Skip to content

Permission names

Every name in cfn_typed.permissions, taken from awacs (BSD-2-Clause). See Permission names for how they are chosen and credited.

DynamoDb

Name Action
DynamoDb.AssociateTableReplica dynamodb:AssociateTableReplica
DynamoDb.BatchGetItem dynamodb:BatchGetItem
DynamoDb.BatchWriteItem dynamodb:BatchWriteItem
DynamoDb.ConditionCheckItem dynamodb:ConditionCheckItem
DynamoDb.CreateBackup dynamodb:CreateBackup
DynamoDb.CreateGlobalTable dynamodb:CreateGlobalTable
DynamoDb.CreateGlobalTableWitness dynamodb:CreateGlobalTableWitness
DynamoDb.CreateTable dynamodb:CreateTable
DynamoDb.CreateTableReplica dynamodb:CreateTableReplica
DynamoDb.DeleteBackup dynamodb:DeleteBackup
DynamoDb.DeleteGlobalTableWitness dynamodb:DeleteGlobalTableWitness
DynamoDb.DeleteItem dynamodb:DeleteItem
DynamoDb.DeleteResourcePolicy dynamodb:DeleteResourcePolicy
DynamoDb.DeleteTable dynamodb:DeleteTable
DynamoDb.DeleteTableReplica dynamodb:DeleteTableReplica
DynamoDb.DescribeBackup dynamodb:DescribeBackup
DynamoDb.DescribeContinuousBackups dynamodb:DescribeContinuousBackups
DynamoDb.DescribeContributorInsights dynamodb:DescribeContributorInsights
DynamoDb.DescribeEndpoints dynamodb:DescribeEndpoints
DynamoDb.DescribeExport dynamodb:DescribeExport
DynamoDb.DescribeGlobalTable dynamodb:DescribeGlobalTable
DynamoDb.DescribeGlobalTableSettings dynamodb:DescribeGlobalTableSettings
DynamoDb.DescribeImport dynamodb:DescribeImport
DynamoDb.DescribeKinesisStreamingDestination dynamodb:DescribeKinesisStreamingDestination
DynamoDb.DescribeLimits dynamodb:DescribeLimits
DynamoDb.DescribeReservedCapacity dynamodb:DescribeReservedCapacity
DynamoDb.DescribeReservedCapacityOfferings dynamodb:DescribeReservedCapacityOfferings
DynamoDb.DescribeStream dynamodb:DescribeStream
DynamoDb.DescribeTable dynamodb:DescribeTable
DynamoDb.DescribeTableReplicaAutoScaling dynamodb:DescribeTableReplicaAutoScaling
DynamoDb.DescribeTimeToLive dynamodb:DescribeTimeToLive
DynamoDb.DisableKinesisStreamingDestination dynamodb:DisableKinesisStreamingDestination
DynamoDb.EnableKinesisStreamingDestination dynamodb:EnableKinesisStreamingDestination
DynamoDb.ExportTableToPointInTime dynamodb:ExportTableToPointInTime
DynamoDb.GetAbacStatus dynamodb:GetAbacStatus
DynamoDb.GetItem dynamodb:GetItem
DynamoDb.GetRecords dynamodb:GetRecords
DynamoDb.GetResourcePolicy dynamodb:GetResourcePolicy
DynamoDb.GetShardIterator dynamodb:GetShardIterator
DynamoDb.ImportTable dynamodb:ImportTable
DynamoDb.InjectError dynamodb:InjectError
DynamoDb.ListBackups dynamodb:ListBackups
DynamoDb.ListContributorInsights dynamodb:ListContributorInsights
DynamoDb.ListExports dynamodb:ListExports
DynamoDb.ListGlobalTables dynamodb:ListGlobalTables
DynamoDb.ListImports dynamodb:ListImports
DynamoDb.ListStreams dynamodb:ListStreams
DynamoDb.ListTables dynamodb:ListTables
DynamoDb.ListTagsOfResource dynamodb:ListTagsOfResource
DynamoDb.PartiQLDelete dynamodb:PartiQLDelete
DynamoDb.PartiQLInsert dynamodb:PartiQLInsert
DynamoDb.PartiQLSelect dynamodb:PartiQLSelect
DynamoDb.PartiQLUpdate dynamodb:PartiQLUpdate
DynamoDb.PurchaseReservedCapacityOfferings dynamodb:PurchaseReservedCapacityOfferings
DynamoDb.PutItem dynamodb:PutItem
DynamoDb.PutResourcePolicy dynamodb:PutResourcePolicy
DynamoDb.Query dynamodb:Query
DynamoDb.ReadDataForReplication dynamodb:ReadDataForReplication
DynamoDb.ReplicateSettings dynamodb:ReplicateSettings
DynamoDb.RestoreTableFromAwsBackup dynamodb:RestoreTableFromAwsBackup
DynamoDb.RestoreTableFromBackup dynamodb:RestoreTableFromBackup
DynamoDb.RestoreTableToPointInTime dynamodb:RestoreTableToPointInTime
DynamoDb.Scan dynamodb:Scan
DynamoDb.StartAwsBackupJob dynamodb:StartAwsBackupJob
DynamoDb.TagResource dynamodb:TagResource
DynamoDb.UntagResource dynamodb:UntagResource
DynamoDb.UpdateAbacStatus dynamodb:UpdateAbacStatus
DynamoDb.UpdateContinuousBackups dynamodb:UpdateContinuousBackups
DynamoDb.UpdateContributorInsights dynamodb:UpdateContributorInsights
DynamoDb.UpdateGlobalTable dynamodb:UpdateGlobalTable
DynamoDb.UpdateGlobalTableSettings dynamodb:UpdateGlobalTableSettings
DynamoDb.UpdateGlobalTableVersion dynamodb:UpdateGlobalTableVersion
DynamoDb.UpdateItem dynamodb:UpdateItem
DynamoDb.UpdateKinesisStreamingDestination dynamodb:UpdateKinesisStreamingDestination
DynamoDb.UpdateTable dynamodb:UpdateTable
DynamoDb.UpdateTableReplicaAutoScaling dynamodb:UpdateTableReplicaAutoScaling
DynamoDb.UpdateTimeToLive dynamodb:UpdateTimeToLive
DynamoDb.WriteDataForReplication dynamodb:WriteDataForReplication

