guru:StartCostEstimation",
            "directconnect:Describe*",
            "directconnect:GetResiliencyGroup",
            "directconnect:ListResiliencyGroupAssociations",
            "directconnect:ListResiliencyGroups",
            "directconnect:ListVirtualInterfaceRoutes",
            "directconnect:ListVirtualInterfaceTestHistory",
            "discovery:Describe*",
            "discovery:Get*",
            "discovery:List*",
            "dlm:Get*",
            "dlm:ListTagsForResource",
            "dms:Describe*",
            "dms:List*",
            "dms:Test*",
            "docdb-elastic:GetCluster",
            "docdb-elastic:GetClusterSnapshot",
            "docdb-elastic:ListClusterSnapshots",
            "docdb-elastic:ListClusters",
            "docdb-elastic:ListPendingMaintenanceActions",
            "docdb-elastic:ListTagsForResource",
            "drs:DescribeJobLogItems",
            "drs:DescribeJobs",
            "drs:DescribeLaunchConfigurationTemplates",
            "drs:DescribeRecoveryInstances",
            "drs:DescribeRecoverySnapshots",
            "drs:DescribeReplicationConfigurationTemplates",
            "drs:DescribeSourceNetworks",
            "drs:DescribeSourceServers",
            "drs:GetFailbackReplicationConfiguration",
            "drs:GetLaunchConfiguration",
            "drs:GetReplicationConfiguration",
            "drs:ListExtensibleSourceServers",
            "drs:ListLaunchActions",
            "drs:ListStagingAccounts",
            "drs:ListTagsForResource",
            "ds:Check*",
            "ds:Describe*",
            "ds:Get*",
            "ds:List*",
            "ds:Verify*",
            "dsql:GetCluster",
            "dsql:GetClusterPolicy",
            "dsql:GetStream",
            "dsql:GetVpcEndpointServiceName",
            "dsql:ListClusters",
            "dsql:ListStreams",
            "dsql:ListTagsForResource",
            "dynamodb:BatchGet*",
            "dynamodb:Describe*",
            "dynamodb:Get*",
            "dynamodb:List*",
            "dynamodb:PartiQLSelect",
            "dynamodb:Query",
            "dynamodb:ReadDataForReplication",
            "dynamodb:Scan",
            "dynamodb:SearchVectors",
            "ec2:Describe*",
            "ec2:DescribeInstanceImageMetadata",
            "ec2:Get*",
            "ec2:ListImagesInRecycleBin",
            "ec2:ListSnapshotsInRecycleBin",
            "ec2:ListVolumesInRecycleBin",
            "ec2:SearchLocalGatewayRoutes",
            "ec2:SearchTransitGatewayMulticastGroups",
            "ec2:SearchTransitGatewayRoutes",
            "ec2messages:Get*",
            "ecr-public:BatchCheckLayerAvailability",
            "ecr-public:DescribeImageTags",
            "ecr-public:DescribeImages",
            "ecr-public:DescribeRegistries",
            "ecr-public:DescribeRepositories",
            "ecr-public:GetAuthorizationToken",
            "ecr-public:GetRegistryCatalogData",
            "ecr-public:GetRepositoryCatalogData",
            "ecr-public:GetRepositoryPolicy",
            "ecr-public:ListTagsForResource",
            "ecr:BatchCheck*",
            "ecr:BatchGet*",
            "ecr:Describe*",
            "ecr:Get*",
            "ecr:List*",
            "ecs:Describe*",
            "ecs:GetTaskProtection",
            "ecs:List*",
            "eks:AccessKubernetesApi",
            "eks:Describe*",
            "eks:List*",
            "elasticache:Describe*",
            "elasticache:List*",
            "elasticbeanstalk:Check*",
            "elasticbeanstalk:Describe*",
            "elasticbeanstalk:List*",
            "elasticbeanstalk:Request*",
            "elasticbeanstalk:Retrieve*",
            "elasticbeanstalk:Validate*",
            "elasticfilesystem:Describe*",
            "elasticfilesystem:ListTagsForResource",
            "elasticloadbalancing:Describe*",
            "elasticmapreduce:Describe*",
            "elasticmapreduce:GetBlockPublicAccessConfiguration",
            "elasticmapreduce:List*",
            "elasticmapreduce:View*",
            "elastictranscoder:List*",
            "elastictranscoder:Read*",
            "elemental-appliances-software:Get*",
            "elemental-appliances-software:List*",
            "elemental-inference:ExportDictionaryEntries",
            "elemental-inference:GetDictionary",
            "elemental-inference:GetFeed",
            "elemental-inference:ListDictionaries",
            "elemental-inference:ListFeeds",
            "emr-containers:DescribeJobRun",
            "emr-containers:DescribeManagedEndpoint",
            "emr-containers:DescribeVirtualCluster",
            "emr-containers:ListJobRuns",
            "emr-containers:ListManagedEndpoints",
            "emr-containers:ListTagsForResource",
            "emr-containers:ListVirtualClusters",
            "emr-serverless:GetApplication",
            "emr-serverless:GetDashboardForJobRun",
            "emr-serverless:GetJobRun",
            "emr-serverless:ListApplications",
            "emr-serverless:ListJobRuns",
            "emr-serverless:ListTagsForResource",
            "es:Describe*",
            "es:ESHttpGet",
            "es:ESHttpHead",
            "es:Get*",
            "es:List*",
            "events:Describe*",
            "events:List*",
            "events:Test*",
            "evidently:GetExperiment",
            "evidently:GetExperimentResults",
            "evidently:GetFeature",
            "evidently:GetLaunch",
            "evidently:GetProject",
            "evidently:GetSegment",
            "evidently:ListExperiments",
            "evidently:ListFeatures",
            "evidently:ListLaunches",
            "evidently:ListProjects",
            "evidently:ListSegmentReferences",
            "evidently:ListSegments",
            "evidently:ListTagsForResource",
            "evidently:TestSegmentPattern",
            "firehose:Describe*",
            "firehose:List*",
            "fis:GetAction",
            "fis:GetExperiment",
            "fis:GetExperimentTargetAccountConfiguration",
            "fis:GetExperimentTemplate",
            "fis:GetTargetAccountConfiguration",
            "fis:GetTargetResourceType",
            "fis:ListActions",
            "fis:ListExperimentResolvedTargets",
            "fis:ListExperimentTargetAccountConfigurations",
            "fis:ListExperimentTemplates",
            "fis:ListExperiments",
            "fis:ListTagsForResource",
            "fis:ListTargetAccountConfigurations",
            "fis:ListTargetResourceTypes",
            "fms:GetAdminAccount",
            "fms:GetAdminScope",
            "fms:GetAppsList",
            "fms:GetComplianceDetail",
            "fms:GetNotificationChannel",
            "fms:GetPolicy",
            "fms:GetProtectionStatus",
            "fms:GetProtocolsList",
            "fms:GetViolationDetails",
            "fms:ListAppsLists",
            "fms:ListComplianceStatus",
            "fms:ListMemberAccounts",
            "fms:ListPolicies",
            "fms:ListProtocolsLists",
            "fms:ListTagsForResource",
            "forecast:DescribeAutoPredictor",
            "forecast:DescribeDataset",
            "forecast:DescribeDatasetGroup",
            "forecast:DescribeDatasetImportJob",
            "forecast:DescribeExplainability",
            "forecast:DescribeExplainabilityExport",
            "forecast:DescribeForecast",
            "forecast:DescribeForecastExportJob",
            "forecast:DescribeMonitor",
            "forecast:DescribePredictor",
            "forecast:DescribePredictorBacktestExportJob",
            "forecast:DescribeWhatIfAnalysis",
            "forecast:DescribeWhatIfForecast",
            "forecast:DescribeWhatIfForecastExport",
            "forecast:GetAccuracyMetrics",
            "forecast:ListDatasetGroups",
            "forecast:ListDatasetImportJobs",
            "forecast:ListDatasets",
            "forecast:ListExplainabilities",
            "forecast:ListExplainabilityExports",
            "forecast:ListForecastExportJobs",
            "forecast:ListForecasts",
            "forecast:ListMonitorEvaluations",
            "forecast:ListMonitors",
            "forecast:ListPredictorBacktestExportJobs",
            "forecast:ListPredictors",
            "forecast:ListWhatIfAnalyses",
            "forecast:ListWhatIfForecastExports",
            "forecast:ListWhatIfForecasts",
            "forecast:QueryForecast",
            "forecast:QueryWhatIfForecast",
            "frauddetector:BatchGetVariable",
            "frauddetector:DescribeDetector",
            "frauddetector:DescribeModelVersions",
            "frauddetector:GetBatchImportJobs",
            "frauddetector:GetBatchPredictionJobs",
            "frauddetector:GetDeleteEventsByEventTypeStatus",
            "frauddetector:GetDetectorVersion",
            "frauddetector:GetDetectors",
            "frauddetector:GetEntityTypes",
            "frauddetector:GetEvent",
            "frauddetector:GetEventPredictionMetadata",
            "frauddetector:GetEventTypes",
            "frauddetector:GetExternalModels",
            "frauddetector:GetKMSEncryptionKey",
            "frauddetector:GetLabels",
            "frauddetector:GetListElements",
            "frauddetector:GetListsMetadata",
            "frauddetector:GetModelVersion",
            "frauddetector:GetModels",
            "frauddetector:GetOutcomes",
            "frauddetector:GetRules",
            "frauddetector:GetVariables",
            "frauddetector:ListEventPredictions",
            "frauddetector:ListTagsForResource",
            "freertos:Describe*",
            "freertos:List*",
            "freetier:GetAccountActivity",
            "freetier:GetAccountPlanState",
            "freetier:GetFreeTierAlertPreference",
            "freetier:GetFreeTierUsage",
            "freetier:ListAccountActivities",
            "fsx:Describe*",
            "fsx:List*",
            "gamelift:Describe*",
            "gamelift:Get*",
            "gamelift:List*",
            "gamelift:ResolveAlias",
            "gamelift:Search*",
            "gameliftstreams:GetApplication",
            "gameliftstreams:GetStreamGroup",
            "gameliftstreams:GetStreamUrl",
            "gameliftstreams:ListApplicationShaderCaches",
            "gameliftstreams:ListApplications",
            "gameliftstreams:ListStreamGroups",
            "gameliftstreams:ListStreamSessions",
            "gameliftstreams:ListStreamSessionsByAccount",
            "gameliftstreams:ListStreamUrls",
            "gameliftstreams:ListTagsForResource",
            "glacier:Describe*",
            "glacier:Get*",
            "glacier:List*",
            "globalaccelerator:Describe*",
            "globalaccelerator:List*",
            "glue:BatchGetCrawlers",
            "glue:BatchGetDevEndpoints",
            "glue:BatchGetJobs",
            "glue:BatchGetPartition",
            "glue:BatchGetTableOptimizer",
            "glue:BatchGetTriggers",
            "glue:BatchGetWorkflows",
            "glue:CheckSchemaVersionValidity",
            "glue:GetCatalog",
            "glue:GetCatalogImportStatus",
            "glue:GetCatalogs",
            "glue:GetClassifier",
            "glue:GetClassifiers",
            "glue:GetCrawler",
            "glue:GetCrawlerMetrics",
            "glue:GetCrawlers",
            "glue:GetDataCatalogEncryptionSettings",
            "glue:GetDatabase",
            "glue:GetDatabases",
            "glue:GetDataflowGraph",
            "glue:GetDevEndpoint",
            "glue:GetDevEndpoints",
            "glue:GetJob",
            "glue:GetJobBookmark",
            "glue:GetJobRun",
            "glue:GetJobRuns",
            "glue:GetJobs",
            "glue:GetMLTaskRun",
            "glue:GetMLTaskRuns",
            "glue:GetMLTransform",
            "glue:GetMLTransforms",
            "glue:GetMapping",
            "glue:GetPartition",
            "glue:GetPartitions",
            "glue:GetPlan",
            "glue:GetRegistry",
            "glue:GetResourcePolicy",
            "glue:GetSchema",
            "glue:GetSchemaByDefinition",
            "glue:GetSchemaVersion",
            "glue:GetSchemaVersionsDiff",
            "glue:GetSecurityConfiguration",
            "glue:GetSecurityConfigurations",
            "glue:GetSession",
            "glue:GetStatement",
            "glue:GetTable",
            "glue:GetTableOptimizer",
            "glue:GetTableVersion",
            "glue:GetTableVersions",
            "glue:GetTables",
            "glue:GetTags",
            "glue:GetTrigger",
            "glue:GetTriggers",
            "glue:GetUserDefinedFunction",
            "glue:GetUserDefinedFunctions",
            "glue:GetWorkflow",
            "glue:GetWorkflowRun",
            "glue:GetWorkflowRunProperties",
            "glue:GetWorkflowRuns",
            "glue:ListCrawlers",
            "glue:ListCrawls",
            "glue:ListDevEndpoints",
            "glue:ListJobs",
            "glue:ListMLTransforms",
            "glue:ListRegistries",
            "glue:ListSchemaVersions",
            "glue:ListSchemas",
            "glue:ListSessions",
            "glue:ListStatements",
            "glue:ListTableOptimizerRuns",
            "glue:ListTriggers",
            "glue:ListWorkflows",
            "glue:QuerySchemaVersionMetadata",
            "glue:SearchTables",
            "grafana:DescribeWorkspace",
            "grafana:DescribeWorkspaceAuthentication",
            "grafana:DescribeWorkspaceConfiguration",
            "grafana:ListPermissions",
            "grafana:ListTagsForResource",
            "grafana:ListVersions",
            "grafana:ListWorkspaces",
            "greengrass:DescribeComponent",
            "greengrass:Get*",
            "greengrass:List*",
            "groundstation:DescribeContact",
            "groundstation:DescribeContactVersion",
            "groundstation:DescribeEphemeris",
            "groundstation:GetConfig",
            "groundstation:GetDataflowEndpointGroup",
            "groundstation:GetMinuteUsage",
            "groundstation:GetMissionProfile",
            "groundstation:GetSatellite",
            "groundstation:ListAntennas",
            "groundstation:ListConfigs",
            "groundstation:ListContactVersions",
            "groundstation:ListContacts",
            "groundstation:ListDataflowEndpointGroups",
            "groundstation:ListEphemerides",
            "groundstation:ListGroundStationReservations",
            "groundstation:ListGroundStations",
            "groundstation:ListMissionProfiles",
            "groundstation:ListSatellites",
            "groundstation:ListTagsForResource",
            "guardduty:Describe*",
            "guardduty:Get*",
            "guardduty:List*",
            "health:Describe*",
            "healthlake:DescribeFHIRDatastore",
            "healthlake:DescribeFHIRExportJob",
            "healthlake:DescribeFHIRImportJob",
            "healthlake:GetCapabilities",
            "healthlake:ListFHIRDatastores",
            "healthlake:ListFHIRExportJobs",
            "healthlake:ListFHIRImportJobs",
            "healthlake:ListTagsForResource",
            "healthlake:ReadResource",
            "healthlake:SearchWithGet",
            "healthlake:SearchWithPost",
            "iam:Generate*",
            "iam:Get*",
            "iam:List*",
            "iam:Simulate*",
            "identity-sync:GetSyncProfile",
            "identity-sync:GetSyncTarget",
            "identity-sync:ListSyncFilters",
            "identitystore-auth:BatchGetSession",
            "identitystore-auth:ListSessions",
            "identitystore:DescribeGroup",
            "identitystore:DescribeGroupMembership",
            "identitystore:DescribeUser",
            "identitystore:GetGroupId",
            "identitystore:GetGroupMembershipId",
            "identitystore:GetUserId",
            "identitystore:IsMemberInGroups",
            "identitystore:ListGroupMemberships",
            "identitystore:ListGroupMembershipsForMember",
            "identitystore:ListGroups",
            "identitystore:ListUsers",
            "imagebuilder:Get*",
            "imagebuilder:List*",
            "importexport:Get*",
            "importexport:List*",
            "inspector2:BatchGetAccountStatus",
            "inspector2:BatchGetCodeSnippet",
            "inspector2:BatchGetFreeTrialInfo",
            "inspector2:BatchGetMemberEc2DeepInspectionStatus",
            "inspector2:DescribeOrganizationConfiguration",
            "inspector2:GetCisScanReport",
            "inspector2:GetConfiguration",
            "inspector2:GetDelegatedAdminAccount",
            "inspector2:GetEc2DeepInspectionConfiguration",
            "inspector2:GetEncryptionKey",
            "inspector2:GetFindingsReportStatus",
            "inspector2:GetMember",
            "inspector2:GetSbomExport",
            "inspector2:ListAccountPermissions",
            "inspector2:ListCisScanConfigurations",
            "inspector2:ListCisScans",
            "inspector2:ListConnectors",
            "inspector2:ListCoverage",
            "inspector2:ListCoverageStatistics",
            "inspector2:ListDelegatedAdminAccounts",
            "inspector2:ListFilters",
            "inspector2:ListFindingAggregations",
            "inspector2:ListFindings",
            "inspector2:ListMembers",
            "inspector2:ListTagsForResource",
            "inspector2:ListUsageTotals",
            "inspector2:SearchVulnerabilities",
            "inspector:Describe*",
            "inspector:Get*",
            "inspector:List*",
            "inspector:Preview*",
            "interconnect:DescribeConnectionProposal",
            "interconnect:GetConnection",
            "interconnect:GetEnvironment",
            "interconnect:ListAttachPoints",
            "interconnect:ListConnections",
            "interconnect:ListEnvironments",
            "interconnect:ListTagsForResource",
            "internetmonitor:GetHealthEvent",
            "internetmonitor:GetInternetEvent",
            "internetmonitor:GetMonitor",
            "internetmonitor:ListHealthEvents",
            "internetmonitor:ListInternetEvents",
            "internetmonitor:ListMonitors",
            "internetmonitor:ListTagsForResource",
            "invoicing:GetInvoiceEmailDeliveryPreferences",
            "invoicing:GetInvoicePDF",
            "invoicing:ListInvoiceSummaries",
            "iot1click:DescribeDevice",
            "iot1click:DescribePlacement",
            "iot1click:DescribeProject",
            "iot1click:GetDeviceMethods",
            "iot1click:GetDevicesInPlacement",
            "iot1click:ListDeviceEvents",
            "iot1click:ListDevices",
            "iot1click:ListPlacements",
            "iot1click:ListProjects",
            "iot1click:ListTagsForResource",
            "iot:Describe*",
            "iot:Get*",
            "iot:List*",
            "iotanalytics:Describe*",
            "iotanalytics:Get*",
            "iotanalytics:List*",
            "iotanalytics:SampleChannelData",
            "iotevents:DescribeAlarm",
            "iotevents:DescribeAlarmModel",
            "iotevents:DescribeDetector",
            "iotevents:DescribeDetectorModel",
            "iotevents:DescribeInput",
            "iotevents:DescribeLoggingOptions",
            "iotevents:ListAlarmModelVersions",
            "iotevents:ListAlarmModels",
            "iotevents:ListAlarms",
            "iotevents:ListDetectorModelVersions",
            "iotevents:ListDetectorModels",
            "iotevents:ListDetectors",
            "iotevents:ListInputs",
            "iotevents:ListTagsForResource",
            "iotfleethub:DescribeApplication",
            "iotfleethub:ListApplications",
            "iotfleetwise:GetCampaign",
            "iotfleetwise:GetDecoderManifest",
            "iotfleetwise:GetFleet",
            "iotfleetwise:GetLoggingOptions",
            "iotfleetwise:GetModelManifest",
            "iotfleetwise:GetRegisterAccountStatus",
            "iotfleetwise:GetSignalCatalog",
            "iotfleetwise:GetVehicle",
            "iotfleetwise:GetVehicleStatus",
            "iotfleetwise:ListCampaigns",
            "iotfleetwise:ListDecoderManifestNetworkInterfaces",
            "iotfleetwise:ListDecoderManifestSignals",
            "iotfleetwise:ListDecoderManifests",
            "iotfleetwise:ListFleets",
            "iotfleetwise:ListFleetsForVehicle",
            "iotfleetwise:ListModelManifestNodes",
            "iotfleetwise:ListModelManifests",
            "iotfleetwise:ListSignalCatalogNodes",
            "iotfleetwise:ListSignalCatalogs",
            "iotfleetwise:ListTagsForResource",
            "iotfleetwise:ListVehicles",
            "iotfleetwise:ListVehiclesInFleet",
            "iotsitewise:Describe*",
            "iotsitewise:Get*",
            "iotsitewise:List*",
            "iotwireless:GetDestination",
            "iotwireless:GetDeviceProfile",
            "iotwireless:GetEventConfigurationByResourceTypes",
            "iotwireless:GetFuotaTask",
            "iotwireless:GetLogLevelsByResourceTypes",
            "iotwireless:GetMetricConfiguration",
            "iotwireless:GetMetrics",
            "iotwireless:GetMulticastGroup",
            "iotwireless:GetMulticastGroupSession",
            "iotwireless:GetNetworkAnalyzerConfiguration",
            "iotwireless:GetPartnerAccount",
            "iotwireless:GetPosition",
            "iotwireless:GetPositionConfiguration",
            "iotwireless:GetPositionEstimate",
            "iotwireless:GetResourceEventConfiguration",
            "iotwireless:GetResourceLogLevel",
            "iotwireless:GetResourcePosition",
            "iotwireless:GetServiceEndpoint",
            "iotwireless:GetServiceProfile",
            "iotwireless:GetWirelessDevice",
            "iotwireless:GetWirelessDeviceImportTask",
            "iotwireless:GetWirelessDeviceStatistics",
            "iotwireless:GetWirelessGateway",
            "iotwireless:GetWirelessGatewayCertificate",
            "iotwireless:GetWirelessGatewayFirmwareInformation",
            "iotwireless:GetWirelessGatewayStatistics",
            "iotwireless:GetWirelessGatewayTask",
            "iotwireless:GetWirelessGatewayTaskDefinition",
            "iotwireless:ListDestinations",
            "iotwireless:ListDeviceProfiles",
            "iotwireless:ListDevicesForWirelessDeviceImportTask",
            "iotwireless:ListEventConfigurations",
            "iotwireless:ListFuotaTasks",
            "iotwireless:ListMulticastGroups",
            "iotwireless:ListMulticastGroupsByFuotaTask",
            "iotwireless:ListNetworkAnalyzerConfigurations",
            "iotwireless:ListPartnerAccounts",
            "iotwireless:ListPositionConfigurations",
            "iotwireless:ListQueuedMessages",
            "iotwireless:ListServiceProfiles",
            "iotwireless:ListTagsForResource",
            "iotwireless:ListWirelessDeviceImportTasks",
            "iotwireless:ListWirelessDevices",
            "iotwireless:ListWirelessGatewayTaskDefinitions",
            "iotwireless:ListWirelessGateways",
            "ivs:BatchGetChannel",
            "ivs:GetChannel",
            "ivs:GetComposition",
            "ivs:GetEncoderConfiguration",
            "ivs:GetIngestConfiguration",
            "ivs:GetParticipant",
            "ivs:GetPlaybackKeyPair",
            "ivs:GetPlaybackRestrictionPolicy",
            "ivs:GetPublicKey",
            "ivs:GetRecordingConfiguration",
            "ivs:GetStage",
            "ivs:GetStageSession",
            "ivs:GetStorageConfiguration",
            "ivs:GetStream",
            "ivs:GetStreamSession",
            "ivs:ListChannels",
            "ivs:ListCompositions",
            "ivs:ListEncoderConfigurations",
            "ivs:ListIngestConfigurations",
            "ivs:ListParticipantEvents",
            "ivs:ListParticipants",
            "ivs:ListPlaybackKeyPairs",
            "ivs:ListPlaybackRestrictionPolicies",
            "ivs:ListPublicKeys",
            "ivs:ListRecordingConfigurations",
            "ivs:ListStageSessions",
            "ivs:ListStages",
            "ivs:ListStorageConfigurations",
            "ivs:ListStreamKeys",
            "ivs:ListStreamSessions",
            "ivs:ListStreams",
            "ivs:ListTagsForResource",
            "ivschat:GetLoggingConfiguration",
            "ivschat:GetRoom",
            "ivschat:ListLoggingConfigurations",
            "ivschat:ListRooms",
            "ivschat:ListTagsForResource",
            "startups:GetSpendSummary"
          ],
          "Resource": "*"
        },
        {
          "Sid": "ReadOnlyActionsGroup2",
          "Effect": "Allow",
          "Action": [
            "kafka:Describe*",
            "kafka:DescribeCluster",
            "kafka:DescribeClusterOperation",
            "kafka:DescribeClusterV2",
            "kafka:DescribeConfiguration",
            "kafka:DescribeConfigurationRevision",
            "kafka:Get*",
            "kafka:GetBootstrapBrokers",
            "kafka:GetCompatibleKafkaVersions",
            "kafka:List*",
            "kafka:ListClusterOperations",
            "kafka:ListClusters",
            "kafka:ListClustersV2",