Ecr

Name Action
Ecr.BatchCheckLayerAvailability ecr:BatchCheckLayerAvailability
Ecr.BatchDeleteImage ecr:BatchDeleteImage
Ecr.BatchGetImage ecr:BatchGetImage
Ecr.BatchGetRepositoryScanningConfiguration ecr:BatchGetRepositoryScanningConfiguration
Ecr.BatchImportUpstreamImage ecr:BatchImportUpstreamImage
Ecr.CompleteLayerUpload ecr:CompleteLayerUpload
Ecr.CreatePullThroughCacheRule ecr:CreatePullThroughCacheRule
Ecr.CreateRepository ecr:CreateRepository
Ecr.CreateRepositoryCreationTemplate ecr:CreateRepositoryCreationTemplate
Ecr.DeleteLifecyclePolicy ecr:DeleteLifecyclePolicy
Ecr.DeletePullThroughCacheRule ecr:DeletePullThroughCacheRule
Ecr.DeleteRegistryPolicy ecr:DeleteRegistryPolicy
Ecr.DeleteRepository ecr:DeleteRepository
Ecr.DeleteRepositoryCreationTemplate ecr:DeleteRepositoryCreationTemplate
Ecr.DeleteRepositoryPolicy ecr:DeleteRepositoryPolicy
Ecr.DeleteSigningConfiguration ecr:DeleteSigningConfiguration
Ecr.DeregisterPullTimeUpdateExclusion ecr:DeregisterPullTimeUpdateExclusion
Ecr.DescribeImageReplicationStatus ecr:DescribeImageReplicationStatus
Ecr.DescribeImageScanFindings ecr:DescribeImageScanFindings
Ecr.DescribeImageSigningStatus ecr:DescribeImageSigningStatus
Ecr.DescribeImages ecr:DescribeImages
Ecr.DescribePullThroughCacheRules ecr:DescribePullThroughCacheRules
Ecr.DescribeRegistry ecr:DescribeRegistry
Ecr.DescribeRepositories ecr:DescribeRepositories
Ecr.DescribeRepositoryCreationTemplate ecr:DescribeRepositoryCreationTemplate
Ecr.DescribeRepositoryCreationTemplates ecr:DescribeRepositoryCreationTemplates
Ecr.GetAccountSetting ecr:GetAccountSetting
Ecr.GetAuthorizationToken ecr:GetAuthorizationToken
Ecr.GetDownloadUrlForLayer ecr:GetDownloadUrlForLayer
Ecr.GetImageCopyStatus ecr:GetImageCopyStatus
Ecr.GetLifecyclePolicy ecr:GetLifecyclePolicy
Ecr.GetLifecyclePolicyPreview ecr:GetLifecyclePolicyPreview
Ecr.GetRegistryPolicy ecr:GetRegistryPolicy
Ecr.GetRegistryScanningConfiguration ecr:GetRegistryScanningConfiguration
Ecr.GetRepositoryPolicy ecr:GetRepositoryPolicy
Ecr.GetSigningConfiguration ecr:GetSigningConfiguration
Ecr.InitiateLayerUpload ecr:InitiateLayerUpload
Ecr.ListImages ecr:ListImages
Ecr.ListPullTimeUpdateExclusions ecr:ListPullTimeUpdateExclusions
Ecr.ListTagsForResource ecr:ListTagsForResource
Ecr.PutAccountSetting ecr:PutAccountSetting
Ecr.PutImage ecr:PutImage
Ecr.PutImageScanningConfiguration ecr:PutImageScanningConfiguration
Ecr.PutImageTagMutability ecr:PutImageTagMutability
Ecr.PutLifecyclePolicy ecr:PutLifecyclePolicy
Ecr.PutRegistryPolicy ecr:PutRegistryPolicy
Ecr.PutRegistryScanningConfiguration ecr:PutRegistryScanningConfiguration
Ecr.PutReplicationConfiguration ecr:PutReplicationConfiguration
Ecr.PutSigningConfiguration ecr:PutSigningConfiguration
Ecr.RegisterPullTimeUpdateExclusion ecr:RegisterPullTimeUpdateExclusion
Ecr.ReplicateImage ecr:ReplicateImage
Ecr.SetRepositoryPolicy ecr:SetRepositoryPolicy
Ecr.StartImageScan ecr:StartImageScan
Ecr.StartLifecyclePolicyPreview ecr:StartLifecyclePolicyPreview
Ecr.TagResource ecr:TagResource
Ecr.UntagResource ecr:UntagResource
Ecr.UpdateImageStorageClass ecr:UpdateImageStorageClass
Ecr.UpdatePullThroughCacheRule ecr:UpdatePullThroughCacheRule
Ecr.UpdateRepositoryCreationTemplate ecr:UpdateRepositoryCreationTemplate
Ecr.UploadLayerPart ecr:UploadLayerPart
Ecr.ValidatePullThroughCacheRule ecr:ValidatePullThroughCacheRule

Events

Name Action
Events.ActivateEventSource events:ActivateEventSource
Events.AllowVendedLogDeliveryForResource events:AllowVendedLogDeliveryForResource
Events.CancelReplay events:CancelReplay
Events.CreateApiDestination events:CreateApiDestination
Events.CreateArchive events:CreateArchive
Events.CreateConnection events:CreateConnection
Events.CreateEndpoint events:CreateEndpoint
Events.CreateEventBus events:CreateEventBus
Events.CreatePartnerEventSource events:CreatePartnerEventSource
Events.DeactivateEventSource events:DeactivateEventSource
Events.DeauthorizeConnection events:DeauthorizeConnection
Events.DeleteApiDestination events:DeleteApiDestination
Events.DeleteArchive events:DeleteArchive
Events.DeleteConnection events:DeleteConnection
Events.DeleteEndpoint events:DeleteEndpoint
Events.DeleteEventBus events:DeleteEventBus
Events.DeletePartnerEventSource events:DeletePartnerEventSource
Events.DeleteRule events:DeleteRule
Events.DescribeApiDestination events:DescribeApiDestination
Events.DescribeArchive events:DescribeArchive
Events.DescribeConnection events:DescribeConnection
Events.DescribeEndpoint events:DescribeEndpoint
Events.DescribeEventBus events:DescribeEventBus
Events.DescribeEventSource events:DescribeEventSource
Events.DescribePartnerEventSource events:DescribePartnerEventSource
Events.DescribeReplay events:DescribeReplay
Events.DescribeRule events:DescribeRule
Events.DisableRule events:DisableRule
Events.EnableRule events:EnableRule
Events.InvokeApiDestination events:InvokeApiDestination
Events.ListApiDestinations events:ListApiDestinations
Events.ListArchives events:ListArchives
Events.ListConnections events:ListConnections
Events.ListEndpoints events:ListEndpoints
Events.ListEventBuses events:ListEventBuses
Events.ListEventSources events:ListEventSources
Events.ListPartnerEventSourceAccounts events:ListPartnerEventSourceAccounts
Events.ListPartnerEventSources events:ListPartnerEventSources
Events.ListReplays events:ListReplays
Events.ListRuleNamesByTarget events:ListRuleNamesByTarget
Events.ListRules events:ListRules
Events.ListTagsForResource events:ListTagsForResource
Events.ListTargetsByRule events:ListTargetsByRule
Events.PutEvents events:PutEvents
Events.PutPartnerEvents events:PutPartnerEvents
Events.PutPermission events:PutPermission
Events.PutRule events:PutRule
Events.PutTargets events:PutTargets
Events.RemovePermission events:RemovePermission
Events.RemoveTargets events:RemoveTargets
Events.RetrieveConnectionCredentials events:RetrieveConnectionCredentials
Events.StartReplay events:StartReplay
Events.TagResource events:TagResource
Events.TestEventPattern events:TestEventPattern
Events.UntagResource events:UntagResource
Events.UpdateApiDestination events:UpdateApiDestination
Events.UpdateArchive events:UpdateArchive
Events.UpdateConnection events:UpdateConnection
Events.UpdateEndpoint events:UpdateEndpoint
Events.UpdateEventBus events:UpdateEventBus

Kinesis

Name Action
Kinesis.AddTagsToStream kinesis:AddTagsToStream
Kinesis.CreateStream kinesis:CreateStream
Kinesis.DecreaseStreamRetentionPeriod kinesis:DecreaseStreamRetentionPeriod
Kinesis.DeleteResourcePolicy kinesis:DeleteResourcePolicy
Kinesis.DeleteStream kinesis:DeleteStream
Kinesis.DeregisterStreamConsumer kinesis:DeregisterStreamConsumer
Kinesis.DescribeAccountSettings kinesis:DescribeAccountSettings
Kinesis.DescribeLimits kinesis:DescribeLimits
Kinesis.DescribeStream kinesis:DescribeStream
Kinesis.DescribeStreamConsumer kinesis:DescribeStreamConsumer
Kinesis.DescribeStreamSummary kinesis:DescribeStreamSummary
Kinesis.DisableEnhancedMonitoring kinesis:DisableEnhancedMonitoring
Kinesis.EnableEnhancedMonitoring kinesis:EnableEnhancedMonitoring
Kinesis.GetRecords kinesis:GetRecords
Kinesis.GetResourcePolicy kinesis:GetResourcePolicy
Kinesis.GetShardIterator kinesis:GetShardIterator
Kinesis.IncreaseStreamRetentionPeriod kinesis:IncreaseStreamRetentionPeriod
Kinesis.InjectApiError kinesis:InjectApiError
Kinesis.ListShards kinesis:ListShards
Kinesis.ListStreamConsumers kinesis:ListStreamConsumers
Kinesis.ListStreams kinesis:ListStreams
Kinesis.ListTagsForResource kinesis:ListTagsForResource
Kinesis.ListTagsForStream kinesis:ListTagsForStream
Kinesis.MergeShards kinesis:MergeShards
Kinesis.PutRecord kinesis:PutRecord
Kinesis.PutRecords kinesis:PutRecords
Kinesis.PutResourcePolicy kinesis:PutResourcePolicy
Kinesis.RegisterStreamConsumer kinesis:RegisterStreamConsumer
Kinesis.RemoveTagsFromStream kinesis:RemoveTagsFromStream
Kinesis.SplitShard kinesis:SplitShard
Kinesis.StartStreamEncryption kinesis:StartStreamEncryption
Kinesis.StopStreamEncryption kinesis:StopStreamEncryption
Kinesis.SubscribeToShard kinesis:SubscribeToShard
Kinesis.TagResource kinesis:TagResource
Kinesis.UntagResource kinesis:UntagResource
Kinesis.UpdateAccountSettings kinesis:UpdateAccountSettings
Kinesis.UpdateMaxRecordSize kinesis:UpdateMaxRecordSize
Kinesis.UpdateShardCount kinesis:UpdateShardCount
Kinesis.UpdateStreamMode kinesis:UpdateStreamMode
Kinesis.UpdateStreamWarmThroughput kinesis:UpdateStreamWarmThroughput