            "kafka:ListConfigurationRevisions",
            "kafka:ListConfigurations",
            "kafka:ListKafkaVersions",
            "kafka:ListNodes",
            "kafka:ListTagsForResource",
            "kafkaconnect:DescribeConnector",
            "kafkaconnect:DescribeCustomPlugin",
            "kafkaconnect:DescribeWorkerConfiguration",
            "kafkaconnect:ListConnectors",
            "kafkaconnect:ListCustomPlugins",
            "kafkaconnect:ListWorkerConfigurations",
            "kendra:BatchGetDocumentStatus",
            "kendra:DescribeDataSource",
            "kendra:DescribeExperience",
            "kendra:DescribeFaq",
            "kendra:DescribeIndex",
            "kendra:DescribePrincipalMapping",
            "kendra:DescribeQuerySuggestionsBlockList",
            "kendra:DescribeQuerySuggestionsConfig",
            "kendra:DescribeThesaurus",
            "kendra:GetQuerySuggestions",
            "kendra:GetSnapshots",
            "kendra:ListDataSourceSyncJobs",
            "kendra:ListDataSources",
            "kendra:ListEntityPersonas",
            "kendra:ListExperienceEntities",
            "kendra:ListExperiences",
            "kendra:ListFaqs",
            "kendra:ListGroupsOlderThanOrderingId",
            "kendra:ListIndices",
            "kendra:ListQuerySuggestionsBlockLists",
            "kendra:ListTagsForResource",
            "kendra:ListThesauri",
            "kendra:Query",
            "kinesis:Describe*",
            "kinesis:Get*",
            "kinesis:List*",
            "kinesisanalytics:Describe*",
            "kinesisanalytics:Discover*",
            "kinesisanalytics:Get*",
            "kinesisanalytics:List*",
            "kinesisvideo:Describe*",
            "kinesisvideo:Get*",
            "kinesisvideo:List*",
            "kms:Describe*",
            "kms:Get*",
            "kms:List*",
            "lakeformation:DescribeResource",
            "lakeformation:GetDataCellsFilter",
            "lakeformation:GetDataLakeSettings",
            "lakeformation:GetEffectivePermissionsForPath",
            "lakeformation:GetLfTag",
            "lakeformation:GetResourceLfTags",
            "lakeformation:ListDataCellsFilter",
            "lakeformation:ListLfTags",
            "lakeformation:ListPermissions",
            "lakeformation:ListResources",
            "lakeformation:ListTableStorageOptimizers",
            "lakeformation:SearchDatabasesByLfTags",
            "lakeformation:SearchTablesByLfTags",
            "lambda:Get*",
            "lambda:List*",
            "launchwizard:DescribeAdditionalNode",
            "launchwizard:DescribeProvisionedApp",
            "launchwizard:DescribeProvisioningEvents",
            "launchwizard:DescribeSettingsSet",
            "launchwizard:GetDeployment",
            "launchwizard:GetInfrastructureSuggestion",
            "launchwizard:GetIpAddress",
            "launchwizard:GetResourceCostEstimate",
            "launchwizard:GetResourceRecommendation",
            "launchwizard:GetSettingsSet",
            "launchwizard:GetWorkload",
            "launchwizard:GetWorkloadAsset",
            "launchwizard:GetWorkloadAssets",
            "launchwizard:GetWorkloadDeploymentPattern",
            "launchwizard:ListAdditionalNodes",
            "launchwizard:ListAllowedResources",
            "launchwizard:ListDeploymentEvents",
            "launchwizard:ListDeployments",
            "launchwizard:ListProvisionedApps",
            "launchwizard:ListResourceCostEstimates",
            "launchwizard:ListSettingsSets",
            "launchwizard:ListTagsForResource",
            "launchwizard:ListWorkloadDeploymentOptions",
            "launchwizard:ListWorkloadDeploymentPatterns",
            "launchwizard:ListWorkloads",
            "lex:DescribeBot",
            "lex:DescribeBotAlias",
            "lex:DescribeBotChannel",
            "lex:DescribeBotLocale",
            "lex:DescribeBotReplica",
            "lex:DescribeBotVersion",
            "lex:DescribeExport",
            "lex:DescribeImport",
            "lex:DescribeIntent",
            "lex:DescribeResourcePolicy",
            "lex:DescribeSlot",
            "lex:DescribeSlotType",
            "lex:Get*",
            "lex:ListBotAliasReplicas",
            "lex:ListBotAliases",
            "lex:ListBotChannels",
            "lex:ListBotLocales",
            "lex:ListBotReplicas",
            "lex:ListBotVersionReplicas",
            "lex:ListBotVersions",
            "lex:ListBots",
            "lex:ListBuiltInIntents",
            "lex:ListBuiltInSlotTypes",
            "lex:ListExports",
            "lex:ListImports",
            "lex:ListIntents",
            "lex:ListSlotTypes",
            "lex:ListSlots",
            "lex:ListTagsForResource",
            "license-manager:Get*",
            "license-manager:List*",
            "lightsail:GetActiveNames",
            "lightsail:GetAlarms",
            "lightsail:GetAutoSnapshots",
            "lightsail:GetBlueprints",
            "lightsail:GetBucketAccessKeys",
            "lightsail:GetBucketBundles",
            "lightsail:GetBucketMetricData",
            "lightsail:GetBuckets",
            "lightsail:GetBundles",
            "lightsail:GetCertificates",
            "lightsail:GetCloudFormationStackRecords",
            "lightsail:GetContainerAPIMetadata",
            "lightsail:GetContainerImages",
            "lightsail:GetContainerServiceDeployments",
            "lightsail:GetContainerServiceMetricData",
            "lightsail:GetContainerServicePowers",
            "lightsail:GetContainerServices",
            "lightsail:GetDisk",
            "lightsail:GetDiskSnapshot",
            "lightsail:GetDiskSnapshots",
            "lightsail:GetDisks",
            "lightsail:GetDistributionBundles",
            "lightsail:GetDistributionLatestCacheReset",
            "lightsail:GetDistributionMetricData",
            "lightsail:GetDistributions",
            "lightsail:GetDomain",
            "lightsail:GetDomains",
            "lightsail:GetExportSnapshotRecords",
            "lightsail:GetInstance",
            "lightsail:GetInstanceMetricData",
            "lightsail:GetInstancePortStates",
            "lightsail:GetInstanceSnapshot",
            "lightsail:GetInstanceSnapshots",
            "lightsail:GetInstanceState",
            "lightsail:GetInstances",
            "lightsail:GetKeyPair",
            "lightsail:GetKeyPairs",
            "lightsail:GetLoadBalancer",
            "lightsail:GetLoadBalancerMetricData",
            "lightsail:GetLoadBalancerTlsCertificates",
            "lightsail:GetLoadBalancers",
            "lightsail:GetOperation",
            "lightsail:GetOperations",
            "lightsail:GetOperationsForResource",
            "lightsail:GetRegions",
            "lightsail:GetRelationalDatabase",
            "lightsail:GetRelationalDatabaseBlueprints",
            "lightsail:GetRelationalDatabaseBundles",
            "lightsail:GetRelationalDatabaseEvents",
            "lightsail:GetRelationalDatabaseLogEvents",
            "lightsail:GetRelationalDatabaseLogStreams",
            "lightsail:GetRelationalDatabaseMetricData",
            "lightsail:GetRelationalDatabaseParameters",
            "lightsail:GetRelationalDatabaseSnapshot",
            "lightsail:GetRelationalDatabaseSnapshots",
            "lightsail:GetRelationalDatabases",
            "lightsail:GetStaticIp",
            "lightsail:GetStaticIps",
            "lightsail:Is*",
            "logs:Describe*",
            "logs:FilterLogEvents",
            "logs:Get*",
            "logs:ListAggregateLogGroupSummaries",
            "logs:ListAnomalies",
            "logs:ListEntitiesForLogGroup",
            "logs:ListIntegrations",
            "logs:ListLogAnomalyDetectors",
            "logs:ListLogDeliveries",
            "logs:ListLogGroupsForEntity",
            "logs:ListLogGroupsForQuery",
            "logs:ListScheduledQueries",
            "logs:ListSourcesForS3TableIntegration",
            "logs:ListTagsForResource",
            "logs:ListTagsLogGroup",
            "logs:StartLiveTail",
            "logs:StartQuery",
            "logs:StopLiveTail",
            "logs:StopQuery",
            "logs:TestMetricFilter",
            "lookoutequipment:DescribeDataIngestionJob",
            "lookoutequipment:DescribeDataset",
            "lookoutequipment:DescribeInferenceScheduler",
            "lookoutequipment:DescribeLabel",
            "lookoutequipment:DescribeLabelGroup",
            "lookoutequipment:DescribeModel",
            "lookoutequipment:DescribeModelVersion",
            "lookoutequipment:DescribeResourcePolicy",
            "lookoutequipment:DescribeRetrainingScheduler",
            "lookoutequipment:ListDataIngestionJobs",
            "lookoutequipment:ListDatasets",
            "lookoutequipment:ListInferenceEvents",
            "lookoutequipment:ListInferenceExecutions",
            "lookoutequipment:ListInferenceSchedulers",
            "lookoutequipment:ListLabelGroups",
            "lookoutequipment:ListLabels",
            "lookoutequipment:ListModelVersions",
            "lookoutequipment:ListModels",
            "lookoutequipment:ListRetrainingSchedulers",
            "lookoutequipment:ListSensorStatistics",
            "lookoutequipment:ListTagsForResource",
            "lookoutmetrics:Describe*",
            "lookoutmetrics:Get*",
            "lookoutmetrics:List*",
            "lookoutvision:DescribeDataset",
            "lookoutvision:DescribeModel",
            "lookoutvision:DescribeModelPackagingJob",
            "lookoutvision:DescribeProject",
            "lookoutvision:ListDatasetEntries",
            "lookoutvision:ListModelPackagingJobs",
            "lookoutvision:ListModels",
            "lookoutvision:ListProjects",
            "lookoutvision:ListTagsForResource",
            "m2:GetApplication",
            "m2:GetApplicationVersion",
            "m2:GetBatchJobExecution",
            "m2:GetDataSetDetails",
            "m2:GetDataSetImportTask",
            "m2:GetDeployment",
            "m2:GetEnvironment",
            "m2:ListApplicationVersions",
            "m2:ListApplications",
            "m2:ListBatchJobDefinitions",
            "m2:ListBatchJobExecutions",
            "m2:ListDataSetImportHistory",
            "m2:ListDataSets",
            "m2:ListDeployments",
            "m2:ListEngineVersions",
            "m2:ListEnvironments",
            "m2:ListTagsForResource",
            "machinelearning:Describe*",
            "machinelearning:Get*",
            "macie2:BatchGetCustomDataIdentifiers",
            "macie2:DescribeBuckets",
            "macie2:DescribeClassificationJob",
            "macie2:DescribeOrganizationConfiguration",
            "macie2:GetAdministratorAccount",
            "macie2:GetAllowList",
            "macie2:GetAutomatedDiscoveryConfiguration",
            "macie2:GetBucketStatistics",
            "macie2:GetClassificationExportConfiguration",
            "macie2:GetClassificationScope",
            "macie2:GetCustomDataIdentifier",
            "macie2:GetFindingStatistics",
            "macie2:GetFindings",
            "macie2:GetFindingsFilter",
            "macie2:GetFindingsPublicationConfiguration",
            "macie2:GetInvitationsCount",
            "macie2:GetMacieSession",
            "macie2:GetMember",
            "macie2:GetResourceProfile",
            "macie2:GetRevealConfiguration",
            "macie2:GetSensitiveDataOccurrencesAvailability",
            "macie2:GetSensitivityInspectionTemplate",
            "macie2:GetUsageStatistics",
            "macie2:GetUsageTotals",
            "macie2:ListAllowLists",
            "macie2:ListAutomatedDiscoveryAccounts",
            "macie2:ListClassificationJobs",
            "macie2:ListClassificationScopes",
            "macie2:ListCustomDataIdentifiers",
            "macie2:ListFindings",
            "macie2:ListFindingsFilters",
            "macie2:ListInvitations",
            "macie2:ListMembers",
            "macie2:ListOrganizationAdminAccounts",
            "macie2:ListResourceProfileArtifacts",
            "macie2:ListResourceProfileDetections",
            "macie2:ListSensitivityInspectionTemplates",
            "macie2:ListTagsForResource",
            "macie2:SearchResources",
            "managedblockchain:GetMember",
            "managedblockchain:GetNetwork",
            "managedblockchain:GetNode",
            "managedblockchain:GetProposal",
            "managedblockchain:ListInvitations",
            "managedblockchain:ListMembers",
            "managedblockchain:ListNetworks",
            "managedblockchain:ListNodes",
            "managedblockchain:ListProposalVotes",
            "managedblockchain:ListProposals",
            "managedblockchain:ListTagsForResource",
            "mediaconnect:DescribeFlow",
            "mediaconnect:DescribeFlowSourceMetadata",
            "mediaconnect:DescribeFlowSourceThumbnail",
            "mediaconnect:DescribeGateway",
            "mediaconnect:DescribeGatewayInstance",
            "mediaconnect:DescribeOffering",
            "mediaconnect:DescribeReservation",
            "mediaconnect:DiscoverGatewayPollEndpoint",
            "mediaconnect:GetRouterInput",
            "mediaconnect:GetRouterNetworkInterface",
            "mediaconnect:GetRouterOutput",
            "mediaconnect:ListBridges",
            "mediaconnect:ListEntitlements",
            "mediaconnect:ListFlows",
            "mediaconnect:ListGatewayInstances",
            "mediaconnect:ListGateways",
            "mediaconnect:ListOfferings",
            "mediaconnect:ListReservations",
            "mediaconnect:ListRouterInputs",
            "mediaconnect:ListRouterNetworkInterfaces",
            "mediaconnect:ListRouterOutputs",
            "mediaconnect:ListTagsForResource",
            "mediaconvert:DescribeEndpoints",
            "mediaconvert:Get*",
            "mediaconvert:List*",
            "mediaconvert:Probe",
            "mediaconvert:SearchJobs",
            "medialive:DescribeAccountConfiguration",
            "medialive:DescribeChannel",
            "medialive:DescribeChannelPlacementGroup",
            "medialive:DescribeCluster",
            "medialive:DescribeInput",
            "medialive:DescribeInputDevice",
            "medialive:DescribeInputDeviceThumbnail",
            "medialive:DescribeInputSecurityGroup",
            "medialive:DescribeMultiplex",
            "medialive:DescribeMultiplexProgram",
            "medialive:DescribeNetwork",
            "medialive:DescribeOffering",
            "medialive:DescribeReservation",
            "medialive:DescribeSchedule",
            "medialive:GetCloudWatchAlarmTemplate",
            "medialive:GetCloudWatchAlarmTemplateGroup",
            "medialive:GetEventBridgeRuleTemplate",
            "medialive:GetEventBridgeRuleTemplateGroup",
            "medialive:GetSignalMap",
            "medialive:ListChannels",
            "medialive:ListCloudWatchAlarmTemplateGroups",
            "medialive:ListCloudWatchAlarmTemplates",
            "medialive:ListEventBridgeRuleTemplateGroups",
            "medialive:ListEventBridgeRuleTemplates",
            "medialive:ListInputDeviceTransfers",
            "medialive:ListInputDevices",
            "medialive:ListInputSecurityGroups",
            "medialive:ListInputs",
            "medialive:ListMultiplexPrograms",
            "medialive:ListMultiplexes",
            "medialive:ListOfferings",
            "medialive:ListReservations",
            "medialive:ListSignalMaps",
            "medialive:ListTagsForResource",
            "mediapackage-vod:Describe*",
            "mediapackage-vod:List*",
            "mediapackage:Describe*",
            "mediapackage:List*",
            "mediapackagev2:GetChannel",
            "mediapackagev2:GetChannelGroup",
            "mediapackagev2:GetChannelPolicy",
            "mediapackagev2:GetHeadObject",
            "mediapackagev2:GetObject",
            "mediapackagev2:GetOriginEndpoint",
            "mediapackagev2:GetOriginEndpointPolicy",
            "mediapackagev2:ListChannelGroups",
            "mediapackagev2:ListChannels",
            "mediapackagev2:ListOriginEndpoints",
            "mediapackagev2:ListTagsForResource",
            "mediastore:DescribeContainer",
            "mediastore:DescribeObject",
            "mediastore:GetContainerPolicy",
            "mediastore:GetCorsPolicy",
            "mediastore:GetLifecyclePolicy",
            "mediastore:GetMetricPolicy",
            "mediastore:GetObject",
            "mediastore:ListContainers",
            "mediastore:ListItems",
            "mediastore:ListTagsForResource",
            "memorydb:DescribeAcls",
            "memorydb:DescribeClusters",
            "memorydb:DescribeEngineVersions",
            "memorydb:DescribeEvents",
            "memorydb:DescribeMultiRegionClusters",
            "memorydb:DescribeMultiRegionParameterGroups",
            "memorydb:DescribeMultiRegionParameters",
            "memorydb:DescribeParameterGroups",
            "memorydb:DescribeParameters",
            "memorydb:DescribeReservedNodes",
            "memorydb:DescribeReservedNodesOfferings",
            "memorydb:DescribeServiceUpdates",
            "memorydb:DescribeSnapshots",
            "memorydb:DescribeSubnetGroups",
            "memorydb:DescribeUsers",
            "memorydb:ListAllowedMultiRegionClusterUpdates",
            "memorydb:ListAllowedNodeTypeUpdates",
            "memorydb:ListTags",
            "mgh:Describe*",
            "mgh:GetHomeRegion",
            "mgh:List*",
            "mgn:DescribeJobLogItems",
            "mgn:DescribeJobs",
            "mgn:DescribeLaunchConfigurationTemplates",
            "mgn:DescribeReplicationConfigurationTemplates",
            "mgn:DescribeSourceServers",
            "mgn:DescribeVcenterClients",
            "mgn:GetLaunchConfiguration",
            "mgn:GetReplicationConfiguration",
            "mgn:ListApplications",
            "mgn:ListSourceServerActions",
            "mgn:ListTemplateActions",
            "mgn:ListWaves",
            "mobileanalytics:Get*",
            "mobiletargeting:Get*",
            "mobiletargeting:List*",
            "monitron:GetProject",
            "monitron:GetProjectAdminUser",
            "monitron:ListProjects",
            "monitron:ListTagsForResource",
            "mpa:GetApprovalTeam",
            "mpa:GetIdentitySource",
            "mpa:GetPolicyVersion",
            "mpa:GetResourcePolicy",
            "mpa:GetSession",
            "mpa:ListApprovalTeams",
            "mpa:ListIdentitySources",
            "mpa:ListPolicies",
            "mpa:ListPolicyVersions",
            "mpa:ListResourcePolicies",
            "mpa:ListSessions",
            "mpa:ListTagsForResource",
            "mq:Describe*",
            "mq:List*",
            "network-firewall:DescribeFirewall",
            "network-firewall:DescribeFirewallPolicy",
            "network-firewall:DescribeLoggingConfiguration",
            "network-firewall:DescribeProxy",
            "network-firewall:DescribeProxyConfiguration",
            "network-firewall:DescribeProxyRule",
            "network-firewall:DescribeProxyRuleGroup",
            "network-firewall:DescribeResourcePolicy",
            "network-firewall:DescribeRuleGroup",
            "network-firewall:DescribeRuleGroupMetadata",
            "network-firewall:DescribeTLSInspectionConfiguration",
            "network-firewall:ListFirewallPolicies",
            "network-firewall:ListFirewalls",
            "network-firewall:ListProxies",
            "network-firewall:ListProxyConfigurations",
            "network-firewall:ListProxyRuleGroups",
            "network-firewall:ListRuleGroups",
            "network-firewall:ListTLSInspectionConfigurations",
            "network-firewall:ListTagsForResource",
            "networkflowmonitor:GetMonitor",
            "networkflowmonitor:GetScope",
            "networkflowmonitor:ListMonitors",
            "networkflowmonitor:ListScopes",
            "networkmanager:DescribeGlobalNetworks",
            "networkmanager:GetConnectAttachment",
            "networkmanager:GetConnectPeer",
            "networkmanager:GetConnectPeerAssociations",
            "networkmanager:GetConnections",
            "networkmanager:GetCoreNetwork",
            "networkmanager:GetCoreNetworkChangeEvents",
            "networkmanager:GetCoreNetworkChangeSet",
            "networkmanager:GetCoreNetworkPolicy",
            "networkmanager:GetCustomerGatewayAssociations",
            "networkmanager:GetDevices",
            "networkmanager:GetLinkAssociations",
            "networkmanager:GetLinks",
            "networkmanager:GetNetworkResourceCounts",
            "networkmanager:GetNetworkResourceRelationships",
            "networkmanager:GetNetworkResources",
            "networkmanager:GetNetworkRoutes",
            "networkmanager:GetNetworkTelemetry",
            "networkmanager:GetResourcePolicy",
            "networkmanager:GetRouteAnalysis",
            "networkmanager:GetSiteToSiteVpnAttachment",
            "networkmanager:GetSites",
            "networkmanager:GetTransitGatewayConnectPeerAssociations",
            "networkmanager:GetTransitGatewayPeering",
            "networkmanager:GetTransitGatewayRegistrations",
            "networkmanager:GetTransitGatewayRouteTableAttachment",
            "networkmanager:GetVpcAttachment",
            "networkmanager:ListAttachmentRoutingPolicyAssociations",
            "networkmanager:ListAttachments",
            "networkmanager:ListConnectPeers",
            "networkmanager:ListCoreNetworkPolicyVersions",
            "networkmanager:ListCoreNetworkPrefixListAssociations",
            "networkmanager:ListCoreNetworkRoutingInformation",
            "networkmanager:ListCoreNetworks",
            "networkmanager:ListPeerings",
            "networkmanager:ListTagsForResource",
            "networkmonitor:GetMonitor",
            "networkmonitor:GetProbe",
            "networkmonitor:ListMonitors",
            "networkmonitor:ListTagsForResource",
            "nimble:GetEula",
            "nimble:GetFeatureMap",
            "nimble:GetLaunchProfile",
            "nimble:GetLaunchProfileDetails",
            "nimble:GetLaunchProfileInitialization",
            "nimble:GetLaunchProfileMember",
            "nimble:GetStreamingImage",
            "nimble:GetStreamingSession",
            "nimble:GetStudio",
            "nimble:GetStudioComponent",
            "nimble:GetStudioMember",
            "nimble:ListEulaAcceptances",
            "nimble:ListEulas",
            "nimble:ListLaunchProfileMembers",
            "nimble:ListLaunchProfiles",
            "nimble:ListStreamingImages",
            "nimble:ListStreamingSessions",
            "nimble:ListStudioComponents",
            "nimble:ListStudioMembers",
            "nimble:ListStudios",
            "nimble:ListTagsForResource",
            "notifications-contacts:GetEmailContact",
            "notifications-contacts:ListEmailContacts",
            "notifications-contacts:ListTagsForResource",
            "notifications:GetEventRule",
            "notifications:GetFeatureOptInStatus",
            "notifications:GetManagedNotificationChildEvent",
            "notifications:GetManagedNotificationConfiguration",
            "notifications:GetManagedNotificationEvent",
            "notifications:GetNotificationConfiguration",
            "notifications:GetNotificationEvent",
            "notifications:GetNotificationsAccessForOrganization",
            "notifications:List*",
            "oam:GetLink",
            "oam:GetSink",
            "oam:GetSinkPolicy",
            "oam:ListAttachedLinks",
            "oam:ListLinks",
            "oam:ListSinks",
            "observabilityadmin:GetCentralizationRuleForOrganization",
            "observabilityadmin:GetS3TableIntegration",
            "observabilityadmin:GetTelemetryEnrichmentStatus",
            "observabilityadmin:GetTelemetryEvaluationStatus",
            "observabilityadmin:GetTelemetryEvaluationStatusForOrganization",
            "observabilityadmin:GetTelemetryPipeline",
            "observabilityadmin:GetTelemetryRule",
            "observabilityadmin:GetTelemetryRuleForOrganization",
            "observabilityadmin:ListCentralizationRulesForOrganization",
            "observabilityadmin:ListResourceTelemetry",
            "observabilityadmin:ListResourceTelemetryForOrganization",
            "observabilityadmin:ListS3TableIntegrations",
            "observabilityadmin:ListTagsForResource",
            "observabilityadmin:ListTelemetryPipelines",
            "observabilityadmin:ListTelemetryRules",
            "observabilityadmin:ListTelemetryRulesForOrganization",
            "observabilityadmin:TestTelemetryPipeline",
            "observabilityadmin:ValidateTelemetryPipelineConfiguration",
            "omics:Get*",
            "omics:List*",
            "one:GetDeviceConfigurationTemplate",
            "one:GetDeviceInstance",
            "one:GetDeviceInstanceConfiguration",
            "one:GetSite",
            "one:GetSiteAddress",
            "one:ListDeviceConfigurationTemplates",
            "one:ListDeviceInstances",