Kms

Name Action
Kms.CancelKeyDeletion kms:CancelKeyDeletion
Kms.ConnectCustomKeyStore kms:ConnectCustomKeyStore
Kms.CreateAlias kms:CreateAlias
Kms.CreateCustomKeyStore kms:CreateCustomKeyStore
Kms.CreateGrant kms:CreateGrant
Kms.CreateKey kms:CreateKey
Kms.Decrypt kms:Decrypt
Kms.DeleteAlias kms:DeleteAlias
Kms.DeleteCustomKeyStore kms:DeleteCustomKeyStore
Kms.DeleteImportedKeyMaterial kms:DeleteImportedKeyMaterial
Kms.DeriveSharedSecret kms:DeriveSharedSecret
Kms.DescribeCustomKeyStores kms:DescribeCustomKeyStores
Kms.DescribeKey kms:DescribeKey
Kms.DisableKey kms:DisableKey
Kms.DisableKeyRotation kms:DisableKeyRotation
Kms.DisconnectCustomKeyStore kms:DisconnectCustomKeyStore
Kms.EnableKey kms:EnableKey
Kms.EnableKeyRotation kms:EnableKeyRotation
Kms.Encrypt kms:Encrypt
Kms.GenerateDataKey kms:GenerateDataKey
Kms.GenerateDataKeyPair kms:GenerateDataKeyPair
Kms.GenerateDataKeyPairWithoutPlaintext kms:GenerateDataKeyPairWithoutPlaintext
Kms.GenerateDataKeyWithoutPlaintext kms:GenerateDataKeyWithoutPlaintext
Kms.GenerateMac kms:GenerateMac
Kms.GenerateRandom kms:GenerateRandom
Kms.GetKeyLastUsage kms:GetKeyLastUsage
Kms.GetKeyPolicy kms:GetKeyPolicy
Kms.GetKeyRotationStatus kms:GetKeyRotationStatus
Kms.GetParametersForImport kms:GetParametersForImport
Kms.GetPublicKey kms:GetPublicKey
Kms.ImportKeyMaterial kms:ImportKeyMaterial
Kms.ListAliases kms:ListAliases
Kms.ListGrants kms:ListGrants
Kms.ListKeyPolicies kms:ListKeyPolicies
Kms.ListKeyRotations kms:ListKeyRotations
Kms.ListKeys kms:ListKeys
Kms.ListResourceTags kms:ListResourceTags
Kms.ListRetirableGrants kms:ListRetirableGrants
Kms.PutKeyPolicy kms:PutKeyPolicy
Kms.ReEncrypt kms:ReEncrypt
Kms.ReEncryptFrom kms:ReEncryptFrom
Kms.ReEncryptTo kms:ReEncryptTo
Kms.ReplicateKey kms:ReplicateKey
Kms.RetireGrant kms:RetireGrant
Kms.RevokeGrant kms:RevokeGrant
Kms.RotateKeyOnDemand kms:RotateKeyOnDemand
Kms.ScheduleKeyDeletion kms:ScheduleKeyDeletion
Kms.Sign kms:Sign
Kms.SynchronizeMultiRegionKey kms:SynchronizeMultiRegionKey
Kms.TagResource kms:TagResource
Kms.UntagResource kms:UntagResource
Kms.UpdateAlias kms:UpdateAlias
Kms.UpdateCustomKeyStore kms:UpdateCustomKeyStore
Kms.UpdateKeyDescription kms:UpdateKeyDescription
Kms.UpdatePrimaryRegion kms:UpdatePrimaryRegion
Kms.Verify kms:Verify
Kms.VerifyMac kms:VerifyMac

Lambda

Name Action
Lambda.AddLayerVersionPermission lambda:AddLayerVersionPermission
Lambda.AddPermission lambda:AddPermission
Lambda.CheckpointDurableExecution lambda:CheckpointDurableExecution
Lambda.CreateAlias lambda:CreateAlias
Lambda.CreateCapacityProvider lambda:CreateCapacityProvider
Lambda.CreateCodeSigningConfig lambda:CreateCodeSigningConfig
Lambda.CreateEventSourceMapping lambda:CreateEventSourceMapping
Lambda.CreateFunction lambda:CreateFunction
Lambda.CreateFunctionUrlConfig lambda:CreateFunctionUrlConfig
Lambda.DeleteAlias lambda:DeleteAlias
Lambda.DeleteCapacityProvider lambda:DeleteCapacityProvider
Lambda.DeleteCodeSigningConfig lambda:DeleteCodeSigningConfig
Lambda.DeleteEventSourceMapping lambda:DeleteEventSourceMapping
Lambda.DeleteFunction lambda:DeleteFunction
Lambda.DeleteFunctionCodeSigningConfig lambda:DeleteFunctionCodeSigningConfig
Lambda.DeleteFunctionConcurrency lambda:DeleteFunctionConcurrency
Lambda.DeleteFunctionEventInvokeConfig lambda:DeleteFunctionEventInvokeConfig
Lambda.DeleteFunctionUrlConfig lambda:DeleteFunctionUrlConfig
Lambda.DeleteLayerVersion lambda:DeleteLayerVersion
Lambda.DeleteProvisionedConcurrencyConfig lambda:DeleteProvisionedConcurrencyConfig
Lambda.DisableReplication lambda:DisableReplication
Lambda.EnableReplication lambda:EnableReplication
Lambda.GetAccountSettings lambda:GetAccountSettings
Lambda.GetAlias lambda:GetAlias
Lambda.GetCapacityProvider lambda:GetCapacityProvider
Lambda.GetCodeSigningConfig lambda:GetCodeSigningConfig
Lambda.GetDurableExecution lambda:GetDurableExecution
Lambda.GetDurableExecutionHistory lambda:GetDurableExecutionHistory
Lambda.GetDurableExecutionState lambda:GetDurableExecutionState
Lambda.GetEventSourceMapping lambda:GetEventSourceMapping
Lambda.GetFunction lambda:GetFunction
Lambda.GetFunctionCodeSigningConfig lambda:GetFunctionCodeSigningConfig
Lambda.GetFunctionConcurrency lambda:GetFunctionConcurrency
Lambda.GetFunctionConfiguration lambda:GetFunctionConfiguration
Lambda.GetFunctionEventInvokeConfig lambda:GetFunctionEventInvokeConfig
Lambda.GetFunctionRecursionConfig lambda:GetFunctionRecursionConfig
Lambda.GetFunctionScalingConfig lambda:GetFunctionScalingConfig
Lambda.GetFunctionUrlConfig lambda:GetFunctionUrlConfig
Lambda.GetLayerVersion lambda:GetLayerVersion
Lambda.GetLayerVersionByArn lambda:GetLayerVersionByArn
Lambda.GetLayerVersionPolicy lambda:GetLayerVersionPolicy
Lambda.GetPolicy lambda:GetPolicy
Lambda.GetProvisionedConcurrencyConfig lambda:GetProvisionedConcurrencyConfig
Lambda.GetRuntimeManagementConfig lambda:GetRuntimeManagementConfig
Lambda.InvokeAsync lambda:InvokeAsync
Lambda.InvokeFunction lambda:InvokeFunction
Lambda.InvokeFunctionUrl lambda:InvokeFunctionUrl
Lambda.ListAliases lambda:ListAliases
Lambda.ListCapacityProviders lambda:ListCapacityProviders
Lambda.ListCodeSigningConfigs lambda:ListCodeSigningConfigs
Lambda.ListDurableExecutionsByFunction lambda:ListDurableExecutionsByFunction
Lambda.ListEventSourceMappings lambda:ListEventSourceMappings
Lambda.ListFunctionEventInvokeConfigs lambda:ListFunctionEventInvokeConfigs
Lambda.ListFunctionUrlConfigs lambda:ListFunctionUrlConfigs
Lambda.ListFunctionVersionsByCapacityProvider lambda:ListFunctionVersionsByCapacityProvider
Lambda.ListFunctions lambda:ListFunctions
Lambda.ListFunctionsByCodeSigningConfig lambda:ListFunctionsByCodeSigningConfig
Lambda.ListLayerVersions lambda:ListLayerVersions
Lambda.ListLayers lambda:ListLayers
Lambda.ListProvisionedConcurrencyConfigs lambda:ListProvisionedConcurrencyConfigs
Lambda.ListTags lambda:ListTags
Lambda.ListVersionsByFunction lambda:ListVersionsByFunction
Lambda.PassCapacityProvider lambda:PassCapacityProvider
Lambda.PublishLayerVersion lambda:PublishLayerVersion
Lambda.PublishVersion lambda:PublishVersion
Lambda.PutFunctionCodeSigningConfig lambda:PutFunctionCodeSigningConfig
Lambda.PutFunctionConcurrency lambda:PutFunctionConcurrency
Lambda.PutFunctionEventInvokeConfig lambda:PutFunctionEventInvokeConfig
Lambda.PutFunctionRecursionConfig lambda:PutFunctionRecursionConfig
Lambda.PutFunctionScalingConfig lambda:PutFunctionScalingConfig
Lambda.PutProvisionedConcurrencyConfig lambda:PutProvisionedConcurrencyConfig
Lambda.PutRuntimeManagementConfig lambda:PutRuntimeManagementConfig
Lambda.RemoveLayerVersionPermission lambda:RemoveLayerVersionPermission
Lambda.RemovePermission lambda:RemovePermission
Lambda.SendDurableExecutionCallbackFailure lambda:SendDurableExecutionCallbackFailure
Lambda.SendDurableExecutionCallbackHeartbeat lambda:SendDurableExecutionCallbackHeartbeat
Lambda.SendDurableExecutionCallbackSuccess lambda:SendDurableExecutionCallbackSuccess
Lambda.StopDurableExecution lambda:StopDurableExecution
Lambda.TagResource lambda:TagResource
Lambda.UntagResource lambda:UntagResource
Lambda.UpdateAlias lambda:UpdateAlias
Lambda.UpdateCapacityProvider lambda:UpdateCapacityProvider
Lambda.UpdateCodeSigningConfig lambda:UpdateCodeSigningConfig
Lambda.UpdateEventSourceMapping lambda:UpdateEventSourceMapping
Lambda.UpdateFunctionCode lambda:UpdateFunctionCode
Lambda.UpdateFunctionCodeSigningConfig lambda:UpdateFunctionCodeSigningConfig
Lambda.UpdateFunctionConfiguration lambda:UpdateFunctionConfiguration
Lambda.UpdateFunctionEventInvokeConfig lambda:UpdateFunctionEventInvokeConfig
Lambda.UpdateFunctionUrlConfig lambda:UpdateFunctionUrlConfig