            "one:ListSites",
            "one:ListUsers",
            "opsworks-cm:Describe*",
            "opsworks-cm:List*",
            "opsworks:Describe*",
            "opsworks:Get*",
            "organizations:Describe*",
            "organizations:List*",
            "osis:GetPipeline",
            "osis:GetPipelineBlueprint",
            "osis:GetPipelineChangeProgress",
            "osis:ListPipelineBlueprints",
            "osis:ListPipelines",
            "osis:ListTagsForResource",
            "outposts:Get*",
            "outposts:List*",
            "payment-cryptography:GetAlias",
            "payment-cryptography:GetKey",
            "payment-cryptography:GetPublicKeyCertificate",
            "payment-cryptography:ListAliases",
            "payment-cryptography:ListKeys",
            "payment-cryptography:ListTagsForResource",
            "payments:GetPaymentInstrument",
            "payments:GetPaymentStatus",
            "payments:ListPaymentInstruments",
            "payments:ListPaymentPreferences",
            "payments:ListPaymentProgramOptions",
            "payments:ListPaymentProgramStatus",
            "payments:ListTagsForResource",
            "pca-connector-ad:GetConnector",
            "pca-connector-ad:GetDirectoryRegistration",
            "pca-connector-ad:GetServicePrincipalName",
            "pca-connector-ad:GetTemplate",
            "pca-connector-ad:GetTemplateGroupAccessControlEntry",
            "pca-connector-ad:ListConnectors",
            "pca-connector-ad:ListDirectoryRegistrations",
            "pca-connector-ad:ListServicePrincipalNames",
            "pca-connector-ad:ListTagsForResource",
            "pca-connector-ad:ListTemplateGroupAccessControlEntries",
            "pca-connector-ad:ListTemplates",
            "pca-connector-scep:GetChallengeMetadata",
            "pca-connector-scep:GetConnector",
            "pca-connector-scep:ListChallengeMetadata",
            "pca-connector-scep:ListConnectors",
            "pca-connector-scep:ListTagsForResource",
            "pcs:GetCluster",
            "pcs:GetComputeNodeGroup",
            "pcs:GetQueue",
            "pcs:ListClusters",
            "pcs:ListComputeNodeGroups",
            "pcs:ListQueues",
            "pcs:ListTagsForResource",
            "personalize:Describe*",
            "personalize:Get*",
            "personalize:List*",
            "pi:DescribeDimensionKeys",
            "pi:GetDimensionKeyDetails",
            "pi:GetResourceMetadata",
            "pi:GetResourceMetrics",
            "pi:ListAvailableResourceDimensions",
            "pi:ListAvailableResourceMetrics",
            "pipes:DescribePipe",
            "pipes:ListPipes",
            "pipes:ListTagsForResource",
            "polly:Describe*",
            "polly:Get*",
            "polly:List*",
            "polly:SynthesizeSpeech",
            "pricing:DescribeServices",
            "pricing:GetAttributeValues",
            "pricing:GetPriceListFileUrl",
            "pricing:GetProducts",
            "pricing:ListPriceLists",
            "proton:GetDeployment",
            "proton:GetEnvironment",
            "proton:GetEnvironmentTemplate",
            "proton:GetEnvironmentTemplateVersion",
            "proton:GetService",
            "proton:GetServiceInstance",
            "proton:GetServiceTemplate",
            "proton:GetServiceTemplateVersion",
            "proton:ListDeployments",
            "proton:ListEnvironmentAccountConnections",
            "proton:ListEnvironmentTemplates",
            "proton:ListEnvironments",
            "proton:ListServiceInstances",
            "proton:ListServiceTemplates",
            "proton:ListServices",
            "proton:ListTagsForResource",
            "purchase-orders:GetPurchaseOrder",
            "purchase-orders:ListPurchaseOrderInvoices",
            "purchase-orders:ListPurchaseOrders",
            "purchase-orders:ViewPurchaseOrders",
            "qbusiness:GetApplication",
            "qbusiness:GetChatControlsConfiguration",
            "qbusiness:GetDataSource",
            "qbusiness:GetGroup",
            "qbusiness:GetIndex",
            "qbusiness:GetPlugin",
            "qbusiness:GetRetriever",
            "qbusiness:GetUser",
            "qbusiness:GetWebExperience",
            "qbusiness:ListApplications",
            "qbusiness:ListDataSourceSyncJobs",
            "qbusiness:ListDataSources",
            "qbusiness:ListGroups",
            "qbusiness:ListIndices",
            "qbusiness:ListPlugins",
            "qbusiness:ListRetrievers",
            "qbusiness:ListSubscriptions",
            "qbusiness:ListTagsForResource",
            "qbusiness:ListWebExperiences",
            "qldb:DescribeJournalKinesisStream",
            "qldb:DescribeJournalS3Export",
            "qldb:DescribeLedger",
            "qldb:GetBlock",
            "qldb:GetDigest",
            "qldb:GetRevision",
            "qldb:ListJournalKinesisStreamsForLedger",
            "qldb:ListJournalS3Exports",
            "qldb:ListJournalS3ExportsForLedger",
            "qldb:ListLedgers",
            "qldb:ListTagsForResource",
            "ram:Get*",
            "ram:List*",
            "rbin:GetRule",
            "rbin:ListRules",
            "rbin:ListTagsForResource",
            "rds:Describe*",
            "rds:Download*",
            "rds:List*",
            "redshift-serverless:GetCustomDomainAssociation",
            "redshift-serverless:GetEndpointAccess",
            "redshift-serverless:GetNamespace",
            "redshift-serverless:GetRecoveryPoint",
            "redshift-serverless:GetResourcePolicy",
            "redshift-serverless:GetScheduledAction",
            "redshift-serverless:GetSnapshot",
            "redshift-serverless:GetTableRestoreStatus",
            "redshift-serverless:GetUsageLimit",
            "redshift-serverless:GetWorkgroup",
            "redshift-serverless:ListCustomDomainAssociations",
            "redshift-serverless:ListEndpointAccess",
            "redshift-serverless:ListNamespaces",
            "redshift-serverless:ListRecoveryPoints",
            "redshift-serverless:ListScheduledActions",
            "redshift-serverless:ListSnapshotCopyConfigurations",
            "redshift-serverless:ListSnapshots",
            "redshift-serverless:ListTableRestoreStatus",
            "redshift-serverless:ListTagsForResource",
            "redshift-serverless:ListUsageLimits",
            "redshift-serverless:ListWorkgroups",
            "redshift:Describe*",
            "redshift:GetReservedNodeExchangeOfferings",
            "redshift:ListRecommendations",
            "redshift:View*",
            "refactor-spaces:GetApplication",
            "refactor-spaces:GetEnvironment",
            "refactor-spaces:GetResourcePolicy",
            "refactor-spaces:GetRoute",
            "refactor-spaces:GetService",
            "refactor-spaces:ListApplications",
            "refactor-spaces:ListEnvironmentVpcs",
            "refactor-spaces:ListEnvironments",
            "refactor-spaces:ListRoutes",
            "refactor-spaces:ListServices",
            "refactor-spaces:ListTagsForResource",
            "rekognition:CompareFaces",
            "rekognition:DescribeDataset",
            "rekognition:DescribeProjectVersions",
            "rekognition:DescribeProjects",
            "rekognition:DescribeStreamProcessor",
            "rekognition:Detect*",
            "rekognition:GetCelebrityInfo",
            "rekognition:GetCelebrityRecognition",
            "rekognition:GetContentModeration",
            "rekognition:GetFaceDetection",
            "rekognition:GetFaceSearch",
            "rekognition:GetLabelDetection",
            "rekognition:GetPersonTracking",
            "rekognition:GetSegmentDetection",
            "rekognition:GetTextDetection",
            "rekognition:List*",
            "rekognition:RecognizeCelebrities",
            "rekognition:Search*",
            "resiliencehub:DescribeApp",
            "resiliencehub:DescribeAppAssessment",
            "resiliencehub:DescribeAppVersion",
            "resiliencehub:DescribeAppVersionAppComponent",
            "resiliencehub:DescribeAppVersionResource",
            "resiliencehub:DescribeAppVersionResourcesResolutionStatus",
            "resiliencehub:DescribeAppVersionTemplate",
            "resiliencehub:DescribeDraftAppVersionResourcesImportStatus",
            "resiliencehub:DescribeMetricsExport",
            "resiliencehub:DescribeResiliencyPolicy",
            "resiliencehub:DescribeResourceGroupingRecommendationTask",
            "resiliencehub:GetFailureModeFinding",
            "resiliencehub:GetPolicy",
            "resiliencehub:GetService",
            "resiliencehub:GetSystem",
            "resiliencehub:GetUserJourney",
            "resiliencehub:ListAlarmRecommendations",
            "resiliencehub:ListAppAssessmentComplianceDrifts",
            "resiliencehub:ListAppAssessmentResourceDrifts",
            "resiliencehub:ListAppAssessments",
            "resiliencehub:ListAppComponentCompliances",
            "resiliencehub:ListAppComponentRecommendations",
            "resiliencehub:ListAppInputSources",
            "resiliencehub:ListAppVersionAppComponents",
            "resiliencehub:ListAppVersionResourceMappings",
            "resiliencehub:ListAppVersionResources",
            "resiliencehub:ListAppVersions",
            "resiliencehub:ListApps",
            "resiliencehub:ListAssertions",
            "resiliencehub:ListDependencies",
            "resiliencehub:ListFailureModeAssessments",
            "resiliencehub:ListFailureModeFindings",
            "resiliencehub:ListInputSources",
            "resiliencehub:ListMetrics",
            "resiliencehub:ListPolicies",
            "resiliencehub:ListRecommendationTemplates",
            "resiliencehub:ListReports",
            "resiliencehub:ListResiliencyPolicies",
            "resiliencehub:ListResourceGroupingRecommendations",
            "resiliencehub:ListResources",
            "resiliencehub:ListServiceEvents",
            "resiliencehub:ListServiceEvents",
            "resiliencehub:ListServiceFunctions",
            "resiliencehub:ListServiceFunctions",
            "resiliencehub:ListServiceTopologyEdges",
            "resiliencehub:ListServices",
            "resiliencehub:ListSopRecommendations",
            "resiliencehub:ListSuggestedResiliencyPolicies",
            "resiliencehub:ListSystemEvents",
            "resiliencehub:ListSystems",
            "resiliencehub:ListTagsForResource",
            "resiliencehub:ListTestRecommendations",
            "resiliencehub:ListUnsupportedAppVersionResources",
            "resiliencehub:ListUserJourneys",
            "resource-explorer-2:BatchGetView",
            "resource-explorer-2:GetAccountLevelServiceConfiguration",
            "resource-explorer-2:GetDefaultView",
            "resource-explorer-2:GetIndex",
            "resource-explorer-2:GetManagedView",
            "resource-explorer-2:GetResourceExplorerSetup",
            "resource-explorer-2:GetServiceIndex",
            "resource-explorer-2:GetServiceView",
            "resource-explorer-2:GetView",
            "resource-explorer-2:ListIndexes",
            "resource-explorer-2:ListIndexesForMembers",
            "resource-explorer-2:ListManagedViews",
            "resource-explorer-2:ListServiceIndexes",
            "resource-explorer-2:ListServiceViews",
            "resource-explorer-2:ListStreamingAccessForServices",
            "resource-explorer-2:ListSupportedResourceTypes",
            "resource-explorer-2:ListTagsForResource",
            "resource-explorer-2:ListViews",
            "resource-explorer-2:Search",
            "resource-groups:Get*",
            "resource-groups:List*",
            "resource-groups:Search*",
            "robomaker:BatchDescribe*",
            "robomaker:Describe*",
            "robomaker:Get*",
            "robomaker:List*",
            "rolesanywhere:GetCrl",
            "rolesanywhere:GetProfile",
            "rolesanywhere:GetSubject",
            "rolesanywhere:GetTrustAnchor",
            "rolesanywhere:ListCrls",
            "rolesanywhere:ListProfiles",
            "rolesanywhere:ListSubjects",
            "rolesanywhere:ListTagsForResource",
            "rolesanywhere:ListTrustAnchors",
            "route53-recovery-cluster:Get*",
            "route53-recovery-cluster:ListRoutingControls",
            "route53-recovery-control-config:Describe*",
            "route53-recovery-control-config:GetResourcePolicy",
            "route53-recovery-control-config:List*",
            "route53-recovery-readiness:Get*",
            "route53-recovery-readiness:List*",
            "route53:Get*",
            "route53:List*",
            "route53:Test*",
            "route53domains:Check*",
            "route53domains:Get*",
            "route53domains:List*",
            "route53domains:View*",
            "route53globalresolver:GetAccessSource",
            "route53globalresolver:GetDNSView",
            "route53globalresolver:GetFirewallDomainList",
            "route53globalresolver:GetFirewallRule",
            "route53globalresolver:GetGlobalResolver",
            "route53globalresolver:GetHostedZoneAssociation",
            "route53globalresolver:GetManagedFirewallDomainList",
            "route53globalresolver:ListAccessSources",
            "route53globalresolver:ListAccessTokens",
            "route53globalresolver:ListDNSViews",
            "route53globalresolver:ListFirewallDomainLists",
            "route53globalresolver:ListFirewallDomains",
            "route53globalresolver:ListFirewallRules",
            "route53globalresolver:ListGlobalResolvers",
            "route53globalresolver:ListHostedZoneAssociations",
            "route53globalresolver:ListManagedFirewallDomainLists",
            "route53profiles:GetProfile",
            "route53profiles:GetProfileAssociation",
            "route53profiles:GetProfileResourceAssociation",
            "route53profiles:ListProfileAssociations",
            "route53profiles:ListProfileResourceAssociations",
            "route53profiles:ListProfiles",
            "route53profiles:ListTagsForResource",
            "route53resolver:Get*",
            "route53resolver:List*",
            "rum:GetAppMonitor",
            "rum:GetAppMonitorData",
            "rum:ListAppMonitors",
            "s3-object-lambda:GetObject",
            "s3-object-lambda:GetObjectAcl",
            "s3-object-lambda:GetObjectLegalHold",
            "s3-object-lambda:GetObjectRetention",
            "s3-object-lambda:GetObjectTagging",
            "s3-object-lambda:GetObjectVersion",
            "s3-object-lambda:GetObjectVersionAcl",
            "s3-object-lambda:GetObjectVersionTagging",
            "s3-object-lambda:ListBucket",
            "s3-object-lambda:ListBucketMultipartUploads",
            "s3-object-lambda:ListBucketVersions",
            "s3-object-lambda:ListMultipartUploadParts",
            "s3-outposts:GetAccessPoint",
            "s3-outposts:GetAccessPointPolicy",
            "s3-outposts:GetBucket",
            "s3-outposts:GetBucketPolicy",
            "s3-outposts:GetBucketTagging",
            "s3-outposts:GetBucketVersioning",
            "s3-outposts:GetLifecycleConfiguration",
            "s3-outposts:GetObject",
            "s3-outposts:GetObjectTagging",
            "s3-outposts:GetObjectVersion",
            "s3-outposts:GetObjectVersionForReplication",
            "s3-outposts:GetObjectVersionTagging",
            "s3-outposts:GetReplicationConfiguration",
            "s3-outposts:ListAccessPoints",
            "s3-outposts:ListBucket",
            "s3-outposts:ListBucketMultipartUploads",
            "s3-outposts:ListBucketVersions",
            "s3-outposts:ListEndpoints",
            "s3-outposts:ListMultipartUploadParts",
            "s3-outposts:ListOutpostsWithS3",
            "s3-outposts:ListRegionalBuckets",
            "s3-outposts:ListSharedEndpoints",
            "s3:DescribeJob",
            "s3:Get*",
            "s3:List*",
            "s3express:GetAccessPoint",
            "s3express:GetAccessPointPolicy",
            "s3express:GetAccessPointScope",
            "s3express:GetBucketPolicy",
            "s3express:GetEncryptionConfiguration",
            "s3express:GetLifecycleConfiguration",
            "s3express:ListAccessPointsForDirectoryBuckets",
            "s3express:ListAllMyDirectoryBuckets",
            "s3express:ListTagsForResource",
            "s3files:GetAccessPoint",
            "s3files:GetFileSystem",
            "s3files:GetFileSystemPolicy",
            "s3files:GetMountTarget",
            "s3files:GetSynchronizationConfiguration",
            "s3files:ListAccessPoints",
            "s3files:ListFileSystems",
            "s3files:ListMountTargets",
            "s3files:ListTagsForResource",
            "s3tables:GetNamespace",
            "s3tables:GetTable",
            "s3tables:GetTableBucket",
            "s3tables:GetTableBucketEncryption",
            "s3tables:GetTableBucketMaintenanceConfiguration",
            "s3tables:GetTableBucketPolicy",
            "s3tables:GetTableBucketReplication",
            "s3tables:GetTableBucketStorageClass",
            "s3tables:GetTableData",
            "s3tables:GetTableEncryption",
            "s3tables:GetTableMaintenanceConfiguration",
            "s3tables:GetTableMaintenanceJobStatus",
            "s3tables:GetTableMetadataLocation",
            "s3tables:GetTablePolicy",
            "s3tables:GetTableRecordExpirationConfiguration",
            "s3tables:GetTableRecordExpirationJobStatus",
            "s3tables:GetTableReplication",
            "s3tables:GetTableReplicationStatus",
            "s3tables:GetTableStorageClass",
            "s3tables:ListNamespaces",
            "s3tables:ListTableBuckets",
            "s3tables:ListTables",
            "s3tables:ListTagsForResource",
            "s3vectors:GetIndex",
            "s3vectors:GetVectorBucket",
            "s3vectors:GetVectorBucketPolicy",
            "s3vectors:GetVectors",
            "s3vectors:ListIndexes",
            "s3vectors:ListVectorBuckets",
            "s3vectors:ListVectors",
            "s3vectors:QueryVectors",
            "sagemaker:Describe*",
            "sagemaker:GetSearchSuggestions",
            "sagemaker:List*",
            "sagemaker:Search",
            "savingsplans:DescribeSavingsPlanRates",
            "savingsplans:DescribeSavingsPlans",
            "savingsplans:DescribeSavingsPlansOfferingRates",
            "savingsplans:DescribeSavingsPlansOfferings",
            "savingsplans:ListTagsForResource",
            "scheduler:GetSchedule",
            "scheduler:GetScheduleGroup",
            "scheduler:ListScheduleGroups",
            "scheduler:ListSchedules",
            "scheduler:ListTagsForResource",
            "schemas:Describe*",
            "schemas:Get*",
            "schemas:List*",
            "schemas:Search*",
            "sdb:Get*",
            "sdb:List*",
            "sdb:Select*",
            "secretsmanager:Describe*",
            "secretsmanager:GetResourcePolicy",
            "secretsmanager:List*",
            "securityagent:BatchGetAgentSpaces",
            "securityagent:BatchGetArtifactMetadata",
            "securityagent:BatchGetCodeReviewJobTasks",
            "securityagent:BatchGetCodeReviewJobs",
            "securityagent:BatchGetCodeReviews",
            "securityagent:BatchGetFindings",
            "securityagent:BatchGetPentestJobContentMetadata",
            "securityagent:BatchGetPentestJobTasks",
            "securityagent:BatchGetPentestJobs",
            "securityagent:BatchGetPentests",
            "securityagent:BatchGetTargetDomains",
            "securityagent:BatchGetValidationRuns",
            "securityagent:GetApplication",
            "securityagent:GetArtifact",
            "securityagent:GetDesignReview",
            "securityagent:GetDesignReviewArtifact",
            "securityagent:GetDesignReviewFeedback",
            "securityagent:GetIntegration",
            "securityagent:GetSecurityRequirementPack",
            "securityagent:ListAgentSpaces",
            "securityagent:ListApplications",
            "securityagent:ListArtifacts",
            "securityagent:ListCodeReviewJobTasks",
            "securityagent:ListCodeReviewJobsForCodeReview",
            "securityagent:ListCodeReviews",
            "securityagent:ListDesignReviewComments",
            "securityagent:ListDesignReviews",
            "securityagent:ListDiscoveredDomains",
            "securityagent:ListDiscoveredEndpoints",
            "securityagent:ListFindings",
            "securityagent:ListIntegratedResources",
            "securityagent:ListIntegrations",
            "securityagent:ListMemberships",
            "securityagent:ListPentestJobTasks",
            "securityagent:ListPentestJobsForPentest",
            "securityagent:ListPentests",
            "securityagent:ListResourcesFromIntegration",
            "securityagent:ListSecurityRequirementPacks",
            "securityagent:ListSecurityRequirements",
            "securityagent:ListTargetDomains",
            "securityhub:BatchGetAutomationRules",
            "securityhub:BatchGetConfigurationPolicyAssociations",
            "securityhub:BatchGetControlEvaluations",
            "securityhub:BatchGetSecurityControls",
            "securityhub:BatchGetStandardsControlAssociations",
            "securityhub:Describe*",
            "securityhub:Get*",
            "securityhub:List*",
            "securitylake:GetDataLakeExceptionSubscription",
            "securitylake:GetDataLakeOrganizationConfiguration",
            "securitylake:GetDataLakeSources",
            "securitylake:GetSubscriber",
            "securitylake:ListDataLakeExceptions",
            "securitylake:ListDataLakes",
            "securitylake:ListLogSources",
            "securitylake:ListSubscribers",
            "securitylake:ListTagsForResource",
            "serverlessrepo:Get*",
            "serverlessrepo:List*",
            "serverlessrepo:SearchApplications",
            "servicecatalog:Describe*",
            "servicecatalog:GetApplication",
            "servicecatalog:GetAttributeGroup",
            "servicecatalog:List*",
            "servicecatalog:Scan*",
            "servicecatalog:Search*",
            "servicediscovery:DiscoverInstances",
            "servicediscovery:DiscoverInstancesRevision",
            "servicediscovery:Get*",
            "servicediscovery:List*",
            "servicequotas:GetAWSDefaultServiceQuota",
            "servicequotas:GetAssociationForServiceQuotaTemplate",
            "servicequotas:GetAutoManagementConfiguration",
            "servicequotas:GetQuotaUtilizationReport",
            "servicequotas:GetRequestedServiceQuotaChange",
            "servicequotas:GetServiceQuota",
            "servicequotas:GetServiceQuotaIncreaseRequestFromTemplate",
            "servicequotas:ListAWSDefaultServiceQuotas",
            "servicequotas:ListRequestedServiceQuotaChangeHistory",
            "servicequotas:ListRequestedServiceQuotaChangeHistoryByQuota",
            "servicequotas:ListServiceQuotaIncreaseRequestsInTemplate",
            "servicequotas:ListServiceQuotas",
            "servicequotas:ListServices",
            "servicequotas:StartQuotaUtilizationReport",
            "ses:BatchGetMetricData",
            "ses:Describe*",
            "ses:Get*",
            "ses:List*",
            "shield:Describe*",
            "shield:Get*",
            "shield:List*",
            "signer:DescribeSigningJob",
            "signer:GetSigningPlatform",
            "signer:GetSigningProfile",
            "signer:ListProfilePermissions",
            "signer:ListSigningJobs",
            "signer:ListSigningPlatforms",
            "signer:ListSigningProfiles",
            "signer:ListTagsForResource",
            "signin:ListTrustedIdentityPropagationApplicationsForConsole",
            "sms-voice:DescribeAccountAttributes",
            "sms-voice:DescribeAccountLimits",
            "sms-voice:DescribeConfigurationSets",
            "sms-voice:DescribeKeywords",
            "sms-voice:DescribeOptOutLists",
            "sms-voice:DescribeOptedOutNumbers",
            "sms-voice:DescribePhoneNumbers",
            "sms-voice:DescribePools",
            "sms-voice:DescribeProtectConfigurations",
            "sms-voice:DescribeRegistrationAttachments",
            "sms-voice:DescribeRegistrationFieldDefinitions",
            "sms-voice:DescribeRegistrationFieldValues",
            "sms-voice:DescribeRegistrationSectionDefinitions",
            "sms-voice:DescribeRegistrationTypeDefinitions",
            "sms-voice:DescribeRegistrationVersions",
            "sms-voice:DescribeRegistrations",
            "sms-voice:DescribeSenderIds",
            "sms-voice:DescribeSpendLimits",
            "sms-voice:DescribeVerifiedDestinationNumbers",
            "sms-voice:ListPoolOriginationIdentities",
            "sms-voice:ListTagsForResource",
            "snowball:Describe*",
            "snowball:Get*",
            "snowball:List*",
            "sns:Check*",
            "sns:Get*",
            "sns:List*",