Logs

Name Action
Logs.AssociateKmsKey logs:AssociateKmsKey
Logs.AssociateSourceToS3TableIntegration logs:AssociateSourceToS3TableIntegration
Logs.CallWithBearerToken logs:CallWithBearerToken
Logs.CancelExportTask logs:CancelExportTask
Logs.CancelImportTask logs:CancelImportTask
Logs.CreateDelivery logs:CreateDelivery
Logs.CreateExportTask logs:CreateExportTask
Logs.CreateImportTask logs:CreateImportTask
Logs.CreateLogAnomalyDetector logs:CreateLogAnomalyDetector
Logs.CreateLogDelivery logs:CreateLogDelivery
Logs.CreateLogGroup logs:CreateLogGroup
Logs.CreateLogStream logs:CreateLogStream
Logs.CreateLookupTable logs:CreateLookupTable
Logs.CreateScheduledQuery logs:CreateScheduledQuery
Logs.DeleteAccountPolicy logs:DeleteAccountPolicy
Logs.DeleteDataProtectionPolicy logs:DeleteDataProtectionPolicy
Logs.DeleteDelivery logs:DeleteDelivery
Logs.DeleteDeliveryDestination logs:DeleteDeliveryDestination
Logs.DeleteDeliveryDestinationPolicy logs:DeleteDeliveryDestinationPolicy
Logs.DeleteDeliverySource logs:DeleteDeliverySource
Logs.DeleteDestination logs:DeleteDestination
Logs.DeleteIndexPolicy logs:DeleteIndexPolicy
Logs.DeleteIntegration logs:DeleteIntegration
Logs.DeleteLogAnomalyDetector logs:DeleteLogAnomalyDetector
Logs.DeleteLogDelivery logs:DeleteLogDelivery
Logs.DeleteLogGroup logs:DeleteLogGroup
Logs.DeleteLogStream logs:DeleteLogStream
Logs.DeleteLookupTable logs:DeleteLookupTable
Logs.DeleteMetricFilter logs:DeleteMetricFilter
Logs.DeletePipelineRule logs:DeletePipelineRule
Logs.DeleteQueryDefinition logs:DeleteQueryDefinition
Logs.DeleteResourcePolicy logs:DeleteResourcePolicy
Logs.DeleteRetentionPolicy logs:DeleteRetentionPolicy
Logs.DeleteScheduledQuery logs:DeleteScheduledQuery
Logs.DeleteSubscriptionFilter logs:DeleteSubscriptionFilter
Logs.DeleteTransformer logs:DeleteTransformer
Logs.DescribeAccountPolicies logs:DescribeAccountPolicies
Logs.DescribeConfigurationTemplates logs:DescribeConfigurationTemplates
Logs.DescribeDeliveries logs:DescribeDeliveries
Logs.DescribeDeliveryDestinations logs:DescribeDeliveryDestinations
Logs.DescribeDeliverySources logs:DescribeDeliverySources
Logs.DescribeDestinations logs:DescribeDestinations
Logs.DescribeExportTasks logs:DescribeExportTasks
Logs.DescribeFieldIndexes logs:DescribeFieldIndexes
Logs.DescribeImportTaskBatches logs:DescribeImportTaskBatches
Logs.DescribeImportTasks logs:DescribeImportTasks
Logs.DescribeIndexPolicies logs:DescribeIndexPolicies
Logs.DescribeLogGroups logs:DescribeLogGroups
Logs.DescribeLogStreams logs:DescribeLogStreams
Logs.DescribeLookupTables logs:DescribeLookupTables
Logs.DescribeMetricFilters logs:DescribeMetricFilters
Logs.DescribeQueries logs:DescribeQueries
Logs.DescribeQueryDefinitions logs:DescribeQueryDefinitions
Logs.DescribeResourcePolicies logs:DescribeResourcePolicies
Logs.DescribeSubscriptionFilters logs:DescribeSubscriptionFilters
Logs.DisassociateKmsKey logs:DisassociateKmsKey
Logs.DisassociateSourceFromS3TableIntegration logs:DisassociateSourceFromS3TableIntegration
Logs.FilterLogEvents logs:FilterLogEvents
Logs.GetDataProtectionPolicy logs:GetDataProtectionPolicy
Logs.GetDelivery logs:GetDelivery
Logs.GetDeliveryDestination logs:GetDeliveryDestination
Logs.GetDeliveryDestinationPolicy logs:GetDeliveryDestinationPolicy
Logs.GetDeliverySource logs:GetDeliverySource
Logs.GetIntegration logs:GetIntegration
Logs.GetLogAnomalyDetector logs:GetLogAnomalyDetector
Logs.GetLogDelivery logs:GetLogDelivery
Logs.GetLogEvents logs:GetLogEvents
Logs.GetLogFields logs:GetLogFields
Logs.GetLogGroupFields logs:GetLogGroupFields
Logs.GetLogRecord logs:GetLogRecord
Logs.GetLookupTable logs:GetLookupTable
Logs.GetQueryResults logs:GetQueryResults
Logs.GetScheduledQuery logs:GetScheduledQuery
Logs.GetScheduledQueryHistory logs:GetScheduledQueryHistory
Logs.GetTransformer logs:GetTransformer
Logs.IntegrateWithS3Table logs:IntegrateWithS3Table
Logs.Link logs:Link
Logs.ListAggregateLogGroupSummaries logs:ListAggregateLogGroupSummaries
Logs.ListAnomalies logs:ListAnomalies
Logs.ListEntitiesForLogGroup logs:ListEntitiesForLogGroup
Logs.ListIntegrations logs:ListIntegrations
Logs.ListLogAnomalyDetectors logs:ListLogAnomalyDetectors
Logs.ListLogDeliveries logs:ListLogDeliveries
Logs.ListLogGroups logs:ListLogGroups
Logs.ListLogGroupsForEntity logs:ListLogGroupsForEntity
Logs.ListLogGroupsForQuery logs:ListLogGroupsForQuery
Logs.ListScheduledQueries logs:ListScheduledQueries
Logs.ListSourcesForS3TableIntegration logs:ListSourcesForS3TableIntegration
Logs.ListTagsForResource logs:ListTagsForResource
Logs.ListTagsLogGroup logs:ListTagsLogGroup
Logs.ProcessWithPipeline logs:ProcessWithPipeline
Logs.PutAccountPolicy logs:PutAccountPolicy
Logs.PutBearerTokenAuthentication logs:PutBearerTokenAuthentication
Logs.PutDataProtectionPolicy logs:PutDataProtectionPolicy
Logs.PutDeliveryDestination logs:PutDeliveryDestination
Logs.PutDeliveryDestinationPolicy logs:PutDeliveryDestinationPolicy
Logs.PutDeliverySource logs:PutDeliverySource
Logs.PutDestination logs:PutDestination
Logs.PutDestinationPolicy logs:PutDestinationPolicy
Logs.PutIndexPolicy logs:PutIndexPolicy
Logs.PutIntegration logs:PutIntegration
Logs.PutLogEvents logs:PutLogEvents
Logs.PutLogGroupDeletionProtection logs:PutLogGroupDeletionProtection
Logs.PutMetricFilter logs:PutMetricFilter
Logs.PutPipelineRule logs:PutPipelineRule
Logs.PutQueryDefinition logs:PutQueryDefinition
Logs.PutResourcePolicy logs:PutResourcePolicy
Logs.PutRetentionPolicy logs:PutRetentionPolicy
Logs.PutSubscriptionFilter logs:PutSubscriptionFilter
Logs.PutTransformer logs:PutTransformer
Logs.StartLiveTail logs:StartLiveTail
Logs.StartQuery logs:StartQuery
Logs.StopLiveTail logs:StopLiveTail
Logs.StopQuery logs:StopQuery
Logs.TagLogGroup logs:TagLogGroup
Logs.TagResource logs:TagResource
Logs.TestMetricFilter logs:TestMetricFilter
Logs.TestTransformer logs:TestTransformer
Logs.Unmask logs:Unmask
Logs.UntagLogGroup logs:UntagLogGroup
Logs.UntagResource logs:UntagResource
Logs.UpdateAnomaly logs:UpdateAnomaly
Logs.UpdateDeliveryConfiguration logs:UpdateDeliveryConfiguration
Logs.UpdateLogAnomalyDetector logs:UpdateLogAnomalyDetector
Logs.UpdateLogDelivery logs:UpdateLogDelivery
Logs.UpdateLookupTable logs:UpdateLookupTable
Logs.UpdateScheduledQuery logs:UpdateScheduledQuery