            "sqs:Get*",
            "sqs:List*",
            "sqs:Receive*",
            "ssm-contacts:DescribeEngagement",
            "ssm-contacts:DescribePage",
            "ssm-contacts:GetContact",
            "ssm-contacts:GetContactChannel",
            "ssm-contacts:ListContactChannels",
            "ssm-contacts:ListContacts",
            "ssm-contacts:ListEngagements",
            "ssm-contacts:ListPageReceipts",
            "ssm-contacts:ListPagesByContact",
            "ssm-contacts:ListPagesByEngagement",
            "ssm-incidents:GetIncidentRecord",
            "ssm-incidents:GetReplicationSet",
            "ssm-incidents:GetResourcePolicies",
            "ssm-incidents:GetResponsePlan",
            "ssm-incidents:GetTimelineEvent",
            "ssm-incidents:ListIncidentRecords",
            "ssm-incidents:ListRelatedItems",
            "ssm-incidents:ListReplicationSets",
            "ssm-incidents:ListResponsePlans",
            "ssm-incidents:ListTagsForResource",
            "ssm-incidents:ListTimelineEvents",
            "ssm-quicksetup:GetConfiguration",
            "ssm-quicksetup:GetConfigurationManager",
            "ssm-quicksetup:GetServiceSettings",
            "ssm-quicksetup:ListConfigurationManagers",
            "ssm-quicksetup:ListConfigurations",
            "ssm-quicksetup:ListQuickSetupTypes",
            "ssm-quicksetup:ListTagsForResource",
            "ssm-sap:GetApplication",
            "ssm-sap:GetComponent",
            "ssm-sap:GetConfigurationCheckOperation",
            "ssm-sap:GetDatabase",
            "ssm-sap:GetOperation",
            "ssm-sap:GetResourcePermission",
            "ssm-sap:ListApplications",
            "ssm-sap:ListComponents",
            "ssm-sap:ListConfigurationCheckDefinitions",
            "ssm-sap:ListConfigurationCheckOperations",
            "ssm-sap:ListDatabases",
            "ssm-sap:ListOperationEvents",
            "ssm-sap:ListOperations",
            "ssm-sap:ListSubCheckResults",
            "ssm-sap:ListSubCheckRuleResults",
            "ssm-sap:ListTagsForResource",
            "ssm:Describe*",
            "ssm:Get*",
            "ssm:List*",
            "sso-directory:Describe*",
            "sso-directory:List*",
            "sso-directory:Search*",
            "sso:Describe*",
            "sso:Get*",
            "sso:List*",
            "states:Describe*",
            "states:GetExecutionHistory",
            "states:List*",
            "states:ValidateStateMachineDefinition",
            "storagegateway:Describe*",
            "storagegateway:List*",
            "sts:GetAccessKeyInfo",
            "sts:GetCallerIdentity",
            "sts:GetSessionToken",
            "support:DescribeAttachment",
            "support:DescribeCaseAttributes",
            "support:DescribeCases",
            "support:DescribeCommunication",
            "support:DescribeCommunications",
            "support:DescribeCreateCaseOptions",
            "support:DescribeIssueTypes",
            "support:DescribeServices",
            "support:DescribeSeverityLevels",
            "support:DescribeSupportLevel",
            "support:DescribeSupportedLanguages",
            "support:DescribeTrustedAdvisorCheckRefreshStatuses",
            "support:DescribeTrustedAdvisorCheckResult",
            "support:DescribeTrustedAdvisorCheckSummaries",
            "support:DescribeTrustedAdvisorChecks",
            "support:SearchForCases",
            "supportplans:GetSupportPlan",
            "supportplans:GetSupportPlanUpdateStatus",
            "supportplans:ListSupportPlanModifiers",
            "sustainability:GetCarbonFootprintSummary",
            "sustainability:GetEstimatedCarbonEmissions",
            "sustainability:GetEstimatedCarbonEmissionsDimensionValues",
            "sustainability:GetEstimatedWaterAllocation",
            "sustainability:GetEstimatedWaterAllocationDimensionValues",
            "swf:Count*",
            "swf:Describe*",
            "swf:Get*",
            "swf:List*",
            "synthetics:Describe*",
            "synthetics:Get*",
            "synthetics:List*",
            "tag:DescribeReportCreation",
            "tag:Get*",
            "tax:GetExemptions",
            "tax:GetTaxInheritance",
            "tax:GetTaxInterview",
            "tax:GetTaxRegistration",
            "tax:GetTaxRegistrationDocument",
            "tax:ListTaxRegistrations",
            "timestream:DescribeBatchLoadTask",
            "timestream:DescribeDatabase",
            "timestream:DescribeEndpoints",
            "timestream:DescribeTable",
            "timestream:ListBatchLoadTasks",
            "timestream:ListDatabases",
            "timestream:ListMeasures",
            "timestream:ListTables",
            "timestream:ListTagsForResource",
            "tnb:GetSolFunctionInstance",
            "tnb:GetSolFunctionPackage",
            "tnb:GetSolFunctionPackageContent",
            "tnb:GetSolFunctionPackageDescriptor",
            "tnb:GetSolNetworkInstance",
            "tnb:GetSolNetworkOperation",
            "tnb:GetSolNetworkPackage",
            "tnb:GetSolNetworkPackageContent",
            "tnb:GetSolNetworkPackageDescriptor",
            "tnb:ListSolFunctionInstances",
            "tnb:ListSolFunctionPackages",
            "tnb:ListSolNetworkInstances",
            "tnb:ListSolNetworkOperations",
            "tnb:ListSolNetworkPackages",
            "tnb:ListTagsForResource",
            "transcribe:Get*",
            "transcribe:List*",
            "transfer:Describe*",
            "transfer:List*",
            "transfer:TestIdentityProvider",
            "transform-custom:GetAnalysis",
            "transform-custom:GetCampaign",
            "transform-custom:GetFinding",
            "transform-custom:GetFindingGroups",
            "transform-custom:GetKnowledgeItem",
            "transform-custom:GetRemediation",
            "transform-custom:GetRepository",
            "transform-custom:GetSource",
            "transform-custom:ListAnalyses",
            "transform-custom:ListCampaignRepositories",
            "transform-custom:ListCampaigns",
            "transform-custom:ListFindings",
            "transform-custom:ListKnowledgeItems",
            "transform-custom:ListRemediations",
            "transform-custom:ListRepositories",
            "transform-custom:ListSources",
            "transform-custom:ListTagsForResource",
            "transform-custom:ListTransformationPackageMetadata",
            "transform:GetAccountSettings",
            "transform:GetAgent",
            "transform:GetAgentRuntimeConfiguration",
            "transform:GetConnector",
            "transform:ListAgents",
            "transform:ListConnectors",
            "transform:ListProfiles",
            "transform:ListTagsForResource",
            "translate:DescribeTextTranslationJob",
            "translate:GetParallelData",
            "translate:GetTerminology",
            "translate:ListParallelData",
            "translate:ListTerminologies",
            "translate:ListTextTranslationJobs",
            "trustedadvisor:Describe*",
            "trustedadvisor:GetOrganizationRecommendation",
            "trustedadvisor:GetRecommendation",
            "trustedadvisor:ListChecks",
            "trustedadvisor:ListOrganizationRecommendationAccounts",
            "trustedadvisor:ListOrganizationRecommendationResources",
            "trustedadvisor:ListOrganizationRecommendations",
            "trustedadvisor:ListRecommendationResources",
            "trustedadvisor:ListRecommendations",
            "user-subscriptions:ListApplicationClaims",
            "user-subscriptions:ListClaims",
            "user-subscriptions:ListUserSubscriptions",
            "uxc:GetAccountColor",
            "uxc:GetAccountCustomizations",
            "uxc:ListServices",
            "verifiedpermissions:GetIdentitySource",
            "verifiedpermissions:GetPolicy",
            "verifiedpermissions:GetPolicyStore",
            "verifiedpermissions:GetPolicyTemplate",
            "verifiedpermissions:GetSchema",
            "verifiedpermissions:IsAuthorized",
            "verifiedpermissions:IsAuthorizedWithToken",
            "verifiedpermissions:ListIdentitySources",
            "verifiedpermissions:ListPolicies",
            "verifiedpermissions:ListPolicyStores",
            "verifiedpermissions:ListPolicyTemplates",
            "vpc-lattice:GetAccessLogSubscription",
            "vpc-lattice:GetAuthPolicy",
            "vpc-lattice:GetDomainVerification",
            "vpc-lattice:GetListener",
            "vpc-lattice:GetResourceConfiguration",
            "vpc-lattice:GetResourceGateway",
            "vpc-lattice:GetResourcePolicy",
            "vpc-lattice:GetRule",
            "vpc-lattice:GetService",
            "vpc-lattice:GetServiceNetwork",
            "vpc-lattice:GetServiceNetworkResourceAssociation",
            "vpc-lattice:GetServiceNetworkServiceAssociation",
            "vpc-lattice:GetServiceNetworkVpcAssociation",
            "vpc-lattice:GetTargetGroup",
            "vpc-lattice:ListAccessLogSubscriptions",
            "vpc-lattice:ListDomainVerifications",
            "vpc-lattice:ListListeners",
            "vpc-lattice:ListResourceConfigurations",
            "vpc-lattice:ListResourceEndpointAssociations",
            "vpc-lattice:ListResourceGateways",
            "vpc-lattice:ListRules",
            "vpc-lattice:ListServiceNetworkResourceAssociations",
            "vpc-lattice:ListServiceNetworkServiceAssociations",
            "vpc-lattice:ListServiceNetworkVpcAssociations",
            "vpc-lattice:ListServiceNetworkVpcEndpointAssociations",
            "vpc-lattice:ListServiceNetworks",
            "vpc-lattice:ListServices",
            "vpc-lattice:ListTagsForResource",
            "vpc-lattice:ListTargetGroups",
            "vpc-lattice:ListTargets",
            "waf-regional:Get*",
            "waf-regional:List*",
            "waf:Get*",
            "waf:List*",
            "wafv2:CheckCapacity",
            "wafv2:Describe*",
            "wafv2:Get*",
            "wafv2:List*",
            "wellarchitected:ExportLens",
            "wellarchitected:GetAnswer",
            "wellarchitected:GetConsolidatedReport",
            "wellarchitected:GetLens",
            "wellarchitected:GetLensReview",
            "wellarchitected:GetLensReviewReport",
            "wellarchitected:GetLensVersionDifference",
            "wellarchitected:GetMilestone",
            "wellarchitected:GetProfile",
            "wellarchitected:GetProfileTemplate",
            "wellarchitected:GetReviewTemplate",
            "wellarchitected:GetReviewTemplateAnswer",
            "wellarchitected:GetReviewTemplateLensReview",
            "wellarchitected:GetWorkload",
            "wellarchitected:List*",
            "workdocs:CheckAlias",
            "workdocs:Describe*",
            "workdocs:Get*",
            "workmail:Describe*",
            "workmail:Get*",
            "workmail:List*",
            "workmail:Search*",
            "workspaces-web:GetBrowserSettings",
            "workspaces-web:GetIdentityProvider",
            "workspaces-web:GetNetworkSettings",
            "workspaces-web:GetPortal",
            "workspaces-web:GetPortalServiceProviderMetadata",
            "workspaces-web:GetTrustStore",
            "workspaces-web:GetUserAccessLoggingSettings",
            "workspaces-web:GetUserSettings",
            "workspaces-web:ListBrowserSettings",
            "workspaces-web:ListIdentityProviders",
            "workspaces-web:ListNetworkSettings",
            "workspaces-web:ListPortals",
            "workspaces-web:ListTagsForResource",
            "workspaces-web:ListTrustStores",
            "workspaces-web:ListUserAccessLoggingSettings",
            "workspaces-web:ListUserSettings",
            "workspaces:Describe*",
            "xray:BatchGet*",
            "xray:CancelTraceRetrieval",
            "xray:Get*",
            "xray:ListResourcePolicies",
            "xray:ListRetrievedTraces",
            "xray:ListTagsForResource",
            "xray:StartTraceRetrieval"
          ],
          "Resource": "*"
        },
        {
          "Sid": "S3ExpressReadOnlySessionObjectAccess",
          "Effect": "Allow",
          "Action": [
            "s3express:CreateSession"
          ],
          "Resource": "*",
          "Condition": {
            "StringEquals": {
              "s3express:SessionMode": "ReadOnly"
            }
          }
        }
      ]
    },
    "VersionId": "v191",
    "IsDefaultVersion": true,
    "CreateDate": "2026-10-30T17:27:08+00:00"
  }
}