S3

Name Action
S3.AbortMultipartUpload s3:AbortMultipartUpload
S3.AssociateAccessGrantsIdentityCenter s3:AssociateAccessGrantsIdentityCenter
S3.BypassGovernanceRetention s3:BypassGovernanceRetention
S3.CreateAccessGrant s3:CreateAccessGrant
S3.CreateAccessGrantsInstance s3:CreateAccessGrantsInstance
S3.CreateAccessGrantsLocation s3:CreateAccessGrantsLocation
S3.CreateAccessPoint s3:CreateAccessPoint
S3.CreateAccessPointForObjectLambda s3:CreateAccessPointForObjectLambda
S3.CreateBucket s3:CreateBucket
S3.CreateBucketMetadataTableConfiguration s3:CreateBucketMetadataTableConfiguration
S3.CreateJob s3:CreateJob
S3.CreateMultiRegionAccessPoint s3:CreateMultiRegionAccessPoint
S3.CreateStorageLensGroup s3:CreateStorageLensGroup
S3.DeleteAccessGrant s3:DeleteAccessGrant
S3.DeleteAccessGrantsInstance s3:DeleteAccessGrantsInstance
S3.DeleteAccessGrantsInstanceResourcePolicy s3:DeleteAccessGrantsInstanceResourcePolicy
S3.DeleteAccessGrantsLocation s3:DeleteAccessGrantsLocation
S3.DeleteAccessPoint s3:DeleteAccessPoint
S3.DeleteAccessPointForObjectLambda s3:DeleteAccessPointForObjectLambda
S3.DeleteAccessPointPolicy s3:DeleteAccessPointPolicy
S3.DeleteAccessPointPolicyForObjectLambda s3:DeleteAccessPointPolicyForObjectLambda
S3.DeleteBucket s3:DeleteBucket
S3.DeleteBucketMetadataTableConfiguration s3:DeleteBucketMetadataTableConfiguration
S3.DeleteBucketOwnershipControls s3:DeleteBucketOwnershipControls
S3.DeleteBucketPolicy s3:DeleteBucketPolicy
S3.DeleteBucketWebsite s3:DeleteBucketWebsite
S3.DeleteJobTagging s3:DeleteJobTagging
S3.DeleteMultiRegionAccessPoint s3:DeleteMultiRegionAccessPoint
S3.DeleteObject s3:DeleteObject
S3.DeleteObjectTagging s3:DeleteObjectTagging
S3.DeleteObjectVersion s3:DeleteObjectVersion
S3.DeleteObjectVersionTagging s3:DeleteObjectVersionTagging
S3.DeleteStorageLensConfiguration s3:DeleteStorageLensConfiguration
S3.DeleteStorageLensConfigurationTagging s3:DeleteStorageLensConfigurationTagging
S3.DeleteStorageLensGroup s3:DeleteStorageLensGroup
S3.DescribeJob s3:DescribeJob
S3.DescribeMultiRegionAccessPointOperation s3:DescribeMultiRegionAccessPointOperation
S3.DissociateAccessGrantsIdentityCenter s3:DissociateAccessGrantsIdentityCenter
S3.GetAccelerateConfiguration s3:GetAccelerateConfiguration
S3.GetAccessGrant s3:GetAccessGrant
S3.GetAccessGrantsInstance s3:GetAccessGrantsInstance
S3.GetAccessGrantsInstanceForPrefix s3:GetAccessGrantsInstanceForPrefix
S3.GetAccessGrantsInstanceResourcePolicy s3:GetAccessGrantsInstanceResourcePolicy
S3.GetAccessGrantsLocation s3:GetAccessGrantsLocation
S3.GetAccessPoint s3:GetAccessPoint
S3.GetAccessPointConfigurationForObjectLambda s3:GetAccessPointConfigurationForObjectLambda
S3.GetAccessPointForObjectLambda s3:GetAccessPointForObjectLambda
S3.GetAccessPointPolicy s3:GetAccessPointPolicy
S3.GetAccessPointPolicyForObjectLambda s3:GetAccessPointPolicyForObjectLambda
S3.GetAccessPointPolicyStatus s3:GetAccessPointPolicyStatus
S3.GetAccessPointPolicyStatusForObjectLambda s3:GetAccessPointPolicyStatusForObjectLambda
S3.GetAccountPublicAccessBlock s3:GetAccountPublicAccessBlock
S3.GetAnalyticsConfiguration s3:GetAnalyticsConfiguration
S3.GetBucketAbac s3:GetBucketAbac
S3.GetBucketAcl s3:GetBucketAcl
S3.GetBucketCORS s3:GetBucketCORS
S3.GetBucketLocation s3:GetBucketLocation
S3.GetBucketLogging s3:GetBucketLogging
S3.GetBucketMetadataTableConfiguration s3:GetBucketMetadataTableConfiguration
S3.GetBucketNotification s3:GetBucketNotification
S3.GetBucketObjectLockConfiguration s3:GetBucketObjectLockConfiguration
S3.GetBucketOwnershipControls s3:GetBucketOwnershipControls
S3.GetBucketPolicy s3:GetBucketPolicy
S3.GetBucketPolicyStatus s3:GetBucketPolicyStatus
S3.GetBucketPublicAccessBlock s3:GetBucketPublicAccessBlock
S3.GetBucketRequestPayment s3:GetBucketRequestPayment
S3.GetBucketTagging s3:GetBucketTagging
S3.GetBucketVersioning s3:GetBucketVersioning
S3.GetBucketWebsite s3:GetBucketWebsite
S3.GetDataAccess s3:GetDataAccess
S3.GetEncryptionConfiguration s3:GetEncryptionConfiguration
S3.GetIntelligentTieringConfiguration s3:GetIntelligentTieringConfiguration
S3.GetInventoryConfiguration s3:GetInventoryConfiguration
S3.GetIpConfiguration s3:GetIpConfiguration
S3.GetJobTagging s3:GetJobTagging
S3.GetLifecycleConfiguration s3:GetLifecycleConfiguration
S3.GetMetricsConfiguration s3:GetMetricsConfiguration
S3.GetMultiRegionAccessPoint s3:GetMultiRegionAccessPoint
S3.GetMultiRegionAccessPointPolicy s3:GetMultiRegionAccessPointPolicy
S3.GetMultiRegionAccessPointPolicyStatus s3:GetMultiRegionAccessPointPolicyStatus
S3.GetMultiRegionAccessPointRoutes s3:GetMultiRegionAccessPointRoutes
S3.GetObject s3:GetObject
S3.GetObjectAcl s3:GetObjectAcl
S3.GetObjectAttributes s3:GetObjectAttributes
S3.GetObjectLegalHold s3:GetObjectLegalHold
S3.GetObjectRetention s3:GetObjectRetention
S3.GetObjectTagging s3:GetObjectTagging
S3.GetObjectTorrent s3:GetObjectTorrent
S3.GetObjectVersion s3:GetObjectVersion
S3.GetObjectVersionAcl s3:GetObjectVersionAcl
S3.GetObjectVersionAttributes s3:GetObjectVersionAttributes
S3.GetObjectVersionForReplication s3:GetObjectVersionForReplication
S3.GetObjectVersionTagging s3:GetObjectVersionTagging
S3.GetObjectVersionTorrent s3:GetObjectVersionTorrent
S3.GetReplicationConfiguration s3:GetReplicationConfiguration
S3.GetStorageLensConfiguration s3:GetStorageLensConfiguration
S3.GetStorageLensConfigurationTagging s3:GetStorageLensConfigurationTagging
S3.GetStorageLensDashboard s3:GetStorageLensDashboard
S3.GetStorageLensGroup s3:GetStorageLensGroup
S3.HeadBucket s3:HeadBucket
S3.InitiateReplication s3:InitiateReplication
S3.ListAccessGrants s3:ListAccessGrants
S3.ListAccessGrantsInstances s3:ListAccessGrantsInstances
S3.ListAccessGrantsLocations s3:ListAccessGrantsLocations
S3.ListAccessPoints s3:ListAccessPoints
S3.ListAccessPointsForObjectLambda s3:ListAccessPointsForObjectLambda
S3.ListAllMyBuckets s3:ListAllMyBuckets
S3.ListBucket s3:ListBucket
S3.ListBucketByTags s3:ListBucketByTags
S3.ListBucketMultipartUploads s3:ListBucketMultipartUploads
S3.ListBucketVersions s3:ListBucketVersions
S3.ListCallerAccessGrants s3:ListCallerAccessGrants
S3.ListJobs s3:ListJobs
S3.ListMultiRegionAccessPoints s3:ListMultiRegionAccessPoints
S3.ListMultipartUploadParts s3:ListMultipartUploadParts
S3.ListObjects s3:ListObjects
S3.ListStorageLensConfigurations s3:ListStorageLensConfigurations
S3.ListStorageLensGroups s3:ListStorageLensGroups
S3.ListTagsForResource s3:ListTagsForResource
S3.ObjectOwnerOverrideToBucketOwner s3:ObjectOwnerOverrideToBucketOwner
S3.PauseReplication s3:PauseReplication
S3.PutAccelerateConfiguration s3:PutAccelerateConfiguration
S3.PutAccessGrantsInstanceResourcePolicy s3:PutAccessGrantsInstanceResourcePolicy
S3.PutAccessPointConfigurationForObjectLambda s3:PutAccessPointConfigurationForObjectLambda
S3.PutAccessPointPolicy s3:PutAccessPointPolicy
S3.PutAccessPointPolicyForObjectLambda s3:PutAccessPointPolicyForObjectLambda
S3.PutAccessPointPublicAccessBlock s3:PutAccessPointPublicAccessBlock
S3.PutAccountPublicAccessBlock s3:PutAccountPublicAccessBlock
S3.PutAnalyticsConfiguration s3:PutAnalyticsConfiguration
S3.PutBucketAbac s3:PutBucketAbac
S3.PutBucketAcl s3:PutBucketAcl
S3.PutBucketCORS s3:PutBucketCORS
S3.PutBucketLogging s3:PutBucketLogging
S3.PutBucketNotification s3:PutBucketNotification
S3.PutBucketObjectLockConfiguration s3:PutBucketObjectLockConfiguration
S3.PutBucketOwnershipControls s3:PutBucketOwnershipControls
S3.PutBucketPolicy s3:PutBucketPolicy
S3.PutBucketPublicAccessBlock s3:PutBucketPublicAccessBlock
S3.PutBucketRequestPayment s3:PutBucketRequestPayment
S3.PutBucketTagging s3:PutBucketTagging
S3.PutBucketVersioning s3:PutBucketVersioning
S3.PutBucketWebsite s3:PutBucketWebsite
S3.PutEncryptionConfiguration s3:PutEncryptionConfiguration
S3.PutIntelligentTieringConfiguration s3:PutIntelligentTieringConfiguration
S3.PutInventoryConfiguration s3:PutInventoryConfiguration
S3.PutIpConfiguration s3:PutIpConfiguration
S3.PutJobTagging s3:PutJobTagging
S3.PutLifecycleConfiguration s3:PutLifecycleConfiguration
S3.PutMetricsConfiguration s3:PutMetricsConfiguration
S3.PutMultiRegionAccessPointPolicy s3:PutMultiRegionAccessPointPolicy
S3.PutObject s3:PutObject
S3.PutObjectAcl s3:PutObjectAcl
S3.PutObjectLegalHold s3:PutObjectLegalHold
S3.PutObjectRetention s3:PutObjectRetention
S3.PutObjectTagging s3:PutObjectTagging
S3.PutObjectVersionAcl s3:PutObjectVersionAcl
S3.PutObjectVersionTagging s3:PutObjectVersionTagging
S3.PutReplicationConfiguration s3:PutReplicationConfiguration
S3.PutStorageLensConfiguration s3:PutStorageLensConfiguration
S3.PutStorageLensConfigurationTagging s3:PutStorageLensConfigurationTagging
S3.ReplicateDelete s3:ReplicateDelete
S3.ReplicateObject s3:ReplicateObject
S3.ReplicateTags s3:ReplicateTags
S3.RestoreObject s3:RestoreObject
S3.SubmitMultiRegionAccessPointRoutes s3:SubmitMultiRegionAccessPointRoutes
S3.TagResource s3:TagResource
S3.UntagResource s3:UntagResource
S3.UpdateAccessGrantsLocation s3:UpdateAccessGrantsLocation
S3.UpdateBucketMetadataInventoryTableConfiguration s3:UpdateBucketMetadataInventoryTableConfiguration
S3.UpdateBucketMetadataJournalTableConfiguration s3:UpdateBucketMetadataJournalTableConfiguration
S3.UpdateJobPriority s3:UpdateJobPriority
S3.UpdateJobStatus s3:UpdateJobStatus
S3.UpdateObjectEncryption s3:UpdateObjectEncryption
S3.UpdateStorageLensGroup s3:UpdateStorageLensGroup

SecretsManager

Name Action
SecretsManager.BatchGetSecretValue secretsmanager:BatchGetSecretValue
SecretsManager.CancelRotateSecret secretsmanager:CancelRotateSecret
SecretsManager.CreateSecret secretsmanager:CreateSecret
SecretsManager.DeleteResourcePolicy secretsmanager:DeleteResourcePolicy
SecretsManager.DeleteSecret secretsmanager:DeleteSecret
SecretsManager.DescribeSecret secretsmanager:DescribeSecret
SecretsManager.GetRandomPassword secretsmanager:GetRandomPassword
SecretsManager.GetResourcePolicy secretsmanager:GetResourcePolicy
SecretsManager.GetSecretValue secretsmanager:GetSecretValue
SecretsManager.ListSecretVersionIds secretsmanager:ListSecretVersionIds
SecretsManager.ListSecrets secretsmanager:ListSecrets
SecretsManager.PutResourcePolicy secretsmanager:PutResourcePolicy
SecretsManager.PutSecretValue secretsmanager:PutSecretValue
SecretsManager.RemoveRegionsFromReplication secretsmanager:RemoveRegionsFromReplication
SecretsManager.ReplicateSecretToRegions secretsmanager:ReplicateSecretToRegions
SecretsManager.RestoreSecret secretsmanager:RestoreSecret
SecretsManager.RotateSecret secretsmanager:RotateSecret
SecretsManager.StopReplicationToReplica secretsmanager:StopReplicationToReplica
SecretsManager.TagResource secretsmanager:TagResource
SecretsManager.UntagResource secretsmanager:UntagResource
SecretsManager.UpdateSecret secretsmanager:UpdateSecret
SecretsManager.UpdateSecretVersionStage secretsmanager:UpdateSecretVersionStage
SecretsManager.ValidateResourcePolicy secretsmanager:ValidateResourcePolicy