Version History (118 recorded)

Raw history
v191updated

49 actions added

4f7ba36
New AWS service startups
3 never-before-seen actions: bedrock-agentcore:GetPaymentInstrumentBalance, bedrock-mantle:CountTokens, bedrock:RenderPrompt
v190updated

91 actions added

8bc2b8c
38 never-before-seen actions: appconfig:GetExperimentRun, appconfig:ListExperimentRunEvents, appconfig:ListExperimentRuns, bedrock-mantle:GetCustomizedModel, bedrock-mantle:GetFile, bedrock-mantle:GetFineTuningJob, bedrock-mantle:GetInference, bedrock-mantle:GetModel, bedrock-mantle:GetReservation, bedrock-mantle:ListCustomizedModelAssociations, bedrock-mantle:ListCustomizedModels, bedrock-mantle:ListFiles, bedrock-mantle:ListFineTuningJobs, bedrock-mantle:ListModels, bedrock-mantle:ListReservations, bedrock:AgenticRetrieveStream, bedrock:CheckIngestedDocumentAcl, bedrock:CountTokens, bedrock:GetAccountDataRetention, bedrock:GetAdvancedPromptOptimizationJob, bedrock:GetBlueprintOptimizationStatus, bedrock:GetBlueprintRecommendation, bedrock:GetDataAutomationLibraryEntity, bedrock:GetDataAutomationLibraryIngestionJob, bedrock:GetDocumentContent, bedrock:GetIngestedDocumentAcl, bedrock:GetInvoke, directconnect:GetResiliencyGroup, directconnect:ListResiliencyGroupAssociations, directconnect:ListResiliencyGroups, dynamodb:ReadDataForReplication, dynamodb:SearchVectors, ec2:ListVolumesInRecycleBin, gameliftstreams:GetStreamUrl, gameliftstreams:ListApplicationShaderCaches, gameliftstreams:ListStreamUrls, securityagent:GetSecurityRequirementPack, securityagent:ListSecurityRequirementPacks
v189updated

7 actions added

9a391cd
4 never-before-seen actions: bedrock-agentcore:GetCapacityProvider, bedrock-agentcore:ListAgentRuntimeVersionsByCapacityProvider, bedrock-agentcore:ListCapacityProviders, directconnect:ListVirtualInterfaceRoutes
v188updated

30 actions added

be1c2e7
18 never-before-seen actions: bedrock-agentcore:GetHarnessEndpoint, bedrock-agentcore:ListHarnessEndpoints, elemental-inference:ExportDictionaryEntries, elemental-inference:GetDictionary, elemental-inference:ListDictionaries, transform-custom:GetAnalysis, transform-custom:GetFinding, transform-custom:GetFindingGroups, transform-custom:GetRemediation, transform-custom:GetRepository, transform-custom:GetSource, transform-custom:ListAnalyses, transform-custom:ListCampaignRepositories, transform-custom:ListCampaigns, transform-custom:ListFindings, transform-custom:ListRemediations, transform-custom:ListRepositories, transform-custom:ListSources
v187updated

32 actions added

8f235cc
23 never-before-seen actions: billing:GetCreditAllocationHistory, deadline:GetLimit, deadline:ListLimits, resiliencehub:GetFailureModeFinding, resiliencehub:GetPolicy, resiliencehub:GetService, resiliencehub:GetSystem, resiliencehub:GetUserJourney, resiliencehub:ListAssertions, resiliencehub:ListDependencies, resiliencehub:ListFailureModeAssessments, resiliencehub:ListFailureModeFindings, resiliencehub:ListInputSources, resiliencehub:ListPolicies, resiliencehub:ListReports, resiliencehub:ListResources, resiliencehub:ListServiceEvents, resiliencehub:ListServiceFunctions, resiliencehub:ListServiceTopologyEdges, resiliencehub:ListServices, resiliencehub:ListSystemEvents, resiliencehub:ListSystems, resiliencehub:ListUserJourneys
v186updated

15 actions added

09775ac
7 never-before-seen actions: s3files:GetAccessPoint, s3files:GetFileSystem, s3files:GetFileSystemPolicy, s3files:GetMountTarget, s3files:GetSynchronizationConfiguration, s3files:ListMountTargets, s3files:ListTagsForResource
v185updated

26 actions added

ccba258
2 never-before-seen actions: aidevops:DescribePrivateConnection, aidevops:ListPrivateConnections
v184updated

9 actions added

7b76a51
6 never-before-seen actions: groundstation:DescribeContactVersion, groundstation:DescribeEphemeris, groundstation:ListAntennas, groundstation:ListContactVersions, groundstation:ListEphemerides, groundstation:ListGroundStationReservations
v183updated

56 actions added

c174088
2 new AWS services
8 never-before-seen actions: gameliftstreams:ListStreamSessions, gameliftstreams:ListStreamSessionsByAccount, securityagent:GetApplication, securityagent:GetIntegration, securityagent:ListApplications, securityagent:ListIntegrations, securityagent:ListMemberships, securityagent:ListResourcesFromIntegration
v182updated

2 actions added

dd9fddb
v181updated

44 actions added

951cf1f
New AWS service elemental-inference
14 never-before-seen actions: bedrock-agentcore:GetEvaluator, bedrock-agentcore:GetOnlineEvaluationConfig, bedrock-agentcore:GetPolicy, bedrock-agentcore:GetPolicyEngine, bedrock-agentcore:GetPolicyGeneration, bedrock-agentcore:ListEvaluators, bedrock-agentcore:ListOnlineEvaluationConfigs, bedrock-agentcore:ListPolicies, bedrock-agentcore:ListPolicyEngines, bedrock-agentcore:ListPolicyGenerationAssets, bedrock-agentcore:ListPolicyGenerations, s3express:GetAccessPointScope, vpc-lattice:GetDomainVerification, vpc-lattice:ListDomainVerifications
v179updated

21 actions added

8e645e0
6 never-before-seen actions: aps:DescribeAnomalyDetector, aps:DescribeResourcePolicy, aps:ListAnomalyDetectors, aps:PreviewAnomalyDetector, bedrock-agentcore:GetBrowserProfile, bedrock-agentcore:ListBrowserProfiles
v178updated

scope changed, no action added or removed

1e581d4

ReadOnlyAccess - Policy Version v178

No recorded action delta - this version predates the change index. View the raw diff.

Feb 12, 2026

6b55779

ReadOnlyAccess - Policy Version v159

No recorded action delta - this version predates the change index. View the raw diff.

Feb 12, 2026

c356b34

ReadOnlyAccess - Policy Version v140

No recorded action delta - this version predates the change index. View the raw diff.

Feb 4, 2026

8e5ed4e

ReadOnlyAccess - Policy Version v139

No recorded action delta - this version predates the change index. View the raw diff.

Jan 15, 2026

16ebce1

ReadOnlyAccess - Policy Version v138

No recorded action delta - this version predates the change index. View the raw diff.

Jan 8, 2026

9cd1645

ReadOnlyAccess - Policy Version v137

No recorded action delta - this version predates the change index. View the raw diff.

Dec 16, 2025

6393fd5

ReadOnlyAccess - Policy Version v136

No recorded action delta - this version predates the change index. View the raw diff.

Dec 8, 2025

12267e1