Sns

Name Action
Sns.AddPermission sns:AddPermission
Sns.CheckIfPhoneNumberIsOptedOut sns:CheckIfPhoneNumberIsOptedOut
Sns.ConfirmSubscription sns:ConfirmSubscription
Sns.CreatePlatformApplication sns:CreatePlatformApplication
Sns.CreatePlatformEndpoint sns:CreatePlatformEndpoint
Sns.CreateSMSSandboxPhoneNumber sns:CreateSMSSandboxPhoneNumber
Sns.CreateTopic sns:CreateTopic
Sns.DeleteEndpoint sns:DeleteEndpoint
Sns.DeletePlatformApplication sns:DeletePlatformApplication
Sns.DeleteSMSSandboxPhoneNumber sns:DeleteSMSSandboxPhoneNumber
Sns.DeleteTopic sns:DeleteTopic
Sns.GetDataProtectionPolicy sns:GetDataProtectionPolicy
Sns.GetEndpointAttributes sns:GetEndpointAttributes
Sns.GetPlatformApplicationAttributes sns:GetPlatformApplicationAttributes
Sns.GetSMSAttributes sns:GetSMSAttributes
Sns.GetSMSSandboxAccountStatus sns:GetSMSSandboxAccountStatus
Sns.GetSubscriptionAttributes sns:GetSubscriptionAttributes
Sns.GetTopicAttributes sns:GetTopicAttributes
Sns.ListEndpointsByPlatformApplication sns:ListEndpointsByPlatformApplication
Sns.ListOriginationNumbers sns:ListOriginationNumbers
Sns.ListPhoneNumbersOptedOut sns:ListPhoneNumbersOptedOut
Sns.ListPlatformApplications sns:ListPlatformApplications
Sns.ListSMSSandboxPhoneNumbers sns:ListSMSSandboxPhoneNumbers
Sns.ListSubscriptions sns:ListSubscriptions
Sns.ListSubscriptionsByTopic sns:ListSubscriptionsByTopic
Sns.ListTagsForResource sns:ListTagsForResource
Sns.ListTopics sns:ListTopics
Sns.OptInPhoneNumber sns:OptInPhoneNumber
Sns.Publish sns:Publish
Sns.PutDataProtectionPolicy sns:PutDataProtectionPolicy
Sns.RemovePermission sns:RemovePermission
Sns.SetEndpointAttributes sns:SetEndpointAttributes
Sns.SetPlatformApplicationAttributes sns:SetPlatformApplicationAttributes
Sns.SetSMSAttributes sns:SetSMSAttributes
Sns.SetSubscriptionAttributes sns:SetSubscriptionAttributes
Sns.SetTopicAttributes sns:SetTopicAttributes
Sns.Subscribe sns:Subscribe
Sns.TagResource sns:TagResource
Sns.Unsubscribe sns:Unsubscribe
Sns.UntagResource sns:UntagResource
Sns.VerifySMSSandboxPhoneNumber sns:VerifySMSSandboxPhoneNumber

Sqs

Name Action
Sqs.AddPermission sqs:AddPermission
Sqs.CancelMessageMoveTask sqs:CancelMessageMoveTask
Sqs.ChangeMessageVisibility sqs:ChangeMessageVisibility
Sqs.ChangeMessageVisibilityBatch sqs:ChangeMessageVisibilityBatch
Sqs.CreateQueue sqs:CreateQueue
Sqs.DeleteMessage sqs:DeleteMessage
Sqs.DeleteMessageBatch sqs:DeleteMessageBatch
Sqs.DeleteQueue sqs:DeleteQueue
Sqs.GetQueueAttributes sqs:GetQueueAttributes
Sqs.GetQueueUrl sqs:GetQueueUrl
Sqs.ListDeadLetterSourceQueues sqs:ListDeadLetterSourceQueues
Sqs.ListMessageMoveTasks sqs:ListMessageMoveTasks
Sqs.ListQueueTags sqs:ListQueueTags
Sqs.ListQueues sqs:ListQueues
Sqs.PurgeQueue sqs:PurgeQueue
Sqs.ReceiveMessage sqs:ReceiveMessage
Sqs.RemovePermission sqs:RemovePermission
Sqs.SendMessage sqs:SendMessage
Sqs.SendMessageBatch sqs:SendMessageBatch
Sqs.SetQueueAttributes sqs:SetQueueAttributes
Sqs.StartMessageMoveTask sqs:StartMessageMoveTask
Sqs.TagQueue sqs:TagQueue
Sqs.UntagQueue sqs:UntagQueue

Ssm

Name Action
Ssm.AddTagsToResource ssm:AddTagsToResource
Ssm.AssociateOpsItemRelatedItem ssm:AssociateOpsItemRelatedItem
Ssm.CancelCommand ssm:CancelCommand
Ssm.CancelMaintenanceWindowExecution ssm:CancelMaintenanceWindowExecution
Ssm.CreateActivation ssm:CreateActivation
Ssm.CreateAssociation ssm:CreateAssociation
Ssm.CreateAssociationBatch ssm:CreateAssociationBatch
Ssm.CreateDocument ssm:CreateDocument
Ssm.CreateMaintenanceWindow ssm:CreateMaintenanceWindow
Ssm.CreateOpsItem ssm:CreateOpsItem
Ssm.CreateOpsMetadata ssm:CreateOpsMetadata
Ssm.CreatePatchBaseline ssm:CreatePatchBaseline
Ssm.CreateResourceDataSync ssm:CreateResourceDataSync
Ssm.DeleteActivation ssm:DeleteActivation
Ssm.DeleteAssociation ssm:DeleteAssociation
Ssm.DeleteDocument ssm:DeleteDocument
Ssm.DeleteInventory ssm:DeleteInventory
Ssm.DeleteMaintenanceWindow ssm:DeleteMaintenanceWindow
Ssm.DeleteOpsItem ssm:DeleteOpsItem
Ssm.DeleteOpsMetadata ssm:DeleteOpsMetadata
Ssm.DeleteParameter ssm:DeleteParameter
Ssm.DeleteParameters ssm:DeleteParameters
Ssm.DeletePatchBaseline ssm:DeletePatchBaseline
Ssm.DeleteResourceDataSync ssm:DeleteResourceDataSync
Ssm.DeleteResourcePolicy ssm:DeleteResourcePolicy
Ssm.DeregisterManagedInstance ssm:DeregisterManagedInstance
Ssm.DeregisterPatchBaselineForPatchGroup ssm:DeregisterPatchBaselineForPatchGroup
Ssm.DeregisterTargetFromMaintenanceWindow ssm:DeregisterTargetFromMaintenanceWindow
Ssm.DeregisterTaskFromMaintenanceWindow ssm:DeregisterTaskFromMaintenanceWindow
Ssm.DescribeActivations ssm:DescribeActivations
Ssm.DescribeAssociation ssm:DescribeAssociation
Ssm.DescribeAssociationExecutionTargets ssm:DescribeAssociationExecutionTargets
Ssm.DescribeAssociationExecutions ssm:DescribeAssociationExecutions
Ssm.DescribeAutomationExecutions ssm:DescribeAutomationExecutions
Ssm.DescribeAutomationStepExecutions ssm:DescribeAutomationStepExecutions
Ssm.DescribeAvailablePatches ssm:DescribeAvailablePatches
Ssm.DescribeDocument ssm:DescribeDocument
Ssm.DescribeDocumentParameters ssm:DescribeDocumentParameters
Ssm.DescribeDocumentPermission ssm:DescribeDocumentPermission
Ssm.DescribeEffectiveInstanceAssociations ssm:DescribeEffectiveInstanceAssociations
Ssm.DescribeEffectivePatchesForPatchBaseline ssm:DescribeEffectivePatchesForPatchBaseline
Ssm.DescribeInstanceAssociationsStatus ssm:DescribeInstanceAssociationsStatus
Ssm.DescribeInstanceInformation ssm:DescribeInstanceInformation
Ssm.DescribeInstancePatchStates ssm:DescribeInstancePatchStates
Ssm.DescribeInstancePatchStatesForPatchGroup ssm:DescribeInstancePatchStatesForPatchGroup
Ssm.DescribeInstancePatches ssm:DescribeInstancePatches
Ssm.DescribeInstanceProperties ssm:DescribeInstanceProperties
Ssm.DescribeInventoryDeletions ssm:DescribeInventoryDeletions
Ssm.DescribeMaintenanceWindowExecutionTaskInvocations ssm:DescribeMaintenanceWindowExecutionTaskInvocations
Ssm.DescribeMaintenanceWindowExecutionTasks ssm:DescribeMaintenanceWindowExecutionTasks
Ssm.DescribeMaintenanceWindowExecutions ssm:DescribeMaintenanceWindowExecutions
Ssm.DescribeMaintenanceWindowSchedule ssm:DescribeMaintenanceWindowSchedule
Ssm.DescribeMaintenanceWindowTargets ssm:DescribeMaintenanceWindowTargets
Ssm.DescribeMaintenanceWindowTasks ssm:DescribeMaintenanceWindowTasks
Ssm.DescribeMaintenanceWindows ssm:DescribeMaintenanceWindows
Ssm.DescribeMaintenanceWindowsForTarget ssm:DescribeMaintenanceWindowsForTarget
Ssm.DescribeOpsItems ssm:DescribeOpsItems
Ssm.DescribeParameters ssm:DescribeParameters
Ssm.DescribePatchBaselines ssm:DescribePatchBaselines
Ssm.DescribePatchGroupState ssm:DescribePatchGroupState
Ssm.DescribePatchGroups ssm:DescribePatchGroups
Ssm.DescribePatchProperties ssm:DescribePatchProperties
Ssm.DescribeSessions ssm:DescribeSessions
Ssm.DisassociateOpsItemRelatedItem ssm:DisassociateOpsItemRelatedItem
Ssm.ExecuteAPI ssm:ExecuteAPI
Ssm.GetAccessToken ssm:GetAccessToken
Ssm.GetAutomationExecution ssm:GetAutomationExecution
Ssm.GetCalendar ssm:GetCalendar
Ssm.GetCalendarState ssm:GetCalendarState
Ssm.GetCommandInvocation ssm:GetCommandInvocation
Ssm.GetConnectionStatus ssm:GetConnectionStatus
Ssm.GetDefaultPatchBaseline ssm:GetDefaultPatchBaseline
Ssm.GetDeployablePatchSnapshotForInstance ssm:GetDeployablePatchSnapshotForInstance
Ssm.GetDocument ssm:GetDocument
Ssm.GetExecutionPreview ssm:GetExecutionPreview
Ssm.GetInventory ssm:GetInventory
Ssm.GetInventorySchema ssm:GetInventorySchema
Ssm.GetMaintenanceWindow ssm:GetMaintenanceWindow
Ssm.GetMaintenanceWindowExecution ssm:GetMaintenanceWindowExecution
Ssm.GetMaintenanceWindowExecutionTask ssm:GetMaintenanceWindowExecutionTask
Ssm.GetMaintenanceWindowExecutionTaskInvocation ssm:GetMaintenanceWindowExecutionTaskInvocation
Ssm.GetMaintenanceWindowTask ssm:GetMaintenanceWindowTask
Ssm.GetManifest ssm:GetManifest
Ssm.GetOpsItem ssm:GetOpsItem
Ssm.GetOpsMetadata ssm:GetOpsMetadata
Ssm.GetOpsSummary ssm:GetOpsSummary
Ssm.GetParameter ssm:GetParameter
Ssm.GetParameterHistory ssm:GetParameterHistory
Ssm.GetParameters ssm:GetParameters
Ssm.GetParametersByPath ssm:GetParametersByPath
Ssm.GetPatchBaseline ssm:GetPatchBaseline
Ssm.GetPatchBaselineForPatchGroup ssm:GetPatchBaselineForPatchGroup
Ssm.GetResourcePolicies ssm:GetResourcePolicies
Ssm.GetServiceSetting ssm:GetServiceSetting
Ssm.LabelParameterVersion ssm:LabelParameterVersion
Ssm.ListAssociationVersions ssm:ListAssociationVersions
Ssm.ListAssociations ssm:ListAssociations
Ssm.ListCommandInvocations ssm:ListCommandInvocations
Ssm.ListCommands ssm:ListCommands
Ssm.ListComplianceItems ssm:ListComplianceItems
Ssm.ListComplianceSummaries ssm:ListComplianceSummaries
Ssm.ListDocumentMetadataHistory ssm:ListDocumentMetadataHistory
Ssm.ListDocumentVersions ssm:ListDocumentVersions
Ssm.ListDocuments ssm:ListDocuments
Ssm.ListInstanceAssociations ssm:ListInstanceAssociations
Ssm.ListInventoryEntries ssm:ListInventoryEntries
Ssm.ListNodes ssm:ListNodes
Ssm.ListNodesSummary ssm:ListNodesSummary
Ssm.ListOpsItemEvents ssm:ListOpsItemEvents
Ssm.ListOpsItemRelatedItems ssm:ListOpsItemRelatedItems
Ssm.ListOpsMetadata ssm:ListOpsMetadata
Ssm.ListResourceComplianceSummaries ssm:ListResourceComplianceSummaries
Ssm.ListResourceDataSync ssm:ListResourceDataSync
Ssm.ListTagsForResource ssm:ListTagsForResource
Ssm.ModifyDocumentPermission ssm:ModifyDocumentPermission
Ssm.PutCalendar ssm:PutCalendar
Ssm.PutComplianceItems ssm:PutComplianceItems
Ssm.PutConfigurePackageResult ssm:PutConfigurePackageResult
Ssm.PutInventory ssm:PutInventory
Ssm.PutParameter ssm:PutParameter
Ssm.PutResourcePolicy ssm:PutResourcePolicy
Ssm.RegisterDefaultPatchBaseline ssm:RegisterDefaultPatchBaseline
Ssm.RegisterManagedInstance ssm:RegisterManagedInstance
Ssm.RegisterPatchBaselineForPatchGroup ssm:RegisterPatchBaselineForPatchGroup
Ssm.RegisterTargetWithMaintenanceWindow ssm:RegisterTargetWithMaintenanceWindow
Ssm.RegisterTaskWithMaintenanceWindow ssm:RegisterTaskWithMaintenanceWindow
Ssm.RemoveTagsFromResource ssm:RemoveTagsFromResource
Ssm.ResetServiceSetting ssm:ResetServiceSetting
Ssm.ResumeSession ssm:ResumeSession
Ssm.SendAutomationSignal ssm:SendAutomationSignal
Ssm.SendCommand ssm:SendCommand
Ssm.StartAccessRequest ssm:StartAccessRequest
Ssm.StartAssociationsOnce ssm:StartAssociationsOnce
Ssm.StartAutomationExecution ssm:StartAutomationExecution
Ssm.StartChangeRequestExecution ssm:StartChangeRequestExecution
Ssm.StartExecutionPreview ssm:StartExecutionPreview
Ssm.StartSession ssm:StartSession
Ssm.StopAutomationExecution ssm:StopAutomationExecution
Ssm.TerminateSession ssm:TerminateSession
Ssm.UnlabelParameterVersion ssm:UnlabelParameterVersion
Ssm.UpdateAssociation ssm:UpdateAssociation
Ssm.UpdateAssociationStatus ssm:UpdateAssociationStatus
Ssm.UpdateDocument ssm:UpdateDocument
Ssm.UpdateDocumentDefaultVersion ssm:UpdateDocumentDefaultVersion
Ssm.UpdateDocumentMetadata ssm:UpdateDocumentMetadata
Ssm.UpdateInstanceAssociationStatus ssm:UpdateInstanceAssociationStatus
Ssm.UpdateInstanceInformation ssm:UpdateInstanceInformation
Ssm.UpdateMaintenanceWindow ssm:UpdateMaintenanceWindow
Ssm.UpdateMaintenanceWindowTarget ssm:UpdateMaintenanceWindowTarget
Ssm.UpdateMaintenanceWindowTask ssm:UpdateMaintenanceWindowTask
Ssm.UpdateManagedInstanceRole ssm:UpdateManagedInstanceRole
Ssm.UpdateOpsItem ssm:UpdateOpsItem
Ssm.UpdateOpsMetadata ssm:UpdateOpsMetadata
Ssm.UpdatePatchBaseline ssm:UpdatePatchBaseline
Ssm.UpdateResourceDataSync ssm:UpdateResourceDataSync
Ssm.UpdateServiceSetting ssm:UpdateServiceSetting